From 44b744609d67da12a3ecb0046d60904a7a46abff Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Mon, 27 Jul 2026 22:08:16 +0200
Subject: [PATCH 1/9] feat(call): vendor native lifecycle plugin

---
 package.json                                  |   1 +
 pnpm-lock.yaml                                |  10 +
 src-tauri/Cargo.lock                          | 669 +++++++++++++++++-
 src-tauri/Cargo.toml                          |   1 +
 src-tauri/capabilities/desktop.json           |   3 +-
 .../tauri-plugin-call-lifecycle/.gitignore    |  20 +
 .../tauri-plugin-call-lifecycle/Cargo.toml    |  23 +
 .../tauri-plugin-call-lifecycle/build.rs      |   8 +
 .../dist-js/index.cjs                         |  17 +
 .../dist-js/index.d.ts                        |  23 +
 .../dist-js/index.js                          |  13 +
 .../guest-js/index.ts                         |  43 ++
 .../tauri-plugin-call-lifecycle/package.json  |  30 +
 .../autogenerated/commands/connect.toml       |  13 +
 .../autogenerated/commands/disconnect.toml    |  13 +
 .../autogenerated/commands/get_state.toml     |  13 +
 .../permissions/autogenerated/reference.md    |  97 +++
 .../permissions/default.toml                  |   3 +
 .../permissions/schemas/schema.json           | 342 +++++++++
 .../rollup.config.js                          |  32 +
 .../tauri-plugin-call-lifecycle/src/actor.rs  | 634 +++++++++++++++++
 .../src/commands.rs                           |  26 +
 .../tauri-plugin-call-lifecycle/src/error.rs  |  51 ++
 .../tauri-plugin-call-lifecycle/src/lib.rs    |  42 ++
 .../tauri-plugin-call-lifecycle/src/models.rs |  43 ++
 .../tauri-plugin-call-lifecycle/tsconfig.json |  14 +
 src-tauri/src/lib.rs                          |   3 +-
 src/app/cs-api.ts                             |  23 +-
 .../features/call/livekitProvisioning.test.ts | 142 ++++
 src/app/features/call/livekitProvisioning.ts  | 135 ++++
 src/app/plugins/call/callLifecycle.test.ts    | 100 +++
 src/app/plugins/call/callLifecycle.ts         |  28 +
 src/app/plugins/call/index.ts                 |   1 +
 src/types/matrix-sdk.ts                       |   6 +
 34 files changed, 2588 insertions(+), 34 deletions(-)
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/.gitignore
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/package.json
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/connect.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/disconnect.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/get_state.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/rollup.config.js
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/tsconfig.json
 create mode 100644 src/app/features/call/livekitProvisioning.test.ts
 create mode 100644 src/app/features/call/livekitProvisioning.ts
 create mode 100644 src/app/plugins/call/callLifecycle.test.ts
 create mode 100644 src/app/plugins/call/callLifecycle.ts

diff --git a/package.json b/package.json
index e40a6aefea..1a5b730044 100644
--- a/package.json
+++ b/package.json
@@ -116,6 +116,7 @@
     "slate-history": "^0.113.1",
     "slate-react": "^0.125.1",
     "tauri-plugin-android-fs-api": "28.4.0",
+    "tauri-plugin-call-lifecycle-api": "file:src-tauri/plugins/tauri-plugin-call-lifecycle",
     "ua-parser-js": "^2.0.10",
     "virtua": "^0.49.2",
     "workbox-precaching": "^7.4.1"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 73d8ac5e0a..2183f02c6c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -253,6 +253,9 @@ importers:
       tauri-plugin-android-fs-api:
         specifier: 28.4.0
         version: 28.4.0
+      tauri-plugin-call-lifecycle-api:
+        specifier: file:src-tauri/plugins/tauri-plugin-call-lifecycle
+        version: file:src-tauri/plugins/tauri-plugin-call-lifecycle
       ua-parser-js:
         specifier: ^2.0.10
         version: 2.0.10
@@ -5338,6 +5341,9 @@ packages:
   tauri-plugin-android-fs-api@28.4.0:
     resolution: {integrity: sha512-YOo1P+cRjuaoPbTNZprMhr56ruKO4hIDq7kJOum91NqkN+VWY9F+UPAdjZokhzJSsbkeY0nsb1VDLXb2/h3f3w==}
 
+  tauri-plugin-call-lifecycle-api@file:src-tauri/plugins/tauri-plugin-call-lifecycle:
+    resolution: {directory: src-tauri/plugins/tauri-plugin-call-lifecycle, type: directory}
+
   teex@1.0.1:
     resolution: {integrity: sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==}
 
@@ -10770,6 +10776,10 @@ snapshots:
       '@tauri-apps/api': 2.11.1
       create-web-stream: 1.1.3
 
+  tauri-plugin-call-lifecycle-api@file:src-tauri/plugins/tauri-plugin-call-lifecycle:
+    dependencies:
+      '@tauri-apps/api': 2.11.1
+
   teex@1.0.1:
     dependencies:
       streamx: 2.28.0
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index d2ac364e14..f1d1bd48a5 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -168,7 +168,7 @@ version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -179,7 +179,7 @@ checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
  "once_cell_polyfill",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -563,6 +563,16 @@ dependencies = [
  "piper",
 ]
 
+[[package]]
+name = "bmrng"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d54df9073108f1558f90ae6c5bf5ab9c917c4185f5527b280c87a993cbead0ac"
+dependencies = [
+ "futures-core",
+ "tokio",
+]
+
 [[package]]
 name = "borsh"
 version = "1.8.0"
@@ -930,7 +940,7 @@ dependencies = [
  "anstream",
  "anstyle",
  "clap_lex",
- "strsim",
+ "strsim 0.11.1",
 ]
 
 [[package]]
@@ -998,6 +1008,17 @@ dependencies = [
  "objc",
 ]
 
+[[package]]
+name = "codespan-reporting"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af491d569909a7e4dee0ad7db7f5341fef5c614d5b8ec8cf765732aba3cff681"
+dependencies = [
+ "serde",
+ "termcolor",
+ "unicode-width",
+]
+
 [[package]]
 name = "colorchoice"
 version = "1.0.5"
@@ -1011,7 +1032,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "117725a109d387c937a1533ce01b450cbde6b88abceea8473c4d7a85853cda3c"
 dependencies = [
  "lazy_static",
- "windows-sys 0.48.0",
+ "windows-sys 0.59.0",
 ]
 
 [[package]]
@@ -1325,14 +1346,100 @@ version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f"
 
+[[package]]
+name = "cxx"
+version = "1.0.198"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6fe442a792c7c736eea18b32a7f8a3b63cf8aafabda6760042dc2fdeda456291"
+dependencies = [
+ "cc",
+ "cxx-build",
+ "cxxbridge-cmd",
+ "cxxbridge-flags",
+ "cxxbridge-macro",
+ "foldhash 0.2.0",
+ "link-cplusplus",
+]
+
+[[package]]
+name = "cxx-build"
+version = "1.0.198"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3184a94384c663718698311a78a51ac00c484c10b4eeac06fb0a068c5f64fa2"
+dependencies = [
+ "cc",
+ "codespan-reporting",
+ "indexmap 2.14.0",
+ "proc-macro2",
+ "quote",
+ "scratch",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "cxxbridge-cmd"
+version = "1.0.198"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0148d8fd1199329ddf1d157a5e134e51ceff37c6a7ddd38615c399d81cb05d8d"
+dependencies = [
+ "clap",
+ "codespan-reporting",
+ "indexmap 2.14.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "cxxbridge-flags"
+version = "1.0.198"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52850339faed2eaadd24e286dc1d8268cc6f8a7bd9524d713adc9099566b4c89"
+
+[[package]]
+name = "cxxbridge-macro"
+version = "1.0.198"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c77c856545d886c9bd5215409ebb63b925e262135248b50c79e5a5f194ee47c"
+dependencies = [
+ "indexmap 2.14.0",
+ "proc-macro2",
+ "quote",
+ "syn 3.0.3",
+]
+
+[[package]]
+name = "darling"
+version = "0.14.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b750cb3417fd1b327431a470f388520309479ab0bf5e323505daf0290cd3850"
+dependencies = [
+ "darling_core 0.14.4",
+ "darling_macro 0.14.4",
+]
+
 [[package]]
 name = "darling"
 version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
 dependencies = [
- "darling_core",
- "darling_macro",
+ "darling_core 0.23.0",
+ "darling_macro 0.23.0",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.14.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "109c1ca6e6b7f82cc233a97004ea8ed7ca123a9af07a8230878fcfda9b158bf0"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim 0.10.0",
+ "syn 1.0.109",
 ]
 
 [[package]]
@@ -1344,21 +1451,38 @@ dependencies = [
  "ident_case",
  "proc-macro2",
  "quote",
- "strsim",
+ "strsim 0.11.1",
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "darling_macro"
+version = "0.14.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4aab4dbc9f7611d8b55048a3a16d2d010c2c8334e46304b40ac1cc14bf3b48e"
+dependencies = [
+ "darling_core 0.14.4",
+ "quote",
+ "syn 1.0.109",
+]
+
 [[package]]
 name = "darling_macro"
 version = "0.23.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
 dependencies = [
- "darling_core",
+ "darling_core 0.23.0",
  "quote",
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "data-encoding"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4ae5f15dda3c708c0ade84bfee31ccab44a3da4f88015ed22f63732abe300c8"
+
 [[package]]
 name = "data-url"
 version = "0.3.2"
@@ -1477,6 +1601,21 @@ version = "1.6.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "abd57806937c9cc163efc8ea3910e00a62e2aeb0b8119f1793a978088f8f6b04"
 
+[[package]]
+name = "device-info"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2ca8e71544c1b67dcdbc2699ab258828aff985e5bc8d5f6b486d90d7df2f848"
+dependencies = [
+ "core-foundation 0.10.1",
+ "jni 0.21.1",
+ "libc",
+ "thiserror 2.0.19",
+ "wasm-bindgen",
+ "web-sys",
+ "windows-sys 0.59.0",
+]
+
 [[package]]
 name = "devtools-core"
 version = "0.3.6"
@@ -1527,6 +1666,7 @@ checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
 dependencies = [
  "block-buffer",
  "crypto-common",
+ "subtle",
 ]
 
 [[package]]
@@ -1553,7 +1693,7 @@ dependencies = [
  "libc",
  "option-ext",
  "redox_users",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1855,7 +1995,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1953,6 +2093,12 @@ dependencies = [
  "winapi",
 ]
 
+[[package]]
+name = "fixedbitset"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ce7134b9999ecaf8bcd65542e436736ef32ddca1b3e06094cb6ec5755203b80"
+
 [[package]]
 name = "fixedbitset"
 version = "0.5.7"
@@ -2024,6 +2170,27 @@ dependencies = [
  "percent-encoding",
 ]
 
+[[package]]
+name = "from_variants"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e859c8f2057687618905dbe99fc76e836e0a69738865ef90e46fc214a41bbf2"
+dependencies = [
+ "from_variants_impl",
+]
+
+[[package]]
+name = "from_variants_impl"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55a5e644a80e6d96b2b4910fa7993301d7b7926c045b475b62202b20a36ce69e"
+dependencies = [
+ "darling 0.14.4",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
 [[package]]
 name = "fs-err"
 version = "3.3.1"
@@ -2033,6 +2200,16 @@ dependencies = [
  "autocfg",
 ]
 
+[[package]]
+name = "fs2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9564fc758e15025b46aa6643b1b77d047d1a56a1aea6e01002ac0c7026876213"
+dependencies = [
+ "libc",
+ "winapi",
+]
+
 [[package]]
 name = "futf"
 version = "0.1.5"
@@ -2618,6 +2795,15 @@ version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
 
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest",
+]
+
 [[package]]
 name = "hostname"
 version = "0.4.2"
@@ -2788,6 +2974,7 @@ dependencies = [
  "hyper 1.11.0",
  "hyper-util",
  "rustls",
+ "rustls-native-certs",
  "tokio",
  "tokio-rustls",
  "tower-service",
@@ -3108,6 +3295,15 @@ version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
 
+[[package]]
+name = "itertools"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1c173a5686ce8bfa551b3563d0c2170bf24ca44da99c7ca4bfdab5418c3fe57"
+dependencies = [
+ "either",
+]
+
 [[package]]
 name = "itertools"
 version = "0.12.1"
@@ -3299,6 +3495,21 @@ dependencies = [
  "serde_json",
 ]
 
+[[package]]
+name = "jsonwebtoken"
+version = "10.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eba32bfb4ffdeaca3e34431072faf01745c9b26d25504aa7a6cf5684334fc4fc"
+dependencies = [
+ "base64 0.22.1",
+ "getrandom 0.2.17",
+ "js-sys",
+ "serde",
+ "serde_json",
+ "signature",
+ "zeroize",
+]
+
 [[package]]
 name = "keyboard-types"
 version = "0.7.0"
@@ -3431,6 +3642,39 @@ dependencies = [
  "redox_syscall 0.9.0",
 ]
 
+[[package]]
+name = "libwebrtc"
+version = "0.3.42"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f5497ff0694ddcee8f88129c78139defa5ec3fc434c3e182906ed0a72372bd9"
+dependencies = [
+ "cxx",
+ "jni 0.21.1",
+ "js-sys",
+ "lazy_static",
+ "livekit-runtime",
+ "log",
+ "parking_lot",
+ "rtrb",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.19",
+ "tokio",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webrtc-sys",
+]
+
+[[package]]
+name = "link-cplusplus"
+version = "1.0.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f78c730aaa7d0b9336a299029ea49f9ee53b0ed06e9202e8cb7db9bae7b8c82"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "linux-raw-sys"
 version = "0.12.1"
@@ -3449,6 +3693,145 @@ version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
 
+[[package]]
+name = "livekit"
+version = "0.7.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa8ed793e154d63b588397ea7a84cfb3606b6d049f4d24137d9d9e0384617059"
+dependencies = [
+ "base64 0.22.1",
+ "bmrng",
+ "bytes",
+ "chrono",
+ "futures-util",
+ "lazy_static",
+ "libloading 0.8.9",
+ "libwebrtc",
+ "livekit-api",
+ "livekit-common",
+ "livekit-data-stream",
+ "livekit-datatrack",
+ "livekit-protocol",
+ "livekit-runtime",
+ "log",
+ "parking_lot",
+ "prost",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+ "tokio",
+ "tokio-stream",
+]
+
+[[package]]
+name = "livekit-api"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e827d3444235ddccf360fc1d4737034e86ee2ea2c0a696f148ecc08e7249bfd3"
+dependencies = [
+ "base64 0.21.7",
+ "bytes",
+ "device-info",
+ "flate2",
+ "futures-util",
+ "hmac",
+ "http 1.4.2",
+ "jsonwebtoken",
+ "livekit-common",
+ "livekit-protocol",
+ "livekit-runtime",
+ "log",
+ "os_info",
+ "parking_lot",
+ "pbjson-types",
+ "prost",
+ "rand 0.9.5",
+ "reqwest 0.12.28",
+ "scopeguard",
+ "serde",
+ "serde_json",
+ "sha2",
+ "signature",
+ "thiserror 2.0.19",
+ "tokio",
+ "tokio-tungstenite",
+ "url",
+]
+
+[[package]]
+name = "livekit-common"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42a76cd816c062654d105b697ebab136da87d14126ee77b2f13280cb895bcb58"
+dependencies = [
+ "livekit-protocol",
+]
+
+[[package]]
+name = "livekit-data-stream"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69ad1cca8f05fbe29026d99931884641199df544c33777d1f1b321df6f1031dd"
+dependencies = [
+ "bmrng",
+ "bytes",
+ "chrono",
+ "flate2",
+ "futures-util",
+ "livekit-common",
+ "livekit-protocol",
+ "log",
+ "parking_lot",
+ "prost",
+ "thiserror 2.0.19",
+ "tokio",
+ "uuid",
+]
+
+[[package]]
+name = "livekit-datatrack"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "201bec4becf4db2b0af616a73ff3b2421f6af3693c287b82f5182028ee36e5f5"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "from_variants",
+ "futures-core",
+ "futures-util",
+ "indexmap 2.14.0",
+ "livekit-protocol",
+ "livekit-runtime",
+ "log",
+ "rand 0.9.5",
+ "thiserror 2.0.19",
+ "tokio",
+ "tokio-stream",
+]
+
+[[package]]
+name = "livekit-protocol"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d26880e94e2f9bab298445e7d86a3794453d211a12ddbd051bd9991a343f9ff"
+dependencies = [
+ "pbjson",
+ "pbjson-types",
+ "prost",
+ "serde",
+]
+
+[[package]]
+name = "livekit-runtime"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "532e84c6cdc5fe774f2b5d9912597b5f3bea561927a48296d03e24549d21c3f6"
+dependencies = [
+ "tokio",
+ "tokio-stream",
+]
+
 [[package]]
 name = "local-ip-address"
 version = "0.5.7"
@@ -3653,9 +4036,15 @@ dependencies = [
  "png 0.18.1",
  "serde",
  "thiserror 2.0.19",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "multimap"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d87ecb2933e8aeadb3e3a02b828fed80a7528047e68b4f424523a0981a3a084"
+
 [[package]]
 name = "ndk"
 version = "0.9.0"
@@ -3777,7 +4166,7 @@ version = "0.50.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
 dependencies = [
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4181,7 +4570,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
 dependencies = [
  "libc",
- "windows-sys 0.48.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4270,6 +4659,43 @@ dependencies = [
  "regex",
 ]
 
+[[package]]
+name = "pbjson"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1030c719b0ec2a2d25a5df729d6cff1acf3cc230bf766f4f97833591f7577b90"
+dependencies = [
+ "base64 0.21.7",
+ "serde",
+]
+
+[[package]]
+name = "pbjson-build"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2580e33f2292d34be285c5bc3dba5259542b083cfad6037b6d70345f24dcb735"
+dependencies = [
+ "heck 0.4.1",
+ "itertools 0.11.0",
+ "prost",
+ "prost-types",
+]
+
+[[package]]
+name = "pbjson-types"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18f596653ba4ac51bdecbb4ef6773bc7f56042dc13927910de1684ad3d32aa12"
+dependencies = [
+ "bytes",
+ "chrono",
+ "pbjson",
+ "pbjson-build",
+ "prost",
+ "prost-build",
+ "serde",
+]
+
 [[package]]
 name = "percent-encoding"
 version = "2.3.2"
@@ -4318,13 +4744,23 @@ dependencies = [
  "pest",
 ]
 
+[[package]]
+name = "petgraph"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4c5cc86750666a3ed20bdaf5ca2a0344f9c67674cae0515bec2da16fbaa47db"
+dependencies = [
+ "fixedbitset 0.4.2",
+ "indexmap 2.14.0",
+]
+
 [[package]]
 name = "petgraph"
 version = "0.8.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8701b58ea97060d5e5b155d383a69952a60943f0e6dfe30b04c287beb0b27455"
 dependencies = [
- "fixedbitset",
+ "fixedbitset 0.5.7",
  "hashbrown 0.15.5",
  "indexmap 2.14.0",
 ]
@@ -4649,6 +5085,16 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
 
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "proc-macro-crate"
 version = "1.3.1"
@@ -4727,6 +5173,27 @@ dependencies = [
  "prost-derive",
 ]
 
+[[package]]
+name = "prost-build"
+version = "0.12.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22505a5c94da8e3b7c2996394d1c933236c4d743e81a410bcca4e6989fc066a4"
+dependencies = [
+ "bytes",
+ "heck 0.5.0",
+ "itertools 0.12.1",
+ "log",
+ "multimap",
+ "once_cell",
+ "petgraph 0.6.5",
+ "prettyplease",
+ "prost",
+ "prost-types",
+ "regex",
+ "syn 2.0.119",
+ "tempfile",
+]
+
 [[package]]
 name = "prost-derive"
 version = "0.12.6"
@@ -4734,7 +5201,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "81bddcdb20abf9501610992b6759a4c888aef7d1a7247ef75e2404275ac24af1"
 dependencies = [
  "anyhow",
- "itertools",
+ "itertools 0.12.1",
  "proc-macro2",
  "quote",
  "syn 2.0.119",
@@ -4839,7 +5306,7 @@ dependencies = [
  "once_cell",
  "socket2 0.6.5",
  "tracing",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5094,6 +5561,7 @@ dependencies = [
  "cookie",
  "cookie_store",
  "encoding_rs",
+ "futures-channel",
  "futures-core",
  "futures-util",
  "h2 0.4.15",
@@ -5110,6 +5578,7 @@ dependencies = [
  "pin-project-lite",
  "quinn",
  "rustls",
+ "rustls-native-certs",
  "rustls-pki-types",
  "serde",
  "serde_json",
@@ -5217,6 +5686,12 @@ dependencies = [
  "portable-atomic-util",
 ]
 
+[[package]]
+name = "rtrb"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ade083ccbb4bf536df69d1f6432cc23deb7acccff86b183f3923a6fd56a1153"
+
 [[package]]
 name = "rust-ini"
 version = "0.21.3"
@@ -5258,7 +5733,7 @@ dependencies = [
  "errno",
  "libc",
  "linux-raw-sys",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5316,7 +5791,7 @@ dependencies = [
  "security-framework",
  "security-framework-sys",
  "webpki-root-certs",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -5376,6 +5851,7 @@ dependencies = [
  "tauri",
  "tauri-build",
  "tauri-plugin-android-fs",
+ "tauri-plugin-call-lifecycle",
  "tauri-plugin-clipboard-manager",
  "tauri-plugin-deep-link",
  "tauri-plugin-devtools",
@@ -5485,6 +5961,12 @@ version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
 
+[[package]]
+name = "scratch"
+version = "1.0.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d68f2ec51b097e4c1a75b681a8bec621909b5e91f15bb7b840c4f2f7b01148b2"
+
 [[package]]
 name = "sctk-adwaita"
 version = "0.11.1"
@@ -5498,6 +5980,16 @@ dependencies = [
  "tiny-skia",
 ]
 
+[[package]]
+name = "secrecy"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e891af845473308773346dc847b2c23ee78fe442e0472ac50e22a18a93d3ae5a"
+dependencies = [
+ "serde",
+ "zeroize",
+]
+
 [[package]]
 name = "security-framework"
 version = "3.7.0"
@@ -5812,7 +6304,7 @@ version = "3.21.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "84d57bc0c8b9a17920c178daa6bb924850d54a9c97ab45194bb8c17ad66bb660"
 dependencies = [
- "darling",
+ "darling 0.23.0",
  "proc-macro2",
  "quote",
  "syn 2.0.119",
@@ -5859,6 +6351,17 @@ dependencies = [
  "stable_deref_trait",
 ]
 
+[[package]]
+name = "sha1"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.2.17",
+ "digest",
+]
+
 [[package]]
 name = "sha1_smol"
 version = "1.0.1"
@@ -5901,6 +6404,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "rand_core 0.6.4",
+]
+
 [[package]]
 name = "simd-adler32"
 version = "0.3.10"
@@ -6011,7 +6523,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -6134,6 +6646,12 @@ dependencies = [
  "quote",
 ]
 
+[[package]]
+name = "strsim"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623"
+
 [[package]]
 name = "strsim"
 version = "0.11.1"
@@ -6535,6 +7053,19 @@ dependencies = [
  "thiserror 2.0.19",
 ]
 
+[[package]]
+name = "tauri-plugin-call-lifecycle"
+version = "0.1.0"
+dependencies = [
+ "livekit",
+ "secrecy",
+ "serde",
+ "tauri",
+ "tauri-plugin",
+ "thiserror 2.0.19",
+ "tokio",
+]
+
 [[package]]
 name = "tauri-plugin-clipboard-manager"
 version = "2.3.2"
@@ -6871,7 +7402,7 @@ dependencies = [
  "tokio",
  "url",
  "windows-sys 0.60.2",
- "zip",
+ "zip 4.6.1",
 ]
 
 [[package]]
@@ -7069,7 +7600,7 @@ dependencies = [
  "getrandom 0.4.3",
  "once_cell",
  "rustix",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -7334,6 +7865,19 @@ dependencies = [
  "futures-core",
  "pin-project-lite",
  "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f72a05e828585856dacd553fba484c242c46e391fb0e58917c942ee9202915c"
+dependencies = [
+ "futures-util",
+ "log",
+ "tokio",
+ "tungstenite",
 ]
 
 [[package]]
@@ -7694,7 +8238,7 @@ dependencies = [
  "png 0.18.1",
  "serde",
  "thiserror 2.0.19",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -7705,7 +8249,7 @@ checksum = "b8765b90061cba6c22b5831f675da109ae5561588290f9fa2317adab2714d5a6"
 dependencies = [
  "memchr",
  "nom",
- "petgraph",
+ "petgraph 0.8.3",
 ]
 
 [[package]]
@@ -7742,6 +8286,23 @@ version = "0.25.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d2df906b07856748fa3f6e0ad0cbaa047052d4a7dd609e231c4f72cee8c36f31"
 
+[[package]]
+name = "tungstenite"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c01152af293afb9c7c2a57e4b559c5620b421f6d133261c60dd2d0cdb38e6b8"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http 1.4.2",
+ "httparse",
+ "log",
+ "rand 0.9.5",
+ "sha1",
+ "thiserror 2.0.19",
+ "url",
+]
+
 [[package]]
 name = "typeid"
 version = "1.0.3"
@@ -7768,7 +8329,7 @@ checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
 dependencies = [
  "memoffset",
  "tempfile",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -8334,6 +8895,36 @@ dependencies = [
  "rustls-pki-types",
 ]
 
+[[package]]
+name = "webrtc-sys"
+version = "0.3.39"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a555de886b8d4961e6c2878ac3ca1f716b75c77f60311c5cf6ed136d0df14e1"
+dependencies = [
+ "cc",
+ "cxx",
+ "cxx-build",
+ "glob",
+ "log",
+ "pkg-config",
+ "webrtc-sys-build",
+]
+
+[[package]]
+name = "webrtc-sys-build"
+version = "0.3.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d46da6b5a5cbd091fae0400f77189f4ca4807c0d9442b85838a584f28720570"
+dependencies = [
+ "anyhow",
+ "fs2",
+ "regex",
+ "reqwest 0.12.28",
+ "scratch",
+ "semver",
+ "zip 0.6.6",
+]
+
 [[package]]
 name = "webview2-com"
 version = "0.38.2"
@@ -8398,7 +8989,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.48.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -9441,6 +10032,20 @@ name = "zeroize"
 version = "1.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e13c156562582aa81c60cb29407084cdb54c4164760106ab78e6c5b0858cf64e"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
 
 [[package]]
 name = "zerotrie"
@@ -9475,6 +10080,18 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "zip"
+version = "0.6.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "760394e246e4c28189f19d488c058bf16f564016aefac5d32bb1f3b51d5e9261"
+dependencies = [
+ "byteorder",
+ "crc32fast",
+ "crossbeam-utils",
+ "flate2",
+]
+
 [[package]]
 name = "zip"
 version = "4.6.1"
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index f7868c7103..2f7c179362 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -103,6 +103,7 @@ tauri-plugin-window-state = "2.4.1"
 tauri-plugin-global-shortcut = "2"
 regex = "1"
 zip = { version = "=4.6.1", default-features = false, features = ["deflate-flate2-zlib-rs"] }
+tauri-plugin-call-lifecycle = { path = "plugins/tauri-plugin-call-lifecycle" }
 
 [target.'cfg(any(target_os = "linux", target_os = "dragonfly", target_os = "freebsd", target_os = "openbsd", target_os = "netbsd"))'.dependencies]
 gtk = "0.18"
diff --git a/src-tauri/capabilities/desktop.json b/src-tauri/capabilities/desktop.json
index f42f6888ea..f1f0662a5f 100644
--- a/src-tauri/capabilities/desktop.json
+++ b/src-tauri/capabilities/desktop.json
@@ -9,6 +9,7 @@
     "store:default",
     "notifications:default",
     "process:default",
-    "dialog:default"
+    "dialog:default",
+    "call-lifecycle:default"
   ]
 }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/.gitignore b/src-tauri/plugins/tauri-plugin-call-lifecycle/.gitignore
new file mode 100644
index 0000000000..f23de25d29
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/.gitignore
@@ -0,0 +1,20 @@
+/.vs
+.DS_Store
+.Thumbs.db
+*.sublime*
+.idea/
+debug.log
+package-lock.json
+.vscode/settings.json
+yarn.lock
+
+/.tauri
+/target
+Cargo.lock
+node_modules/
+
+dist
+
+# The guest package is consumed directly by Sable's local file dependency.
+!dist-js/
+!dist-js/**
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
new file mode 100644
index 0000000000..fe3358b727
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
@@ -0,0 +1,23 @@
+[package]
+name = "tauri-plugin-call-lifecycle"
+version = "0.1.0"
+authors = [ "Sable Contributors" ]
+description = ""
+edition = "2021"
+rust-version = "1.77.2"
+exclude = ["/examples", "/dist-js", "/guest-js", "/node_modules"]
+links = "tauri-plugin-call-lifecycle"
+
+[dependencies]
+tauri = { version = "2.11.3" }
+livekit = "0.7"
+secrecy = { version = "0.10", features = ["serde"] }
+serde = "1.0"
+thiserror = "2"
+tokio = { version = "1", features = ["macros", "rt", "sync"] }
+
+[build-dependencies]
+tauri-plugin = { version = "2.6.3", features = ["build"] }
+
+[dev-dependencies]
+serde_json = "1.0"
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
new file mode 100644
index 0000000000..2b5e2b3805
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
@@ -0,0 +1,8 @@
+const COMMANDS: &[&str] = &["connect", "disconnect", "get_state"];
+
+fn main() {
+    tauri_plugin::Builder::new(COMMANDS)
+        .android_path("android")
+        .ios_path("ios")
+        .build();
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
new file mode 100644
index 0000000000..6828d9846b
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
@@ -0,0 +1,17 @@
+'use strict';
+
+var core = require('@tauri-apps/api/core');
+
+async function connect(request) {
+    return await core.invoke('plugin:call-lifecycle|connect', { payload: request });
+}
+async function disconnect(request) {
+    return await core.invoke('plugin:call-lifecycle|disconnect', { payload: request });
+}
+async function getState() {
+    return await core.invoke('plugin:call-lifecycle|get_state');
+}
+
+exports.connect = connect;
+exports.disconnect = disconnect;
+exports.getState = getState;
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
new file mode 100644
index 0000000000..c2db410702
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
@@ -0,0 +1,23 @@
+export interface ConnectRequest {
+    connectionId: string;
+    serverUrl: string;
+    participantToken: string;
+}
+export interface DisconnectRequest {
+    connectionId: string;
+}
+export type ConnectionState = 'idle' | 'connecting' | 'connected' | 'reconnecting' | 'disconnecting';
+export interface CallState {
+    revision: number;
+    state: ConnectionState;
+    connectionId: string | null;
+}
+export interface CallLifecycleError {
+    revision: number;
+    code: string;
+    message: string;
+    connectionId: string | null;
+}
+export declare function connect(request: ConnectRequest): Promise<CallState>;
+export declare function disconnect(request: DisconnectRequest): Promise<CallState>;
+export declare function getState(): Promise<CallState>;
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
new file mode 100644
index 0000000000..109d467e1d
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
@@ -0,0 +1,13 @@
+import { invoke } from '@tauri-apps/api/core';
+
+async function connect(request) {
+    return await invoke('plugin:call-lifecycle|connect', { payload: request });
+}
+async function disconnect(request) {
+    return await invoke('plugin:call-lifecycle|disconnect', { payload: request });
+}
+async function getState() {
+    return await invoke('plugin:call-lifecycle|get_state');
+}
+
+export { connect, disconnect, getState };
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
new file mode 100644
index 0000000000..f8dd0fdbd5
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
@@ -0,0 +1,43 @@
+import { invoke } from '@tauri-apps/api/core'
+
+export interface ConnectRequest {
+  connectionId: string
+  serverUrl: string
+  participantToken: string
+}
+
+export interface DisconnectRequest {
+  connectionId: string
+}
+
+export type ConnectionState =
+  | 'idle'
+  | 'connecting'
+  | 'connected'
+  | 'reconnecting'
+  | 'disconnecting'
+
+export interface CallState {
+  revision: number
+  state: ConnectionState
+  connectionId: string | null
+}
+
+export interface CallLifecycleError {
+  revision: number
+  code: string
+  message: string
+  connectionId: string | null
+}
+
+export async function connect(request: ConnectRequest): Promise<CallState> {
+  return await invoke<CallState>('plugin:call-lifecycle|connect', { payload: request })
+}
+
+export async function disconnect(request: DisconnectRequest): Promise<CallState> {
+  return await invoke<CallState>('plugin:call-lifecycle|disconnect', { payload: request })
+}
+
+export async function getState(): Promise<CallState> {
+  return await invoke<CallState>('plugin:call-lifecycle|get_state')
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/package.json b/src-tauri/plugins/tauri-plugin-call-lifecycle/package.json
new file mode 100644
index 0000000000..050b253ded
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/package.json
@@ -0,0 +1,30 @@
+{
+  "name": "tauri-plugin-call-lifecycle-api",
+  "version": "0.1.0",
+  "author": "Sable Contributors",
+  "description": "",
+  "type": "module",
+  "types": "./dist-js/index.d.ts",
+  "main": "./dist-js/index.cjs",
+  "module": "./dist-js/index.js",
+  "exports": {
+    "types": "./dist-js/index.d.ts",
+    "import": "./dist-js/index.js",
+    "require": "./dist-js/index.cjs"
+  },
+  "files": ["dist-js"],
+  "scripts": {
+    "build": "rollup -c",
+    "prepublishOnly": "pnpm build",
+    "pretest": "pnpm build"
+  },
+  "dependencies": {
+    "@tauri-apps/api": "^2.0.0"
+  },
+  "devDependencies": {
+    "@rollup/plugin-typescript": "^12.0.0",
+    "rollup": "^4.9.6",
+    "typescript": "^6.0.0",
+    "tslib": "^2.6.2"
+  }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/connect.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/connect.toml
new file mode 100644
index 0000000000..49ce9ad3f5
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/connect.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-connect"
+description = "Enables the connect command without any pre-configured scope."
+commands.allow = ["connect"]
+
+[[permission]]
+identifier = "deny-connect"
+description = "Denies the connect command without any pre-configured scope."
+commands.deny = ["connect"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/disconnect.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/disconnect.toml
new file mode 100644
index 0000000000..8f5a99868d
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/disconnect.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-disconnect"
+description = "Enables the disconnect command without any pre-configured scope."
+commands.allow = ["disconnect"]
+
+[[permission]]
+identifier = "deny-disconnect"
+description = "Denies the disconnect command without any pre-configured scope."
+commands.deny = ["disconnect"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/get_state.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/get_state.toml
new file mode 100644
index 0000000000..344da274a1
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/get_state.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-get-state"
+description = "Enables the get_state command without any pre-configured scope."
+commands.allow = ["get_state"]
+
+[[permission]]
+identifier = "deny-get-state"
+description = "Denies the get_state command without any pre-configured scope."
+commands.deny = ["get_state"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
new file mode 100644
index 0000000000..1ea007202e
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
@@ -0,0 +1,97 @@
+## Default Permission
+
+Default permissions for the plugin
+
+#### This default permission set includes the following:
+
+- `allow-connect`
+- `allow-disconnect`
+- `allow-get-state`
+
+## Permission Table
+
+<table>
+<tr>
+<th>Identifier</th>
+<th>Description</th>
+</tr>
+
+
+<tr>
+<td>
+
+`call-lifecycle:allow-connect`
+
+</td>
+<td>
+
+Enables the connect command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-connect`
+
+</td>
+<td>
+
+Denies the connect command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-disconnect`
+
+</td>
+<td>
+
+Enables the disconnect command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-disconnect`
+
+</td>
+<td>
+
+Denies the disconnect command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-get-state`
+
+</td>
+<td>
+
+Enables the get_state command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-get-state`
+
+</td>
+<td>
+
+Denies the get_state command without any pre-configured scope.
+
+</td>
+</tr>
+</table>
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
new file mode 100644
index 0000000000..ada76b3651
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
@@ -0,0 +1,3 @@
+[default]
+description = "Default permissions for the plugin"
+permissions = ["allow-connect", "allow-disconnect", "allow-get-state"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
new file mode 100644
index 0000000000..3561320b3a
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
@@ -0,0 +1,342 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "PermissionFile",
+  "description": "Permission file that can define a default permission, a set of permissions or a list of inlined permissions.",
+  "type": "object",
+  "properties": {
+    "default": {
+      "description": "The default permission set for the plugin",
+      "anyOf": [
+        {
+          "$ref": "#/definitions/DefaultPermission"
+        },
+        {
+          "type": "null"
+        }
+      ]
+    },
+    "set": {
+      "description": "A list of permissions sets defined",
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/PermissionSet"
+      }
+    },
+    "permission": {
+      "description": "A list of inlined permissions",
+      "default": [],
+      "type": "array",
+      "items": {
+        "$ref": "#/definitions/Permission"
+      }
+    }
+  },
+  "definitions": {
+    "DefaultPermission": {
+      "description": "The default permission set of the plugin.\n\nWorks similarly to a permission with the \"default\" identifier.",
+      "type": "object",
+      "required": [
+        "permissions"
+      ],
+      "properties": {
+        "version": {
+          "description": "The version of the permission.",
+          "type": [
+            "integer",
+            "null"
+          ],
+          "format": "uint64",
+          "minimum": 1.0
+        },
+        "description": {
+          "description": "Human-readable description of what the permission does. Tauri convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "permissions": {
+          "description": "All permissions this set contains.",
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "PermissionSet": {
+      "description": "A set of direct permissions grouped together under a new name.",
+      "type": "object",
+      "required": [
+        "description",
+        "identifier",
+        "permissions"
+      ],
+      "properties": {
+        "identifier": {
+          "description": "A unique identifier for the permission.",
+          "type": "string"
+        },
+        "description": {
+          "description": "Human-readable description of what the permission does.",
+          "type": "string"
+        },
+        "permissions": {
+          "description": "All permissions this set contains.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/PermissionKind"
+          }
+        }
+      }
+    },
+    "Permission": {
+      "description": "Descriptions of explicit privileges of commands.\n\nIt can enable commands to be accessible in the frontend of the application.\n\nIf the scope is defined it can be used to fine grain control the access of individual or multiple commands.",
+      "type": "object",
+      "required": [
+        "identifier"
+      ],
+      "properties": {
+        "version": {
+          "description": "The version of the permission.",
+          "type": [
+            "integer",
+            "null"
+          ],
+          "format": "uint64",
+          "minimum": 1.0
+        },
+        "identifier": {
+          "description": "A unique identifier for the permission.",
+          "type": "string"
+        },
+        "description": {
+          "description": "Human-readable description of what the permission does. Tauri internal convention is to use `<h4>` headings in markdown content for Tauri documentation generation purposes.",
+          "type": [
+            "string",
+            "null"
+          ]
+        },
+        "commands": {
+          "description": "Allowed or denied commands when using this permission.",
+          "default": {
+            "allow": [],
+            "deny": []
+          },
+          "allOf": [
+            {
+              "$ref": "#/definitions/Commands"
+            }
+          ]
+        },
+        "scope": {
+          "description": "Allowed or denied scoped when using this permission.",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Scopes"
+            }
+          ]
+        },
+        "platforms": {
+          "description": "Target platforms this permission applies. By default all platforms are affected by this permission.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "$ref": "#/definitions/Target"
+          }
+        }
+      }
+    },
+    "Commands": {
+      "description": "Allowed and denied commands inside a permission.\n\nIf two commands clash inside of `allow` and `deny`, it should be denied by default.",
+      "type": "object",
+      "properties": {
+        "allow": {
+          "description": "Allowed command.",
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        },
+        "deny": {
+          "description": "Denied command, which takes priority.",
+          "default": [],
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "Scopes": {
+      "description": "An argument for fine grained behavior control of Tauri commands.\n\nIt can be of any serde serializable type and is used to allow or prevent certain actions inside a Tauri command. The configured scope is passed to the command and will be enforced by the command implementation.\n\n## Example\n\n```json { \"allow\": [{ \"path\": \"$HOME/**\" }], \"deny\": [{ \"path\": \"$HOME/secret.txt\" }] } ```",
+      "type": "object",
+      "properties": {
+        "allow": {
+          "description": "Data that defines what is allowed by the scope.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "$ref": "#/definitions/Value"
+          }
+        },
+        "deny": {
+          "description": "Data that defines what is denied by the scope. This should be prioritized by validation logic.",
+          "type": [
+            "array",
+            "null"
+          ],
+          "items": {
+            "$ref": "#/definitions/Value"
+          }
+        }
+      }
+    },
+    "Value": {
+      "description": "All supported ACL values.",
+      "anyOf": [
+        {
+          "description": "Represents a null JSON value.",
+          "type": "null"
+        },
+        {
+          "description": "Represents a [`bool`].",
+          "type": "boolean"
+        },
+        {
+          "description": "Represents a valid ACL [`Number`].",
+          "allOf": [
+            {
+              "$ref": "#/definitions/Number"
+            }
+          ]
+        },
+        {
+          "description": "Represents a [`String`].",
+          "type": "string"
+        },
+        {
+          "description": "Represents a list of other [`Value`]s.",
+          "type": "array",
+          "items": {
+            "$ref": "#/definitions/Value"
+          }
+        },
+        {
+          "description": "Represents a map of [`String`] keys to [`Value`]s.",
+          "type": "object",
+          "additionalProperties": {
+            "$ref": "#/definitions/Value"
+          }
+        }
+      ]
+    },
+    "Number": {
+      "description": "A valid ACL number.",
+      "anyOf": [
+        {
+          "description": "Represents an [`i64`].",
+          "type": "integer",
+          "format": "int64"
+        },
+        {
+          "description": "Represents a [`f64`].",
+          "type": "number",
+          "format": "double"
+        }
+      ]
+    },
+    "Target": {
+      "description": "Platform target.",
+      "oneOf": [
+        {
+          "description": "MacOS.",
+          "type": "string",
+          "enum": [
+            "macOS"
+          ]
+        },
+        {
+          "description": "Windows.",
+          "type": "string",
+          "enum": [
+            "windows"
+          ]
+        },
+        {
+          "description": "Linux.",
+          "type": "string",
+          "enum": [
+            "linux"
+          ]
+        },
+        {
+          "description": "Android.",
+          "type": "string",
+          "enum": [
+            "android"
+          ]
+        },
+        {
+          "description": "iOS.",
+          "type": "string",
+          "enum": [
+            "iOS"
+          ]
+        }
+      ]
+    },
+    "PermissionKind": {
+      "type": "string",
+      "oneOf": [
+        {
+          "description": "Enables the connect command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-connect",
+          "markdownDescription": "Enables the connect command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the connect command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-connect",
+          "markdownDescription": "Denies the connect command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the disconnect command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-disconnect",
+          "markdownDescription": "Enables the disconnect command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the disconnect command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-disconnect",
+          "markdownDescription": "Denies the disconnect command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the get_state command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-get-state",
+          "markdownDescription": "Enables the get_state command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the get_state command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-get-state",
+          "markdownDescription": "Denies the get_state command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-get-state`",
+          "type": "string",
+          "const": "default",
+          "markdownDescription": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-get-state`"
+        }
+      ]
+    }
+  }
+}
\ No newline at end of file
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/rollup.config.js b/src-tauri/plugins/tauri-plugin-call-lifecycle/rollup.config.js
new file mode 100644
index 0000000000..118be066c3
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/rollup.config.js
@@ -0,0 +1,32 @@
+import { readFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+import { cwd } from 'node:process'
+import typescript from '@rollup/plugin-typescript'
+
+const pkg = JSON.parse(readFileSync(join(cwd(), 'package.json'), 'utf8'))
+
+export default {
+  input: 'guest-js/index.ts',
+  output: [
+    {
+      file: pkg.exports.import,
+      format: 'esm'
+    },
+    {
+      file: pkg.exports.require,
+      format: 'cjs'
+    }
+  ],
+  plugins: [
+    typescript({
+      declaration: true,
+      declarationDir: dirname(pkg.exports.import),
+      rootDir: 'guest-js'
+    })
+  ],
+  external: [
+    /^@tauri-apps\/api/,
+    ...Object.keys(pkg.dependencies || {}),
+    ...Object.keys(pkg.peerDependencies || {})
+  ]
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
new file mode 100644
index 0000000000..51309351f4
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
@@ -0,0 +1,634 @@
+use std::marker::PhantomData;
+
+use livekit::{Room, RoomEvent, RoomOptions};
+use secrecy::ExposeSecret;
+use tauri::{async_runtime, AppHandle, Emitter, Runtime};
+use tokio::sync::{mpsc, oneshot};
+
+#[cfg(test)]
+use std::sync::{
+    atomic::{AtomicUsize, Ordering},
+    Arc,
+};
+
+use crate::error::{Error, Result};
+use crate::models::{
+    CallLifecycleError, CallState, ConnectRequest, ConnectionState, DisconnectRequest,
+};
+
+pub(crate) const STATE_EVENT: &str = "plugin:call-lifecycle://state";
+pub(crate) const ERROR_EVENT: &str = "plugin:call-lifecycle://error";
+
+type RoomEvents = mpsc::UnboundedReceiver<RoomEvent>;
+
+struct ConnectedRoom {
+    room: OwnedRoom,
+    events: RoomEvents,
+}
+
+enum OwnedRoom {
+    LiveKit(Room),
+    #[cfg(test)]
+    Fake(Arc<AtomicUsize>),
+}
+
+impl OwnedRoom {
+    async fn close(self) -> std::result::Result<(), ()> {
+        match self {
+            Self::LiveKit(room) => room.close().await.map_err(|_| ()),
+            #[cfg(test)]
+            Self::Fake(closes) => {
+                closes.fetch_add(1, Ordering::SeqCst);
+                Ok(())
+            }
+        }
+    }
+}
+
+pub(crate) enum Command {
+    Connect(ConnectRequest, oneshot::Sender<Result<CallState>>),
+    Disconnect(DisconnectRequest, oneshot::Sender<Result<CallState>>),
+    GetState(oneshot::Sender<CallState>),
+}
+
+enum InternalMessage {
+    ConnectFinished {
+        connection_id: String,
+        room: Option<ConnectedRoom>,
+    },
+}
+
+struct PendingConnection {
+    connection_id: String,
+    task: async_runtime::JoinHandle<()>,
+    response: oneshot::Sender<Result<CallState>>,
+}
+
+struct ActiveConnection {
+    connection_id: String,
+    room: OwnedRoom,
+    events: RoomEvents,
+}
+
+pub struct CallLifecycle<R: Runtime> {
+    commands: mpsc::Sender<Command>,
+    _runtime: PhantomData<fn() -> R>,
+}
+
+impl<R: Runtime> CallLifecycle<R> {
+    pub(crate) fn new(app: AppHandle<R>) -> Self {
+        let (commands, command_rx) = mpsc::channel(32);
+        let (internal_tx, internal_rx) = mpsc::unbounded_channel();
+        async_runtime::spawn(run_actor(app, command_rx, internal_tx, internal_rx));
+        Self {
+            commands,
+            _runtime: PhantomData,
+        }
+    }
+
+    pub async fn connect(&self, request: ConnectRequest) -> Result<CallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::Connect(request, response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
+    pub async fn disconnect(&self, request: DisconnectRequest) -> Result<CallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::Disconnect(request, response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
+    pub async fn get_state(&self) -> Result<CallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::GetState(response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum ConnectDecision {
+    Start,
+    Same,
+    Busy,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum DisconnectDecision {
+    None,
+    CancelPending,
+    CloseActive,
+    Stale,
+}
+
+#[derive(Debug, Clone)]
+struct StateMachine {
+    state: ConnectionState,
+    revision: u64,
+    connection_id: Option<String>,
+}
+
+impl Default for StateMachine {
+    fn default() -> Self {
+        Self {
+            state: ConnectionState::Idle,
+            revision: 0,
+            connection_id: None,
+        }
+    }
+}
+
+impl StateMachine {
+    fn snapshot(&self) -> CallState {
+        CallState {
+            revision: self.revision,
+            state: self.state,
+            connection_id: self.connection_id.clone(),
+        }
+    }
+
+    fn connect_decision(&self, connection_id: &str) -> ConnectDecision {
+        match self.connection_id.as_deref() {
+            None => ConnectDecision::Start,
+            Some(current) if current == connection_id => ConnectDecision::Same,
+            Some(_) => ConnectDecision::Busy,
+        }
+    }
+
+    fn disconnect_decision(&self, connection_id: &str) -> DisconnectDecision {
+        if self.connection_id.as_deref() != Some(connection_id) {
+            return if self.connection_id.is_some() {
+                DisconnectDecision::Stale
+            } else {
+                DisconnectDecision::None
+            };
+        }
+        match self.state {
+            ConnectionState::Connecting => DisconnectDecision::CancelPending,
+            ConnectionState::Idle | ConnectionState::Disconnecting => DisconnectDecision::None,
+            ConnectionState::Connected | ConnectionState::Reconnecting => {
+                DisconnectDecision::CloseActive
+            }
+        }
+    }
+
+    fn transition(&mut self, state: ConnectionState, connection_id: Option<String>) {
+        self.revision += 1;
+        self.state = state;
+        self.connection_id = connection_id;
+    }
+}
+
+struct Actor<R: Runtime> {
+    app: AppHandle<R>,
+    commands: mpsc::Receiver<Command>,
+    internal_tx: mpsc::UnboundedSender<InternalMessage>,
+    internal_rx: mpsc::UnboundedReceiver<InternalMessage>,
+    machine: StateMachine,
+    pending: Option<PendingConnection>,
+    active: Option<ActiveConnection>,
+}
+
+async fn run_actor<R: Runtime>(
+    app: AppHandle<R>,
+    commands: mpsc::Receiver<Command>,
+    internal_tx: mpsc::UnboundedSender<InternalMessage>,
+    internal_rx: mpsc::UnboundedReceiver<InternalMessage>,
+) {
+    let mut actor = Actor {
+        app,
+        commands,
+        internal_tx,
+        internal_rx,
+        machine: StateMachine::default(),
+        pending: None,
+        active: None,
+    };
+    actor.emit_state();
+
+    loop {
+        if actor.active.is_some() {
+            tokio::select! {
+                command = actor.commands.recv() => {
+                    let Some(command) = command else { break };
+                    actor.handle_command(command).await;
+                }
+                internal = actor.internal_rx.recv() => {
+                    let Some(internal) = internal else { break };
+                    actor.handle_internal(internal).await;
+                }
+                event = receive_room_event(&mut actor.active) => {
+                    match event {
+                        Some(event) => actor.handle_room_event(event).await,
+                        None => {
+                            close_active_connection(actor.active.take()).await;
+                            actor.transition(ConnectionState::Idle, None);
+                        }
+                    }
+                }
+            }
+        } else {
+            tokio::select! {
+                command = actor.commands.recv() => {
+                    let Some(command) = command else { break };
+                    actor.handle_command(command).await;
+                }
+                internal = actor.internal_rx.recv() => {
+                    let Some(internal) = internal else { break };
+                    actor.handle_internal(internal).await;
+                }
+            }
+        }
+    }
+
+    actor.cleanup().await;
+}
+
+async fn receive_room_event(active: &mut Option<ActiveConnection>) -> Option<RoomEvent> {
+    match active.as_mut() {
+        Some(active) => active.events.recv().await,
+        None => std::future::pending().await,
+    }
+}
+
+impl<R: Runtime> Actor<R> {
+    fn emit_state(&self) {
+        let _ = self.app.emit(STATE_EVENT, self.machine.snapshot());
+    }
+
+    fn emit_error(&self, error: &Error, connection_id: Option<String>) {
+        let payload = CallLifecycleError {
+            revision: self.machine.revision,
+            code: error.code(),
+            message: error.message(),
+            connection_id,
+        };
+        let _ = self.app.emit(ERROR_EVENT, payload);
+    }
+
+    fn transition(&mut self, state: ConnectionState, connection_id: Option<String>) {
+        self.machine.transition(state, connection_id);
+        self.emit_state();
+    }
+
+    async fn handle_command(&mut self, command: Command) {
+        match command {
+            Command::Connect(request, response) => self.handle_connect(request, response).await,
+            Command::Disconnect(request, response) => {
+                self.handle_disconnect(request, response).await
+            }
+            Command::GetState(response) => {
+                let _ = response.send(self.machine.snapshot());
+            }
+        }
+    }
+
+    async fn handle_connect(
+        &mut self,
+        request: ConnectRequest,
+        response: oneshot::Sender<Result<CallState>>,
+    ) {
+        match self.machine.connect_decision(&request.connection_id) {
+            ConnectDecision::Same => {
+                let _ = response.send(Ok(self.machine.snapshot()));
+            }
+            ConnectDecision::Busy => {
+                let error = Error::Busy;
+                self.emit_error(&error, Some(request.connection_id));
+                let _ = response.send(Err(error));
+            }
+            ConnectDecision::Start => {
+                let connection_id = request.connection_id.clone();
+                self.transition(ConnectionState::Connecting, Some(connection_id.clone()));
+                let internal_tx = self.internal_tx.clone();
+                let task = async_runtime::spawn(async move {
+                    let room = Room::connect(
+                        &request.server_url,
+                        request.participant_token.expose_secret(),
+                        RoomOptions::default(),
+                    )
+                    .await
+                    .ok()
+                    .map(|(room, events)| ConnectedRoom {
+                        room: OwnedRoom::LiveKit(room),
+                        events,
+                    });
+                    let _ = internal_tx.send(InternalMessage::ConnectFinished {
+                        connection_id,
+                        room,
+                    });
+                });
+                self.pending = Some(PendingConnection {
+                    connection_id: request.connection_id,
+                    task,
+                    response,
+                });
+            }
+        }
+    }
+
+    async fn handle_disconnect(
+        &mut self,
+        request: DisconnectRequest,
+        response: oneshot::Sender<Result<CallState>>,
+    ) {
+        match self.machine.disconnect_decision(&request.connection_id) {
+            DisconnectDecision::None => {
+                let _ = response.send(Ok(self.machine.snapshot()));
+            }
+            DisconnectDecision::Stale => {
+                let error = Error::StaleConnection;
+                self.emit_error(&error, Some(request.connection_id));
+                let _ = response.send(Err(error));
+            }
+            DisconnectDecision::CancelPending => {
+                if let Some(pending) = self.pending.take() {
+                    pending.task.abort();
+                    let _ = pending.task.await;
+                    close_queued_rooms(&mut self.internal_rx).await;
+                }
+                self.transition(ConnectionState::Disconnecting, Some(request.connection_id));
+                self.transition(ConnectionState::Idle, None);
+                let _ = response.send(Ok(self.machine.snapshot()));
+            }
+            DisconnectDecision::CloseActive => {
+                let active = self.active.take();
+                self.transition(
+                    ConnectionState::Disconnecting,
+                    Some(request.connection_id.clone()),
+                );
+                let Some(active) = active else {
+                    self.transition(ConnectionState::Idle, None);
+                    let _ = response.send(Ok(self.machine.snapshot()));
+                    return;
+                };
+
+                let close_result = active.room.close().await;
+                self.transition(ConnectionState::Idle, None);
+                if close_result.is_err() {
+                    let error = Error::CloseFailed;
+                    self.emit_error(&error, Some(active.connection_id));
+                    let _ = response.send(Err(error));
+                } else {
+                    let _ = response.send(Ok(self.machine.snapshot()));
+                }
+            }
+        }
+    }
+
+    async fn handle_internal(&mut self, message: InternalMessage) {
+        match message {
+            InternalMessage::ConnectFinished {
+                connection_id,
+                room,
+            } => {
+                let Some(pending) = self.pending.take() else {
+                    close_connected_room(room).await;
+                    return;
+                };
+                if pending.connection_id != connection_id {
+                    close_connected_room(room).await;
+                    let _ = pending.task.await;
+                    return;
+                }
+                let _ = pending.task.await;
+
+                let Some(ConnectedRoom { room, events }) = room else {
+                    let error = Error::ConnectFailed;
+                    self.emit_error(&error, Some(connection_id));
+                    self.transition(ConnectionState::Idle, None);
+                    let _ = pending.response.send(Err(error));
+                    return;
+                };
+
+                self.active = Some(ActiveConnection {
+                    connection_id: connection_id.clone(),
+                    room,
+                    events,
+                });
+                self.transition(ConnectionState::Connected, Some(connection_id));
+                let _ = pending.response.send(Ok(self.machine.snapshot()));
+            }
+        }
+    }
+
+    async fn handle_room_event(&mut self, event: RoomEvent) {
+        match event {
+            RoomEvent::Reconnecting => {
+                if let Some(connection_id) = self.machine.connection_id.clone() {
+                    self.transition(ConnectionState::Reconnecting, Some(connection_id));
+                }
+            }
+            RoomEvent::Reconnected => {
+                if let Some(connection_id) = self.machine.connection_id.clone() {
+                    self.transition(ConnectionState::Connected, Some(connection_id));
+                }
+            }
+            RoomEvent::Disconnected { .. } => {
+                close_active_connection(self.active.take()).await;
+                self.transition(ConnectionState::Idle, None);
+            }
+            _ => {}
+        }
+    }
+
+    async fn cleanup(&mut self) {
+        if let Some(pending) = self.pending.take() {
+            pending.task.abort();
+            let _ = pending.task.await;
+            let _ = pending.response.send(Err(Error::ActorUnavailable));
+        }
+        close_queued_rooms(&mut self.internal_rx).await;
+
+        close_active_connection(self.active.take()).await;
+    }
+}
+
+async fn close_active_connection(active: Option<ActiveConnection>) {
+    if let Some(active) = active {
+        let _ = active.room.close().await;
+    }
+}
+
+async fn close_connected_room(room: Option<ConnectedRoom>) {
+    if let Some(room) = room {
+        let _ = room.room.close().await;
+    }
+}
+
+async fn close_queued_rooms(internal_rx: &mut mpsc::UnboundedReceiver<InternalMessage>) {
+    while let Ok(message) = internal_rx.try_recv() {
+        let InternalMessage::ConnectFinished {
+            room: Some(room), ..
+        } = message
+        else {
+            continue;
+        };
+        close_connected_room(Some(room)).await;
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{ConnectDecision, DisconnectDecision, StateMachine};
+    use crate::error::Error;
+    use crate::models::{CallLifecycleError, ConnectRequest, ConnectionState};
+    use secrecy::SecretString;
+    use std::sync::{
+        atomic::{AtomicUsize, Ordering},
+        Arc,
+    };
+
+    #[test]
+    fn same_id_is_idempotent_and_different_id_is_busy() {
+        let mut machine = StateMachine::default();
+        assert_eq!(machine.connect_decision("one"), ConnectDecision::Start);
+        machine.transition(ConnectionState::Connecting, Some("one".into()));
+        assert_eq!(machine.connect_decision("one"), ConnectDecision::Same);
+        assert_eq!(machine.connect_decision("two"), ConnectDecision::Busy);
+        assert_eq!(machine.snapshot().revision, 1);
+    }
+
+    #[test]
+    fn stale_disconnect_does_not_close_active_connection() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        assert_eq!(
+            machine.disconnect_decision("two"),
+            DisconnectDecision::Stale
+        );
+        assert_eq!(machine.snapshot().state, ConnectionState::Connected);
+        assert_eq!(
+            machine.disconnect_decision("one"),
+            DisconnectDecision::CloseActive
+        );
+    }
+
+    #[test]
+    fn mismatched_disconnect_is_typed_stale_error() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        assert_eq!(
+            machine.disconnect_decision("two"),
+            DisconnectDecision::Stale
+        );
+        assert_eq!(machine.snapshot().state, ConnectionState::Connected);
+        assert_eq!(machine.snapshot().connection_id.as_deref(), Some("one"));
+    }
+
+    #[test]
+    fn participant_token_debug_is_redacted() {
+        let request = ConnectRequest {
+            connection_id: "connection".into(),
+            server_url: "wss://livekit.example".into(),
+            participant_token: SecretString::from("secret-jwt"),
+        };
+        let debug = format!("{request:?}");
+        assert!(!debug.contains("secret-jwt"));
+        assert!(debug.contains("REDACTED"));
+    }
+
+    #[test]
+    fn errors_and_states_have_stable_sanitized_shapes() {
+        let error = serde_json::to_value(Error::StaleConnection).unwrap();
+        assert_eq!(
+            error,
+            serde_json::json!({
+                "code": "stale_connection",
+                "message": "connection ID does not match active call"
+            })
+        );
+
+        let state = serde_json::to_value(ConnectionState::Reconnecting).unwrap();
+        assert_eq!(state, serde_json::json!("reconnecting"));
+
+        let event = CallLifecycleError {
+            revision: 7,
+            code: "stale_connection",
+            message: "connection ID does not match active call",
+            connection_id: Some("old".into()),
+        };
+        let event = serde_json::to_value(event).unwrap();
+        assert_eq!(event["revision"], 7);
+    }
+
+    #[tokio::test]
+    async fn queued_completed_room_is_closed_once_when_disconnect_wins() {
+        let closes = Arc::new(AtomicUsize::new(0));
+        let (sender, mut receiver) = tokio::sync::mpsc::unbounded_channel();
+        let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel();
+        sender
+            .send(super::InternalMessage::ConnectFinished {
+                connection_id: "one".into(),
+                room: Some(super::ConnectedRoom {
+                    room: super::OwnedRoom::Fake(closes.clone()),
+                    events,
+                }),
+            })
+            .unwrap();
+
+        super::close_queued_rooms(&mut receiver).await;
+        super::close_queued_rooms(&mut receiver).await;
+
+        assert_eq!(closes.load(Ordering::SeqCst), 1);
+    }
+
+    #[tokio::test]
+    async fn terminal_active_room_paths_close_owned_rooms_once() {
+        let event_receiver_closes = Arc::new(AtomicUsize::new(0));
+        let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel::<livekit::RoomEvent>();
+        super::close_active_connection(Some(super::ActiveConnection {
+            connection_id: "event-ended".into(),
+            room: super::OwnedRoom::Fake(event_receiver_closes.clone()),
+            events,
+        }))
+        .await;
+
+        let disconnected_closes = Arc::new(AtomicUsize::new(0));
+        let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel::<livekit::RoomEvent>();
+        super::close_active_connection(Some(super::ActiveConnection {
+            connection_id: "disconnected".into(),
+            room: super::OwnedRoom::Fake(disconnected_closes.clone()),
+            events,
+        }))
+        .await;
+
+        assert_eq!(event_receiver_closes.load(Ordering::SeqCst), 1);
+        assert_eq!(disconnected_closes.load(Ordering::SeqCst), 1);
+    }
+
+    #[tokio::test]
+    async fn stale_completion_closes_owned_room_once() {
+        let closes = Arc::new(AtomicUsize::new(0));
+        let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel::<livekit::RoomEvent>();
+        super::close_connected_room(Some(super::ConnectedRoom {
+            room: super::OwnedRoom::Fake(closes.clone()),
+            events,
+        }))
+        .await;
+
+        assert_eq!(closes.load(Ordering::SeqCst), 1);
+    }
+
+    #[test]
+    fn explicit_disconnect_has_one_close_transition() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        assert_eq!(
+            machine.disconnect_decision("one"),
+            DisconnectDecision::CloseActive
+        );
+        machine.transition(ConnectionState::Disconnecting, Some("one".into()));
+        machine.transition(ConnectionState::Idle, None);
+        assert_eq!(machine.disconnect_decision("one"), DisconnectDecision::None);
+        assert_eq!(machine.snapshot().revision, 3);
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
new file mode 100644
index 0000000000..64aed22aef
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
@@ -0,0 +1,26 @@
+use tauri::{command, AppHandle, Runtime};
+
+use crate::models::*;
+use crate::CallLifecycleExt;
+use crate::Result;
+
+#[command]
+pub(crate) async fn connect<R: Runtime>(
+    app: AppHandle<R>,
+    payload: ConnectRequest,
+) -> Result<CallState> {
+    app.call_lifecycle().connect(payload).await
+}
+
+#[command]
+pub(crate) async fn disconnect<R: Runtime>(
+    app: AppHandle<R>,
+    payload: DisconnectRequest,
+) -> Result<CallState> {
+    app.call_lifecycle().disconnect(payload).await
+}
+
+#[command]
+pub(crate) async fn get_state<R: Runtime>(app: AppHandle<R>) -> Result<CallState> {
+    app.call_lifecycle().get_state().await
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
new file mode 100644
index 0000000000..34a16b7176
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
@@ -0,0 +1,51 @@
+use serde::{ser::SerializeStruct, ser::Serializer, Serialize};
+
+pub type Result<T> = std::result::Result<T, Error>;
+
+#[derive(Debug, thiserror::Error)]
+pub enum Error {
+    #[error("call is already active")]
+    Busy,
+    #[error("call connection failed")]
+    ConnectFailed,
+    #[error("connection ID does not match active call")]
+    StaleConnection,
+    #[error("call shutdown failed")]
+    CloseFailed,
+    #[error("call lifecycle actor unavailable")]
+    ActorUnavailable,
+}
+
+impl Serialize for Error {
+    fn serialize<S>(&self, serializer: S) -> std::result::Result<S::Ok, S::Error>
+    where
+        S: Serializer,
+    {
+        let mut error = serializer.serialize_struct("Error", 2)?;
+        error.serialize_field("code", self.code())?;
+        error.serialize_field("message", self.message())?;
+        error.end()
+    }
+}
+
+impl Error {
+    pub fn code(&self) -> &'static str {
+        match self {
+            Self::Busy => "busy",
+            Self::ConnectFailed => "connect_failed",
+            Self::StaleConnection => "stale_connection",
+            Self::CloseFailed => "close_failed",
+            Self::ActorUnavailable => "actor_unavailable",
+        }
+    }
+
+    pub fn message(&self) -> &'static str {
+        match self {
+            Self::Busy => "another call is active",
+            Self::ConnectFailed => "call connection failed",
+            Self::StaleConnection => "connection ID does not match active call",
+            Self::CloseFailed => "call shutdown failed",
+            Self::ActorUnavailable => "call lifecycle unavailable",
+        }
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
new file mode 100644
index 0000000000..1bd0f776f7
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
@@ -0,0 +1,42 @@
+use tauri::{
+    plugin::{Builder, TauriPlugin},
+    Manager, Runtime,
+};
+
+pub use models::*;
+
+mod actor;
+mod commands;
+mod error;
+mod models;
+
+pub use error::{Error, Result};
+
+use actor::CallLifecycle;
+
+/// Extensions to [`tauri::App`], [`tauri::AppHandle`] and [`tauri::Window`] to access the call-lifecycle APIs.
+pub trait CallLifecycleExt<R: Runtime> {
+    fn call_lifecycle(&self) -> &CallLifecycle<R>;
+}
+
+impl<R: Runtime, T: Manager<R>> crate::CallLifecycleExt<R> for T {
+    fn call_lifecycle(&self) -> &CallLifecycle<R> {
+        self.state::<CallLifecycle<R>>().inner()
+    }
+}
+
+/// Initializes the plugin.
+pub fn init<R: Runtime>() -> TauriPlugin<R> {
+    Builder::new("call-lifecycle")
+        .invoke_handler(tauri::generate_handler![
+            commands::connect,
+            commands::disconnect,
+            commands::get_state
+        ])
+        .setup(|app, _api| {
+            let call_lifecycle = CallLifecycle::new(app.clone());
+            app.manage(call_lifecycle);
+            Ok(())
+        })
+        .build()
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
new file mode 100644
index 0000000000..41cbc444f3
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
@@ -0,0 +1,43 @@
+use secrecy::SecretString;
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ConnectRequest {
+    pub connection_id: String,
+    pub server_url: String,
+    pub participant_token: SecretString,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct DisconnectRequest {
+    pub connection_id: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "snake_case")]
+pub enum ConnectionState {
+    Idle,
+    Connecting,
+    Connected,
+    Reconnecting,
+    Disconnecting,
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct CallState {
+    pub revision: u64,
+    pub state: ConnectionState,
+    pub connection_id: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct CallLifecycleError {
+    pub revision: u64,
+    pub code: &'static str,
+    pub message: &'static str,
+    pub connection_id: Option<String>,
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/tsconfig.json b/src-tauri/plugins/tauri-plugin-call-lifecycle/tsconfig.json
new file mode 100644
index 0000000000..0591122701
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/tsconfig.json
@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "es2021",
+    "module": "esnext",
+    "moduleResolution": "bundler",
+    "skipLibCheck": true,
+    "strict": true,
+    "noUnusedLocals": true,
+    "noImplicitAny": true,
+    "noEmit": true
+  },
+  "include": ["guest-js/*.ts"],
+  "exclude": ["dist-js", "node_modules"]
+}
diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs
index 30fec56684..c723f3ce92 100644
--- a/src-tauri/src/lib.rs
+++ b/src-tauri/src/lib.rs
@@ -341,7 +341,8 @@ pub fn run() {
     #[cfg(desktop)]
     let builder = builder
         .plugin(tauri_plugin_process::init())
-        .plugin(tauri_plugin_dialog::init());
+        .plugin(tauri_plugin_dialog::init())
+        .plugin(tauri_plugin_call_lifecycle::init());
 
     #[cfg(target_os = "ios")]
     let builder = builder
diff --git a/src/app/cs-api.ts b/src/app/cs-api.ts
index ec985b97b4..386ca3d19b 100644
--- a/src/app/cs-api.ts
+++ b/src/app/cs-api.ts
@@ -1,4 +1,5 @@
 import to from 'await-to-js';
+import type { LivekitTransportConfig } from '$types/matrix-sdk';
 import { trimTrailingSlash } from './utils/common';
 
 export enum AutoDiscoveryAction {
@@ -22,12 +23,22 @@ export type AutoDiscoveryInfo = Record<string, unknown> & {
     account?: string;
     issuer?: string;
   };
-  'org.matrix.msc4143.rtc_foci'?: [
-    {
-      livekit_service_url: string;
-      type: 'livekit';
-    },
-  ];
+  'org.matrix.msc4143.rtc_foci'?: LivekitTransportConfig[];
+};
+
+export const getLivekitTransports = (
+  discovery: Pick<AutoDiscoveryInfo, 'org.matrix.msc4143.rtc_foci'> | undefined
+): LivekitTransportConfig[] => {
+  const foci = discovery?.['org.matrix.msc4143.rtc_foci'];
+  if (!Array.isArray(foci)) return [];
+
+  return foci.filter(
+    (focus): focus is LivekitTransportConfig =>
+      typeof focus === 'object' &&
+      focus !== null &&
+      focus.type === 'livekit' &&
+      typeof focus.livekit_service_url === 'string'
+  );
 };
 
 export const autoDiscovery = async (
diff --git a/src/app/features/call/livekitProvisioning.test.ts b/src/app/features/call/livekitProvisioning.test.ts
new file mode 100644
index 0000000000..17fc5041f2
--- /dev/null
+++ b/src/app/features/call/livekitProvisioning.test.ts
@@ -0,0 +1,142 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import type { IOpenIDToken, MatrixClient } from '$types/matrix-sdk';
+
+const fetchMock = vi.hoisted(() => vi.fn<typeof globalThis.fetch>());
+
+vi.mock('$utils/fetch', () => ({ fetch: fetchMock }));
+
+import { getPreferredLivekitTransport, provisionLivekitToken } from './livekitProvisioning';
+
+const openidToken: IOpenIDToken = {
+  access_token: 'openid-secret',
+  token_type: 'Bearer',
+  matrix_server_name: 'example.org',
+  expires_in: 3600,
+};
+
+const response = (status: number, body: unknown): Response =>
+  new Response(JSON.stringify(body), { status });
+
+type TestClient = Pick<MatrixClient, 'getOpenIdToken' | '_unstable_getRTCTransports'>;
+
+const client = (overrides: Partial<TestClient> = {}): TestClient => ({
+  getOpenIdToken: vi.fn<MatrixClient['getOpenIdToken']>().mockResolvedValue(openidToken),
+  _unstable_getRTCTransports: vi
+    .fn<MatrixClient['_unstable_getRTCTransports']>()
+    .mockResolvedValue([]),
+  ...overrides,
+});
+
+describe('getPreferredLivekitTransport', () => {
+  it('prefers the SDK LiveKit transport over discovery', async () => {
+    const mx = client({
+      _unstable_getRTCTransports: vi
+        .fn<MatrixClient['_unstable_getRTCTransports']>()
+        .mockResolvedValue([{ type: 'livekit', livekit_service_url: 'https://sdk.example' }]),
+    });
+
+    await expect(
+      getPreferredLivekitTransport(mx, {
+        'org.matrix.msc4143.rtc_foci': [
+          { type: 'livekit', livekit_service_url: 'https://discovery.example' },
+        ],
+      })
+    ).resolves.toEqual({ type: 'livekit', livekit_service_url: 'https://sdk.example' });
+  });
+
+  it('falls back to discovery when SDK transport discovery fails', async () => {
+    const mx = client({
+      _unstable_getRTCTransports: vi
+        .fn<MatrixClient['_unstable_getRTCTransports']>()
+        .mockRejectedValue(new Error('unsupported')),
+    });
+
+    await expect(
+      getPreferredLivekitTransport(mx, {
+        'org.matrix.msc4143.rtc_foci': [
+          { type: 'livekit', livekit_service_url: 'https://discovery.example' },
+        ],
+      })
+    ).resolves.toEqual({ type: 'livekit', livekit_service_url: 'https://discovery.example' });
+  });
+});
+
+describe('provisionLivekitToken', () => {
+  beforeEach(() => {
+    fetchMock.mockReset();
+  });
+
+  const options = {
+    mx: client(),
+    roomId: '!room:example.org',
+    deviceId: 'DEVICE',
+    serviceUrl: 'https://sfu.example///',
+    memberId: 'member-id',
+    userId: '@alice:example.org',
+  };
+
+  it('provisions through the modern endpoint with the MatrixRTC request body', async () => {
+    fetchMock.mockResolvedValueOnce(
+      response(200, { url: 'wss://livekit.example', jwt: 'jwt-secret' })
+    );
+
+    await expect(provisionLivekitToken(options)).resolves.toEqual({
+      url: 'wss://livekit.example',
+      jwt: 'jwt-secret',
+    });
+
+    expect(fetchMock).toHaveBeenCalledOnce();
+    const [url, request] = fetchMock.mock.calls[0] as [string, RequestInit];
+    expect(url).toBe('https://sfu.example/get_token');
+    expect(JSON.parse(request.body as string)).toEqual({
+      room_id: '!room:example.org',
+      slot_id: 'm.call#!room:example.org',
+      openid_token: openidToken,
+      member: {
+        id: 'member-id',
+        claimed_user_id: '@alice:example.org',
+        claimed_device_id: 'DEVICE',
+      },
+    });
+  });
+
+  it('falls back to the legacy endpoint after a modern request failure', async () => {
+    fetchMock
+      .mockResolvedValueOnce(response(404, { error: 'not found' }))
+      .mockResolvedValueOnce(response(200, { url: 'wss://legacy.example', jwt: 'legacy-jwt' }));
+
+    await expect(provisionLivekitToken(options)).resolves.toEqual({
+      url: 'wss://legacy.example',
+      jwt: 'legacy-jwt',
+    });
+
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+    const [url, request] = fetchMock.mock.calls[1] as [string, RequestInit];
+    expect(url).toBe('https://sfu.example/sfu/get');
+    expect(JSON.parse(request.body as string)).toEqual({
+      room: '!room:example.org',
+      openid_token: openidToken,
+      device_id: 'DEVICE',
+    });
+  });
+
+  it('rejects invalid responses after trying both endpoints', async () => {
+    fetchMock
+      .mockResolvedValueOnce(response(200, { url: 'wss://livekit.example' }))
+      .mockResolvedValueOnce(response(200, { jwt: 'jwt-secret' }));
+
+    await expect(provisionLivekitToken(options)).rejects.toThrow(
+      'LiveKit token provisioning failed'
+    );
+    expect(fetchMock).toHaveBeenCalledTimes(2);
+  });
+
+  it('does not expose token values in errors', async () => {
+    fetchMock.mockRejectedValue(new Error('request failed: jwt-secret openid-secret'));
+    const provisioning = provisionLivekitToken(options);
+
+    await expect(provisioning).rejects.toThrow('LiveKit token provisioning failed');
+    await expect(provisioning).rejects.not.toThrow('openid-secret');
+    await expect(provisioning).rejects.not.toThrow('jwt-secret');
+  });
+});
diff --git a/src/app/features/call/livekitProvisioning.ts b/src/app/features/call/livekitProvisioning.ts
new file mode 100644
index 0000000000..bfab7ac86d
--- /dev/null
+++ b/src/app/features/call/livekitProvisioning.ts
@@ -0,0 +1,135 @@
+import type { AutoDiscoveryInfo } from '../../cs-api';
+import { getLivekitTransports } from '../../cs-api';
+import { fetch as appFetch } from '$utils/fetch';
+import { trimTrailingSlash } from '$utils/common';
+import type {
+  IOpenIDToken,
+  LivekitTransportConfig,
+  MatrixClient,
+  Transport,
+} from '$types/matrix-sdk';
+
+export type LivekitProvisioningOptions = {
+  mx: Pick<MatrixClient, 'getOpenIdToken'>;
+  roomId: string;
+  deviceId: string;
+  serviceUrl: string;
+  memberId?: string;
+  userId?: string;
+};
+
+export type LivekitProvisioningResult = {
+  url: string;
+  jwt: string;
+};
+
+const isLivekitTransportConfig = (transport: Transport): transport is LivekitTransportConfig =>
+  transport.type === 'livekit' && typeof transport.livekit_service_url === 'string';
+
+const isProvisioningResult = (value: unknown): value is LivekitProvisioningResult =>
+  typeof value === 'object' &&
+  value !== null &&
+  'url' in value &&
+  typeof value.url === 'string' &&
+  value.url.length > 0 &&
+  'jwt' in value &&
+  typeof value.jwt === 'string' &&
+  value.jwt.length > 0;
+
+export const getPreferredLivekitTransport = async (
+  mx: Pick<MatrixClient, '_unstable_getRTCTransports'>,
+  discovery?: Pick<AutoDiscoveryInfo, 'org.matrix.msc4143.rtc_foci'>
+): Promise<LivekitTransportConfig | undefined> => {
+  const transports = await mx['_unstable_getRTCTransports']().catch(() => undefined);
+  const livekitTransport = transports?.find(isLivekitTransportConfig);
+  if (livekitTransport) return livekitTransport;
+
+  return getLivekitTransports(discovery)[0];
+};
+
+type ModernProvisioningRequest = {
+  room_id: string;
+  slot_id: string;
+  openid_token: IOpenIDToken;
+  member?: {
+    id: string;
+    claimed_user_id: string;
+    claimed_device_id: string;
+  };
+};
+
+type LegacyProvisioningRequest = {
+  room: string;
+  openid_token: IOpenIDToken;
+  device_id: string;
+};
+
+const requestLivekitToken = async (
+  endpoint: string,
+  body: ModernProvisioningRequest | LegacyProvisioningRequest
+): Promise<LivekitProvisioningResult> => {
+  const response = await appFetch(endpoint, {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify(body),
+  });
+
+  if (response.status < 200 || response.status >= 300) {
+    throw new Error('LiveKit provisioning request failed');
+  }
+
+  const data = (await response.json()) as unknown;
+
+  if (!isProvisioningResult(data)) {
+    throw new Error('LiveKit provisioning response was invalid');
+  }
+
+  return { url: data.url, jwt: data.jwt };
+};
+
+export const provisionLivekitToken = async ({
+  mx,
+  roomId,
+  deviceId,
+  serviceUrl,
+  memberId,
+  userId,
+}: LivekitProvisioningOptions): Promise<LivekitProvisioningResult> => {
+  let openidToken: IOpenIDToken;
+  try {
+    openidToken = await mx.getOpenIdToken();
+  } catch {
+    throw new Error('Unable to obtain an OpenID token for LiveKit provisioning');
+  }
+
+  const endpoint = trimTrailingSlash(serviceUrl);
+  const modernRequest: ModernProvisioningRequest = {
+    room_id: roomId,
+    slot_id: `m.call#${roomId}`,
+    openid_token: openidToken,
+  };
+
+  if (memberId && userId && deviceId) {
+    modernRequest.member = {
+      id: memberId,
+      claimed_user_id: userId,
+      claimed_device_id: deviceId,
+    };
+  }
+
+  try {
+    return await requestLivekitToken(`${endpoint}/get_token`, modernRequest);
+  } catch {
+    const legacyRequest: LegacyProvisioningRequest = {
+      room: roomId,
+      openid_token: openidToken,
+      device_id: deviceId,
+    };
+
+    try {
+      return await requestLivekitToken(`${endpoint}/sfu/get`, legacyRequest);
+    } catch {
+      throw new Error('LiveKit token provisioning failed');
+    }
+  }
+};
diff --git a/src/app/plugins/call/callLifecycle.test.ts b/src/app/plugins/call/callLifecycle.test.ts
new file mode 100644
index 0000000000..8a213bd509
--- /dev/null
+++ b/src/app/plugins/call/callLifecycle.test.ts
@@ -0,0 +1,100 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+const pluginConnect = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
+const pluginDisconnect = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
+const pluginGetState = vi.hoisted(() => vi.fn<() => Promise<unknown>>());
+const listen = vi.hoisted(() => vi.fn<(...args: unknown[]) => Promise<unknown>>());
+
+vi.mock('tauri-plugin-call-lifecycle-api', () => ({
+  connect: pluginConnect,
+  disconnect: pluginDisconnect,
+  getState: pluginGetState,
+}));
+vi.mock('@tauri-apps/api/event', () => ({ listen }));
+
+import {
+  connect,
+  disconnect,
+  getState,
+  onError,
+  onState,
+  type CallLifecycleError,
+  type CallState,
+} from './callLifecycle';
+
+describe('call lifecycle wrapper', () => {
+  beforeEach(() => {
+    pluginConnect.mockReset();
+    pluginDisconnect.mockReset();
+    pluginGetState.mockReset();
+    listen.mockReset();
+    listen.mockResolvedValue(vi.fn());
+  });
+
+  it('delegates lifecycle commands to the guest API', async () => {
+    const state = {
+      revision: 1,
+      state: 'connecting',
+      connectionId: 'connection-id',
+    } satisfies CallState;
+    pluginConnect.mockResolvedValue(state);
+    pluginDisconnect.mockResolvedValue(state);
+    pluginGetState.mockResolvedValue(state);
+
+    const request = {
+      connectionId: 'connection-id',
+      serverUrl: 'wss://livekit.example',
+      participantToken: 'token',
+    };
+    await expect(connect(request)).resolves.toEqual(state);
+    await expect(disconnect({ connectionId: 'connection-id' })).resolves.toEqual(state);
+    await expect(getState()).resolves.toEqual(state);
+
+    expect(pluginConnect).toHaveBeenCalledWith(request);
+    expect(pluginDisconnect).toHaveBeenCalledWith({
+      connectionId: 'connection-id',
+    });
+    expect(pluginGetState).toHaveBeenCalledWith();
+  });
+
+  it('registers typed state and error listeners', async () => {
+    const state = {
+      revision: 2,
+      state: 'connected',
+      connectionId: 'connection-id',
+    } satisfies CallState;
+    const error = {
+      revision: 3,
+      code: 'connect_failed',
+      message: 'call connection failed',
+      connectionId: 'connection-id',
+    } satisfies CallLifecycleError;
+    const onStateEvent = vi.fn<(value: CallState) => void>();
+    const onErrorEvent = vi.fn<(value: CallLifecycleError) => void>();
+
+    const stateUnlisten = await onState(onStateEvent);
+    const stateListener = listen.mock.calls[0]?.[1] as (event: { payload: CallState }) => void;
+    stateListener({ payload: state });
+
+    const errorUnlisten = await onError(onErrorEvent);
+    const errorListener = listen.mock.calls[1]?.[1] as (event: {
+      payload: CallLifecycleError;
+    }) => void;
+    errorListener({ payload: error });
+
+    expect(listen).toHaveBeenNthCalledWith(
+      1,
+      'plugin:call-lifecycle://state',
+      expect.any(Function)
+    );
+    expect(listen).toHaveBeenNthCalledWith(
+      2,
+      'plugin:call-lifecycle://error',
+      expect.any(Function)
+    );
+    expect(onStateEvent).toHaveBeenCalledWith(state);
+    expect(onErrorEvent).toHaveBeenCalledWith(error);
+    expect(stateUnlisten).toBeTypeOf('function');
+    expect(errorUnlisten).toBeTypeOf('function');
+  });
+});
diff --git a/src/app/plugins/call/callLifecycle.ts b/src/app/plugins/call/callLifecycle.ts
new file mode 100644
index 0000000000..dc2d201619
--- /dev/null
+++ b/src/app/plugins/call/callLifecycle.ts
@@ -0,0 +1,28 @@
+import {
+  connect as pluginConnect,
+  disconnect as pluginDisconnect,
+  getState as pluginGetState,
+  type CallLifecycleError,
+  type CallState,
+  type ConnectRequest,
+  type ConnectionState,
+  type DisconnectRequest,
+} from 'tauri-plugin-call-lifecycle-api';
+import { listen, type UnlistenFn } from '@tauri-apps/api/event';
+
+const STATE_EVENT = 'plugin:call-lifecycle://state';
+const ERROR_EVENT = 'plugin:call-lifecycle://error';
+
+export type { CallLifecycleError, CallState, ConnectRequest, ConnectionState, DisconnectRequest };
+
+export const connect = pluginConnect;
+export const disconnect = pluginDisconnect;
+export const getState = pluginGetState;
+
+export function onState(handler: (state: CallState) => void): Promise<UnlistenFn> {
+  return listen<CallState>(STATE_EVENT, (event) => handler(event.payload));
+}
+
+export function onError(handler: (error: CallLifecycleError) => void): Promise<UnlistenFn> {
+  return listen<CallLifecycleError>(ERROR_EVENT, (event) => handler(event.payload));
+}
diff --git a/src/app/plugins/call/index.ts b/src/app/plugins/call/index.ts
index a4c6bb365c..8514f5beab 100644
--- a/src/app/plugins/call/index.ts
+++ b/src/app/plugins/call/index.ts
@@ -1,3 +1,4 @@
 export * from './CallEmbed';
+export * from './callLifecycle';
 export * from './hooks';
 export * from './types';
diff --git a/src/types/matrix-sdk.ts b/src/types/matrix-sdk.ts
index f1bea4e091..18cba3bd41 100644
--- a/src/types/matrix-sdk.ts
+++ b/src/types/matrix-sdk.ts
@@ -55,5 +55,11 @@ export * from 'matrix-js-sdk/lib/common-crypto/CryptoBackend';
 export * from 'matrix-js-sdk/lib/matrixrtc/CallMembership';
 export * from 'matrix-js-sdk/lib/matrixrtc/MatrixRTCSession';
 export * from 'matrix-js-sdk/lib/matrixrtc/MatrixRTCSessionManager';
+export { type CallMembershipIdentityParts } from 'matrix-js-sdk/lib/matrixrtc/EncryptionManager';
+export {
+  type LivekitTransport,
+  type LivekitTransportConfig,
+} from 'matrix-js-sdk/lib/matrixrtc/LivekitTransport';
+export { type Transport } from 'matrix-js-sdk/lib/matrixrtc/types';
 
 export * from 'matrix-js-sdk/lib/models/thread';

From 433867399ccdca89671c50fb04cbf0aa5134a0be Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 00:05:19 +0200
Subject: [PATCH 2/9] feat(call): add native transport probe

---
 .gitignore                                    |   3 +
 src-tauri/Cargo.lock                          |   8 +
 .../tauri-plugin-call-lifecycle/Cargo.toml    |   4 +-
 src/app/features/call/CallView.tsx            |  50 +-
 .../features/call/livekitProvisioning.test.ts |   3 +-
 src/app/features/call/livekitProvisioning.ts  |   4 +-
 .../call/nativeCallController.test.ts         | 483 ++++++++++++++++++
 src/app/features/call/nativeCallController.ts | 387 ++++++++++++++
 src/app/features/call/nativeCallProbe.test.ts |  41 ++
 src/app/features/call/nativeCallProbe.ts      |  17 +
 src/app/features/call/useCallSignaling.ts     |  31 +-
 src/app/features/room/RoomView.tsx            |   6 +-
 src/app/hooks/useCallEmbed.ts                 |  47 +-
 src/app/state/nativeCall.ts                   |  16 +
 14 files changed, 1078 insertions(+), 22 deletions(-)
 create mode 100644 src/app/features/call/nativeCallController.test.ts
 create mode 100644 src/app/features/call/nativeCallController.ts
 create mode 100644 src/app/features/call/nativeCallProbe.test.ts
 create mode 100644 src/app/features/call/nativeCallProbe.ts
 create mode 100644 src/app/state/nativeCall.ts

diff --git a/.gitignore b/.gitignore
index 96e0abe449..73e50380a8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -69,3 +69,6 @@ result
 .direnv
 ## auto-generated pre-commit config
 .pre-commit-config.yaml
+
+# Local deepwork state
+.slim/deepwork/
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index f1d1bd48a5..bbfdcc68c8 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -3748,6 +3748,7 @@ dependencies = [
  "prost",
  "rand 0.9.5",
  "reqwest 0.12.28",
+ "rustls-native-certs",
  "scopeguard",
  "serde",
  "serde_json",
@@ -3755,6 +3756,7 @@ dependencies = [
  "signature",
  "thiserror 2.0.19",
  "tokio",
+ "tokio-rustls",
  "tokio-tungstenite",
  "url",
 ]
@@ -7876,7 +7878,11 @@ checksum = "8f72a05e828585856dacd553fba484c242c46e391fb0e58917c942ee9202915c"
 dependencies = [
  "futures-util",
  "log",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-pki-types",
  "tokio",
+ "tokio-rustls",
  "tungstenite",
 ]
 
@@ -8298,6 +8304,8 @@ dependencies = [
  "httparse",
  "log",
  "rand 0.9.5",
+ "rustls",
+ "rustls-pki-types",
  "sha1",
  "thiserror 2.0.19",
  "url",
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
index fe3358b727..10f24d4cbe 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
@@ -9,8 +9,8 @@ exclude = ["/examples", "/dist-js", "/guest-js", "/node_modules"]
 links = "tauri-plugin-call-lifecycle"
 
 [dependencies]
-tauri = { version = "2.11.3" }
-livekit = "0.7"
+tauri = { version = "2.11.3", default-features = false }
+livekit = { version = "0.7", features = ["rustls-tls-native-roots"] }
 secrecy = { version = "0.10", features = ["serde"] }
 serde = "1.0"
 thiserror = "2"
diff --git a/src/app/features/call/CallView.tsx b/src/app/features/call/CallView.tsx
index 62d79cd6d7..012e07078e 100644
--- a/src/app/features/call/CallView.tsx
+++ b/src/app/features/call/CallView.tsx
@@ -1,5 +1,5 @@
 import { useCallback, useEffect, useRef, useState, type RefObject } from 'react';
-import { Badge, Box, color, Header, Scroll, Text, toRem } from 'folds';
+import { Badge, Box, Button, color, Header, Scroll, Text, toRem } from 'folds';
 import { useAtomValue } from 'jotai';
 import { ContainerColor } from '$styles/ContainerColor.css';
 import { useRoom } from '$hooks/useRoom';
@@ -13,6 +13,8 @@ import { CallMemberRenderer } from './CallMemberCard';
 import { PrescreenControls } from './PrescreenControls';
 import { callEmbedAtom, callEmbedStartErrorAtom } from '$state/callEmbed';
 import { canJoinCall } from './callStartCapabilities';
+import { nativeCallAtom } from '$state/nativeCall';
+import { isDesktopTauri } from '$utils/platform';
 
 function LivekitServerMissingMessage() {
   return (
@@ -80,6 +82,35 @@ function WidgetPreparationErrorMessage({ message }: { message: string }) {
   );
 }
 
+function NativeCallProbe({
+  lifecycle,
+  error,
+  onHangup,
+}: {
+  lifecycle: string;
+  error?: string;
+  onHangup: () => void;
+}) {
+  return (
+    <Box alignItems="Center" justifyContent="Center" direction="Column" gap="200" grow="Yes">
+      <Text size="L400">Native call: {lifecycle}</Text>
+      <Text size="T300" align="Center">
+        Media is not implemented.
+      </Text>
+      {error && (
+        <Text style={{ color: color.Critical.Main }} size="T300" align="Center">
+          {error}
+        </Text>
+      )}
+      <Button size="300" variant="Critical" fill="Soft" radii="300" onClick={onHangup}>
+        <Text as="span" size="B300">
+          End
+        </Text>
+      </Button>
+    </Box>
+  );
+}
+
 function CallPrescreen() {
   const room = useRoom();
   const callEmbed = useAtomValue(callEmbedAtom);
@@ -168,8 +199,11 @@ export function CallView({ resizable }: CallViewProps) {
 
   const callEmbed = useCallEmbed();
   const callJoined = useCallJoined(callEmbed);
+  const nativeCall = useAtomValue(nativeCallAtom);
 
-  const currentJoined = callEmbed?.roomId === room.roomId && callJoined;
+  const nativeCallForRoom =
+    isDesktopTauri() && nativeCall?.roomId === room.roomId ? nativeCall : undefined;
+  const currentJoined = !nativeCallForRoom && callEmbed?.roomId === room.roomId && callJoined;
 
   const [heightRatio, setHeightRatio] = useState(isMobile ? 0.3 : 0.72);
   const [availableHeight, setAvailableHeight] = useState(0);
@@ -284,8 +318,16 @@ export function CallView({ resizable }: CallViewProps) {
         />
       )}
 
-      {!currentJoined && <CallPrescreen />}
-      <CallJoined containerRef={callContainerRef} />
+      {!currentJoined && !nativeCallForRoom && <CallPrescreen />}
+      {nativeCallForRoom ? (
+        <NativeCallProbe
+          lifecycle={nativeCallForRoom.lifecycle}
+          error={nativeCallForRoom.error}
+          onHangup={() => void nativeCallForRoom.hangup()}
+        />
+      ) : (
+        <CallJoined containerRef={callContainerRef} />
+      )}
 
       {resizable && (
         <button
diff --git a/src/app/features/call/livekitProvisioning.test.ts b/src/app/features/call/livekitProvisioning.test.ts
index 17fc5041f2..6ea7c96a7f 100644
--- a/src/app/features/call/livekitProvisioning.test.ts
+++ b/src/app/features/call/livekitProvisioning.test.ts
@@ -69,6 +69,7 @@ describe('provisionLivekitToken', () => {
   const options = {
     mx: client(),
     roomId: '!room:example.org',
+    slotId: 'm.call#real-slot',
     deviceId: 'DEVICE',
     serviceUrl: 'https://sfu.example///',
     memberId: 'member-id',
@@ -90,7 +91,7 @@ describe('provisionLivekitToken', () => {
     expect(url).toBe('https://sfu.example/get_token');
     expect(JSON.parse(request.body as string)).toEqual({
       room_id: '!room:example.org',
-      slot_id: 'm.call#!room:example.org',
+      slot_id: 'm.call#real-slot',
       openid_token: openidToken,
       member: {
         id: 'member-id',
diff --git a/src/app/features/call/livekitProvisioning.ts b/src/app/features/call/livekitProvisioning.ts
index bfab7ac86d..f767ac3d67 100644
--- a/src/app/features/call/livekitProvisioning.ts
+++ b/src/app/features/call/livekitProvisioning.ts
@@ -12,6 +12,7 @@ import type {
 export type LivekitProvisioningOptions = {
   mx: Pick<MatrixClient, 'getOpenIdToken'>;
   roomId: string;
+  slotId: string;
   deviceId: string;
   serviceUrl: string;
   memberId?: string;
@@ -90,6 +91,7 @@ const requestLivekitToken = async (
 export const provisionLivekitToken = async ({
   mx,
   roomId,
+  slotId,
   deviceId,
   serviceUrl,
   memberId,
@@ -105,7 +107,7 @@ export const provisionLivekitToken = async ({
   const endpoint = trimTrailingSlash(serviceUrl);
   const modernRequest: ModernProvisioningRequest = {
     room_id: roomId,
-    slot_id: `m.call#${roomId}`,
+    slot_id: slotId,
     openid_token: openidToken,
   };
 
diff --git a/src/app/features/call/nativeCallController.test.ts b/src/app/features/call/nativeCallController.test.ts
new file mode 100644
index 0000000000..a61224e071
--- /dev/null
+++ b/src/app/features/call/nativeCallController.test.ts
@@ -0,0 +1,483 @@
+import { describe, expect, it, vi } from 'vitest';
+import { MatrixRTCSessionEvent, type CallMembership } from '$types/matrix-sdk';
+import type { MatrixClient, MatrixRTCSession, Room } from '$types/matrix-sdk';
+import { createNativeCallController } from './nativeCallController';
+import type { NativeCallSession } from '$state/nativeCall';
+import type { CallLifecycleError, CallState } from '$plugins/call/callLifecycle';
+
+const room = { roomId: '!room:example.org' } as Room;
+
+const makeSession = (slotId = 'm.call#real-slot') =>
+  ({
+    slotId,
+    joinRTCSession:
+      vi.fn<
+        (identity: unknown, transports: unknown[], multiSfu?: unknown, config?: unknown) => void
+      >(),
+    leaveRoomSession: vi.fn<MatrixRTCSession['leaveRoomSession']>().mockResolvedValue(true),
+    on: vi.fn<(...args: unknown[]) => void>(),
+    removeListener: vi.fn<(...args: unknown[]) => void>(),
+  }) as unknown as MatrixRTCSession;
+
+const makeClient = (session: MatrixRTCSession) =>
+  ({
+    getDeviceId: () => 'DEVICE',
+    getSafeUserId: () => '@alice:example.org',
+    matrixRTC: { getRoomSession: () => session },
+  }) as unknown as MatrixClient;
+
+const transport = { type: 'livekit' as const, livekit_service_url: 'https://sfu.example' };
+const ownMembership = { userId: '@alice:example.org', deviceId: 'DEVICE' } as CallMembership;
+
+const waitForMembershipListener = async (session: MatrixRTCSession): Promise<void> => {
+  await vi.waitFor(() =>
+    expect(session.on).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.MembershipsChanged,
+      expect.any(Function)
+    )
+  );
+};
+
+const emitOwnMembership = (session: MatrixRTCSession): void => {
+  const handler = vi
+    .mocked(session.on)
+    .mock.calls.find(([event]) => event === MatrixRTCSessionEvent.MembershipsChanged)?.[1] as
+    | ((oldMemberships: CallMembership[], memberships: CallMembership[]) => void)
+    | undefined;
+  handler?.([], [ownMembership]);
+};
+
+const emitMembershipManagerError = (session: MatrixRTCSession): void => {
+  const handler = vi
+    .mocked(session.on)
+    .mock.calls.find(([event]) => event === MatrixRTCSessionEvent.MembershipManagerError)?.[1] as
+    | ((error: unknown) => void)
+    | undefined;
+  handler?.(new Error('secret-membership-error'));
+};
+
+const waitForMembershipErrorListener = async (session: MatrixRTCSession): Promise<void> => {
+  await vi.waitFor(() =>
+    expect(session.on).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.MembershipManagerError,
+      expect.any(Function)
+    )
+  );
+};
+
+describe('native call controller', () => {
+  it('joins with one identity, provisions the session slot, then connects', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    const order: string[] = [];
+    vi.mocked(session.joinRTCSession).mockImplementation(() => order.push('join'));
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      onState: async () => vi.fn<() => void>(),
+      onError: async () => vi.fn<() => void>(),
+      getPreferredTransport: async () => transport,
+      provisionToken: async (options) => {
+        order.push('provision');
+        expect(options.slotId).toBe('m.call#real-slot');
+        expect(options.memberId).toBe('@alice:example.org:DEVICE');
+        return { url: 'wss://livekit.example', jwt: 'jwt' };
+      },
+      connect: async () => {
+        order.push('connect');
+        return { revision: 1, state: 'connected', connectionId: 'connection-id' };
+      },
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    expect(order).toEqual(['join']);
+    emitOwnMembership(session);
+    await startPromise;
+
+    expect(session.joinRTCSession).toHaveBeenCalledWith(
+      {
+        userId: '@alice:example.org',
+        deviceId: 'DEVICE',
+        memberId: '@alice:example.org:DEVICE',
+      },
+      [transport],
+      undefined,
+      {
+        callIntent: 'audio',
+        notificationType: 'notification',
+      }
+    );
+    expect(order).toEqual(['join', 'provision', 'connect']);
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({
+        roomId: room.roomId,
+        connectionId: 'connection-id',
+        lifecycle: 'connected',
+      })
+    );
+  });
+
+  it('disconnects and leaves when provisioning fails without exposing the failure', async () => {
+    const session = makeSession();
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 1, state: 'idle', connectionId: null });
+    const stateUnlisten = vi.fn<() => void>();
+    const errorUnlisten = vi.fn<() => void>();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async (handler: (state: CallState) => void) => {
+        void handler;
+        return stateUnlisten;
+      },
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        void handler;
+        return errorUnlisten;
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => {
+        throw new Error('openid-secret jwt-secret');
+      },
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+
+    expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' });
+    expect(session.leaveRoomSession).toHaveBeenCalledWith(5000);
+    expect(stateUnlisten).toHaveBeenCalled();
+    expect(errorUnlisten).toHaveBeenCalled();
+    expect(session.removeListener).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.MembershipsChanged,
+      expect.any(Function)
+    );
+    expect(session.removeListener).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.MembershipManagerError,
+      expect.any(Function)
+    );
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({
+        lifecycle: 'error',
+        error: 'Native call setup failed during token provisioning.',
+      })
+    );
+    expect(setSession.mock.calls.flat()).not.toContain('openid-secret');
+    expect(setSession.mock.calls.flat()).not.toContain('jwt-secret');
+  });
+
+  it('cleans up when the membership manager fails before publication', async () => {
+    const session = makeSession();
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 1, state: 'idle', connectionId: null });
+    const stateUnlisten = vi.fn<() => void>();
+    const errorUnlisten = vi.fn<() => void>();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    const provisionToken = vi.fn<() => Promise<{ url: string; jwt: string }>>(async () => ({
+      url: 'wss://livekit.example',
+      jwt: 'jwt',
+    }));
+    const connect = vi.fn<
+      () => Promise<{ revision: number; state: 'connected'; connectionId: string }>
+    >(async () => ({
+      revision: 1,
+      state: 'connected' as const,
+      connectionId: 'connection-id',
+    }));
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => stateUnlisten,
+      onError: async () => errorUnlisten,
+      getPreferredTransport: async () => transport,
+      provisionToken,
+      connect,
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    await waitForMembershipErrorListener(session);
+    emitMembershipManagerError(session);
+    await startPromise;
+
+    expect(provisionToken).not.toHaveBeenCalled();
+    expect(connect).not.toHaveBeenCalled();
+    expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' });
+    expect(session.leaveRoomSession).toHaveBeenCalledWith(5000);
+    expect(stateUnlisten).toHaveBeenCalled();
+    expect(errorUnlisten).toHaveBeenCalled();
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({
+        lifecycle: 'error',
+        error: 'Native call setup failed during MatrixRTC.',
+      })
+    );
+    expect(setSession.mock.calls.flat()).not.toContain('secret-membership-error');
+  });
+
+  it('cleans up when local membership publication times out', async () => {
+    vi.useFakeTimers();
+    try {
+      const session = makeSession();
+      const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+      disconnect.mockResolvedValue({ revision: 1, state: 'idle', connectionId: null });
+      const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+      const provisionToken = vi.fn<() => Promise<{ url: string; jwt: string }>>(async () => ({
+        url: 'wss://livekit.example',
+        jwt: 'jwt',
+      }));
+      const connect = vi.fn<
+        () => Promise<{ revision: number; state: 'connected'; connectionId: string }>
+      >(async () => ({
+        revision: 1,
+        state: 'connected' as const,
+        connectionId: 'connection-id',
+      }));
+      const controller = createNativeCallController({
+        setSession,
+        connectionId: () => 'connection-id',
+        disconnect,
+        onState: async () => vi.fn<() => void>(),
+        onError: async () => vi.fn<() => void>(),
+        getPreferredTransport: async () => transport,
+        provisionToken,
+        connect,
+      });
+
+      const startPromise = controller.start({
+        mx: makeClient(session),
+        room,
+        elementCallActive: false,
+        dm: false,
+        video: false,
+        ongoing: false,
+      });
+      await waitForMembershipListener(session);
+      await vi.advanceTimersByTimeAsync(10_000);
+      await startPromise;
+
+      expect(provisionToken).not.toHaveBeenCalled();
+      expect(connect).not.toHaveBeenCalled();
+      expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' });
+      expect(session.leaveRoomSession).toHaveBeenCalledWith(5000);
+      expect(session.removeListener).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipsChanged,
+        expect.any(Function)
+      );
+      expect(session.removeListener).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipManagerError,
+        expect.any(Function)
+      );
+      expect(setSession).toHaveBeenLastCalledWith(
+        expect.objectContaining({
+          lifecycle: 'error',
+          error: 'Native call setup failed during MatrixRTC.',
+        })
+      );
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  it.each(['device lookup', 'connection id generation', 'session lookup'])(
+    'publishes a safe error when %s fails before record creation',
+    async (operation) => {
+      const session = makeSession();
+      const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+      const mx = makeClient(session);
+      if (operation === 'device lookup') {
+        vi.spyOn(mx, 'getDeviceId').mockImplementation(() => {
+          throw new Error('secret-device');
+        });
+      }
+      if (operation === 'session lookup') {
+        vi.spyOn(mx.matrixRTC, 'getRoomSession').mockImplementation(() => {
+          throw new Error('secret-session');
+        });
+      }
+      const controller = createNativeCallController({
+        setSession,
+        connectionId:
+          operation === 'connection id generation'
+            ? () => {
+                throw new Error('secret-connection');
+              }
+            : () => 'connection-id',
+      });
+
+      await controller.start({
+        mx,
+        room,
+        elementCallActive: false,
+        dm: false,
+        video: false,
+        ongoing: false,
+      });
+
+      expect(setSession).toHaveBeenLastCalledWith(
+        expect.objectContaining({
+          lifecycle: 'error',
+          error: 'Native call setup failed during MatrixRTC.',
+        })
+      );
+      expect(setSession.mock.calls.flat()).not.toContain('secret-device');
+      expect(setSession.mock.calls.flat()).not.toContain('secret-connection');
+      expect(setSession.mock.calls.flat()).not.toContain('secret-session');
+    }
+  );
+
+  it('attempts both sides of cleanup when hangup operations fail', async () => {
+    const session = makeSession();
+    session.leaveRoomSession = vi
+      .fn<MatrixRTCSession['leaveRoomSession']>()
+      .mockRejectedValue(new Error('leave failed'));
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockRejectedValue(new Error('disconnect failed'));
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async () => vi.fn<() => void>(),
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 1, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    await setSession.mock.lastCall?.[0]?.hangup();
+
+    expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' });
+    expect(session.leaveRoomSession).toHaveBeenCalledWith(5000);
+    expect(setSession).toHaveBeenLastCalledWith(undefined);
+  });
+
+  it('uses a ring notification for a new DM and no notification when joining', async () => {
+    const start = async (dm: boolean, ongoing: boolean) => {
+      const session = makeSession();
+      const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+      const controller = createNativeCallController({
+        setSession,
+        connectionId: () => `${dm}-${ongoing}`,
+        onState: async () => vi.fn<() => void>(),
+        onError: async () => vi.fn<() => void>(),
+        getPreferredTransport: async () => transport,
+        provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+        connect: async () => ({
+          revision: 1,
+          state: 'connected',
+          connectionId: `${dm}-${ongoing}`,
+        }),
+      });
+
+      const startPromise = controller.start({
+        mx: makeClient(session),
+        room,
+        elementCallActive: false,
+        dm,
+        video: true,
+        ongoing,
+      });
+      await waitForMembershipListener(session);
+      emitOwnMembership(session);
+      await startPromise;
+      return session;
+    };
+
+    const newDmSession = await start(true, false);
+    expect(newDmSession.joinRTCSession).toHaveBeenCalledWith(
+      expect.any(Object),
+      [transport],
+      undefined,
+      {
+        callIntent: 'video',
+        notificationType: 'ring',
+      }
+    );
+
+    const joinedSession = await start(false, true);
+    expect(joinedSession.joinRTCSession).toHaveBeenCalledWith(
+      expect.any(Object),
+      [transport],
+      undefined,
+      { callIntent: 'video' }
+    );
+  });
+
+  it('accepts an anonymous idle only after its own connection state was observed', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let stateHandler: ((state: CallState) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async (handler: (state: CallState) => void) => {
+        stateHandler = handler;
+        return vi.fn<() => void>();
+      },
+      onError: async () => vi.fn<() => void>(),
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    stateHandler?.({ revision: 3, state: 'idle', connectionId: null });
+
+    await vi.waitFor(() => expect(session.leaveRoomSession).toHaveBeenCalledWith(5000));
+    expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' });
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({ lifecycle: 'error', error: 'Native call ended.' })
+    );
+  });
+});
diff --git a/src/app/features/call/nativeCallController.ts b/src/app/features/call/nativeCallController.ts
new file mode 100644
index 0000000000..691b9c7ae3
--- /dev/null
+++ b/src/app/features/call/nativeCallController.ts
@@ -0,0 +1,387 @@
+import type { AutoDiscoveryInfo } from '../../cs-api';
+import {
+  MatrixRTCSessionEvent,
+  type CallMembership,
+  type JoinSessionConfig,
+  type MatrixClient,
+  type MatrixRTCSession,
+  type Room,
+} from '$types/matrix-sdk';
+import {
+  connect,
+  disconnect,
+  onError,
+  onState,
+  type CallLifecycleError,
+  type CallState,
+  type ConnectionState,
+} from '$plugins/call/callLifecycle';
+import { getPreferredLivekitTransport, provisionLivekitToken } from './livekitProvisioning';
+import type { NativeCallLifecycle, NativeCallSession } from '$state/nativeCall';
+
+type SetNativeCall = (session: NativeCallSession | undefined) => void;
+
+type NativeCallControllerDependencies = {
+  setSession: SetNativeCall;
+  connect: typeof connect;
+  disconnect: typeof disconnect;
+  onState: typeof onState;
+  onError: typeof onError;
+  getPreferredTransport: typeof getPreferredLivekitTransport;
+  provisionToken: typeof provisionLivekitToken;
+  connectionId?: () => string;
+};
+
+type NativeCallStartOptions = {
+  mx: MatrixClient;
+  room: Room;
+  discovery?: Pick<AutoDiscoveryInfo, 'org.matrix.msc4143.rtc_foci'>;
+  elementCallActive: boolean;
+  dm: boolean;
+  video: boolean;
+  ongoing: boolean;
+};
+
+type NativeCallRecord = {
+  roomId: string;
+  connectionId: string;
+  session: MatrixRTCSession;
+  cancelled: boolean;
+  observedActiveState: boolean;
+  stateUnlistenPromise?: ReturnType<NativeCallControllerDependencies['onState']>;
+  errorUnlistenPromise?: ReturnType<NativeCallControllerDependencies['onError']>;
+  cancelMembershipWait?: () => void;
+  cleanupPromise?: Promise<void>;
+};
+
+const errorMessage = 'Native call setup failed.';
+const endedMessage = 'Native call ended.';
+
+type SetupStage = 'MatrixRTC' | 'LiveKit transport' | 'token provisioning' | 'LiveKit connection';
+
+const membershipWaitTimeoutMs = 10_000;
+
+type MembershipWait = {
+  promise: Promise<void>;
+  cancel: () => void;
+};
+
+const waitForOwnMembership = (
+  session: MatrixRTCSession,
+  userId: string,
+  deviceId: string
+): MembershipWait => {
+  let resolveWait!: () => void;
+  let rejectWait!: (reason?: unknown) => void;
+  let settled = false;
+  let timeout: ReturnType<typeof setTimeout> | undefined;
+  let membershipsListenerInstalled = false;
+  let membershipErrorListenerInstalled = false;
+
+  const removeListeners = (): void => {
+    if (membershipsListenerInstalled) {
+      try {
+        session.removeListener(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
+      } catch {}
+      membershipsListenerInstalled = false;
+    }
+    if (membershipErrorListenerInstalled) {
+      try {
+        session.removeListener(
+          MatrixRTCSessionEvent.MembershipManagerError,
+          handleMembershipManagerError
+        );
+      } catch {}
+      membershipErrorListenerInstalled = false;
+    }
+  };
+
+  const settle = (settlePromise: () => void): void => {
+    if (settled) return;
+    settled = true;
+    if (timeout !== undefined) clearTimeout(timeout);
+    removeListeners();
+    settlePromise();
+  };
+
+  const handleMembershipsChanged = (
+    _oldMemberships: CallMembership[],
+    memberships: CallMembership[]
+  ): void => {
+    if (
+      memberships.some(
+        (membership) => membership.userId === userId && membership.deviceId === deviceId
+      )
+    ) {
+      settle(resolveWait);
+    }
+  };
+
+  const handleMembershipManagerError = (): void => {
+    settle(() => rejectWait(new Error('MatrixRTC membership publication failed')));
+  };
+
+  const promise = new Promise<void>((resolve, reject) => {
+    resolveWait = resolve;
+    rejectWait = reject;
+  });
+
+  try {
+    session.on(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
+    membershipsListenerInstalled = true;
+    session.on(MatrixRTCSessionEvent.MembershipManagerError, handleMembershipManagerError);
+    membershipErrorListenerInstalled = true;
+    timeout = setTimeout(
+      () => settle(() => rejectWait(new Error('MatrixRTC membership publication timed out'))),
+      membershipWaitTimeoutMs
+    );
+  } catch {
+    settle(() => rejectWait(new Error('MatrixRTC membership listener setup failed')));
+  }
+
+  return {
+    promise,
+    cancel: () => settle(() => rejectWait(new Error('MatrixRTC membership wait cancelled'))),
+  };
+};
+
+const setupErrorMessage = (stage: SetupStage): string =>
+  `Native call setup failed during ${stage}.`;
+
+const isTerminalState = (state: ConnectionState): boolean => state === 'idle';
+
+const isMatchingConnection = (connectionId: string | null, record: NativeCallRecord): boolean =>
+  connectionId === record.connectionId;
+
+const toLifecycle = (state: ConnectionState): NativeCallLifecycle | undefined => {
+  if (state === 'connecting' || state === 'connected' || state === 'reconnecting') return state;
+  return undefined;
+};
+
+export const createNativeCallController = (
+  dependencies: Pick<NativeCallControllerDependencies, 'setSession'> &
+    Partial<
+      Pick<
+        NativeCallControllerDependencies,
+        | 'connect'
+        | 'disconnect'
+        | 'onState'
+        | 'onError'
+        | 'getPreferredTransport'
+        | 'provisionToken'
+        | 'connectionId'
+      >
+    >
+) => {
+  const deps: NativeCallControllerDependencies = {
+    ...dependencies,
+    connect: dependencies.connect ?? connect,
+    disconnect: dependencies.disconnect ?? disconnect,
+    onState: dependencies.onState ?? onState,
+    onError: dependencies.onError ?? onError,
+    getPreferredTransport: dependencies.getPreferredTransport ?? getPreferredLivekitTransport,
+    provisionToken: dependencies.provisionToken ?? provisionLivekitToken,
+    connectionId: dependencies.connectionId ?? (() => crypto.randomUUID()),
+  };
+  let activeRecord: NativeCallRecord | undefined;
+  let displayedRecord: NativeCallRecord | undefined;
+
+  const isCurrent = (record: NativeCallRecord): boolean =>
+    activeRecord === record && !record.cancelled;
+
+  const setSetupError = (roomId: string, error = errorMessage, connectionId = ''): void => {
+    try {
+      deps.setSession({
+        roomId,
+        connectionId,
+        lifecycle: 'error',
+        error,
+        hangup: async () => {
+          try {
+            deps.setSession(undefined);
+          } catch {}
+        },
+      });
+    } catch {}
+  };
+
+  const publish = (
+    record: NativeCallRecord,
+    lifecycle: NativeCallLifecycle,
+    error?: string
+  ): void => {
+    if (!isCurrent(record)) return;
+    deps.setSession({
+      roomId: record.roomId,
+      connectionId: record.connectionId,
+      lifecycle,
+      ...(error ? { error } : {}),
+      hangup: () => cleanup(record, undefined, true),
+    });
+    displayedRecord = record;
+  };
+
+  const cleanup = async (
+    record: NativeCallRecord,
+    failure: string | undefined,
+    clear: boolean
+  ): Promise<void> => {
+    if (record.cleanupPromise) {
+      await record.cleanupPromise;
+      if (clear && displayedRecord === record) {
+        displayedRecord = undefined;
+        try {
+          deps.setSession(undefined);
+        } catch {}
+      }
+      return;
+    }
+
+    record.cancelled = true;
+    record.cancelMembershipWait?.();
+    record.cancelMembershipWait = undefined;
+    if (failure && activeRecord === record) {
+      try {
+        deps.setSession({
+          roomId: record.roomId,
+          connectionId: record.connectionId,
+          lifecycle: 'error',
+          error: failure,
+          hangup: () => cleanup(record, undefined, true),
+        });
+      } catch {}
+      displayedRecord = record;
+    }
+
+    record.cleanupPromise = (async () => {
+      try {
+        await deps.disconnect({ connectionId: record.connectionId });
+      } catch {}
+      try {
+        await record.session.leaveRoomSession(5000);
+      } catch {}
+      await Promise.allSettled([
+        record.stateUnlistenPromise?.then((unlisten) => unlisten()) ?? Promise.resolve(),
+        record.errorUnlistenPromise?.then((unlisten) => unlisten()) ?? Promise.resolve(),
+      ]);
+      if (activeRecord === record) {
+        activeRecord = undefined;
+      }
+      if (clear && displayedRecord === record) {
+        displayedRecord = undefined;
+        try {
+          deps.setSession(undefined);
+        } catch {}
+      }
+    })();
+    await record.cleanupPromise;
+  };
+
+  const handleState = (record: NativeCallRecord, state: CallState): void => {
+    if (!isCurrent(record)) return;
+    if (isTerminalState(state.state)) {
+      if (state.connectionId !== record.connectionId && !record.observedActiveState) return;
+      if (state.connectionId !== null && !isMatchingConnection(state.connectionId, record)) return;
+      void cleanup(record, endedMessage, false);
+      return;
+    }
+    if (!isMatchingConnection(state.connectionId, record)) return;
+    const lifecycle = toLifecycle(state.state);
+    if (!lifecycle) return;
+    record.observedActiveState = true;
+    publish(record, lifecycle);
+  };
+
+  const handleError = (record: NativeCallRecord, error: CallLifecycleError): void => {
+    if (!isCurrent(record)) return;
+    if (!isMatchingConnection(error.connectionId, record)) return;
+    void cleanup(record, errorMessage, false);
+  };
+
+  const start = async ({
+    mx,
+    room,
+    discovery,
+    elementCallActive,
+    dm,
+    video,
+    ongoing,
+  }: NativeCallStartOptions) => {
+    if (activeRecord || elementCallActive) return;
+
+    let record: NativeCallRecord | undefined;
+    let stage: SetupStage = 'MatrixRTC';
+    try {
+      const deviceId = mx.getDeviceId();
+      if (!deviceId) {
+        setSetupError(room.roomId, setupErrorMessage(stage));
+        return;
+      }
+
+      const connectionId = deps.connectionId!();
+      const session = mx.matrixRTC.getRoomSession(room);
+      record = {
+        roomId: room.roomId,
+        connectionId,
+        session,
+        cancelled: false,
+        observedActiveState: false,
+      };
+      const currentRecord = record;
+      activeRecord = record;
+      publish(record, 'starting');
+
+      record.stateUnlistenPromise = deps.onState((state) => handleState(currentRecord, state));
+      record.errorUnlistenPromise = deps.onError((error) => handleError(currentRecord, error));
+      await Promise.all([record.stateUnlistenPromise, record.errorUnlistenPromise]);
+
+      stage = 'LiveKit transport';
+      const transport = await deps.getPreferredTransport(mx, discovery);
+      if (!transport) throw new Error('No LiveKit transport available');
+
+      const userId = mx.getSafeUserId();
+      const identity = { userId, deviceId, memberId: `${userId}:${deviceId}` };
+      const joinConfig: JoinSessionConfig = {
+        callIntent: video ? 'video' : 'audio',
+        ...(ongoing ? {} : { notificationType: dm ? 'ring' : 'notification' }),
+      };
+      stage = 'MatrixRTC';
+      const membershipWait = waitForOwnMembership(session, identity.userId, identity.deviceId);
+      record.cancelMembershipWait = membershipWait.cancel;
+      session.joinRTCSession(identity, [transport], undefined, joinConfig);
+      await membershipWait.promise;
+      record.cancelMembershipWait = undefined;
+      const slotId = session.slotId;
+      if (!slotId) throw new Error('MatrixRTC slot was not assigned');
+      if (!isCurrent(record)) return;
+
+      stage = 'token provisioning';
+      const provisioned = await deps.provisionToken({
+        mx,
+        roomId: room.roomId,
+        slotId,
+        deviceId,
+        serviceUrl: transport.livekit_service_url,
+        memberId: identity.memberId,
+        userId: identity.userId,
+      });
+      if (!isCurrent(record)) return;
+
+      stage = 'LiveKit connection';
+      const state = await deps.connect({
+        connectionId,
+        serverUrl: provisioned.url,
+        participantToken: provisioned.jwt,
+      });
+      handleState(record, state);
+    } catch {
+      if (record) {
+        await cleanup(record, setupErrorMessage(stage), false);
+      } else {
+        setSetupError(room.roomId, setupErrorMessage(stage));
+      }
+    }
+  };
+
+  return { start };
+};
diff --git a/src/app/features/call/nativeCallProbe.test.ts b/src/app/features/call/nativeCallProbe.test.ts
new file mode 100644
index 0000000000..30856d9d6d
--- /dev/null
+++ b/src/app/features/call/nativeCallProbe.test.ts
@@ -0,0 +1,41 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+const desktop = vi.hoisted(() => vi.fn<() => boolean>());
+
+vi.mock('$utils/platform', () => ({ isDesktopTauri: desktop }));
+
+import { isNativeCallProbeEnabled, NATIVE_CALL_PROBE_STORAGE_KEY } from './nativeCallProbe';
+
+describe('native call probe gate', () => {
+  beforeEach(() => {
+    desktop.mockReset();
+    localStorage.clear();
+  });
+
+  afterEach(() => {
+    vi.unstubAllEnvs();
+  });
+
+  it('is disabled by default and enabled only by the documented desktop key', () => {
+    desktop.mockReturnValue(true);
+    vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'false');
+    expect(isNativeCallProbeEnabled()).toBe(false);
+
+    localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
+    expect(isNativeCallProbeEnabled()).toBe(true);
+  });
+
+  it('is enabled by the environment flag on desktop Tauri', () => {
+    desktop.mockReturnValue(true);
+    vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
+
+    expect(isNativeCallProbeEnabled()).toBe(true);
+  });
+
+  it('is disabled outside desktop Tauri', () => {
+    desktop.mockReturnValue(false);
+    vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
+    localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
+    expect(isNativeCallProbeEnabled()).toBe(false);
+  });
+});
diff --git a/src/app/features/call/nativeCallProbe.ts b/src/app/features/call/nativeCallProbe.ts
new file mode 100644
index 0000000000..ab67033377
--- /dev/null
+++ b/src/app/features/call/nativeCallProbe.ts
@@ -0,0 +1,17 @@
+import { isDesktopTauri } from '$utils/platform';
+
+// Enable the desktop transport probe with VITE_ENABLE_NATIVE_CALL_PROBE=true or manually:
+// localStorage.setItem('sable.nativeCallProbe', '1').
+export const NATIVE_CALL_PROBE_STORAGE_KEY = 'sable.nativeCallProbe';
+
+export const isNativeCallProbeEnabled = (): boolean => {
+  if (typeof window === 'undefined' || !isDesktopTauri()) return false;
+
+  if (import.meta.env.VITE_ENABLE_NATIVE_CALL_PROBE === 'true') return true;
+
+  try {
+    return window.localStorage.getItem(NATIVE_CALL_PROBE_STORAGE_KEY) === '1';
+  } catch {
+    return false;
+  }
+};
diff --git a/src/app/features/call/useCallSignaling.ts b/src/app/features/call/useCallSignaling.ts
index a652d21ab5..878a6fb74f 100644
--- a/src/app/features/call/useCallSignaling.ts
+++ b/src/app/features/call/useCallSignaling.ts
@@ -11,6 +11,7 @@ import {
   mutedCallRoomIdAtom,
   type IncomingCall,
 } from '$state/callEmbed';
+import { nativeCallAtom } from '$state/nativeCall';
 import { settingsAtom } from '$state/settings';
 import {
   parseIncomingRtcNotification,
@@ -52,6 +53,7 @@ export function useIncomingCallSignaling() {
   const mx = useMatrixClient();
   const store = useStore();
   const callEmbed = useAtomValue(callEmbedAtom);
+  const nativeCall = useAtomValue(nativeCallAtom);
   const mDirects = useAtomValue(mDirectAtom);
   const settings = useAtomValue(settingsAtom);
   const incomingCall = useAtomValue(incomingCallAtom);
@@ -89,6 +91,7 @@ export function useIncomingCallSignaling() {
 
   type SignalingHandlerRefs = {
     callEmbed: typeof callEmbed;
+    nativeCall: typeof nativeCall;
     mDirects: typeof mDirects;
     outgoingRingbackAllowed: boolean;
     handleIncomingCall: (incoming: IncomingCall) => void;
@@ -117,7 +120,7 @@ export function useIncomingCallSignaling() {
     hasCallBeenActiveRef.current = false;
     outgoingRingRoomIdRef.current = null;
     outgoingStartRef.current = null;
-  }, [callEmbed]);
+  }, [callEmbed?.roomId, nativeCall?.connectionId]);
 
   useEffect(() => {
     ringtoneManager.syncSources(
@@ -147,7 +150,8 @@ export function useIncomingCallSignaling() {
 
   const handleOutgoingDecline = useCallback(
     (decline: OutgoingDeclineEvent) => {
-      if (!callEmbed || callEmbed.roomId !== decline.roomId) {
+      const activeCall = callEmbed ?? nativeCall;
+      if (!activeCall || activeCall.roomId !== decline.roomId) {
         return;
       }
 
@@ -207,8 +211,8 @@ export function useIncomingCallSignaling() {
       Sentry.metrics.count('sable.call.outgoing.declined', 1);
       stopOutgoingRing();
 
-      void callEmbed
-        .hangup()
+      const hangup = callEmbed?.hangup() ?? nativeCall?.hangup() ?? Promise.resolve();
+      void hangup
         .catch((error) => {
           debugLog.warn('call', 'Failed to hang up after outgoing decline', {
             roomId: decline.roomId,
@@ -219,12 +223,11 @@ export function useIncomingCallSignaling() {
         .finally(() => {
           window.setTimeout(() => {
             const activeEmbed = store.get(callEmbedAtom);
-            if (activeEmbed !== callEmbed) return;
-            setCallEmbed(undefined);
+            if (activeEmbed === callEmbed) setCallEmbed(undefined);
           }, OUTGOING_DECLINE_EMBED_CLEAR_MS);
         });
     },
-    [callEmbed, mDirects, mx, setCallEmbed, stopOutgoingRing, store]
+    [callEmbed, mDirects, mx, nativeCall, setCallEmbed, stopOutgoingRing, store]
   );
 
   const callAudioAllowed = canPlayCallAudio({
@@ -283,6 +286,7 @@ export function useIncomingCallSignaling() {
 
   signalingHandlerRefs.current = {
     callEmbed,
+    nativeCall,
     mDirects,
     outgoingRingbackAllowed,
     handleIncomingCall,
@@ -421,7 +425,11 @@ export function useIncomingCallSignaling() {
       if (!senderId || !eventId) return;
 
       if (senderId === myUserId) {
-        if (type === RTC_NOTIFICATION_EVENT_TYPE && handlers().callEmbed?.roomId === room.roomId) {
+        if (
+          type === RTC_NOTIFICATION_EVENT_TYPE &&
+          (handlers().callEmbed?.roomId === room.roomId ||
+            handlers().nativeCall?.roomId === room.roomId)
+        ) {
           activeOutgoingNotificationIdRef.current = eventId;
         }
         return;
@@ -436,8 +444,8 @@ export function useIncomingCallSignaling() {
 
       // Only inspect declines for the active outgoing call room. Cleartext declines are
       // cheap; encrypted events are decrypted only when they might be RTC declines.
-      const activeEmbed = handlers().callEmbed;
-      if (!activeEmbed || activeEmbed.roomId !== room.roomId) {
+      const activeCall = handlers().callEmbed ?? handlers().nativeCall;
+      if (!activeCall || activeCall.roomId !== room.roomId) {
         return;
       }
       if (event.isDecryptionFailure()) {
@@ -496,7 +504,8 @@ export function useIncomingCallSignaling() {
     let outgoingRingTimeoutId: number | undefined;
 
     const evaluateOutgoingFallback = () => {
-      const activeCallRoomId = handlers().callEmbed?.roomId;
+      const activeCallRoomId =
+        handlers().callEmbed?.roomId ?? handlers().nativeCall?.roomId;
 
       const stop = () => {
         handlers().stopOutgoingRing();
diff --git a/src/app/features/room/RoomView.tsx b/src/app/features/room/RoomView.tsx
index de6e852c2c..666be9e2d8 100644
--- a/src/app/features/room/RoomView.tsx
+++ b/src/app/features/room/RoomView.tsx
@@ -28,6 +28,7 @@ import { useDelayedEventsSupport } from '$hooks/useDelayedEventsSupport';
 import { delayedEventsSupportedAtom } from '$state/scheduledMessages';
 import { useCallMembers, useCallSession } from '$hooks/useCall';
 import { callEmbedAtom } from '$state/callEmbed';
+import { nativeCallAtom } from '$state/nativeCall';
 import { useCallJoined } from '$hooks/useCallEmbed';
 import { CallView } from '$features/call/CallView';
 import { useRoom } from '$hooks/useRoom';
@@ -143,8 +144,11 @@ export function RoomView({ eventId }: { eventId?: string }) {
   const callSession = useCallSession(room);
   const callMembers = useCallMembers(room, callSession);
   const callEmbed = useAtomValue(callEmbedAtom);
+  const nativeCall = useAtomValue(nativeCallAtom);
   const isJoinedInThisRoom = useCallJoined(callEmbed) && callEmbed?.roomId === room.roomId;
-  const showCallView = !room.isCallRoom() && (callMembers.length > 0 || isJoinedInThisRoom);
+  const isNativeCallInThisRoom = nativeCall?.roomId === room.roomId;
+  const showCallView =
+    !room.isCallRoom() && (callMembers.length > 0 || isJoinedInThisRoom || isNativeCallInThisRoom);
 
   return (
     <Page
diff --git a/src/app/hooks/useCallEmbed.ts b/src/app/hooks/useCallEmbed.ts
index c55cfe8319..360c34193a 100644
--- a/src/app/hooks/useCallEmbed.ts
+++ b/src/app/hooks/useCallEmbed.ts
@@ -1,5 +1,5 @@
 import type { RefObject } from 'react';
-import { createContext, useCallback, useContext, useEffect, useState } from 'react';
+import { createContext, useCallback, useContext, useEffect, useMemo, useState } from 'react';
 import type { MatrixClient, Room } from '$types/matrix-sdk';
 import { useSetAtom } from 'jotai';
 import * as Sentry from '@sentry/react';
@@ -15,6 +15,12 @@ import type { CallPreferences } from '../state/callPreferences';
 import { createDebugLogger } from '../utils/debugLogger';
 import { useClientConfig } from './useClientConfig';
 import { callEmbedStartErrorAtom } from '$state/callEmbed';
+import { isNativeCallActive, nativeCallAtom } from '$state/nativeCall';
+import { createNativeCallController } from '$features/call/nativeCallController';
+import { isNativeCallProbeEnabled } from '$features/call/nativeCallProbe';
+import { useAutoDiscoveryInfo } from './useAutoDiscoveryInfo';
+import { isDesktopTauri } from '$utils/platform';
+import { useStore } from 'jotai';
 
 const debugLog = createDebugLogger('useCallEmbed');
 
@@ -65,10 +71,36 @@ export const useCallStart = (dm = false) => {
   const clientConfig = useClientConfig();
   const setCallEmbed = useSetAtom(callEmbedAtom);
   const setCallEmbedStartError = useSetAtom(callEmbedStartErrorAtom);
+  const setNativeCall = useSetAtom(nativeCallAtom);
   const callEmbedRef = useCallEmbedRef();
+  const store = useStore();
+  const discovery = useAutoDiscoveryInfo();
+  const nativeCallController = useMemo(
+    () =>
+      createNativeCallController({
+        setSession: setNativeCall,
+      }),
+    [setNativeCall]
+  );
 
   const startCall = useCallback(
     (room: Room, pref?: CallPreferences) => {
+      if (isDesktopTauri() && isNativeCallProbeEnabled()) {
+        if (store.get(callEmbedAtom) || isNativeCallActive(store.get(nativeCallAtom))) return;
+        const ongoing = mx.matrixRTC.getRoomSession(room).memberships.length > 0;
+        void nativeCallController
+          .start({
+            mx,
+            room,
+            discovery,
+            elementCallActive: Boolean(store.get(callEmbedAtom)),
+            dm,
+            video: pref?.video ?? false,
+            ongoing,
+          })
+          .catch(() => undefined);
+        return;
+      }
       const container = callEmbedRef.current;
       if (!container) {
         debugLog.error('call', 'Failed to start call — no embed container', {
@@ -106,7 +138,18 @@ export const useCallStart = (dm = false) => {
         throw err;
       }
     },
-    [mx, dm, theme, setCallEmbed, callEmbedRef, clientConfig.elementCallUrl, setCallEmbedStartError]
+    [
+      mx,
+      dm,
+      theme,
+      setCallEmbed,
+      callEmbedRef,
+      clientConfig.elementCallUrl,
+      setCallEmbedStartError,
+      store,
+      discovery,
+      nativeCallController,
+    ]
   );
 
   return startCall;
diff --git a/src/app/state/nativeCall.ts b/src/app/state/nativeCall.ts
new file mode 100644
index 0000000000..4e690675d7
--- /dev/null
+++ b/src/app/state/nativeCall.ts
@@ -0,0 +1,16 @@
+import { atom } from 'jotai';
+
+export type NativeCallLifecycle = 'starting' | 'connecting' | 'connected' | 'reconnecting' | 'error';
+
+export type NativeCallSession = {
+  roomId: string;
+  connectionId: string;
+  lifecycle: NativeCallLifecycle;
+  error?: string;
+  hangup: () => Promise<void>;
+};
+
+export const nativeCallAtom = atom<NativeCallSession | undefined>(undefined);
+
+export const isNativeCallActive = (session: NativeCallSession | undefined): boolean =>
+  session?.lifecycle !== undefined && session.lifecycle !== 'error';

From 000db1ca31d690a19faae789aba72705396cc889 Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 14:39:49 +0200
Subject: [PATCH 3/9] feat(call): add native media adapters

---
 broadcast-extension-ios/SampleHandler.swift   |    3 +
 rust-toolchain.toml                           |    2 +-
 src-tauri/Cargo.lock                          | 1335 +++++++++++++++--
 src-tauri/Info.plist                          |    2 +
 src-tauri/capabilities/mobile.json            |    3 +-
 src-tauri/ios-project.yml                     |   43 +
 .../tauri-plugin-call-lifecycle/Cargo.toml    |   42 +-
 .../android/build.gradle.kts                  |   34 +
 .../android/settings.gradle                   |   30 +
 .../android/src/main/AndroidManifest.xml      |   16 +
 .../call_lifecycle/CallLifecyclePlugin.kt     |  445 ++++++
 .../dist-js/index.d.ts                        |    3 +
 .../guest-js/index.ts                         |    3 +
 .../ios/Package.swift                         |   30 +
 .../ios/Sources/CallLifecyclePlugin.swift     |  377 +++++
 .../tauri-plugin-call-lifecycle/src/actor.rs  |  744 ++++++++-
 .../tauri-plugin-call-lifecycle/src/audio.rs  |  929 ++++++++++++
 .../tauri-plugin-call-lifecycle/src/camera.rs |  444 ++++++
 .../src/camera_macos.rs                       |  346 +++++
 .../src/camera_windows.rs                     |  323 ++++
 .../tauri-plugin-call-lifecycle/src/error.rs  |   16 +
 .../tauri-plugin-call-lifecycle/src/lib.rs    |   26 +-
 .../tauri-plugin-call-lifecycle/src/mobile.rs |  149 ++
 .../tauri-plugin-call-lifecycle/src/models.rs |    6 +
 .../src/screen_share.rs                       |  495 ++++++
 .../src/screen_share_macos.rs                 |  324 ++++
 .../src/screen_share_windows.rs               |  567 +++++++
 src-tauri/src/lib.rs                          |    5 +-
 src/app/features/call/nativeCallController.ts |    3 +
 src/app/features/call/nativeCallProbe.test.ts |   22 +-
 src/app/features/call/nativeCallProbe.ts      |    4 +-
 src/app/generated/tauri/commands.ts           |   14 +-
 src/app/generated/tauri/events.ts             |    2 +-
 src/app/generated/tauri/index.ts              |    2 +-
 src/app/generated/tauri/types.ts              |   25 +-
 35 files changed, 6609 insertions(+), 205 deletions(-)
 create mode 100644 broadcast-extension-ios/SampleHandler.swift
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/android/build.gradle.kts
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/android/settings.gradle
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Package.swift
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/audio.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_macos.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_windows.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_windows.rs

diff --git a/broadcast-extension-ios/SampleHandler.swift b/broadcast-extension-ios/SampleHandler.swift
new file mode 100644
index 0000000000..93e3e79326
--- /dev/null
+++ b/broadcast-extension-ios/SampleHandler.swift
@@ -0,0 +1,3 @@
+import LiveKit
+
+final class SampleHandler: LKSampleHandler {}
diff --git a/rust-toolchain.toml b/rust-toolchain.toml
index 59277fee77..bea1926b8d 100644
--- a/rust-toolchain.toml
+++ b/rust-toolchain.toml
@@ -1,3 +1,3 @@
 [toolchain]
-channel = "1.97.1"
+channel = "1.97"
 components = ["clippy", "rustfmt"]
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index bbfdcc68c8..8e71b120fe 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -39,7 +39,7 @@ version = "0.8.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "cipher",
  "cpufeatures 0.2.17",
 ]
@@ -50,7 +50,7 @@ version = "0.8.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "getrandom 0.3.4",
  "once_cell",
  "version_check",
@@ -81,6 +81,28 @@ dependencies = [
  "alloc-no-stdlib",
 ]
 
+[[package]]
+name = "alsa"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed7572b7ba83a31e20d1b48970ee402d2e3e0537dcfe0a3ff4d6eb7508617d43"
+dependencies = [
+ "alsa-sys",
+ "bitflags 2.13.1",
+ "cfg-if 1.0.4",
+ "libc",
+]
+
+[[package]]
+name = "alsa-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db8fee663d06c4e303404ef5f40488a53e062f89ba8bfed81f42325aafad1527"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
 [[package]]
 name = "android-activity"
 version = "0.6.1"
@@ -93,9 +115,9 @@ dependencies = [
  "jni 0.22.4",
  "libc",
  "log",
- "ndk",
+ "ndk 0.9.0",
  "ndk-context",
- "ndk-sys",
+ "ndk-sys 0.6.0+11769913",
  "num_enum",
  "thiserror 2.0.19",
 ]
@@ -188,6 +210,25 @@ version = "1.0.104"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
 
+[[package]]
+name = "apple-cf"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7fd680cd0f3f02ee717b2014b26d18985c57b784384ba47213fcf8791e8c250"
+dependencies = [
+ "doom-fish-utils",
+]
+
+[[package]]
+name = "apple-metal"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b1c24b280fad9eadf6f2bf560d826392020ac6258b4c88c6dd356ae7a24f4e3"
+dependencies = [
+ "doom-fish-utils",
+ "libc",
+]
+
 [[package]]
 name = "arbitrary"
 version = "1.4.2"
@@ -236,6 +277,21 @@ version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "175571dd1d178ced59193a6fc02dde1b972eb0bc56c892cde9beeceac5bf0f6b"
 
+[[package]]
+name = "ashpd"
+version = "0.13.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb8421aaa9644a5faf26735f258b669b15f063313ef8f8e2bdb28912a1a6f111"
+dependencies = [
+ "enumflags2",
+ "futures-util",
+ "getrandom 0.4.3",
+ "serde",
+ "serde_repr",
+ "tokio",
+ "zbus",
+]
+
 [[package]]
 name = "async-broadcast"
 version = "0.7.2"
@@ -281,13 +337,13 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "456b8a8feb6f42d237746d4b3e9a178494627745c3c56c6ea55d92ba50d026fc"
 dependencies = [
  "autocfg",
- "cfg-if",
+ "cfg-if 1.0.4",
  "concurrent-queue",
  "futures-io",
  "futures-lite",
  "parking",
  "polling",
- "rustix",
+ "rustix 1.1.4",
  "slab",
  "windows-sys 0.61.2",
 ]
@@ -315,10 +371,10 @@ dependencies = [
  "async-signal",
  "async-task",
  "blocking",
- "cfg-if",
+ "cfg-if 1.0.4",
  "event-listener",
  "futures-lite",
- "rustix",
+ "rustix 1.1.4",
 ]
 
 [[package]]
@@ -341,10 +397,10 @@ dependencies = [
  "async-io",
  "async-lock",
  "atomic-waker",
- "cfg-if",
+ "cfg-if 1.0.4",
  "futures-core",
  "futures-io",
- "rustix",
+ "rustix 1.1.4",
  "signal-hook-registry",
  "slab",
  "windows-sys 0.61.2",
@@ -396,7 +452,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
 dependencies = [
  "atk-sys",
- "glib",
+ "glib 0.18.5",
  "libc",
 ]
 
@@ -406,10 +462,10 @@ version = "0.18.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
 dependencies = [
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -418,6 +474,12 @@ version = "1.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
 
+[[package]]
+name = "atomic_refcell"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21e4227379beff4205943696e6c3e0cd809bacdf3f0edd6e3dd153e2269571a4"
+
 [[package]]
 name = "autocfg"
 version = "1.5.1"
@@ -476,7 +538,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bb531853791a215d7c62a30daf0dde835f381ab5de4589cfe7c649d2cbe92bd6"
 dependencies = [
  "addr2line",
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
  "miniz_oxide",
  "object",
@@ -496,6 +558,47 @@ version = "0.22.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
+[[package]]
+name = "bindgen"
+version = "0.65.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfdf7b466f9a4903edc73f95d6d2bcd5baf8ae620638762244d3f60143643cc5"
+dependencies = [
+ "bitflags 1.3.2",
+ "cexpr",
+ "clang-sys",
+ "lazy_static",
+ "lazycell",
+ "log",
+ "peeking_take_while",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 1.1.0",
+ "shlex 1.3.0",
+ "syn 2.0.119",
+ "which",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.72.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags 2.13.1",
+ "cexpr",
+ "clang-sys",
+ "itertools 0.12.1",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 2.1.3",
+ "shlex 1.3.0",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "bit-set"
 version = "0.8.0"
@@ -673,7 +776,7 @@ checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
 dependencies = [
  "bitflags 2.13.1",
  "cairo-sys-rs",
- "glib",
+ "glib 0.18.5",
  "libc",
  "once_cell",
  "thiserror 1.0.69",
@@ -685,9 +788,9 @@ version = "0.18.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
 dependencies = [
- "glib-sys",
+ "glib-sys 0.18.1",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -698,7 +801,7 @@ checksum = "4dbf9978365bac10f54d1d4b04f7ce4427e51f71d61f2fe15e3fed5166474df7"
 dependencies = [
  "bitflags 2.13.1",
  "polling",
- "rustix",
+ "rustix 1.1.4",
  "slab",
  "tracing",
 ]
@@ -710,7 +813,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "138efcf0940a02ebf0cc8d1eff41a1682a46b431630f4c52450d6265876021fa"
 dependencies = [
  "calloop",
- "rustix",
+ "rustix 1.1.4",
  "wayland-backend",
  "wayland-client",
 ]
@@ -790,7 +893,7 @@ dependencies = [
  "find-msvc-tools",
  "jobserver",
  "libc",
- "shlex",
+ "shlex 2.0.1",
 ]
 
 [[package]]
@@ -831,6 +934,15 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
 
+[[package]]
+name = "cexpr"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
+dependencies = [
+ "nom 7.1.3",
+]
+
 [[package]]
 name = "cfb"
 version = "0.7.3"
@@ -849,9 +961,25 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
 dependencies = [
  "smallvec",
- "target-lexicon",
+ "target-lexicon 0.12.16",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.20.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb693542bcafa528e198be0ebd9d3632ca5b7c93dbe7237460e199910835997c"
+dependencies = [
+ "smallvec",
+ "target-lexicon 0.13.5",
 ]
 
+[[package]]
+name = "cfg-if"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822"
+
 [[package]]
 name = "cfg-if"
 version = "1.0.4"
@@ -870,7 +998,7 @@ version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d524456ba66e72eb8b115ff89e01e497f8e6d11d78b70b1aa13c0fbd97540a81"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "cpufeatures 0.3.0",
  "rand_core 0.10.1",
 ]
@@ -921,6 +1049,17 @@ dependencies = [
  "inout",
 ]
 
+[[package]]
+name = "clang-sys"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b023947811758c97c59bf9d1c188fd619ad4718dcaa767947df1cadb14f39f4"
+dependencies = [
+ "glob",
+ "libc",
+ "libloading 0.8.9",
+]
+
 [[package]]
 name = "clap"
 version = "4.6.4"
@@ -979,6 +1118,21 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "cocoa"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c49e86fc36d5704151f5996b7b3795385f50ce09e3be0f47a0cfde869681cf8"
+dependencies = [
+ "bitflags 1.3.2",
+ "block",
+ "core-foundation 0.7.0",
+ "core-graphics 0.19.2",
+ "foreign-types 0.3.2",
+ "libc",
+ "objc",
+]
+
 [[package]]
 name = "cocoa"
 version = "0.26.1"
@@ -990,7 +1144,7 @@ dependencies = [
  "cocoa-foundation",
  "core-foundation 0.10.1",
  "core-graphics 0.24.0",
- "foreign-types",
+ "foreign-types 0.5.0",
  "libc",
  "objc",
 ]
@@ -1135,13 +1289,23 @@ dependencies = [
  "url",
 ]
 
+[[package]]
+name = "core-foundation"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57d24c7a13c43e870e37c1556b74555437870a04514f7685f5b354e090567171"
+dependencies = [
+ "core-foundation-sys 0.7.0",
+ "libc",
+]
+
 [[package]]
 name = "core-foundation"
 version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -1151,16 +1315,34 @@ version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
+[[package]]
+name = "core-foundation-sys"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3a71ab494c0b5b860bdc8407ae08978052417070c2ced38573a9157ad75b8ac"
+
 [[package]]
 name = "core-foundation-sys"
 version = "0.8.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
 
+[[package]]
+name = "core-graphics"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3889374e6ea6ab25dba90bb5d96202f61108058361f6dc72e8b03e6f8bbe923"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.7.0",
+ "foreign-types 0.3.2",
+ "libc",
+]
+
 [[package]]
 name = "core-graphics"
 version = "0.24.0"
@@ -1170,7 +1352,7 @@ dependencies = [
  "bitflags 2.13.1",
  "core-foundation 0.10.1",
  "core-graphics-types",
- "foreign-types",
+ "foreign-types 0.5.0",
  "libc",
 ]
 
@@ -1183,7 +1365,7 @@ dependencies = [
  "bitflags 2.13.1",
  "core-foundation 0.10.1",
  "core-graphics-types",
- "foreign-types",
+ "foreign-types 0.5.0",
  "libc",
 ]
 
@@ -1198,6 +1380,74 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "core-media-sys"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "273bf3fc5bf51fd06a7766a84788c1540b6527130a0bce39e00567d6ab9f31f1"
+dependencies = [
+ "cfg-if 0.1.10",
+ "core-foundation-sys 0.7.0",
+ "libc",
+]
+
+[[package]]
+name = "core-video-sys"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34ecad23610ad9757664d644e369246edde1803fcb43ed72876565098a5d3828"
+dependencies = [
+ "cfg-if 0.1.10",
+ "core-foundation-sys 0.7.0",
+ "core-graphics 0.19.2",
+ "libc",
+ "metal",
+ "objc",
+]
+
+[[package]]
+name = "coreaudio-rs"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "321077172d79c662f64f5071a03120748d5bb652f5231570141be24cfcd2bace"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation-sys 0.8.7",
+ "coreaudio-sys",
+]
+
+[[package]]
+name = "coreaudio-sys"
+version = "0.2.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9b4739a805a62757a83e5654fa3faabec0442666b263bb2287d5a8185bfd953"
+dependencies = [
+ "bindgen 0.72.1",
+]
+
+[[package]]
+name = "cpal"
+version = "0.15.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "873dab07c8f743075e57f524c583985fbaf745602acbe916a01539364369a779"
+dependencies = [
+ "alsa",
+ "core-foundation-sys 0.8.7",
+ "coreaudio-rs",
+ "dasp_sample",
+ "jni 0.21.1",
+ "js-sys",
+ "libc",
+ "mach2",
+ "ndk 0.8.0",
+ "ndk-context",
+ "oboe",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows 0.54.0",
+]
+
 [[package]]
 name = "cpufeatures"
 version = "0.2.17"
@@ -1222,7 +1472,7 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
 ]
 
 [[package]]
@@ -1253,6 +1503,15 @@ dependencies = [
  "crossbeam-utils",
 ]
 
+[[package]]
+name = "crossbeam-queue"
+version = "0.3.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "803d13fb3b09d88be9f4dbc29062c66b19bf7170867ceb746d2a8689bf6c7a26"
+dependencies = [
+ "crossbeam-utils",
+]
+
 [[package]]
 name = "crossbeam-utils"
 version = "0.8.22"
@@ -1477,6 +1736,12 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "dasp_sample"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c87e182de0887fd5361989c677c4e8f5000cd9491d6d563161a8f3a5519fc7f"
+
 [[package]]
 name = "data-encoding"
 version = "2.11.0"
@@ -1784,6 +2049,16 @@ dependencies = [
  "tendril 0.5.1",
 ]
 
+[[package]]
+name = "doom-fish-utils"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c801f6c2a0db1a1909d89fc395b9dccc594de9ef599659fbde9bb3b55ef67f9f"
+dependencies = [
+ "crossbeam-queue",
+ "futures-util",
+]
+
 [[package]]
 name = "dos-date-time"
 version = "0.3.0"
@@ -1910,7 +2185,7 @@ version = "0.8.35"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
 ]
 
 [[package]]
@@ -1927,14 +2202,14 @@ checksum = "71744ff36f35a4276e8827add8102d0e792378c574fd93cb4e1c8e0505f96b7c"
 dependencies = [
  "core-foundation 0.10.1",
  "core-graphics 0.25.0",
- "foreign-types-shared",
+ "foreign-types-shared 0.3.1",
  "libc",
  "log",
- "nom",
+ "nom 8.0.0",
  "objc2",
  "objc2-app-kit",
  "objc2-foundation",
- "windows",
+ "windows 0.61.3",
  "x11rb",
  "xkbcommon",
  "xkeysym",
@@ -2071,7 +2346,7 @@ version = "0.2.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5c287a33c7f0a620c38e641e7f60827713987b3c0f26e8ddc9462cc69cf75759"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
 ]
 
@@ -2116,6 +2391,18 @@ dependencies = [
  "zlib-rs",
 ]
 
+[[package]]
+name = "flume"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "nanorand",
+ "spin",
+]
+
 [[package]]
 name = "fnv"
 version = "1.0.7"
@@ -2134,6 +2421,15 @@ version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
 
+[[package]]
+name = "foreign-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1"
+dependencies = [
+ "foreign-types-shared 0.1.1",
+]
+
 [[package]]
 name = "foreign-types"
 version = "0.5.0"
@@ -2141,7 +2437,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
 dependencies = [
  "foreign-types-macros",
- "foreign-types-shared",
+ "foreign-types-shared 0.3.1",
 ]
 
 [[package]]
@@ -2155,6 +2451,12 @@ dependencies = [
  "syn 3.0.3",
 ]
 
+[[package]]
+name = "foreign-types-shared"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
+
 [[package]]
 name = "foreign-types-shared"
 version = "0.3.1"
@@ -2340,7 +2642,7 @@ dependencies = [
  "gdk-pixbuf",
  "gdk-sys",
  "gio",
- "glib",
+ "glib 0.18.5",
  "libc",
  "pango",
 ]
@@ -2353,7 +2655,7 @@ checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
 dependencies = [
  "gdk-pixbuf-sys",
  "gio",
- "glib",
+ "glib 0.18.5",
  "libc",
  "once_cell",
 ]
@@ -2364,11 +2666,11 @@ version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
 dependencies = [
- "gio-sys",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -2379,13 +2681,13 @@ checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
 dependencies = [
  "cairo-sys-rs",
  "gdk-pixbuf-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
  "pango-sys",
  "pkg-config",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -2395,11 +2697,11 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
 dependencies = [
  "gdk-sys",
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
  "pkg-config",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -2411,7 +2713,7 @@ dependencies = [
  "gdk",
  "gdkx11-sys",
  "gio",
- "glib",
+ "glib 0.18.5",
  "libc",
  "x11",
 ]
@@ -2423,9 +2725,9 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6e2e7445fe01ac26f11601db260dd8608fe172514eb63b3b5e261ea6b0f4428d"
 dependencies = [
  "gdk-sys",
- "glib-sys",
+ "glib-sys 0.18.1",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
  "x11",
 ]
 
@@ -2445,7 +2747,7 @@ version = "1.1.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
 dependencies = [
- "rustix",
+ "rustix 1.1.4",
  "windows-link 0.2.1",
 ]
 
@@ -2455,7 +2757,7 @@ version = "0.1.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8fc3cb4d91f53b50155bdcfd23f6a4c39ae1969c2ae85982b135750cccaf5fce"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
  "wasi 0.9.0+wasi-snapshot-preview1",
 ]
@@ -2466,7 +2768,7 @@ version = "0.2.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "js-sys",
  "libc",
  "wasi 0.11.1+wasi-snapshot-preview1",
@@ -2479,7 +2781,7 @@ version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
  "r-efi 5.3.0",
  "wasip2",
@@ -2491,7 +2793,7 @@ version = "0.4.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "js-sys",
  "libc",
  "r-efi 6.0.0",
@@ -2515,8 +2817,8 @@ dependencies = [
  "futures-core",
  "futures-io",
  "futures-util",
- "gio-sys",
- "glib",
+ "gio-sys 0.18.1",
+ "glib 0.18.5",
  "libc",
  "once_cell",
  "pin-project-lite",
@@ -2530,13 +2832,26 @@ version = "0.18.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
 dependencies = [
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
  "winapi",
 ]
 
+[[package]]
+name = "gio-sys"
+version = "0.22.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353fdc7da7cd16da916104b1e0e4e7de380ec9c8aaa20d4d742d66310ab4b0d5"
+dependencies = [
+ "glib-sys 0.22.8",
+ "gobject-sys 0.22.6",
+ "libc",
+ "system-deps 7.0.8",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "glib"
 version = "0.18.5"
@@ -2549,10 +2864,10 @@ dependencies = [
  "futures-executor",
  "futures-task",
  "futures-util",
- "gio-sys",
- "glib-macros",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-macros 0.18.5",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
  "memchr",
  "once_cell",
@@ -2560,6 +2875,27 @@ dependencies = [
  "thiserror 1.0.69",
 ]
 
+[[package]]
+name = "glib"
+version = "0.22.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddbcf514bd1881fc1b960e4e52b4e82873f4da3bceddbd58d42827b508888100"
+dependencies = [
+ "bitflags 2.13.1",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys 0.22.8",
+ "glib-macros 0.22.6",
+ "glib-sys 0.22.8",
+ "gobject-sys 0.22.6",
+ "libc",
+ "memchr",
+ "smallvec",
+]
+
 [[package]]
 name = "glib-macros"
 version = "0.18.5"
@@ -2574,6 +2910,18 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "glib-macros"
+version = "0.22.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "506d23499707c7142898429757e8d9a3871d965239a2cb66dfa05052be6d6f19"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
 [[package]]
 name = "glib-sys"
 version = "0.18.1"
@@ -2581,7 +2929,17 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
 dependencies = [
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.22.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "030967459f9f676851872c6304adea7825c6d462ec9b72554c733cf0c5952233"
+dependencies = [
+ "libc",
+ "system-deps 7.0.8",
 ]
 
 [[package]]
@@ -2638,9 +2996,143 @@ version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
 dependencies = [
- "glib-sys",
+ "glib-sys 0.18.1",
+ "libc",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "gobject-sys"
+version = "0.22.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22a861859b887a79cf461359c192c97a57d8fb0229dd291232e57aa11f6fa72c"
+dependencies = [
+ "glib-sys 0.22.8",
  "libc",
- "system-deps",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer"
+version = "0.25.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab4527e1b9bae8d29ce137bde5b8eec8ae8f78f13ad00fc6e70cbe227d6ad027"
+dependencies = [
+ "cfg-if 1.0.4",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "glib 0.22.8",
+ "gstreamer-sys",
+ "itertools 0.15.0",
+ "kstring",
+ "libc",
+ "muldiv",
+ "num-integer",
+ "num-rational",
+ "option-operations",
+ "pastey",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 2.0.19",
+]
+
+[[package]]
+name = "gstreamer-app"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97f8ae9238c2352398dcc084de28df3f7099af216ac6c160b52318d23f25c010"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "glib 0.22.8",
+ "gstreamer",
+ "gstreamer-app-sys",
+ "gstreamer-base",
+ "libc",
+]
+
+[[package]]
+name = "gstreamer-app-sys"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a74a8211e5d7df2f45b612c284ddf56b92bdf4e879e8ed72e7c46dd0842e158"
+dependencies = [
+ "glib-sys 0.22.8",
+ "gstreamer-base-sys",
+ "gstreamer-sys",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer-base"
+version = "0.25.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c91c94a4d3047d05dd6e1f6d91c74f61f56384c7ea1c9d0c1051572eeeb0138d"
+dependencies = [
+ "atomic_refcell",
+ "cfg-if 1.0.4",
+ "glib 0.22.8",
+ "gstreamer",
+ "gstreamer-base-sys",
+ "libc",
+]
+
+[[package]]
+name = "gstreamer-base-sys"
+version = "0.25.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fbbc623dc066908ba10c43d629c21096508dea04796592a206c4edd864e37"
+dependencies = [
+ "glib-sys 0.22.8",
+ "gobject-sys 0.22.6",
+ "gstreamer-sys",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer-sys"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "533fa8d28fc830eafccbcfcfddb390563ea5d3a351af2c3aab99e197e5f5b1ba"
+dependencies = [
+ "cfg-if 1.0.4",
+ "glib-sys 0.22.8",
+ "gobject-sys 0.22.6",
+ "libc",
+ "system-deps 7.0.8",
+]
+
+[[package]]
+name = "gstreamer-video"
+version = "0.25.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7907cb8a73edc98cf279e5de7370bb2c245b7bedf623ba8c7e59648cd4739133"
+dependencies = [
+ "cfg-if 1.0.4",
+ "futures-channel",
+ "glib 0.22.8",
+ "gstreamer",
+ "gstreamer-base",
+ "gstreamer-video-sys",
+ "libc",
+ "thiserror 2.0.19",
+]
+
+[[package]]
+name = "gstreamer-video-sys"
+version = "0.25.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94f6753d53c9a5e274f33441bee2c7dabef82edefb39605b75c834d24af89e7e"
+dependencies = [
+ "glib-sys 0.22.8",
+ "gobject-sys 0.22.6",
+ "gstreamer-base-sys",
+ "gstreamer-sys",
+ "libc",
+ "system-deps 7.0.8",
 ]
 
 [[package]]
@@ -2656,7 +3148,7 @@ dependencies = [
  "gdk",
  "gdk-pixbuf",
  "gio",
- "glib",
+ "glib 0.18.5",
  "gtk-sys",
  "gtk3-macros",
  "libc",
@@ -2674,12 +3166,12 @@ dependencies = [
  "cairo-sys-rs",
  "gdk-pixbuf-sys",
  "gdk-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
  "pango-sys",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -2739,7 +3231,7 @@ version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "crunchy",
  "zerocopy",
 ]
@@ -2804,13 +3296,22 @@ dependencies = [
  "digest",
 ]
 
+[[package]]
+name = "home"
+version = "0.5.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc627f471c528ff0c4a49e1d5e60450c8f6461dd6d10ba9dcd3a61d3dff7728d"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "hostname"
 version = "0.4.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "617aaa3557aef3810a6369d0a99fac8a080891b68bd9f9812a1eeda0c0730cbd"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
  "windows-link 0.2.1",
 ]
@@ -3025,7 +3526,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
 dependencies = [
  "android_system_properties",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "iana-time-zone-haiku",
  "js-sys",
  "log",
@@ -3313,6 +3814,15 @@ dependencies = [
  "either",
 ]
 
+[[package]]
+name = "itertools"
+version = "0.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b4baf93f58d4425749ca49a51c50ebab072c5df6994d08fed93541c331481dc"
+dependencies = [
+ "either",
+]
+
 [[package]]
 name = "itoa"
 version = "1.0.18"
@@ -3326,7 +3836,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
 dependencies = [
  "bitflags 1.3.2",
- "glib",
+ "glib 0.18.5",
  "javascriptcore-rs-sys",
 ]
 
@@ -3336,10 +3846,10 @@ version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
 dependencies = [
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -3385,7 +3895,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
 dependencies = [
  "cesu8",
- "cfg-if",
+ "cfg-if 1.0.4",
  "combine",
  "jni-sys 0.3.1",
  "log",
@@ -3400,7 +3910,7 @@ version = "0.22.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "combine",
  "jni-macros",
  "jni-sys 0.4.1",
@@ -3468,7 +3978,7 @@ version = "0.3.103"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "53b44bfcdb3f8d5837a46dae1ca9660a837176eee74a28b229bc626816589102"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "futures-util",
  "wasm-bindgen",
 ]
@@ -3531,6 +4041,15 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "kstring"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b609e7ca5ea38f093c20a4a102335b247221c9643b7a6bc3510f196f99499a9e"
+dependencies = [
+ "static_assertions",
+]
+
 [[package]]
 name = "kuchikiki"
 version = "0.8.8-speedreader"
@@ -3549,13 +4068,19 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
 
+[[package]]
+name = "lazycell"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
+
 [[package]]
 name = "libappindicator"
 version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "03589b9607c868cc7ae54c0b2a22c8dc03dd41692d48f2d7df73615c6a95dc0a"
 dependencies = [
- "glib",
+ "glib 0.18.5",
  "gtk",
  "gtk-sys",
  "libappindicator-sys",
@@ -3600,7 +4125,7 @@ version = "0.7.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "winapi",
 ]
 
@@ -3610,7 +4135,7 @@ version = "0.8.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "windows-link 0.2.1",
 ]
 
@@ -3620,7 +4145,7 @@ version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "754ca22de805bb5744484a5b151a9e1a8e837d5dc232c2d7d8c2e3492edc8b60"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "windows-link 0.2.1",
 ]
 
@@ -3675,6 +4200,12 @@ dependencies = [
  "cc",
 ]
 
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
 [[package]]
 name = "linux-raw-sys"
 version = "0.12.1"
@@ -3887,6 +4418,15 @@ dependencies = [
  "uuid",
 ]
 
+[[package]]
+name = "mach2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "malloc_buf"
 version = "0.0.6"
@@ -3977,12 +4517,33 @@ dependencies = [
  "autocfg",
 ]
 
+[[package]]
+name = "metal"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e198a0ee42bdbe9ef2c09d0b9426f3b2b47d90d93a4a9b0395c4cea605e92dc0"
+dependencies = [
+ "bitflags 1.3.2",
+ "block",
+ "cocoa 0.20.2",
+ "core-graphics 0.19.2",
+ "foreign-types 0.3.2",
+ "log",
+ "objc",
+]
+
 [[package]]
 name = "mime"
 version = "0.3.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
 
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
 [[package]]
 name = "minisign-verify"
 version = "0.2.5"
@@ -4020,6 +4581,31 @@ dependencies = [
  "pxfm",
 ]
 
+[[package]]
+name = "mozjpeg"
+version = "0.10.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7891b80aaa86097d38d276eb98b3805d6280708c4e0a1e6f6aed9380c51fec9"
+dependencies = [
+ "arrayvec",
+ "bytemuck",
+ "libc",
+ "mozjpeg-sys",
+ "rgb",
+]
+
+[[package]]
+name = "mozjpeg-sys"
+version = "2.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f0dc668bf9bf888c88e2fb1ab16a406d2c380f1d082b20d51dd540ab2aa70c1"
+dependencies = [
+ "cc",
+ "dunce",
+ "libc",
+ "nasm-rs",
+]
+
 [[package]]
 name = "muda"
 version = "0.19.3"
@@ -4041,12 +4627,51 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "muldiv"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "956787520e75e9bd233246045d19f42fb73242759cc57fba9611d940ae96d4b0"
+
 [[package]]
 name = "multimap"
 version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1d87ecb2933e8aeadb3e3a02b828fed80a7528047e68b4f424523a0981a3a084"
 
+[[package]]
+name = "nanorand"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a51313c5820b0b02bd422f4b44776fbf47961755c74ce64afc73bfad10226c3"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "nasm-rs"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "706bf8a5e8c8ddb99128c3291d31bd21f4bcde17f0f4c20ec678d85c74faa149"
+dependencies = [
+ "jobserver",
+ "log",
+]
+
+[[package]]
+name = "ndk"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2076a31b7010b17a38c01907c45b945e8f11495ee4dd588309718901b1f7a5b7"
+dependencies = [
+ "bitflags 2.13.1",
+ "jni-sys 0.3.1",
+ "log",
+ "ndk-sys 0.5.0+25.2.9519653",
+ "num_enum",
+ "thiserror 1.0.69",
+]
+
 [[package]]
 name = "ndk"
 version = "0.9.0"
@@ -4056,7 +4681,7 @@ dependencies = [
  "bitflags 2.13.1",
  "jni-sys 0.3.1",
  "log",
- "ndk-sys",
+ "ndk-sys 0.6.0+11769913",
  "num_enum",
  "raw-window-handle",
  "thiserror 1.0.69",
@@ -4068,6 +4693,15 @@ version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
 
+[[package]]
+name = "ndk-sys"
+version = "0.5.0+25.2.9519653"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c196769dd60fd4f363e11d948139556a344e79d451aeb2fa2fd040738ef7691"
+dependencies = [
+ "jni-sys 0.3.1",
+]
+
 [[package]]
 name = "ndk-sys"
 version = "0.6.0+11769913"
@@ -4115,7 +4749,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cf20d2fde8ff38632c426f1165ed7436270b44f199fc55284c38276f9db47c3d"
 dependencies = [
  "bitflags 2.13.1",
- "cfg-if",
+ "cfg-if 1.0.4",
  "cfg_aliases",
  "libc",
 ]
@@ -4126,6 +4760,83 @@ version = "0.1.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "72ef4a56884ca558e5ddb05a1d1e7e1bfd9a68d9ed024c21704cc98872dae1bb"
 
+[[package]]
+name = "nokhwa"
+version = "0.10.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d63f10b450319a0ace7aa8e0e25477d1fdb345313a97e220e886175539a1dbb"
+dependencies = [
+ "flume",
+ "image",
+ "nokhwa-bindings-linux",
+ "nokhwa-bindings-macos",
+ "nokhwa-bindings-windows",
+ "nokhwa-core",
+ "paste",
+ "thiserror 2.0.19",
+]
+
+[[package]]
+name = "nokhwa-bindings-linux"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb67e22201a53322291740ca064b20eaaade7222ef0349f312d9b37b004e1984"
+dependencies = [
+ "libc",
+ "nokhwa-core",
+ "v4l",
+]
+
+[[package]]
+name = "nokhwa-bindings-macos"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f70d3908ea68324e44a6b3a0f885aa59e433fb1f6678839d09e0df7d226fb42d"
+dependencies = [
+ "block",
+ "cocoa-foundation",
+ "core-foundation 0.10.1",
+ "core-media-sys",
+ "core-video-sys",
+ "flume",
+ "nokhwa-core",
+ "objc",
+ "once_cell",
+]
+
+[[package]]
+name = "nokhwa-bindings-windows"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5be28886bad8abcec3655c1f24b965b4cb596a72b23164c910c54439ce55d2a4"
+dependencies = [
+ "nokhwa-core",
+ "once_cell",
+ "windows 0.62.2",
+]
+
+[[package]]
+name = "nokhwa-core"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1cba20bebd3bd9ae22f9273ade5bbe49da3e047c8512b53fbaf8b4b9c80d496"
+dependencies = [
+ "bytes",
+ "image",
+ "mozjpeg",
+ "thiserror 2.0.19",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
 [[package]]
 name = "nom"
 version = "8.0.0"
@@ -4177,6 +4888,36 @@ version = "0.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
 
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.119",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-rational"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
 [[package]]
 name = "num-traits"
 version = "0.2.19"
@@ -4230,6 +4971,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1"
 dependencies = [
  "malloc_buf",
+ "objc_exception",
 ]
 
 [[package]]
@@ -4475,6 +5217,15 @@ dependencies = [
  "objc2-foundation",
 ]
 
+[[package]]
+name = "objc_exception"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad970fb455818ad6cba4c122ad012fae53ae8b4795f86378bce65e4f6bab2ca4"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "object"
 version = "0.37.3"
@@ -4484,6 +5235,29 @@ dependencies = [
  "memchr",
 ]
 
+[[package]]
+name = "oboe"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8b61bebd49e5d43f5f8cc7ee2891c16e0f41ec7954d36bcb6c14c5e0de867fb"
+dependencies = [
+ "jni 0.21.1",
+ "ndk 0.8.0",
+ "ndk-context",
+ "num-derive",
+ "num-traits",
+ "oboe-sys",
+]
+
+[[package]]
+name = "oboe-sys"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c8bb09a4a2b1d668170cfe0a7d5bc103f8999fb316c98099b6a9939c9f2e79d"
+dependencies = [
+ "cc",
+]
+
 [[package]]
 name = "once_cell"
 version = "1.21.4"
@@ -4519,6 +5293,15 @@ version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
 
+[[package]]
+name = "option-operations"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aca39cf52b03268400c16eeb9b56382ea3c3353409309b63f5c8f0b1faf42754"
+dependencies = [
+ "pastey",
+]
+
 [[package]]
 name = "orbclient"
 version = "0.3.55"
@@ -4605,7 +5388,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
 dependencies = [
  "gio",
- "glib",
+ "glib 0.18.5",
  "libc",
  "once_cell",
  "pango-sys",
@@ -4617,10 +5400,10 @@ version = "0.18.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
 dependencies = [
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -4645,7 +5428,7 @@ version = "0.9.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "libc",
  "redox_syscall 0.5.18",
  "smallvec",
@@ -4661,6 +5444,18 @@ dependencies = [
  "regex",
 ]
 
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pastey"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ee67f1008b1ba2321834326597b8e186293b049a023cdef258527550b9935b4"
+
 [[package]]
 name = "pbjson"
 version = "0.6.0"
@@ -4698,6 +5493,12 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "peeking_take_while"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19b17cddbe7ec3f8bc800887bab5e717348c95ea2ca0b1bf0837fb964dc67099"
+
 [[package]]
 name = "percent-encoding"
 version = "2.3.2"
@@ -5034,11 +5835,11 @@ version = "3.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "concurrent-queue",
  "hermit-abi",
  "pin-project-lite",
- "rustix",
+ "rustix 1.1.4",
  "windows-sys 0.61.2",
 ]
 
@@ -5266,7 +6067,7 @@ dependencies = [
  "pin-project-lite",
  "quinn-proto",
  "quinn-udp",
- "rustc-hash",
+ "rustc-hash 2.1.3",
  "rustls",
  "socket2 0.6.5",
  "thiserror 2.0.19",
@@ -5287,7 +6088,7 @@ dependencies = [
  "rand 0.10.2",
  "rand_pcg 0.10.2",
  "ring",
- "rustc-hash",
+ "rustc-hash 2.1.3",
  "rustls",
  "rustls-pki-types",
  "slab",
@@ -5647,8 +6448,8 @@ checksum = "a15ad77d9e70a92437d8f74c35d99b4e4691128df018833e99f90bcd36152672"
 dependencies = [
  "block2",
  "dispatch2",
- "glib-sys",
- "gobject-sys",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "gtk-sys",
  "js-sys",
  "log",
@@ -5663,6 +6464,15 @@ dependencies = [
  "windows-sys 0.60.2",
 ]
 
+[[package]]
+name = "rgb"
+version = "0.8.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b34b781b31e5d73e9fbc8689c70551fd1ade9a19e3e28cfec8580a79290cc4"
+dependencies = [
+ "bytemuck",
+]
+
 [[package]]
 name = "ring"
 version = "0.17.14"
@@ -5670,7 +6480,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
 dependencies = [
  "cc",
- "cfg-if",
+ "cfg-if 1.0.4",
  "getrandom 0.2.17",
  "libc",
  "untrusted",
@@ -5700,7 +6510,7 @@ version = "0.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "796e8d2b6696392a43bea58116b667fb4c29727dc5abd27d6acf338bb4f688c7"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "ordered-multimap",
 ]
 
@@ -5710,6 +6520,12 @@ version = "0.1.28"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b74b56ffa8bb2830709a538c2cbcae9aa062db0d2a42563bfb09bdaae44020eb"
 
+[[package]]
+name = "rustc-hash"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
+
 [[package]]
 name = "rustc-hash"
 version = "2.1.3"
@@ -5725,6 +6541,19 @@ dependencies = [
  "semver",
 ]
 
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags 2.13.1",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
 [[package]]
 name = "rustix"
 version = "1.1.4"
@@ -5734,7 +6563,7 @@ dependencies = [
  "bitflags 2.13.1",
  "errno",
  "libc",
- "linux-raw-sys",
+ "linux-raw-sys 0.12.1",
  "windows-sys 0.61.2",
 ]
 
@@ -5782,7 +6611,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "26d1e2536ce4f35f4846aa13bff16bd0ff40157cdb14cc056c7b14ba41233ba0"
 dependencies = [
  "core-foundation 0.10.1",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "jni 0.22.4",
  "log",
  "once_cell",
@@ -5878,8 +6707,8 @@ dependencies = [
  "tokio-util",
  "ts-rs",
  "webkit2gtk",
- "windows",
- "zip",
+ "windows 0.61.3",
+ "zip 4.6.1",
 ]
 
 [[package]]
@@ -5969,6 +6798,17 @@ version = "1.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d68f2ec51b097e4c1a75b681a8bec621909b5e91f15bb7b840c4f2f7b01148b2"
 
+[[package]]
+name = "screencapturekit"
+version = "8.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ddaa8d6b16a2762c9a97c9a6297f04cb8ded0487e5ef02dc98b4e2bee3a26c7"
+dependencies = [
+ "apple-cf",
+ "apple-metal",
+ "futures-core",
+]
+
 [[package]]
 name = "sctk-adwaita"
 version = "0.11.1"
@@ -6000,7 +6840,7 @@ checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
 dependencies = [
  "bitflags 2.13.1",
  "core-foundation 0.10.1",
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
  "security-framework-sys",
 ]
@@ -6011,7 +6851,7 @@ version = "2.17.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -6047,7 +6887,7 @@ dependencies = [
  "phf 0.13.1",
  "phf_codegen 0.13.1",
  "precomputed-hash",
- "rustc-hash",
+ "rustc-hash 2.1.3",
  "servo_arc 0.4.3",
  "smallvec",
 ]
@@ -6359,7 +7199,7 @@ version = "0.10.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "cpufeatures 0.2.17",
  "digest",
 ]
@@ -6376,7 +7216,7 @@ version = "0.10.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "cpufeatures 0.2.17",
  "digest",
 ]
@@ -6390,6 +7230,12 @@ dependencies = [
  "lazy_static",
 ]
 
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
 [[package]]
 name = "shlex"
 version = "2.0.1"
@@ -6484,7 +7330,7 @@ dependencies = [
  "libc",
  "log",
  "memmap2",
- "rustix",
+ "rustix 1.1.4",
  "thiserror 2.0.19",
  "wayland-backend",
  "wayland-client",
@@ -6547,7 +7393,7 @@ checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
 dependencies = [
  "bytemuck",
  "js-sys",
- "ndk",
+ "ndk 0.9.0",
  "objc2",
  "objc2-core-foundation",
  "objc2-core-graphics",
@@ -6569,7 +7415,7 @@ checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
 dependencies = [
  "futures-channel",
  "gio",
- "glib",
+ "glib 0.18.5",
  "libc",
  "soup3-sys",
 ]
@@ -6580,11 +7426,20 @@ version = "0.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
 dependencies = [
- "gio-sys",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "libc",
- "system-deps",
+ "system-deps 6.2.2",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3763264f6b73151db08c50ff20d7d8a0b8796e021cdea7ceedad07b80155fa0e"
+dependencies = [
+ "lock_api",
 ]
 
 [[package]]
@@ -6593,6 +7448,12 @@ version = "1.2.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 
+[[package]]
+name = "static_assertions"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
+
 [[package]]
 name = "strict-num"
 version = "0.1.1"
@@ -6820,7 +7681,7 @@ version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
 dependencies = [
- "core-foundation-sys",
+ "core-foundation-sys 0.8.7",
  "libc",
 ]
 
@@ -6830,13 +7691,26 @@ version = "6.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
 dependencies = [
- "cfg-expr",
+ "cfg-expr 0.15.8",
  "heck 0.5.0",
  "pkg-config",
  "toml 0.8.2",
  "version-compare",
 ]
 
+[[package]]
+name = "system-deps"
+version = "7.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396a35feb67335377e0251fcbc1092fc85c484bd4e3a7a54319399da127796e7"
+dependencies = [
+ "cfg-expr 0.20.8",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 1.1.3+spec-1.1.0",
+ "version-compare",
+]
+
 [[package]]
 name = "tao"
 version = "0.35.3"
@@ -6858,8 +7732,8 @@ dependencies = [
  "jni 0.21.1",
  "libc",
  "log",
- "ndk",
- "ndk-sys",
+ "ndk 0.9.0",
+ "ndk-sys 0.6.0+11769913",
  "objc2",
  "objc2-app-kit",
  "objc2-foundation",
@@ -6871,7 +7745,7 @@ dependencies = [
  "tao-macros",
  "unicode-segmentation",
  "url",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-version",
  "x11-dl",
@@ -6905,6 +7779,12 @@ version = "0.12.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
 
+[[package]]
+name = "target-lexicon"
+version = "0.13.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
+
 [[package]]
 name = "tauri"
 version = "2.11.5"
@@ -6955,7 +7835,7 @@ dependencies = [
  "webkit2gtk",
  "webview2-com",
  "window-vibrancy",
- "windows",
+ "windows 0.61.3",
 ]
 
 [[package]]
@@ -7059,13 +7939,24 @@ dependencies = [
 name = "tauri-plugin-call-lifecycle"
 version = "0.1.0"
 dependencies = [
+ "ashpd",
+ "cpal",
+ "futures-util",
+ "gstreamer",
+ "gstreamer-app",
+ "gstreamer-video",
  "livekit",
+ "nokhwa",
+ "raw-window-handle",
+ "screencapturekit",
  "secrecy",
  "serde",
  "tauri",
  "tauri-plugin",
  "thiserror 2.0.19",
  "tokio",
+ "windows 0.62.2",
+ "windows-future 0.3.2",
 ]
 
 [[package]]
@@ -7112,7 +8003,7 @@ checksum = "8e5cd17faa36a826e5686bd0fda5bc3f4c903682263f00cd50f2f778fc4bb866"
 dependencies = [
  "async-stream",
  "bytes",
- "cocoa",
+ "cocoa 0.26.1",
  "colored",
  "devtools-core",
  "futures",
@@ -7265,7 +8156,7 @@ dependencies = [
  "tokio",
  "url",
  "uuid",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "zbus",
 ]
@@ -7288,7 +8179,7 @@ dependencies = [
  "tauri-plugin",
  "thiserror 2.0.19",
  "url",
- "windows",
+ "windows 0.61.3",
  "zbus",
 ]
 
@@ -7337,8 +8228,8 @@ dependencies = [
  "tauri-plugin",
  "thiserror 2.0.19",
  "tokio",
- "windows",
- "windows-collections",
+ "windows 0.61.3",
+ "windows-collections 0.2.0",
 ]
 
 [[package]]
@@ -7444,7 +8335,7 @@ dependencies = [
  "url",
  "webkit2gtk",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
 ]
 
 [[package]]
@@ -7478,7 +8369,7 @@ dependencies = [
  "tauri-runtime",
  "tauri-utils",
  "url",
- "windows",
+ "windows 0.61.3",
  "winit",
  "x11-dl",
 ]
@@ -7506,7 +8397,7 @@ dependencies = [
  "url",
  "webkit2gtk",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
  "wry",
 ]
 
@@ -7588,7 +8479,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9ed071c670382e85fc2f48ae706492d8c338f4f89bf72520d32f8abfe880aade"
 dependencies = [
  "thiserror 2.0.19",
- "windows",
+ "windows 0.61.3",
  "windows-version",
 ]
 
@@ -7601,7 +8492,7 @@ dependencies = [
  "fastrand",
  "getrandom 0.4.3",
  "once_cell",
- "rustix",
+ "rustix 1.1.4",
  "windows-sys 0.61.2",
 ]
 
@@ -7702,7 +8593,7 @@ version = "1.1.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1ad99c4c6d32803332c548b1af0540b357b3f5fc0be8f6c6bfe8b2e6ae784070"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
 ]
 
 [[package]]
@@ -7769,7 +8660,7 @@ dependencies = [
  "arrayref",
  "arrayvec",
  "bytemuck",
- "cfg-if",
+ "cfg-if 1.0.4",
  "log",
  "tiny-skia-path",
 ]
@@ -8254,7 +9145,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b8765b90061cba6c22b5831f675da109ae5561588290f9fa2317adab2714d5a6"
 dependencies = [
  "memchr",
- "nom",
+ "nom 8.0.0",
  "petgraph 0.8.3",
 ]
 
@@ -8515,6 +9406,26 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "v4l"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8fbfea44a46799d62c55323f3c55d06df722fbe577851d848d328a1041c3403"
+dependencies = [
+ "bitflags 1.3.2",
+ "libc",
+ "v4l2-sys-mit",
+]
+
+[[package]]
+name = "v4l2-sys-mit"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6779878362b9bacadc7893eac76abe69612e8837ef746573c4a5239daf11990b"
+dependencies = [
+ "bindgen 0.65.1",
+]
+
 [[package]]
 name = "valuable"
 version = "0.1.1"
@@ -8599,7 +9510,7 @@ version = "0.2.126"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4b067c0c11094aef6b7a801c1e34a26affafdf3d051dba08456b868789aaf9a4"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "once_cell",
  "rustversion",
  "wasm-bindgen-macro",
@@ -8682,7 +9593,7 @@ checksum = "016ccf01d1c58b6f8999612813e17c9b2390f7d70671428869913310f83f54b8"
 dependencies = [
  "cc",
  "downcast-rs",
- "rustix",
+ "rustix 1.1.4",
  "scoped-tls",
  "smallvec",
  "wayland-sys",
@@ -8695,7 +9606,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e3c36a0f861ad76d0901f2800b46321410d9f73f2ea88aac0650d86c32688073"
 dependencies = [
  "bitflags 2.13.1",
- "rustix",
+ "rustix 1.1.4",
  "wayland-backend",
  "wayland-scanner",
 ]
@@ -8717,7 +9628,7 @@ version = "0.31.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4a52d18780be9b1314328a3de5f930b73d2200112e3849ca6cb11822793fb34d"
 dependencies = [
- "rustix",
+ "rustix 1.1.4",
  "wayland-client",
  "xcursor",
 ]
@@ -8852,10 +9763,10 @@ dependencies = [
  "gdk",
  "gdk-sys",
  "gio",
- "gio-sys",
- "glib",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib 0.18.5",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "gtk",
  "gtk-sys",
  "javascriptcore-rs",
@@ -8874,15 +9785,15 @@ dependencies = [
  "bitflags 1.3.2",
  "cairo-sys-rs",
  "gdk-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
+ "gio-sys 0.18.1",
+ "glib-sys 0.18.1",
+ "gobject-sys 0.18.0",
  "gtk-sys",
  "javascriptcore-rs-sys",
  "libc",
  "pkg-config",
  "soup3-sys",
- "system-deps",
+ "system-deps 6.2.2",
 ]
 
 [[package]]
@@ -8941,7 +9852,7 @@ checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
 dependencies = [
  "webview2-com-macros",
  "webview2-com-sys",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-implement",
  "windows-interface",
@@ -8965,7 +9876,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
 dependencies = [
  "thiserror 2.0.19",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
 ]
 
@@ -8975,6 +9886,18 @@ version = "0.1.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a28ac98ddc8b9274cb41bb4d9d4d5c425b6020c50c46f25559911905610b4a88"
 
+[[package]]
+name = "which"
+version = "4.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87ba24419a2078cd2b0f2ede2691b6c66d8e47836da3b6db8265ebad47afbfc7"
+dependencies = [
+ "either",
+ "home",
+ "once_cell",
+ "rustix 0.38.44",
+]
+
 [[package]]
 name = "winapi"
 version = "0.3.9"
@@ -9021,17 +9944,39 @@ dependencies = [
  "windows-version",
 ]
 
+[[package]]
+name = "windows"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9252e5725dbed82865af151df558e754e4a3c2c30818359eb17465f1346a1b49"
+dependencies = [
+ "windows-core 0.54.0",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows"
 version = "0.61.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
 dependencies = [
- "windows-collections",
+ "windows-collections 0.2.0",
  "windows-core 0.61.2",
- "windows-future",
+ "windows-future 0.2.1",
  "windows-link 0.1.3",
- "windows-numerics",
+ "windows-numerics 0.2.0",
+]
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections 0.3.2",
+ "windows-core 0.62.2",
+ "windows-future 0.3.2",
+ "windows-numerics 0.3.1",
 ]
 
 [[package]]
@@ -9043,6 +9988,25 @@ dependencies = [
  "windows-core 0.61.2",
 ]
 
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12661b9c89351d684a50a8a643ce5f608e20243b9fb84687800163429f161d65"
+dependencies = [
+ "windows-result 0.1.2",
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-core"
 version = "0.61.2"
@@ -9077,7 +10041,18 @@ checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
 dependencies = [
  "windows-core 0.61.2",
  "windows-link 0.1.3",
- "windows-threading",
+ "windows-threading 0.1.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+ "windows-threading 0.2.1",
 ]
 
 [[package]]
@@ -9124,6 +10099,16 @@ dependencies = [
  "windows-link 0.1.3",
 ]
 
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+]
+
 [[package]]
 name = "windows-registry"
 version = "0.5.3"
@@ -9135,6 +10120,15 @@ dependencies = [
  "windows-strings 0.4.2",
 ]
 
+[[package]]
+name = "windows-result"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e383302e8ec8515204254685643de10811af0ed97ea37210dc26fb0032647f8"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
 [[package]]
 name = "windows-result"
 version = "0.3.4"
@@ -9297,6 +10291,15 @@ dependencies = [
  "windows-link 0.1.3",
 ]
 
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
 [[package]]
 name = "windows-version"
 version = "0.1.7"
@@ -9498,7 +10501,7 @@ dependencies = [
  "dpi",
  "libc",
  "raw-window-handle",
- "rustix",
+ "rustix 1.1.4",
  "smol_str",
  "tracing",
  "winit-android",
@@ -9522,7 +10525,7 @@ dependencies = [
  "android-activity",
  "bitflags 2.13.1",
  "dpi",
- "ndk",
+ "ndk 0.9.0",
  "raw-window-handle",
  "smol_str",
  "tracing",
@@ -9634,7 +10637,7 @@ dependencies = [
  "libc",
  "memmap2",
  "raw-window-handle",
- "rustix",
+ "rustix 1.1.4",
  "sctk-adwaita",
  "smithay-client-toolkit",
  "smol_str",
@@ -9701,7 +10704,7 @@ dependencies = [
  "libc",
  "percent-encoding",
  "raw-window-handle",
- "rustix",
+ "rustix 1.1.4",
  "smol_str",
  "tracing",
  "winit-common",
@@ -9741,7 +10744,7 @@ version = "0.55.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
 dependencies = [
- "cfg-if",
+ "cfg-if 1.0.4",
  "windows-sys 0.59.0",
 ]
 
@@ -9760,7 +10763,7 @@ dependencies = [
  "libc",
  "log",
  "os_pipe",
- "rustix",
+ "rustix 1.1.4",
  "thiserror 2.0.19",
  "tree_magic_mini",
  "wayland-backend",
@@ -9795,7 +10798,7 @@ dependencies = [
  "javascriptcore-rs",
  "jni 0.21.1",
  "libc",
- "ndk",
+ "ndk 0.9.0",
  "objc2",
  "objc2-app-kit",
  "objc2-core-foundation",
@@ -9814,7 +10817,7 @@ dependencies = [
  "webkit2gtk",
  "webkit2gtk-sys",
  "webview2-com",
- "windows",
+ "windows 0.61.3",
  "windows-core 0.61.2",
  "windows-version",
  "x11-dl",
@@ -9852,7 +10855,7 @@ dependencies = [
  "libc",
  "libloading 0.8.9",
  "once_cell",
- "rustix",
+ "rustix 1.1.4",
  "x11rb-protocol",
  "xcursor",
 ]
@@ -9870,7 +10873,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
 dependencies = [
  "libc",
- "rustix",
+ "rustix 1.1.4",
 ]
 
 [[package]]
@@ -9954,7 +10957,7 @@ dependencies = [
  "hex",
  "libc",
  "ordered-stream",
- "rustix",
+ "rustix 1.1.4",
  "serde",
  "serde_repr",
  "tokio",
diff --git a/src-tauri/Info.plist b/src-tauri/Info.plist
index 99b9ecb70b..f02c618ae0 100644
--- a/src-tauri/Info.plist
+++ b/src-tauri/Info.plist
@@ -10,5 +10,7 @@
     <string>Sable needs camera access for video calls.</string>
     <key>NSMicrophoneUsageDescription</key>
     <string>Sable needs microphone access for voice and video calls.</string>
+    <key>NSScreenCaptureUsageDescription</key>
+    <string>Sable needs screen recording access to share your screen in calls.</string>
 </dict>
 </plist>
diff --git a/src-tauri/capabilities/mobile.json b/src-tauri/capabilities/mobile.json
index e5500a57d6..2413b617a9 100644
--- a/src-tauri/capabilities/mobile.json
+++ b/src-tauri/capabilities/mobile.json
@@ -8,6 +8,7 @@
     "deep-link:default",
     "edge-to-edge:default",
     "notifications:default",
-    "sharekit:default"
+    "sharekit:default",
+    "call-lifecycle:default"
   ]
 }
diff --git a/src-tauri/ios-project.yml b/src-tauri/ios-project.yml
index 0209f360da..7469c3ef3a 100644
--- a/src-tauri/ios-project.yml
+++ b/src-tauri/ios-project.yml
@@ -4,6 +4,10 @@ options:
   deploymentTarget:
     iOS: {{apple.ios-version}}
 fileGroups: [{{join file-groups}}]
+packages:
+  LiveKit:
+    url: https://github.com/livekit/client-sdk-swift.git
+    exactVersion: 2.15.2
 configs:
   debug: debug
   release: release
@@ -27,6 +31,38 @@ targetTemplates:
     settings:
       groups: [app]
 targets:
+  broadcast-extension:
+    type: app-extension
+    platform: iOS
+    sources:
+      - path: ../../broadcast-extension-ios
+    info:
+      path: broadcast-extension/Info.plist
+      properties:
+        CFBundleDisplayName: BroadcastExtension
+        CFBundleShortVersionString: {{apple.bundle-version-short}}
+        CFBundleVersion: "{{apple.bundle-version}}"
+        NSExtension:
+          NSExtensionPointIdentifier: com.apple.broadcast-services-upload
+          NSExtensionPrincipalClass: $(PRODUCT_MODULE_NAME).SampleHandler
+          NSExtensionAttributes:
+            RPBroadcastProcessMode: RPBroadcastProcessModeSampleBuffer
+    entitlements:
+      path: broadcast-extension/broadcast-extension.entitlements
+      properties:
+        com.apple.security.application-groups:
+          - group.{{app.identifier}}
+    dependencies:
+      - package: LiveKit
+        product: LiveKit
+    settings:
+      base:
+        PRODUCT_NAME: BroadcastExtension
+        PRODUCT_BUNDLE_IDENTIFIER: {{app.identifier}}.broadcast
+        SKIP_INSTALL: YES
+        {{#if apple.development-team}}
+        DEVELOPMENT_TEAM: {{apple.development-team}}
+        {{/if}}
   share-extension:
     type: app-extension
     platform: iOS
@@ -104,7 +140,11 @@ targets:
           - UIInterfaceOrientationLandscapeRight
         CFBundleShortVersionString: {{apple.bundle-version-short}}
         CFBundleVersion: "{{apple.bundle-version}}"
+        NSMicrophoneUsageDescription: Sable needs microphone access for voice and video calls.
+        NSCameraUsageDescription: Sable needs camera access for video calls.
         UIBackgroundModes: [audio]
+        RTCScreenSharingExtension: {{app.identifier}}.broadcast
+        RTCAppGroupIdentifier: group.{{app.identifier}}
         # Mirrors plugins.deep-link in tauri.conf.json: the plugin only patches
         # these in when cargo reruns its build script, so a fresh `tauri ios
         # init` silently loses them unless they live here.
@@ -141,8 +181,11 @@ targets:
         EXCLUDED_ARCHS[sdk=iphoneos*]: x86_64
       groups: [app]
     dependencies:
+      - package: LiveKit
       - target: share-extension
         embed: true
+      - target: broadcast-extension
+        embed: true
       - framework: {{ lib-output-file-name }}
         embed: false
       {{~#each ios-libraries}}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
index 10f24d4cbe..c9a2e5836e 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
@@ -4,20 +4,56 @@ version = "0.1.0"
 authors = [ "Sable Contributors" ]
 description = ""
 edition = "2021"
-rust-version = "1.77.2"
+rust-version = "1.97"
 exclude = ["/examples", "/dist-js", "/guest-js", "/node_modules"]
 links = "tauri-plugin-call-lifecycle"
 
 [dependencies]
 tauri = { version = "2.11.3", default-features = false }
-livekit = { version = "0.7", features = ["rustls-tls-native-roots"] }
 secrecy = { version = "0.10", features = ["serde"] }
 serde = "1.0"
 thiserror = "2"
-tokio = { version = "1", features = ["macros", "rt", "sync"] }
+tokio = { version = "1", features = ["macros", "rt", "sync", "time"] }
 
 [build-dependencies]
 tauri-plugin = { version = "2.6.3", features = ["build"] }
 
 [dev-dependencies]
 serde_json = "1.0"
+
+[target.'cfg(target_os = "linux")'.dependencies]
+ashpd = { version = "0.13", features = ["tokio", "screencast"] }
+cpal = "0.15"
+futures-util = "0.3"
+gstreamer = "0.25"
+gstreamer-app = "0.25"
+gstreamer-video = "0.25"
+nokhwa = { version = "0.10.11", default-features = false, features = ["input-v4l", "decoding"] }
+
+[target.'cfg(target_os = "macos")'.dependencies]
+nokhwa = { version = "0.10.11", default-features = false, features = ["input-avfoundation", "decoding"] }
+screencapturekit = { version = "8.0.1", features = ["async"] }
+
+[target.'cfg(target_os = "windows")'.dependencies]
+nokhwa = { version = "0.10.11", default-features = false, features = ["input-msmf", "decoding"] }
+raw-window-handle = "0.6"
+windows = { version = "=0.62.2", features = [
+    "Foundation",
+    "Foundation_Collections",
+    "Graphics_Capture",
+    "Graphics_DirectX_Direct3D11",
+    "Graphics_DirectX",
+    "Win32_Foundation",
+    "Win32_Graphics_Direct3D",
+    "Win32_Graphics_Direct3D11",
+    "Win32_Graphics_Dxgi",
+    "Win32_Graphics_Dxgi_Common",
+    "Win32_System_Com",
+    "Win32_System_WinRT",
+    "Win32_System_WinRT_Direct3D11",
+    "Win32_UI_Shell",
+] }
+windows-future = "0.3"
+
+[target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
+livekit = { version = "0.7", features = ["rustls-tls-native-roots"] }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/build.gradle.kts b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/build.gradle.kts
new file mode 100644
index 0000000000..af4a573750
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/build.gradle.kts
@@ -0,0 +1,34 @@
+plugins {
+    id("com.android.library")
+    id("org.jetbrains.kotlin.android")
+}
+
+android {
+    namespace = "app.tauri.call_lifecycle"
+    compileSdk = 36
+
+    defaultConfig {
+        minSdk = 21
+    }
+
+    buildTypes {
+        release {
+            isMinifyEnabled = false
+            proguardFiles(getDefaultProguardFile("proguard-android-optimize.txt"))
+        }
+    }
+    compileOptions {
+        sourceCompatibility = JavaVersion.VERSION_1_8
+        targetCompatibility = JavaVersion.VERSION_1_8
+    }
+    kotlinOptions {
+        jvmTarget = "1.8"
+    }
+}
+
+dependencies {
+    implementation(project(":tauri-android"))
+    implementation("androidx.core:core-ktx:1.16.0")
+    implementation("io.livekit:livekit-android:2.27.0")
+    implementation("org.jetbrains.kotlinx:kotlinx-coroutines-android:1.10.2")
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/settings.gradle b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/settings.gradle
new file mode 100644
index 0000000000..305f6f1202
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/settings.gradle
@@ -0,0 +1,30 @@
+pluginManagement {
+    repositories {
+        mavenCentral()
+        gradlePluginPortal()
+        google()
+    }
+    resolutionStrategy {
+        eachPlugin {
+            switch (requested.id.id) {
+                case "com.android.library":
+                    useVersion("8.0.2")
+                    break
+                case "org.jetbrains.kotlin.android":
+                    useVersion("1.8.20")
+                    break
+            }
+        }
+    }
+}
+
+dependencyResolutionManagement {
+    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
+    repositories {
+        mavenCentral()
+        google()
+    }
+}
+
+include ':tauri-android'
+project(':tauri-android').projectDir = new File('./.tauri/tauri-api')
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
new file mode 100644
index 0000000000..20073832a4
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="utf-8"?>
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <uses-permission android:name="android.permission.INTERNET" />
+    <uses-permission android:name="android.permission.CAMERA" />
+    <uses-permission android:name="android.permission.RECORD_AUDIO" />
+    <uses-permission android:name="android.permission.MODIFY_AUDIO_SETTINGS" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION" />
+
+    <application>
+        <service
+            android:name="io.livekit.android.room.track.screencapture.ScreenCaptureService"
+            android:exported="false"
+            android:foregroundServiceType="mediaProjection" />
+    </application>
+</manifest>
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
new file mode 100644
index 0000000000..b856efe4dd
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
@@ -0,0 +1,445 @@
+package app.tauri.call_lifecycle
+
+import android.app.Activity
+import android.content.Context
+import android.content.Intent
+import android.content.pm.PackageManager
+import android.media.AudioManager
+import android.os.SystemClock
+import androidx.activity.result.ActivityResult
+import androidx.core.content.ContextCompat
+import app.tauri.annotation.TauriPlugin
+import app.tauri.annotation.ActivityCallback
+import app.tauri.annotation.Command
+import app.tauri.annotation.InvokeArg
+import app.tauri.annotation.Permission
+import app.tauri.annotation.PermissionCallback
+import app.tauri.plugin.Channel
+import app.tauri.plugin.Invoke
+import app.tauri.plugin.JSObject
+import app.tauri.plugin.Plugin
+import io.livekit.android.LiveKit
+import io.livekit.android.events.RoomEvent
+import io.livekit.android.room.Room
+import io.livekit.android.room.track.screencapture.ScreenCaptureParams
+import kotlinx.coroutines.CancellationException
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.Dispatchers
+import kotlinx.coroutines.Job
+import kotlinx.coroutines.SupervisorJob
+import kotlinx.coroutines.cancel
+import kotlinx.coroutines.flow.collect
+import kotlinx.coroutines.launch
+
+@InvokeArg
+internal class ConnectArgs {
+    var operationId: String = ""
+    var connectionId: String = ""
+    var serverUrl: String = ""
+    var participantToken: String = ""
+    var audio: Boolean = false
+    var video: Boolean = false
+    var screenShare: Boolean = false
+    lateinit var channel: Channel
+}
+
+@InvokeArg
+internal class DisconnectArgs {
+    var operationId: String = ""
+    var connectionId: String = ""
+}
+
+private data class PendingConnect(
+    val invoke: Invoke,
+    val args: ConnectArgs,
+    val generation: Long,
+    var settled: Boolean = false,
+)
+
+@TauriPlugin(
+    permissions = [
+        Permission(
+            strings = ["android.permission.RECORD_AUDIO"],
+            alias = "microphone",
+        ),
+        Permission(
+            strings = ["android.permission.CAMERA"],
+            alias = "camera",
+        ),
+    ],
+)
+class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
+    private val scope = CoroutineScope(SupervisorJob() + Dispatchers.Main.immediate)
+    private var room: Room? = null
+    private var roomEvents: Job? = null
+    private var connectionJob: Job? = null
+    private var generation = 0L
+    private var activeOperationId: String? = null
+    private var activeConnectionId: String? = null
+    private var activeConnect: PendingConnect? = null
+    private var activeEvents: Channel? = null
+    private var pendingPermission: PendingConnect? = null
+    private var pendingProjection: PendingConnect? = null
+    private var projectionData: Intent? = null
+    private var previousAudioMode: Int? = null
+    private var previousSpeakerphoneState: Boolean? = null
+    private val lastEventAt = mutableMapOf<String, Long>()
+
+    @Command
+    fun connect(invoke: Invoke) {
+        val args = runCatching { invoke.parseArgs(ConnectArgs::class.java) }.getOrNull()
+        if (args == null || !args.isValid()) {
+            invoke.reject("call connection failed", "connect_failed")
+            return
+        }
+
+        if (isActive(args)) {
+            invoke.resolve(result(args))
+            return
+        }
+        if (room != null || pendingPermission != null || pendingProjection != null) {
+            invoke.reject("call connection failed", "connect_failed")
+            return
+        }
+
+        val nextGeneration = generation + 1
+        val pending = PendingConnect(invoke, args, nextGeneration)
+        val missing = buildList {
+            if (args.audio && !hasPermission(android.Manifest.permission.RECORD_AUDIO)) {
+                add("microphone")
+            }
+            if (args.video && !hasPermission(android.Manifest.permission.CAMERA)) {
+                add("camera")
+            }
+        }
+        if (missing.isNotEmpty()) {
+            pendingPermission = pending
+            requestPermissionForAliases(missing.toTypedArray(), invoke, "permissionResult")
+            return
+        }
+        requestProjectionOrConnect(pending)
+    }
+
+    @Command
+    fun disconnect(invoke: Invoke) {
+        val args = runCatching { invoke.parseArgs(DisconnectArgs::class.java) }.getOrNull()
+        if (args == null || args.operationId.isBlank() || args.connectionId.isBlank()) {
+            invoke.reject("call shutdown failed", "close_failed")
+            return
+        }
+
+        val pending = pendingPermission ?: pendingProjection
+        if (pending != null) {
+            if (pending.args.operationId != args.operationId || pending.args.connectionId != args.connectionId) {
+                invoke.resolve()
+                return
+            }
+            pendingPermission = null
+            pendingProjection = null
+            projectionData = null
+            invoke.resolve()
+            fail(pending, "connect_failed")
+            return
+        }
+
+        if (activeOperationId != args.operationId || activeConnectionId != args.connectionId) {
+            invoke.resolve()
+            return
+        }
+
+        val closeGeneration = generation + 1
+        generation = closeGeneration
+        activeConnect?.let { fail(it, "connect_failed") }
+        connectionJob?.cancel()
+        scope.launch {
+            val closeError = closeRoom(closeGeneration, emitResult = true)
+            if (closeError) {
+                invoke.reject("call shutdown failed", "close_failed")
+            } else {
+                invoke.resolve()
+            }
+        }
+    }
+
+    @PermissionCallback
+    private fun permissionResult(invoke: Invoke) {
+        val pending = pendingPermission ?: return
+        if (pending.invoke.id != invoke.id) return
+        pendingPermission = null
+
+        when {
+            pending.args.audio && !hasPermission(android.Manifest.permission.RECORD_AUDIO) ->
+                fail(pending, "audio_failed")
+            pending.args.video && !hasPermission(android.Manifest.permission.CAMERA) ->
+                fail(pending, "camera_failed")
+            else -> requestProjectionOrConnect(pending)
+        }
+    }
+
+    @ActivityCallback
+    private fun projectionResult(invoke: Invoke, result: ActivityResult) {
+        val pending = pendingProjection ?: return
+        if (pending.invoke.id != invoke.id) return
+        pendingProjection = null
+        if (result.resultCode != Activity.RESULT_OK || result.data == null) {
+            fail(pending, "screen_share_failed")
+            return
+        }
+        projectionData = result.data
+        beginConnect(pending)
+    }
+
+    override fun onDestroy(activity: androidx.appcompat.app.AppCompatActivity) {
+        roomEvents?.cancel()
+        connectionJob?.cancel()
+        val closeGeneration = generation + 1
+        generation = closeGeneration
+        scope.launch {
+            closeRoom(closeGeneration)
+            scope.cancel()
+        }
+        super.onDestroy(activity)
+    }
+
+    private fun requestProjectionOrConnect(pending: PendingConnect) {
+        if (!pending.args.screenShare) {
+            beginConnect(pending)
+            return
+        }
+
+        pendingProjection = pending
+        val manager = activity.getSystemService(Context.MEDIA_PROJECTION_SERVICE) as android.media.projection.MediaProjectionManager
+        startActivityForResult(
+            pending.invoke,
+            manager.createScreenCaptureIntent(),
+            "projectionResult",
+        )
+    }
+
+    private fun beginConnect(pending: PendingConnect) {
+        if (pending.generation <= generation || room != null) {
+            fail(pending, "connect_failed")
+            return
+        }
+        generation = pending.generation
+        activeOperationId = pending.args.operationId
+        activeConnectionId = pending.args.connectionId
+        activeConnect = pending
+        activeEvents = pending.args.channel
+        lastEventAt.clear()
+
+        connectionJob = scope.launch {
+            try {
+                connectRoom(pending)
+                if (!isCurrent(pending.generation, room)) {
+                    fail(pending, "connect_failed")
+                    return@launch
+                }
+                resolve(pending)
+            } catch (_: StaleConnection) {
+                fail(pending, "connect_failed")
+                return@launch
+            } catch (_: CancellationException) {
+                fail(pending, "connect_failed")
+                return@launch
+            } catch (failure: NativeFailure) {
+                if (!isCurrent(pending.generation, room)) {
+                    fail(pending, "connect_failed")
+                    return@launch
+                }
+                fail(pending, failure.code)
+                closeRoom(pending.generation)
+            } catch (_: Exception) {
+                if (!isCurrent(pending.generation, room)) {
+                    fail(pending, "connect_failed")
+                    return@launch
+                }
+                fail(pending, "connect_failed")
+                closeRoom(pending.generation)
+            }
+        }
+    }
+
+    private suspend fun connectRoom(pending: PendingConnect) {
+        val args = pending.args
+        val newRoom = LiveKit.create(activity.applicationContext)
+        room = newRoom
+        roomEvents = scope.launch {
+            newRoom.events.collect { event -> handleRoomEvent(pending.generation, event) }
+        }
+
+        try {
+            newRoom.connect(args.serverUrl, args.participantToken)
+            ensureCurrent(pending.generation, newRoom)
+            if (args.audio) {
+                configureAudio()
+                if (newRoom.localParticipant.setMicrophoneEnabled(true) != true) {
+                    throw NativeFailure("audio_failed")
+                }
+                ensureCurrent(pending.generation, newRoom)
+            }
+            if (args.video) {
+                if (newRoom.localParticipant.setCameraEnabled(true) != true) {
+                    throw NativeFailure("video_failed")
+                }
+                ensureCurrent(pending.generation, newRoom)
+            }
+            if (args.screenShare) {
+                val data = projectionData ?: throw NativeFailure("screen_share_failed")
+                val options = ScreenCaptureParams(
+                    mediaProjectionPermissionResultData = data,
+                )
+                if (newRoom.localParticipant.setScreenShareEnabled(true, options) != true) {
+                    throw NativeFailure("screen_share_failed")
+                }
+                ensureCurrent(pending.generation, newRoom)
+                projectionData = null
+            }
+        } catch (failure: NativeFailure) {
+            throw failure
+        } catch (failure: StaleConnection) {
+            throw failure
+        } catch (failure: CancellationException) {
+            throw failure
+        } catch (_: SecurityException) {
+            throw NativeFailure(if (args.audio) "audio_failed" else "camera_failed")
+        } catch (_: Exception) {
+            throw NativeFailure("connect_failed")
+        }
+    }
+
+    private suspend fun closeRoom(closeGeneration: Long, emitResult: Boolean = false): Boolean {
+        if (closeGeneration != generation) return false
+        val current = room ?: return false
+        room = null
+        roomEvents?.cancel()
+        roomEvents = null
+        projectionData = null
+        val failed = try {
+            current.disconnect()
+            false
+        } catch (_: Exception) {
+            true
+        }
+        if (emitResult) {
+            emit(if (failed) "failed" else "disconnected", if (failed) "close_failed" else null, closeGeneration)
+        }
+        restoreAudio()
+        activeOperationId = null
+        activeConnectionId = null
+        activeConnect = null
+        activeEvents = null
+        return failed
+    }
+
+    private fun handleRoomEvent(eventGeneration: Long, event: RoomEvent) {
+        if (eventGeneration != generation) return
+        when (event) {
+            is RoomEvent.Reconnecting -> emit("reconnecting", null, eventGeneration)
+            is RoomEvent.Reconnected -> emit("reconnected", null, eventGeneration)
+            is RoomEvent.Disconnected -> {
+                emit("disconnected", null, eventGeneration)
+                scope.launch { closeRoom(eventGeneration) }
+            }
+            else -> Unit
+        }
+    }
+
+    private fun emit(type: String, code: String?, _eventGeneration: Long) {
+        val channel = activeEvents ?: return
+        val now = SystemClock.elapsedRealtime()
+        val previous = lastEventAt[type]
+        if (type != "failed" && previous != null && now - previous < EVENT_INTERVAL_MS) return
+        lastEventAt[type] = now
+        val payload = JSObject()
+            .put("operationId", activeOperationId)
+            .put("connectionId", activeConnectionId)
+            .put("event", type)
+        if (code != null) payload.put("code", code)
+        channel.send(payload)
+    }
+
+    private fun fail(pending: PendingConnect, code: String) {
+        if (pending.settled) return
+        pending.settled = true
+        val args = pending.args
+        val safeCode = if (code in ERROR_CODES) code else "connect_failed"
+        args.channel.sendObject(
+            mapOf(
+                "operationId" to args.operationId,
+                "connectionId" to args.connectionId,
+                "event" to "failed",
+                "code" to safeCode,
+            ),
+        )
+        pending.invoke.reject(errorMessage(safeCode), safeCode)
+    }
+
+    private fun resolve(pending: PendingConnect) {
+        if (pending.settled) return
+        pending.settled = true
+        pending.invoke.resolve(result(pending.args))
+    }
+
+    private fun isActive(args: ConnectArgs): Boolean =
+        room != null && activeOperationId == args.operationId && activeConnectionId == args.connectionId
+
+    private fun isCurrent(candidateGeneration: Long, candidateRoom: Room?): Boolean =
+        generation == candidateGeneration && room === candidateRoom
+
+    private fun ensureCurrent(candidateGeneration: Long, candidateRoom: Room) {
+        if (!isCurrent(candidateGeneration, candidateRoom)) throw StaleConnection()
+    }
+
+    private fun result(args: ConnectArgs): JSObject = JSObject()
+        .put("operationId", args.operationId)
+        .put("connectionId", args.connectionId)
+
+    private fun hasPermission(permission: String): Boolean =
+        ContextCompat.checkSelfPermission(activity, permission) == PackageManager.PERMISSION_GRANTED
+
+    private fun configureAudio() {
+        val audioManager = activity.getSystemService(Context.AUDIO_SERVICE) as AudioManager
+        if (previousAudioMode == null) previousAudioMode = audioManager.mode
+        if (previousSpeakerphoneState == null) previousSpeakerphoneState = audioManager.isSpeakerphoneOn
+        audioManager.mode = AudioManager.MODE_IN_COMMUNICATION
+        audioManager.isSpeakerphoneOn = true
+    }
+
+    private fun restoreAudio() {
+        val audioManager = activity.getSystemService(Context.AUDIO_SERVICE) as AudioManager
+        previousAudioMode?.let { audioManager.mode = it }
+        previousSpeakerphoneState?.let { audioManager.isSpeakerphoneOn = it }
+        previousAudioMode = null
+        previousSpeakerphoneState = null
+    }
+
+    private fun errorMessage(code: String): String = when (code) {
+        "audio_failed" -> "native audio failed"
+        "camera_failed" -> "native camera failed"
+        "video_failed" -> "native video failed"
+        "screen_share_failed" -> "native screen share failed"
+        "close_failed" -> "call shutdown failed"
+        else -> "call connection failed"
+    }
+
+    private class NativeFailure(val code: String) : Exception()
+
+    private class StaleConnection : Exception()
+
+    private fun ConnectArgs.isValid(): Boolean =
+        operationId.isNotBlank() && connectionId.isNotBlank() && serverUrl.isNotBlank() &&
+            participantToken.isNotBlank() && runCatching { channel }.isSuccess
+
+    companion object {
+        private const val EVENT_INTERVAL_MS = 1_000L
+        private val ERROR_CODES = setOf(
+            "connect_failed",
+            "audio_failed",
+            "camera_failed",
+            "video_failed",
+            "screen_share_failed",
+            "close_failed",
+        )
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
index c2db410702..4bd6665845 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
@@ -2,6 +2,9 @@ export interface ConnectRequest {
     connectionId: string;
     serverUrl: string;
     participantToken: string;
+    audio?: boolean;
+    video?: boolean;
+    screenShare?: boolean;
 }
 export interface DisconnectRequest {
     connectionId: string;
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
index f8dd0fdbd5..85b5f879d7 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
@@ -4,6 +4,9 @@ export interface ConnectRequest {
   connectionId: string
   serverUrl: string
   participantToken: string
+  audio?: boolean
+  video?: boolean
+  screenShare?: boolean
 }
 
 export interface DisconnectRequest {
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Package.swift b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Package.swift
new file mode 100644
index 0000000000..8c0c0cf8c1
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Package.swift
@@ -0,0 +1,30 @@
+// swift-tools-version:5.3
+
+import PackageDescription
+
+let package = Package(
+  name: "tauri-plugin-call-lifecycle",
+  platforms: [
+    .macOS(.v10_13),
+    .iOS(.v13),
+  ],
+  products: [
+    .library(
+      name: "tauri-plugin-call-lifecycle",
+      type: .static,
+      targets: ["tauri-plugin-call-lifecycle"])
+  ],
+  dependencies: [
+    .package(name: "Tauri", path: "../.tauri/tauri-api"),
+    .package(url: "https://github.com/livekit/client-sdk-swift.git", exact: "2.15.2")
+  ],
+  targets: [
+    .target(
+      name: "tauri-plugin-call-lifecycle",
+      dependencies: [
+        .byName(name: "Tauri"),
+        .product(name: "LiveKit", package: "client-sdk-swift")
+      ],
+      path: "Sources")
+  ]
+)
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
new file mode 100644
index 0000000000..56a5724377
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
@@ -0,0 +1,377 @@
+import AVFoundation
+import LiveKit
+import Tauri
+
+private struct ConnectArgs: Decodable {
+  let operationId: String
+  let connectionId: String
+  let serverUrl: String
+  let participantToken: String
+  let audio: Bool
+  let video: Bool
+  let screenShare: Bool
+  let channel: Channel
+}
+
+private struct DisconnectArgs: Decodable {
+  let operationId: String
+  let connectionId: String
+}
+
+private struct ConnectResponse: Encodable {
+  let operationId: String
+  let connectionId: String
+}
+
+private enum EventKind: String, Encodable {
+  case reconnecting
+  case reconnected
+  case disconnected
+  case failed
+}
+
+private enum FailureCode: String, Encodable {
+  case connectFailed = "connect_failed"
+  case audioFailed = "audio_failed"
+  case cameraFailed = "camera_failed"
+  case videoFailed = "video_failed"
+  case screenShareFailed = "screen_share_failed"
+  case closeFailed = "close_failed"
+}
+
+private struct ControlEvent: Encodable {
+  let operationId: String
+  let connectionId: String
+  let event: EventKind
+  let code: FailureCode?
+}
+
+private enum SetupFailure {
+  case connect
+  case audio
+  case camera
+  case video
+  case screenShare
+
+  var code: FailureCode {
+    switch self {
+    case .connect: return .connectFailed
+    case .audio: return .audioFailed
+    case .camera: return .cameraFailed
+    case .video: return .videoFailed
+    case .screenShare: return .screenShareFailed
+    }
+  }
+}
+
+final class CallLifecyclePlugin: Plugin, RoomDelegate {
+  private var room: Room?
+  private var operationId: String?
+  private var connectionId: String?
+  private var eventChannel: Channel?
+  private var generation: UInt64 = 0
+  private var terminalGenerations = Set<UInt64>()
+
+  @objc public func connect(_ invoke: Invoke) throws {
+    let args = try invoke.parseArgs(ConnectArgs.self)
+    Task { @MainActor [weak self] in
+      await self?.connect(args, invoke: invoke)
+    }
+  }
+
+  @objc public func disconnect(_ invoke: Invoke) throws {
+    let args = try invoke.parseArgs(DisconnectArgs.self)
+    Task { @MainActor [weak self] in
+      await self?.disconnect(args, invoke: invoke)
+    }
+  }
+
+  @MainActor
+  private func connect(_ args: ConnectArgs, invoke: Invoke) async {
+    generation &+= 1
+    let currentGeneration = generation
+
+    // There is only one native room. Finish an older room before replacing it;
+    // its callbacks are ignored by the generation check below.
+    if let oldRoom = room {
+      room = nil
+      operationId = nil
+      connectionId = nil
+      eventChannel = nil
+      await oldRoom.disconnect()
+    }
+
+    let newRoom = Room(delegate: self)
+    room = newRoom
+    operationId = args.operationId
+    connectionId = args.connectionId
+    eventChannel = args.channel
+
+    if args.audio {
+      do {
+        try await requestMicrophoneAndConfigureAudio()
+      } catch {
+        await fail(.audio, room: newRoom, generation: currentGeneration, invoke: invoke)
+        return
+      }
+    }
+
+    if args.video {
+      do {
+        guard await requestCameraPermission() else { throw SetupError.denied }
+      } catch {
+        await fail(.camera, room: newRoom, generation: currentGeneration, invoke: invoke)
+        return
+      }
+    }
+
+    do {
+      guard isCurrent(newRoom, generation: currentGeneration) else {
+        invoke.reject("Native call setup failed.", code: FailureCode.connectFailed.rawValue)
+        return
+      }
+      try await newRoom.connect(url: args.serverUrl, token: args.participantToken)
+    } catch {
+      await fail(.connect, room: newRoom, generation: currentGeneration, invoke: invoke)
+      return
+    }
+
+    guard isCurrent(newRoom, generation: currentGeneration) else {
+      invoke.reject("Native call setup failed.", code: FailureCode.connectFailed.rawValue)
+      return
+    }
+
+    if args.audio {
+      do {
+        try await newRoom.localParticipant.setMicrophone(enabled: true)
+      } catch {
+        await fail(.audio, room: newRoom, generation: currentGeneration, invoke: invoke)
+        return
+      }
+    }
+
+    if args.video {
+      do {
+        try await newRoom.localParticipant.setCamera(enabled: true)
+      } catch {
+        await fail(.video, room: newRoom, generation: currentGeneration, invoke: invoke)
+        return
+      }
+    }
+
+    if args.screenShare {
+      do {
+        try await newRoom.localParticipant.setScreenShare(enabled: true)
+      } catch {
+        await fail(.screenShare, room: newRoom, generation: currentGeneration, invoke: invoke)
+        return
+      }
+    }
+
+    guard isCurrent(newRoom, generation: currentGeneration) else {
+      invoke.reject("Native call setup failed.", code: FailureCode.connectFailed.rawValue)
+      return
+    }
+    invoke.resolve(ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
+  }
+
+  @MainActor
+  private func disconnect(_ args: DisconnectArgs, invoke: Invoke) async {
+    guard let activeRoom = room,
+      operationId == args.operationId,
+      connectionId == args.connectionId,
+      let activeOperationId = operationId,
+      let activeChannel = eventChannel
+    else {
+      invoke.resolve(ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
+      return
+    }
+
+    let closingGeneration = generation
+    room = nil
+    operationId = nil
+    connectionId = nil
+    eventChannel = nil
+    generation &+= 1
+
+    await activeRoom.disconnect()
+    sendTerminalEvent(
+      .disconnected,
+      operationId: activeOperationId,
+      connectionId: args.connectionId,
+      channel: activeChannel,
+      generation: closingGeneration
+    )
+    invoke.resolve(ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
+  }
+
+  @MainActor
+  private func fail(
+    _ failure: SetupFailure,
+    room failedRoom: Room,
+    generation failedGeneration: UInt64,
+    invoke: Invoke
+  ) async {
+    guard isCurrent(failedRoom, generation: failedGeneration) else {
+      invoke.reject("Native call setup failed.", code: failure.code.rawValue)
+      return
+    }
+    guard let activeOperationId = operationId,
+      let activeConnectionId = connectionId,
+      let activeEventChannel = eventChannel
+    else {
+      invoke.reject("Native call setup failed.", code: failure.code.rawValue)
+      return
+    }
+
+    sendEvent(
+      .failed,
+      code: failure.code,
+      operationId: activeOperationId,
+      connectionId: activeConnectionId,
+      channel: activeEventChannel
+    )
+    terminalGenerations.insert(failedGeneration)
+    room = nil
+    self.operationId = nil
+    self.connectionId = nil
+    self.eventChannel = nil
+    generation &+= 1
+    await failedRoom.disconnect()
+    invoke.reject("Native call setup failed.", code: failure.code.rawValue)
+  }
+
+  @MainActor
+  private func requestMicrophoneAndConfigureAudio() async throws {
+    let session = AVAudioSession.sharedInstance()
+    if session.recordPermission == .undetermined {
+      let granted = await withCheckedContinuation { continuation in
+        session.requestRecordPermission { granted in
+          continuation.resume(returning: granted)
+        }
+      }
+      guard granted else { throw SetupError.denied }
+    } else {
+      guard session.recordPermission == .granted else { throw SetupError.denied }
+    }
+
+    try session.setCategory(
+      .playAndRecord,
+      mode: .voiceChat,
+      options: [.allowBluetooth, .allowBluetoothA2DP, .defaultToSpeaker]
+    )
+    try session.setActive(true)
+  }
+
+  @MainActor
+  private func requestCameraPermission() async -> Bool {
+    switch AVCaptureDevice.authorizationStatus(for: .video) {
+    case .authorized:
+      return true
+    case .notDetermined:
+      return await withCheckedContinuation { continuation in
+        AVCaptureDevice.requestAccess(for: .video) { granted in
+          continuation.resume(returning: granted)
+        }
+      }
+    default:
+      return false
+    }
+  }
+
+  @MainActor
+  private func isCurrent(_ candidate: Room, generation candidateGeneration: UInt64) -> Bool {
+    room === candidate && generation == candidateGeneration
+  }
+
+  @MainActor
+  private func sendEvent(
+    _ event: EventKind,
+    code: FailureCode? = nil,
+    operationId: String,
+    connectionId: String,
+    channel: Channel
+  ) {
+    try? channel.send(
+      ControlEvent(
+        operationId: operationId,
+        connectionId: connectionId,
+        event: event,
+        code: code
+      )
+    )
+  }
+
+  @MainActor
+  private func sendTerminalEvent(
+    _ event: EventKind,
+    operationId: String,
+    connectionId: String,
+    channel: Channel,
+    generation: UInt64
+  ) {
+    guard !terminalGenerations.contains(generation) else { return }
+    terminalGenerations.insert(generation)
+    sendEvent(
+      event,
+      operationId: operationId,
+      connectionId: connectionId,
+      channel: channel
+    )
+  }
+
+  func room(
+    _ room: Room,
+    didUpdate connectionState: ConnectionState,
+    from oldState: ConnectionState
+  ) {
+    Task { @MainActor [weak self] in
+      guard let self,
+        self.room === room,
+        let operationId = self.operationId,
+        let connectionId = self.connectionId,
+        let channel = self.eventChannel
+      else { return }
+
+      switch (oldState, connectionState) {
+      case (_, .reconnecting) where oldState != .reconnecting:
+        self.sendEvent(
+          .reconnecting,
+          operationId: operationId,
+          connectionId: connectionId,
+          channel: channel
+        )
+      case (.reconnecting, .connected):
+        self.sendEvent(
+          .reconnected,
+          operationId: operationId,
+          connectionId: connectionId,
+          channel: channel
+        )
+      case (_, .disconnected):
+        self.sendTerminalEvent(
+          .disconnected,
+          operationId: operationId,
+          connectionId: connectionId,
+          channel: channel,
+          generation: self.generation
+        )
+        self.room = nil
+        self.operationId = nil
+        self.connectionId = nil
+        self.eventChannel = nil
+      default:
+        break
+      }
+    }
+  }
+}
+
+private enum SetupError: Error {
+  case denied
+}
+
+@_cdecl("init_plugin_call_lifecycle")
+func initPlugin() -> Plugin {
+  return CallLifecyclePlugin()
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
index 51309351f4..3136c5eab0 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
@@ -1,14 +1,21 @@
 use std::marker::PhantomData;
 
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 use livekit::{Room, RoomEvent, RoomOptions};
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 use secrecy::ExposeSecret;
 use tauri::{async_runtime, AppHandle, Emitter, Runtime};
 use tokio::sync::{mpsc, oneshot};
 
+#[cfg(mobile)]
+use crate::mobile::{
+    MobileBackend, NativeConnectRequest, NativeControlEvent, NativeControlEventKind,
+};
+
 #[cfg(test)]
 use std::sync::{
     atomic::{AtomicUsize, Ordering},
-    Arc,
+    Arc, Mutex,
 };
 
 use crate::error::{Error, Result};
@@ -16,22 +23,79 @@ use crate::models::{
     CallLifecycleError, CallState, ConnectRequest, ConnectionState, DisconnectRequest,
 };
 
+#[cfg(target_os = "linux")]
+use crate::{
+    audio::AudioSession,
+    camera::{CameraFailure, CameraSession},
+    screen_share::{ScreenShareFailure, ScreenShareSession},
+};
+#[cfg(target_os = "macos")]
+use crate::{
+    camera_macos::{CameraFailure, CameraSession},
+    screen_share_macos::{ScreenShareFailure, ScreenShareSession},
+};
+#[cfg(target_os = "windows")]
+use crate::{
+    camera_windows::{CameraFailure, CameraSession},
+    screen_share_windows::{ScreenShareFailure, ScreenShareSession},
+};
+#[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "windows")))]
+#[derive(Debug, Clone, Copy)]
+enum ScreenShareFailure {
+    Unsupported,
+    Capture,
+}
+#[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "windows")))]
+#[allow(dead_code)]
+#[derive(Debug, Clone, Copy)]
+enum CameraFailure {
+    Unsupported,
+}
+
+#[derive(Debug, Clone, Copy)]
+enum CameraFailureEvent {
+    Failure(CameraFailure),
+    Closed,
+}
+
+#[derive(Debug, Clone, Copy)]
+enum ScreenShareFailureEvent {
+    Failure(ScreenShareFailure),
+    Closed,
+}
+
 pub(crate) const STATE_EVENT: &str = "plugin:call-lifecycle://state";
 pub(crate) const ERROR_EVENT: &str = "plugin:call-lifecycle://error";
 
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 type RoomEvents = mpsc::UnboundedReceiver<RoomEvent>;
+#[cfg(mobile)]
+type RoomEvents = mpsc::Receiver<NativeControlEvent>;
 
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 struct ConnectedRoom {
     room: OwnedRoom,
     events: RoomEvents,
 }
 
+#[cfg(mobile)]
+struct ConnectedRoom {
+    events: RoomEvents,
+}
+
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 enum OwnedRoom {
     LiveKit(Room),
     #[cfg(test)]
     Fake(Arc<AtomicUsize>),
+    #[cfg(test)]
+    FakeOrdered(Arc<std::sync::Mutex<Vec<&'static str>>>),
 }
 
+#[cfg(mobile)]
+type OwnedRoom<R> = MobileBackend<R>;
+
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 impl OwnedRoom {
     async fn close(self) -> std::result::Result<(), ()> {
         match self {
@@ -41,6 +105,11 @@ impl OwnedRoom {
                 closes.fetch_add(1, Ordering::SeqCst);
                 Ok(())
             }
+            #[cfg(test)]
+            Self::FakeOrdered(events) => {
+                events.lock().unwrap().push("room");
+                Ok(())
+            }
         }
     }
 }
@@ -54,20 +123,45 @@ pub(crate) enum Command {
 enum InternalMessage {
     ConnectFinished {
         connection_id: String,
+        operation_id: String,
         room: Option<ConnectedRoom>,
     },
 }
 
 struct PendingConnection {
     connection_id: String,
+    operation_id: String,
+    audio: bool,
+    video: bool,
+    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+    screen_share: bool,
     task: async_runtime::JoinHandle<()>,
     response: oneshot::Sender<Result<CallState>>,
 }
 
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 struct ActiveConnection {
     connection_id: String,
+    #[cfg_attr(not(mobile), allow(dead_code))]
+    operation_id: String,
     room: OwnedRoom,
     events: RoomEvents,
+    #[cfg(target_os = "linux")]
+    audio: Option<AudioSession>,
+    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+    camera: Option<CameraSession>,
+    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+    screen_share: Option<ScreenShareSession>,
+    #[cfg(test)]
+    screen_share_shutdown_marker: Option<Arc<Mutex<Vec<&'static str>>>>,
+}
+
+#[cfg(mobile)]
+struct ActiveConnection<R: Runtime> {
+    connection_id: String,
+    operation_id: String,
+    room: OwnedRoom<R>,
+    events: RoomEvents,
 }
 
 pub struct CallLifecycle<R: Runtime> {
@@ -76,6 +170,7 @@ pub struct CallLifecycle<R: Runtime> {
 }
 
 impl<R: Runtime> CallLifecycle<R> {
+    #[cfg(not(mobile))]
     pub(crate) fn new(app: AppHandle<R>) -> Self {
         let (commands, command_rx) = mpsc::channel(32);
         let (internal_tx, internal_rx) = mpsc::unbounded_channel();
@@ -86,6 +181,17 @@ impl<R: Runtime> CallLifecycle<R> {
         }
     }
 
+    #[cfg(mobile)]
+    pub(crate) fn new(app: AppHandle<R>, mobile: MobileBackend<R>) -> Self {
+        let (commands, command_rx) = mpsc::channel(32);
+        let (internal_tx, internal_rx) = mpsc::unbounded_channel();
+        async_runtime::spawn(run_actor(app, command_rx, internal_tx, internal_rx, mobile));
+        Self {
+            commands,
+            _runtime: PhantomData,
+        }
+    }
+
     pub async fn connect(&self, request: ConnectRequest) -> Result<CallState> {
         let (response, result) = oneshot::channel();
         self.commands
@@ -129,6 +235,16 @@ enum DisconnectDecision {
     Stale,
 }
 
+#[allow(dead_code)]
+fn event_matches_generation(
+    active_operation_id: &str,
+    active_connection_id: &str,
+    event_operation_id: &str,
+    event_connection_id: &str,
+) -> bool {
+    active_operation_id == event_operation_id && active_connection_id == event_connection_id
+}
+
 #[derive(Debug, Clone)]
 struct StateMachine {
     state: ConnectionState,
@@ -192,9 +308,17 @@ struct Actor<R: Runtime> {
     commands: mpsc::Receiver<Command>,
     internal_tx: mpsc::UnboundedSender<InternalMessage>,
     internal_rx: mpsc::UnboundedReceiver<InternalMessage>,
+    #[cfg(mobile)]
+    mobile: MobileBackend<R>,
     machine: StateMachine,
     pending: Option<PendingConnection>,
+    #[cfg(not(any(target_os = "android", target_os = "ios")))]
     active: Option<ActiveConnection>,
+    #[cfg(mobile)]
+    active: Option<ActiveConnection<R>>,
+    audio_failure: Option<mpsc::UnboundedReceiver<()>>,
+    camera_failure: Option<mpsc::UnboundedReceiver<CameraFailure>>,
+    screen_share_failure: Option<mpsc::UnboundedReceiver<ScreenShareFailure>>,
 }
 
 async fn run_actor<R: Runtime>(
@@ -202,15 +326,21 @@ async fn run_actor<R: Runtime>(
     commands: mpsc::Receiver<Command>,
     internal_tx: mpsc::UnboundedSender<InternalMessage>,
     internal_rx: mpsc::UnboundedReceiver<InternalMessage>,
+    #[cfg(mobile)] mobile: MobileBackend<R>,
 ) {
     let mut actor = Actor {
         app,
         commands,
         internal_tx,
         internal_rx,
+        #[cfg(mobile)]
+        mobile,
         machine: StateMachine::default(),
         pending: None,
         active: None,
+        audio_failure: None,
+        camera_failure: None,
+        screen_share_failure: None,
     };
     actor.emit_state();
 
@@ -225,15 +355,38 @@ async fn run_actor<R: Runtime>(
                     let Some(internal) = internal else { break };
                     actor.handle_internal(internal).await;
                 }
-                event = receive_room_event(&mut actor.active) => {
+                event = receive_backend_event(&mut actor.active) => {
                     match event {
-                        Some(event) => actor.handle_room_event(event).await,
+                        Some(event) => actor.handle_backend_event(event).await,
                         None => {
-                            close_active_connection(actor.active.take()).await;
+                            actor.audio_failure.take();
+                            actor.camera_failure.take();
+                            #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                            actor.screen_share_failure.take();
+                            let _ = close_active_connection(actor.active.take()).await;
                             actor.transition(ConnectionState::Idle, None);
                         }
                     }
                 }
+                audio_failed = receive_audio_failure(&mut actor.audio_failure) => {
+                    if audio_failed {
+                        actor.handle_audio_failure().await;
+                    }
+                }
+                camera_failed = receive_camera_failure(&mut actor.camera_failure) => {
+                    let failure = match camera_failed {
+                        CameraFailureEvent::Failure(failure) => failure,
+                        CameraFailureEvent::Closed => CameraFailure::Video,
+                    };
+                    actor.handle_camera_failure(failure).await;
+                }
+                screen_share_failed = receive_screen_share_failure(&mut actor.screen_share_failure) => {
+                    let failure = match screen_share_failed {
+                        ScreenShareFailureEvent::Failure(failure) => failure,
+                        ScreenShareFailureEvent::Closed => ScreenShareFailure::Capture,
+                    };
+                    actor.handle_screen_share_failure(failure).await;
+                }
             }
         } else {
             tokio::select! {
@@ -252,13 +405,66 @@ async fn run_actor<R: Runtime>(
     actor.cleanup().await;
 }
 
-async fn receive_room_event(active: &mut Option<ActiveConnection>) -> Option<RoomEvent> {
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
+type BackendEvent = RoomEvent;
+#[cfg(mobile)]
+type BackendEvent = NativeControlEvent;
+
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
+async fn receive_backend_event(active: &mut Option<ActiveConnection>) -> Option<BackendEvent> {
     match active.as_mut() {
         Some(active) => active.events.recv().await,
         None => std::future::pending().await,
     }
 }
 
+#[cfg(mobile)]
+async fn receive_backend_event<R: Runtime>(
+    active: &mut Option<ActiveConnection<R>>,
+) -> Option<BackendEvent> {
+    match active.as_mut() {
+        Some(active) => active.events.recv().await,
+        None => std::future::pending().await,
+    }
+}
+
+async fn receive_audio_failure(receiver: &mut Option<mpsc::UnboundedReceiver<()>>) -> bool {
+    match receiver.as_mut() {
+        Some(receiver) => receiver.recv().await.is_some(),
+        None => std::future::pending().await,
+    }
+}
+
+async fn receive_camera_failure(
+    receiver: &mut Option<mpsc::UnboundedReceiver<CameraFailure>>,
+) -> CameraFailureEvent {
+    if receiver.is_none() {
+        return std::future::pending().await;
+    }
+    match receiver.as_mut().unwrap().recv().await {
+        Some(failure) => CameraFailureEvent::Failure(failure),
+        None => {
+            receiver.take();
+            CameraFailureEvent::Closed
+        }
+    }
+}
+
+async fn receive_screen_share_failure(
+    receiver: &mut Option<mpsc::UnboundedReceiver<ScreenShareFailure>>,
+) -> ScreenShareFailureEvent {
+    if receiver.is_none() {
+        return std::future::pending().await;
+    }
+    match receiver.as_mut().unwrap().recv().await {
+        Some(failure) => ScreenShareFailureEvent::Failure(failure),
+        None => {
+            receiver.take();
+            ScreenShareFailureEvent::Closed
+        }
+    }
+}
+
 impl<R: Runtime> Actor<R> {
     fn emit_state(&self) {
         let _ = self.app.emit(STATE_EVENT, self.machine.snapshot());
@@ -307,9 +513,16 @@ impl<R: Runtime> Actor<R> {
             }
             ConnectDecision::Start => {
                 let connection_id = request.connection_id.clone();
+                let operation_id = format!("{connection_id}:{}", self.machine.revision);
                 self.transition(ConnectionState::Connecting, Some(connection_id.clone()));
                 let internal_tx = self.internal_tx.clone();
+                #[cfg(mobile)]
+                let mobile = self.mobile.clone();
+                #[cfg(mobile)]
+                let (events_sender, events) = mpsc::channel(32);
+                let pending_operation_id = operation_id.clone();
                 let task = async_runtime::spawn(async move {
+                    #[cfg(not(any(target_os = "android", target_os = "ios")))]
                     let room = Room::connect(
                         &request.server_url,
                         request.participant_token.expose_secret(),
@@ -321,13 +534,53 @@ impl<R: Runtime> Actor<R> {
                         room: OwnedRoom::LiveKit(room),
                         events,
                     });
+                    #[cfg(mobile)]
+                    let room = {
+                        let native_result = mobile
+                            .connect(NativeConnectRequest {
+                                operation_id: &operation_id,
+                                connection_id: &connection_id,
+                                server_url: &request.server_url,
+                                participant_token: &request.participant_token,
+                                audio: request.audio,
+                                video: request.video,
+                                screen_share: request.screen_share,
+                                channel: MobileBackend::event_channel(events_sender),
+                            })
+                            .await;
+                        match native_result {
+                            Ok(result)
+                                if result.operation_id == operation_id
+                                    && result.connection_id == connection_id =>
+                            {
+                                Some(ConnectedRoom { events })
+                            }
+                            _ => {
+                                mobile
+                                    .disconnect(
+                                        DisconnectRequest {
+                                            connection_id: connection_id.clone(),
+                                        },
+                                        &operation_id,
+                                    )
+                                    .await;
+                                None
+                            }
+                        }
+                    };
                     let _ = internal_tx.send(InternalMessage::ConnectFinished {
-                        connection_id,
+                        connection_id: connection_id.clone(),
+                        operation_id: operation_id.clone(),
                         room,
                     });
                 });
                 self.pending = Some(PendingConnection {
                     connection_id: request.connection_id,
+                    operation_id: pending_operation_id,
+                    audio: request.audio,
+                    video: request.video,
+                    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                    screen_share: request.screen_share,
                     task,
                     response,
                 });
@@ -351,6 +604,15 @@ impl<R: Runtime> Actor<R> {
             }
             DisconnectDecision::CancelPending => {
                 if let Some(pending) = self.pending.take() {
+                    #[cfg(mobile)]
+                    self.mobile
+                        .disconnect(
+                            DisconnectRequest {
+                                connection_id: pending.connection_id.clone(),
+                            },
+                            &pending.operation_id,
+                        )
+                        .await;
                     pending.task.abort();
                     let _ = pending.task.await;
                     close_queued_rooms(&mut self.internal_rx).await;
@@ -371,11 +633,14 @@ impl<R: Runtime> Actor<R> {
                     return;
                 };
 
-                let close_result = active.room.close().await;
+                let connection_id = active.connection_id.clone();
+                self.audio_failure.take();
+                self.camera_failure.take();
+                let close_result = close_active_connection(Some(active)).await;
                 self.transition(ConnectionState::Idle, None);
                 if close_result.is_err() {
                     let error = Error::CloseFailed;
-                    self.emit_error(&error, Some(active.connection_id));
+                    self.emit_error(&error, Some(connection_id));
                     let _ = response.send(Err(error));
                 } else {
                     let _ = response.send(Ok(self.machine.snapshot()));
@@ -388,20 +653,26 @@ impl<R: Runtime> Actor<R> {
         match message {
             InternalMessage::ConnectFinished {
                 connection_id,
+                operation_id,
                 room,
             } => {
                 let Some(pending) = self.pending.take() else {
                     close_connected_room(room).await;
                     return;
                 };
-                if pending.connection_id != connection_id {
+                if pending.connection_id != connection_id || pending.operation_id != operation_id {
                     close_connected_room(room).await;
                     let _ = pending.task.await;
                     return;
                 }
                 let _ = pending.task.await;
 
-                let Some(ConnectedRoom { room, events }) = room else {
+                let Some(ConnectedRoom {
+                    #[cfg(not(any(target_os = "android", target_os = "ios")))]
+                    room,
+                    events,
+                }) = room
+                else {
                     let error = Error::ConnectFailed;
                     self.emit_error(&error, Some(connection_id));
                     self.transition(ConnectionState::Idle, None);
@@ -409,10 +680,129 @@ impl<R: Runtime> Actor<R> {
                     return;
                 };
 
+                #[cfg(target_os = "linux")]
+                let (audio, audio_failure) = if pending.audio {
+                    let audio_result = match &room {
+                        OwnedRoom::LiveKit(room) => AudioSession::start(room).await,
+                        #[cfg(test)]
+                        OwnedRoom::Fake(_) => Err("audio requires a live room".to_owned()),
+                        #[cfg(test)]
+                        OwnedRoom::FakeOrdered(_) => Err("audio requires a live room".to_owned()),
+                    };
+                    match audio_result {
+                        Ok((audio, failure_rx)) => (Some(audio), Some(failure_rx)),
+                        Err(_) => {
+                            let error = Error::AudioFailed;
+                            let _ = room.close().await;
+                            self.emit_error(&error, Some(connection_id.clone()));
+                            self.transition(ConnectionState::Idle, None);
+                            let _ = pending.response.send(Err(error));
+                            return;
+                        }
+                    }
+                } else {
+                    (None, None)
+                };
+
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                let (camera, camera_failure) = if pending.video {
+                    let camera_result = match &room {
+                        OwnedRoom::LiveKit(room) => CameraSession::start(room).await,
+                        #[cfg(test)]
+                        OwnedRoom::Fake(_) => Err("camera requires a live room".to_owned()),
+                        #[cfg(test)]
+                        OwnedRoom::FakeOrdered(_) => Err("camera requires a live room".to_owned()),
+                    };
+                    match camera_result {
+                        Ok((camera, failure_rx)) => (Some(camera), Some(failure_rx)),
+                        Err(_) => {
+                            #[cfg(target_os = "linux")]
+                            if let Some(mut audio) = audio {
+                                audio.shutdown().await;
+                            }
+                            let error = Error::CameraFailed;
+                            let _ = room.close().await;
+                            self.emit_error(&error, Some(connection_id.clone()));
+                            self.transition(ConnectionState::Idle, None);
+                            let _ = pending.response.send(Err(error));
+                            return;
+                        }
+                    }
+                } else {
+                    (None, None)
+                };
+
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                let (screen_share, screen_share_failure) = if pending.screen_share {
+                    let screen_share_result = match &room {
+                        OwnedRoom::LiveKit(room) => {
+                            #[cfg(target_os = "windows")]
+                            {
+                                ScreenShareSession::start(&self.app, room).await
+                            }
+                            #[cfg(not(target_os = "windows"))]
+                            {
+                                ScreenShareSession::start(room).await
+                            }
+                        }
+                        #[cfg(test)]
+                        OwnedRoom::Fake(_) => Err("screen share requires a live room".to_owned()),
+                        #[cfg(test)]
+                        OwnedRoom::FakeOrdered(_) => {
+                            Err("screen share requires a live room".to_owned())
+                        }
+                    };
+                    match screen_share_result {
+                        Ok((screen_share, failure_rx)) => (Some(screen_share), Some(failure_rx)),
+                        Err(_) => {
+                            #[cfg(target_os = "linux")]
+                            if let Some(mut audio) = audio {
+                                audio.shutdown().await;
+                            }
+                            if let Some(mut camera) = camera {
+                                camera.shutdown().await;
+                            }
+                            let error = Error::ScreenShareFailed;
+                            let _ = room.close().await;
+                            self.emit_error(&error, Some(connection_id.clone()));
+                            self.transition(ConnectionState::Idle, None);
+                            let _ = pending.response.send(Err(error));
+                            return;
+                        }
+                    }
+                } else {
+                    (None, None)
+                };
+
+                #[cfg(target_os = "linux")]
+                {
+                    self.audio_failure = audio_failure;
+                }
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                {
+                    self.camera_failure = camera_failure;
+                }
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                {
+                    self.screen_share_failure = screen_share_failure;
+                }
+
                 self.active = Some(ActiveConnection {
                     connection_id: connection_id.clone(),
+                    operation_id,
+                    #[cfg(not(any(target_os = "android", target_os = "ios")))]
                     room,
+                    #[cfg(mobile)]
+                    room: self.mobile.clone(),
                     events,
+                    #[cfg(target_os = "linux")]
+                    audio,
+                    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                    camera,
+                    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                    screen_share,
+                    #[cfg(test)]
+                    screen_share_shutdown_marker: None,
                 });
                 self.transition(ConnectionState::Connected, Some(connection_id));
                 let _ = pending.response.send(Ok(self.machine.snapshot()));
@@ -420,8 +810,110 @@ impl<R: Runtime> Actor<R> {
         }
     }
 
-    async fn handle_room_event(&mut self, event: RoomEvent) {
+    async fn handle_audio_failure(&mut self) {
+        #[cfg(not(target_os = "linux"))]
+        {
+            self.audio_failure.take();
+            return;
+        }
+
+        #[cfg(target_os = "linux")]
+        {
+            let Some(connection_id) = self.machine.connection_id.clone() else {
+                return;
+            };
+            let active = self.active.take();
+            self.audio_failure.take();
+            self.camera_failure.take();
+            self.screen_share_failure.take();
+            self.transition(ConnectionState::Disconnecting, Some(connection_id.clone()));
+            let close_result = close_active_connection(active).await;
+            let error = Error::AudioFailed;
+            self.emit_error(&error, Some(connection_id.clone()));
+            if close_result.is_err() {
+                let close_error = Error::CloseFailed;
+                self.emit_error(&close_error, Some(connection_id));
+            }
+            self.transition(ConnectionState::Idle, None);
+        }
+    }
+
+    async fn handle_camera_failure(&mut self, failure: CameraFailure) {
+        #[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "windows")))]
+        {
+            let _ = failure;
+            self.camera_failure.take();
+            return;
+        }
+
+        #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+        {
+            let Some(connection_id) = self.machine.connection_id.clone() else {
+                return;
+            };
+            let active = self.active.take();
+            self.audio_failure.take();
+            self.camera_failure.take();
+            self.screen_share_failure.take();
+            self.transition(ConnectionState::Disconnecting, Some(connection_id.clone()));
+            let close_result = close_active_connection(active).await;
+            let error = match failure {
+                CameraFailure::Camera => Error::CameraFailed,
+                CameraFailure::Video => Error::VideoFailed,
+            };
+            self.emit_error(&error, Some(connection_id.clone()));
+            if close_result.is_err() {
+                let close_error = Error::CloseFailed;
+                self.emit_error(&close_error, Some(connection_id));
+            }
+            self.transition(ConnectionState::Idle, None);
+        }
+    }
+
+    #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+    async fn handle_screen_share_failure(&mut self, _failure: ScreenShareFailure) {
+        let Some(connection_id) = self.machine.connection_id.clone() else {
+            return;
+        };
+        let active = self.active.take();
+        self.audio_failure.take();
+        self.camera_failure.take();
+        self.screen_share_failure.take();
+        self.transition(ConnectionState::Disconnecting, Some(connection_id.clone()));
+        let close_result = close_active_connection(active).await;
+        let error = Error::ScreenShareFailed;
+        self.emit_error(&error, Some(connection_id.clone()));
+        if close_result.is_err() {
+            let close_error = Error::CloseFailed;
+            self.emit_error(&close_error, Some(connection_id));
+        }
+        self.transition(ConnectionState::Idle, None);
+    }
+
+    #[cfg(not(any(target_os = "linux", target_os = "macos", target_os = "windows")))]
+    async fn handle_screen_share_failure(&mut self, _failure: ScreenShareFailure) {
+        self.screen_share_failure.take();
+    }
+
+    #[cfg(not(any(target_os = "android", target_os = "ios")))]
+    async fn handle_backend_event(&mut self, event: RoomEvent) {
         match event {
+            RoomEvent::TrackSubscribed { track, .. } => {
+                #[cfg(target_os = "linux")]
+                if let livekit::track::RemoteTrack::Audio(track) = track {
+                    let failed = self
+                        .active
+                        .as_mut()
+                        .and_then(|active| active.audio.as_mut())
+                        .map(|audio| audio.subscribe_remote_audio(track).is_err())
+                        .unwrap_or(false);
+                    if failed {
+                        self.handle_audio_failure().await;
+                    }
+                }
+                #[cfg(not(target_os = "linux"))]
+                let _ = track;
+            }
             RoomEvent::Reconnecting => {
                 if let Some(connection_id) = self.machine.connection_id.clone() {
                     self.transition(ConnectionState::Reconnecting, Some(connection_id));
@@ -433,13 +925,60 @@ impl<R: Runtime> Actor<R> {
                 }
             }
             RoomEvent::Disconnected { .. } => {
-                close_active_connection(self.active.take()).await;
+                self.audio_failure.take();
+                self.camera_failure.take();
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                self.screen_share_failure.take();
+                let _ = close_active_connection(self.active.take()).await;
                 self.transition(ConnectionState::Idle, None);
             }
             _ => {}
         }
     }
 
+    #[cfg(mobile)]
+    async fn handle_backend_event(&mut self, event: NativeControlEvent) {
+        let Some(active) = self.active.as_ref() else {
+            return;
+        };
+        if !event_matches_generation(
+            &active.operation_id,
+            &active.connection_id,
+            &event.operation_id,
+            &event.connection_id,
+        ) {
+            return;
+        }
+
+        match event.kind {
+            NativeControlEventKind::Reconnecting => {
+                self.transition(ConnectionState::Reconnecting, Some(event.connection_id));
+            }
+            NativeControlEventKind::Reconnected => {
+                self.transition(ConnectionState::Connected, Some(event.connection_id));
+            }
+            NativeControlEventKind::Disconnected => {
+                self.audio_failure.take();
+                self.camera_failure.take();
+                let _ = close_active_connection(self.active.take()).await;
+                self.transition(ConnectionState::Idle, None);
+            }
+            NativeControlEventKind::Failed { code } => {
+                let active = self.active.take();
+                self.audio_failure.take();
+                self.camera_failure.take();
+                self.transition(
+                    ConnectionState::Disconnecting,
+                    Some(event.connection_id.clone()),
+                );
+                let _ = close_active_connection(active).await;
+                let error = code.error();
+                self.emit_error(&error, Some(event.connection_id));
+                self.transition(ConnectionState::Idle, None);
+            }
+        }
+    }
+
     async fn cleanup(&mut self) {
         if let Some(pending) = self.pending.take() {
             pending.task.abort();
@@ -448,22 +987,65 @@ impl<R: Runtime> Actor<R> {
         }
         close_queued_rooms(&mut self.internal_rx).await;
 
-        close_active_connection(self.active.take()).await;
+        self.audio_failure.take();
+        self.camera_failure.take();
+        #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+        self.screen_share_failure.take();
+        let _ = close_active_connection(self.active.take()).await;
+    }
+}
+
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
+async fn close_active_connection(active: Option<ActiveConnection>) -> std::result::Result<(), ()> {
+    if let Some(active) = active {
+        #[cfg(target_os = "linux")]
+        if let Some(mut audio) = active.audio {
+            audio.shutdown().await;
+        }
+        #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+        if let Some(mut camera) = active.camera {
+            camera.shutdown().await;
+        }
+        #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+        if let Some(mut screen_share) = active.screen_share {
+            screen_share.shutdown().await;
+        }
+        #[cfg(test)]
+        if let Some(marker) = active.screen_share_shutdown_marker {
+            marker.lock().unwrap().push("screen_share");
+        }
+        active.room.close().await
+    } else {
+        Ok(())
     }
 }
 
-async fn close_active_connection(active: Option<ActiveConnection>) {
+#[cfg(mobile)]
+async fn close_active_connection<R: Runtime>(
+    active: Option<ActiveConnection<R>>,
+) -> std::result::Result<(), ()> {
     if let Some(active) = active {
-        let _ = active.room.close().await;
+        let connection_id = active.connection_id;
+        let operation_id = active.operation_id;
+        return active
+            .room
+            .disconnect(DisconnectRequest { connection_id }, &operation_id)
+            .await
+            .map_err(|_| ());
     }
+    Ok(())
 }
 
+#[cfg(not(any(target_os = "android", target_os = "ios")))]
 async fn close_connected_room(room: Option<ConnectedRoom>) {
     if let Some(room) = room {
         let _ = room.room.close().await;
     }
 }
 
+#[cfg(mobile)]
+async fn close_connected_room(_room: Option<ConnectedRoom>) {}
+
 async fn close_queued_rooms(internal_rx: &mut mpsc::UnboundedReceiver<InternalMessage>) {
     while let Ok(message) = internal_rx.try_recv() {
         let InternalMessage::ConnectFinished {
@@ -484,7 +1066,7 @@ mod tests {
     use secrecy::SecretString;
     use std::sync::{
         atomic::{AtomicUsize, Ordering},
-        Arc,
+        Arc, Mutex,
     };
 
     #[test]
@@ -512,6 +1094,22 @@ mod tests {
         );
     }
 
+    #[test]
+    fn stale_native_generation_is_ignored_even_when_connection_id_is_reused() {
+        assert!(!super::event_matches_generation(
+            "connection:2",
+            "connection",
+            "connection:1",
+            "connection",
+        ));
+        assert!(super::event_matches_generation(
+            "connection:2",
+            "connection",
+            "connection:2",
+            "connection",
+        ));
+    }
+
     #[test]
     fn mismatched_disconnect_is_typed_stale_error() {
         let mut machine = StateMachine::default();
@@ -530,12 +1128,28 @@ mod tests {
             connection_id: "connection".into(),
             server_url: "wss://livekit.example".into(),
             participant_token: SecretString::from("secret-jwt"),
+            audio: false,
+            video: false,
+            screen_share: false,
         };
         let debug = format!("{request:?}");
         assert!(!debug.contains("secret-jwt"));
         assert!(debug.contains("REDACTED"));
     }
 
+    #[test]
+    fn media_options_default_to_disabled() {
+        let request: ConnectRequest = serde_json::from_value(serde_json::json!({
+            "connectionId": "connection",
+            "serverUrl": "wss://livekit.example",
+            "participantToken": "secret-jwt"
+        }))
+        .unwrap();
+        assert!(!request.audio);
+        assert!(!request.video);
+        assert!(!request.screen_share);
+    }
+
     #[test]
     fn errors_and_states_have_stable_sanitized_shapes() {
         let error = serde_json::to_value(Error::StaleConnection).unwrap();
@@ -546,6 +1160,13 @@ mod tests {
                 "message": "connection ID does not match active call"
             })
         );
+        assert_eq!(Error::CameraFailed.code(), "camera_failed");
+        assert_eq!(Error::VideoFailed.code(), "video_failed");
+        assert_eq!(Error::ScreenShareFailed.code(), "screen_share_failed");
+        assert_eq!(
+            Error::ScreenShareFailed.message(),
+            "native screen share failed"
+        );
 
         let state = serde_json::to_value(ConnectionState::Reconnecting).unwrap();
         assert_eq!(state, serde_json::json!("reconnecting"));
@@ -568,6 +1189,7 @@ mod tests {
         sender
             .send(super::InternalMessage::ConnectFinished {
                 connection_id: "one".into(),
+                operation_id: "one:1".into(),
                 room: Some(super::ConnectedRoom {
                     room: super::OwnedRoom::Fake(closes.clone()),
                     events,
@@ -585,19 +1207,37 @@ mod tests {
     async fn terminal_active_room_paths_close_owned_rooms_once() {
         let event_receiver_closes = Arc::new(AtomicUsize::new(0));
         let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel::<livekit::RoomEvent>();
-        super::close_active_connection(Some(super::ActiveConnection {
+        let _ = super::close_active_connection(Some(super::ActiveConnection {
             connection_id: "event-ended".into(),
+            operation_id: "event-ended:1".into(),
             room: super::OwnedRoom::Fake(event_receiver_closes.clone()),
             events,
+            #[cfg(target_os = "linux")]
+            audio: None,
+            #[cfg(target_os = "linux")]
+            camera: None,
+            #[cfg(target_os = "linux")]
+            screen_share: None,
+            #[cfg(test)]
+            screen_share_shutdown_marker: None,
         }))
         .await;
 
         let disconnected_closes = Arc::new(AtomicUsize::new(0));
         let (_events_sender, events) = tokio::sync::mpsc::unbounded_channel::<livekit::RoomEvent>();
-        super::close_active_connection(Some(super::ActiveConnection {
+        let _ = super::close_active_connection(Some(super::ActiveConnection {
             connection_id: "disconnected".into(),
+            operation_id: "disconnected:1".into(),
             room: super::OwnedRoom::Fake(disconnected_closes.clone()),
             events,
+            #[cfg(target_os = "linux")]
+            audio: None,
+            #[cfg(target_os = "linux")]
+            camera: None,
+            #[cfg(target_os = "linux")]
+            screen_share: None,
+            #[cfg(test)]
+            screen_share_shutdown_marker: None,
         }))
         .await;
 
@@ -618,6 +1258,74 @@ mod tests {
         assert_eq!(closes.load(Ordering::SeqCst), 1);
     }
 
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn audio_is_shutdown_before_room_close() {
+        let events = Arc::new(Mutex::new(Vec::new()));
+        let (_events_sender, room_events) = tokio::sync::mpsc::unbounded_channel();
+        let active = super::ActiveConnection {
+            connection_id: "ordered".into(),
+            operation_id: "ordered:1".into(),
+            room: super::OwnedRoom::FakeOrdered(events.clone()),
+            events: room_events,
+            audio: Some(crate::audio::AudioSession::without_devices(Some(
+                events.clone(),
+            ))),
+            camera: Some(crate::camera::CameraSession::without_devices(Some(
+                events.clone(),
+            ))),
+            screen_share: None,
+            screen_share_shutdown_marker: Some(events.clone()),
+        };
+
+        let _ = super::close_active_connection(Some(active)).await;
+        assert_eq!(
+            &*events.lock().unwrap(),
+            &["audio", "camera", "screen_share", "room"]
+        );
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn closed_camera_failure_receiver_is_consumed_once() {
+        let (sender, receiver) = tokio::sync::mpsc::unbounded_channel::<super::CameraFailure>();
+        drop(sender);
+        let mut receiver = Some(receiver);
+
+        assert!(matches!(
+            super::receive_camera_failure(&mut receiver).await,
+            super::CameraFailureEvent::Closed
+        ));
+        assert!(receiver.is_none());
+        assert!(tokio::time::timeout(
+            std::time::Duration::from_millis(10),
+            super::receive_camera_failure(&mut receiver)
+        )
+        .await
+        .is_err());
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn closed_screen_share_failure_receiver_is_consumed_once() {
+        let (sender, receiver) =
+            tokio::sync::mpsc::unbounded_channel::<super::ScreenShareFailure>();
+        drop(sender);
+        let mut receiver = Some(receiver);
+
+        assert!(matches!(
+            super::receive_screen_share_failure(&mut receiver).await,
+            super::ScreenShareFailureEvent::Closed
+        ));
+        assert!(receiver.is_none());
+        assert!(tokio::time::timeout(
+            std::time::Duration::from_millis(10),
+            super::receive_screen_share_failure(&mut receiver)
+        )
+        .await
+        .is_err());
+    }
+
     #[test]
     fn explicit_disconnect_has_one_close_transition() {
         let mut machine = StateMachine::default();
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/audio.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/audio.rs
new file mode 100644
index 0000000000..61cb57b666
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/audio.rs
@@ -0,0 +1,929 @@
+use std::collections::VecDeque;
+use std::sync::mpsc;
+use std::sync::{
+    atomic::{AtomicBool, Ordering},
+    Arc, Mutex,
+};
+use std::thread;
+use std::time::Duration;
+
+use cpal::traits::{DeviceTrait, HostTrait, StreamTrait};
+use cpal::{SampleFormat, SampleRate, StreamConfig};
+use futures_util::StreamExt;
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalAudioTrack, LocalTrack, RemoteAudioTrack, TrackSource};
+use livekit::webrtc::audio_frame::AudioFrame;
+use livekit::webrtc::audio_source::native::NativeAudioSource;
+use livekit::webrtc::audio_source::{AudioSourceOptions, RtcAudioSource};
+use livekit::webrtc::audio_stream::native::NativeAudioStream;
+use livekit::Room;
+use tauri::async_runtime;
+use tokio::sync::{mpsc as tokio_mpsc, oneshot, watch};
+
+pub(crate) const SAMPLE_RATE: u32 = 48_000;
+pub(crate) const CHANNELS: u32 = 1;
+pub(crate) const AUDIO_FRAME_SAMPLES: usize = 480;
+const AUDIO_QUEUE_CAPACITY: usize = 32;
+const PLAYBACK_QUEUE_CAPACITY: usize = 2;
+
+type AudioFrameSamples = [i16; AUDIO_FRAME_SAMPLES];
+
+struct CpalThread {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl CpalThread {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || {
+                let _ = thread.join();
+            })
+            .await;
+        }
+    }
+}
+
+fn supported_format_rank(format: SampleFormat) -> Option<u8> {
+    match format {
+        SampleFormat::I16 => Some(0),
+        SampleFormat::F32 => Some(1),
+        SampleFormat::U16 => Some(2),
+        _ => None,
+    }
+}
+
+fn select_input_config(device: &cpal::Device) -> Result<(StreamConfig, SampleFormat), String> {
+    let mut ranges: Vec<_> = device
+        .supported_input_configs()
+        .map_err(|error| format!("failed to query microphone configs: {error}"))?
+        .filter(|range| {
+            (range.channels() == 1 || range.channels() == 2)
+                && range.min_sample_rate() <= SampleRate(SAMPLE_RATE)
+                && SampleRate(SAMPLE_RATE) <= range.max_sample_rate()
+                && supported_format_rank(range.sample_format()).is_some()
+        })
+        .collect();
+    ranges.sort_by_key(|range| {
+        (
+            range.channels() != CHANNELS as u16,
+            supported_format_rank(range.sample_format()).unwrap(),
+        )
+    });
+    ranges
+        .into_iter()
+        .find_map(|range| {
+            range
+                .try_with_sample_rate(SampleRate(SAMPLE_RATE))
+                .map(|config| (config.config(), config.sample_format()))
+        })
+        .ok_or_else(|| "microphone has no compatible 48 kHz mono/stereo config".to_owned())
+}
+
+fn select_output_config(device: &cpal::Device) -> Result<(StreamConfig, SampleFormat), String> {
+    let mut ranges: Vec<_> = device
+        .supported_output_configs()
+        .map_err(|error| format!("failed to query speaker configs: {error}"))?
+        .filter(|range| {
+            (range.channels() == 1 || range.channels() == 2)
+                && range.min_sample_rate() <= SampleRate(SAMPLE_RATE)
+                && SampleRate(SAMPLE_RATE) <= range.max_sample_rate()
+                && supported_format_rank(range.sample_format()).is_some()
+        })
+        .collect();
+    ranges.sort_by_key(|range| {
+        (
+            range.channels() != 1,
+            supported_format_rank(range.sample_format()).unwrap(),
+        )
+    });
+    ranges
+        .into_iter()
+        .find_map(|range| {
+            range
+                .try_with_sample_rate(SampleRate(SAMPLE_RATE))
+                .map(|config| (config.config(), config.sample_format()))
+        })
+        .ok_or_else(|| "speaker has no compatible 48 kHz mono/stereo config".to_owned())
+}
+
+fn f32_to_i16(sample: f32) -> i16 {
+    (sample.clamp(-1.0, 1.0) * 32_767.0) as i16
+}
+
+fn u16_to_i16(sample: u16) -> i16 {
+    (sample as i32 - 32_768) as i16
+}
+
+fn i16_to_f32(sample: i16) -> f32 {
+    sample as f32 / 32_768.0
+}
+
+fn i16_to_u16(sample: i16) -> u16 {
+    (sample as i32 + 32_768) as u16
+}
+
+struct PlaybackQueue {
+    frames: Mutex<VecDeque<AudioFrameSamples>>,
+    capacity: usize,
+}
+
+impl PlaybackQueue {
+    fn new(capacity: usize) -> Self {
+        Self {
+            frames: Mutex::new(VecDeque::with_capacity(capacity)),
+            capacity,
+        }
+    }
+
+    fn push_latest(&self, frame: AudioFrameSamples) {
+        let mut frames = self.frames.lock().unwrap();
+        if frames.len() >= self.capacity {
+            frames.pop_front();
+        }
+        frames.push_back(frame);
+    }
+
+    fn pop_newest_nonblocking(&self) -> Option<AudioFrameSamples> {
+        self.frames.try_lock().ok().and_then(|mut frames| {
+            let newest = frames.pop_back();
+            frames.clear();
+            newest
+        })
+    }
+
+    fn clear(&self) {
+        self.frames.lock().unwrap().clear();
+    }
+
+    #[cfg(test)]
+    fn len_nonblocking(&self) -> Option<usize> {
+        self.frames.try_lock().ok().map(|frames| frames.len())
+    }
+}
+
+struct TrackSlot {
+    latest: Mutex<Option<AudioFrameSamples>>,
+    ended: AtomicBool,
+}
+
+impl TrackSlot {
+    fn new() -> Self {
+        Self {
+            latest: Mutex::new(None),
+            ended: AtomicBool::new(false),
+        }
+    }
+
+    fn mark_ended(&self) {
+        self.ended.store(true, Ordering::Release);
+    }
+
+    fn replace_latest(&self, frame: AudioFrameSamples) {
+        *self.latest.lock().unwrap() = Some(frame);
+    }
+
+    fn take_latest(&self) -> Option<AudioFrameSamples> {
+        self.latest.lock().unwrap().take()
+    }
+}
+
+fn prune_ended_slots(slots: &mut Vec<Arc<TrackSlot>>) {
+    slots.retain(|slot| !slot.ended.load(Ordering::Acquire));
+}
+
+struct TrackEndGuard(Arc<TrackSlot>);
+
+impl Drop for TrackEndGuard {
+    fn drop(&mut self) {
+        self.0.mark_ended();
+    }
+}
+
+fn mix_latest_frames(slots: &[Arc<TrackSlot>]) -> Option<AudioFrameSamples> {
+    let mut mixed = [0i32; AUDIO_FRAME_SAMPLES];
+    let mut tracks = 0;
+    for slot in slots {
+        let Some(frame) = slot.take_latest() else {
+            continue;
+        };
+        tracks += 1;
+        for (sum, sample) in mixed.iter_mut().zip(frame) {
+            *sum += sample as i32;
+        }
+    }
+    (tracks > 0).then(|| mixed.map(|sample| sample.clamp(i16::MIN as i32, i16::MAX as i32) as i16))
+}
+
+fn enqueue_input_samples<T: Copy>(
+    data: &[T],
+    channels: usize,
+    pending: &mut AudioFrameSamples,
+    pending_len: &mut usize,
+    sender: &tokio_mpsc::Sender<AudioFrameSamples>,
+    convert: fn(T) -> i16,
+) {
+    for input_frame in data.chunks_exact(channels) {
+        let sample = if channels == 1 {
+            convert(input_frame[0])
+        } else {
+            let left = convert(input_frame[0]) as i32;
+            let right = convert(input_frame[1]) as i32;
+            ((left + right) / 2).clamp(i16::MIN as i32, i16::MAX as i32) as i16
+        };
+        pending[*pending_len] = sample;
+        *pending_len += 1;
+        if *pending_len != AUDIO_FRAME_SAMPLES {
+            continue;
+        }
+
+        let frame = *pending;
+        *pending_len = 0;
+        match sender.try_send(frame) {
+            Ok(()) | Err(tokio_mpsc::error::TrySendError::Full(_)) => {}
+            Err(tokio_mpsc::error::TrySendError::Closed(_)) => return,
+        }
+    }
+}
+
+fn build_input_stream(
+    device: &cpal::Device,
+    config: &StreamConfig,
+    format: SampleFormat,
+    sender: tokio_mpsc::Sender<AudioFrameSamples>,
+    failure_tx: tokio_mpsc::UnboundedSender<()>,
+) -> Result<cpal::Stream, String> {
+    let channels = config.channels as usize;
+    let stream = match format {
+        SampleFormat::I16 => {
+            let mut pending = [0; AUDIO_FRAME_SAMPLES];
+            let mut pending_len = 0;
+            let failure_tx = failure_tx.clone();
+            device.build_input_stream(
+                config,
+                move |data: &[i16], _| {
+                    enqueue_input_samples(
+                        data,
+                        channels,
+                        &mut pending,
+                        &mut pending_len,
+                        &sender,
+                        |sample| sample,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        SampleFormat::F32 => {
+            let mut pending = [0; AUDIO_FRAME_SAMPLES];
+            let mut pending_len = 0;
+            let failure_tx = failure_tx.clone();
+            device.build_input_stream(
+                config,
+                move |data: &[f32], _| {
+                    enqueue_input_samples(
+                        data,
+                        channels,
+                        &mut pending,
+                        &mut pending_len,
+                        &sender,
+                        f32_to_i16,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        SampleFormat::U16 => {
+            let mut pending = [0; AUDIO_FRAME_SAMPLES];
+            let mut pending_len = 0;
+            let failure_tx = failure_tx.clone();
+            device.build_input_stream(
+                config,
+                move |data: &[u16], _| {
+                    enqueue_input_samples(
+                        data,
+                        channels,
+                        &mut pending,
+                        &mut pending_len,
+                        &sender,
+                        u16_to_i16,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        _ => return Err(format!("unsupported microphone sample format: {format}")),
+    };
+    stream.map_err(|error| format!("failed to build microphone stream: {error}"))
+}
+
+fn next_playback_sample(
+    queue: &PlaybackQueue,
+    current: &mut AudioFrameSamples,
+    offset: &mut usize,
+) -> i16 {
+    loop {
+        if *offset < AUDIO_FRAME_SAMPLES {
+            let sample = current[*offset];
+            *offset += 1;
+            return sample;
+        }
+        match queue.pop_newest_nonblocking() {
+            Some(samples) => {
+                *current = samples;
+                *offset = 0;
+            }
+            None => return 0,
+        }
+    }
+}
+
+fn fill_output_samples<T: Copy>(
+    data: &mut [T],
+    channels: usize,
+    queue: &PlaybackQueue,
+    current: &mut AudioFrameSamples,
+    offset: &mut usize,
+    convert: fn(i16) -> T,
+) {
+    for output_frame in data.chunks_mut(channels) {
+        let sample = convert(next_playback_sample(queue, current, offset));
+        output_frame.fill(sample);
+    }
+}
+
+fn build_output_stream(
+    device: &cpal::Device,
+    config: &StreamConfig,
+    format: SampleFormat,
+    queue: Arc<PlaybackQueue>,
+    failure_tx: tokio_mpsc::UnboundedSender<()>,
+) -> Result<cpal::Stream, String> {
+    let channels = config.channels as usize;
+    let stream = match format {
+        SampleFormat::I16 => {
+            let mut current = [0; AUDIO_FRAME_SAMPLES];
+            let mut offset = AUDIO_FRAME_SAMPLES;
+            let failure_tx = failure_tx.clone();
+            device.build_output_stream(
+                config,
+                move |data: &mut [i16], _| {
+                    fill_output_samples(
+                        data,
+                        channels,
+                        &queue,
+                        &mut current,
+                        &mut offset,
+                        |sample| sample,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        SampleFormat::F32 => {
+            let mut current = [0; AUDIO_FRAME_SAMPLES];
+            let mut offset = AUDIO_FRAME_SAMPLES;
+            let failure_tx = failure_tx.clone();
+            device.build_output_stream(
+                config,
+                move |data: &mut [f32], _| {
+                    fill_output_samples(
+                        data,
+                        channels,
+                        &queue,
+                        &mut current,
+                        &mut offset,
+                        i16_to_f32,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        SampleFormat::U16 => {
+            let mut current = [0; AUDIO_FRAME_SAMPLES];
+            let mut offset = AUDIO_FRAME_SAMPLES;
+            let failure_tx = failure_tx.clone();
+            device.build_output_stream(
+                config,
+                move |data: &mut [u16], _| {
+                    fill_output_samples(
+                        data,
+                        channels,
+                        &queue,
+                        &mut current,
+                        &mut offset,
+                        i16_to_u16,
+                    );
+                },
+                move |_| {
+                    let _ = failure_tx.send(());
+                },
+                None,
+            )
+        }
+        _ => return Err(format!("unsupported speaker sample format: {format}")),
+    };
+    stream.map_err(|error| format!("failed to build speaker stream: {error}"))
+}
+
+fn spawn_input_stream(
+    device: cpal::Device,
+    config: StreamConfig,
+    format: SampleFormat,
+    sender: tokio_mpsc::Sender<AudioFrameSamples>,
+    failure_tx: tokio_mpsc::UnboundedSender<()>,
+) -> (oneshot::Receiver<Result<(), String>>, CpalThread) {
+    let (ready_tx, ready_rx) = oneshot::channel();
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || {
+        let stream = match build_input_stream(&device, &config, format, sender, failure_tx) {
+            Ok(stream) => stream,
+            Err(error) => {
+                let _ = ready_tx.send(Err(error));
+                return;
+            }
+        };
+        if let Err(error) = stream.play() {
+            let _ = ready_tx.send(Err(format!("failed to start microphone stream: {error}")));
+            return;
+        }
+        let _ = ready_tx.send(Ok(()));
+        let _ = stop_rx.recv();
+        drop(stream);
+    });
+    (
+        ready_rx,
+        CpalThread {
+            stop: stop_tx,
+            thread: Some(thread),
+        },
+    )
+}
+
+fn spawn_output_stream(
+    device: cpal::Device,
+    config: StreamConfig,
+    format: SampleFormat,
+    queue: Arc<PlaybackQueue>,
+    failure_tx: tokio_mpsc::UnboundedSender<()>,
+) -> (oneshot::Receiver<Result<(), String>>, CpalThread) {
+    let (ready_tx, ready_rx) = oneshot::channel();
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || {
+        let stream = match build_output_stream(&device, &config, format, queue, failure_tx) {
+            Ok(stream) => stream,
+            Err(error) => {
+                let _ = ready_tx.send(Err(error));
+                return;
+            }
+        };
+        if let Err(error) = stream.play() {
+            let _ = ready_tx.send(Err(format!("failed to start speaker stream: {error}")));
+            return;
+        }
+        let _ = ready_tx.send(Ok(()));
+        let _ = stop_rx.recv();
+        drop(stream);
+    });
+    (
+        ready_rx,
+        CpalThread {
+            stop: stop_tx,
+            thread: Some(thread),
+        },
+    )
+}
+
+fn enqueue_track_samples(
+    data: &[i16],
+    pending: &mut AudioFrameSamples,
+    pending_len: &mut usize,
+    slot: &TrackSlot,
+) {
+    for sample in data.iter().copied() {
+        pending[*pending_len] = sample;
+        *pending_len += 1;
+        if *pending_len != AUDIO_FRAME_SAMPLES {
+            continue;
+        }
+        let frame = *pending;
+        *pending_len = 0;
+        slot.replace_latest(frame);
+    }
+}
+
+async fn run_remote_track(
+    track: RemoteAudioTrack,
+    slot: Arc<TrackSlot>,
+    mut cancellation: watch::Receiver<bool>,
+) {
+    let _ended = TrackEndGuard(slot.clone());
+    let mut stream = NativeAudioStream::new(track.rtc_track(), SAMPLE_RATE as i32, CHANNELS as i32);
+    let mut pending = [0; AUDIO_FRAME_SAMPLES];
+    let mut pending_len = 0;
+    loop {
+        let frame = tokio::select! {
+            _ = cancellation.changed() => break,
+            frame = stream.next() => {
+                let Some(frame) = frame else { break };
+                frame
+            }
+        };
+        enqueue_track_samples(frame.data.as_ref(), &mut pending, &mut pending_len, &slot);
+    }
+}
+
+fn spawn_mixer_task(
+    mut track_commands: tokio_mpsc::UnboundedReceiver<RemoteAudioTrack>,
+    playback_queue: Arc<PlaybackQueue>,
+    mut cancellation: watch::Receiver<bool>,
+) -> async_runtime::JoinHandle<()> {
+    async_runtime::spawn(async move {
+        let mut track_slots = Vec::new();
+        let mut track_tasks = tokio::task::JoinSet::new();
+        let mut interval = tokio::time::interval(Duration::from_millis(10));
+        interval.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Skip);
+        loop {
+            tokio::select! {
+                _ = cancellation.changed() => break,
+                track = track_commands.recv() => {
+                    let Some(track) = track else { break };
+                    let slot = Arc::new(TrackSlot::new());
+                    track_slots.push(slot.clone());
+                    track_tasks.spawn(run_remote_track(track, slot, cancellation.clone()));
+                }
+                _ = interval.tick() => {
+                    while track_tasks.try_join_next().is_some() {}
+                    prune_ended_slots(&mut track_slots);
+                    if let Some(frame) = mix_latest_frames(&track_slots) {
+                        playback_queue.push_latest(frame);
+                    }
+                }
+            }
+        }
+        track_tasks.abort_all();
+        while track_tasks.join_next().await.is_some() {}
+    })
+}
+
+fn enqueue_mixer_command<T>(sender: &tokio_mpsc::UnboundedSender<T>, command: T) -> Result<(), ()> {
+    sender.send(command).map_err(|_| ())
+}
+
+pub(crate) struct AudioSession {
+    cancellation: watch::Sender<bool>,
+    capture_stream: Option<CpalThread>,
+    playback_stream: Option<CpalThread>,
+    capture_task: Option<async_runtime::JoinHandle<()>>,
+    mixer_task: Option<async_runtime::JoinHandle<()>>,
+    mixer_commands: tokio_mpsc::UnboundedSender<RemoteAudioTrack>,
+    playback_queue: Arc<PlaybackQueue>,
+    _source: NativeAudioSource,
+    stopped: bool,
+    #[cfg(test)]
+    shutdown_marker: Option<Arc<Mutex<Vec<&'static str>>>>,
+}
+
+impl AudioSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, tokio_mpsc::UnboundedReceiver<()>), String> {
+        let host = cpal::default_host();
+        let input_device = host
+            .default_input_device()
+            .ok_or_else(|| "no default microphone is available".to_owned())?;
+        let output_device = host
+            .default_output_device()
+            .ok_or_else(|| "no default speaker is available".to_owned())?;
+        let (input_config, input_format) = select_input_config(&input_device)?;
+        let (output_config, output_format) = select_output_config(&output_device)?;
+
+        let (input_tx, mut input_rx) = tokio_mpsc::channel(AUDIO_QUEUE_CAPACITY);
+        let playback_queue = Arc::new(PlaybackQueue::new(PLAYBACK_QUEUE_CAPACITY));
+        let (mixer_commands, mixer_command_rx) = tokio_mpsc::unbounded_channel();
+        let (cancellation, cancellation_rx) = watch::channel(false);
+        let (failure_tx, failure_rx) = tokio_mpsc::unbounded_channel();
+        let capture_failure_tx = failure_tx.clone();
+        let (input_ready, input_stream) = spawn_input_stream(
+            input_device,
+            input_config,
+            input_format,
+            input_tx,
+            failure_tx.clone(),
+        );
+        let input_stream = match input_ready.await {
+            Ok(Ok(())) => input_stream,
+            Ok(Err(error)) => {
+                input_stream.stop_and_join().await;
+                return Err(error);
+            }
+            Err(_) => {
+                input_stream.stop_and_join().await;
+                return Err("microphone startup thread ended unexpectedly".to_owned());
+            }
+        };
+
+        let (output_ready, output_stream) = spawn_output_stream(
+            output_device,
+            output_config,
+            output_format,
+            playback_queue.clone(),
+            failure_tx,
+        );
+        let output_stream = match output_ready.await {
+            Ok(Ok(())) => output_stream,
+            Ok(Err(error)) => {
+                output_stream.stop_and_join().await;
+                input_stream.stop_and_join().await;
+                return Err(error);
+            }
+            Err(_) => {
+                output_stream.stop_and_join().await;
+                input_stream.stop_and_join().await;
+                return Err("speaker startup thread ended unexpectedly".to_owned());
+            }
+        };
+
+        let source =
+            NativeAudioSource::new(AudioSourceOptions::default(), SAMPLE_RATE, CHANNELS, 0);
+        let track = LocalAudioTrack::create_audio_track(
+            "microphone",
+            RtcAudioSource::Native(source.clone()),
+        );
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Audio(track),
+                TrackPublishOptions {
+                    source: TrackSource::Microphone,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            output_stream.stop_and_join().await;
+            input_stream.stop_and_join().await;
+            return Err(format!("failed to publish microphone track: {error}"));
+        }
+
+        let capture_source = source.clone();
+        let capture_cancellation = cancellation_rx.clone();
+        let capture_task = async_runtime::spawn(async move {
+            let mut cancellation = capture_cancellation;
+            loop {
+                let samples = tokio::select! {
+                    _ = cancellation.changed() => break,
+                    samples = input_rx.recv() => {
+                        let Some(samples) = samples else { break };
+                        samples
+                    }
+                };
+                let mut frame = AudioFrame::new(SAMPLE_RATE, CHANNELS, AUDIO_FRAME_SAMPLES as u32);
+                frame.data.to_mut().copy_from_slice(&samples);
+                if capture_source.capture_frame(&frame).await.is_err() {
+                    let _ = capture_failure_tx.send(());
+                    break;
+                }
+            }
+        });
+        let mixer_task =
+            spawn_mixer_task(mixer_command_rx, playback_queue.clone(), cancellation_rx);
+
+        Ok((
+            Self {
+                cancellation,
+                capture_stream: Some(input_stream),
+                playback_stream: Some(output_stream),
+                capture_task: Some(capture_task),
+                mixer_task: Some(mixer_task),
+                mixer_commands,
+                playback_queue,
+                _source: source,
+                stopped: false,
+                #[cfg(test)]
+                shutdown_marker: None,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) fn subscribe_remote_audio(&mut self, track: RemoteAudioTrack) -> Result<(), ()> {
+        if self.stopped {
+            return Err(());
+        }
+        enqueue_mixer_command(&self.mixer_commands, track)
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        #[cfg(test)]
+        if let Some(marker) = &self.shutdown_marker {
+            marker.lock().unwrap().push("audio");
+        }
+        let _ = self.cancellation.send(true);
+        self.playback_queue.clear();
+        if let Some(stream) = self.capture_stream.take() {
+            stream.stop_and_join().await;
+        }
+        if let Some(stream) = self.playback_stream.take() {
+            stream.stop_and_join().await;
+        }
+        if let Some(task) = self.capture_task.take() {
+            let _ = task.await;
+        }
+        if let Some(task) = self.mixer_task.take() {
+            let _ = task.await;
+        }
+    }
+
+    #[cfg(test)]
+    pub(crate) fn without_devices(shutdown_marker: Option<Arc<Mutex<Vec<&'static str>>>>) -> Self {
+        let (cancellation, _) = watch::channel(false);
+        Self {
+            cancellation,
+            capture_stream: None,
+            playback_stream: None,
+            capture_task: None,
+            mixer_task: None,
+            mixer_commands: tokio_mpsc::unbounded_channel().0,
+            playback_queue: Arc::new(PlaybackQueue::new(PLAYBACK_QUEUE_CAPACITY)),
+            _source: NativeAudioSource::new(
+                AudioSourceOptions::default(),
+                SAMPLE_RATE,
+                CHANNELS,
+                0,
+            ),
+            stopped: false,
+            shutdown_marker,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{
+        enqueue_input_samples, enqueue_track_samples, mix_latest_frames, next_playback_sample,
+        PlaybackQueue, TrackSlot,
+    };
+    use std::sync::{Arc, Mutex};
+    use tokio::sync::mpsc as tokio_mpsc;
+
+    #[test]
+    fn input_handoff_emits_exactly_480_sample_frames() {
+        let (sender, mut receiver) = tokio_mpsc::channel(4);
+        let mut pending = [0; super::AUDIO_FRAME_SAMPLES];
+        let mut pending_len = 0;
+        let samples: Vec<i16> = (0..960).map(|sample| sample as i16).collect();
+        enqueue_input_samples(
+            &samples,
+            1,
+            &mut pending,
+            &mut pending_len,
+            &sender,
+            |sample| sample,
+        );
+
+        let first = receiver.try_recv().unwrap();
+        let second = receiver.try_recv().unwrap();
+        assert_eq!(first.len(), 480);
+        assert_eq!(second.len(), 480);
+        assert_eq!(first[0], 0);
+        assert_eq!(second[0], 480);
+        assert_eq!(pending_len, 0);
+    }
+
+    #[test]
+    fn full_input_queue_drops_without_blocking() {
+        let (sender, _receiver) = tokio_mpsc::channel(1);
+        let mut pending = [0; super::AUDIO_FRAME_SAMPLES];
+        let mut pending_len = 0;
+        enqueue_input_samples(
+            &[1; super::AUDIO_FRAME_SAMPLES * 2],
+            1,
+            &mut pending,
+            &mut pending_len,
+            &sender,
+            |sample| sample,
+        );
+        assert_eq!(pending_len, 0);
+    }
+
+    #[test]
+    fn playback_handoff_preserves_480_sample_boundaries() {
+        let queue = PlaybackQueue::new(4);
+        let slot = Arc::new(TrackSlot::new());
+        let mut pending = [0; super::AUDIO_FRAME_SAMPLES];
+        let mut pending_len = 0;
+        enqueue_track_samples(
+            &[7; super::AUDIO_FRAME_SAMPLES + 1],
+            &mut pending,
+            &mut pending_len,
+            &slot,
+        );
+        assert_eq!(pending_len, 1);
+        queue.push_latest(mix_latest_frames(&[slot]).unwrap());
+        let mut current = [0; super::AUDIO_FRAME_SAMPLES];
+        let mut offset = super::AUDIO_FRAME_SAMPLES;
+        assert_eq!(next_playback_sample(&queue, &mut current, &mut offset), 7);
+    }
+
+    #[test]
+    fn stereo_input_is_downmixed_into_480_sample_mono_frames() {
+        let (sender, mut receiver) = tokio_mpsc::channel(2);
+        let mut pending = [0; super::AUDIO_FRAME_SAMPLES];
+        let mut pending_len = 0;
+        let mut samples = Vec::with_capacity(super::AUDIO_FRAME_SAMPLES * 2);
+        for _ in 0..super::AUDIO_FRAME_SAMPLES {
+            samples.extend_from_slice(&[10_000i16, -2_000]);
+        }
+        enqueue_input_samples(
+            &samples,
+            2,
+            &mut pending,
+            &mut pending_len,
+            &sender,
+            |sample| sample,
+        );
+        let frame = receiver.try_recv().unwrap();
+        assert_eq!(frame.len(), super::AUDIO_FRAME_SAMPLES);
+        assert_eq!(frame[0], 4_000);
+        assert_eq!(pending_len, 0);
+    }
+
+    #[test]
+    fn mixer_sums_concurrent_tracks_and_saturates() {
+        let first = Arc::new(TrackSlot::new());
+        let second = Arc::new(TrackSlot::new());
+        first.replace_latest([30_000; super::AUDIO_FRAME_SAMPLES]);
+        second.replace_latest([10_000; super::AUDIO_FRAME_SAMPLES]);
+        let mixed = mix_latest_frames(&[first.clone(), second.clone()]).unwrap();
+        assert_eq!(mixed[0], i16::MAX);
+        assert!(mix_latest_frames(&[first, second]).is_none());
+    }
+
+    #[test]
+    fn playback_overflow_drops_oldest_frames() {
+        let queue = PlaybackQueue::new(2);
+        queue.push_latest([1; super::AUDIO_FRAME_SAMPLES]);
+        queue.push_latest([2; super::AUDIO_FRAME_SAMPLES]);
+        queue.push_latest([3; super::AUDIO_FRAME_SAMPLES]);
+        assert_eq!(queue.len_nonblocking(), Some(2));
+        assert_eq!(queue.pop_newest_nonblocking().unwrap()[0], 3);
+        assert_eq!(queue.len_nonblocking(), Some(0));
+        assert!(queue.pop_newest_nonblocking().is_none());
+    }
+
+    #[test]
+    fn ended_track_slots_are_pruned_from_mixer_bookkeeping() {
+        let active = Arc::new(TrackSlot::new());
+        let ended = Arc::new(TrackSlot::new());
+        ended.mark_ended();
+        let mut slots = vec![active.clone(), ended];
+
+        super::prune_ended_slots(&mut slots);
+        assert_eq!(slots.len(), 1);
+        assert!(Arc::ptr_eq(&slots[0], &active));
+    }
+
+    #[test]
+    fn mixer_subscription_commands_are_lossless_until_mixer_unavailable() {
+        let (sender, mut receiver) = tokio_mpsc::unbounded_channel();
+        super::enqueue_mixer_command(&sender, 1).unwrap();
+        super::enqueue_mixer_command(&sender, 2).unwrap();
+        assert_eq!(receiver.try_recv().unwrap(), 1);
+        assert_eq!(receiver.try_recv().unwrap(), 2);
+
+        drop(receiver);
+        assert!(super::enqueue_mixer_command(&sender, 3).is_err());
+    }
+
+    #[tokio::test]
+    async fn shutdown_is_idempotent_without_physical_devices() {
+        let marker = Arc::new(Mutex::new(Vec::new()));
+        let mut session = super::AudioSession::without_devices(Some(marker.clone()));
+
+        session.shutdown().await;
+        session.shutdown().await;
+        assert!(session.stopped);
+        assert_eq!(&*marker.lock().unwrap(), &["audio"]);
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera.rs
new file mode 100644
index 0000000000..f3d6b67b9d
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera.rs
@@ -0,0 +1,444 @@
+use std::sync::mpsc;
+use std::sync::{Arc, Mutex};
+use std::thread;
+use std::time::Duration;
+
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use nokhwa::pixel_format::RgbFormat;
+use nokhwa::utils::{
+    CameraFormat, CameraIndex, FrameFormat, RequestedFormat, RequestedFormatType, Resolution,
+};
+use nokhwa::Camera;
+use tokio::sync::{mpsc as tokio_mpsc, oneshot, watch};
+
+const CAMERA_INDEX: u32 = 0;
+const CAMERA_WIDTH: u32 = 1280;
+const CAMERA_HEIGHT: u32 = 720;
+const CAMERA_FPS: u32 = 30;
+const FALLBACK_WIDTH: u32 = 640;
+const FALLBACK_HEIGHT: u32 = 480;
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum CameraFailure {
+    Camera,
+    Video,
+}
+
+#[derive(Debug)]
+struct CameraFrame {
+    width: u32,
+    height: u32,
+    stride: usize,
+    data: Vec<u8>,
+}
+
+struct LatestFrame {
+    frame: Mutex<Option<CameraFrame>>,
+}
+
+impl LatestFrame {
+    fn new() -> Self {
+        Self {
+            frame: Mutex::new(None),
+        }
+    }
+
+    fn replace(&self, frame: CameraFrame) {
+        *self.frame.lock().unwrap() = Some(frame);
+    }
+
+    fn take(&self) -> Option<CameraFrame> {
+        self.frame.lock().unwrap().take()
+    }
+}
+
+struct CameraWorker {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+struct VideoWorker {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl CameraWorker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || {
+                let _ = thread.join();
+            })
+            .await;
+        }
+    }
+}
+
+impl VideoWorker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || {
+                let _ = thread.join();
+            })
+            .await;
+        }
+    }
+}
+
+fn rgb_to_yuv(red: u8, green: u8, blue: u8) -> (u8, u8, u8) {
+    let red = red as i32;
+    let green = green as i32;
+    let blue = blue as i32;
+    let y = ((66 * red + 129 * green + 25 * blue + 128) >> 8) + 16;
+    let u = ((-38 * red - 74 * green + 112 * blue + 128) >> 8) + 128;
+    let v = ((112 * red - 94 * green - 18 * blue + 128) >> 8) + 128;
+    (
+        y.clamp(0, 255) as u8,
+        u.clamp(0, 255) as u8,
+        v.clamp(0, 255) as u8,
+    )
+}
+
+fn rgb24_to_i420(
+    rgb: &[u8],
+    rgb_stride: usize,
+    width: usize,
+    height: usize,
+    y_plane: &mut [u8],
+    y_stride: usize,
+    u_plane: &mut [u8],
+    u_stride: usize,
+    v_plane: &mut [u8],
+    v_stride: usize,
+) -> Result<(), String> {
+    if width == 0 || height == 0 || rgb_stride < width.saturating_mul(3) {
+        return Err("invalid RGB24 layout".to_owned());
+    }
+    if rgb.len() < rgb_stride.saturating_mul(height) {
+        return Err("RGB24 buffer is smaller than its declared layout".to_owned());
+    }
+    let chroma_width = width.div_ceil(2);
+    let chroma_height = height.div_ceil(2);
+    if y_stride < width
+        || u_stride < chroma_width
+        || v_stride < chroma_width
+        || y_plane.len() < y_stride.saturating_mul(height)
+        || u_plane.len() < u_stride.saturating_mul(chroma_height)
+        || v_plane.len() < v_stride.saturating_mul(chroma_height)
+    {
+        return Err("I420 planes are smaller than their declared layout".to_owned());
+    }
+
+    for row in 0..height {
+        for column in 0..width {
+            let source = row * rgb_stride + column * 3;
+            let (luma, _, _) = rgb_to_yuv(rgb[source], rgb[source + 1], rgb[source + 2]);
+            y_plane[row * y_stride + column] = luma;
+        }
+    }
+
+    for row in 0..chroma_height {
+        for column in 0..chroma_width {
+            let mut red = 0u32;
+            let mut green = 0u32;
+            let mut blue = 0u32;
+            let mut count = 0u32;
+            for y in (row * 2)..((row * 2 + 2).min(height)) {
+                for x in (column * 2)..((column * 2 + 2).min(width)) {
+                    let source = y * rgb_stride + x * 3;
+                    red += rgb[source] as u32;
+                    green += rgb[source + 1] as u32;
+                    blue += rgb[source + 2] as u32;
+                    count += 1;
+                }
+            }
+            let (_, u, v) = rgb_to_yuv(
+                (red / count) as u8,
+                (green / count) as u8,
+                (blue / count) as u8,
+            );
+            u_plane[row * u_stride + column] = u;
+            v_plane[row * v_stride + column] = v;
+        }
+    }
+    Ok(())
+}
+
+fn open_camera() -> Result<Camera, String> {
+    let index = CameraIndex::Index(CAMERA_INDEX);
+    let formats = [
+        FrameFormat::MJPEG,
+        FrameFormat::YUYV,
+        FrameFormat::RAWRGB,
+        FrameFormat::RAWBGR,
+    ];
+    let resolutions = [
+        Resolution::new(CAMERA_WIDTH, CAMERA_HEIGHT),
+        Resolution::new(FALLBACK_WIDTH, FALLBACK_HEIGHT),
+    ];
+    let mut last_error = String::from("no compatible V4L2 camera format");
+    for resolution in resolutions {
+        for format in formats {
+            let requested = RequestedFormat::new::<RgbFormat>(RequestedFormatType::Exact(
+                CameraFormat::new_from(resolution.x(), resolution.y(), format, CAMERA_FPS),
+            ));
+            match Camera::new(index.clone(), requested) {
+                Ok(mut camera) => match camera.open_stream() {
+                    Ok(()) => return Ok(camera),
+                    Err(error) => last_error = error.to_string(),
+                },
+                Err(error) => last_error = error.to_string(),
+            }
+        }
+    }
+    Err(format!("failed to open V4L2 camera 0: {last_error}"))
+}
+
+fn spawn_camera_worker(
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> (oneshot::Receiver<Result<(u32, u32), String>>, CameraWorker) {
+    let (ready_tx, ready_rx) = oneshot::channel();
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || {
+        let mut camera = match open_camera() {
+            Ok(camera) => camera,
+            Err(error) => {
+                let _ = ready_tx.send(Err(error));
+                return;
+            }
+        };
+        let resolution = camera.resolution();
+        if ready_tx.send(Ok((resolution.x(), resolution.y()))).is_err() {
+            return;
+        }
+        loop {
+            if stop_rx.try_recv().is_ok() {
+                break;
+            }
+            let buffer = match camera.frame() {
+                Ok(buffer) => buffer,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let image = match buffer.decode_image::<RgbFormat>() {
+                Ok(image) => image,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let width = image.width();
+            let height = image.height();
+            slot.replace(CameraFrame {
+                width,
+                height,
+                stride: width as usize * 3,
+                data: image.into_raw(),
+            });
+        }
+    });
+    (
+        ready_rx,
+        CameraWorker {
+            stop: stop_tx,
+            thread: Some(thread),
+        },
+    )
+}
+
+fn spawn_video_worker(
+    source: NativeVideoSource,
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> VideoWorker {
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || loop {
+        match stop_rx.recv_timeout(Duration::from_millis(1000 / CAMERA_FPS as u64)) {
+            Ok(()) | Err(mpsc::RecvTimeoutError::Disconnected) => break,
+            Err(mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        let Some(frame) = slot.take() else { continue };
+        let mut i420 = I420Buffer::new(frame.width, frame.height);
+        let (y_stride, u_stride, v_stride) = i420.strides();
+        let (y_plane, u_plane, v_plane) = i420.data_mut();
+        if rgb24_to_i420(
+            &frame.data,
+            frame.stride,
+            frame.width as usize,
+            frame.height as usize,
+            y_plane,
+            y_stride as usize,
+            u_plane,
+            u_stride as usize,
+            v_plane,
+            v_stride as usize,
+        )
+        .is_err()
+        {
+            let _ = failure_tx.send(CameraFailure::Video);
+            break;
+        }
+        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+    });
+    VideoWorker {
+        stop: stop_tx,
+        thread: Some(thread),
+    }
+}
+
+pub(crate) struct CameraSession {
+    cancellation: watch::Sender<bool>,
+    worker: Option<CameraWorker>,
+    video_worker: Option<VideoWorker>,
+    _source: NativeVideoSource,
+    stopped: bool,
+    #[cfg(test)]
+    shutdown_marker: Option<Arc<Mutex<Vec<&'static str>>>>,
+}
+
+impl CameraSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, tokio_mpsc::UnboundedReceiver<CameraFailure>), String> {
+        let slot = Arc::new(LatestFrame::new());
+        let (failure_tx, failure_rx) = tokio_mpsc::unbounded_channel();
+        let (ready_rx, worker) = spawn_camera_worker(slot.clone(), failure_tx.clone());
+        let (width, height) = match ready_rx.await {
+            Ok(Ok(resolution)) => resolution,
+            Ok(Err(error)) => {
+                worker.stop_and_join().await;
+                return Err(error);
+            }
+            Err(_) => {
+                worker.stop_and_join().await;
+                return Err("camera startup thread ended unexpectedly".to_owned());
+            }
+        };
+        let source = NativeVideoSource::new(VideoResolution { width, height }, false);
+        let track =
+            LocalVideoTrack::create_video_track("camera", RtcVideoSource::Native(source.clone()));
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(track),
+                TrackPublishOptions {
+                    source: TrackSource::Camera,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            worker.stop_and_join().await;
+            return Err(format!("failed to publish camera track: {error}"));
+        }
+        let (cancellation, _) = watch::channel(false);
+        let video_worker = spawn_video_worker(source.clone(), slot, failure_tx);
+        Ok((
+            Self {
+                cancellation,
+                worker: Some(worker),
+                video_worker: Some(video_worker),
+                _source: source,
+                stopped: false,
+                #[cfg(test)]
+                shutdown_marker: None,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        #[cfg(test)]
+        if let Some(marker) = &self.shutdown_marker {
+            marker.lock().unwrap().push("camera");
+        }
+        let _ = self.cancellation.send(true);
+        if let Some(video_worker) = self.video_worker.take() {
+            video_worker.stop_and_join().await;
+        }
+        if let Some(worker) = self.worker.take() {
+            worker.stop_and_join().await;
+        }
+    }
+
+    #[cfg(test)]
+    pub(crate) fn without_devices(shutdown_marker: Option<Arc<Mutex<Vec<&'static str>>>>) -> Self {
+        let (cancellation, _) = watch::channel(false);
+        Self {
+            cancellation,
+            worker: None,
+            video_worker: None,
+            _source: NativeVideoSource::new(
+                VideoResolution {
+                    width: CAMERA_WIDTH,
+                    height: CAMERA_HEIGHT,
+                },
+                false,
+            ),
+            stopped: false,
+            shutdown_marker,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::{rgb24_to_i420, spawn_video_worker, CameraSession, LatestFrame};
+    use livekit::webrtc::video_source::native::NativeVideoSource;
+    use livekit::webrtc::video_source::VideoResolution;
+    use std::sync::{Arc, Mutex};
+
+    #[test]
+    fn rgb24_conversion_respects_source_stride_and_i420_layout() {
+        let rgb = [
+            255, 0, 0, 0, 255, 0, 9, 9, 9, 0, 0, 255, 255, 255, 255, 7, 7, 7,
+        ];
+        let mut y = [0; 8];
+        let mut u = [0; 2];
+        let mut v = [0; 2];
+        rgb24_to_i420(&rgb, 9, 2, 2, &mut y, 4, &mut u, 2, &mut v, 2).unwrap();
+        assert_eq!(&y[..2], &[82, 144]);
+        assert_eq!(y[4], 41);
+        assert!(u[0] > 100 && u[0] < 200);
+        assert!(v[0] > 100 && v[0] < 200);
+    }
+
+    #[tokio::test]
+    async fn camera_shutdown_is_idempotent_without_a_device() {
+        let marker = Arc::new(Mutex::new(Vec::new()));
+        let mut session = CameraSession::without_devices(Some(marker.clone()));
+        session.shutdown().await;
+        session.shutdown().await;
+        assert_eq!(&*marker.lock().unwrap(), &["camera"]);
+    }
+
+    #[tokio::test]
+    async fn blocking_video_worker_shutdown_does_not_require_a_device() {
+        let (failure_tx, _failure_rx) = tokio::sync::mpsc::unbounded_channel();
+        let worker = spawn_video_worker(
+            NativeVideoSource::new(
+                VideoResolution {
+                    width: 2,
+                    height: 2,
+                },
+                false,
+            ),
+            std::sync::Arc::new(LatestFrame::new()),
+            failure_tx,
+        );
+        worker.stop_and_join().await;
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_macos.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_macos.rs
new file mode 100644
index 0000000000..01a0ba9692
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_macos.rs
@@ -0,0 +1,346 @@
+use std::sync::mpsc;
+use std::sync::{Arc, Mutex};
+use std::thread;
+use std::time::Duration;
+
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use nokhwa::pixel_format::RgbFormat;
+use nokhwa::utils::{CameraIndex, RequestedFormat, RequestedFormatType};
+use nokhwa::Camera;
+use tokio::sync::{mpsc as tokio_mpsc, oneshot};
+
+const CAMERA_INDEX: u32 = 0;
+const CAMERA_FPS: u32 = 30;
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum CameraFailure {
+    Camera,
+    Video,
+}
+
+struct CameraFrame {
+    width: u32,
+    height: u32,
+    stride: usize,
+    data: Vec<u8>,
+}
+
+struct LatestFrame(Mutex<Option<CameraFrame>>);
+
+impl LatestFrame {
+    fn new() -> Self {
+        Self(Mutex::new(None))
+    }
+
+    fn replace(&self, frame: CameraFrame) {
+        *self.0.lock().unwrap() = Some(frame);
+    }
+
+    fn take(&self) -> Option<CameraFrame> {
+        self.0.lock().unwrap().take()
+    }
+}
+
+struct CameraWorker {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+struct VideoWorker {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl CameraWorker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+    }
+
+    fn signal_stop(&self) {
+        let _ = self.stop.send(());
+    }
+}
+
+impl VideoWorker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+    }
+
+    fn signal_stop(&self) {
+        let _ = self.stop.send(());
+    }
+}
+
+fn rgb_to_yuv(red: u8, green: u8, blue: u8) -> (u8, u8, u8) {
+    let red = red as i32;
+    let green = green as i32;
+    let blue = blue as i32;
+    let y = ((66 * red + 129 * green + 25 * blue + 128) >> 8) + 16;
+    let u = ((-38 * red - 74 * green + 112 * blue + 128) >> 8) + 128;
+    let v = ((112 * red - 94 * green - 18 * blue + 128) >> 8) + 128;
+    (
+        y.clamp(0, 255) as u8,
+        u.clamp(0, 255) as u8,
+        v.clamp(0, 255) as u8,
+    )
+}
+
+fn rgb24_to_i420(
+    rgb: &[u8],
+    stride: usize,
+    width: usize,
+    height: usize,
+    y: &mut [u8],
+    y_stride: usize,
+    u: &mut [u8],
+    u_stride: usize,
+    v: &mut [u8],
+    v_stride: usize,
+) -> Result<(), ()> {
+    let chroma_width = width.div_ceil(2);
+    let chroma_height = height.div_ceil(2);
+    let rgb_row = width.checked_mul(3).ok_or(())?;
+    if width == 0
+        || height == 0
+        || stride < rgb_row
+        || rgb.len() < stride.checked_mul(height).ok_or(())?
+        || y_stride < width
+        || u_stride < chroma_width
+        || v_stride < chroma_width
+        || y.len() < y_stride.checked_mul(height).ok_or(())?
+        || u.len() < u_stride.checked_mul(chroma_height).ok_or(())?
+        || v.len() < v_stride.checked_mul(chroma_height).ok_or(())?
+    {
+        return Err(());
+    }
+
+    for row in 0..height {
+        for column in 0..width {
+            let offset = row * stride + column * 3;
+            y[row * y_stride + column] =
+                rgb_to_yuv(rgb[offset], rgb[offset + 1], rgb[offset + 2]).0;
+        }
+    }
+    for row in 0..chroma_height {
+        for column in 0..chroma_width {
+            let mut red = 0u32;
+            let mut green = 0u32;
+            let mut blue = 0u32;
+            let mut count = 0u32;
+            for y_row in (row * 2)..(row * 2 + 2).min(height) {
+                for x in (column * 2)..(column * 2 + 2).min(width) {
+                    let offset = y_row * stride + x * 3;
+                    red += rgb[offset] as u32;
+                    green += rgb[offset + 1] as u32;
+                    blue += rgb[offset + 2] as u32;
+                    count += 1;
+                }
+            }
+            let (_, chroma_u, chroma_v) = rgb_to_yuv(
+                (red / count) as u8,
+                (green / count) as u8,
+                (blue / count) as u8,
+            );
+            u[row * u_stride + column] = chroma_u;
+            v[row * v_stride + column] = chroma_v;
+        }
+    }
+    Ok(())
+}
+
+fn open_camera() -> Result<Camera, String> {
+    let requested =
+        RequestedFormat::new::<RgbFormat>(RequestedFormatType::AbsoluteHighestResolution);
+    let mut camera = Camera::new(CameraIndex::Index(CAMERA_INDEX), requested)
+        .map_err(|error| format!("failed to create AVFoundation camera: {error}"))?;
+    camera
+        .open_stream()
+        .map_err(|error| format!("failed to open AVFoundation camera: {error}"))?;
+    Ok(camera)
+}
+
+fn spawn_camera_worker(
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> (oneshot::Receiver<Result<(u32, u32), String>>, CameraWorker) {
+    let (ready_tx, ready_rx) = oneshot::channel();
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || {
+        let mut camera = match open_camera() {
+            Ok(camera) => camera,
+            Err(error) => {
+                let _ = ready_tx.send(Err(error));
+                return;
+            }
+        };
+        let resolution = camera.resolution();
+        if ready_tx.send(Ok((resolution.x(), resolution.y()))).is_err() {
+            return;
+        }
+        loop {
+            match stop_rx.try_recv() {
+                Ok(()) | Err(mpsc::TryRecvError::Disconnected) => break,
+                Err(mpsc::TryRecvError::Empty) => {}
+            }
+            let buffer = match camera.frame() {
+                Ok(buffer) => buffer,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let image = match buffer.decode_image::<RgbFormat>() {
+                Ok(image) => image,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let width = image.width();
+            let height = image.height();
+            slot.replace(CameraFrame {
+                width,
+                height,
+                stride: width as usize * 3,
+                data: image.into_raw(),
+            });
+        }
+    });
+    (
+        ready_rx,
+        CameraWorker {
+            stop: stop_tx,
+            thread: Some(thread),
+        },
+    )
+}
+
+fn spawn_video_worker(
+    source: NativeVideoSource,
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> VideoWorker {
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || loop {
+        match stop_rx.recv_timeout(Duration::from_millis(1000 / CAMERA_FPS as u64)) {
+            Ok(()) | Err(mpsc::RecvTimeoutError::Disconnected) => break,
+            Err(mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        let Some(frame) = slot.take() else { continue };
+        let mut i420 = I420Buffer::new(frame.width, frame.height);
+        let (y_stride, u_stride, v_stride) = i420.strides();
+        let (y, u, v) = i420.data_mut();
+        if rgb24_to_i420(
+            &frame.data,
+            frame.stride,
+            frame.width as usize,
+            frame.height as usize,
+            y,
+            y_stride as usize,
+            u,
+            u_stride as usize,
+            v,
+            v_stride as usize,
+        )
+        .is_err()
+        {
+            let _ = failure_tx.send(CameraFailure::Video);
+            break;
+        }
+        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+    });
+    VideoWorker {
+        stop: stop_tx,
+        thread: Some(thread),
+    }
+}
+
+pub(crate) struct CameraSession {
+    worker: Option<CameraWorker>,
+    video_worker: Option<VideoWorker>,
+    _source: NativeVideoSource,
+    stopped: bool,
+}
+
+impl CameraSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, tokio_mpsc::UnboundedReceiver<CameraFailure>), String> {
+        let slot = Arc::new(LatestFrame::new());
+        let (failure_tx, failure_rx) = tokio_mpsc::unbounded_channel();
+        let (ready_rx, worker) = spawn_camera_worker(slot.clone(), failure_tx.clone());
+        let (width, height) = match ready_rx.await {
+            Ok(Ok(resolution)) => resolution,
+            Ok(Err(error)) => {
+                worker.stop_and_join().await;
+                return Err(error);
+            }
+            Err(_) => {
+                worker.stop_and_join().await;
+                return Err("camera startup thread ended unexpectedly".to_owned());
+            }
+        };
+        let source = NativeVideoSource::new(VideoResolution { width, height }, false);
+        let track =
+            LocalVideoTrack::create_video_track("camera", RtcVideoSource::Native(source.clone()));
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(track),
+                TrackPublishOptions {
+                    source: TrackSource::Camera,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            worker.stop_and_join().await;
+            return Err(format!("failed to publish camera track: {error}"));
+        }
+        let video_worker = spawn_video_worker(source.clone(), slot, failure_tx);
+        Ok((
+            Self {
+                worker: Some(worker),
+                video_worker: Some(video_worker),
+                _source: source,
+                stopped: false,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        if let Some(video_worker) = self.video_worker.take() {
+            video_worker.stop_and_join().await;
+        }
+        if let Some(worker) = self.worker.take() {
+            worker.stop_and_join().await;
+        }
+    }
+}
+
+impl Drop for CameraSession {
+    fn drop(&mut self) {
+        if let Some(worker) = &self.worker {
+            worker.signal_stop();
+        }
+        if let Some(video_worker) = &self.video_worker {
+            video_worker.signal_stop();
+        }
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_windows.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_windows.rs
new file mode 100644
index 0000000000..cd29fb4a81
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/camera_windows.rs
@@ -0,0 +1,323 @@
+use std::sync::mpsc;
+use std::sync::{Arc, Mutex};
+use std::thread;
+use std::time::Duration;
+
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use nokhwa::pixel_format::RgbFormat;
+use nokhwa::utils::{CameraIndex, RequestedFormat, RequestedFormatType};
+use nokhwa::Camera;
+use tokio::sync::{mpsc as tokio_mpsc, oneshot};
+
+const CAMERA_INDEX: u32 = 0;
+const CAMERA_FPS: u32 = 30;
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum CameraFailure {
+    Camera,
+    Video,
+}
+
+struct CameraFrame {
+    width: u32,
+    height: u32,
+    stride: usize,
+    data: Vec<u8>,
+}
+
+struct LatestFrame(Mutex<Option<CameraFrame>>);
+
+impl LatestFrame {
+    fn new() -> Self {
+        Self(Mutex::new(None))
+    }
+
+    fn replace(&self, frame: CameraFrame) {
+        *self.0.lock().unwrap() = Some(frame);
+    }
+
+    fn take(&self) -> Option<CameraFrame> {
+        self.0.lock().unwrap().take()
+    }
+}
+
+struct Worker {
+    stop: mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl Worker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+    }
+
+    fn signal_stop(&self) {
+        let _ = self.stop.send(());
+    }
+}
+
+fn rgb_to_yuv(red: u8, green: u8, blue: u8) -> (u8, u8, u8) {
+    let red = red as i32;
+    let green = green as i32;
+    let blue = blue as i32;
+    (
+        (((66 * red + 129 * green + 25 * blue + 128) >> 8) + 16).clamp(0, 255) as u8,
+        (((-38 * red - 74 * green + 112 * blue + 128) >> 8) + 128).clamp(0, 255) as u8,
+        (((112 * red - 94 * green - 18 * blue + 128) >> 8) + 128).clamp(0, 255) as u8,
+    )
+}
+
+fn rgb24_to_i420(
+    rgb: &[u8],
+    stride: usize,
+    width: usize,
+    height: usize,
+    y: &mut [u8],
+    y_stride: usize,
+    u: &mut [u8],
+    u_stride: usize,
+    v: &mut [u8],
+    v_stride: usize,
+) -> Result<(), ()> {
+    let chroma_width = width.div_ceil(2);
+    let chroma_height = height.div_ceil(2);
+    if width == 0
+        || height == 0
+        || stride < width.checked_mul(3).ok_or(())?
+        || rgb.len() < stride.checked_mul(height).ok_or(())?
+        || y_stride < width
+        || u_stride < chroma_width
+        || v_stride < chroma_width
+        || y.len() < y_stride.checked_mul(height).ok_or(())?
+        || u.len() < u_stride.checked_mul(chroma_height).ok_or(())?
+        || v.len() < v_stride.checked_mul(chroma_height).ok_or(())?
+    {
+        return Err(());
+    }
+    for row in 0..height {
+        for column in 0..width {
+            let offset = row * stride + column * 3;
+            y[row * y_stride + column] =
+                rgb_to_yuv(rgb[offset], rgb[offset + 1], rgb[offset + 2]).0;
+        }
+    }
+    for row in 0..chroma_height {
+        for column in 0..chroma_width {
+            let mut red = 0u32;
+            let mut green = 0u32;
+            let mut blue = 0u32;
+            let mut count = 0u32;
+            for y_row in (row * 2)..(row * 2 + 2).min(height) {
+                for x in (column * 2)..(column * 2 + 2).min(width) {
+                    let offset = y_row * stride + x * 3;
+                    red += rgb[offset] as u32;
+                    green += rgb[offset + 1] as u32;
+                    blue += rgb[offset + 2] as u32;
+                    count += 1;
+                }
+            }
+            let (_, chroma_u, chroma_v) = rgb_to_yuv(
+                (red / count) as u8,
+                (green / count) as u8,
+                (blue / count) as u8,
+            );
+            u[row * u_stride + column] = chroma_u;
+            v[row * v_stride + column] = chroma_v;
+        }
+    }
+    Ok(())
+}
+
+fn open_camera() -> Result<Camera, String> {
+    let requested =
+        RequestedFormat::new::<RgbFormat>(RequestedFormatType::AbsoluteHighestResolution);
+    let mut camera = Camera::new(CameraIndex::Index(CAMERA_INDEX), requested)
+        .map_err(|error| format!("failed to create Media Foundation camera: {error}"))?;
+    camera
+        .open_stream()
+        .map_err(|error| format!("failed to open Media Foundation camera: {error}"))?;
+    Ok(camera)
+}
+
+fn spawn_capture_worker(
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> (oneshot::Receiver<Result<(u32, u32), String>>, Worker) {
+    let (ready_tx, ready_rx) = oneshot::channel();
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || {
+        let mut camera = match open_camera() {
+            Ok(camera) => camera,
+            Err(error) => {
+                let _ = ready_tx.send(Err(error));
+                return;
+            }
+        };
+        let resolution = camera.resolution();
+        if ready_tx.send(Ok((resolution.x(), resolution.y()))).is_err() {
+            return;
+        }
+        loop {
+            match stop_rx.try_recv() {
+                Ok(()) | Err(mpsc::TryRecvError::Disconnected) => break,
+                Err(mpsc::TryRecvError::Empty) => {}
+            }
+            let buffer = match camera.frame() {
+                Ok(buffer) => buffer,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let image = match buffer.decode_image::<RgbFormat>() {
+                Ok(image) => image,
+                Err(_) => {
+                    let _ = failure_tx.send(CameraFailure::Camera);
+                    break;
+                }
+            };
+            let width = image.width();
+            let height = image.height();
+            slot.replace(CameraFrame {
+                width,
+                height,
+                stride: width as usize * 3,
+                data: image.into_raw(),
+            });
+        }
+    });
+    (
+        ready_rx,
+        Worker {
+            stop: stop_tx,
+            thread: Some(thread),
+        },
+    )
+}
+
+fn spawn_video_worker(
+    source: NativeVideoSource,
+    slot: Arc<LatestFrame>,
+    failure_tx: tokio_mpsc::UnboundedSender<CameraFailure>,
+) -> Worker {
+    let (stop_tx, stop_rx) = mpsc::channel();
+    let thread = thread::spawn(move || loop {
+        match stop_rx.recv_timeout(Duration::from_millis(1000 / CAMERA_FPS as u64)) {
+            Ok(()) | Err(mpsc::RecvTimeoutError::Disconnected) => break,
+            Err(mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        let Some(frame) = slot.take() else { continue };
+        let mut i420 = I420Buffer::new(frame.width, frame.height);
+        let (y_stride, u_stride, v_stride) = i420.strides();
+        let (y, u, v) = i420.data_mut();
+        if rgb24_to_i420(
+            &frame.data,
+            frame.stride,
+            frame.width as usize,
+            frame.height as usize,
+            y,
+            y_stride as usize,
+            u,
+            u_stride as usize,
+            v,
+            v_stride as usize,
+        )
+        .is_err()
+        {
+            let _ = failure_tx.send(CameraFailure::Video);
+            break;
+        }
+        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+    });
+    Worker {
+        stop: stop_tx,
+        thread: Some(thread),
+    }
+}
+
+pub(crate) struct CameraSession {
+    worker: Option<Worker>,
+    video_worker: Option<Worker>,
+    _source: NativeVideoSource,
+    stopped: bool,
+}
+
+impl CameraSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, tokio_mpsc::UnboundedReceiver<CameraFailure>), String> {
+        let slot = Arc::new(LatestFrame::new());
+        let (failure_tx, failure_rx) = tokio_mpsc::unbounded_channel();
+        let (ready_rx, worker) = spawn_capture_worker(slot.clone(), failure_tx.clone());
+        let (width, height) = match ready_rx.await {
+            Ok(Ok(resolution)) => resolution,
+            Ok(Err(error)) => {
+                worker.stop_and_join().await;
+                return Err(error);
+            }
+            Err(_) => {
+                worker.stop_and_join().await;
+                return Err("camera startup thread ended unexpectedly".to_owned());
+            }
+        };
+        let source = NativeVideoSource::new(VideoResolution { width, height }, false);
+        let track =
+            LocalVideoTrack::create_video_track("camera", RtcVideoSource::Native(source.clone()));
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(track),
+                TrackPublishOptions {
+                    source: TrackSource::Camera,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            worker.stop_and_join().await;
+            return Err(format!("failed to publish camera track: {error}"));
+        }
+        let video_worker = spawn_video_worker(source.clone(), slot, failure_tx);
+        Ok((
+            Self {
+                worker: Some(worker),
+                video_worker: Some(video_worker),
+                _source: source,
+                stopped: false,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        if let Some(video_worker) = self.video_worker.take() {
+            video_worker.stop_and_join().await;
+        }
+        if let Some(worker) = self.worker.take() {
+            worker.stop_and_join().await;
+        }
+    }
+}
+
+impl Drop for CameraSession {
+    fn drop(&mut self) {
+        if let Some(worker) = &self.worker {
+            worker.signal_stop();
+        }
+        if let Some(video_worker) = &self.video_worker {
+            video_worker.signal_stop();
+        }
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
index 34a16b7176..c274159366 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
@@ -14,6 +14,14 @@ pub enum Error {
     CloseFailed,
     #[error("call lifecycle actor unavailable")]
     ActorUnavailable,
+    #[error("native audio failed")]
+    AudioFailed,
+    #[error("native video failed")]
+    VideoFailed,
+    #[error("native camera failed")]
+    CameraFailed,
+    #[error("native screen share failed")]
+    ScreenShareFailed,
 }
 
 impl Serialize for Error {
@@ -36,6 +44,10 @@ impl Error {
             Self::StaleConnection => "stale_connection",
             Self::CloseFailed => "close_failed",
             Self::ActorUnavailable => "actor_unavailable",
+            Self::AudioFailed => "audio_failed",
+            Self::VideoFailed => "video_failed",
+            Self::CameraFailed => "camera_failed",
+            Self::ScreenShareFailed => "screen_share_failed",
         }
     }
 
@@ -46,6 +58,10 @@ impl Error {
             Self::StaleConnection => "connection ID does not match active call",
             Self::CloseFailed => "call shutdown failed",
             Self::ActorUnavailable => "call lifecycle unavailable",
+            Self::AudioFailed => "native audio failed",
+            Self::VideoFailed => "native video failed",
+            Self::CameraFailed => "native camera failed",
+            Self::ScreenShareFailed => "native screen share failed",
         }
     }
 }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
index 1bd0f776f7..f2325f3489 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
@@ -6,9 +6,25 @@ use tauri::{
 pub use models::*;
 
 mod actor;
+#[cfg(target_os = "linux")]
+mod audio;
+#[cfg(target_os = "linux")]
+mod camera;
+#[cfg(target_os = "macos")]
+mod camera_macos;
+#[cfg(target_os = "windows")]
+mod camera_windows;
 mod commands;
 mod error;
+#[cfg(mobile)]
+mod mobile;
 mod models;
+#[cfg(target_os = "linux")]
+mod screen_share;
+#[cfg(target_os = "macos")]
+mod screen_share_macos;
+#[cfg(target_os = "windows")]
+mod screen_share_windows;
 
 pub use error::{Error, Result};
 
@@ -33,7 +49,15 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
             commands::disconnect,
             commands::get_state
         ])
-        .setup(|app, _api| {
+        .setup(|app, api| {
+            #[cfg(mobile)]
+            let mobile_backend = mobile::init(app, api)?;
+            #[cfg(not(mobile))]
+            let _ = api;
+
+            #[cfg(mobile)]
+            let call_lifecycle = CallLifecycle::new(app.clone(), mobile_backend);
+            #[cfg(not(mobile))]
             let call_lifecycle = CallLifecycle::new(app.clone());
             app.manage(call_lifecycle);
             Ok(())
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
new file mode 100644
index 0000000000..b0e49d2094
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
@@ -0,0 +1,149 @@
+use serde::{de::DeserializeOwned, Deserialize, Serialize};
+use tauri::{
+    ipc::{Channel, InvokeResponseBody},
+    plugin::{PluginApi, PluginHandle},
+    AppHandle, Runtime,
+};
+use tokio::sync::mpsc;
+
+use crate::{error::Error, models::DisconnectRequest};
+
+#[cfg(target_os = "android")]
+const PLUGIN_IDENTIFIER: &str = "app.tauri.call_lifecycle";
+
+#[cfg(target_os = "ios")]
+tauri::ios_plugin_binding!(init_plugin_call_lifecycle);
+
+#[derive(Debug, Clone, Copy, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub(crate) enum NativeFailureCode {
+    Busy,
+    ConnectFailed,
+    StaleConnection,
+    CloseFailed,
+    ActorUnavailable,
+    AudioFailed,
+    VideoFailed,
+    CameraFailed,
+    ScreenShareFailed,
+}
+
+impl NativeFailureCode {
+    fn error(self) -> Error {
+        match self {
+            Self::Busy => Error::Busy,
+            Self::ConnectFailed => Error::ConnectFailed,
+            Self::StaleConnection => Error::StaleConnection,
+            Self::CloseFailed => Error::CloseFailed,
+            Self::ActorUnavailable => Error::ActorUnavailable,
+            Self::AudioFailed => Error::AudioFailed,
+            Self::VideoFailed => Error::VideoFailed,
+            Self::CameraFailed => Error::CameraFailed,
+            Self::ScreenShareFailed => Error::ScreenShareFailed,
+        }
+    }
+}
+
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativeControlEvent {
+    pub operation_id: String,
+    pub connection_id: String,
+    #[serde(flatten)]
+    pub kind: NativeControlEventKind,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+#[serde(tag = "event", rename_all = "snake_case")]
+pub(crate) enum NativeControlEventKind {
+    Reconnecting,
+    Reconnected,
+    Disconnected,
+    Failed { code: NativeFailureCode },
+}
+
+#[derive(Serialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativeConnectRequest<'a> {
+    pub operation_id: &'a str,
+    pub connection_id: &'a str,
+    pub server_url: &'a str,
+    pub participant_token: &'a secrecy::SecretString,
+    pub audio: bool,
+    pub video: bool,
+    pub screen_share: bool,
+    pub channel: Channel<NativeControlEvent>,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativeConnectResponse {
+    pub operation_id: String,
+    pub connection_id: String,
+}
+
+#[derive(Clone)]
+pub(crate) struct MobileBackend<R: Runtime> {
+    handle: PluginHandle<R>,
+}
+
+impl<R: Runtime> MobileBackend<R> {
+    pub(crate) fn new(handle: PluginHandle<R>) -> Self {
+        Self { handle }
+    }
+
+    pub(crate) fn event_channel(
+        sender: mpsc::Sender<NativeControlEvent>,
+    ) -> Channel<NativeControlEvent> {
+        Channel::new(move |body: InvokeResponseBody| {
+            if let Ok(event) = body.deserialize::<NativeControlEvent>() {
+                let _ = sender.try_send(event);
+            }
+            Ok(())
+        })
+    }
+
+    pub(crate) async fn connect(
+        &self,
+        request: NativeConnectRequest<'_>,
+    ) -> crate::Result<NativeConnectResponse> {
+        self.handle
+            .run_mobile_plugin_async("connect", request)
+            .await
+            .map_err(|_| Error::ConnectFailed)
+    }
+
+    pub(crate) async fn disconnect(
+        &self,
+        request: DisconnectRequest,
+        operation_id: &str,
+    ) -> crate::Result<()> {
+        let payload = NativeDisconnectRequest {
+            operation_id,
+            connection_id: &request.connection_id,
+        };
+        self.handle
+            .run_mobile_plugin_async::<serde_json::Value>("disconnect", payload)
+            .await
+            .map(|_| ())
+            .map_err(|_| Error::CloseFailed)
+    }
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct NativeDisconnectRequest<'a> {
+    operation_id: &'a str,
+    connection_id: &'a str,
+}
+
+pub fn init<R: Runtime, C: DeserializeOwned>(
+    _app: &AppHandle<R>,
+    api: PluginApi<R, C>,
+) -> crate::Result<MobileBackend<R>> {
+    #[cfg(target_os = "android")]
+    let handle = api.register_android_plugin(PLUGIN_IDENTIFIER, "CallLifecyclePlugin")?;
+    #[cfg(target_os = "ios")]
+    let handle = api.register_ios_plugin(init_plugin_call_lifecycle)?;
+    Ok(MobileBackend::new(handle))
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
index 41cbc444f3..0527d2caed 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
@@ -7,6 +7,12 @@ pub struct ConnectRequest {
     pub connection_id: String,
     pub server_url: String,
     pub participant_token: SecretString,
+    #[serde(default)]
+    pub audio: bool,
+    #[serde(default)]
+    pub video: bool,
+    #[serde(default)]
+    pub screen_share: bool,
 }
 
 #[derive(Debug, Deserialize)]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share.rs
new file mode 100644
index 0000000000..539dde29ef
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share.rs
@@ -0,0 +1,495 @@
+use std::os::fd::{AsRawFd, OwnedFd};
+
+use ashpd::desktop::screencast::{
+    CursorMode, Screencast, SelectSourcesOptions, SourceType, Stream,
+};
+use ashpd::desktop::{PersistMode, Session};
+use futures_util::StreamExt;
+use gstreamer as gst;
+use gstreamer::prelude::*;
+use gstreamer_app as gst_app;
+use gstreamer_video as gst_video;
+use gstreamer_video::prelude::*;
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use tokio::sync::{mpsc, oneshot};
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum ScreenShareFailure {
+    Portal,
+    Capture,
+}
+
+pub(crate) struct ScreenShareSession {
+    pipeline: gst::Pipeline,
+    _proxy: Screencast,
+    _stream: Stream,
+    _remote_fd: OwnedFd,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+    monitor_stop: Option<oneshot::Sender<()>>,
+    monitor_task: Option<tokio::task::JoinHandle<()>>,
+    stopped: bool,
+}
+
+async fn startup_failure<T>(session: &Session<Screencast>, error: String) -> Result<T, String> {
+    let _ = session.close().await;
+    Err(error)
+}
+
+async fn pipeline_startup_failure<T>(
+    session: &Session<Screencast>,
+    pipeline: &gst::Pipeline,
+    error: String,
+) -> Result<T, String> {
+    let _ = pipeline.set_state(gst::State::Null);
+    startup_failure(session, error).await
+}
+
+async fn monitor_session(
+    session: Session<Screencast>,
+    bus: gst::Bus,
+    monitor_stop_rx: oneshot::Receiver<()>,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+) {
+    let mut portal_closed = match session.receive_closed().await {
+        Ok(stream) => stream,
+        Err(_) => {
+            let _ = failure_tx.send(ScreenShareFailure::Portal);
+            let _ = session.close().await;
+            return;
+        }
+    };
+    let mut bus_stream = bus.stream();
+    tokio::pin!(monitor_stop_rx);
+    loop {
+        tokio::select! {
+            _ = &mut monitor_stop_rx => break,
+            _ = portal_closed.next() => {
+                let _ = failure_tx.send(ScreenShareFailure::Portal);
+                break;
+            }
+            message = bus_stream.next() => {
+                match message {
+                    Some(message) => match message.view() {
+                        gst::MessageView::Error(_) | gst::MessageView::Eos(_) => {
+                            let _ = failure_tx.send(ScreenShareFailure::Capture);
+                            break;
+                        }
+                        _ => {}
+                    },
+                    None => {
+                        let _ = failure_tx.send(ScreenShareFailure::Capture);
+                        break;
+                    }
+                }
+            }
+        }
+    }
+    let _ = session.close().await;
+}
+
+impl ScreenShareSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, mpsc::UnboundedReceiver<ScreenShareFailure>), String> {
+        let proxy = Screencast::new()
+            .await
+            .map_err(|error| format!("failed to create screen-share portal proxy: {error}"))?;
+        let session = proxy
+            .create_session(Default::default())
+            .await
+            .map_err(|error| format!("failed to create screen-share portal session: {error}"))?;
+        if let Err(error) = proxy
+            .select_sources(
+                &session,
+                SelectSourcesOptions::default()
+                    .set_cursor_mode(CursorMode::Embedded)
+                    .set_sources(SourceType::Monitor | SourceType::Window)
+                    .set_multiple(false)
+                    .set_persist_mode(PersistMode::DoNot),
+            )
+            .await
+        {
+            return startup_failure(
+                &session,
+                format!("failed to select screen-share portal source: {error}"),
+            )
+            .await;
+        }
+
+        let response = match proxy.start(&session, None, Default::default()).await {
+            Ok(response) => match response.response() {
+                Ok(response) => response,
+                Err(error) => {
+                    return startup_failure(
+                        &session,
+                        format!("screen-share portal returned an invalid start response: {error}"),
+                    )
+                    .await;
+                }
+            },
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to start screen-share portal session: {error}"),
+                )
+                .await;
+            }
+        };
+        if response.streams().len() != 1 {
+            return startup_failure(
+                &session,
+                format!(
+                    "screen-share portal returned {} streams; expected exactly one",
+                    response.streams().len()
+                ),
+            )
+            .await;
+        }
+        let stream = response.streams()[0].clone();
+        let remote_fd = match proxy
+            .open_pipe_wire_remote(&session, Default::default())
+            .await
+        {
+            Ok(remote_fd) => remote_fd,
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to open screen-share PipeWire remote: {error}"),
+                )
+                .await;
+            }
+        };
+
+        if let Err(error) = gst::init() {
+            return startup_failure(&session, format!("failed to initialize GStreamer: {error}"))
+                .await;
+        }
+        let pipewire = match gst::ElementFactory::make("pipewiresrc")
+            .property("fd", remote_fd.as_raw_fd())
+            .property("path", stream.pipe_wire_node_id().to_string())
+            .build()
+        {
+            Ok(pipewire) => pipewire,
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to create screen-share pipewiresrc: {error}"),
+                )
+                .await;
+            }
+        };
+        let convert = match gst::ElementFactory::make("videoconvert").build() {
+            Ok(convert) => convert,
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to create screen-share videoconvert: {error}"),
+                )
+                .await;
+            }
+        };
+        let caps = gst::Caps::builder("video/x-raw")
+            .field("format", "I420")
+            .build();
+        let caps_filter = match gst::ElementFactory::make("capsfilter")
+            .property("caps", &caps)
+            .build()
+        {
+            Ok(caps_filter) => caps_filter,
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to create screen-share I420 caps: {error}"),
+                )
+                .await;
+            }
+        };
+        let sink = match gst::ElementFactory::make("appsink")
+            .name("screen_sink")
+            .property("max-buffers", 1u32)
+            .property("drop", true)
+            .property("sync", false)
+            .build()
+        {
+            Ok(sink) => match sink.downcast::<gst_app::AppSink>() {
+                Ok(sink) => sink,
+                Err(_) => {
+                    return startup_failure(
+                        &session,
+                        "screen-share appsink has the wrong type".to_string(),
+                    )
+                    .await;
+                }
+            },
+            Err(error) => {
+                return startup_failure(
+                    &session,
+                    format!("failed to create screen-share appsink: {error}"),
+                )
+                .await;
+            }
+        };
+
+        let (width, height) = stream.size().unwrap_or((1280, 720));
+        let source = NativeVideoSource::new(
+            VideoResolution {
+                width: width.max(1) as u32,
+                height: height.max(1) as u32,
+            },
+            true,
+        );
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(LocalVideoTrack::create_video_track(
+                    "screen-share",
+                    RtcVideoSource::Native(source.clone()),
+                )),
+                TrackPublishOptions {
+                    source: TrackSource::Screenshare,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            return startup_failure(
+                &session,
+                format!("failed to publish screen-share track: {error}"),
+            )
+            .await;
+        }
+
+        let pipeline = gst::Pipeline::default();
+        if let Err(error) =
+            pipeline.add_many([&pipewire, &convert, &caps_filter, sink.upcast_ref()])
+        {
+            return pipeline_startup_failure(
+                &session,
+                &pipeline,
+                format!("failed to assemble screen-share pipeline: {error}"),
+            )
+            .await;
+        }
+        if let Err(error) =
+            gst::Element::link_many([&pipewire, &convert, &caps_filter, sink.upcast_ref()])
+        {
+            return pipeline_startup_failure(
+                &session,
+                &pipeline,
+                format!("failed to link screen-share pipeline: {error}"),
+            )
+            .await;
+        }
+
+        let (failure_tx, failure_rx) = mpsc::unbounded_channel();
+        let callback_failure_tx = failure_tx.clone();
+        sink.set_callbacks(
+            gst_app::AppSinkCallbacks::builder()
+                .new_sample(move |sink| {
+                    let result = (|| {
+                        let sample = sink.pull_sample().map_err(|_| gst::FlowError::Eos)?;
+                        let buffer = sample.buffer().ok_or(gst::FlowError::Error)?;
+                        let caps = sample.caps().ok_or(gst::FlowError::NotNegotiated)?;
+                        let info = gst_video::VideoInfo::from_caps(caps)
+                            .map_err(|_| gst::FlowError::NotNegotiated)?;
+                        let frame =
+                            gst_video::VideoFrameRef::from_buffer_ref_readable(buffer, &info)
+                                .map_err(|_| gst::FlowError::Error)?;
+                        let width = info.width();
+                        let height = info.height();
+                        let planes = frame.planes_data();
+                        let strides = frame.plane_stride();
+                        if planes.len() < 3 || strides.len() < 3 {
+                            return Err(gst::FlowError::Error);
+                        }
+                        let mut i420 = I420Buffer::new(width, height);
+                        let (destination_y, destination_u, destination_v) = i420.data_mut();
+                        copy_plane(
+                            planes[0],
+                            strides[0],
+                            destination_y,
+                            width as usize,
+                            width as usize,
+                            height as usize,
+                        )
+                        .map_err(|_| gst::FlowError::Error)?;
+                        copy_plane(
+                            planes[1],
+                            strides[1],
+                            destination_u,
+                            width.div_ceil(2) as usize,
+                            width.div_ceil(2) as usize,
+                            height.div_ceil(2) as usize,
+                        )
+                        .map_err(|_| gst::FlowError::Error)?;
+                        copy_plane(
+                            planes[2],
+                            strides[2],
+                            destination_v,
+                            width.div_ceil(2) as usize,
+                            width.div_ceil(2) as usize,
+                            height.div_ceil(2) as usize,
+                        )
+                        .map_err(|_| gst::FlowError::Error)?;
+                        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+                        Ok::<_, gst::FlowError>(())
+                    })();
+                    match result {
+                        Ok(()) => Ok(gst::FlowSuccess::Ok),
+                        Err(error) => {
+                            let _ = callback_failure_tx.send(ScreenShareFailure::Capture);
+                            Err(error)
+                        }
+                    }
+                })
+                .build(),
+        );
+        if let Err(error) = pipeline.set_state(gst::State::Playing) {
+            return pipeline_startup_failure(
+                &session,
+                &pipeline,
+                format!("failed to start screen-share GStreamer pipeline: {error}"),
+            )
+            .await;
+        }
+
+        let bus = match pipeline.bus() {
+            Some(bus) => bus,
+            None => {
+                return pipeline_startup_failure(
+                    &session,
+                    &pipeline,
+                    "screen-share GStreamer pipeline has no bus".to_string(),
+                )
+                .await;
+            }
+        };
+        let (monitor_stop, monitor_stop_rx) = oneshot::channel();
+        let monitor_failure_tx = failure_tx.clone();
+        let monitor_task = tokio::spawn(monitor_session(
+            session,
+            bus,
+            monitor_stop_rx,
+            monitor_failure_tx,
+        ));
+
+        Ok((
+            Self {
+                pipeline,
+                _proxy: proxy,
+                _stream: stream,
+                _remote_fd: remote_fd,
+                failure_tx,
+                monitor_stop: Some(monitor_stop),
+                monitor_task: Some(monitor_task),
+                stopped: false,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        if let Some(stop) = self.monitor_stop.take() {
+            let _ = stop.send(());
+        }
+        if let Some(task) = self.monitor_task.take() {
+            let _ = task.await;
+        }
+        if self.pipeline.set_state(gst::State::Null).is_err() {
+            let _ = self.failure_tx.send(ScreenShareFailure::Capture);
+        }
+    }
+}
+
+impl Drop for ScreenShareSession {
+    fn drop(&mut self) {
+        if let Some(stop) = self.monitor_stop.take() {
+            let _ = stop.send(());
+        }
+        if let Some(task) = self.monitor_task.take() {
+            task.abort();
+        }
+        let _ = self.pipeline.set_state(gst::State::Null);
+    }
+}
+
+fn copy_plane(
+    source: &[u8],
+    source_stride: i32,
+    destination: &mut [u8],
+    destination_stride: usize,
+    width: usize,
+    height: usize,
+) -> Result<(), ()> {
+    let source_stride = usize::try_from(source_stride).map_err(|_| ())?;
+    if source_stride == 0
+        || destination_stride == 0
+        || source_stride < width
+        || destination_stride < width
+    {
+        return Err(());
+    }
+    if width == 0 || height == 0 {
+        return Ok(());
+    }
+    let source_end = height
+        .checked_sub(1)
+        .and_then(|last_row| last_row.checked_mul(source_stride))
+        .and_then(|last_start| last_start.checked_add(width))
+        .ok_or(())?;
+    let destination_end = height
+        .checked_sub(1)
+        .and_then(|last_row| last_row.checked_mul(destination_stride))
+        .and_then(|last_start| last_start.checked_add(width))
+        .ok_or(())?;
+    if source_end > source.len() || destination_end > destination.len() {
+        return Err(());
+    }
+    for row in 0..height {
+        let source_start = row.checked_mul(source_stride).ok_or(())?;
+        let destination_start = row.checked_mul(destination_stride).ok_or(())?;
+        let source_end = source_start.checked_add(width).ok_or(())?;
+        let destination_end = destination_start.checked_add(width).ok_or(())?;
+        destination[destination_start..destination_end]
+            .copy_from_slice(&source[source_start..source_end]);
+    }
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::copy_plane;
+
+    #[test]
+    fn copy_plane_respects_padded_source_stride() {
+        let source = [1, 2, 9, 9, 3, 4, 8, 8];
+        let mut destination = [0; 4];
+
+        copy_plane(&source, 4, &mut destination, 2, 2, 2).unwrap();
+
+        assert_eq!(destination, [1, 2, 3, 4]);
+    }
+
+    #[test]
+    fn copy_plane_rejects_invalid_stride_and_ranges() {
+        let source = [1, 2, 3, 4];
+        let mut destination = [0; 4];
+
+        assert!(copy_plane(&source, -1, &mut destination, 2, 2, 2).is_err());
+        assert!(copy_plane(&source, 0, &mut destination, 2, 0, 0).is_err());
+        assert!(copy_plane(&source, 2, &mut destination, 0, 0, 0).is_err());
+        assert!(copy_plane(&source, 1, &mut destination, 2, 2, 2).is_err());
+        assert!(copy_plane(&source, 2, &mut destination, 2, 2, 3).is_err());
+        assert!(copy_plane(&source, 2, &mut [0; 2], 2, 2, 2).is_err());
+        assert!(copy_plane(&source, i32::MAX, &mut destination, 2, 2, usize::MAX).is_err());
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
new file mode 100644
index 0000000000..b5dde24ae3
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
@@ -0,0 +1,324 @@
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::sync::mpsc as std_mpsc;
+use std::sync::{Arc, Mutex};
+use std::thread;
+use std::time::Duration;
+
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use screencapturekit::async_api::{AsyncSCShareableContent, AsyncSCStream};
+use screencapturekit::cm::CMSampleBufferExt;
+use screencapturekit::stream::configuration::{PixelFormat, SCStreamConfiguration};
+use screencapturekit::stream::content_filter::SCContentFilter;
+use screencapturekit::stream::output_type::SCStreamOutputType;
+use tokio::sync::{mpsc, oneshot};
+
+const SCREEN_FPS: u64 = 30;
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum ScreenShareFailure {
+    Portal,
+    Capture,
+}
+
+pub(crate) struct ScreenShareSession {
+    cancellation: Arc<AtomicBool>,
+    monitor_stop: Option<oneshot::Sender<()>>,
+    monitor_task: Option<tokio::task::JoinHandle<()>>,
+    video_worker: Option<VideoWorker>,
+    stopped: bool,
+}
+
+struct BgraFrame {
+    data: Vec<u8>,
+    stride: usize,
+    width: usize,
+    height: usize,
+}
+
+struct LatestFrame(Mutex<Option<BgraFrame>>);
+
+impl LatestFrame {
+    fn new() -> Self {
+        Self(Mutex::new(None))
+    }
+
+    fn replace(&self, frame: BgraFrame) {
+        *self.0.lock().unwrap() = Some(frame);
+    }
+
+    fn take(&self) -> Option<BgraFrame> {
+        self.0.lock().unwrap().take()
+    }
+}
+
+struct VideoWorker {
+    stop: std_mpsc::Sender<()>,
+    thread: Option<thread::JoinHandle<()>>,
+}
+
+impl VideoWorker {
+    async fn stop_and_join(mut self) {
+        let _ = self.stop.send(());
+        if let Some(thread) = self.thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+    }
+
+    fn signal_stop(&self) {
+        let _ = self.stop.send(());
+    }
+}
+
+fn bgra_to_i420(data: &[u8], stride: usize, width: usize, height: usize) -> Result<I420Buffer, ()> {
+    let row_bytes = width.checked_mul(4).ok_or(())?;
+    if width == 0
+        || height == 0
+        || stride < row_bytes
+        || data.len() < stride.checked_mul(height).ok_or(())?
+    {
+        return Err(());
+    }
+    let mut i420 = I420Buffer::new(width as u32, height as u32);
+    let (y_stride, u_stride, v_stride) = i420.strides();
+    let (y, u, v) = i420.data_mut();
+    for row in 0..height {
+        for column in 0..width {
+            let offset = row * stride + column * 4;
+            let blue = data[offset] as i32;
+            let green = data[offset + 1] as i32;
+            let red = data[offset + 2] as i32;
+            y[row * y_stride as usize + column] =
+                (((66 * red + 129 * green + 25 * blue + 128) >> 8) + 16).clamp(0, 255) as u8;
+        }
+    }
+    let chroma_width = width.div_ceil(2);
+    let chroma_height = height.div_ceil(2);
+    for row in 0..chroma_height {
+        for column in 0..chroma_width {
+            let mut red = 0i32;
+            let mut green = 0i32;
+            let mut blue = 0i32;
+            let mut count = 0i32;
+            for y_row in (row * 2)..(row * 2 + 2).min(height) {
+                for x in (column * 2)..(column * 2 + 2).min(width) {
+                    let offset = y_row * stride + x * 4;
+                    blue += data[offset] as i32;
+                    green += data[offset + 1] as i32;
+                    red += data[offset + 2] as i32;
+                    count += 1;
+                }
+            }
+            let red = red / count;
+            let green = green / count;
+            let blue = blue / count;
+            u[row * u_stride as usize + column] =
+                (((-38 * red - 74 * green + 112 * blue + 128) >> 8) + 128).clamp(0, 255) as u8;
+            v[row * v_stride as usize + column] =
+                (((112 * red - 94 * green - 18 * blue + 128) >> 8) + 128).clamp(0, 255) as u8;
+        }
+    }
+    Ok(i420)
+}
+
+async fn capture_loop(
+    stream: AsyncSCStream,
+    slot: Arc<LatestFrame>,
+    cancellation: Arc<AtomicBool>,
+    mut stop_rx: oneshot::Receiver<()>,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+) {
+    let mut stream = stream;
+    loop {
+        tokio::select! {
+            _ = &mut stop_rx => break,
+            sample = stream.next() => {
+                if cancellation.load(Ordering::Acquire) {
+                    break;
+                }
+                let Some(sample) = sample else {
+                    let _ = stream.take_error();
+                    let _ = failure_tx.send(ScreenShareFailure::Capture);
+                    break;
+                };
+                let Some(pixel_buffer) = sample.image_buffer() else {
+                    let _ = failure_tx.send(ScreenShareFailure::Capture);
+                    break;
+                };
+                let Ok(buffer) = pixel_buffer.lock_read_only() else {
+                    let _ = failure_tx.send(ScreenShareFailure::Capture);
+                    break;
+                };
+                let width = buffer.width();
+                let height = buffer.height();
+                let stride = buffer.bytes_per_row();
+                let row_bytes = width.checked_mul(4);
+                let data = buffer.as_slice();
+                if row_bytes.is_none()
+                    || stride < row_bytes.unwrap()
+                    || data.len() < stride.saturating_mul(height)
+                {
+                    let _ = failure_tx.send(ScreenShareFailure::Capture);
+                    break;
+                }
+                if cancellation.load(Ordering::Acquire) {
+                    break;
+                }
+                slot.replace(BgraFrame {
+                    data: data.to_vec(),
+                    stride,
+                    width,
+                    height,
+                });
+            }
+        }
+    }
+    if stream.stop_capture().await.is_err() {
+        let _ = failure_tx.send(ScreenShareFailure::Capture);
+    }
+}
+
+fn spawn_video_worker(
+    source: NativeVideoSource,
+    slot: Arc<LatestFrame>,
+    cancellation: Arc<AtomicBool>,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+) -> VideoWorker {
+    let (stop_tx, stop_rx) = std_mpsc::channel();
+    let thread = thread::spawn(move || loop {
+        match stop_rx.recv_timeout(Duration::from_millis(1000 / SCREEN_FPS)) {
+            Ok(()) | Err(std_mpsc::RecvTimeoutError::Disconnected) => break,
+            Err(std_mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        if cancellation.load(Ordering::Acquire) {
+            break;
+        }
+        let Some(frame) = slot.take() else { continue };
+        let Ok(i420) = bgra_to_i420(&frame.data, frame.stride, frame.width, frame.height) else {
+            let _ = failure_tx.send(ScreenShareFailure::Capture);
+            break;
+        };
+        if cancellation.load(Ordering::Acquire) {
+            break;
+        }
+        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+    });
+    VideoWorker {
+        stop: stop_tx,
+        thread: Some(thread),
+    }
+}
+
+impl ScreenShareSession {
+    pub(crate) async fn start(
+        room: &Room,
+    ) -> Result<(Self, mpsc::UnboundedReceiver<ScreenShareFailure>), String> {
+        let content = AsyncSCShareableContent::get()
+            .await
+            .map_err(|error| format!("failed to get macOS shareable content: {error}"))?;
+        let display = content
+            .displays()
+            .first()
+            .ok_or_else(|| "no macOS display is available for screen sharing".to_owned())?;
+        let width = display.width();
+        let height = display.height();
+        let filter = SCContentFilter::create()
+            .with_display(display)
+            .with_excluding_windows(&[])
+            .build();
+        let config = SCStreamConfiguration::new()
+            .with_width(width)
+            .with_height(height)
+            .with_pixel_format(PixelFormat::BGRA)
+            .with_shows_cursor(true);
+        let stream = AsyncSCStream::new(&filter, &config, 1, SCStreamOutputType::Screen);
+        stream
+            .start_capture()
+            .await
+            .map_err(|error| format!("failed to start macOS screen capture: {error}"))?;
+
+        let source = NativeVideoSource::new(VideoResolution { width, height }, true);
+        let track = LocalVideoTrack::create_video_track(
+            "screen-share",
+            RtcVideoSource::Native(source.clone()),
+        );
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(track),
+                TrackPublishOptions {
+                    source: TrackSource::Screenshare,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            let _ = stream.stop_capture().await;
+            return Err(format!("failed to publish screen-share track: {error}"));
+        }
+
+        let (failure_tx, failure_rx) = mpsc::unbounded_channel();
+        let slot = Arc::new(LatestFrame::new());
+        let cancellation = Arc::new(AtomicBool::new(false));
+        let video_worker = spawn_video_worker(
+            source.clone(),
+            slot.clone(),
+            cancellation.clone(),
+            failure_tx.clone(),
+        );
+        let (monitor_stop, stop_rx) = oneshot::channel();
+        let monitor_task = tokio::spawn(capture_loop(
+            stream,
+            slot,
+            cancellation.clone(),
+            stop_rx,
+            failure_tx,
+        ));
+        Ok((
+            Self {
+                cancellation,
+                monitor_stop: Some(monitor_stop),
+                monitor_task: Some(monitor_task),
+                video_worker: Some(video_worker),
+                stopped: false,
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if self.stopped {
+            return;
+        }
+        self.stopped = true;
+        self.cancellation.store(true, Ordering::Release);
+        if let Some(stop) = self.monitor_stop.take() {
+            let _ = stop.send(());
+        }
+        if let Some(task) = self.monitor_task.take() {
+            let _ = task.await;
+        }
+        if let Some(worker) = self.video_worker.take() {
+            worker.stop_and_join().await;
+        }
+    }
+}
+
+impl Drop for ScreenShareSession {
+    fn drop(&mut self) {
+        self.cancellation.store(true, Ordering::Release);
+        if let Some(stop) = self.monitor_stop.take() {
+            let _ = stop.send(());
+        }
+        if let Some(task) = self.monitor_task.take() {
+            task.abort();
+        }
+        if let Some(worker) = &self.video_worker {
+            worker.signal_stop();
+        }
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_windows.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_windows.rs
new file mode 100644
index 0000000000..51b1fc1020
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_windows.rs
@@ -0,0 +1,567 @@
+use std::ffi::c_void;
+use std::sync::mpsc as std_mpsc;
+use std::sync::{
+    atomic::{AtomicBool, Ordering},
+    Arc, Mutex,
+};
+use std::thread;
+use std::time::Duration;
+
+use livekit::options::TrackPublishOptions;
+use livekit::track::{LocalTrack, LocalVideoTrack, TrackSource};
+use livekit::webrtc::video_frame::{I420Buffer, VideoFrame, VideoRotation};
+use livekit::webrtc::video_source::native::NativeVideoSource;
+use livekit::webrtc::video_source::{RtcVideoSource, VideoResolution};
+use livekit::Room;
+use raw_window_handle::{HasWindowHandle, RawWindowHandle};
+use tauri::{AppHandle, Runtime};
+use tokio::sync::{mpsc, oneshot};
+use windows::core::Interface;
+use windows::Foundation::TypedEventHandler;
+use windows::Graphics::Capture::{
+    Direct3D11CaptureFramePool, GraphicsCaptureItem, GraphicsCapturePicker,
+};
+use windows::Graphics::DirectX::Direct3D11::IDirect3DDevice;
+use windows::Graphics::DirectX::{DirectXPixelFormat, DirectXPixelFormat::B8G8R8A8UIntNormalized};
+use windows::Win32::Foundation::HWND;
+use windows::Win32::Graphics::Direct3D::{D3D_DRIVER_TYPE_HARDWARE, D3D_FEATURE_LEVEL_11_0};
+use windows::Win32::Graphics::Direct3D11::{
+    D3D11CreateDevice, ID3D11Device, ID3D11DeviceContext, ID3D11Texture2D, D3D11_CPU_ACCESS_READ,
+    D3D11_CREATE_DEVICE_BGRA_SUPPORT, D3D11_MAPPED_SUBRESOURCE, D3D11_MAP_READ,
+    D3D11_TEXTURE2D_DESC, D3D11_USAGE_STAGING,
+};
+use windows::Win32::Graphics::Dxgi::Common::{DXGI_FORMAT_B8G8R8A8_UNORM, DXGI_SAMPLE_DESC};
+use windows::Win32::Graphics::Dxgi::IDXGIDevice;
+use windows::Win32::System::WinRT::Direct3D11::{
+    CreateDirect3D11DeviceFromDXGIDevice, IDirect3DDxgiInterfaceAccess,
+};
+use windows::Win32::System::WinRT::{RoInitialize, RoUninitialize, RO_INIT_MULTITHREADED};
+use windows::Win32::UI::Shell::IInitializeWithWindow;
+
+const SCREEN_FPS: u64 = 30;
+
+#[derive(Debug, Clone, Copy)]
+pub(crate) enum ScreenShareFailure {
+    Capture,
+}
+
+struct BgraFrame {
+    data: Vec<u8>,
+    stride: usize,
+    width: usize,
+    height: usize,
+}
+
+struct LatestFrame {
+    frame: Mutex<Option<BgraFrame>>,
+}
+
+impl LatestFrame {
+    fn replace(&self, frame: BgraFrame) {
+        if let Ok(mut latest) = self.frame.lock() {
+            *latest = Some(frame);
+        }
+    }
+
+    fn take(&self) -> Option<BgraFrame> {
+        self.frame.lock().ok()?.take()
+    }
+}
+
+struct GpuReader {
+    context: ID3D11DeviceContext,
+    staging: ID3D11Texture2D,
+    width: u32,
+    height: u32,
+}
+
+impl GpuReader {
+    fn read(&mut self, texture: &ID3D11Texture2D) -> Result<BgraFrame, ()> {
+        let mut desc = D3D11_TEXTURE2D_DESC::default();
+        unsafe { texture.GetDesc(&mut desc) };
+        if desc.Width != self.width
+            || desc.Height != self.height
+            || desc.Format != DXGI_FORMAT_B8G8R8A8_UNORM
+        {
+            return Err(());
+        }
+
+        unsafe {
+            self.context.CopyResource(&self.staging, texture);
+        }
+        let mut mapped = D3D11_MAPPED_SUBRESOURCE::default();
+        unsafe {
+            self.context
+                .Map(&self.staging, 0, D3D11_MAP_READ, 0, Some(&mut mapped))
+                .map_err(|_| ())?;
+        }
+        let _map_guard = MappedTexture {
+            context: &self.context,
+            texture: &self.staging,
+        };
+        let stride = mapped.RowPitch as usize;
+        let row_bytes = usize::try_from(self.width.checked_mul(4).ok_or(())?).map_err(|_| ())?;
+        let size = stride.checked_mul(self.height as usize).ok_or(())?;
+        if stride < row_bytes || mapped.pData.is_null() {
+            return Err(());
+        }
+        let data = unsafe { std::slice::from_raw_parts(mapped.pData.cast::<u8>(), size) }.to_vec();
+        Ok(BgraFrame {
+            data,
+            stride,
+            width: self.width as usize,
+            height: self.height as usize,
+        })
+    }
+}
+
+struct MappedTexture<'a> {
+    context: &'a ID3D11DeviceContext,
+    texture: &'a ID3D11Texture2D,
+}
+
+impl Drop for MappedTexture<'_> {
+    fn drop(&mut self) {
+        unsafe { self.context.Unmap(self.texture, 0) };
+    }
+}
+
+pub(crate) struct ScreenShareSession {
+    stop_tx: Option<std_mpsc::Sender<()>>,
+    video_stop_tx: Option<std_mpsc::Sender<()>>,
+    capture_thread: Option<thread::JoinHandle<()>>,
+    video_thread: Option<thread::JoinHandle<()>>,
+}
+
+impl Drop for ScreenShareSession {
+    fn drop(&mut self) {
+        if let Some(stop_tx) = self.stop_tx.take() {
+            let _ = stop_tx.send(());
+        }
+        if let Some(video_stop_tx) = self.video_stop_tx.take() {
+            let _ = video_stop_tx.send(());
+        }
+    }
+}
+
+fn signal_terminal_failure(
+    failure_tx: &mpsc::UnboundedSender<ScreenShareFailure>,
+    failure_signaled: &AtomicBool,
+) {
+    if !failure_signaled.swap(true, Ordering::AcqRel) {
+        let _ = failure_tx.send(ScreenShareFailure::Capture);
+    }
+}
+
+async fn pick_item<R: Runtime>(app: &AppHandle<R>) -> Result<GraphicsCaptureItem, String> {
+    let window = app
+        .get_webview_window("main")
+        .ok_or_else(|| "main window is unavailable".to_owned())?;
+    let (result_tx, result_rx) = oneshot::channel();
+
+    let window_for_handle = window.clone();
+    window
+        .run_on_main_thread(move || {
+            let operation = (|| {
+                let raw = window_for_handle
+                    .window_handle()
+                    .map_err(|error| format!("failed to get main window handle: {error}"))?
+                    .as_raw();
+                let RawWindowHandle::Win32(handle) = raw else {
+                    return Err("main window does not expose a Win32 handle".to_owned());
+                };
+                let picker = GraphicsCapturePicker::new()
+                    .map_err(|error| format!("failed to create screen-share picker: {error}"))?;
+                let initializer = picker.cast::<IInitializeWithWindow>().map_err(|error| {
+                    format!("failed to access picker window initializer: {error}")
+                })?;
+                unsafe {
+                    initializer
+                        .Initialize(HWND(handle.hwnd.get() as *mut c_void))
+                        .map_err(|error| {
+                            format!("failed to initialize screen-share picker: {error}")
+                        })?;
+                }
+                let operation = picker
+                    .PickSingleItemAsync()
+                    .map_err(|error| format!("failed to open screen-share picker: {error}"))?;
+                Ok(operation)
+            })();
+            match operation {
+                Ok(operation) => {
+                    tauri::async_runtime::spawn(async move {
+                        let _ = result_tx.send(
+                            operation
+                                .await
+                                .map_err(|error| format!("screen-share picker failed: {error}")),
+                        );
+                    });
+                }
+                Err(error) => {
+                    let _ = result_tx.send(Err(error));
+                }
+            }
+        })
+        .map_err(|error| format!("failed to run screen-share picker on the UI thread: {error}"))?;
+
+    result_rx
+        .await
+        .map_err(|_| "screen-share picker task ended unexpectedly".to_owned())?
+        .map_err(|error| error)
+}
+
+fn create_d3d_device() -> Result<(ID3D11Device, ID3D11DeviceContext, IDirect3DDevice), String> {
+    let mut device = None;
+    let mut context = None;
+    let mut feature_level = D3D_FEATURE_LEVEL_11_0;
+    unsafe {
+        D3D11CreateDevice(
+            None,
+            D3D_DRIVER_TYPE_HARDWARE,
+            Default::default(),
+            D3D11_CREATE_DEVICE_BGRA_SUPPORT,
+            Some(&[D3D_FEATURE_LEVEL_11_0]),
+            7,
+            Some(&mut device),
+            Some(&mut feature_level),
+            Some(&mut context),
+        )
+        .map_err(|error| format!("failed to create D3D11 device: {error}"))?;
+    }
+    let device = device.ok_or_else(|| "D3D11 returned no device".to_owned())?;
+    let context = context.ok_or_else(|| "D3D11 returned no immediate context".to_owned())?;
+    let dxgi_device = device
+        .cast::<IDXGIDevice>()
+        .map_err(|error| format!("failed to query DXGI device: {error}"))?;
+    let inspectable = unsafe { CreateDirect3D11DeviceFromDXGIDevice(&dxgi_device) }
+        .map_err(|error| format!("failed to create WinRT D3D11 device: {error}"))?;
+    let winrt_device = inspectable
+        .cast::<IDirect3DDevice>()
+        .map_err(|error| format!("failed to cast WinRT D3D11 device: {error}"))?;
+    Ok((device, context, winrt_device))
+}
+
+fn create_staging_texture(
+    device: &ID3D11Device,
+    width: u32,
+    height: u32,
+) -> Result<ID3D11Texture2D, String> {
+    let desc = D3D11_TEXTURE2D_DESC {
+        Width: width,
+        Height: height,
+        MipLevels: 1,
+        ArraySize: 1,
+        Format: DXGI_FORMAT_B8G8R8A8_UNORM,
+        SampleDesc: DXGI_SAMPLE_DESC {
+            Count: 1,
+            Quality: 0,
+        },
+        Usage: D3D11_USAGE_STAGING,
+        BindFlags: 0,
+        CPUAccessFlags: D3D11_CPU_ACCESS_READ.0 as u32,
+        MiscFlags: 0,
+    };
+    let mut staging = None;
+    unsafe {
+        device
+            .CreateTexture2D(&desc, None, Some(&mut staging as *mut _))
+            .map_err(|error| format!("failed to create staging texture: {error}"))?;
+    }
+    staging.ok_or_else(|| "D3D11 returned no staging texture".to_owned())
+}
+
+fn capture_thread(
+    item: GraphicsCaptureItem,
+    stop_rx: std_mpsc::Receiver<()>,
+    latest_frame: Arc<LatestFrame>,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+    failure_signaled: Arc<AtomicBool>,
+    ready_tx: std_mpsc::Sender<Result<(u32, u32), String>>,
+) {
+    let initialized = unsafe { RoInitialize(RO_INIT_MULTITHREADED) }.is_ok();
+    if !initialized {
+        let _ = ready_tx.send(Err(
+            "failed to initialize WinRT on capture thread".to_owned()
+        ));
+        signal_terminal_failure(&failure_tx, &failure_signaled);
+        return;
+    }
+    let result = (|| {
+        let size = item
+            .Size()
+            .map_err(|error| format!("failed to get capture item size: {error}"))?;
+        let width = u32::try_from(size.Width).map_err(|_| "capture width is invalid".to_owned())?;
+        let height =
+            u32::try_from(size.Height).map_err(|_| "capture height is invalid".to_owned())?;
+        if width == 0 || height == 0 {
+            return Err("capture item has an empty size".to_owned());
+        }
+        let (device, context, winrt_device) = create_d3d_device()?;
+        let staging = create_staging_texture(&device, width, height)?;
+        let reader = Arc::new(Mutex::new(GpuReader {
+            context,
+            staging,
+            width,
+            height,
+        }));
+        let pool = Direct3D11CaptureFramePool::CreateFreeThreaded(
+            &winrt_device,
+            DirectXPixelFormat::B8G8R8A8UIntNormalized,
+            2,
+            size,
+        )
+        .map_err(|error| format!("failed to create capture frame pool: {error}"))?;
+        let session = pool
+            .CreateCaptureSession(&item)
+            .map_err(|error| format!("failed to create capture session: {error}"))?;
+        session
+            .SetIsCursorCaptureEnabled(true)
+            .map_err(|error| format!("failed to enable cursor capture: {error}"))?;
+
+        let callback_pool = pool.clone();
+        let callback_reader = reader.clone();
+        let callback_frames = latest_frame.clone();
+        let callback_failures = failure_tx.clone();
+        let callback_failure_signaled = failure_signaled.clone();
+        let frame_handler = TypedEventHandler::new(
+            move |_pool: Option<&Direct3D11CaptureFramePool>, _| -> windows::core::Result<()> {
+                if callback_failure_signaled.load(Ordering::Acquire) {
+                    return Ok(());
+                }
+                let result = (|| {
+                    let frame = callback_pool.TryGetNextFrame()?;
+                    let content_size = frame.ContentSize()?;
+                    let mut read = callback_reader
+                        .lock()
+                        .map_err(|_| windows::core::Error::from_win32())?;
+                    if content_size.Width != read.width as i32
+                        || content_size.Height != read.height as i32
+                    {
+                        let _ = frame.Close();
+                        return Err(windows::core::Error::from_win32());
+                    }
+                    let surface = frame.Surface()?;
+                    let access = surface.cast::<IDirect3DDxgiInterfaceAccess>()?;
+                    let texture = unsafe { access.GetInterface::<ID3D11Texture2D>() }?;
+                    let frame_result = read
+                        .read(&texture)
+                        .map_err(|_| windows::core::Error::from_win32());
+                    let close_result = frame.Close();
+                    match (frame_result, close_result) {
+                        (Ok(frame), Ok(())) => {
+                            callback_frames.replace(frame);
+                            Ok(())
+                        }
+                        (Err(error), _) => Err(error),
+                        (_, Err(error)) => Err(error),
+                    }
+                })();
+                if let Err(error) = result {
+                    signal_terminal_failure(&callback_failures, &callback_failure_signaled);
+                    return Err(error);
+                }
+                Ok(())
+            },
+        );
+        let frame_token = pool
+            .FrameArrived(frame_handler)
+            .map_err(|error| format!("failed to register capture callback: {error}"))?;
+
+        let callback_failures = failure_tx.clone();
+        let closed_failure_signaled = failure_signaled.clone();
+        let closed_handler = TypedEventHandler::new(
+            move |_item: Option<&GraphicsCaptureItem>, _| -> windows::core::Result<()> {
+                signal_terminal_failure(&callback_failures, &closed_failure_signaled);
+                Ok(())
+            },
+        );
+        let closed_token = item
+            .Closed(closed_handler)
+            .map_err(|error| format!("failed to register capture close callback: {error}"))?;
+
+        session
+            .StartCapture()
+            .map_err(|error| format!("failed to start capture: {error}"))?;
+        let _ = ready_tx.send(Ok((width, height)));
+        let _ = stop_rx.recv();
+        let _ = item.RemoveClosed(closed_token);
+        let _ = pool.RemoveFrameArrived(frame_token);
+        let _ = session.Close();
+        let _ = pool.Close();
+        Ok(())
+    })();
+    if let Err(error) = result {
+        let _ = ready_tx.send(Err(error));
+        signal_terminal_failure(&failure_tx, &failure_signaled);
+    }
+    unsafe { RoUninitialize() };
+}
+
+fn bgra_to_i420(data: &[u8], stride: usize, width: usize, height: usize) -> Result<I420Buffer, ()> {
+    let row_bytes = width.checked_mul(4).ok_or(())?;
+    if width == 0
+        || height == 0
+        || stride < row_bytes
+        || data.len() < stride.checked_mul(height).ok_or(())?
+    {
+        return Err(());
+    }
+    let mut i420 = I420Buffer::new(width as u32, height as u32);
+    let (y_stride, u_stride, v_stride) = i420.strides();
+    let (y, u, v) = i420.data_mut();
+    for row in 0..height {
+        for column in 0..width {
+            let offset = row * stride + column * 4;
+            let blue = data[offset] as i32;
+            let green = data[offset + 1] as i32;
+            let red = data[offset + 2] as i32;
+            y[row * y_stride as usize + column] =
+                (((66 * red + 129 * green + 25 * blue + 128) >> 8) + 16).clamp(0, 255) as u8;
+        }
+    }
+    for row in 0..height.div_ceil(2) {
+        for column in 0..width.div_ceil(2) {
+            let mut red = 0;
+            let mut green = 0;
+            let mut blue = 0;
+            let mut count = 0;
+            for y_row in (row * 2)..(row * 2 + 2).min(height) {
+                for x in (column * 2)..(column * 2 + 2).min(width) {
+                    let offset = y_row * stride + x * 4;
+                    blue += data[offset] as i32;
+                    green += data[offset + 1] as i32;
+                    red += data[offset + 2] as i32;
+                    count += 1;
+                }
+            }
+            red /= count;
+            green /= count;
+            blue /= count;
+            u[row * u_stride as usize + column] =
+                (((-38 * red - 74 * green + 112 * blue + 128) >> 8) + 128).clamp(0, 255) as u8;
+            v[row * v_stride as usize + column] =
+                (((112 * red - 94 * green - 18 * blue + 128) >> 8) + 128).clamp(0, 255) as u8;
+        }
+    }
+    Ok(i420)
+}
+
+fn video_thread(
+    source: NativeVideoSource,
+    latest_frame: Arc<LatestFrame>,
+    stop_rx: std_mpsc::Receiver<()>,
+    failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
+    failure_signaled: Arc<AtomicBool>,
+) {
+    loop {
+        match stop_rx.recv_timeout(Duration::from_millis(1000 / SCREEN_FPS)) {
+            Ok(()) | Err(std_mpsc::RecvTimeoutError::Disconnected) => break,
+            Err(std_mpsc::RecvTimeoutError::Timeout) => {}
+        }
+        let Some(frame) = latest_frame.take() else {
+            continue;
+        };
+        let Ok(i420) = bgra_to_i420(&frame.data, frame.stride, frame.width, frame.height) else {
+            signal_terminal_failure(&failure_tx, &failure_signaled);
+            break;
+        };
+        source.capture_frame(&VideoFrame::new(VideoRotation::VideoRotation0, i420));
+    }
+}
+
+impl ScreenShareSession {
+    pub(crate) async fn start<R: Runtime>(
+        app: &AppHandle<R>,
+        room: &Room,
+    ) -> Result<(Self, mpsc::UnboundedReceiver<ScreenShareFailure>), String> {
+        let item = pick_item(app).await?;
+        let (failure_tx, failure_rx) = mpsc::unbounded_channel();
+        let latest_frame = Arc::new(LatestFrame {
+            frame: Mutex::new(None),
+        });
+        let (stop_tx, stop_rx) = std_mpsc::channel();
+        let (ready_tx, ready_rx) = std_mpsc::channel();
+        let capture_failure_tx = failure_tx.clone();
+        let failure_signaled = Arc::new(AtomicBool::new(false));
+        let capture_latest = latest_frame.clone();
+        let capture_failure_signaled = failure_signaled.clone();
+        let capture_thread = thread::spawn(move || {
+            capture_thread(
+                item,
+                stop_rx,
+                capture_latest,
+                capture_failure_tx,
+                capture_failure_signaled,
+                ready_tx,
+            )
+        });
+        let ready = tokio::task::spawn_blocking(move || ready_rx.recv())
+            .await
+            .map_err(|_| "capture setup task panicked".to_owned())?
+            .map_err(|_| "capture setup task ended unexpectedly".to_owned())?;
+        let (width, height) = match ready {
+            Ok(size) => size,
+            Err(error) => {
+                let _ = capture_thread.join();
+                return Err(error);
+            }
+        };
+
+        let source = NativeVideoSource::new(VideoResolution { width, height }, true);
+        if let Err(error) = room
+            .local_participant()
+            .publish_track(
+                LocalTrack::Video(LocalVideoTrack::create_video_track(
+                    "screen-share",
+                    RtcVideoSource::Native(source.clone()),
+                )),
+                TrackPublishOptions {
+                    source: TrackSource::Screenshare,
+                    ..Default::default()
+                },
+            )
+            .await
+        {
+            let _ = stop_tx.send(());
+            let _ = capture_thread.join();
+            return Err(format!("failed to publish screen-share track: {error}"));
+        }
+
+        let (video_stop_tx, video_stop_rx) = std_mpsc::channel();
+        let video_failure_tx = failure_tx.clone();
+        let video_failure_signaled = failure_signaled.clone();
+        let video_thread = thread::spawn(move || {
+            video_thread(
+                source,
+                latest_frame,
+                video_stop_rx,
+                video_failure_tx,
+                video_failure_signaled,
+            )
+        });
+        Ok((
+            Self {
+                stop_tx: Some(stop_tx),
+                video_stop_tx: Some(video_stop_tx),
+                capture_thread: Some(capture_thread),
+                video_thread: Some(video_thread),
+            },
+            failure_rx,
+        ))
+    }
+
+    pub(crate) async fn shutdown(&mut self) {
+        if let Some(stop_tx) = self.stop_tx.take() {
+            let _ = stop_tx.send(());
+        }
+        if let Some(video_stop_tx) = self.video_stop_tx.take() {
+            let _ = video_stop_tx.send(());
+        }
+        if let Some(thread) = self.capture_thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+        if let Some(thread) = self.video_thread.take() {
+            let _ = tokio::task::spawn_blocking(move || thread.join()).await;
+        }
+    }
+}
diff --git a/src-tauri/src/lib.rs b/src-tauri/src/lib.rs
index c723f3ce92..d15ba4ef0f 100644
--- a/src-tauri/src/lib.rs
+++ b/src-tauri/src/lib.rs
@@ -341,8 +341,9 @@ pub fn run() {
     #[cfg(desktop)]
     let builder = builder
         .plugin(tauri_plugin_process::init())
-        .plugin(tauri_plugin_dialog::init())
-        .plugin(tauri_plugin_call_lifecycle::init());
+        .plugin(tauri_plugin_dialog::init());
+
+    let builder = builder.plugin(tauri_plugin_call_lifecycle::init());
 
     #[cfg(target_os = "ios")]
     let builder = builder
diff --git a/src/app/features/call/nativeCallController.ts b/src/app/features/call/nativeCallController.ts
index 691b9c7ae3..69c5e4e908 100644
--- a/src/app/features/call/nativeCallController.ts
+++ b/src/app/features/call/nativeCallController.ts
@@ -372,6 +372,9 @@ export const createNativeCallController = (
         connectionId,
         serverUrl: provisioned.url,
         participantToken: provisioned.jwt,
+        audio: true,
+        video,
+        screenShare: false,
       });
       handleState(record, state);
     } catch {
diff --git a/src/app/features/call/nativeCallProbe.test.ts b/src/app/features/call/nativeCallProbe.test.ts
index 30856d9d6d..30ed91e25b 100644
--- a/src/app/features/call/nativeCallProbe.test.ts
+++ b/src/app/features/call/nativeCallProbe.test.ts
@@ -1,14 +1,14 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 
-const desktop = vi.hoisted(() => vi.fn<() => boolean>());
+const platform = vi.hoisted(() => vi.fn<() => string | undefined>());
 
-vi.mock('$utils/platform', () => ({ isDesktopTauri: desktop }));
+vi.mock('$utils/platform', () => ({ getDesktopTauriPlatform: platform }));
 
 import { isNativeCallProbeEnabled, NATIVE_CALL_PROBE_STORAGE_KEY } from './nativeCallProbe';
 
 describe('native call probe gate', () => {
   beforeEach(() => {
-    desktop.mockReset();
+    platform.mockReset();
     localStorage.clear();
   });
 
@@ -17,7 +17,7 @@ describe('native call probe gate', () => {
   });
 
   it('is disabled by default and enabled only by the documented desktop key', () => {
-    desktop.mockReturnValue(true);
+    platform.mockReturnValue('linux');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'false');
     expect(isNativeCallProbeEnabled()).toBe(false);
 
@@ -26,16 +26,24 @@ describe('native call probe gate', () => {
   });
 
   it('is enabled by the environment flag on desktop Tauri', () => {
-    desktop.mockReturnValue(true);
+    platform.mockReturnValue('linux');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
 
     expect(isNativeCallProbeEnabled()).toBe(true);
   });
 
-  it('is disabled outside desktop Tauri', () => {
-    desktop.mockReturnValue(false);
+  it('is disabled outside Linux desktop Tauri', () => {
+    platform.mockReturnValue('windows');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
     localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
     expect(isNativeCallProbeEnabled()).toBe(false);
   });
+
+  it('is disabled on macOS desktop Tauri', () => {
+    platform.mockReturnValue('macos');
+    vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
+    localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
+
+    expect(isNativeCallProbeEnabled()).toBe(false);
+  });
 });
diff --git a/src/app/features/call/nativeCallProbe.ts b/src/app/features/call/nativeCallProbe.ts
index ab67033377..00a6b1f31a 100644
--- a/src/app/features/call/nativeCallProbe.ts
+++ b/src/app/features/call/nativeCallProbe.ts
@@ -1,11 +1,11 @@
-import { isDesktopTauri } from '$utils/platform';
+import { getDesktopTauriPlatform } from '$utils/platform';
 
 // Enable the desktop transport probe with VITE_ENABLE_NATIVE_CALL_PROBE=true or manually:
 // localStorage.setItem('sable.nativeCallProbe', '1').
 export const NATIVE_CALL_PROBE_STORAGE_KEY = 'sable.nativeCallProbe';
 
 export const isNativeCallProbeEnabled = (): boolean => {
-  if (typeof window === 'undefined' || !isDesktopTauri()) return false;
+  if (typeof window === 'undefined' || getDesktopTauriPlatform() !== 'linux') return false;
 
   if (import.meta.env.VITE_ENABLE_NATIVE_CALL_PROBE === 'true') return true;
 
diff --git a/src/app/generated/tauri/commands.ts b/src/app/generated/tauri/commands.ts
index c4e3811cfb..4d9caaff5e 100644
--- a/src/app/generated/tauri/commands.ts
+++ b/src/app/generated/tauri/commands.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-27T14:52:10.696863893+00:00
+ * Generated at: 2026-07-28T09:36:39.569954197+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
@@ -22,6 +22,14 @@ export async function clearMediaSession(): Promise<void> {
   return invoke('clear_media_session');
 }
 
+export async function connect(params: types.ConnectParams): Promise<types.CallState> {
+  return invoke('connect', params);
+}
+
+export async function disconnect(params: types.DisconnectParams): Promise<types.CallState> {
+  return invoke('disconnect', params);
+}
+
 export async function exportDiagnostics(params: types.ExportDiagnosticsParams): Promise<string | null> {
   return invoke('export_diagnostics', params);
 }
@@ -30,6 +38,10 @@ export async function getDesktopRuntimeState(): Promise<types.DesktopRuntimeStat
   return invoke('get_desktop_runtime_state');
 }
 
+export async function getState(): Promise<types.CallState> {
+  return invoke('get_state');
+}
+
 export async function hapticFeedback(params: types.HapticFeedbackParams): Promise<void> {
   return invoke('haptic_feedback', params);
 }
diff --git a/src/app/generated/tauri/events.ts b/src/app/generated/tauri/events.ts
index cf2db300a3..d5ce042cee 100644
--- a/src/app/generated/tauri/events.ts
+++ b/src/app/generated/tauri/events.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-26T18:31:24.510042400+00:00
+ * Generated at: 2026-07-28T09:36:39.570756294+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
diff --git a/src/app/generated/tauri/index.ts b/src/app/generated/tauri/index.ts
index 0f9a3b0330..7cf70421dc 100644
--- a/src/app/generated/tauri/index.ts
+++ b/src/app/generated/tauri/index.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-26T18:31:24.510311700+00:00
+ * Generated at: 2026-07-28T09:36:39.570886134+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
diff --git a/src/app/generated/tauri/types.ts b/src/app/generated/tauri/types.ts
index f683767490..a1c43ba916 100644
--- a/src/app/generated/tauri/types.ts
+++ b/src/app/generated/tauri/types.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-26T18:31:24.507322700+00:00
+ * Generated at: 2026-07-28T09:36:39.566252609+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
@@ -10,6 +10,15 @@
 
 import type { Channel } from '@tauri-apps/api/core';
 
+export interface ConnectRequest {
+  connectionId: string;
+  serverUrl: string;
+  participantToken: SecretString;
+  audio: boolean;
+  video: boolean;
+  screenShare: boolean;
+}
+
 export interface DesktopRuntimeState {
   trayAvailable: boolean;
 }
@@ -20,6 +29,10 @@ export interface DesktopSettings {
   useCustomTitleBar: boolean;
 }
 
+export interface DisconnectRequest {
+  connectionId: string;
+}
+
 export interface LoopbackFetchRequest {
   requestId: string;
   method: string;
@@ -73,6 +86,16 @@ export interface AbortNativeUploadParams {
   [key: string]: unknown;
 }
 
+export interface ConnectParams {
+  payload: ConnectRequest;
+  [key: string]: unknown;
+}
+
+export interface DisconnectParams {
+  payload: DisconnectRequest;
+  [key: string]: unknown;
+}
+
 export interface ExportDiagnosticsParams {
   frontendLogs?: string | null;
   [key: string]: unknown;

From bb60753bf6ca814179dab1f9e4d761ddda2d8fb0 Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 14:59:53 +0200
Subject: [PATCH 4/9] fix(call): correct macOS screen capture borrow

---
 .../tauri-plugin-call-lifecycle/src/screen_share_macos.rs    | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
index b5dde24ae3..7659c506ba 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/screen_share_macos.rs
@@ -132,7 +132,6 @@ async fn capture_loop(
     mut stop_rx: oneshot::Receiver<()>,
     failure_tx: mpsc::UnboundedSender<ScreenShareFailure>,
 ) {
-    let mut stream = stream;
     loop {
         tokio::select! {
             _ = &mut stop_rx => break,
@@ -220,8 +219,8 @@ impl ScreenShareSession {
         let content = AsyncSCShareableContent::get()
             .await
             .map_err(|error| format!("failed to get macOS shareable content: {error}"))?;
-        let display = content
-            .displays()
+        let displays = content.displays();
+        let display = displays
             .first()
             .ok_or_else(|| "no macOS display is available for screen sharing".to_owned())?;
         let width = display.width();

From b201354a3bd420eef56e43f474f7402eaaecd00f Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 16:55:25 +0200
Subject: [PATCH 5/9] fix(build): use full Xcode for macOS builds

---
 .cargo/config.toml             |  2 +
 mise.toml                      |  2 +-
 package.json                   |  2 +-
 scripts/macos-bin/xcode-select | 10 ++++
 scripts/tauri.js               | 85 +++++++++++++++++++++++++++++++++-
 src-tauri/tauri.conf.json      |  1 +
 6 files changed, 99 insertions(+), 3 deletions(-)
 create mode 100644 .cargo/config.toml
 create mode 100755 scripts/macos-bin/xcode-select

diff --git a/.cargo/config.toml b/.cargo/config.toml
new file mode 100644
index 0000000000..89cecbf33b
--- /dev/null
+++ b/.cargo/config.toml
@@ -0,0 +1,2 @@
+[env]
+MACOSX_DEPLOYMENT_TARGET = { value = "13.0", force = true }
diff --git a/mise.toml b/mise.toml
index 503fe08184..a00ce02059 100644
--- a/mise.toml
+++ b/mise.toml
@@ -77,7 +77,7 @@ run = [
 [tasks."tauri:setup:macos"]
 description = "Install Xcode"
 confirm = { message = "Install Xcode? (required for Tauri)", default = "no" }
-run = "xcode-select --print-path >/dev/null 2>&1 || xcode-select --install"
+run = '''developer_dir="${DEVELOPER_DIR:-$(xcode-select --print-path 2>/dev/null)}" && test -d "$developer_dir/Platforms/MacOSX.platform/Developer/SDKs" || { echo "Full Xcode with the macOS SDK is required. Install Xcode or set DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer (no sudo required)." >&2; exit 1; }'''
 
 [tasks."tauri:setup:ios"]
 description = "Set up iOS Xcode project"
diff --git a/package.json b/package.json
index 1a5b730044..198dd6b1ae 100644
--- a/package.json
+++ b/package.json
@@ -15,7 +15,7 @@
     "fmt": "oxfmt .",
     "fmt:check": "oxfmt --check .",
     "typecheck": "tsc",
-    "tauri": "tauri",
+    "tauri": "node scripts/tauri.js",
     "tauri:cef": "node scripts/tauri.js cef",
     "tauri:wry": "node scripts/tauri.js wry",
     "test": "vitest",
diff --git a/scripts/macos-bin/xcode-select b/scripts/macos-bin/xcode-select
new file mode 100755
index 0000000000..3b33f9bb55
--- /dev/null
+++ b/scripts/macos-bin/xcode-select
@@ -0,0 +1,10 @@
+#!/bin/sh
+
+case "${1:-}" in
+  -p|--print-path)
+    printf '%s\n' "${DEVELOPER_DIR:-}"
+    exit 0
+    ;;
+esac
+
+exec /usr/bin/xcode-select "$@"
diff --git a/scripts/tauri.js b/scripts/tauri.js
index 52f340daaf..6df709d316 100755
--- a/scripts/tauri.js
+++ b/scripts/tauri.js
@@ -20,8 +20,10 @@
  */
 
 import { run } from '@tauri-apps/cli';
+import { execFileSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
 import { fileURLToPath } from 'url';
-import { dirname, join } from 'path';
+import { delimiter, dirname, join, resolve } from 'path';
 import process from 'node:process';
 import { PrefixedLogger, createTextHelpers } from './utils/console-style.js';
 
@@ -35,6 +37,85 @@ const cmdlineArgs = process.argv.slice(2);
 process.chdir(join(__dirname, '..'));
 
 const DESKTOP = new Set(['wry', 'cef']);
+const DEFAULT_XCODE_DEVELOPER_DIR = '/Applications/Xcode.app/Contents/Developer';
+
+function normalizeDeveloperDir(value) {
+  const path = resolve(value);
+  return path.endsWith('.app') ? join(path, 'Contents', 'Developer') : path;
+}
+
+function isFullXcodeDeveloperDir(developerDir) {
+  return (
+    existsSync(join(developerDir, 'usr', 'bin', 'xcodebuild')) &&
+    existsSync(join(developerDir, 'Platforms', 'MacOSX.platform', 'Developer', 'SDKs'))
+  );
+}
+
+function failMacOSToolchain(reason) {
+  logger.error(
+    `${reason} Install full Xcode or set DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer.`,
+  );
+  process.exit(1);
+}
+
+function configureMacOSToolchain() {
+  if (process.platform !== 'darwin') {
+    return;
+  }
+
+  const configuredDeveloperDir = process.env.DEVELOPER_DIR?.trim();
+  let developerDir;
+  if (configuredDeveloperDir) {
+    developerDir = normalizeDeveloperDir(configuredDeveloperDir);
+    if (!isFullXcodeDeveloperDir(developerDir)) {
+      failMacOSToolchain(`Full Xcode was not found at DEVELOPER_DIR=${configuredDeveloperDir}.`);
+    }
+  } else {
+    let selectedDeveloperDir;
+    try {
+      selectedDeveloperDir = execFileSync(
+        '/usr/bin/xcode-select',
+        ['--print-path'],
+        { encoding: 'utf8' },
+      ).trim();
+    } catch {
+      selectedDeveloperDir = '';
+    }
+
+    const candidates = [selectedDeveloperDir, DEFAULT_XCODE_DEVELOPER_DIR]
+      .filter(Boolean)
+      .map(normalizeDeveloperDir);
+    developerDir = candidates.find(isFullXcodeDeveloperDir);
+    if (!developerDir) {
+      failMacOSToolchain(
+        'Full Xcode was not found at the selected developer directory or /Applications/Xcode.app.',
+      );
+    }
+  }
+
+  let sdkRoot;
+  try {
+    sdkRoot = execFileSync(
+      '/usr/bin/xcrun',
+      ['--sdk', 'macosx', '--show-sdk-path'],
+      {
+        encoding: 'utf8',
+        env: { ...process.env, DEVELOPER_DIR: developerDir },
+      },
+    ).trim();
+  } catch {
+    failMacOSToolchain(`Unable to resolve the macOS SDK from DEVELOPER_DIR=${developerDir}.`);
+  }
+  if (!sdkRoot || !existsSync(sdkRoot)) {
+    failMacOSToolchain(`The macOS SDK was not found from DEVELOPER_DIR=${developerDir}.`);
+  }
+
+  process.env.DEVELOPER_DIR = developerDir;
+  process.env.SDKROOT = sdkRoot;
+  process.env.PATH = [join(__dirname, 'macos-bin'), process.env.PATH]
+    .filter(Boolean)
+    .join(delimiter);
+}
 
 async function runTauri(args) {
   logger.info(`${dim('Running:')} tauri ${args.join(' ')}`);
@@ -47,6 +128,8 @@ async function runTauri(args) {
 }
 
 async function main() {
+  configureMacOSToolchain();
+
   if (cmdlineArgs.length === 0 || !DESKTOP.has(cmdlineArgs[0])) {
     return runTauri(cmdlineArgs);
   }
diff --git a/src-tauri/tauri.conf.json b/src-tauri/tauri.conf.json
index fb97e6ebb7..24c2df5613 100644
--- a/src-tauri/tauri.conf.json
+++ b/src-tauri/tauri.conf.json
@@ -20,6 +20,7 @@
     "targets": "all",
     "createUpdaterArtifacts": true,
     "macOS": {
+      "minimumSystemVersion": "13.0",
       "infoPlist": "Info.plist"
     },
     "iOS": {

From 4028c2451903da3bf8bd96d08750fa563575f3da Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 17:25:01 +0200
Subject: [PATCH 6/9] fix(build): enable macOS development notifications

---
 scripts/tauri.js     | 44 ++++++++++++++++++++++++++++++++++++++++++--
 src-tauri/Cargo.toml |  1 +
 2 files changed, 43 insertions(+), 2 deletions(-)

diff --git a/scripts/tauri.js b/scripts/tauri.js
index 6df709d316..91c6a31bc5 100755
--- a/scripts/tauri.js
+++ b/scripts/tauri.js
@@ -117,6 +117,46 @@ function configureMacOSToolchain() {
     .join(delimiter);
 }
 
+function injectMacOSDevFeature(args) {
+  if (process.platform !== 'darwin' || args[0] !== 'dev') {
+    return args;
+  }
+
+  const feature = 'notifications-dev';
+  const separatorIndex = args.indexOf('--');
+  const featureArgsEnd = separatorIndex === -1 ? args.length : separatorIndex;
+  const appendFeature = (value) =>
+    value.split(',').includes(feature) ? value : value ? `${value},${feature}` : feature;
+
+  for (let index = 0; index < featureArgsEnd; index += 1) {
+    if (args[index] === '--features' && index + 1 < featureArgsEnd) {
+      const featureValue = args[index + 1];
+      if (featureValue.split(',').includes(feature)) {
+        return args;
+      }
+      return [...args.slice(0, index + 1), appendFeature(featureValue), ...args.slice(index + 2)];
+    }
+    if (args[index].startsWith('--features=')) {
+      const featureValue = args[index].slice('--features='.length);
+      if (featureValue.split(',').includes(feature)) {
+        return args;
+      }
+      return [
+        ...args.slice(0, index),
+        `--features=${appendFeature(featureValue)}`,
+        ...args.slice(index + 1),
+      ];
+    }
+  }
+
+  return [
+    ...args.slice(0, featureArgsEnd),
+    '--features',
+    feature,
+    ...args.slice(featureArgsEnd),
+  ];
+}
+
 async function runTauri(args) {
   logger.info(`${dim('Running:')} tauri ${args.join(' ')}`);
   try {
@@ -131,7 +171,7 @@ async function main() {
   configureMacOSToolchain();
 
   if (cmdlineArgs.length === 0 || !DESKTOP.has(cmdlineArgs[0])) {
-    return runTauri(cmdlineArgs);
+    return runTauri(injectMacOSDevFeature(cmdlineArgs));
   }
 
   const [platform, cmd, ...rawTauriArgs] = cmdlineArgs;
@@ -167,7 +207,7 @@ async function main() {
     args.splice(1, 0, '--no-bundle');
   }
 
-  return runTauri(args);
+  return runTauri(injectMacOSDevFeature(args));
 }
 
 main();
diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 2f7c179362..21baf921e6 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -141,6 +141,7 @@ custom-protocol = ["tauri/custom-protocol"]
 wry = ["tauri/wry", "dep:webkit2gtk"]
 # Tauri auto-updater. Disable with --no-default-features --features wry,cef.
 updater = ["dep:tauri-plugin-updater"]
+notifications-dev = ["tauri-plugin-notifications/notify-rust"]
 # CEF (Chromium) runtime. Build with --no-default-features --features cef.
 cef = ["dep:tauri-runtime-cef", "dep:cef"]
 # CrabNebula devtools. Off by default: its aggregator retains every metadata record for the

From ecac92d06ae871c0638b5c6a1aaae165fb58d70c Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 18:04:14 +0200
Subject: [PATCH 7/9] feat(call): add experimental native call toggle

---
 src/app/features/call/nativeCallProbe.test.ts | 24 ++++++++++++++-----
 src/app/features/call/nativeCallProbe.ts      | 13 ++++++----
 .../settings/experimental/Experimental.tsx    | 24 +++++++++++++++++++
 src/app/hooks/useCallEmbed.ts                 |  6 ++++-
 src/app/state/settings.defaults.test.ts       |  9 +++++++
 src/app/state/settings.ts                     |  2 ++
 6 files changed, 67 insertions(+), 11 deletions(-)

diff --git a/src/app/features/call/nativeCallProbe.test.ts b/src/app/features/call/nativeCallProbe.test.ts
index 30ed91e25b..394cd467d8 100644
--- a/src/app/features/call/nativeCallProbe.test.ts
+++ b/src/app/features/call/nativeCallProbe.test.ts
@@ -4,7 +4,11 @@ const platform = vi.hoisted(() => vi.fn<() => string | undefined>());
 
 vi.mock('$utils/platform', () => ({ getDesktopTauriPlatform: platform }));
 
-import { isNativeCallProbeEnabled, NATIVE_CALL_PROBE_STORAGE_KEY } from './nativeCallProbe';
+import {
+  isNativeCallProbeEnabled,
+  isNativeCallProbePlatformSupported,
+  NATIVE_CALL_PROBE_STORAGE_KEY,
+} from './nativeCallProbe';
 
 describe('native call probe gate', () => {
   beforeEach(() => {
@@ -16,11 +20,13 @@ describe('native call probe gate', () => {
     vi.unstubAllEnvs();
   });
 
-  it('is disabled by default and enabled only by the documented desktop key', () => {
+  it('is disabled by default and enabled by the persisted setting', () => {
     platform.mockReturnValue('linux');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'false');
     expect(isNativeCallProbeEnabled()).toBe(false);
 
+    expect(isNativeCallProbeEnabled(true)).toBe(true);
+
     localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
     expect(isNativeCallProbeEnabled()).toBe(true);
   });
@@ -32,18 +38,24 @@ describe('native call probe gate', () => {
     expect(isNativeCallProbeEnabled()).toBe(true);
   });
 
-  it('is disabled outside Linux desktop Tauri', () => {
+  it('is disabled outside supported desktop Tauri platforms', () => {
     platform.mockReturnValue('windows');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
     localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
     expect(isNativeCallProbeEnabled()).toBe(false);
   });
 
-  it('is disabled on macOS desktop Tauri', () => {
+  it('supports macOS desktop Tauri', () => {
     platform.mockReturnValue('macos');
+
+    expect(isNativeCallProbePlatformSupported()).toBe(true);
+    expect(isNativeCallProbeEnabled(true)).toBe(true);
+  });
+
+  it('keeps developer overrides ahead of the persisted setting', () => {
+    platform.mockReturnValue('linux');
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
-    localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
 
-    expect(isNativeCallProbeEnabled()).toBe(false);
+    expect(isNativeCallProbeEnabled()).toBe(true);
   });
 });
diff --git a/src/app/features/call/nativeCallProbe.ts b/src/app/features/call/nativeCallProbe.ts
index 00a6b1f31a..8eb7cca49a 100644
--- a/src/app/features/call/nativeCallProbe.ts
+++ b/src/app/features/call/nativeCallProbe.ts
@@ -4,14 +4,19 @@ import { getDesktopTauriPlatform } from '$utils/platform';
 // localStorage.setItem('sable.nativeCallProbe', '1').
 export const NATIVE_CALL_PROBE_STORAGE_KEY = 'sable.nativeCallProbe';
 
-export const isNativeCallProbeEnabled = (): boolean => {
-  if (typeof window === 'undefined' || getDesktopTauriPlatform() !== 'linux') return false;
+export const isNativeCallProbePlatformSupported = (): boolean => {
+  const platform = getDesktopTauriPlatform();
+  return platform === 'linux' || platform === 'macos';
+};
+
+export const isNativeCallProbeEnabled = (nativeCallsEnabled = false): boolean => {
+  if (typeof window === 'undefined' || !isNativeCallProbePlatformSupported()) return false;
 
   if (import.meta.env.VITE_ENABLE_NATIVE_CALL_PROBE === 'true') return true;
 
   try {
-    return window.localStorage.getItem(NATIVE_CALL_PROBE_STORAGE_KEY) === '1';
+    return nativeCallsEnabled || window.localStorage.getItem(NATIVE_CALL_PROBE_STORAGE_KEY) === '1';
   } catch {
-    return false;
+    return nativeCallsEnabled;
   }
 };
diff --git a/src/app/features/settings/experimental/Experimental.tsx b/src/app/features/settings/experimental/Experimental.tsx
index 5d38fb06b7..0c759b4969 100644
--- a/src/app/features/settings/experimental/Experimental.tsx
+++ b/src/app/features/settings/experimental/Experimental.tsx
@@ -5,6 +5,7 @@ import { InfoCard } from '$components/info-card';
 import { settingsAtom } from '$state/settings';
 import { useSetting } from '$state/hooks/settings';
 import { SettingToggle } from '$components/setting-tile';
+import { isNativeCallProbePlatformSupported } from '$features/call/nativeCallProbe';
 import { BandwidthSavingEmojis } from './BandwithSavingEmojis';
 import { MSC4268HistoryShare } from './MSC4268HistoryShare';
 import { MSC4274MediaGalleries } from './MSC4274MediaGalleries';
@@ -29,6 +30,28 @@ function PersonaToggle() {
   );
 }
 
+function NativeCallsToggle() {
+  const [nativeCallsEnabled, setNativeCallsEnabled] = useSetting(
+    settingsAtom,
+    'nativeCallsEnabled'
+  );
+
+  if (!isNativeCallProbePlatformSupported()) return null;
+
+  return (
+    <Box direction="Column" gap="100">
+      <Text size="L400">Native Calls</Text>
+      <SettingToggle
+        title="Try Native Calls"
+        focusId="native-calls"
+        description="Tries the experimental native desktop call transport instead of Element Call. Disable this to use the default Element Call experience."
+        value={nativeCallsEnabled}
+        onChange={setNativeCallsEnabled}
+      />
+    </Box>
+  );
+}
+
 type ExperimentalProps = {
   requestBack?: () => void;
   requestClose: () => void;
@@ -56,6 +79,7 @@ export function Experimental({ requestBack, requestClose }: Readonly<Experimenta
               <MSC4268HistoryShare />
               <BandwidthSavingEmojis />
               <PersonaToggle />
+              <NativeCallsToggle />
               <MSC4274MediaGalleries />
             </Box>
           </PageContent>
diff --git a/src/app/hooks/useCallEmbed.ts b/src/app/hooks/useCallEmbed.ts
index 360c34193a..55b92edea0 100644
--- a/src/app/hooks/useCallEmbed.ts
+++ b/src/app/hooks/useCallEmbed.ts
@@ -21,6 +21,8 @@ import { isNativeCallProbeEnabled } from '$features/call/nativeCallProbe';
 import { useAutoDiscoveryInfo } from './useAutoDiscoveryInfo';
 import { isDesktopTauri } from '$utils/platform';
 import { useStore } from 'jotai';
+import { settingsAtom } from '$state/settings';
+import { useSetting } from '$state/hooks/settings';
 
 const debugLog = createDebugLogger('useCallEmbed');
 
@@ -74,6 +76,7 @@ export const useCallStart = (dm = false) => {
   const setNativeCall = useSetAtom(nativeCallAtom);
   const callEmbedRef = useCallEmbedRef();
   const store = useStore();
+  const [nativeCallsEnabled] = useSetting(settingsAtom, 'nativeCallsEnabled');
   const discovery = useAutoDiscoveryInfo();
   const nativeCallController = useMemo(
     () =>
@@ -85,7 +88,7 @@ export const useCallStart = (dm = false) => {
 
   const startCall = useCallback(
     (room: Room, pref?: CallPreferences) => {
-      if (isDesktopTauri() && isNativeCallProbeEnabled()) {
+      if (isDesktopTauri() && isNativeCallProbeEnabled(nativeCallsEnabled)) {
         if (store.get(callEmbedAtom) || isNativeCallActive(store.get(nativeCallAtom))) return;
         const ongoing = mx.matrixRTC.getRoomSession(room).memberships.length > 0;
         void nativeCallController
@@ -149,6 +152,7 @@ export const useCallStart = (dm = false) => {
       store,
       discovery,
       nativeCallController,
+      nativeCallsEnabled,
     ]
   );
 
diff --git a/src/app/state/settings.defaults.test.ts b/src/app/state/settings.defaults.test.ts
index 2b798084d6..159d3f7a6f 100644
--- a/src/app/state/settings.defaults.test.ts
+++ b/src/app/state/settings.defaults.test.ts
@@ -12,6 +12,15 @@ beforeEach(() => {
 });
 
 describe('mergePersistedSettings', () => {
+  it('defaults native calls to Element Call and persists the opt-in', () => {
+    expect(defaultSettings.nativeCallsEnabled).toBe(false);
+
+    localStorage.setItem('settings', JSON.stringify({ nativeCallsEnabled: true }));
+    expect(mergePersistedSettings(localStorage.getItem('settings'), {}).nativeCallsEnabled).toBe(
+      true
+    );
+  });
+
   it('layers deployer defaults over code defaults when localStorage is empty', () => {
     const merged = mergePersistedSettings(null, { twitterEmoji: false });
     expect(merged.twitterEmoji).toBe(false);
diff --git a/src/app/state/settings.ts b/src/app/state/settings.ts
index 04b6097459..a007f9e247 100644
--- a/src/app/state/settings.ts
+++ b/src/app/state/settings.ts
@@ -180,6 +180,7 @@ export interface Settings {
   developerTools: boolean;
   enableMSC4268CMD: boolean;
   enableMediaGalleries: boolean;
+  nativeCallsEnabled: boolean;
   settingsSyncEnabled: boolean;
 
   // Cosmetics!
@@ -337,6 +338,7 @@ export const defaultSettings: Settings = {
 
   enableMSC4268CMD: false,
   enableMediaGalleries: false,
+  nativeCallsEnabled: false,
 
   // Push notifications (SW/Sygnal): default on for mobile, opt-in on desktop.
   // In-app pill banner: default on for mobile (primary foreground alert), opt-in on desktop.

From 0d0de2bfb00e14759e5063fcfeddba74454eaa20 Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Tue, 28 Jul 2026 18:14:26 +0200
Subject: [PATCH 8/9] feat(call): enable native calls on all targets

---
 src-tauri/Cargo.toml                          |  2 +-
 src/app/features/call/CallView.tsx            |  4 +--
 src/app/features/call/nativeCallProbe.test.ts | 33 +++++++++++++------
 src/app/features/call/nativeCallProbe.ts      |  7 ++--
 .../settings/experimental/Experimental.tsx    |  2 +-
 src/app/hooks/useCallEmbed.ts                 |  3 +-
 6 files changed, 30 insertions(+), 21 deletions(-)

diff --git a/src-tauri/Cargo.toml b/src-tauri/Cargo.toml
index 21baf921e6..b71a42e1f6 100644
--- a/src-tauri/Cargo.toml
+++ b/src-tauri/Cargo.toml
@@ -65,6 +65,7 @@ tauri-plugin-http = "2.5.9"
 tauri-plugin-store = "2.4.4"
 tauri-plugin-clipboard-manager = "2.3.2"
 tauri-plugin-dialog = "2"
+tauri-plugin-call-lifecycle = { path = "plugins/tauri-plugin-call-lifecycle" }
 
 # Debug-only in practice: only initialized under #[cfg(debug_assertions)] in
 # lib.rs, so the release build never calls into it.
@@ -103,7 +104,6 @@ tauri-plugin-window-state = "2.4.1"
 tauri-plugin-global-shortcut = "2"
 regex = "1"
 zip = { version = "=4.6.1", default-features = false, features = ["deflate-flate2-zlib-rs"] }
-tauri-plugin-call-lifecycle = { path = "plugins/tauri-plugin-call-lifecycle" }
 
 [target.'cfg(any(target_os = "linux", target_os = "dragonfly", target_os = "freebsd", target_os = "openbsd", target_os = "netbsd"))'.dependencies]
 gtk = "0.18"
diff --git a/src/app/features/call/CallView.tsx b/src/app/features/call/CallView.tsx
index 012e07078e..434948bcfa 100644
--- a/src/app/features/call/CallView.tsx
+++ b/src/app/features/call/CallView.tsx
@@ -14,7 +14,6 @@ import { PrescreenControls } from './PrescreenControls';
 import { callEmbedAtom, callEmbedStartErrorAtom } from '$state/callEmbed';
 import { canJoinCall } from './callStartCapabilities';
 import { nativeCallAtom } from '$state/nativeCall';
-import { isDesktopTauri } from '$utils/platform';
 
 function LivekitServerMissingMessage() {
   return (
@@ -201,8 +200,7 @@ export function CallView({ resizable }: CallViewProps) {
   const callJoined = useCallJoined(callEmbed);
   const nativeCall = useAtomValue(nativeCallAtom);
 
-  const nativeCallForRoom =
-    isDesktopTauri() && nativeCall?.roomId === room.roomId ? nativeCall : undefined;
+  const nativeCallForRoom = nativeCall?.roomId === room.roomId ? nativeCall : undefined;
   const currentJoined = !nativeCallForRoom && callEmbed?.roomId === room.roomId && callJoined;
 
   const [heightRatio, setHeightRatio] = useState(isMobile ? 0.3 : 0.72);
diff --git a/src/app/features/call/nativeCallProbe.test.ts b/src/app/features/call/nativeCallProbe.test.ts
index 394cd467d8..fc4a5e52a2 100644
--- a/src/app/features/call/nativeCallProbe.test.ts
+++ b/src/app/features/call/nativeCallProbe.test.ts
@@ -1,8 +1,12 @@
 import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
 
-const platform = vi.hoisted(() => vi.fn<() => string | undefined>());
+const desktopTauri = vi.hoisted(() => vi.fn<() => boolean>());
+const mobileTauri = vi.hoisted(() => vi.fn<() => boolean>());
 
-vi.mock('$utils/platform', () => ({ getDesktopTauriPlatform: platform }));
+vi.mock('$utils/platform', () => ({
+  isDesktopTauri: desktopTauri,
+  isMobileTauri: mobileTauri,
+}));
 
 import {
   isNativeCallProbeEnabled,
@@ -12,7 +16,10 @@ import {
 
 describe('native call probe gate', () => {
   beforeEach(() => {
-    platform.mockReset();
+    desktopTauri.mockReset();
+    mobileTauri.mockReset();
+    desktopTauri.mockReturnValue(false);
+    mobileTauri.mockReturnValue(false);
     localStorage.clear();
   });
 
@@ -21,7 +28,7 @@ describe('native call probe gate', () => {
   });
 
   it('is disabled by default and enabled by the persisted setting', () => {
-    platform.mockReturnValue('linux');
+    desktopTauri.mockReturnValue(true);
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'false');
     expect(isNativeCallProbeEnabled()).toBe(false);
 
@@ -32,28 +39,34 @@ describe('native call probe gate', () => {
   });
 
   it('is enabled by the environment flag on desktop Tauri', () => {
-    platform.mockReturnValue('linux');
+    desktopTauri.mockReturnValue(true);
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
 
     expect(isNativeCallProbeEnabled()).toBe(true);
   });
 
-  it('is disabled outside supported desktop Tauri platforms', () => {
-    platform.mockReturnValue('windows');
+  it('is disabled outside supported Tauri platforms, including web', () => {
+    desktopTauri.mockReturnValue(false);
+    mobileTauri.mockReturnValue(false);
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
     localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
     expect(isNativeCallProbeEnabled()).toBe(false);
   });
 
-  it('supports macOS desktop Tauri', () => {
-    platform.mockReturnValue('macos');
+  it('supports every native Tauri form factor', () => {
+    desktopTauri.mockReturnValue(true);
 
     expect(isNativeCallProbePlatformSupported()).toBe(true);
     expect(isNativeCallProbeEnabled(true)).toBe(true);
+
+    desktopTauri.mockReturnValue(false);
+    mobileTauri.mockReturnValue(true);
+    expect(isNativeCallProbePlatformSupported()).toBe(true);
+    expect(isNativeCallProbeEnabled(true)).toBe(true);
   });
 
   it('keeps developer overrides ahead of the persisted setting', () => {
-    platform.mockReturnValue('linux');
+    desktopTauri.mockReturnValue(true);
     vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'true');
 
     expect(isNativeCallProbeEnabled()).toBe(true);
diff --git a/src/app/features/call/nativeCallProbe.ts b/src/app/features/call/nativeCallProbe.ts
index 8eb7cca49a..45803cc3d4 100644
--- a/src/app/features/call/nativeCallProbe.ts
+++ b/src/app/features/call/nativeCallProbe.ts
@@ -1,12 +1,11 @@
-import { getDesktopTauriPlatform } from '$utils/platform';
+import { isDesktopTauri, isMobileTauri } from '$utils/platform';
 
-// Enable the desktop transport probe with VITE_ENABLE_NATIVE_CALL_PROBE=true or manually:
+// Enable the native transport probe with VITE_ENABLE_NATIVE_CALL_PROBE=true or manually:
 // localStorage.setItem('sable.nativeCallProbe', '1').
 export const NATIVE_CALL_PROBE_STORAGE_KEY = 'sable.nativeCallProbe';
 
 export const isNativeCallProbePlatformSupported = (): boolean => {
-  const platform = getDesktopTauriPlatform();
-  return platform === 'linux' || platform === 'macos';
+  return isDesktopTauri() || isMobileTauri();
 };
 
 export const isNativeCallProbeEnabled = (nativeCallsEnabled = false): boolean => {
diff --git a/src/app/features/settings/experimental/Experimental.tsx b/src/app/features/settings/experimental/Experimental.tsx
index 0c759b4969..910272fe4e 100644
--- a/src/app/features/settings/experimental/Experimental.tsx
+++ b/src/app/features/settings/experimental/Experimental.tsx
@@ -44,7 +44,7 @@ function NativeCallsToggle() {
       <SettingToggle
         title="Try Native Calls"
         focusId="native-calls"
-        description="Tries the experimental native desktop call transport instead of Element Call. Disable this to use the default Element Call experience."
+        description="Tries the experimental native call transport instead of Element Call. Disable this to use the default Element Call experience."
         value={nativeCallsEnabled}
         onChange={setNativeCallsEnabled}
       />
diff --git a/src/app/hooks/useCallEmbed.ts b/src/app/hooks/useCallEmbed.ts
index 55b92edea0..81da3b6dd0 100644
--- a/src/app/hooks/useCallEmbed.ts
+++ b/src/app/hooks/useCallEmbed.ts
@@ -19,7 +19,6 @@ import { isNativeCallActive, nativeCallAtom } from '$state/nativeCall';
 import { createNativeCallController } from '$features/call/nativeCallController';
 import { isNativeCallProbeEnabled } from '$features/call/nativeCallProbe';
 import { useAutoDiscoveryInfo } from './useAutoDiscoveryInfo';
-import { isDesktopTauri } from '$utils/platform';
 import { useStore } from 'jotai';
 import { settingsAtom } from '$state/settings';
 import { useSetting } from '$state/hooks/settings';
@@ -88,7 +87,7 @@ export const useCallStart = (dm = false) => {
 
   const startCall = useCallback(
     (room: Room, pref?: CallPreferences) => {
-      if (isDesktopTauri() && isNativeCallProbeEnabled(nativeCallsEnabled)) {
+      if (isNativeCallProbeEnabled(nativeCallsEnabled)) {
         if (store.get(callEmbedAtom) || isNativeCallActive(store.get(nativeCallAtom))) return;
         const ongoing = mx.matrixRTC.getRoomSession(room).memberships.length > 0;
         void nativeCallController

From 7d77f5120e1d3c10d6960a8f450ac0126c5d419c Mon Sep 17 00:00:00 2001
From: Erwan Leboucher <erwanleboucher@gmail.com>
Date: Wed, 29 Jul 2026 15:29:24 +0200
Subject: [PATCH 9/9] feat(call): add LiveKit JS media test lifecycle

---
 package.json                                  |    2 +
 pnpm-lock.yaml                                |  161 +++
 src-tauri/Cargo.lock                          |    4 +-
 .../tauri-plugin-call-lifecycle/Cargo.toml    |    1 +
 .../android/src/main/AndroidManifest.xml      |    7 +
 .../CallLifecycleForegroundService.kt         |  103 ++
 .../call_lifecycle/CallLifecyclePlugin.kt     |  566 +++++++-
 .../tauri-plugin-call-lifecycle/build.rs      |   11 +-
 .../dist-js/index.cjs                         |   31 +
 .../dist-js/index.d.ts                        |   70 +
 .../dist-js/index.js                          |   26 +-
 .../guest-js/index.ts                         |  148 ++-
 .../ios/Sources/CallLifecyclePlugin.swift     |  546 ++++++++
 .../commands/getPlatformCallCapabilities.toml |   13 +
 .../commands/getPlatformCallState.toml        |   13 +
 .../commands/set_media_enabled.toml           |   13 +
 .../commands/startPlatformCallLifecycle.toml  |   13 +
 .../commands/stopPlatformCallLifecycle.toml   |   13 +
 .../permissions/autogenerated/reference.md    |  135 ++
 .../permissions/default.toml                  |   11 +-
 .../permissions/schemas/schema.json           |   64 +-
 .../tauri-plugin-call-lifecycle/src/actor.rs  | 1140 ++++++++++++++++-
 .../src/commands.rs                           |   46 +
 .../tauri-plugin-call-lifecycle/src/error.rs  |   28 +
 .../tauri-plugin-call-lifecycle/src/lib.rs    |    7 +-
 .../tauri-plugin-call-lifecycle/src/mobile.rs |  152 ++-
 .../tauri-plugin-call-lifecycle/src/models.rs |  434 +++++++
 src/app/features/call/CallView.test.tsx       |  388 ++++++
 src/app/features/call/CallView.tsx            |  564 +++++++-
 .../features/call/LivekitJsMediaTest.test.tsx |  176 +++
 src/app/features/call/LivekitJsMediaTest.tsx  |  227 ++++
 .../features/call/callStartSelection.test.ts  |   19 +
 src/app/features/call/callStartSelection.ts   |   13 +
 .../features/call/livekitJsCallProbe.test.ts  |   20 +
 src/app/features/call/livekitJsCallProbe.ts   |    4 +
 .../features/call/livekitJsController.test.ts |  917 +++++++++++++
 src/app/features/call/livekitJsController.ts  |  738 +++++++++++
 .../call/livekitMatrixKeyProvider.test.ts     |  299 +++++
 .../features/call/livekitMatrixKeyProvider.ts |  199 +++
 .../features/call/matrixRtcCallLifecycle.ts   |  212 +++
 .../call/nativeCallController.test.ts         |  365 +++++-
 src/app/features/call/nativeCallController.ts |  286 +++--
 src/app/features/call/useCallSignaling.ts     |   38 +-
 .../features/call/useCallStartCapabilities.ts |   15 +-
 .../experimental/Experimental.test.tsx        |  164 +++
 .../settings/experimental/Experimental.tsx    |   36 +
 src/app/generated/tauri/commands.ts           |   30 +-
 src/app/generated/tauri/events.ts             |    2 +-
 src/app/generated/tauri/index.ts              |    2 +-
 src/app/generated/tauri/types.ts              |   36 +-
 src/app/hooks/useCallEmbed.ts                 |   95 +-
 src/app/plugins/call/callLifecycle.test.ts    |   21 +
 src/app/plugins/call/callLifecycle.ts         |   13 +
 .../call/platformCallLifecycle.test.ts        |   99 ++
 src/app/plugins/call/platformCallLifecycle.ts |   81 ++
 src/app/state/callEmbed.ts                    |    2 +
 src/app/state/callOwner.test.ts               |   28 +
 src/app/state/callOwner.ts                    |   40 +
 src/app/state/livekitJsCall.test.ts           |   75 ++
 src/app/state/livekitJsCall.ts                |   35 +
 src/app/state/settings.defaults.test.ts       |   32 +
 src/app/state/settings.ts                     |    4 +
 62 files changed, 8841 insertions(+), 192 deletions(-)
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecycleForegroundService.kt
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallCapabilities.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallState.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/set_media_enabled.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/startPlatformCallLifecycle.toml
 create mode 100644 src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/stopPlatformCallLifecycle.toml
 create mode 100644 src/app/features/call/CallView.test.tsx
 create mode 100644 src/app/features/call/LivekitJsMediaTest.test.tsx
 create mode 100644 src/app/features/call/LivekitJsMediaTest.tsx
 create mode 100644 src/app/features/call/callStartSelection.test.ts
 create mode 100644 src/app/features/call/callStartSelection.ts
 create mode 100644 src/app/features/call/livekitJsCallProbe.test.ts
 create mode 100644 src/app/features/call/livekitJsCallProbe.ts
 create mode 100644 src/app/features/call/livekitJsController.test.ts
 create mode 100644 src/app/features/call/livekitJsController.ts
 create mode 100644 src/app/features/call/livekitMatrixKeyProvider.test.ts
 create mode 100644 src/app/features/call/livekitMatrixKeyProvider.ts
 create mode 100644 src/app/features/call/matrixRtcCallLifecycle.ts
 create mode 100644 src/app/features/settings/experimental/Experimental.test.tsx
 create mode 100644 src/app/plugins/call/platformCallLifecycle.test.ts
 create mode 100644 src/app/plugins/call/platformCallLifecycle.ts
 create mode 100644 src/app/state/callOwner.test.ts
 create mode 100644 src/app/state/callOwner.ts
 create mode 100644 src/app/state/livekitJsCall.test.ts
 create mode 100644 src/app/state/livekitJsCall.ts

diff --git a/package.json b/package.json
index 198dd6b1ae..e0b4290724 100644
--- a/package.json
+++ b/package.json
@@ -46,6 +46,7 @@
     "@choochmeque/tauri-plugin-sharekit-api": "0.4.0-rc.5",
     "@fontsource-variable/nunito": "5.2.7",
     "@fontsource/space-mono": "5.2.9",
+    "@livekit/components-react": "2.9.23",
     "@lottiefiles/dotlottie-react": "^0.12.0",
     "@noble/hashes": "^2.2.0",
     "@phosphor-icons/react": "^2.1.10",
@@ -97,6 +98,7 @@
     "leaflet": "1.9.4",
     "linkify-react": "^4.3.3",
     "linkifyjs": "^4.3.3",
+    "livekit-client": "2.21.0",
     "marked": "^18.0.5",
     "matrix-js-sdk": "42.0.0",
     "matrix-widget-api": "^1.17.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2183f02c6c..199eb7f6ff 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -43,6 +43,9 @@ importers:
       '@fontsource/space-mono':
         specifier: 5.2.9
         version: 5.2.9
+      '@livekit/components-react':
+        specifier: 2.9.23
+        version: 2.9.23(livekit-client@2.21.0(@types/dom-mediacapture-record@1.0.22))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(tslib@2.8.1)
       '@lottiefiles/dotlottie-react':
         specifier: ^0.12.0
         version: 0.12.3(react@18.3.1)
@@ -196,6 +199,9 @@ importers:
       linkifyjs:
         specifier: ^4.3.3
         version: 4.3.3
+      livekit-client:
+        specifier: 2.21.0
+        version: 2.21.0(@types/dom-mediacapture-record@1.0.22)
       marked:
         specifier: ^18.0.5
         version: 18.0.5
@@ -955,6 +961,9 @@ packages:
     resolution: {integrity: sha512-ctxtJ/eA+t+6q2++vj5j7FYX3nRu311q1wfYH3xjlLOsczhlhxAg2FWNUXhpGvAw3BWo1xBcvOV6/YLc2r5FJw==}
     hasBin: true
 
+  '@bufbuild/protobuf@1.10.1':
+    resolution: {integrity: sha512-wJ8ReQbHxsAfXhrf9ixl0aYbZorRuOWpBNzm8pL8ftmSxQx/wnJD5Eg861NwJU/czy2VXFIebCeZnZrI9rktIQ==}
+
   '@choochmeque/tauri-plugin-notifications-api@0.5.0-rc.11':
     resolution: {integrity: sha512-TSuf8HQ4Ayp9IKKB5v2yTdgKMa/I0bqbcACj0IZ46CSpzn/HKner/BKG7rM8tGOarEcyBd/VXnDhK5cJA/YMtw==}
 
@@ -1404,6 +1413,15 @@ packages:
       '@noble/hashes':
         optional: true
 
+  '@floating-ui/core@1.8.0':
+    resolution: {integrity: sha512-0CIZ5itps/8x7BG8dEIhs53BvCUH2PCoogtakwRTut+Arm58sJooJ0AuZhLw2HJYIR5cMLNPBSS728sPho2khQ==}
+
+  '@floating-ui/dom@1.7.6':
+    resolution: {integrity: sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==}
+
+  '@floating-ui/utils@0.2.12':
+    resolution: {integrity: sha512-HpCo8tmWzLVad5s2d19EhAz5zqrrQ6s69qd6moPMQvkOuSwDT1YgRfWSVuc4ennqrgv3OHppiOGMQ7oC13yIww==}
+
   '@fontsource-variable/nunito@5.2.7':
     resolution: {integrity: sha512-2N8QhatkyKgSUbAGZO2FYLioxA32+RyI1EplVLawbpkGjUeui9Qg9VMrpkCaik1ydjFjfLV+kzQ0cGEsMrMenQ==}
 
@@ -1625,6 +1643,32 @@ packages:
   '@kwsites/file-exists@1.1.1':
     resolution: {integrity: sha512-m9/5YGR18lIwxSFDwfE3oA7bWuq9kdau6ugN4H2rJeyhFQZcG9AgSHkQtSD15a8WvTgfz9aikZMrKPHvbpqFiw==}
 
+  '@livekit/components-core@0.12.14':
+    resolution: {integrity: sha512-6OKP/1Ok2fCZewDLKd3SzaTb7KvfZl/6hjggI+TgUdhp0Y7HBg3+tHA7YmhZRc0BO8wIyVy4VgTPn7qkLHt2nQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      livekit-client: ^2.20.1
+      tslib: ^2.6.2
+
+  '@livekit/components-react@2.9.23':
+    resolution: {integrity: sha512-clO+0g/u3YBpuOvnAjUSAJBH/o7w+RpUAseswjiSML9rHrXlTUhwBNm8LPk+qN5GOU3A6lzsNnFYVpUHUBVOkg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@livekit/krisp-noise-filter': ^0.2.12 || ^0.3.0 || ^0.4.0
+      livekit-client: ^2.20.1
+      react: '>=18'
+      react-dom: '>=18'
+      tslib: ^2.6.2
+    peerDependenciesMeta:
+      '@livekit/krisp-noise-filter':
+        optional: true
+
+  '@livekit/mutex@1.1.1':
+    resolution: {integrity: sha512-EsshAucklmpuUAfkABPxJNhzj9v2sG7JuzFDL4ML1oJQSV14sqrpTYnsaOudMAw9yOaW53NU3QQTlUQoRs4czw==}
+
+  '@livekit/protocol@1.50.4':
+    resolution: {integrity: sha512-L1uggNQAqyY21smQY8AllyOYbcv9Me9TaxwuLytL1R8ck9nbYPmQLNwEDi3pOFGAMa5F8I2nUi2Jc59W5awxlA==}
+
   '@lottiefiles/dotlottie-react@0.12.3':
     resolution: {integrity: sha512-b0k0Lakj2hmhyIkwJSpKySh6xoelpgWRaijyrCb6fraOCnzuitKglVTtYs0VWf72rk+2aSmC/0IK8j8wruVfOw==}
     peerDependencies:
@@ -3104,6 +3148,9 @@ packages:
   '@types/dockerode@4.0.1':
     resolution: {integrity: sha512-cmUpB+dPN955PxBEuXE3f6lKO1hHiIGYJA46IVF3BJpNsZGvtBDcRnlrHYHtOH/B6vtDOyl2kZ2ShAu3mgc27Q==}
 
+  '@types/dom-mediacapture-record@1.0.22':
+    resolution: {integrity: sha512-mUMZLK3NvwRLcAAT9qmcK+9p7tpU2FHdDsntR3YI4+GY88XrgG4XiE7u1Q2LAN2/FZOz/tdMDC3GQCR4T8nFuw==}
+
   '@types/estree@0.0.39':
     resolution: {integrity: sha512-EYNwp3bU+98cpU4lAWYYL7Zz+2gryWH1qbdDTidVd6hkiR6weksdbMadyXKXNPEkQFhXM+hVO9ZygomHXp+AIw==}
 
@@ -4349,6 +4396,9 @@ packages:
     resolution: {integrity: sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==}
     hasBin: true
 
+  jose@6.2.4:
+    resolution: {integrity: sha512-N8acGzVsQy6M/fjFcxtysNc4Q379TcM5dM/qKkNtsHFji88yANnXTr7BLeP75iPnFwBfQzM/jg2BZ9+HZrHCZA==}
+
   jotai@2.20.1:
     resolution: {integrity: sha512-dnuKfU/GLi8B28RRMjQ3AfoN7kfzP8o41+AX2FmITZqEMY8PHnjABq+VkEooomLwYaGjda+pgy0yFSjaHX/ZPg==}
     engines: {node: '>=12.20.0'}
@@ -4519,6 +4569,11 @@ packages:
   linkifyjs@4.3.3:
     resolution: {integrity: sha512-P8aEP5U/D1/IlTY2OeYsErdwh9bGuLE30NcXtKEjgdHcahveQoQwM2yZNsioQHsWFz0P7KKudisbrzCgR0sDHg==}
 
+  livekit-client@2.21.0:
+    resolution: {integrity: sha512-RBUhPkV/sl1nzl8lokVlK5uATPwn0AlsudCBZXissw/kDl9yz8ac4pNJ43iPpMVoHOeBYH/BZ3vUC1adqa/zFQ==}
+    peerDependencies:
+      '@types/dom-mediacapture-record': ^1
+
   locate-path@6.0.0:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
@@ -4535,6 +4590,10 @@ packages:
   lodash@4.18.1:
     resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
 
+  loglevel@1.9.1:
+    resolution: {integrity: sha512-hP3I3kCrDIMuRwAwHltphhDM1r8i55H33GgqjXbrisuJhF4kRhW1dNuxsRklp4bXl8DSdLaNLuiL4A/LWRfxvg==}
+    engines: {node: '>= 0.6.0'}
+
   loglevel@1.9.2:
     resolution: {integrity: sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==}
     engines: {node: '>= 0.6.0'}
@@ -5064,6 +5123,9 @@ packages:
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
+  rxjs@7.8.2:
+    resolution: {integrity: sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==}
+
   safe-array-concat@1.1.4:
     resolution: {integrity: sha512-wtZlHyOje6OZTGqAoaDKxFkgRtkF9CnHAVnCHKfuj200wAgL+bSJhdsCD2l0Qx/2ekEXjPWcyKkfGb5CPboslg==}
     engines: {node: '>=0.4'}
@@ -5095,10 +5157,17 @@ packages:
   scroll-into-view-if-needed@3.1.0:
     resolution: {integrity: sha512-49oNpRjWRvnU8NyGVmUaYG4jtTkNonFZI86MmGRDqBphEK2EXT9gdEUoQPZhuBM8yWHxCWbobltqYO5M4XrUvQ==}
 
+  sdp-transform@2.15.0:
+    resolution: {integrity: sha512-KrOH82c/W+GYQ0LHqtr3caRpM3ITglq3ljGUIb8LTki7ByacJZ9z+piSGiwZDsRyhQbYBOBJgr2k6X4BZXi3Kw==}
+    hasBin: true
+
   sdp-transform@3.0.0:
     resolution: {integrity: sha512-gfYVRGxjHkGF2NPeUWHw5u6T/KGFtS5/drPms73gaSuMaVHKCY3lpLnGDfswVQO0kddeePoti09AwhYP4zA8dQ==}
     hasBin: true
 
+  sdp@3.2.2:
+    resolution: {integrity: sha512-xZocWwfyp4hkbN4hLWxMjmv2Q8aNa9MhmOZ7L9aCZPT+dZsgRr6wZRrSYE3HTdyk/2pZKPSgqI7ns7Een1xMSA==}
+
   semver@6.3.1:
     resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
     hasBin: true
@@ -5447,6 +5516,9 @@ packages:
     resolution: {integrity: sha512-phPGCwqr2+Qo0fwniCE8e4pKnGu/yFb5nD5Y8bf0EEeiI5GklnACYA9GFy/DrAeRrKHXvHn+1SUsOWgJp6RO+g==}
     engines: {node: '>= 0.4'}
 
+  typed-emitter@2.1.0:
+    resolution: {integrity: sha512-g/KzbYKbH5C2vPkaXGu8DJlHrGKHLsM25Zg9WuC9pMGfuvT+X25tZQWo5fK1BjBm8+UrVE9LDCvaY0CQk+fXDA==}
+
   typescript@5.9.3:
     resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
     engines: {node: '>=14.17'}
@@ -5525,6 +5597,12 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  usehooks-ts@3.1.1:
+    resolution: {integrity: sha512-I4diPp9Cq6ieSUH2wu+fDAVQO43xwtulo+fKEidHUwZPnYImbtkTjzIJYcDcJqxgmX31GVqNFURodvcgHcW0pA==}
+    engines: {node: '>=16.15.0'}
+    peerDependencies:
+      react: ^16.8.0  || ^17 || ^18 || ^19 || ^19.0.0-rc
+
   util-deprecate@1.0.2:
     resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
 
@@ -5735,6 +5813,10 @@ packages:
     resolution: {integrity: sha512-BMhLD/Sw+GbJC21C/UgyaZX41nPt8bUTg+jWyDeg7e7YN4xOM05YPSIXceACnXVtqyEw/LMClUQMtMZ+PGGpqQ==}
     engines: {node: '>=20'}
 
+  webrtc-adapter@9.0.6:
+    resolution: {integrity: sha512-CHbl2ZQbxx164IgWRgzJno4hWtM4tFbRam1QfI3Yxhs3w/DvqluVxVWeXs3oL5/fbGkSNLKo0Ty5MgUWceNhog==}
+    engines: {node: '>=6.0.0', npm: '>=3.10.0'}
+
   whatwg-mimetype@5.0.0:
     resolution: {integrity: sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==}
     engines: {node: '>=20'}
@@ -6654,6 +6736,8 @@ snapshots:
     dependencies:
       css-tree: 3.2.1
 
+  '@bufbuild/protobuf@1.10.1': {}
+
   '@choochmeque/tauri-plugin-notifications-api@0.5.0-rc.11':
     dependencies:
       '@tauri-apps/api': 2.11.1
@@ -6935,6 +7019,17 @@ snapshots:
     optionalDependencies:
       '@noble/hashes': 2.2.0
 
+  '@floating-ui/core@1.8.0':
+    dependencies:
+      '@floating-ui/utils': 0.2.12
+
+  '@floating-ui/dom@1.7.6':
+    dependencies:
+      '@floating-ui/core': 1.8.0
+      '@floating-ui/utils': 0.2.12
+
+  '@floating-ui/utils@0.2.12': {}
+
   '@fontsource-variable/nunito@5.2.7': {}
 
   '@fontsource/space-mono@5.2.9': {}
@@ -7116,6 +7211,32 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@livekit/components-core@0.12.14(livekit-client@2.21.0(@types/dom-mediacapture-record@1.0.22))(tslib@2.8.1)':
+    dependencies:
+      '@floating-ui/dom': 1.7.6
+      livekit-client: 2.21.0(@types/dom-mediacapture-record@1.0.22)
+      loglevel: 1.9.1
+      rxjs: 7.8.2
+      tslib: 2.8.1
+
+  '@livekit/components-react@2.9.23(livekit-client@2.21.0(@types/dom-mediacapture-record@1.0.22))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(tslib@2.8.1)':
+    dependencies:
+      '@livekit/components-core': 0.12.14(livekit-client@2.21.0(@types/dom-mediacapture-record@1.0.22))(tslib@2.8.1)
+      clsx: 2.1.1
+      events: 3.3.0
+      jose: 6.2.4
+      livekit-client: 2.21.0(@types/dom-mediacapture-record@1.0.22)
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      tslib: 2.8.1
+      usehooks-ts: 3.1.1(react@18.3.1)
+
+  '@livekit/mutex@1.1.1': {}
+
+  '@livekit/protocol@1.50.4':
+    dependencies:
+      '@bufbuild/protobuf': 1.10.1
+
   '@lottiefiles/dotlottie-react@0.12.3(react@18.3.1)':
     dependencies:
       '@lottiefiles/dotlottie-web': 0.40.1
@@ -8171,6 +8292,8 @@ snapshots:
       '@types/node': 24.13.2
       '@types/ssh2': 1.15.5
 
+  '@types/dom-mediacapture-record@1.0.22': {}
+
   '@types/estree@0.0.39': {}
 
   '@types/estree@1.0.9': {}
@@ -9583,6 +9706,8 @@ snapshots:
 
   jiti@2.7.0: {}
 
+  jose@6.2.4: {}
+
   jotai@2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@18.3.31)(react@18.3.1):
     optionalDependencies:
       '@babel/core': 7.29.7
@@ -9728,6 +9853,19 @@ snapshots:
 
   linkifyjs@4.3.3: {}
 
+  livekit-client@2.21.0(@types/dom-mediacapture-record@1.0.22):
+    dependencies:
+      '@livekit/mutex': 1.1.1
+      '@livekit/protocol': 1.50.4
+      '@types/dom-mediacapture-record': 1.0.22
+      events: 3.3.0
+      jose: 6.2.4
+      loglevel: 1.9.2
+      sdp-transform: 2.15.0
+      tslib: 2.8.1
+      typed-emitter: 2.1.0
+      webrtc-adapter: 9.0.6
+
   locate-path@6.0.0:
     dependencies:
       p-locate: 5.0.0
@@ -9740,6 +9878,8 @@ snapshots:
 
   lodash@4.18.1: {}
 
+  loglevel@1.9.1: {}
+
   loglevel@1.9.2: {}
 
   long@5.3.2: {}
@@ -10395,6 +10535,10 @@ snapshots:
       '@rollup/rollup-win32-x64-msvc': 4.62.0
       fsevents: 2.3.3
 
+  rxjs@7.8.2:
+    dependencies:
+      tslib: 2.8.1
+
   safe-array-concat@1.1.4:
     dependencies:
       call-bind: 1.0.9
@@ -10432,8 +10576,12 @@ snapshots:
     dependencies:
       compute-scroll-into-view: 3.1.1
 
+  sdp-transform@2.15.0: {}
+
   sdp-transform@3.0.0: {}
 
+  sdp@3.2.2: {}
+
   semver@6.3.1: {}
 
   semver@7.8.4: {}
@@ -10914,6 +11062,10 @@ snapshots:
       possible-typed-array-names: 1.1.0
       reflect.getprototypeof: 1.0.10
 
+  typed-emitter@2.1.0:
+    optionalDependencies:
+      rxjs: 7.8.2
+
   typescript@5.9.3: {}
 
   ua-is-frozen@0.1.2: {}
@@ -10976,6 +11128,11 @@ snapshots:
     dependencies:
       react: 18.3.1
 
+  usehooks-ts@3.1.1(react@18.3.1):
+    dependencies:
+      lodash.debounce: 4.0.8
+      react: 18.3.1
+
   util-deprecate@1.0.2: {}
 
   uuid@10.0.0: {}
@@ -11129,6 +11286,10 @@ snapshots:
 
   webidl-conversions@8.0.1: {}
 
+  webrtc-adapter@9.0.6:
+    dependencies:
+      sdp: 3.2.2
+
   whatwg-mimetype@5.0.0: {}
 
   whatwg-url@16.0.1(@noble/hashes@2.2.0):
diff --git a/src-tauri/Cargo.lock b/src-tauri/Cargo.lock
index 8e71b120fe..76639d221c 100644
--- a/src-tauri/Cargo.lock
+++ b/src-tauri/Cargo.lock
@@ -1990,7 +1990,7 @@ version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ab8ecd87370524b461f8557c119c405552c396ed91fc0a8eec68679eab26f94a"
 dependencies = [
- "libloading 0.7.4",
+ "libloading 0.8.9",
 ]
 
 [[package]]
@@ -8454,7 +8454,7 @@ dependencies = [
  "serde_with",
  "swift-rs",
  "thiserror 2.0.19",
- "toml 0.9.12+spec-1.1.0",
+ "toml 1.1.3+spec-1.1.0",
  "url",
  "urlpattern",
  "uuid",
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
index c9a2e5836e..bcc1809395 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/Cargo.toml
@@ -20,6 +20,7 @@ tauri-plugin = { version = "2.6.3", features = ["build"] }
 
 [dev-dependencies]
 serde_json = "1.0"
+tauri = { version = "2.11.3", default-features = false, features = ["test"] }
 
 [target.'cfg(target_os = "linux")'.dependencies]
 ashpd = { version = "0.13", features = ["tokio", "screencast"] }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
index 20073832a4..442af058ed 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/AndroidManifest.xml
@@ -5,6 +5,9 @@
     <uses-permission android:name="android.permission.RECORD_AUDIO" />
     <uses-permission android:name="android.permission.MODIFY_AUDIO_SETTINGS" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MICROPHONE" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK" />
+    <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
     <uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION" />
 
     <application>
@@ -12,5 +15,9 @@
             android:name="io.livekit.android.room.track.screencapture.ScreenCaptureService"
             android:exported="false"
             android:foregroundServiceType="mediaProjection" />
+        <service
+            android:name="app.tauri.call_lifecycle.CallLifecycleForegroundService"
+            android:exported="false"
+            android:foregroundServiceType="microphone|mediaPlayback" />
     </application>
 </manifest>
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecycleForegroundService.kt b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecycleForegroundService.kt
new file mode 100644
index 0000000000..6fcee8c6ba
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecycleForegroundService.kt
@@ -0,0 +1,103 @@
+package app.tauri.call_lifecycle
+
+import android.app.Notification
+import android.app.NotificationChannel
+import android.app.NotificationManager
+import android.app.Service
+import android.content.Intent
+import android.content.pm.ServiceInfo
+import android.os.Build
+import android.os.IBinder
+import androidx.core.app.NotificationCompat
+
+/**
+ * Owns only the Android foreground-service notification for a JS-owned room.
+ * The WebView and LiveKit JS remain the owners of the room and its tracks.
+ */
+class CallLifecycleForegroundService : Service() {
+    /** Positive acknowledgement of foreground promotion for the owning plugin. */
+    interface StartListener {
+        fun onServiceStarted()
+        fun onServiceStartFailed()
+    }
+
+    override fun onCreate() {
+        super.onCreate()
+        createNotificationChannel()
+    }
+
+    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
+        val wantsMicrophone = intent?.getBooleanExtra(EXTRA_MICROPHONE, false) ?: false
+        val wantsPlayback = intent?.getBooleanExtra(EXTRA_PLAYBACK, false) ?: false
+        val started = try {
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
+                var types = 0
+                if (wantsMicrophone) types = types or ServiceInfo.FOREGROUND_SERVICE_TYPE_MICROPHONE
+                if (wantsPlayback) types = types or ServiceInfo.FOREGROUND_SERVICE_TYPE_MEDIA_PLAYBACK
+                if (types != 0) {
+                    startForeground(NOTIFICATION_ID, buildNotification(), types)
+                } else {
+                    startForeground(NOTIFICATION_ID, buildNotification())
+                }
+            } else {
+                startForeground(NOTIFICATION_ID, buildNotification())
+            }
+            true
+        } catch (_: SecurityException) {
+            false
+        } catch (_: IllegalArgumentException) {
+            false
+        } catch (_: IllegalStateException) {
+            false
+        }
+        if (started) {
+            activeStartListener?.onServiceStarted()
+        } else {
+            stopSelfResult(startId)
+            activeStartListener?.onServiceStartFailed()
+        }
+        return START_NOT_STICKY
+    }
+
+    override fun onBind(intent: Intent?): IBinder? = null
+
+    override fun onDestroy() {
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) {
+            stopForeground(STOP_FOREGROUND_REMOVE)
+        } else {
+            @Suppress("DEPRECATION")
+            stopForeground(true)
+        }
+        super.onDestroy()
+    }
+
+    private fun createNotificationChannel() {
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) return
+        val channel = NotificationChannel(
+            CHANNEL_ID,
+            "Call audio",
+            NotificationManager.IMPORTANCE_LOW,
+        )
+        getSystemService(NotificationManager::class.java).createNotificationChannel(channel)
+    }
+
+    private fun buildNotification(): Notification = NotificationCompat.Builder(this, CHANNEL_ID)
+        .setSmallIcon(android.R.drawable.ic_dialog_info)
+        .setContentTitle("Call in progress")
+        .setContentText("Microphone and call audio are active")
+        .setCategory(Notification.CATEGORY_CALL)
+        .setOngoing(true)
+        .setOnlyAlertOnce(true)
+        .build()
+
+    companion object {
+        const val EXTRA_MICROPHONE = "app.tauri.call_lifecycle.extra.MICROPHONE"
+        const val EXTRA_PLAYBACK = "app.tauri.call_lifecycle.extra.PLAYBACK"
+
+        @Volatile
+        var activeStartListener: StartListener? = null
+
+        private const val CHANNEL_ID = "call_lifecycle_audio"
+        private const val NOTIFICATION_ID = 1396
+    }
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
index b856efe4dd..1472aaef6b 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/android/src/main/java/app/tauri/call_lifecycle/CallLifecyclePlugin.kt
@@ -4,7 +4,14 @@ import android.app.Activity
 import android.content.Context
 import android.content.Intent
 import android.content.pm.PackageManager
+import android.media.AudioAttributes
+import android.media.AudioDeviceCallback
+import android.media.AudioDeviceInfo
+import android.media.AudioFocusRequest
 import android.media.AudioManager
+import android.os.Build
+import android.os.Handler
+import android.os.Looper
 import android.os.SystemClock
 import androidx.activity.result.ActivityResult
 import androidx.core.content.ContextCompat
@@ -49,6 +56,27 @@ internal class DisconnectArgs {
     var connectionId: String = ""
 }
 
+@InvokeArg
+internal class SetMediaEnabledArgs {
+    var operationId: String = ""
+    var connectionId: String = ""
+    var kind: String = ""
+    var enabled: Boolean = false
+}
+
+@InvokeArg
+internal class PlatformLifecycleStartArgs {
+    var sessionId: String = ""
+    var microphone: Boolean = false
+    var playback: Boolean = false
+    lateinit var channel: Channel
+}
+
+@InvokeArg
+internal class PlatformLifecycleStopArgs {
+    var sessionId: String = ""
+}
+
 private data class PendingConnect(
     val invoke: Invoke,
     val args: ConnectArgs,
@@ -56,6 +84,12 @@ private data class PendingConnect(
     var settled: Boolean = false,
 )
 
+private data class PendingMedia(
+    val invoke: Invoke,
+    val args: SetMediaEnabledArgs,
+    val generation: Long,
+)
+
 @TauriPlugin(
     permissions = [
         Permission(
@@ -80,10 +114,30 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
     private var activeEvents: Channel? = null
     private var pendingPermission: PendingConnect? = null
     private var pendingProjection: PendingConnect? = null
+    private var pendingMediaPermission: PendingMedia? = null
+    private var pendingMediaProjection: PendingMedia? = null
     private var projectionData: Intent? = null
     private var previousAudioMode: Int? = null
     private var previousSpeakerphoneState: Boolean? = null
     private val lastEventAt = mutableMapOf<String, Long>()
+    private val lastPlatformEventAt = mutableMapOf<String, Long>()
+    private var platformSessionId: String? = null
+    private var platformRevision = 0L
+    private var platformState = PLATFORM_IDLE
+    private var platformChannel: Channel? = null
+    private var platformFocus = PLATFORM_FOCUS_NONE
+    private var platformRoute = PLATFORM_ROUTE_UNKNOWN
+    private var platformMicrophone = false
+    private var platformPlayback = false
+    private var platformFocusRequest: AudioFocusRequest? = null
+    private var platformAudioManager: AudioManager? = null
+    private var platformAudioCallback: AudioDeviceCallback? = null
+    private var pendingPlatformStart: PendingPlatformStart? = null
+
+    private data class PendingPlatformStart(
+        val invoke: Invoke,
+        val args: PlatformLifecycleStartArgs,
+    )
 
     @Command
     fun connect(invoke: Invoke) {
@@ -97,7 +151,7 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
             invoke.resolve(result(args))
             return
         }
-        if (room != null || pendingPermission != null || pendingProjection != null) {
+        if (isNativeRoomModeActive() || isPlatformLifecycleActive()) {
             invoke.reject("call connection failed", "connect_failed")
             return
         }
@@ -120,6 +174,91 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
         requestProjectionOrConnect(pending)
     }
 
+    @Command
+    fun getPlatformLifecycleCapabilities(invoke: Invoke) {
+        invoke.resolve(
+            JSObject()
+                .put("platform", "android")
+                .put("microphone", true)
+                .put("audioPlayback", true)
+                .put("audioFocus", true)
+                .put("routeEvents", true)
+                .put("foregroundService", true)
+                .put("backgroundJavascript", false)
+                .put("camera", false)
+                .put("screenShare", false),
+        )
+    }
+
+    @Command
+    fun startPlatformLifecycle(invoke: Invoke) {
+        val args = runCatching { invoke.parseArgs(PlatformLifecycleStartArgs::class.java) }.getOrNull()
+        if (args == null || args.sessionId.isBlank() || !hasChannel(args)) {
+            invoke.reject("platform lifecycle start failed", "invalid_request")
+            return
+        }
+
+        if (isNativeRoomModeActive()) {
+            invoke.reject("platform lifecycle is busy", "busy")
+            return
+        }
+        if (platformSessionId != null && platformSessionId != args.sessionId) {
+            invoke.reject("platform lifecycle is busy", "busy")
+            return
+        }
+        if (platformSessionId == args.sessionId) {
+            invoke.resolve(platformLifecycleState())
+            return
+        }
+        if (!isActivityVisible()) {
+            invoke.reject("platform lifecycle requires a visible activity", "not_visible")
+            return
+        }
+
+        platformSessionId = args.sessionId
+        platformChannel = args.channel
+        platformMicrophone = args.microphone
+        platformPlayback = args.playback
+        platformState = PLATFORM_STARTING
+        bumpPlatformRevision()
+
+        if (args.microphone && !hasPermission(android.Manifest.permission.RECORD_AUDIO)) {
+            val pending = PendingPlatformStart(invoke, args)
+            pendingPlatformStart = pending
+            try {
+                requestPermissionForAliases(arrayOf("microphone"), invoke, "permissionResult")
+            } catch (_: Exception) {
+                pendingPlatformStart = null
+                failPlatformStart(pending, "permission_denied")
+            }
+            return
+        }
+        beginPlatformLifecycle(invoke, args)
+    }
+
+    @Command
+    fun stopPlatformLifecycle(invoke: Invoke) {
+        val args = runCatching { invoke.parseArgs(PlatformLifecycleStopArgs::class.java) }.getOrNull()
+        if (args == null || args.sessionId.isBlank()) {
+            invoke.reject("platform lifecycle stop failed", "invalid_request")
+            return
+        }
+        if (platformSessionId != args.sessionId) {
+            // A stale stop must never tear down a replacement session.
+            invoke.resolve(platformLifecycleState())
+            return
+        }
+
+        pendingPlatformStart = null
+        releasePlatformLifecycle()
+        invoke.resolve(platformLifecycleState())
+    }
+
+    @Command
+    fun getPlatformLifecycleState(invoke: Invoke) {
+        invoke.resolve(platformLifecycleState())
+    }
+
     @Command
     fun disconnect(invoke: Invoke) {
         val args = runCatching { invoke.parseArgs(DisconnectArgs::class.java) }.getOrNull()
@@ -161,8 +300,118 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
         }
     }
 
+    @Command
+    fun setMediaEnabled(invoke: Invoke) {
+        val args = runCatching { invoke.parseArgs(SetMediaEnabledArgs::class.java) }.getOrNull()
+        val code = mediaCode(args?.kind)
+        if (args == null || args.operationId.isBlank() || args.connectionId.isBlank() || code == null) {
+            invoke.reject(errorMessage(code ?: "connect_failed"), code ?: "connect_failed")
+            return
+        }
+        if (activeOperationId != args.operationId || activeConnectionId != args.connectionId || room == null) {
+            invoke.reject(errorMessage(code), code)
+            return
+        }
+
+        val currentGeneration = generation
+        if (!args.enabled) {
+            applyMediaToggle(args, currentGeneration, null, invoke)
+            return
+        }
+
+        val missingAlias = when (args.kind) {
+            "microphone" -> if (hasPermission(android.Manifest.permission.RECORD_AUDIO)) null else "microphone"
+            "camera" -> if (hasPermission(android.Manifest.permission.CAMERA)) null else "camera"
+            else -> null
+        }
+        if (missingAlias != null) {
+            pendingMediaPermission = PendingMedia(invoke, args, currentGeneration)
+            requestPermissionForAliases(arrayOf(missingAlias), invoke, "permissionResult")
+            return
+        }
+        if (args.kind == "screen_share") {
+            pendingMediaProjection = PendingMedia(invoke, args, currentGeneration)
+            val manager = activity.getSystemService(Context.MEDIA_PROJECTION_SERVICE) as android.media.projection.MediaProjectionManager
+            startActivityForResult(invoke, manager.createScreenCaptureIntent(), "projectionResult")
+            return
+        }
+        applyMediaToggle(args, currentGeneration, null, invoke)
+    }
+
+    private fun applyMediaToggle(
+        args: SetMediaEnabledArgs,
+        expectedGeneration: Long,
+        projection: Intent?,
+        invoke: Invoke,
+    ) {
+        val code = mediaCode(args.kind) ?: "connect_failed"
+        scope.launch {
+            val current = room
+            if (current == null || expectedGeneration != generation) {
+                invoke.reject(errorMessage(code), code)
+                return@launch
+            }
+            val ok = try {
+                when (args.kind) {
+                    "microphone" -> current.localParticipant.setMicrophoneEnabled(args.enabled)
+                    "camera" -> current.localParticipant.setCameraEnabled(args.enabled)
+                    else -> {
+                        if (args.enabled) {
+                            val data = projection ?: throw NativeFailure("screen_share_failed")
+                            current.localParticipant.setScreenShareEnabled(true, ScreenCaptureParams(mediaProjectionPermissionResultData = data))
+                        } else {
+                            current.localParticipant.setScreenShareEnabled(false)
+                        }
+                    }
+                }
+            } catch (_: Exception) {
+                false
+            }
+            if (expectedGeneration != generation || room !== current) {
+                invoke.reject(errorMessage(code), code)
+                return@launch
+            }
+            if (ok == true) {
+                invoke.resolve(
+                    JSObject()
+                        .put("operationId", args.operationId)
+                        .put("connectionId", args.connectionId),
+                )
+            } else {
+                invoke.reject(errorMessage(code), code)
+            }
+        }
+    }
+
     @PermissionCallback
     private fun permissionResult(invoke: Invoke) {
+        run {
+            val pending = pendingPlatformStart ?: return@run
+            if (pending.invoke.id != invoke.id) return@run
+            pendingPlatformStart = null
+            if (hasPermission(android.Manifest.permission.RECORD_AUDIO)) {
+                beginPlatformLifecycle(pending.invoke, pending.args)
+            } else {
+                failPlatformStart(pending, "permission_denied")
+            }
+            return
+        }
+        run {
+            val pending = pendingMediaPermission ?: return@run
+            if (pending.invoke.id != invoke.id) return@run
+            pendingMediaPermission = null
+            val granted = when (pending.args.kind) {
+                "microphone" -> hasPermission(android.Manifest.permission.RECORD_AUDIO)
+                else -> hasPermission(android.Manifest.permission.CAMERA)
+            }
+            if (granted) {
+                applyMediaToggle(pending.args, pending.generation, null, pending.invoke)
+            } else {
+                val code = mediaCode(pending.args.kind) ?: "connect_failed"
+                pending.invoke.reject(errorMessage(code), code)
+            }
+            return
+        }
         val pending = pendingPermission ?: return
         if (pending.invoke.id != invoke.id) return
         pendingPermission = null
@@ -178,6 +427,17 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
 
     @ActivityCallback
     private fun projectionResult(invoke: Invoke, result: ActivityResult) {
+        run {
+            val pending = pendingMediaProjection ?: return@run
+            if (pending.invoke.id != invoke.id) return@run
+            pendingMediaProjection = null
+            if (result.resultCode != Activity.RESULT_OK || result.data == null) {
+                pending.invoke.reject(errorMessage("screen_share_failed"), "screen_share_failed")
+            } else {
+                applyMediaToggle(pending.args, pending.generation, result.data, pending.invoke)
+            }
+            return
+        }
         val pending = pendingProjection ?: return
         if (pending.invoke.id != invoke.id) return
         pendingProjection = null
@@ -190,6 +450,8 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
     }
 
     override fun onDestroy(activity: androidx.appcompat.app.AppCompatActivity) {
+        pendingPlatformStart = null
+        releasePlatformLifecycle()
         roomEvents?.cancel()
         connectionJob?.cancel()
         val closeGeneration = generation + 1
@@ -308,6 +570,278 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
         }
     }
 
+    private fun beginPlatformLifecycle(invoke: Invoke, args: PlatformLifecycleStartArgs) {
+        if (platformSessionId != args.sessionId || !isActivityVisible()) {
+            failPlatformStart(PendingPlatformStart(invoke, args), "not_visible")
+            return
+        }
+        val audioManager = activity.getSystemService(Context.AUDIO_SERVICE) as AudioManager
+        platformAudioManager = audioManager
+        try {
+            if (args.microphone) {
+                if (previousAudioMode == null) previousAudioMode = audioManager.mode
+                audioManager.mode = AudioManager.MODE_IN_COMMUNICATION
+                if (!requestPlatformAudioFocus(audioManager)) {
+                    failPlatformStart(PendingPlatformStart(invoke, args), "audio_focus_failed")
+                    return
+                }
+            }
+            // The platform lifecycle only reports active once the foreground
+            // service positively acknowledges its promotion.
+            registerServiceStartAck(PendingPlatformStart(invoke, args))
+            startPlatformService(args)
+        } catch (_: SecurityException) {
+            CallLifecycleForegroundService.activeStartListener = null
+            failPlatformStart(PendingPlatformStart(invoke, args), "service_start_failed")
+        } catch (_: IllegalStateException) {
+            CallLifecycleForegroundService.activeStartListener = null
+            failPlatformStart(PendingPlatformStart(invoke, args), "service_start_failed")
+        } catch (_: RuntimeException) {
+            CallLifecycleForegroundService.activeStartListener = null
+            failPlatformStart(PendingPlatformStart(invoke, args), "service_start_failed")
+        }
+    }
+
+    private fun registerServiceStartAck(pending: PendingPlatformStart) {
+        val mainHandler = Handler(Looper.getMainLooper())
+        val sessionId = pending.args.sessionId
+        CallLifecycleForegroundService.activeStartListener =
+            object : CallLifecycleForegroundService.StartListener {
+                override fun onServiceStarted() {
+                    mainHandler.post { completeServiceStart(pending, failed = false) }
+                }
+
+                override fun onServiceStartFailed() {
+                    mainHandler.post { completeServiceStart(pending, failed = true) }
+                }
+            }
+        mainHandler.postDelayed({ completeServiceStartTimeout(pending, sessionId) }, SERVICE_START_TIMEOUT_MS)
+    }
+
+    private fun completeServiceStart(pending: PendingPlatformStart, failed: Boolean) {
+        CallLifecycleForegroundService.activeStartListener = null
+        if (platformSessionId != pending.args.sessionId || platformState != PLATFORM_STARTING) return
+        if (failed) {
+            failPlatformStart(pending, "service_start_failed")
+            return
+        }
+        val audioManager = platformAudioManager ?: return
+        registerPlatformAudioRoutes(audioManager)
+        platformState = PLATFORM_ACTIVE
+        bumpPlatformRevision()
+        pending.invoke.resolve(platformLifecycleState())
+        if (pending.args.microphone) emitPlatformFocus(PLATFORM_FOCUS_GAINED)
+        emitPlatformRoute(platformRoute)
+    }
+
+    private fun completeServiceStartTimeout(pending: PendingPlatformStart, sessionId: String) {
+        if (platformSessionId != sessionId || platformState != PLATFORM_STARTING) return
+        CallLifecycleForegroundService.activeStartListener = null
+        failPlatformStart(pending, "service_start_failed")
+    }
+
+    private fun requestPlatformAudioFocus(audioManager: AudioManager): Boolean {
+        val attributes = AudioAttributes.Builder()
+            .setUsage(AudioAttributes.USAGE_VOICE_COMMUNICATION)
+            .setContentType(AudioAttributes.CONTENT_TYPE_SPEECH)
+            .build()
+        return if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            val request = AudioFocusRequest.Builder(AudioManager.AUDIOFOCUS_GAIN)
+                .setAudioAttributes(attributes)
+                .setOnAudioFocusChangeListener(platformFocusListener, Handler(Looper.getMainLooper()))
+                .setWillPauseWhenDucked(false)
+                .build()
+            platformFocusRequest = request
+            audioManager.requestAudioFocus(request) == AudioManager.AUDIOFOCUS_REQUEST_GRANTED
+        } else {
+            @Suppress("DEPRECATION")
+            audioManager.requestAudioFocus(
+                platformFocusListener,
+                AudioManager.STREAM_VOICE_CALL,
+                AudioManager.AUDIOFOCUS_GAIN,
+            ) == AudioManager.AUDIOFOCUS_REQUEST_GRANTED
+        }
+    }
+
+    private fun startPlatformService(args: PlatformLifecycleStartArgs) {
+        val intent = Intent(activity, CallLifecycleForegroundService::class.java)
+            .putExtra(CallLifecycleForegroundService.EXTRA_MICROPHONE, args.microphone)
+            .putExtra(CallLifecycleForegroundService.EXTRA_PLAYBACK, args.playback)
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+            ContextCompat.startForegroundService(activity, intent)
+        } else {
+            @Suppress("DEPRECATION")
+            activity.startService(intent)
+        }
+    }
+
+    private fun registerPlatformAudioRoutes(audioManager: AudioManager) {
+        platformRoute = currentPlatformRoute(audioManager)
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.M) return
+        val callback = object : AudioDeviceCallback() {
+            override fun onAudioDevicesAdded(addedDevices: Array<out AudioDeviceInfo>) {
+                handlePlatformRouteChanged()
+            }
+
+            override fun onAudioDevicesRemoved(removedDevices: Array<out AudioDeviceInfo>) {
+                handlePlatformRouteChanged()
+            }
+        }
+        platformAudioCallback = callback
+        audioManager.registerAudioDeviceCallback(callback, Handler(Looper.getMainLooper()))
+    }
+
+    private fun handlePlatformRouteChanged() {
+        val audioManager = platformAudioManager ?: return
+        val route = currentPlatformRoute(audioManager)
+        if (route != platformRoute) {
+            platformRoute = route
+            emitPlatformRoute(route)
+        }
+    }
+
+    private fun currentPlatformRoute(audioManager: AudioManager): String {
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
+            val types = audioManager.getDevices(AudioManager.GET_DEVICES_OUTPUTS).map { it.type }.toSet()
+            return when {
+                types.any { it == AudioDeviceInfo.TYPE_BLUETOOTH_A2DP || it == AudioDeviceInfo.TYPE_BLUETOOTH_SCO ||
+                    (Build.VERSION.SDK_INT >= Build.VERSION_CODES.S && it == AudioDeviceInfo.TYPE_BLE_HEADSET) } ->
+                    PLATFORM_ROUTE_BLUETOOTH
+                types.any { it == AudioDeviceInfo.TYPE_WIRED_HEADSET || it == AudioDeviceInfo.TYPE_WIRED_HEADPHONES } ->
+                    PLATFORM_ROUTE_WIRED
+                types.any { it == AudioDeviceInfo.TYPE_USB_DEVICE || it == AudioDeviceInfo.TYPE_USB_HEADSET } ->
+                    PLATFORM_ROUTE_USB
+                types.any { it == AudioDeviceInfo.TYPE_BUILTIN_EARPIECE } -> PLATFORM_ROUTE_EARPIECE
+                types.any { it == AudioDeviceInfo.TYPE_BUILTIN_SPEAKER } -> PLATFORM_ROUTE_SPEAKER
+                else -> PLATFORM_ROUTE_UNKNOWN
+            }
+        }
+        @Suppress("DEPRECATION")
+        return when {
+            audioManager.isBluetoothA2dpOn || audioManager.isBluetoothScoOn -> PLATFORM_ROUTE_BLUETOOTH
+            audioManager.isWiredHeadsetOn -> PLATFORM_ROUTE_WIRED
+            audioManager.isSpeakerphoneOn -> PLATFORM_ROUTE_SPEAKER
+            else -> PLATFORM_ROUTE_UNKNOWN
+        }
+    }
+
+    private fun emitPlatformFocus(focus: String) {
+        platformFocus = focus
+        emitPlatformEvent("focus", focus = focus)
+    }
+
+    private fun emitPlatformRoute(route: String) {
+        emitPlatformEvent("route", route = route)
+    }
+
+    private fun emitPlatformEvent(
+        event: String,
+        focus: String? = null,
+        route: String? = null,
+        code: String? = null,
+    ) {
+        val channel = platformChannel ?: return
+        val now = SystemClock.elapsedRealtime()
+        val previous = lastPlatformEventAt[event]
+        if (event != "failure" && previous != null && now - previous < PLATFORM_EVENT_INTERVAL_MS) return
+        lastPlatformEventAt[event] = now
+        bumpPlatformRevision()
+        val payload = JSObject()
+            .put("sessionId", platformSessionId)
+            .put("revision", platformRevision)
+            .put("event", event)
+        focus?.let { payload.put("focus", it) }
+        route?.let { payload.put("route", it) }
+        code?.let { payload.put("code", it) }
+        channel.send(payload)
+    }
+
+    private fun emitPlatformFailure(code: String) {
+        val safeCode = if (code in PLATFORM_FAILURE_CODES) code else "service_start_failed"
+        emitPlatformEvent("failure", code = safeCode)
+    }
+
+    private fun failPlatformStart(pending: PendingPlatformStart, code: String) {
+        emitPlatformFailure(code)
+        pending.invoke.reject("platform lifecycle start failed", if (code in PLATFORM_FAILURE_CODES) code else "service_start_failed")
+        releasePlatformLifecycle()
+    }
+
+    private fun releasePlatformLifecycle() {
+        CallLifecycleForegroundService.activeStartListener = null
+        platformAudioCallback?.let { callback ->
+            platformAudioManager?.let { manager ->
+                if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
+                    manager.unregisterAudioDeviceCallback(callback)
+                }
+            }
+        }
+        platformAudioCallback = null
+        platformAudioManager?.let { manager ->
+            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
+                platformFocusRequest?.let { manager.abandonAudioFocusRequest(it) }
+            } else {
+                @Suppress("DEPRECATION")
+                manager.abandonAudioFocus(platformFocusListener)
+            }
+        }
+        platformFocusRequest = null
+        platformAudioManager = null
+        activity.stopService(Intent(activity, CallLifecycleForegroundService::class.java))
+        restoreAudio()
+        val hadState = platformSessionId != null || platformState != PLATFORM_IDLE
+        platformSessionId = null
+        platformChannel = null
+        platformFocus = PLATFORM_FOCUS_NONE
+        platformRoute = PLATFORM_ROUTE_UNKNOWN
+        platformMicrophone = false
+        platformPlayback = false
+        lastPlatformEventAt.clear()
+        platformState = PLATFORM_IDLE
+        if (hadState) bumpPlatformRevision()
+    }
+
+    private fun platformLifecycleState(): JSObject = JSObject()
+        .put("sessionId", platformSessionId)
+        .put("revision", platformRevision)
+        .put("state", platformState)
+        .put("focus", platformFocus)
+        .put("route", platformRoute)
+        .put("microphone", platformMicrophone)
+        .put("playback", platformPlayback)
+        .put("backgroundJavascript", false)
+
+    private fun bumpPlatformRevision() {
+        platformRevision = if (platformRevision == Long.MAX_VALUE) 1L else platformRevision + 1L
+    }
+
+    private fun hasChannel(args: PlatformLifecycleStartArgs): Boolean =
+        runCatching { args.channel }.isSuccess
+
+    private fun isNativeRoomModeActive(): Boolean =
+        room != null || activeConnect != null || pendingPermission != null || pendingProjection != null
+
+    private fun isPlatformLifecycleActive(): Boolean = platformSessionId != null
+
+    private fun isActivityVisible(): Boolean =
+        !activity.isFinishing &&
+            (Build.VERSION.SDK_INT < Build.VERSION_CODES.JELLY_BEAN_MR1 || !activity.isDestroyed) &&
+            activity.window.decorView.isShown &&
+            activity.hasWindowFocus()
+
+    private val platformFocusListener = AudioManager.OnAudioFocusChangeListener { change ->
+        val update = {
+            when (change) {
+                AudioManager.AUDIOFOCUS_GAIN -> emitPlatformFocus(PLATFORM_FOCUS_GAINED)
+                AudioManager.AUDIOFOCUS_LOSS_TRANSIENT_CAN_DUCK -> emitPlatformFocus(PLATFORM_FOCUS_DUCKED)
+                AudioManager.AUDIOFOCUS_LOSS,
+                AudioManager.AUDIOFOCUS_LOSS_TRANSIENT -> emitPlatformFocus(PLATFORM_FOCUS_LOST)
+                else -> Unit
+            }
+        }
+        if (Looper.myLooper() == Looper.getMainLooper()) update() else activity.runOnUiThread(update)
+    }
+
     private suspend fun closeRoom(closeGeneration: Long, emitResult: Boolean = false): Boolean {
         if (closeGeneration != generation) return false
         val current = room ?: return false
@@ -414,6 +948,13 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
         previousSpeakerphoneState = null
     }
 
+    private fun mediaCode(kind: String?): String? = when (kind) {
+        "microphone" -> "audio_failed"
+        "camera" -> "camera_failed"
+        "screen_share" -> "screen_share_failed"
+        else -> null
+    }
+
     private fun errorMessage(code: String): String = when (code) {
         "audio_failed" -> "native audio failed"
         "camera_failed" -> "native camera failed"
@@ -433,6 +974,29 @@ class CallLifecyclePlugin(private val activity: Activity) : Plugin(activity) {
 
     companion object {
         private const val EVENT_INTERVAL_MS = 1_000L
+        private const val PLATFORM_EVENT_INTERVAL_MS = 1_000L
+        private const val SERVICE_START_TIMEOUT_MS = 1_500L
+        private const val PLATFORM_IDLE = "idle"
+        private const val PLATFORM_STARTING = "starting"
+        private const val PLATFORM_ACTIVE = "active"
+        private const val PLATFORM_FOCUS_NONE = "none"
+        private const val PLATFORM_FOCUS_GAINED = "gained"
+        private const val PLATFORM_FOCUS_LOST = "lost"
+        private const val PLATFORM_FOCUS_DUCKED = "ducked"
+        private const val PLATFORM_ROUTE_UNKNOWN = "unknown"
+        private const val PLATFORM_ROUTE_EARPIECE = "earpiece"
+        private const val PLATFORM_ROUTE_SPEAKER = "speaker"
+        private const val PLATFORM_ROUTE_WIRED = "wired"
+        private const val PLATFORM_ROUTE_BLUETOOTH = "bluetooth"
+        private const val PLATFORM_ROUTE_USB = "usb"
+        private val PLATFORM_FAILURE_CODES = setOf(
+            "invalid_request",
+            "busy",
+            "not_visible",
+            "permission_denied",
+            "audio_focus_failed",
+            "service_start_failed",
+        )
         private val ERROR_CODES = setOf(
             "connect_failed",
             "audio_failed",
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
index 2b5e2b3805..87571ee23d 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/build.rs
@@ -1,4 +1,13 @@
-const COMMANDS: &[&str] = &["connect", "disconnect", "get_state"];
+const COMMANDS: &[&str] = &[
+    "connect",
+    "disconnect",
+    "set_media_enabled",
+    "get_state",
+    "getPlatformCallCapabilities",
+    "startPlatformCallLifecycle",
+    "stopPlatformCallLifecycle",
+    "getPlatformCallState",
+];
 
 fn main() {
     tauri_plugin::Builder::new(COMMANDS)
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
index 6828d9846b..4a30fae749 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.cjs
@@ -1,17 +1,48 @@
 'use strict';
 
 var core = require('@tauri-apps/api/core');
+var event = require('@tauri-apps/api/event');
 
+const PLATFORM_CALL_EVENT = 'plugin:call-lifecycle://platform-event';
 async function connect(request) {
     return await core.invoke('plugin:call-lifecycle|connect', { payload: request });
 }
 async function disconnect(request) {
     return await core.invoke('plugin:call-lifecycle|disconnect', { payload: request });
 }
+async function setMediaEnabled(request) {
+    return await core.invoke('plugin:call-lifecycle|set_media_enabled', { payload: request });
+}
 async function getState() {
     return await core.invoke('plugin:call-lifecycle|get_state');
 }
+async function getPlatformCallCapabilities() {
+    return await core.invoke('plugin:call-lifecycle|getPlatformCallCapabilities');
+}
+async function startPlatformCallLifecycle(request) {
+    return await core.invoke('plugin:call-lifecycle|startPlatformCallLifecycle', {
+        payload: request,
+    });
+}
+async function stopPlatformCallLifecycle(request) {
+    return await core.invoke('plugin:call-lifecycle|stopPlatformCallLifecycle', {
+        payload: request,
+    });
+}
+async function getPlatformCallState() {
+    return await core.invoke('plugin:call-lifecycle|getPlatformCallState');
+}
+async function listenPlatformCallEvent(handler) {
+    return await event.listen(PLATFORM_CALL_EVENT, ({ payload }) => handler(payload));
+}
 
+exports.PLATFORM_CALL_EVENT = PLATFORM_CALL_EVENT;
 exports.connect = connect;
 exports.disconnect = disconnect;
+exports.getPlatformCallCapabilities = getPlatformCallCapabilities;
+exports.getPlatformCallState = getPlatformCallState;
 exports.getState = getState;
+exports.listenPlatformCallEvent = listenPlatformCallEvent;
+exports.setMediaEnabled = setMediaEnabled;
+exports.startPlatformCallLifecycle = startPlatformCallLifecycle;
+exports.stopPlatformCallLifecycle = stopPlatformCallLifecycle;
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
index 4bd6665845..28345b2d2c 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.d.ts
@@ -1,3 +1,4 @@
+import { type UnlistenFn } from '@tauri-apps/api/event';
 export interface ConnectRequest {
     connectionId: string;
     serverUrl: string;
@@ -10,10 +11,28 @@ export interface DisconnectRequest {
     connectionId: string;
 }
 export type ConnectionState = 'idle' | 'connecting' | 'connected' | 'reconnecting' | 'disconnecting';
+export type MediaKind = 'microphone' | 'camera' | 'screen_share';
+export interface SetMediaEnabledRequest {
+    connectionId: string;
+    kind: MediaKind;
+    enabled: boolean;
+}
+export interface MediaState {
+    microphone: boolean;
+    camera: boolean;
+    screenShare: boolean;
+}
+export interface MediaCapabilities {
+    microphone: boolean;
+    camera: boolean;
+    screenShare: boolean;
+}
 export interface CallState {
     revision: number;
     state: ConnectionState;
     connectionId: string | null;
+    media: MediaState;
+    capabilities: MediaCapabilities;
 }
 export interface CallLifecycleError {
     revision: number;
@@ -21,6 +40,57 @@ export interface CallLifecycleError {
     message: string;
     connectionId: string | null;
 }
+export type PlatformCallStateKind = 'idle' | 'starting' | 'active' | 'stopping';
+export type PlatformCallRoute = 'earpiece' | 'speaker' | 'wired' | 'bluetooth' | 'unknown';
+export type PlatformCallInterruption = 'began' | 'ended';
+export type PlatformCallFailureCode = 'unsupported' | 'permission_denied' | 'audio_unavailable' | 'start_failed' | 'stop_failed' | 'stale_session' | 'busy';
+export interface PlatformCallCapabilities {
+    supported: boolean;
+    microphone: boolean;
+    playback: boolean;
+}
+export interface StartPlatformCallLifecycleRequest {
+    sessionId: string;
+    microphone: boolean;
+    playback: boolean;
+}
+export interface StopPlatformCallLifecycleRequest {
+    sessionId: string;
+}
+export interface PlatformCallState {
+    revision: number;
+    state: PlatformCallStateKind;
+    sessionId: string | null;
+    microphone: boolean;
+    playback: boolean;
+    capabilities: PlatformCallCapabilities;
+}
+export type PlatformCallEventKind = {
+    type: 'focus_changed';
+    focused: boolean;
+} | {
+    type: 'route_changed';
+    route: PlatformCallRoute;
+} | {
+    type: 'interrupted';
+    state: PlatformCallInterruption;
+} | {
+    type: 'media_reset';
+} | {
+    type: 'failed';
+    code: PlatformCallFailureCode;
+};
+export type PlatformCallEvent = {
+    revision: number;
+    sessionId: string;
+} & PlatformCallEventKind;
+export declare const PLATFORM_CALL_EVENT = "plugin:call-lifecycle://platform-event";
 export declare function connect(request: ConnectRequest): Promise<CallState>;
 export declare function disconnect(request: DisconnectRequest): Promise<CallState>;
+export declare function setMediaEnabled(request: SetMediaEnabledRequest): Promise<CallState>;
 export declare function getState(): Promise<CallState>;
+export declare function getPlatformCallCapabilities(): Promise<PlatformCallCapabilities>;
+export declare function startPlatformCallLifecycle(request: StartPlatformCallLifecycleRequest): Promise<PlatformCallState>;
+export declare function stopPlatformCallLifecycle(request: StopPlatformCallLifecycleRequest): Promise<PlatformCallState>;
+export declare function getPlatformCallState(): Promise<PlatformCallState>;
+export declare function listenPlatformCallEvent(handler: (event: PlatformCallEvent) => void): Promise<UnlistenFn>;
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
index 109d467e1d..6036547121 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/dist-js/index.js
@@ -1,13 +1,37 @@
 import { invoke } from '@tauri-apps/api/core';
+import { listen } from '@tauri-apps/api/event';
 
+const PLATFORM_CALL_EVENT = 'plugin:call-lifecycle://platform-event';
 async function connect(request) {
     return await invoke('plugin:call-lifecycle|connect', { payload: request });
 }
 async function disconnect(request) {
     return await invoke('plugin:call-lifecycle|disconnect', { payload: request });
 }
+async function setMediaEnabled(request) {
+    return await invoke('plugin:call-lifecycle|set_media_enabled', { payload: request });
+}
 async function getState() {
     return await invoke('plugin:call-lifecycle|get_state');
 }
+async function getPlatformCallCapabilities() {
+    return await invoke('plugin:call-lifecycle|getPlatformCallCapabilities');
+}
+async function startPlatformCallLifecycle(request) {
+    return await invoke('plugin:call-lifecycle|startPlatformCallLifecycle', {
+        payload: request,
+    });
+}
+async function stopPlatformCallLifecycle(request) {
+    return await invoke('plugin:call-lifecycle|stopPlatformCallLifecycle', {
+        payload: request,
+    });
+}
+async function getPlatformCallState() {
+    return await invoke('plugin:call-lifecycle|getPlatformCallState');
+}
+async function listenPlatformCallEvent(handler) {
+    return await listen(PLATFORM_CALL_EVENT, ({ payload }) => handler(payload));
+}
 
-export { connect, disconnect, getState };
+export { PLATFORM_CALL_EVENT, connect, disconnect, getPlatformCallCapabilities, getPlatformCallState, getState, listenPlatformCallEvent, setMediaEnabled, startPlatformCallLifecycle, stopPlatformCallLifecycle };
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
index 85b5f879d7..b1c42787dd 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/guest-js/index.ts
@@ -1,16 +1,17 @@
-import { invoke } from '@tauri-apps/api/core'
+import { invoke } from '@tauri-apps/api/core';
+import { listen, type UnlistenFn } from '@tauri-apps/api/event';
 
 export interface ConnectRequest {
-  connectionId: string
-  serverUrl: string
-  participantToken: string
-  audio?: boolean
-  video?: boolean
-  screenShare?: boolean
+  connectionId: string;
+  serverUrl: string;
+  participantToken: string;
+  audio?: boolean;
+  video?: boolean;
+  screenShare?: boolean;
 }
 
 export interface DisconnectRequest {
-  connectionId: string
+  connectionId: string;
 }
 
 export type ConnectionState =
@@ -18,29 +19,138 @@ export type ConnectionState =
   | 'connecting'
   | 'connected'
   | 'reconnecting'
-  | 'disconnecting'
+  | 'disconnecting';
+
+export type MediaKind = 'microphone' | 'camera' | 'screen_share';
+
+export interface SetMediaEnabledRequest {
+  connectionId: string;
+  kind: MediaKind;
+  enabled: boolean;
+}
+
+export interface MediaState {
+  microphone: boolean;
+  camera: boolean;
+  screenShare: boolean;
+}
+
+export interface MediaCapabilities {
+  microphone: boolean;
+  camera: boolean;
+  screenShare: boolean;
+}
 
 export interface CallState {
-  revision: number
-  state: ConnectionState
-  connectionId: string | null
+  revision: number;
+  state: ConnectionState;
+  connectionId: string | null;
+  media: MediaState;
+  capabilities: MediaCapabilities;
 }
 
 export interface CallLifecycleError {
-  revision: number
-  code: string
-  message: string
-  connectionId: string | null
+  revision: number;
+  code: string;
+  message: string;
+  connectionId: string | null;
+}
+
+export type PlatformCallStateKind = 'idle' | 'starting' | 'active' | 'stopping';
+export type PlatformCallRoute = 'earpiece' | 'speaker' | 'wired' | 'bluetooth' | 'unknown';
+export type PlatformCallInterruption = 'began' | 'ended';
+export type PlatformCallFailureCode =
+  | 'unsupported'
+  | 'permission_denied'
+  | 'audio_unavailable'
+  | 'start_failed'
+  | 'stop_failed'
+  | 'stale_session'
+  | 'busy';
+
+export interface PlatformCallCapabilities {
+  supported: boolean;
+  microphone: boolean;
+  playback: boolean;
+}
+
+export interface StartPlatformCallLifecycleRequest {
+  sessionId: string;
+  microphone: boolean;
+  playback: boolean;
+}
+
+export interface StopPlatformCallLifecycleRequest {
+  sessionId: string;
+}
+
+export interface PlatformCallState {
+  revision: number;
+  state: PlatformCallStateKind;
+  sessionId: string | null;
+  microphone: boolean;
+  playback: boolean;
+  capabilities: PlatformCallCapabilities;
 }
 
+export type PlatformCallEventKind =
+  | { type: 'focus_changed'; focused: boolean }
+  | { type: 'route_changed'; route: PlatformCallRoute }
+  | { type: 'interrupted'; state: PlatformCallInterruption }
+  | { type: 'media_reset' }
+  | { type: 'failed'; code: PlatformCallFailureCode };
+
+export type PlatformCallEvent = {
+  revision: number;
+  sessionId: string;
+} & PlatformCallEventKind;
+
+export const PLATFORM_CALL_EVENT = 'plugin:call-lifecycle://platform-event';
+
 export async function connect(request: ConnectRequest): Promise<CallState> {
-  return await invoke<CallState>('plugin:call-lifecycle|connect', { payload: request })
+  return await invoke<CallState>('plugin:call-lifecycle|connect', { payload: request });
 }
 
 export async function disconnect(request: DisconnectRequest): Promise<CallState> {
-  return await invoke<CallState>('plugin:call-lifecycle|disconnect', { payload: request })
+  return await invoke<CallState>('plugin:call-lifecycle|disconnect', { payload: request });
+}
+
+export async function setMediaEnabled(request: SetMediaEnabledRequest): Promise<CallState> {
+  return await invoke<CallState>('plugin:call-lifecycle|set_media_enabled', { payload: request });
 }
 
 export async function getState(): Promise<CallState> {
-  return await invoke<CallState>('plugin:call-lifecycle|get_state')
+  return await invoke<CallState>('plugin:call-lifecycle|get_state');
+}
+
+export async function getPlatformCallCapabilities(): Promise<PlatformCallCapabilities> {
+  return await invoke<PlatformCallCapabilities>(
+    'plugin:call-lifecycle|getPlatformCallCapabilities'
+  );
+}
+
+export async function startPlatformCallLifecycle(
+  request: StartPlatformCallLifecycleRequest
+): Promise<PlatformCallState> {
+  return await invoke<PlatformCallState>('plugin:call-lifecycle|startPlatformCallLifecycle', {
+    payload: request,
+  });
+}
+
+export async function stopPlatformCallLifecycle(
+  request: StopPlatformCallLifecycleRequest
+): Promise<PlatformCallState> {
+  return await invoke<PlatformCallState>('plugin:call-lifecycle|stopPlatformCallLifecycle', {
+    payload: request,
+  });
+}
+
+export async function getPlatformCallState(): Promise<PlatformCallState> {
+  return await invoke<PlatformCallState>('plugin:call-lifecycle|getPlatformCallState');
+}
+
+export async function listenPlatformCallEvent(
+  handler: (event: PlatformCallEvent) => void
+): Promise<UnlistenFn> {
+  return await listen<PlatformCallEvent>(PLATFORM_CALL_EVENT, ({ payload }) => handler(payload));
 }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
index 56a5724377..1d23d6a8b3 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/ios/Sources/CallLifecyclePlugin.swift
@@ -18,11 +18,61 @@ private struct DisconnectArgs: Decodable {
   let connectionId: String
 }
 
+private enum MediaKind: String, Decodable {
+  case microphone
+  case camera
+  case screenShare = "screen_share"
+
+  var failureCode: FailureCode {
+    switch self {
+    case .microphone: return .audioFailed
+    case .camera: return .cameraFailed
+    case .screenShare: return .screenShareFailed
+    }
+  }
+}
+
+private struct SetMediaEnabledArgs: Decodable {
+  let operationId: String
+  let connectionId: String
+  let kind: MediaKind
+  let enabled: Bool
+}
+
+private struct PlatformStartArgs: Decodable {
+  let sessionId: String
+  let microphone: Bool
+  let playback: Bool
+  let channel: Channel
+}
+
+private struct PlatformStopArgs: Decodable {
+  let sessionId: String
+}
+
 private struct ConnectResponse: Encodable {
   let operationId: String
   let connectionId: String
 }
 
+private enum PlatformStateKind: String, Encodable {
+  case idle
+  case active
+}
+
+private struct PlatformStateResponse: Encodable {
+  let sessionId: String?
+  let revision: UInt64
+  let state: PlatformStateKind
+  let microphone: Bool
+  let playback: Bool
+}
+
+private struct PlatformCapabilitiesResponse: Encodable {
+  let microphone: Bool
+  let backgroundAudio: Bool
+}
+
 private enum EventKind: String, Encodable {
   case reconnecting
   case reconnected
@@ -39,6 +89,51 @@ private enum FailureCode: String, Encodable {
   case closeFailed = "close_failed"
 }
 
+private enum PlatformEventKind: String, Encodable {
+  case focus
+  case route
+  case interruption
+  case mediaServicesReset = "media_services_reset"
+  case failure
+}
+
+private enum PlatformFocus: String, Encodable {
+  case active
+  case lost
+  case regained
+}
+
+private enum PlatformInterruption: String, Encodable {
+  case began
+  case ended
+}
+
+private enum PlatformRoute: String, Encodable {
+  case speaker
+  case receiver
+  case bluetooth
+  case wired
+  case other
+  case none
+}
+
+private enum PlatformFailureCode: String, Encodable {
+  case busy
+  case permissionDenied = "permission_denied"
+  case audioSessionFailed = "audio_session_failed"
+  case stopFailed = "stop_failed"
+}
+
+private struct PlatformEvent: Encodable {
+  let sessionId: String
+  let revision: UInt64
+  let event: PlatformEventKind
+  let focus: PlatformFocus?
+  let route: PlatformRoute?
+  let interruption: PlatformInterruption?
+  let code: PlatformFailureCode?
+}
+
 private struct ControlEvent: Encodable {
   let operationId: String
   let connectionId: String
@@ -71,6 +166,22 @@ final class CallLifecyclePlugin: Plugin, RoomDelegate {
   private var eventChannel: Channel?
   private var generation: UInt64 = 0
   private var terminalGenerations = Set<UInt64>()
+  private var platformSessionId: String?
+  private var platformEventChannel: Channel?
+  private var platformMicrophone = false
+  private var platformPlayback = false
+  private var platformRevision: UInt64 = 0
+  private var platformObservers: [NSObjectProtocol] = []
+
+  deinit {
+    removePlatformObservers()
+    if platformSessionId != nil {
+      try? AVAudioSession.sharedInstance().setActive(
+        false,
+        options: .notifyOthersOnDeactivation
+      )
+    }
+  }
 
   @objc public func connect(_ invoke: Invoke) throws {
     let args = try invoke.parseArgs(ConnectArgs.self)
@@ -86,6 +197,48 @@ final class CallLifecyclePlugin: Plugin, RoomDelegate {
     }
   }
 
+  @objc public func setMediaEnabled(_ invoke: Invoke) throws {
+    let args = try invoke.parseArgs(SetMediaEnabledArgs.self)
+    Task { @MainActor [weak self] in
+      await self?.setMediaEnabled(args, invoke: invoke)
+    }
+  }
+
+  @objc public func capabilities(_ invoke: Invoke) throws {
+    invoke.resolve(
+      PlatformCapabilitiesResponse(
+        microphone: true,
+        backgroundAudio: true
+      )
+    )
+  }
+
+  @objc public func start(_ invoke: Invoke) throws {
+    guard let args = try? invoke.parseArgs(PlatformStartArgs.self) else {
+      invoke.reject("Platform audio session start failed.", code: PlatformFailureCode.audioSessionFailed.rawValue)
+      return
+    }
+    Task { @MainActor [weak self] in
+      await self?.start(args, invoke: invoke)
+    }
+  }
+
+  @objc public func stop(_ invoke: Invoke) throws {
+    guard let args = try? invoke.parseArgs(PlatformStopArgs.self) else {
+      invoke.reject("Platform audio session stop failed.", code: PlatformFailureCode.stopFailed.rawValue)
+      return
+    }
+    Task { @MainActor [weak self] in
+      await self?.stop(args, invoke: invoke)
+    }
+  }
+
+  @objc public func getState(_ invoke: Invoke) throws {
+    Task { @MainActor [weak self] in
+      self?.resolvePlatformState(invoke)
+    }
+  }
+
   @MainActor
   private func connect(_ args: ConnectArgs, invoke: Invoke) async {
     generation &+= 1
@@ -175,6 +328,112 @@ final class CallLifecyclePlugin: Plugin, RoomDelegate {
     invoke.resolve(ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
   }
 
+  @MainActor
+  private func start(_ args: PlatformStartArgs, invoke: Invoke) async {
+    if room != nil {
+      rejectPlatformStart(
+        sessionId: args.sessionId,
+        channel: args.channel,
+        code: .busy,
+        invoke: invoke
+      )
+      return
+    }
+
+    if platformSessionId == args.sessionId {
+      invoke.resolve(platformState())
+      return
+    }
+
+    if platformSessionId != nil {
+      rejectPlatformStart(
+        sessionId: args.sessionId,
+        channel: args.channel,
+        code: .busy,
+        invoke: invoke
+      )
+      return
+    }
+
+    do {
+      if args.microphone {
+        try await requestPlatformMicrophonePermission()
+      }
+      try configurePlatformAudioSession(microphone: args.microphone, playback: args.playback)
+    } catch SetupError.denied {
+      rejectPlatformStart(
+        sessionId: args.sessionId,
+        channel: args.channel,
+        code: .permissionDenied,
+        invoke: invoke
+      )
+      return
+    } catch {
+      try? AVAudioSession.sharedInstance().setActive(
+        false,
+        options: .notifyOthersOnDeactivation
+      )
+      rejectPlatformStart(
+        sessionId: args.sessionId,
+        channel: args.channel,
+        code: .audioSessionFailed,
+        invoke: invoke
+      )
+      return
+    }
+
+    platformSessionId = args.sessionId
+    platformEventChannel = args.channel
+    platformMicrophone = args.microphone
+    platformPlayback = args.playback
+    platformRevision &+= 1
+    installPlatformObservers()
+    emitPlatformEvent(.focus, focus: .active)
+    invoke.resolve(platformState())
+  }
+
+  @MainActor
+  private func stop(_ args: PlatformStopArgs, invoke: Invoke) async {
+    guard platformSessionId == args.sessionId,
+      let activeSessionId = platformSessionId,
+      let activeChannel = platformEventChannel
+    else {
+      // A stale stop is intentionally a no-op. In particular, it cannot
+      // deactivate a newer session that reused this plugin instance.
+      invoke.resolve(platformState())
+      return
+    }
+
+    removePlatformObservers()
+    platformSessionId = nil
+    platformEventChannel = nil
+    platformMicrophone = false
+    platformPlayback = false
+    platformRevision &+= 1
+
+    do {
+      try AVAudioSession.sharedInstance().setActive(
+        false,
+        options: .notifyOthersOnDeactivation
+      )
+      invoke.resolve(platformState())
+    } catch {
+      sendPlatformEvent(
+        .failure,
+        sessionId: activeSessionId,
+        channel: activeChannel,
+        revision: platformRevision,
+        code: .stopFailed
+      )
+      invoke.reject("Platform audio session stop failed.", code: PlatformFailureCode.stopFailed.rawValue)
+    }
+  }
+
+  @MainActor
+  private func resolvePlatformState(_ invoke: Invoke) {
+    invoke.resolve(platformState())
+  }
+
   @MainActor
   private func disconnect(_ args: DisconnectArgs, invoke: Invoke) async {
     guard let activeRoom = room,
@@ -205,6 +464,48 @@ final class CallLifecyclePlugin: Plugin, RoomDelegate {
     invoke.resolve(ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
   }
 
+  @MainActor
+  private func setMediaEnabled(_ args: SetMediaEnabledArgs, invoke: Invoke) async {
+    let code = args.kind.failureCode
+    guard let activeRoom = room,
+      operationId == args.operationId,
+      connectionId == args.connectionId
+    else {
+      invoke.reject("Native call media toggle failed.", code: code.rawValue)
+      return
+    }
+
+    // ReplayKit broadcast support is not implemented; screen share is
+    // explicitly unsupported on iOS.
+    guard args.kind != .screenShare else {
+      invoke.reject("Screen share is not supported on iOS.", code: code.rawValue)
+      return
+    }
+
+    do {
+      switch args.kind {
+      case .microphone:
+        if args.enabled {
+          try await requestMicrophoneAndConfigureAudio()
+        }
+        try await activeRoom.localParticipant.setMicrophone(enabled: args.enabled)
+      case .camera:
+        if args.enabled {
+          guard await requestCameraPermission() else { throw SetupError.denied }
+        }
+        try await activeRoom.localParticipant.setCamera(enabled: args.enabled)
+      case .screenShare:
+        throw SetupError.denied
+      }
+    } catch {
+      invoke.reject("Native call media toggle failed.", code: code.rawValue)
+      return
+    }
+
+    invoke.resolve(
+      ConnectResponse(operationId: args.operationId, connectionId: args.connectionId))
+  }
+
   @MainActor
   private func fail(
     _ failure: SetupFailure,
@@ -263,6 +564,251 @@ final class CallLifecyclePlugin: Plugin, RoomDelegate {
     try session.setActive(true)
   }
 
+  @MainActor
+  private func requestPlatformMicrophonePermission() async throws {
+    let session = AVAudioSession.sharedInstance()
+    if session.recordPermission == .undetermined {
+      let granted = await withCheckedContinuation { continuation in
+        session.requestRecordPermission { granted in
+          continuation.resume(returning: granted)
+        }
+      }
+      guard granted else { throw SetupError.denied }
+    } else {
+      guard session.recordPermission == .granted else { throw SetupError.denied }
+    }
+  }
+
+  @MainActor
+  private func configurePlatformAudioSession(microphone: Bool, playback: Bool) throws {
+    let session = AVAudioSession.sharedInstance()
+    if microphone {
+      // Recording requires playAndRecord, which also covers playback.
+      try session.setCategory(
+        .playAndRecord,
+        mode: .voiceChat,
+        options: [.allowBluetooth, .allowBluetoothA2DP, .defaultToSpeaker]
+      )
+    } else if playback {
+      try session.setCategory(.playback)
+    } else {
+      try session.setCategory(.ambient)
+    }
+    try session.setActive(true)
+  }
+
+  @MainActor
+  private func installPlatformObservers() {
+    let center = NotificationCenter.default
+    let session = AVAudioSession.sharedInstance()
+    platformObservers = [
+      center.addObserver(
+        forName: AVAudioSession.interruptionNotification,
+        object: session,
+        queue: .main
+      ) { [weak self] notification in
+        Task { @MainActor [weak self] in
+          self?.handlePlatformInterruption(notification)
+        }
+      },
+      center.addObserver(
+        forName: AVAudioSession.routeChangeNotification,
+        object: session,
+        queue: .main
+      ) { [weak self] _ in
+        Task { @MainActor [weak self] in
+          self?.handlePlatformRouteChange()
+        }
+      },
+      center.addObserver(
+        forName: AVAudioSession.mediaServicesWereResetNotification,
+        object: session,
+        queue: .main
+      ) { [weak self] _ in
+        Task { @MainActor [weak self] in
+          await self?.handlePlatformMediaServicesReset()
+        }
+      },
+    ]
+  }
+
+  private func removePlatformObservers() {
+    let center = NotificationCenter.default
+    platformObservers.forEach { center.removeObserver($0) }
+    platformObservers.removeAll()
+  }
+
+  @MainActor
+  private func handlePlatformInterruption(_ notification: Notification) {
+    guard platformSessionId != nil else { return }
+    let value = notification.userInfo?[AVAudioSessionInterruptionTypeKey] as? UInt,
+      let type = value.flatMap(AVAudioSession.InterruptionType.init(rawValue:))
+    else { return }
+
+    switch type {
+    case .began:
+      emitPlatformEvent(.focus, focus: .lost)
+      emitPlatformEvent(.interruption, interruption: .began)
+    case .ended:
+      let optionsValue = notification.userInfo?[AVAudioSessionInterruptionOptionKey] as? UInt ?? 0
+      let options = AVAudioSession.InterruptionOptions(rawValue: optionsValue)
+      if options.contains(.shouldResume) {
+        do {
+          try AVAudioSession.sharedInstance().setActive(true)
+          emitPlatformEvent(.interruption, interruption: .ended)
+          emitPlatformEvent(.focus, focus: .regained)
+        } catch {
+          failPlatformSession(.audioSessionFailed)
+        }
+      } else {
+        // No resume hint: keep the session inactive and report the bounded
+        // interruption/focus state so JS decides whether to restart.
+        emitPlatformEvent(.interruption, interruption: .ended)
+        emitPlatformEvent(.focus, focus: .lost)
+      }
+    @unknown default:
+      break
+    }
+  }
+
+  @MainActor
+  private func handlePlatformRouteChange() {
+    guard platformSessionId != nil else { return }
+    emitPlatformEvent(.route, route: currentPlatformRoute())
+  }
+
+  @MainActor
+  private func handlePlatformMediaServicesReset() async {
+    guard platformSessionId != nil else { return }
+    emitPlatformEvent(.mediaServicesReset)
+    do {
+      try configurePlatformAudioSession(
+        microphone: platformMicrophone,
+        playback: platformPlayback
+      )
+    } catch {
+      failPlatformSession(.audioSessionFailed)
+    }
+  }
+
+  @MainActor
+  private func failPlatformSession(_ code: PlatformFailureCode) {
+    guard let activeSessionId = platformSessionId,
+      let activeChannel = platformEventChannel
+    else { return }
+
+    platformRevision &+= 1
+    sendPlatformEvent(
+      .failure,
+      sessionId: activeSessionId,
+      channel: activeChannel,
+      revision: platformRevision,
+      code: code
+    )
+    removePlatformObservers()
+    platformSessionId = nil
+    platformEventChannel = nil
+    platformMicrophone = false
+    platformPlayback = false
+    try? AVAudioSession.sharedInstance().setActive(
+      false,
+      options: .notifyOthersOnDeactivation
+    )
+  }
+
+  @MainActor
+  private func rejectPlatformStart(
+    sessionId: String,
+    channel: Channel,
+    code: PlatformFailureCode,
+    invoke: Invoke
+  ) {
+    platformRevision &+= 1
+    sendPlatformEvent(
+      .failure,
+      sessionId: sessionId,
+      channel: channel,
+      revision: platformRevision,
+      code: code
+    )
+    invoke.reject("Platform audio session start failed.", code: code.rawValue)
+  }
+
+  @MainActor
+  private func platformState() -> PlatformStateResponse {
+    PlatformStateResponse(
+      sessionId: platformSessionId,
+      revision: platformRevision,
+      state: platformSessionId == nil ? .idle : .active,
+      microphone: platformSessionId == nil ? false : platformMicrophone,
+      playback: platformSessionId == nil ? false : platformPlayback
+    )
+  }
+
+  @MainActor
+  private func emitPlatformEvent(
+    _ event: PlatformEventKind,
+    focus: PlatformFocus? = nil,
+    route: PlatformRoute? = nil,
+    interruption: PlatformInterruption? = nil
+  ) {
+    guard let sessionId = platformSessionId,
+      let channel = platformEventChannel
+    else { return }
+    platformRevision &+= 1
+    sendPlatformEvent(
+      event,
+      sessionId: sessionId,
+      channel: channel,
+      revision: platformRevision,
+      focus: focus,
+      route: route,
+      interruption: interruption
+    )
+  }
+
+  private func sendPlatformEvent(
+    _ event: PlatformEventKind,
+    sessionId: String,
+    channel: Channel,
+    revision: UInt64,
+    focus: PlatformFocus? = nil,
+    route: PlatformRoute? = nil,
+    interruption: PlatformInterruption? = nil,
+    code: PlatformFailureCode? = nil
+  ) {
+    try? channel.send(
+      PlatformEvent(
+        sessionId: sessionId,
+        revision: revision,
+        event: event,
+        focus: focus,
+        route: route,
+        interruption: interruption,
+        code: code
+      )
+    )
+  }
+
+  @MainActor
+  private func currentPlatformRoute() -> PlatformRoute {
+    guard let output = AVAudioSession.sharedInstance().currentRoute.outputs.first else {
+      return .none
+    }
+    switch output.portType {
+    case .builtInSpeaker:
+      return .speaker
+    case .builtInReceiver:
+      return .receiver
+    case .bluetoothA2DP, .bluetoothHFP, .bluetoothLE:
+      return .bluetooth
+    case .headphones, .headsetMic, .lineOut:
+      return .wired
+    default:
+      return .other
+    }
+  }
+
   @MainActor
   private func requestCameraPermission() async -> Bool {
     switch AVCaptureDevice.authorizationStatus(for: .video) {
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallCapabilities.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallCapabilities.toml
new file mode 100644
index 0000000000..46d1aca39c
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallCapabilities.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-getPlatformCallCapabilities"
+description = "Enables the getPlatformCallCapabilities command without any pre-configured scope."
+commands.allow = ["getPlatformCallCapabilities"]
+
+[[permission]]
+identifier = "deny-getPlatformCallCapabilities"
+description = "Denies the getPlatformCallCapabilities command without any pre-configured scope."
+commands.deny = ["getPlatformCallCapabilities"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallState.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallState.toml
new file mode 100644
index 0000000000..93cd8437a9
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/getPlatformCallState.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-getPlatformCallState"
+description = "Enables the getPlatformCallState command without any pre-configured scope."
+commands.allow = ["getPlatformCallState"]
+
+[[permission]]
+identifier = "deny-getPlatformCallState"
+description = "Denies the getPlatformCallState command without any pre-configured scope."
+commands.deny = ["getPlatformCallState"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/set_media_enabled.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/set_media_enabled.toml
new file mode 100644
index 0000000000..98d0d76a66
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/set_media_enabled.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-set-media-enabled"
+description = "Enables the set_media_enabled command without any pre-configured scope."
+commands.allow = ["set_media_enabled"]
+
+[[permission]]
+identifier = "deny-set-media-enabled"
+description = "Denies the set_media_enabled command without any pre-configured scope."
+commands.deny = ["set_media_enabled"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/startPlatformCallLifecycle.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/startPlatformCallLifecycle.toml
new file mode 100644
index 0000000000..042ed7ab84
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/startPlatformCallLifecycle.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-startPlatformCallLifecycle"
+description = "Enables the startPlatformCallLifecycle command without any pre-configured scope."
+commands.allow = ["startPlatformCallLifecycle"]
+
+[[permission]]
+identifier = "deny-startPlatformCallLifecycle"
+description = "Denies the startPlatformCallLifecycle command without any pre-configured scope."
+commands.deny = ["startPlatformCallLifecycle"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/stopPlatformCallLifecycle.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/stopPlatformCallLifecycle.toml
new file mode 100644
index 0000000000..4e8b712d74
--- /dev/null
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/commands/stopPlatformCallLifecycle.toml
@@ -0,0 +1,13 @@
+# Automatically generated - DO NOT EDIT!
+
+"$schema" = "../../schemas/schema.json"
+
+[[permission]]
+identifier = "allow-stopPlatformCallLifecycle"
+description = "Enables the stopPlatformCallLifecycle command without any pre-configured scope."
+commands.allow = ["stopPlatformCallLifecycle"]
+
+[[permission]]
+identifier = "deny-stopPlatformCallLifecycle"
+description = "Denies the stopPlatformCallLifecycle command without any pre-configured scope."
+commands.deny = ["stopPlatformCallLifecycle"]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
index 1ea007202e..718d1c16d5 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/autogenerated/reference.md
@@ -6,7 +6,12 @@ Default permissions for the plugin
 
 - `allow-connect`
 - `allow-disconnect`
+- `allow-set-media-enabled`
 - `allow-get-state`
+- `allow-getPlatformCallCapabilities`
+- `allow-startPlatformCallLifecycle`
+- `allow-stopPlatformCallLifecycle`
+- `allow-getPlatformCallState`
 
 ## Permission Table
 
@@ -72,6 +77,58 @@ Denies the disconnect command without any pre-configured scope.
 <tr>
 <td>
 
+`call-lifecycle:allow-getPlatformCallCapabilities`
+
+</td>
+<td>
+
+Enables the getPlatformCallCapabilities command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-getPlatformCallCapabilities`
+
+</td>
+<td>
+
+Denies the getPlatformCallCapabilities command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-getPlatformCallState`
+
+</td>
+<td>
+
+Enables the getPlatformCallState command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-getPlatformCallState`
+
+</td>
+<td>
+
+Denies the getPlatformCallState command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
 `call-lifecycle:allow-get-state`
 
 </td>
@@ -92,6 +149,84 @@ Enables the get_state command without any pre-configured scope.
 
 Denies the get_state command without any pre-configured scope.
 
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-set-media-enabled`
+
+</td>
+<td>
+
+Enables the set_media_enabled command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-set-media-enabled`
+
+</td>
+<td>
+
+Denies the set_media_enabled command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-startPlatformCallLifecycle`
+
+</td>
+<td>
+
+Enables the startPlatformCallLifecycle command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-startPlatformCallLifecycle`
+
+</td>
+<td>
+
+Denies the startPlatformCallLifecycle command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:allow-stopPlatformCallLifecycle`
+
+</td>
+<td>
+
+Enables the stopPlatformCallLifecycle command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`call-lifecycle:deny-stopPlatformCallLifecycle`
+
+</td>
+<td>
+
+Denies the stopPlatformCallLifecycle command without any pre-configured scope.
+
 </td>
 </tr>
 </table>
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
index ada76b3651..5d9ad298f4 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/default.toml
@@ -1,3 +1,12 @@
 [default]
 description = "Default permissions for the plugin"
-permissions = ["allow-connect", "allow-disconnect", "allow-get-state"]
+permissions = [
+    "allow-connect",
+    "allow-disconnect",
+    "allow-set-media-enabled",
+    "allow-get-state",
+    "allow-getPlatformCallCapabilities",
+    "allow-startPlatformCallLifecycle",
+    "allow-stopPlatformCallLifecycle",
+    "allow-getPlatformCallState",
+]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
index 3561320b3a..27dcd64df9 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/permissions/schemas/schema.json
@@ -318,6 +318,30 @@
           "const": "deny-disconnect",
           "markdownDescription": "Denies the disconnect command without any pre-configured scope."
         },
+        {
+          "description": "Enables the getPlatformCallCapabilities command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-getPlatformCallCapabilities",
+          "markdownDescription": "Enables the getPlatformCallCapabilities command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the getPlatformCallCapabilities command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-getPlatformCallCapabilities",
+          "markdownDescription": "Denies the getPlatformCallCapabilities command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the getPlatformCallState command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-getPlatformCallState",
+          "markdownDescription": "Enables the getPlatformCallState command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the getPlatformCallState command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-getPlatformCallState",
+          "markdownDescription": "Denies the getPlatformCallState command without any pre-configured scope."
+        },
         {
           "description": "Enables the get_state command without any pre-configured scope.",
           "type": "string",
@@ -331,10 +355,46 @@
           "markdownDescription": "Denies the get_state command without any pre-configured scope."
         },
         {
-          "description": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-get-state`",
+          "description": "Enables the set_media_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-set-media-enabled",
+          "markdownDescription": "Enables the set_media_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the set_media_enabled command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-set-media-enabled",
+          "markdownDescription": "Denies the set_media_enabled command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the startPlatformCallLifecycle command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-startPlatformCallLifecycle",
+          "markdownDescription": "Enables the startPlatformCallLifecycle command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the startPlatformCallLifecycle command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-startPlatformCallLifecycle",
+          "markdownDescription": "Denies the startPlatformCallLifecycle command without any pre-configured scope."
+        },
+        {
+          "description": "Enables the stopPlatformCallLifecycle command without any pre-configured scope.",
+          "type": "string",
+          "const": "allow-stopPlatformCallLifecycle",
+          "markdownDescription": "Enables the stopPlatformCallLifecycle command without any pre-configured scope."
+        },
+        {
+          "description": "Denies the stopPlatformCallLifecycle command without any pre-configured scope.",
+          "type": "string",
+          "const": "deny-stopPlatformCallLifecycle",
+          "markdownDescription": "Denies the stopPlatformCallLifecycle command without any pre-configured scope."
+        },
+        {
+          "description": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-set-media-enabled`\n- `allow-get-state`\n- `allow-getPlatformCallCapabilities`\n- `allow-startPlatformCallLifecycle`\n- `allow-stopPlatformCallLifecycle`\n- `allow-getPlatformCallState`",
           "type": "string",
           "const": "default",
-          "markdownDescription": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-get-state`"
+          "markdownDescription": "Default permissions for the plugin\n#### This default permission set includes:\n\n- `allow-connect`\n- `allow-disconnect`\n- `allow-set-media-enabled`\n- `allow-get-state`\n- `allow-getPlatformCallCapabilities`\n- `allow-startPlatformCallLifecycle`\n- `allow-stopPlatformCallLifecycle`\n- `allow-getPlatformCallState`"
         }
       ]
     }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
index 3136c5eab0..2ceb9407c6 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/actor.rs
@@ -10,6 +10,7 @@ use tokio::sync::{mpsc, oneshot};
 #[cfg(mobile)]
 use crate::mobile::{
     MobileBackend, NativeConnectRequest, NativeControlEvent, NativeControlEventKind,
+    NativeStartPlatformCallLifecycleRequest, NativeStopPlatformCallLifecycleRequest,
 };
 
 #[cfg(test)]
@@ -21,6 +22,13 @@ use std::sync::{
 use crate::error::{Error, Result};
 use crate::models::{
     CallLifecycleError, CallState, ConnectRequest, ConnectionState, DisconnectRequest,
+    MediaCapabilities, MediaKind, MediaState, PlatformCallCapabilities, PlatformCallState,
+    PlatformCallStateKind, SetMediaEnabledRequest, StartPlatformCallLifecycleRequest,
+    StopPlatformCallLifecycleRequest,
+};
+#[cfg(mobile)]
+use crate::models::{
+    NativePlatformCallEvent, NativePlatformStartFields, PlatformCallEvent, PlatformCallEventKind,
 };
 
 #[cfg(target_os = "linux")]
@@ -66,6 +74,8 @@ enum ScreenShareFailureEvent {
 
 pub(crate) const STATE_EVENT: &str = "plugin:call-lifecycle://state";
 pub(crate) const ERROR_EVENT: &str = "plugin:call-lifecycle://error";
+#[cfg(mobile)]
+pub(crate) const PLATFORM_CALL_EVENT: &str = "plugin:call-lifecycle://platform-event";
 
 #[cfg(not(any(target_os = "android", target_os = "ios")))]
 type RoomEvents = mpsc::UnboundedReceiver<RoomEvent>;
@@ -117,7 +127,18 @@ impl OwnedRoom {
 pub(crate) enum Command {
     Connect(ConnectRequest, oneshot::Sender<Result<CallState>>),
     Disconnect(DisconnectRequest, oneshot::Sender<Result<CallState>>),
+    SetMediaEnabled(SetMediaEnabledRequest, oneshot::Sender<Result<CallState>>),
     GetState(oneshot::Sender<CallState>),
+    GetPlatformCallCapabilities(oneshot::Sender<Result<PlatformCallCapabilities>>),
+    StartPlatformCallLifecycle(
+        StartPlatformCallLifecycleRequest,
+        oneshot::Sender<Result<PlatformCallState>>,
+    ),
+    StopPlatformCallLifecycle(
+        StopPlatformCallLifecycleRequest,
+        oneshot::Sender<Result<PlatformCallState>>,
+    ),
+    GetPlatformCallState(oneshot::Sender<Result<PlatformCallState>>),
 }
 
 enum InternalMessage {
@@ -126,6 +147,8 @@ enum InternalMessage {
         operation_id: String,
         room: Option<ConnectedRoom>,
     },
+    #[cfg(mobile)]
+    PlatformCallEvent(NativePlatformCallEvent),
 }
 
 struct PendingConnection {
@@ -210,6 +233,15 @@ impl<R: Runtime> CallLifecycle<R> {
         result.await.map_err(|_| Error::ActorUnavailable)?
     }
 
+    pub async fn set_media_enabled(&self, request: SetMediaEnabledRequest) -> Result<CallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::SetMediaEnabled(request, response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
     pub async fn get_state(&self) -> Result<CallState> {
         let (response, result) = oneshot::channel();
         self.commands
@@ -218,6 +250,48 @@ impl<R: Runtime> CallLifecycle<R> {
             .map_err(|_| Error::ActorUnavailable)?;
         result.await.map_err(|_| Error::ActorUnavailable)
     }
+
+    pub async fn get_platform_call_capabilities(&self) -> Result<PlatformCallCapabilities> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::GetPlatformCallCapabilities(response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
+    pub async fn start_platform_call_lifecycle(
+        &self,
+        request: StartPlatformCallLifecycleRequest,
+    ) -> Result<PlatformCallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::StartPlatformCallLifecycle(request, response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
+    pub async fn stop_platform_call_lifecycle(
+        &self,
+        request: StopPlatformCallLifecycleRequest,
+    ) -> Result<PlatformCallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::StopPlatformCallLifecycle(request, response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
+
+    pub async fn get_platform_call_state(&self) -> Result<PlatformCallState> {
+        let (response, result) = oneshot::channel();
+        self.commands
+            .send(Command::GetPlatformCallState(response))
+            .await
+            .map_err(|_| Error::ActorUnavailable)?;
+        result.await.map_err(|_| Error::ActorUnavailable)?
+    }
 }
 
 #[derive(Debug, Clone, Copy, PartialEq, Eq)]
@@ -245,11 +319,20 @@ fn event_matches_generation(
     active_operation_id == event_operation_id && active_connection_id == event_connection_id
 }
 
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum MediaToggleDecision {
+    Apply,
+    Idempotent,
+    Stale,
+    Unsupported,
+}
+
 #[derive(Debug, Clone)]
 struct StateMachine {
     state: ConnectionState,
     revision: u64,
     connection_id: Option<String>,
+    media: MediaState,
 }
 
 impl Default for StateMachine {
@@ -258,6 +341,7 @@ impl Default for StateMachine {
             state: ConnectionState::Idle,
             revision: 0,
             connection_id: None,
+            media: MediaState::default(),
         }
     }
 }
@@ -268,6 +352,8 @@ impl StateMachine {
             revision: self.revision,
             state: self.state,
             connection_id: self.connection_id.clone(),
+            media: self.media,
+            capabilities: MediaCapabilities::current(),
         }
     }
 
@@ -300,6 +386,165 @@ impl StateMachine {
         self.revision += 1;
         self.state = state;
         self.connection_id = connection_id;
+        if !matches!(
+            state,
+            ConnectionState::Connected | ConnectionState::Reconnecting
+        ) {
+            self.media = MediaState::default();
+        }
+    }
+
+    fn confirm_media(&mut self, kind: MediaKind, enabled: bool) {
+        self.revision += 1;
+        self.media.set(kind, enabled);
+    }
+
+    fn media_decision(&self, request: &SetMediaEnabledRequest) -> MediaToggleDecision {
+        if self.connection_id.as_deref() != Some(request.connection_id.as_str()) {
+            return MediaToggleDecision::Stale;
+        }
+        if !matches!(
+            self.state,
+            ConnectionState::Connected | ConnectionState::Reconnecting
+        ) {
+            return MediaToggleDecision::Stale;
+        }
+        if !MediaCapabilities::current().supports(request.kind) {
+            return MediaToggleDecision::Unsupported;
+        }
+        if self.media.enabled(request.kind) == request.enabled {
+            return MediaToggleDecision::Idempotent;
+        }
+        MediaToggleDecision::Apply
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum PlatformStartDecision {
+    Start,
+    Idempotent,
+    Busy,
+    Unsupported,
+    InvalidSession,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum PlatformStopDecision {
+    Stop,
+    Idempotent,
+    Stale,
+    Unsupported,
+    InvalidSession,
+}
+
+#[derive(Debug, Clone)]
+struct PlatformStateMachine {
+    revision: u64,
+    state: PlatformCallStateKind,
+    session_id: Option<String>,
+    microphone: bool,
+    playback: bool,
+    capabilities: PlatformCallCapabilities,
+    last_session_id: Option<String>,
+}
+
+impl Default for PlatformStateMachine {
+    fn default() -> Self {
+        Self {
+            revision: 0,
+            state: PlatformCallStateKind::Idle,
+            session_id: None,
+            microphone: false,
+            playback: false,
+            capabilities: PlatformCallCapabilities::current(),
+            last_session_id: None,
+        }
+    }
+}
+
+impl PlatformStateMachine {
+    fn snapshot(&self) -> PlatformCallState {
+        PlatformCallState {
+            revision: self.revision,
+            state: self.state,
+            session_id: self.session_id.clone(),
+            microphone: self.microphone,
+            playback: self.playback,
+            capabilities: self.capabilities,
+        }
+    }
+
+    fn start_decision(&self, request: &StartPlatformCallLifecycleRequest) -> PlatformStartDecision {
+        if !self.capabilities.supported {
+            return PlatformStartDecision::Unsupported;
+        }
+        if request.session_id.is_empty() {
+            return PlatformStartDecision::InvalidSession;
+        }
+        if (request.microphone && !self.capabilities.microphone)
+            || (request.playback && !self.capabilities.playback)
+        {
+            return PlatformStartDecision::Unsupported;
+        }
+        match self.session_id.as_deref() {
+            None => PlatformStartDecision::Start,
+            Some(session_id)
+                if session_id == request.session_id
+                    && self.microphone == request.microphone
+                    && self.playback == request.playback =>
+            {
+                PlatformStartDecision::Idempotent
+            }
+            Some(_) => PlatformStartDecision::Busy,
+        }
+    }
+
+    fn stop_decision(&self, session_id: &str) -> PlatformStopDecision {
+        if !self.capabilities.supported {
+            return PlatformStopDecision::Unsupported;
+        }
+        if session_id.is_empty() {
+            return PlatformStopDecision::InvalidSession;
+        }
+        match self.session_id.as_deref() {
+            Some(current) if current == session_id => PlatformStopDecision::Stop,
+            Some(_) => PlatformStopDecision::Stale,
+            None if self.last_session_id.as_deref() == Some(session_id) => {
+                PlatformStopDecision::Idempotent
+            }
+            None => PlatformStopDecision::Stale,
+        }
+    }
+
+    fn activate(&mut self, request: &StartPlatformCallLifecycleRequest) {
+        self.revision += 1;
+        self.state = PlatformCallStateKind::Active;
+        self.session_id = Some(request.session_id.clone());
+        self.last_session_id = Some(request.session_id.clone());
+        self.microphone = request.microphone;
+        self.playback = request.playback;
+    }
+
+    fn stop(&mut self) {
+        self.revision += 1;
+        self.state = PlatformCallStateKind::Idle;
+        self.session_id = None;
+        self.microphone = false;
+        self.playback = false;
+    }
+
+    #[cfg(mobile)]
+    fn next_event_revision(&mut self) -> u64 {
+        self.revision += 1;
+        self.revision
+    }
+
+    #[cfg(mobile)]
+    fn fail(&mut self) {
+        self.state = PlatformCallStateKind::Idle;
+        self.session_id = None;
+        self.microphone = false;
+        self.playback = false;
     }
 }
 
@@ -319,6 +564,9 @@ struct Actor<R: Runtime> {
     audio_failure: Option<mpsc::UnboundedReceiver<()>>,
     camera_failure: Option<mpsc::UnboundedReceiver<CameraFailure>>,
     screen_share_failure: Option<mpsc::UnboundedReceiver<ScreenShareFailure>>,
+    platform: PlatformStateMachine,
+    #[cfg(mobile)]
+    platform_events_task: Option<async_runtime::JoinHandle<()>>,
 }
 
 async fn run_actor<R: Runtime>(
@@ -341,6 +589,9 @@ async fn run_actor<R: Runtime>(
         audio_failure: None,
         camera_failure: None,
         screen_share_failure: None,
+        platform: PlatformStateMachine::default(),
+        #[cfg(mobile)]
+        platform_events_task: None,
     };
     actor.emit_state();
 
@@ -491,9 +742,26 @@ impl<R: Runtime> Actor<R> {
             Command::Disconnect(request, response) => {
                 self.handle_disconnect(request, response).await
             }
+            Command::SetMediaEnabled(request, response) => {
+                self.handle_set_media_enabled(request, response).await
+            }
             Command::GetState(response) => {
                 let _ = response.send(self.machine.snapshot());
             }
+            Command::GetPlatformCallCapabilities(response) => {
+                self.handle_get_platform_call_capabilities(response).await
+            }
+            Command::StartPlatformCallLifecycle(request, response) => {
+                self.handle_start_platform_call_lifecycle(request, response)
+                    .await
+            }
+            Command::StopPlatformCallLifecycle(request, response) => {
+                self.handle_stop_platform_call_lifecycle(request, response)
+                    .await
+            }
+            Command::GetPlatformCallState(response) => {
+                let _ = response.send(Ok(self.platform.snapshot()));
+            }
         }
     }
 
@@ -502,6 +770,14 @@ impl<R: Runtime> Actor<R> {
         request: ConnectRequest,
         response: oneshot::Sender<Result<CallState>>,
     ) {
+        // Mutual exclusion with the platform lifecycle: a native room cannot
+        // start while a platform call session owns the audio session.
+        if self.platform.session_id.is_some() {
+            let error = Error::Busy;
+            self.emit_error(&error, Some(request.connection_id));
+            let _ = response.send(Err(error));
+            return;
+        }
         match self.machine.connect_decision(&request.connection_id) {
             ConnectDecision::Same => {
                 let _ = response.send(Ok(self.machine.snapshot()));
@@ -649,8 +925,211 @@ impl<R: Runtime> Actor<R> {
         }
     }
 
+    async fn handle_set_media_enabled(
+        &mut self,
+        request: SetMediaEnabledRequest,
+        response: oneshot::Sender<Result<CallState>>,
+    ) {
+        match self.machine.media_decision(&request) {
+            MediaToggleDecision::Idempotent => {
+                let _ = response.send(Ok(self.machine.snapshot()));
+            }
+            MediaToggleDecision::Stale => {
+                let error = Error::StaleConnection;
+                self.emit_error(&error, Some(request.connection_id));
+                let _ = response.send(Err(error));
+            }
+            MediaToggleDecision::Unsupported => {
+                let error = Error::MediaUnsupported;
+                self.emit_error(&error, Some(request.connection_id));
+                let _ = response.send(Err(error));
+            }
+            MediaToggleDecision::Apply => self.apply_media_toggle(request, response).await,
+        }
+    }
+
+    async fn apply_media_toggle(
+        &mut self,
+        request: SetMediaEnabledRequest,
+        response: oneshot::Sender<Result<CallState>>,
+    ) {
+        let connection_id = request.connection_id.clone();
+        let Some(active) = self.active.as_mut() else {
+            let error = Error::StaleConnection;
+            self.emit_error(&error, Some(connection_id));
+            let _ = response.send(Err(error));
+            return;
+        };
+        let enabled = request.enabled;
+        let outcome = match request.kind {
+            MediaKind::Microphone => {
+                toggle_microphone(active, &mut self.audio_failure, enabled).await
+            }
+            MediaKind::Camera => toggle_camera(active, &mut self.camera_failure, enabled).await,
+            MediaKind::ScreenShare => {
+                toggle_screen_share(active, &mut self.screen_share_failure, enabled, &self.app)
+                    .await
+            }
+        };
+        match outcome {
+            Ok(()) => {
+                self.machine.confirm_media(request.kind, request.enabled);
+                self.emit_state();
+                let _ = response.send(Ok(self.machine.snapshot()));
+            }
+            Err(error) => {
+                self.emit_error(&error, Some(connection_id));
+                let _ = response.send(Err(error));
+            }
+        }
+    }
+
+    async fn handle_get_platform_call_capabilities(
+        &mut self,
+        response: oneshot::Sender<Result<PlatformCallCapabilities>>,
+    ) {
+        #[cfg(mobile)]
+        let result = self.mobile.get_platform_call_capabilities().await;
+        #[cfg(not(mobile))]
+        let result = Ok(PlatformCallCapabilities::current());
+
+        match result {
+            Ok(capabilities) => {
+                self.platform.capabilities = capabilities;
+                let _ = response.send(Ok(capabilities));
+            }
+            Err(error) => {
+                let _ = response.send(Err(error));
+            }
+        }
+    }
+
+    async fn handle_start_platform_call_lifecycle(
+        &mut self,
+        request: StartPlatformCallLifecycleRequest,
+        response: oneshot::Sender<Result<PlatformCallState>>,
+    ) {
+        match self.platform.start_decision(&request) {
+            PlatformStartDecision::Idempotent => {
+                let _ = response.send(Ok(self.platform.snapshot()));
+            }
+            PlatformStartDecision::Unsupported => {
+                let _ = response.send(Err(Error::PlatformCallUnsupported));
+            }
+            PlatformStartDecision::Busy => {
+                let _ = response.send(Err(Error::PlatformCallBusy));
+            }
+            PlatformStartDecision::InvalidSession => {
+                let _ = response.send(Err(Error::PlatformCallStaleSession));
+            }
+            PlatformStartDecision::Start => {
+                // The native-room mode and the platform lifecycle are mutually
+                // exclusive: both platforms own a single audio session.
+                if self.pending.is_some() || self.active.is_some() {
+                    let error = Error::PlatformCallBusy;
+                    self.emit_error(&error, None);
+                    let _ = response.send(Err(error));
+                    return;
+                }
+
+                #[cfg(mobile)]
+                let result = {
+                    let (events_sender, mut events) = mpsc::channel(32);
+                    let channel = MobileBackend::platform_event_channel(events_sender);
+                    let internal_tx = self.internal_tx.clone();
+                    let forwarder = async_runtime::spawn(async move {
+                        while let Some(event) = events.recv().await {
+                            let _ = internal_tx.send(InternalMessage::PlatformCallEvent(event));
+                        }
+                    });
+                    let result = self
+                        .mobile
+                        .start_platform_call_lifecycle(NativeStartPlatformCallLifecycleRequest {
+                            fields: NativePlatformStartFields {
+                                session_id: &request.session_id,
+                                microphone: request.microphone,
+                                playback: request.playback,
+                            },
+                            channel,
+                        })
+                        .await;
+                    if result.is_err() {
+                        forwarder.abort();
+                        let _ = forwarder.await;
+                    } else {
+                        if let Some(stale) = self.platform_events_task.take() {
+                            stale.abort();
+                        }
+                        self.platform_events_task = Some(forwarder);
+                    }
+                    result
+                };
+                #[cfg(not(mobile))]
+                let result: Result<()> = Err(Error::PlatformCallUnsupported);
+
+                match result {
+                    Ok(()) => {
+                        self.platform.activate(&request);
+                        let _ = response.send(Ok(self.platform.snapshot()));
+                    }
+                    Err(error) => {
+                        let _ = response.send(Err(error));
+                    }
+                }
+            }
+        }
+    }
+
+    async fn handle_stop_platform_call_lifecycle(
+        &mut self,
+        request: StopPlatformCallLifecycleRequest,
+        response: oneshot::Sender<Result<PlatformCallState>>,
+    ) {
+        match self.platform.stop_decision(&request.session_id) {
+            PlatformStopDecision::Idempotent => {
+                let _ = response.send(Ok(self.platform.snapshot()));
+            }
+            PlatformStopDecision::Unsupported => {
+                let _ = response.send(Err(Error::PlatformCallUnsupported));
+            }
+            PlatformStopDecision::Stale | PlatformStopDecision::InvalidSession => {
+                let _ = response.send(Err(Error::PlatformCallStaleSession));
+            }
+            PlatformStopDecision::Stop => {
+                #[cfg(mobile)]
+                let result = self
+                    .mobile
+                    .stop_platform_call_lifecycle(NativeStopPlatformCallLifecycleRequest {
+                        session_id: &request.session_id,
+                    })
+                    .await;
+                #[cfg(not(mobile))]
+                let result: Result<()> = Err(Error::PlatformCallUnsupported);
+
+                match result {
+                    Ok(()) => {
+                        #[cfg(mobile)]
+                        if let Some(task) = self.platform_events_task.take() {
+                            task.abort();
+                            let _ = task.await;
+                        }
+                        self.platform.stop();
+                        let _ = response.send(Ok(self.platform.snapshot()));
+                    }
+                    Err(error) => {
+                        let _ = response.send(Err(error));
+                    }
+                }
+            }
+        }
+    }
+
     async fn handle_internal(&mut self, message: InternalMessage) {
         match message {
+            #[cfg(mobile)]
+            InternalMessage::PlatformCallEvent(event) => {
+                self.handle_platform_call_event(event);
+            }
             InternalMessage::ConnectFinished {
                 connection_id,
                 operation_id,
@@ -787,6 +1266,18 @@ impl<R: Runtime> Actor<R> {
                     self.screen_share_failure = screen_share_failure;
                 }
 
+                #[allow(unused_mut)]
+                let mut media = MediaState::default();
+                #[cfg(target_os = "linux")]
+                {
+                    media.microphone = audio.is_some();
+                }
+                #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+                {
+                    media.camera = camera.is_some();
+                    media.screen_share = screen_share.is_some();
+                }
+
                 self.active = Some(ActiveConnection {
                     connection_id: connection_id.clone(),
                     operation_id,
@@ -804,12 +1295,36 @@ impl<R: Runtime> Actor<R> {
                     #[cfg(test)]
                     screen_share_shutdown_marker: None,
                 });
+                // Media is only confirmed once the sessions above have started.
+                self.machine.media = media;
                 self.transition(ConnectionState::Connected, Some(connection_id));
                 let _ = pending.response.send(Ok(self.machine.snapshot()));
             }
         }
     }
 
+    #[cfg(mobile)]
+    fn handle_platform_call_event(&mut self, event: NativePlatformCallEvent) {
+        if self.platform.session_id.as_deref() != Some(event.session_id.as_str()) {
+            return;
+        }
+        let Some(kind) = event.to_kind() else {
+            return;
+        };
+        if matches!(kind, PlatformCallEventKind::Failed { .. }) {
+            self.platform.fail();
+            if let Some(task) = self.platform_events_task.take() {
+                task.abort();
+            }
+        }
+        let payload = PlatformCallEvent {
+            revision: self.platform.next_event_revision(),
+            session_id: event.session_id,
+            kind,
+        };
+        let _ = self.app.emit(PLATFORM_CALL_EVENT, payload);
+    }
+
     async fn handle_audio_failure(&mut self) {
         #[cfg(not(target_os = "linux"))]
         {
@@ -980,6 +1495,11 @@ impl<R: Runtime> Actor<R> {
     }
 
     async fn cleanup(&mut self) {
+        #[cfg(mobile)]
+        if let Some(task) = self.platform_events_task.take() {
+            task.abort();
+            let _ = task.await;
+        }
         if let Some(pending) = self.pending.take() {
             pending.task.abort();
             let _ = pending.task.await;
@@ -995,6 +1515,176 @@ impl<R: Runtime> Actor<R> {
     }
 }
 
+#[cfg(target_os = "linux")]
+async fn toggle_microphone(
+    active: &mut ActiveConnection,
+    audio_failure: &mut Option<mpsc::UnboundedReceiver<()>>,
+    enabled: bool,
+) -> Result<()> {
+    if enabled {
+        let result = match &active.room {
+            OwnedRoom::LiveKit(room) => AudioSession::start(room).await,
+            #[cfg(test)]
+            OwnedRoom::Fake(_) => Err("audio requires a live room".to_owned()),
+            #[cfg(test)]
+            OwnedRoom::FakeOrdered(_) => Err("audio requires a live room".to_owned()),
+        };
+        match result {
+            Ok((audio, failure_rx)) => {
+                active.audio = Some(audio);
+                *audio_failure = Some(failure_rx);
+                Ok(())
+            }
+            Err(_) => Err(Error::AudioFailed),
+        }
+    } else {
+        audio_failure.take();
+        if let Some(mut audio) = active.audio.take() {
+            audio.shutdown().await;
+        }
+        Ok(())
+    }
+}
+
+#[cfg(all(
+    not(target_os = "linux"),
+    not(any(target_os = "android", target_os = "ios"))
+))]
+async fn toggle_microphone(
+    active: &mut ActiveConnection,
+    _audio_failure: &mut Option<mpsc::UnboundedReceiver<()>>,
+    enabled: bool,
+) -> Result<()> {
+    let _ = (active, enabled);
+    Err(Error::MediaUnsupported)
+}
+
+#[cfg(mobile)]
+async fn toggle_microphone<R: Runtime>(
+    active: &mut ActiveConnection<R>,
+    _audio_failure: &mut Option<mpsc::UnboundedReceiver<()>>,
+    enabled: bool,
+) -> Result<()> {
+    active
+        .room
+        .set_media_enabled(
+            &active.operation_id,
+            &active.connection_id,
+            MediaKind::Microphone,
+            enabled,
+        )
+        .await
+}
+
+#[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+async fn toggle_camera(
+    active: &mut ActiveConnection,
+    camera_failure: &mut Option<mpsc::UnboundedReceiver<CameraFailure>>,
+    enabled: bool,
+) -> Result<()> {
+    if enabled {
+        let result = match &active.room {
+            OwnedRoom::LiveKit(room) => CameraSession::start(room).await,
+            #[cfg(test)]
+            OwnedRoom::Fake(_) => Err("camera requires a live room".to_owned()),
+            #[cfg(test)]
+            OwnedRoom::FakeOrdered(_) => Err("camera requires a live room".to_owned()),
+        };
+        match result {
+            Ok((camera, failure_rx)) => {
+                active.camera = Some(camera);
+                *camera_failure = Some(failure_rx);
+                Ok(())
+            }
+            Err(_) => Err(Error::CameraFailed),
+        }
+    } else {
+        camera_failure.take();
+        if let Some(mut camera) = active.camera.take() {
+            camera.shutdown().await;
+        }
+        Ok(())
+    }
+}
+
+#[cfg(mobile)]
+async fn toggle_camera<R: Runtime>(
+    active: &mut ActiveConnection<R>,
+    _camera_failure: &mut Option<mpsc::UnboundedReceiver<CameraFailure>>,
+    enabled: bool,
+) -> Result<()> {
+    active
+        .room
+        .set_media_enabled(
+            &active.operation_id,
+            &active.connection_id,
+            MediaKind::Camera,
+            enabled,
+        )
+        .await
+}
+
+#[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+async fn toggle_screen_share<R: Runtime>(
+    active: &mut ActiveConnection,
+    screen_share_failure: &mut Option<mpsc::UnboundedReceiver<ScreenShareFailure>>,
+    enabled: bool,
+    app: &AppHandle<R>,
+) -> Result<()> {
+    if enabled {
+        let result = match &active.room {
+            OwnedRoom::LiveKit(room) => {
+                #[cfg(target_os = "windows")]
+                {
+                    ScreenShareSession::start(app, room).await
+                }
+                #[cfg(not(target_os = "windows"))]
+                {
+                    let _ = app;
+                    ScreenShareSession::start(room).await
+                }
+            }
+            #[cfg(test)]
+            OwnedRoom::Fake(_) => Err("screen share requires a live room".to_owned()),
+            #[cfg(test)]
+            OwnedRoom::FakeOrdered(_) => Err("screen share requires a live room".to_owned()),
+        };
+        match result {
+            Ok((screen_share, failure_rx)) => {
+                active.screen_share = Some(screen_share);
+                *screen_share_failure = Some(failure_rx);
+                Ok(())
+            }
+            Err(_) => Err(Error::ScreenShareFailed),
+        }
+    } else {
+        let _ = app;
+        screen_share_failure.take();
+        if let Some(mut screen_share) = active.screen_share.take() {
+            screen_share.shutdown().await;
+        }
+        Ok(())
+    }
+}
+
+#[cfg(mobile)]
+async fn toggle_screen_share<R: Runtime>(
+    active: &mut ActiveConnection<R>,
+    _screen_share_failure: &mut Option<mpsc::UnboundedReceiver<ScreenShareFailure>>,
+    enabled: bool,
+    _app: &AppHandle<R>,
+) -> Result<()> {
+    active
+        .room
+        .set_media_enabled(
+            &active.operation_id,
+            &active.connection_id,
+            MediaKind::ScreenShare,
+            enabled,
+        )
+        .await
+}
+
 #[cfg(not(any(target_os = "android", target_os = "ios")))]
 async fn close_active_connection(active: Option<ActiveConnection>) -> std::result::Result<(), ()> {
     if let Some(active) = active {
@@ -1060,14 +1750,22 @@ async fn close_queued_rooms(internal_rx: &mut mpsc::UnboundedReceiver<InternalMe
 
 #[cfg(test)]
 mod tests {
-    use super::{ConnectDecision, DisconnectDecision, StateMachine};
+    use super::{
+        ConnectDecision, DisconnectDecision, MediaToggleDecision, PlatformStartDecision,
+        PlatformStateMachine, PlatformStopDecision, StateMachine,
+    };
     use crate::error::Error;
-    use crate::models::{CallLifecycleError, ConnectRequest, ConnectionState};
+    use crate::models::{
+        CallLifecycleError, ConnectRequest, ConnectionState, MediaCapabilities, MediaKind,
+        MediaState, PlatformCallCapabilities, SetMediaEnabledRequest,
+        StartPlatformCallLifecycleRequest,
+    };
     use secrecy::SecretString;
     use std::sync::{
         atomic::{AtomicUsize, Ordering},
         Arc, Mutex,
     };
+    use tauri::Listener;
 
     #[test]
     fn same_id_is_idempotent_and_different_id_is_busy() {
@@ -1339,4 +2037,442 @@ mod tests {
         assert_eq!(machine.disconnect_decision("one"), DisconnectDecision::None);
         assert_eq!(machine.snapshot().revision, 3);
     }
+
+    fn media_request(
+        connection_id: &str,
+        kind: MediaKind,
+        enabled: bool,
+    ) -> SetMediaEnabledRequest {
+        SetMediaEnabledRequest {
+            connection_id: connection_id.into(),
+            kind,
+            enabled,
+        }
+    }
+
+    #[cfg(target_os = "linux")]
+    fn actor_with_camera<R: tauri::Runtime>(
+        app: tauri::AppHandle<R>,
+        camera: Option<crate::camera::CameraSession>,
+        media: MediaState,
+    ) -> super::Actor<R> {
+        let (_commands_tx, commands) = tokio::sync::mpsc::channel(1);
+        let (internal_tx, internal_rx) = tokio::sync::mpsc::unbounded_channel();
+        let (_events_tx, events) = tokio::sync::mpsc::unbounded_channel();
+
+        super::Actor {
+            app,
+            commands,
+            internal_tx,
+            internal_rx,
+            machine: super::StateMachine {
+                state: ConnectionState::Connected,
+                revision: 1,
+                connection_id: Some("one".into()),
+                media,
+            },
+            pending: None,
+            active: Some(super::ActiveConnection {
+                connection_id: "one".into(),
+                operation_id: "one:1".into(),
+                room: super::OwnedRoom::Fake(Arc::new(AtomicUsize::new(0))),
+                events,
+                audio: None,
+                camera,
+                screen_share: None,
+                screen_share_shutdown_marker: None,
+            }),
+            audio_failure: None,
+            camera_failure: None,
+            screen_share_failure: None,
+            platform: super::PlatformStateMachine::default(),
+            #[cfg(mobile)]
+            platform_events_task: None,
+        }
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn failed_media_start_preserves_confirmed_state_without_emitting_state() {
+        let app = tauri::test::mock_app();
+        let state_events = Arc::new(AtomicUsize::new(0));
+        let listener_events = state_events.clone();
+        let _listener = app.listen(super::STATE_EVENT, move |_| {
+            listener_events.fetch_add(1, Ordering::SeqCst);
+        });
+        let mut actor = actor_with_camera(app.handle().clone(), None, MediaState::default());
+        let before = actor.machine.snapshot();
+        let (response, result) = tokio::sync::oneshot::channel();
+
+        actor
+            .handle_set_media_enabled(media_request("one", MediaKind::Camera, true), response)
+            .await;
+
+        assert!(matches!(result.await, Ok(Err(Error::CameraFailed))));
+        assert_eq!(actor.machine.snapshot(), before);
+        assert_eq!(state_events.load(Ordering::SeqCst), 0);
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn successful_media_stop_emits_confirmed_snapshot_once() {
+        let app = tauri::test::mock_app();
+        let state_events = Arc::new(Mutex::new(Vec::<serde_json::Value>::new()));
+        let listener_events = state_events.clone();
+        let _listener = app.listen(super::STATE_EVENT, move |event| {
+            listener_events
+                .lock()
+                .unwrap()
+                .push(serde_json::from_str(event.payload()).unwrap());
+        });
+        let mut actor = actor_with_camera(
+            app.handle().clone(),
+            Some(crate::camera::CameraSession::without_devices(None)),
+            MediaState {
+                camera: true,
+                ..Default::default()
+            },
+        );
+        let (response, result) = tokio::sync::oneshot::channel();
+
+        actor
+            .handle_set_media_enabled(media_request("one", MediaKind::Camera, false), response)
+            .await;
+
+        let state = result.await.unwrap().unwrap();
+        assert_eq!(state.revision, 2);
+        assert!(!state.media.camera);
+        assert_eq!(actor.machine.snapshot(), state);
+        assert_eq!(
+            &*state_events.lock().unwrap(),
+            &[serde_json::to_value(state).unwrap()]
+        );
+    }
+
+    #[test]
+    fn media_toggle_is_stale_when_idle_in_progress_or_for_another_connection() {
+        let mut machine = StateMachine::default();
+        assert_eq!(
+            machine.media_decision(&media_request("one", MediaKind::Camera, true)),
+            MediaToggleDecision::Stale
+        );
+        machine.transition(ConnectionState::Connecting, Some("one".into()));
+        assert_eq!(
+            machine.media_decision(&media_request("one", MediaKind::Camera, true)),
+            MediaToggleDecision::Stale
+        );
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        assert_eq!(
+            machine.media_decision(&media_request("two", MediaKind::Camera, true)),
+            MediaToggleDecision::Stale
+        );
+        assert!(machine.snapshot().connection_id.is_some());
+    }
+
+    #[test]
+    fn media_toggle_respects_truthful_capabilities() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        let capabilities = MediaCapabilities::current();
+        let kinds = [
+            (MediaKind::Microphone, capabilities.microphone),
+            (MediaKind::Camera, capabilities.camera),
+            (MediaKind::ScreenShare, capabilities.screen_share),
+        ];
+        for (kind, supported) in kinds {
+            let expected = if supported {
+                MediaToggleDecision::Apply
+            } else {
+                MediaToggleDecision::Unsupported
+            };
+            assert_eq!(
+                machine.media_decision(&media_request("one", kind, true)),
+                expected,
+                "unexpected decision for {kind:?}"
+            );
+        }
+        #[cfg(any(target_os = "linux", target_os = "macos", target_os = "windows"))]
+        {
+            assert!(capabilities.camera);
+            assert!(capabilities.screen_share);
+        }
+        assert_eq!(capabilities.microphone, cfg!(target_os = "linux"));
+    }
+
+    #[test]
+    fn media_toggle_is_idempotent_without_a_revision_bump() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        machine.confirm_media(MediaKind::Camera, true);
+        let revision = machine.snapshot().revision;
+        assert_eq!(
+            machine.media_decision(&media_request("one", MediaKind::Camera, true)),
+            MediaToggleDecision::Idempotent
+        );
+        assert_eq!(machine.snapshot().revision, revision);
+        assert_eq!(
+            machine.media_decision(&media_request("one", MediaKind::Camera, false)),
+            MediaToggleDecision::Apply
+        );
+        assert_eq!(machine.snapshot().revision, revision);
+    }
+
+    #[test]
+    fn confirmed_media_bumps_revision_and_resets_outside_connected_states() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connecting, Some("one".into()));
+        assert_eq!(machine.snapshot().media, Default::default());
+
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        machine.confirm_media(MediaKind::ScreenShare, true);
+        let snapshot = machine.snapshot();
+        assert!(snapshot.media.screen_share);
+        assert_eq!(snapshot.revision, 3);
+
+        machine.transition(ConnectionState::Reconnecting, Some("one".into()));
+        assert!(machine.snapshot().media.screen_share);
+
+        machine.transition(ConnectionState::Disconnecting, Some("one".into()));
+        assert_eq!(machine.snapshot().media, Default::default());
+        machine.transition(ConnectionState::Idle, None);
+        let snapshot = machine.snapshot();
+        assert_eq!(snapshot.media, Default::default());
+        assert!(snapshot.connection_id.is_none());
+    }
+
+    #[test]
+    fn media_toggle_reconnecting_keeps_confirmed_state_and_stays_togglable() {
+        let mut machine = StateMachine::default();
+        machine.transition(ConnectionState::Connected, Some("one".into()));
+        machine.confirm_media(MediaKind::Camera, true);
+        machine.transition(ConnectionState::Reconnecting, Some("one".into()));
+        assert!(machine.snapshot().media.camera);
+        if MediaCapabilities::current().camera {
+            assert_eq!(
+                machine.media_decision(&media_request("one", MediaKind::Camera, false)),
+                MediaToggleDecision::Apply
+            );
+        }
+    }
+
+    #[test]
+    fn set_media_enabled_request_and_call_state_have_stable_wire_shapes() {
+        let request: SetMediaEnabledRequest = serde_json::from_value(serde_json::json!({
+            "connectionId": "one",
+            "kind": "screen_share",
+            "enabled": true
+        }))
+        .unwrap();
+        assert_eq!(request.kind, MediaKind::ScreenShare);
+        assert!(request.enabled);
+
+        let state = serde_json::to_value(StateMachine::default().snapshot()).unwrap();
+        assert_eq!(
+            state["media"],
+            serde_json::json!({
+                "microphone": false,
+                "camera": false,
+                "screenShare": false
+            })
+        );
+        assert!(state["capabilities"].is_object());
+
+        let error = serde_json::to_value(Error::MediaUnsupported).unwrap();
+        assert_eq!(
+            error,
+            serde_json::json!({
+                "code": "media_unsupported",
+                "message": "media kind is not supported on this platform"
+            })
+        );
+    }
+
+    #[test]
+    fn platform_lifecycle_has_opaque_session_and_idempotent_stop_semantics() {
+        let mut machine = PlatformStateMachine::default();
+        assert_eq!(
+            machine.start_decision(&StartPlatformCallLifecycleRequest {
+                session_id: "session".into(),
+                microphone: true,
+                playback: true,
+            }),
+            PlatformStartDecision::Unsupported
+        );
+
+        machine.capabilities = PlatformCallCapabilities {
+            supported: true,
+            microphone: true,
+            playback: true,
+        };
+        let request = StartPlatformCallLifecycleRequest {
+            session_id: "opaque-session".into(),
+            microphone: true,
+            playback: true,
+        };
+        assert_eq!(
+            machine.start_decision(&request),
+            PlatformStartDecision::Start
+        );
+        machine.activate(&request);
+        assert_eq!(
+            machine.start_decision(&request),
+            PlatformStartDecision::Idempotent
+        );
+        assert_eq!(
+            machine.start_decision(&StartPlatformCallLifecycleRequest {
+                session_id: "another-session".into(),
+                microphone: true,
+                playback: true,
+            }),
+            PlatformStartDecision::Busy
+        );
+        assert_eq!(
+            machine.stop_decision("another-session"),
+            PlatformStopDecision::Stale
+        );
+        assert_eq!(
+            machine.stop_decision("opaque-session"),
+            PlatformStopDecision::Stop
+        );
+        machine.stop();
+        assert_eq!(
+            machine.stop_decision("opaque-session"),
+            PlatformStopDecision::Idempotent
+        );
+        assert_eq!(machine.snapshot().session_id, None);
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn platform_start_is_busy_while_native_room_is_active() {
+        let app = tauri::test::mock_app();
+        let mut actor = actor_with_camera(app.handle().clone(), None, MediaState::default());
+        actor.platform.capabilities = PlatformCallCapabilities {
+            supported: true,
+            microphone: true,
+            playback: true,
+        };
+        let revision_before = actor.platform.snapshot().revision;
+        let (response, result) = tokio::sync::oneshot::channel();
+
+        actor
+            .handle_start_platform_call_lifecycle(
+                StartPlatformCallLifecycleRequest {
+                    session_id: "session".into(),
+                    microphone: true,
+                    playback: true,
+                },
+                response,
+            )
+            .await;
+
+        assert!(matches!(result.await, Ok(Err(Error::PlatformCallBusy))));
+        assert_eq!(actor.platform.snapshot().revision, revision_before);
+        assert_eq!(
+            actor.platform.snapshot().state,
+            super::PlatformCallStateKind::Idle
+        );
+    }
+
+    #[cfg(target_os = "linux")]
+    #[tokio::test]
+    async fn connect_is_busy_while_platform_call_session_is_active() {
+        let app = tauri::test::mock_app();
+        let mut actor = actor_with_camera(app.handle().clone(), None, MediaState::default());
+        // No active native room: clear it so only the platform session remains.
+        let connection = actor.active.take();
+        let _ = super::close_active_connection(connection).await;
+        actor.transition(ConnectionState::Idle, None);
+        actor.platform.activate(&StartPlatformCallLifecycleRequest {
+            session_id: "session".into(),
+            microphone: true,
+            playback: true,
+        });
+        let (response, result) = tokio::sync::oneshot::channel();
+
+        actor
+            .handle_connect(
+                ConnectRequest {
+                    connection_id: "one".into(),
+                    server_url: "wss://livekit.example".into(),
+                    participant_token: SecretString::from("secret-jwt"),
+                    audio: false,
+                    video: false,
+                    screen_share: false,
+                },
+                response,
+            )
+            .await;
+
+        assert!(matches!(result.await, Ok(Err(Error::Busy))));
+        assert_eq!(actor.machine.snapshot().state, ConnectionState::Idle);
+        assert_eq!(
+            actor.platform.snapshot().session_id.as_deref(),
+            Some("session")
+        );
+    }
+
+    #[test]
+    fn platform_stop_protects_against_replacement_session() {
+        let mut machine = PlatformStateMachine::default();
+        machine.capabilities = PlatformCallCapabilities {
+            supported: true,
+            microphone: true,
+            playback: true,
+        };
+        let first = StartPlatformCallLifecycleRequest {
+            session_id: "first".into(),
+            microphone: true,
+            playback: true,
+        };
+        machine.activate(&first);
+        machine.stop();
+        machine.activate(&StartPlatformCallLifecycleRequest {
+            session_id: "second".into(),
+            microphone: true,
+            playback: true,
+        });
+
+        // A stop targeted at the replaced session must not touch the active one.
+        assert_eq!(machine.stop_decision("first"), PlatformStopDecision::Stale);
+        assert_eq!(machine.stop_decision("second"), PlatformStopDecision::Stop);
+        machine.stop();
+        assert_eq!(
+            machine.stop_decision("never-seen"),
+            PlatformStopDecision::Stale
+        );
+    }
+
+    #[test]
+    fn platform_contract_serializes_only_bounded_wire_values() {
+        let event = serde_json::to_value(crate::models::PlatformCallEvent {
+            revision: 4,
+            session_id: "opaque-session".into(),
+            kind: crate::models::PlatformCallEventKind::RouteChanged {
+                route: crate::models::PlatformCallRoute::Bluetooth,
+            },
+        })
+        .unwrap();
+        assert_eq!(
+            event,
+            serde_json::json!({
+                "revision": 4,
+                "sessionId": "opaque-session",
+                "type": "route_changed",
+                "route": "bluetooth"
+            })
+        );
+        assert!(
+            serde_json::from_value::<crate::models::PlatformCallEventKind>(
+                serde_json::json!({ "type": "failed", "code": "start_failed" })
+            )
+            .is_ok()
+        );
+        assert!(
+            serde_json::from_value::<crate::models::PlatformCallEventKind>(
+                serde_json::json!({ "type": "failed", "message": "raw native error" })
+            )
+            .is_err()
+        );
+    }
 }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
index 64aed22aef..ade2d9cb72 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/commands.rs
@@ -20,7 +20,53 @@ pub(crate) async fn disconnect<R: Runtime>(
     app.call_lifecycle().disconnect(payload).await
 }
 
+#[command]
+pub(crate) async fn set_media_enabled<R: Runtime>(
+    app: AppHandle<R>,
+    payload: SetMediaEnabledRequest,
+) -> Result<CallState> {
+    app.call_lifecycle().set_media_enabled(payload).await
+}
+
 #[command]
 pub(crate) async fn get_state<R: Runtime>(app: AppHandle<R>) -> Result<CallState> {
     app.call_lifecycle().get_state().await
 }
+
+#[allow(non_snake_case)]
+#[command]
+pub(crate) async fn getPlatformCallCapabilities<R: Runtime>(
+    app: AppHandle<R>,
+) -> Result<PlatformCallCapabilities> {
+    app.call_lifecycle().get_platform_call_capabilities().await
+}
+
+#[allow(non_snake_case)]
+#[command]
+pub(crate) async fn startPlatformCallLifecycle<R: Runtime>(
+    app: AppHandle<R>,
+    payload: StartPlatformCallLifecycleRequest,
+) -> Result<PlatformCallState> {
+    app.call_lifecycle()
+        .start_platform_call_lifecycle(payload)
+        .await
+}
+
+#[allow(non_snake_case)]
+#[command]
+pub(crate) async fn stopPlatformCallLifecycle<R: Runtime>(
+    app: AppHandle<R>,
+    payload: StopPlatformCallLifecycleRequest,
+) -> Result<PlatformCallState> {
+    app.call_lifecycle()
+        .stop_platform_call_lifecycle(payload)
+        .await
+}
+
+#[allow(non_snake_case)]
+#[command]
+pub(crate) async fn getPlatformCallState<R: Runtime>(
+    app: AppHandle<R>,
+) -> Result<PlatformCallState> {
+    app.call_lifecycle().get_platform_call_state().await
+}
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
index c274159366..d99cf363e1 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/error.rs
@@ -22,6 +22,18 @@ pub enum Error {
     CameraFailed,
     #[error("native screen share failed")]
     ScreenShareFailed,
+    #[error("media kind is not supported on this platform")]
+    MediaUnsupported,
+    #[error("platform call lifecycle is not supported on this platform")]
+    PlatformCallUnsupported,
+    #[error("platform call lifecycle is already active")]
+    PlatformCallBusy,
+    #[error("platform call session does not match the active session")]
+    PlatformCallStaleSession,
+    #[error("platform call lifecycle failed to start")]
+    PlatformCallStartFailed,
+    #[error("platform call lifecycle failed to stop")]
+    PlatformCallStopFailed,
 }
 
 impl Serialize for Error {
@@ -48,6 +60,12 @@ impl Error {
             Self::VideoFailed => "video_failed",
             Self::CameraFailed => "camera_failed",
             Self::ScreenShareFailed => "screen_share_failed",
+            Self::MediaUnsupported => "media_unsupported",
+            Self::PlatformCallUnsupported => "platform_call_unsupported",
+            Self::PlatformCallBusy => "platform_call_busy",
+            Self::PlatformCallStaleSession => "platform_call_stale_session",
+            Self::PlatformCallStartFailed => "platform_call_start_failed",
+            Self::PlatformCallStopFailed => "platform_call_stop_failed",
         }
     }
 
@@ -62,6 +80,16 @@ impl Error {
             Self::VideoFailed => "native video failed",
             Self::CameraFailed => "native camera failed",
             Self::ScreenShareFailed => "native screen share failed",
+            Self::MediaUnsupported => "media kind is not supported on this platform",
+            Self::PlatformCallUnsupported => {
+                "platform call lifecycle is not supported on this platform"
+            }
+            Self::PlatformCallBusy => "platform call lifecycle is already active",
+            Self::PlatformCallStaleSession => {
+                "platform call session does not match the active session"
+            }
+            Self::PlatformCallStartFailed => "platform call lifecycle failed to start",
+            Self::PlatformCallStopFailed => "platform call lifecycle failed to stop",
         }
     }
 }
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
index f2325f3489..c0a71f1608 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/lib.rs
@@ -47,7 +47,12 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
         .invoke_handler(tauri::generate_handler![
             commands::connect,
             commands::disconnect,
-            commands::get_state
+            commands::set_media_enabled,
+            commands::get_state,
+            commands::getPlatformCallCapabilities,
+            commands::startPlatformCallLifecycle,
+            commands::stopPlatformCallLifecycle,
+            commands::getPlatformCallState
         ])
         .setup(|app, api| {
             #[cfg(mobile)]
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
index b0e49d2094..a6eec96af4 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/mobile.rs
@@ -6,7 +6,13 @@ use tauri::{
 };
 use tokio::sync::mpsc;
 
-use crate::{error::Error, models::DisconnectRequest};
+use crate::{
+    error::Error,
+    models::{
+        DisconnectRequest, MediaKind, NativePlatformCallEvent, NativePlatformStartFields,
+        PlatformCallCapabilities,
+    },
+};
 
 #[cfg(target_os = "android")]
 const PLUGIN_IDENTIFIER: &str = "app.tauri.call_lifecycle";
@@ -53,6 +59,56 @@ pub(crate) struct NativeControlEvent {
     pub kind: NativeControlEventKind,
 }
 
+#[cfg(target_os = "android")]
+mod platform_commands {
+    pub(super) const CAPABILITIES: &str = "getPlatformLifecycleCapabilities";
+    pub(super) const START: &str = "startPlatformLifecycle";
+    pub(super) const STOP: &str = "stopPlatformLifecycle";
+}
+
+#[cfg(target_os = "ios")]
+mod platform_commands {
+    pub(super) const CAPABILITIES: &str = "capabilities";
+    pub(super) const START: &str = "start";
+    pub(super) const STOP: &str = "stop";
+}
+
+/// Mirrors the Android `getPlatformLifecycleCapabilities` response.
+#[cfg(target_os = "android")]
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativePlatformCapabilities {
+    #[serde(default)]
+    microphone: bool,
+    #[serde(default)]
+    audio_playback: bool,
+}
+
+/// Mirrors the iOS `capabilities` response.
+#[cfg(target_os = "ios")]
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativePlatformCapabilities {
+    #[serde(default)]
+    microphone: bool,
+    #[serde(default)]
+    background_audio: bool,
+}
+
+impl From<NativePlatformCapabilities> for PlatformCallCapabilities {
+    fn from(native: NativePlatformCapabilities) -> Self {
+        // A native response is proof the platform lifecycle exists.
+        Self {
+            supported: true,
+            microphone: native.microphone,
+            #[cfg(target_os = "android")]
+            playback: native.audio_playback,
+            #[cfg(target_os = "ios")]
+            playback: native.background_audio,
+        }
+    }
+}
+
 #[derive(Debug, Clone, Deserialize)]
 #[serde(tag = "event", rename_all = "snake_case")]
 pub(crate) enum NativeControlEventKind {
@@ -103,6 +159,17 @@ impl<R: Runtime> MobileBackend<R> {
         })
     }
 
+    pub(crate) fn platform_event_channel(
+        sender: mpsc::Sender<NativePlatformCallEvent>,
+    ) -> Channel<NativePlatformCallEvent> {
+        Channel::new(move |body: InvokeResponseBody| {
+            if let Ok(event) = body.deserialize::<NativePlatformCallEvent>() {
+                let _ = sender.try_send(event);
+            }
+            Ok(())
+        })
+    }
+
     pub(crate) async fn connect(
         &self,
         request: NativeConnectRequest<'_>,
@@ -128,6 +195,63 @@ impl<R: Runtime> MobileBackend<R> {
             .map(|_| ())
             .map_err(|_| Error::CloseFailed)
     }
+
+    pub(crate) async fn set_media_enabled(
+        &self,
+        operation_id: &str,
+        connection_id: &str,
+        kind: MediaKind,
+        enabled: bool,
+    ) -> crate::Result<()> {
+        let payload = NativeSetMediaEnabledRequest {
+            operation_id,
+            connection_id,
+            kind,
+            enabled,
+        };
+        self.handle
+            .run_mobile_plugin_async::<serde_json::Value>("setMediaEnabled", payload)
+            .await
+            .map(|_| ())
+            .map_err(|_| match kind {
+                MediaKind::Microphone => Error::AudioFailed,
+                MediaKind::Camera => Error::CameraFailed,
+                MediaKind::ScreenShare => Error::ScreenShareFailed,
+            })
+    }
+
+    pub(crate) async fn get_platform_call_capabilities(
+        &self,
+    ) -> crate::Result<PlatformCallCapabilities> {
+        let native: NativePlatformCapabilities = self
+            .handle
+            .run_mobile_plugin_async(platform_commands::CAPABILITIES, ())
+            .await
+            .map_err(|_| Error::PlatformCallUnsupported)?;
+        Ok(native.into())
+    }
+
+    pub(crate) async fn start_platform_call_lifecycle(
+        &self,
+        request: NativeStartPlatformCallLifecycleRequest<'_>,
+    ) -> crate::Result<()> {
+        self.handle
+            .run_mobile_plugin_async::<serde_json::Value>(platform_commands::START, request)
+            .await
+            .map(|_| ())
+            .map_err(|_| Error::PlatformCallStartFailed)
+    }
+
+    pub(crate) async fn stop_platform_call_lifecycle(
+        &self,
+        request: NativeStopPlatformCallLifecycleRequest<'_>,
+    ) -> crate::Result<()> {
+        self.handle
+            .run_mobile_plugin_async::<serde_json::Value>(platform_commands::STOP, request)
+            .await
+            .map(|_| ())
+            .map_err(|_| Error::PlatformCallStopFailed)
+    }
 }
 
 #[derive(Debug, Serialize)]
@@ -137,6 +261,32 @@ struct NativeDisconnectRequest<'a> {
     connection_id: &'a str,
 }
 
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct NativeSetMediaEnabledRequest<'a> {
+    operation_id: &'a str,
+    connection_id: &'a str,
+    kind: MediaKind,
+    enabled: bool,
+}
+
+/// Native start payload. The natives accept `{ sessionId, channel }` and
+/// tolerate the extra `microphone`/`playback` flags, which the bridge forwards
+/// so later stages do not need to re-extend the payload.
+#[derive(Serialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativeStartPlatformCallLifecycleRequest<'a> {
+    #[serde(flatten)]
+    pub fields: NativePlatformStartFields<'a>,
+    pub channel: Channel<NativePlatformCallEvent>,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct NativeStopPlatformCallLifecycleRequest<'a> {
+    pub session_id: &'a str,
+}
+
 pub fn init<R: Runtime, C: DeserializeOwned>(
     _app: &AppHandle<R>,
     api: PluginApi<R, C>,
diff --git a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
index 0527d2caed..c823540ec4 100644
--- a/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
+++ b/src-tauri/plugins/tauri-plugin-call-lifecycle/src/models.rs
@@ -21,6 +21,438 @@ pub struct DisconnectRequest {
     pub connection_id: String,
 }
 
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PlatformCallStateKind {
+    Idle,
+    Starting,
+    Active,
+    Stopping,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PlatformCallRoute {
+    Earpiece,
+    Speaker,
+    Wired,
+    Bluetooth,
+    Unknown,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PlatformCallInterruption {
+    Began,
+    Ended,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum PlatformCallFailureCode {
+    Unsupported,
+    PermissionDenied,
+    AudioUnavailable,
+    StartFailed,
+    StopFailed,
+    StaleSession,
+    Busy,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(tag = "type", rename_all = "snake_case")]
+pub enum PlatformCallEventKind {
+    FocusChanged { focused: bool },
+    RouteChanged { route: PlatformCallRoute },
+    Interrupted { state: PlatformCallInterruption },
+    MediaReset,
+    Failed { code: PlatformCallFailureCode },
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct PlatformCallEvent {
+    pub revision: u64,
+    pub session_id: String,
+    #[serde(flatten)]
+    pub kind: PlatformCallEventKind,
+}
+
+/// Raw platform lifecycle event as emitted by the Android/iOS native plugins.
+///
+/// Native fields stay as strings at the boundary; the bridge maps them into the
+/// bounded guest enums below, dropping unknown values instead of forwarding raw
+/// native errors or device names.
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct NativePlatformCallEvent {
+    pub session_id: String,
+    #[serde(default)]
+    #[allow(dead_code)]
+    pub revision: Option<u64>,
+    pub event: String,
+    #[serde(default)]
+    pub focus: Option<String>,
+    #[serde(default)]
+    pub route: Option<String>,
+    #[serde(default)]
+    pub interruption: Option<String>,
+    #[serde(default)]
+    pub code: Option<String>,
+}
+
+impl NativePlatformCallEvent {
+    pub fn to_kind(&self) -> Option<PlatformCallEventKind> {
+        match self.event.as_str() {
+            // Android reports "gained"|"lost"|"ducked"; iOS reports "active"|"lost"|"regained".
+            "focus" => Some(PlatformCallEventKind::FocusChanged {
+                focused: matches!(
+                    self.focus.as_deref(),
+                    Some("gained" | "active" | "regained")
+                ),
+            }),
+            // Union of Android (earpiece|speaker|wired|bluetooth|usb|unknown)
+            // and iOS (receiver|speaker|bluetooth|wired|other|none) routes.
+            "route" => Some(PlatformCallEventKind::RouteChanged {
+                route: match self.route.as_deref() {
+                    Some("earpiece" | "receiver") => PlatformCallRoute::Earpiece,
+                    Some("speaker") => PlatformCallRoute::Speaker,
+                    Some("wired") => PlatformCallRoute::Wired,
+                    Some("bluetooth") => PlatformCallRoute::Bluetooth,
+                    _ => PlatformCallRoute::Unknown,
+                },
+            }),
+            "interruption" => Some(PlatformCallEventKind::Interrupted {
+                state: match self.interruption.as_deref() {
+                    Some("began") => PlatformCallInterruption::Began,
+                    _ => PlatformCallInterruption::Ended,
+                },
+            }),
+            "media_services_reset" => Some(PlatformCallEventKind::MediaReset),
+            // Android: invalid_request|busy|not_visible|permission_denied|
+            // audio_focus_failed|service_start_failed. iOS: busy|
+            // permission_denied|audio_session_failed|stop_failed.
+            "failure" => Some(PlatformCallEventKind::Failed {
+                code: match self.code.as_deref() {
+                    Some("busy") => PlatformCallFailureCode::Busy,
+                    Some("permission_denied") => PlatformCallFailureCode::PermissionDenied,
+                    Some("audio_focus_failed" | "audio_session_failed") => {
+                        PlatformCallFailureCode::AudioUnavailable
+                    }
+                    Some("stop_failed") => PlatformCallFailureCode::StopFailed,
+                    _ => PlatformCallFailureCode::StartFailed,
+                },
+            }),
+            _ => None,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn native_event(event: &str) -> NativePlatformCallEvent {
+        NativePlatformCallEvent {
+            session_id: "session".into(),
+            revision: None,
+            event: event.into(),
+            focus: None,
+            route: None,
+            interruption: None,
+            code: None,
+        }
+    }
+
+    #[test]
+    fn native_focus_maps_to_bounded_focused_flag() {
+        for (raw, focused) in [
+            ("gained", true),
+            ("active", true),
+            ("regained", true),
+            ("lost", false),
+            ("ducked", false),
+        ] {
+            let mut event = native_event("focus");
+            event.focus = Some(raw.into());
+            assert_eq!(
+                event.to_kind(),
+                Some(PlatformCallEventKind::FocusChanged { focused }),
+                "focus {raw}"
+            );
+        }
+        assert_eq!(
+            native_event("focus").to_kind(),
+            Some(PlatformCallEventKind::FocusChanged { focused: false })
+        );
+    }
+
+    #[test]
+    fn native_route_maps_to_bounded_route_without_device_names() {
+        for (raw, route) in [
+            ("earpiece", PlatformCallRoute::Earpiece),
+            ("receiver", PlatformCallRoute::Earpiece),
+            ("speaker", PlatformCallRoute::Speaker),
+            ("wired", PlatformCallRoute::Wired),
+            ("bluetooth", PlatformCallRoute::Bluetooth),
+            ("usb", PlatformCallRoute::Unknown),
+            ("other", PlatformCallRoute::Unknown),
+            ("none", PlatformCallRoute::Unknown),
+            ("bose-quietcomfort-35", PlatformCallRoute::Unknown),
+        ] {
+            let mut event = native_event("route");
+            event.route = Some(raw.into());
+            assert_eq!(
+                event.to_kind(),
+                Some(PlatformCallEventKind::RouteChanged { route }),
+                "route {raw}"
+            );
+        }
+    }
+
+    #[test]
+    fn native_interruption_and_reset_map_to_bounded_variants() {
+        let mut began = native_event("interruption");
+        began.interruption = Some("began".into());
+        assert_eq!(
+            began.to_kind(),
+            Some(PlatformCallEventKind::Interrupted {
+                state: PlatformCallInterruption::Began
+            })
+        );
+        let mut ended = native_event("interruption");
+        ended.interruption = Some("ended".into());
+        assert_eq!(
+            ended.to_kind(),
+            Some(PlatformCallEventKind::Interrupted {
+                state: PlatformCallInterruption::Ended
+            })
+        );
+        assert_eq!(
+            native_event("media_services_reset").to_kind(),
+            Some(PlatformCallEventKind::MediaReset)
+        );
+    }
+
+    #[test]
+    fn native_failure_codes_map_to_safe_codes() {
+        for (raw, code) in [
+            ("busy", PlatformCallFailureCode::Busy),
+            (
+                "permission_denied",
+                PlatformCallFailureCode::PermissionDenied,
+            ),
+            (
+                "audio_focus_failed",
+                PlatformCallFailureCode::AudioUnavailable,
+            ),
+            (
+                "audio_session_failed",
+                PlatformCallFailureCode::AudioUnavailable,
+            ),
+            ("stop_failed", PlatformCallFailureCode::StopFailed),
+            ("invalid_request", PlatformCallFailureCode::StartFailed),
+            ("not_visible", PlatformCallFailureCode::StartFailed),
+            ("service_start_failed", PlatformCallFailureCode::StartFailed),
+            ("Device is muted", PlatformCallFailureCode::StartFailed),
+        ] {
+            let mut event = native_event("failure");
+            event.code = Some(raw.into());
+            assert_eq!(
+                event.to_kind(),
+                Some(PlatformCallEventKind::Failed { code }),
+                "code {raw}"
+            );
+        }
+    }
+
+    #[test]
+    fn unknown_native_event_is_dropped() {
+        assert_eq!(native_event("unknown_thing").to_kind(), None);
+    }
+
+    #[test]
+    fn native_start_fields_serialize_as_camel_case() {
+        let fields = NativePlatformStartFields {
+            session_id: "opaque-session",
+            microphone: true,
+            playback: false,
+        };
+        assert_eq!(
+            serde_json::to_value(fields).unwrap(),
+            serde_json::json!({
+                "sessionId": "opaque-session",
+                "microphone": true,
+                "playback": false
+            })
+        );
+    }
+
+    #[test]
+    fn native_event_deserializes_android_and_ios_payloads() {
+        let android: NativePlatformCallEvent = serde_json::from_value(serde_json::json!({
+            "sessionId": "s",
+            "revision": 3,
+            "event": "route",
+            "route": "usb"
+        }))
+        .unwrap();
+        assert_eq!(
+            android.to_kind(),
+            Some(PlatformCallEventKind::RouteChanged {
+                route: PlatformCallRoute::Unknown
+            })
+        );
+
+        let ios: NativePlatformCallEvent = serde_json::from_value(serde_json::json!({
+            "sessionId": "s",
+            "revision": 3,
+            "event": "interruption",
+            "interruption": "began"
+        }))
+        .unwrap();
+        assert_eq!(
+            ios.to_kind(),
+            Some(PlatformCallEventKind::Interrupted {
+                state: PlatformCallInterruption::Began
+            })
+        );
+    }
+}
+
+/// The media flags forwarded to the native platform-lifecycle plugins.
+///
+/// Kept in `models.rs` (not `mobile.rs`, which only compiles on mobile
+/// targets) so the wire shape is regression-tested on the host.
+#[derive(Debug, Clone, Copy, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct NativePlatformStartFields<'a> {
+    pub session_id: &'a str,
+    pub microphone: bool,
+    pub playback: bool,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct StartPlatformCallLifecycleRequest {
+    pub session_id: String,
+    pub microphone: bool,
+    pub playback: bool,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct StopPlatformCallLifecycleRequest {
+    pub session_id: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct PlatformCallCapabilities {
+    pub supported: bool,
+    pub microphone: bool,
+    pub playback: bool,
+}
+
+impl PlatformCallCapabilities {
+    pub fn current() -> Self {
+        let supported = cfg!(any(target_os = "android", target_os = "ios"));
+        Self {
+            supported,
+            microphone: supported,
+            playback: supported,
+        }
+    }
+}
+
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct PlatformCallState {
+    pub revision: u64,
+    pub state: PlatformCallStateKind,
+    pub session_id: Option<String>,
+    pub microphone: bool,
+    pub playback: bool,
+    pub capabilities: PlatformCallCapabilities,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(rename_all = "snake_case")]
+pub enum MediaKind {
+    Microphone,
+    Camera,
+    ScreenShare,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct SetMediaEnabledRequest {
+    pub connection_id: String,
+    pub kind: MediaKind,
+    pub enabled: bool,
+}
+
+#[derive(Debug, Clone, Copy, Default, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct MediaState {
+    pub microphone: bool,
+    pub camera: bool,
+    pub screen_share: bool,
+}
+
+impl MediaState {
+    pub fn enabled(&self, kind: MediaKind) -> bool {
+        match kind {
+            MediaKind::Microphone => self.microphone,
+            MediaKind::Camera => self.camera,
+            MediaKind::ScreenShare => self.screen_share,
+        }
+    }
+
+    pub fn set(&mut self, kind: MediaKind, enabled: bool) {
+        match kind {
+            MediaKind::Microphone => self.microphone = enabled,
+            MediaKind::Camera => self.camera = enabled,
+            MediaKind::ScreenShare => self.screen_share = enabled,
+        }
+    }
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct MediaCapabilities {
+    pub microphone: bool,
+    pub camera: bool,
+    pub screen_share: bool,
+}
+
+impl MediaCapabilities {
+    pub fn current() -> Self {
+        let desktop = cfg!(any(
+            target_os = "linux",
+            target_os = "macos",
+            target_os = "windows"
+        ));
+        Self {
+            microphone: cfg!(any(
+                target_os = "linux",
+                target_os = "android",
+                target_os = "ios"
+            )),
+            camera: desktop || cfg!(any(target_os = "android", target_os = "ios")),
+            screen_share: desktop || cfg!(target_os = "android"),
+        }
+    }
+
+    pub fn supports(&self, kind: MediaKind) -> bool {
+        match kind {
+            MediaKind::Microphone => self.microphone,
+            MediaKind::Camera => self.camera,
+            MediaKind::ScreenShare => self.screen_share,
+        }
+    }
+}
+
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize)]
 #[serde(rename_all = "snake_case")]
 pub enum ConnectionState {
@@ -37,6 +469,8 @@ pub struct CallState {
     pub revision: u64,
     pub state: ConnectionState,
     pub connection_id: Option<String>,
+    pub media: MediaState,
+    pub capabilities: MediaCapabilities,
 }
 
 #[derive(Debug, Clone, Serialize)]
diff --git a/src/app/features/call/CallView.test.tsx b/src/app/features/call/CallView.test.tsx
new file mode 100644
index 0000000000..7d55d11ebd
--- /dev/null
+++ b/src/app/features/call/CallView.test.tsx
@@ -0,0 +1,388 @@
+import { act, render, renderHook, screen } from '@testing-library/react';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import type { NativeCallSession } from '$state/nativeCall';
+import { getDebugLogger, type LogEntry } from '$utils/debugLogger';
+import type * as Platform from '$utils/platform';
+import { NATIVE_CALL_PROBE_STORAGE_KEY } from './nativeCallProbe';
+import {
+  getNativeCallDiagnostics,
+  serializeNativeCallDiagnostics,
+  useNativeCallDiagnostics,
+  useNativeCallProbeSession,
+  NativeMediaControls,
+  LivekitJsCallProbe,
+} from './CallView';
+
+const setMediaEnabled = vi.hoisted(() => vi.fn<(...args: unknown[]) => Promise<unknown>>());
+
+vi.mock('$plugins/call/callLifecycle', () => ({
+  getState: vi.fn<() => Promise<unknown>>(),
+  onState: vi.fn<(handler: unknown) => Promise<unknown>>(),
+  setMediaEnabled,
+}));
+
+const desktopTauri = vi.hoisted(() => vi.fn<() => boolean>());
+const mobileTauri = vi.hoisted(() => vi.fn<() => boolean>());
+
+vi.mock('$utils/platform', async (importOriginal) => ({
+  ...(await importOriginal<typeof Platform>()),
+  isDesktopTauri: desktopTauri,
+  isMobileTauri: mobileTauri,
+}));
+
+const makeSession = (): NativeCallSession => ({
+  roomId: '!room:example.org',
+  connectionId: 'connection-id',
+  lifecycle: 'connected',
+  hangup: vi.fn<() => Promise<void>>().mockResolvedValue(),
+});
+
+const mediaSnapshot = {
+  connectionId: 'connection-id',
+  media: { microphone: true, camera: false, screenShare: false },
+  capabilities: { microphone: true, camera: true, screenShare: false },
+};
+
+describe('native media controls', () => {
+  beforeEach(() => {
+    setMediaEnabled.mockReset();
+    setMediaEnabled.mockResolvedValue({});
+  });
+
+  it('shows only advertised controls and reflects confirmed state', () => {
+    render(<NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />);
+
+    expect(screen.getByRole('button', { name: 'Turn off microphone' })).toBeEnabled();
+    expect(screen.getByRole('button', { name: 'Start camera' })).toBeEnabled();
+    expect(screen.queryByRole('button', { name: 'Start screen sharing' })).not.toBeInTheDocument();
+  });
+
+  it('sends the requested media kind and state, then blocks duplicate requests', async () => {
+    let resolveRequest!: (value: unknown) => void;
+    setMediaEnabled.mockReturnValue(
+      new Promise((resolve) => {
+        resolveRequest = resolve;
+      })
+    );
+    render(<NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />);
+
+    const camera = screen.getByRole('button', { name: 'Start camera' });
+    await act(async () => camera.click());
+    expect(setMediaEnabled).toHaveBeenCalledWith({
+      connectionId: 'connection-id',
+      kind: 'camera',
+      enabled: true,
+    });
+    expect(camera).toBeDisabled();
+    expect(screen.getByRole('button', { name: 'Turn off microphone' })).toBeDisabled();
+
+    await act(async () => resolveRequest({}));
+  });
+
+  it('shows a recoverable error when the native command fails', async () => {
+    setMediaEnabled.mockRejectedValueOnce(new Error('native failure'));
+    render(<NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />);
+
+    const camera = screen.getByRole('button', { name: 'Start camera' });
+    await act(async () => camera.click());
+
+    expect(screen.getByText('Couldn’t change camera.')).toBeInTheDocument();
+    expect(camera).toBeEnabled();
+    expect(screen.getByRole('button', { name: 'Turn off microphone' })).toBeEnabled();
+  });
+
+  it('shows the safe failure code and records a sanitized diagnostic on rejection', async () => {
+    const debugLogger = getDebugLogger();
+    debugLogger.clear();
+    debugLogger.setEnabled(true);
+    setMediaEnabled.mockRejectedValueOnce({
+      code: 'camera_failed',
+      message: 'native camera failed',
+    });
+    render(<NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />);
+
+    const camera = screen.getByRole('button', { name: 'Start camera' });
+    await act(async () => camera.click());
+
+    expect(screen.getByText('Couldn’t change camera (camera_failed).')).toBeInTheDocument();
+    expect(camera).toBeEnabled();
+    expect(getNativeCallDiagnostics(debugLogger.getLogs())).toContainEqual({
+      stage: 'media control',
+      code: 'camera_failed',
+      errorName: 'UnknownError',
+      errorMessage: 'native camera failed',
+    });
+  });
+
+  it('supports media_unsupported and never logs raw invoke details', async () => {
+    const debugLogger = getDebugLogger();
+    debugLogger.clear();
+    debugLogger.setEnabled(true);
+    setMediaEnabled.mockRejectedValueOnce({
+      code: 'media_unsupported',
+      message: 'media kind is not supported on this platform',
+    });
+    const { rerender } = render(
+      <NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />
+    );
+
+    await act(async () => screen.getByRole('button', { name: 'Start camera' }).click());
+    expect(screen.getByText('Couldn’t change camera (media_unsupported).')).toBeInTheDocument();
+
+    setMediaEnabled.mockRejectedValueOnce({
+      code: 'https://evil.example/token?access_token=code-secret',
+      message: 'invoke failed at https://evil.example/track?token=message-secret',
+    });
+    rerender(<NativeMediaControls connectionId="connection-id" snapshot={mediaSnapshot} />);
+    await act(async () => screen.getByRole('button', { name: 'Start camera' }).click());
+
+    expect(screen.getByText('Couldn’t change camera.')).toBeInTheDocument();
+    const payload = serializeNativeCallDiagnostics(getNativeCallDiagnostics(debugLogger.getLogs()));
+    expect(payload).not.toContain('evil.example');
+    expect(payload).not.toContain('secret');
+  });
+});
+
+describe('LiveKit JS connection probe', () => {
+  it('renders connection and E2EE readiness without media controls', () => {
+    render(
+      <LivekitJsCallProbe session={{ lifecycle: 'active', failure: null }} onHangup={() => {}} />
+    );
+
+    expect(screen.getByText('LiveKit JS connection probe')).toBeInTheDocument();
+    expect(screen.getByText('Connection: Connected')).toBeInTheDocument();
+    expect(screen.getByText('E2EE readiness:')).toHaveTextContent('Ready');
+    expect(
+      screen.getByText('Connection-only experiment · media is not published')
+    ).toBeInTheDocument();
+    expect(
+      screen.queryByRole('button', { name: /microphone|camera|screen/i })
+    ).not.toBeInTheDocument();
+  });
+
+  it('uses safe status and setup failure text', () => {
+    render(
+      <LivekitJsCallProbe
+        session={{ lifecycle: 'failed', failure: 'setup-failed' }}
+        onHangup={() => {}}
+      />
+    );
+
+    expect(screen.getByText('Connection: Connection failed')).toBeInTheDocument();
+    expect(screen.getByText('E2EE readiness:')).toHaveTextContent('Unavailable');
+    expect(screen.getByText('LiveKit JS connection setup failed.')).toBeInTheDocument();
+    expect(screen.queryByText(/token|url|secret|error:/i)).not.toBeInTheDocument();
+  });
+
+  it('shows unavailable E2EE status and calls hangup from End', () => {
+    const onHangup = vi.fn<() => void>();
+    render(
+      <LivekitJsCallProbe
+        session={{ lifecycle: 'failed', failure: 'e2ee-unsupported' }}
+        onHangup={onHangup}
+      />
+    );
+
+    expect(screen.getByText('E2EE readiness:')).toHaveTextContent('Unavailable on this device');
+    screen.getByRole('button', { name: 'End' }).click();
+    expect(onHangup).toHaveBeenCalledOnce();
+  });
+});
+
+describe('native call probe session gate', () => {
+  beforeEach(() => {
+    desktopTauri.mockReturnValue(true);
+    mobileTauri.mockReturnValue(false);
+    localStorage.clear();
+    vi.stubEnv('VITE_ENABLE_NATIVE_CALL_PROBE', 'false');
+  });
+
+  it('hangs up a native session once when native calls are disabled', () => {
+    const session = makeSession();
+    const { rerender } = renderHook(
+      ({ nativeCallsEnabled }) => useNativeCallProbeSession(session, nativeCallsEnabled),
+      { initialProps: { nativeCallsEnabled: false } }
+    );
+
+    expect(session.hangup).toHaveBeenCalledTimes(1);
+
+    rerender({ nativeCallsEnabled: false });
+    expect(session.hangup).toHaveBeenCalledTimes(1);
+  });
+
+  it('keeps the native session when a developer override enables the probe', () => {
+    localStorage.setItem(NATIVE_CALL_PROBE_STORAGE_KEY, '1');
+    const session = makeSession();
+
+    renderHook(() => useNativeCallProbeSession(session, false));
+
+    expect(session.hangup).not.toHaveBeenCalled();
+  });
+});
+
+describe('native call diagnostics', () => {
+  const debugLogger = getDebugLogger();
+
+  beforeEach(() => {
+    debugLogger.clear();
+    debugLogger.setEnabled(true);
+  });
+
+  it('filters controller call logs and keeps only sanitized diagnostic fields', () => {
+    const logs = [
+      {
+        timestamp: 1,
+        level: 'error',
+        category: 'call',
+        namespace: 'nativeCallController',
+        message: 'Native call setup failed',
+        data: {
+          stage: 'connecting',
+          errorName: 'Error',
+          errorMessage: 'redacted',
+          cause: { errorName: 'UnknownError', errorMessage: 'redacted', token: 'secret' },
+          roomId: '!secret:example.org',
+        },
+      },
+      {
+        timestamp: 2,
+        level: 'error',
+        category: 'call',
+        namespace: 'nativeCallController',
+        message: 'Native call setup failed',
+        data: { stage: 'authorizing', errorName: 'Error', errorMessage: 'redacted' },
+      },
+      {
+        timestamp: 3,
+        level: 'error',
+        category: 'network',
+        namespace: 'nativeCallController',
+        message: 'Ignored',
+        data: { stage: 'ignored' },
+      },
+    ] satisfies LogEntry[];
+
+    expect(getNativeCallDiagnostics(logs)).toEqual([
+      { stage: 'authorizing', errorName: 'Error', errorMessage: 'redacted' },
+      {
+        stage: 'connecting',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+        cause: { errorName: 'UnknownError', errorMessage: 'redacted' },
+      },
+    ]);
+  });
+
+  it('updates when a matching logger entry arrives', () => {
+    const { result } = renderHook(() => useNativeCallDiagnostics());
+
+    act(() => {
+      debugLogger.log('error', 'call', 'nativeCallController', 'Native call setup failed', {
+        stage: 'authorizing',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+      });
+    });
+
+    expect(result.current).toEqual([
+      { stage: 'authorizing', errorName: 'Error', errorMessage: 'redacted' },
+    ]);
+  });
+
+  it('copies only the safe diagnostic payload', () => {
+    const diagnostics = getNativeCallDiagnostics([
+      {
+        timestamp: 1,
+        level: 'error',
+        category: 'call',
+        namespace: 'nativeCallController',
+        message: 'Native call setup failed',
+        data: {
+          code: 'connect_failed',
+          stage: 'joining the call',
+          errorName: 'Error',
+          errorMessage: 'redacted',
+          roomId: '!secret:example.org',
+          token: 'secret-token',
+        },
+      },
+    ] satisfies LogEntry[]);
+
+    const payload = serializeNativeCallDiagnostics(diagnostics);
+
+    expect(JSON.parse(payload)).toEqual([
+      {
+        code: 'connect_failed',
+        stage: 'joining the call',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+      },
+    ]);
+    expect(payload).not.toContain('secret');
+  });
+
+  it('redacts unallowlisted diagnostic values in fields and nested causes', () => {
+    const diagnostics = getNativeCallDiagnostics([
+      {
+        timestamp: 1,
+        level: 'error',
+        category: 'call',
+        namespace: 'nativeCallController',
+        message: 'Native call setup failed',
+        data: {
+          stage: 'https://evil.example/token?access_token=stage-secret',
+          errorName: 'RawNativeException',
+          errorMessage: 'https://evil.example/token?access_token=message-secret',
+          cause: {
+            errorName: 'RawCauseException token-secret',
+            errorMessage: 'raw cause exception https://evil.example/cause-secret',
+          },
+        },
+      },
+    ] satisfies LogEntry[]);
+    const payload = serializeNativeCallDiagnostics(diagnostics);
+
+    expect(diagnostics).toEqual([
+      {
+        stage: 'redacted',
+        errorName: 'redacted',
+        errorMessage: 'redacted',
+        cause: { errorName: 'redacted', errorMessage: 'redacted' },
+      },
+    ]);
+    expect(payload).not.toContain('evil.example');
+    expect(payload).not.toContain('secret');
+    expect(payload).not.toContain('RawNativeException');
+    expect(payload).not.toContain('RawCauseException');
+  });
+
+  it('redacts an unallowlisted lifecycle code in UI-derived diagnostics and copy payload', () => {
+    const diagnostics = getNativeCallDiagnostics([
+      {
+        timestamp: 1,
+        level: 'error',
+        category: 'call',
+        namespace: 'nativeCallController',
+        message: 'Native call connection failed',
+        data: {
+          code: 'https://evil.example/token?access_token=code-secret',
+          stage: 'connecting',
+          errorName: 'Error',
+          errorMessage: 'redacted',
+        },
+      },
+    ] satisfies LogEntry[]);
+    const payload = serializeNativeCallDiagnostics(diagnostics);
+
+    expect(diagnostics).toEqual([
+      {
+        code: 'redacted',
+        stage: 'connecting',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+      },
+    ]);
+    expect(payload).not.toContain('evil.example');
+    expect(payload).not.toContain('code-secret');
+  });
+});
diff --git a/src/app/features/call/CallView.tsx b/src/app/features/call/CallView.tsx
index 434948bcfa..5427a77e35 100644
--- a/src/app/features/call/CallView.tsx
+++ b/src/app/features/call/CallView.tsx
@@ -1,5 +1,18 @@
 import { useCallback, useEffect, useRef, useState, type RefObject } from 'react';
-import { Badge, Box, Button, color, Header, Scroll, Text, toRem } from 'folds';
+import {
+  Badge,
+  Box,
+  Button,
+  color,
+  Header,
+  IconButton,
+  Scroll,
+  Spinner,
+  Text,
+  toRem,
+  Tooltip,
+  TooltipProvider,
+} from 'folds';
 import { useAtomValue } from 'jotai';
 import { ContainerColor } from '$styles/ContainerColor.css';
 import { useRoom } from '$hooks/useRoom';
@@ -13,7 +26,259 @@ import { CallMemberRenderer } from './CallMemberCard';
 import { PrescreenControls } from './PrescreenControls';
 import { callEmbedAtom, callEmbedStartErrorAtom } from '$state/callEmbed';
 import { canJoinCall } from './callStartCapabilities';
+import type { NativeCallSession } from '$state/nativeCall';
 import { nativeCallAtom } from '$state/nativeCall';
+import type { LivekitJsCallSession } from '$state/livekitJsCall';
+import { livekitJsCallAtom } from '$state/livekitJsCall';
+import { isNativeCallProbeEnabled } from './nativeCallProbe';
+import { settingsAtom } from '$state/settings';
+import { useSetting } from '$state/hooks/settings';
+import { createDebugLogger, getDebugLogger, type LogEntry } from '$utils/debugLogger';
+import { copyToClipboard } from '$utils/dom';
+import {
+  Microphone,
+  MicrophoneSlash,
+  ScreenShare,
+  VideoCamera,
+  VideoCameraSlash,
+  sizedIcon,
+} from '$components/icons/phosphor';
+import { getState, onState, setMediaEnabled, type MediaKind } from '$plugins/call/callLifecycle';
+import { canRenderLivekitJsMediaTest, LivekitJsMediaTestSurface } from './LivekitJsMediaTest';
+
+type NativeMediaSnapshot = {
+  connectionId: string;
+  media: {
+    microphone: boolean;
+    camera: boolean;
+    screenShare: boolean;
+  };
+  capabilities: {
+    microphone: boolean;
+    camera: boolean;
+    screenShare: boolean;
+  };
+};
+
+type NativeMediaKind = MediaKind;
+
+const nativeMediaDebug = createDebugLogger('nativeCallController');
+
+const allowlistedErrorField = (
+  error: unknown,
+  property: 'code' | 'name' | 'message',
+  allowlist: Set<string>
+): string | undefined => {
+  const value = isRecord(error) ? error[property] : undefined;
+  return typeof value === 'string' && allowlist.has(value) ? value : undefined;
+};
+
+// Records a bounded, allowlisted diagnostic for a failed media toggle and
+// returns the safe failure code (if known). Raw invoke messages, URLs, and
+// tokens are never logged.
+const logMediaControlFailure = (error: unknown): string | undefined => {
+  const code = allowlistedErrorField(error, 'code', nativeCallCodes);
+  nativeMediaDebug.error('call', 'Native media control failed', {
+    stage: 'media control',
+    code: code ?? 'unknown',
+    errorName: allowlistedErrorField(error, 'name', nativeCallErrorNames) ?? 'UnknownError',
+    errorMessage: allowlistedErrorField(error, 'message', nativeCallErrorMessages) ?? 'redacted',
+  });
+  return code === 'unknown' ? undefined : code;
+};
+
+const toNativeMediaSnapshot = (state: unknown): NativeMediaSnapshot | undefined => {
+  if (!isRecord(state) || !isRecord(state.media) || !isRecord(state.capabilities)) return undefined;
+  if (typeof state.connectionId !== 'string') return undefined;
+
+  const media = state.media;
+  const capabilities = state.capabilities;
+  if (
+    typeof media.microphone !== 'boolean' ||
+    typeof media.camera !== 'boolean' ||
+    typeof media.screenShare !== 'boolean' ||
+    typeof capabilities.microphone !== 'boolean' ||
+    typeof capabilities.camera !== 'boolean' ||
+    typeof capabilities.screenShare !== 'boolean'
+  ) {
+    return undefined;
+  }
+
+  return {
+    connectionId: state.connectionId,
+    media: {
+      microphone: media.microphone,
+      camera: media.camera,
+      screenShare: media.screenShare,
+    },
+    capabilities: {
+      microphone: capabilities.microphone,
+      camera: capabilities.camera,
+      screenShare: capabilities.screenShare,
+    },
+  };
+};
+
+export function NativeMediaControls({
+  connectionId,
+  snapshot,
+}: {
+  connectionId: string;
+  snapshot: NativeMediaSnapshot | undefined;
+}) {
+  const [pending, setPending] = useState<NativeMediaKind | undefined>();
+  const [error, setError] = useState<string>();
+
+  const toggle = useCallback(
+    async (kind: NativeMediaKind, enabled: boolean) => {
+      if (pending || !snapshot) return;
+      setPending(kind);
+      setError(undefined);
+      try {
+        await setMediaEnabled({
+          connectionId,
+          kind,
+          enabled,
+        });
+      } catch (toggleError) {
+        const code = logMediaControlFailure(toggleError);
+        setError(
+          `Couldn’t change ${kind === 'screen_share' ? 'screen sharing' : kind}${
+            code ? ` (${code})` : ''
+          }.`
+        );
+      } finally {
+        setPending(undefined);
+      }
+    },
+    [connectionId, pending, snapshot]
+  );
+
+  if (!snapshot) return null;
+
+  const controls: Array<{
+    kind: NativeMediaKind;
+    enabled: boolean;
+    supported: boolean;
+    label: string;
+    icon: typeof Microphone;
+  }> = [
+    {
+      kind: 'microphone',
+      enabled: snapshot.media.microphone,
+      supported: snapshot.capabilities.microphone,
+      label: snapshot.media.microphone ? 'Turn off microphone' : 'Turn on microphone',
+      icon: snapshot.media.microphone ? Microphone : MicrophoneSlash,
+    },
+    {
+      kind: 'camera',
+      enabled: snapshot.media.camera,
+      supported: snapshot.capabilities.camera,
+      label: snapshot.media.camera ? 'Stop camera' : 'Start camera',
+      icon: snapshot.media.camera ? VideoCamera : VideoCameraSlash,
+    },
+    {
+      kind: 'screen_share',
+      enabled: snapshot.media.screenShare,
+      supported: snapshot.capabilities.screenShare,
+      label: snapshot.media.screenShare ? 'Stop screen sharing' : 'Start screen sharing',
+      icon: ScreenShare,
+    },
+  ];
+
+  return (
+    <Box direction="Column" alignItems="Center" gap="100">
+      <Box alignItems="Center" gap="200">
+        {controls.map(({ kind, enabled, supported, label, icon }) => {
+          if (!supported) return null;
+          const busy = pending === kind;
+          return (
+            <TooltipProvider
+              key={kind}
+              position="Top"
+              delay={500}
+              tooltip={
+                <Tooltip>
+                  <Text size="T200">{label}</Text>
+                </Tooltip>
+              }
+            >
+              {(anchorRef) => (
+                <IconButton
+                  ref={anchorRef}
+                  aria-label={label}
+                  variant={
+                    enabled
+                      ? kind === 'microphone'
+                        ? 'Surface'
+                        : 'Success'
+                      : kind === 'microphone'
+                        ? 'Warning'
+                        : 'Surface'
+                  }
+                  fill="Soft"
+                  radii="300"
+                  size="300"
+                  outlined
+                  disabled={busy || pending !== undefined}
+                  onClick={() => void toggle(kind, !enabled)}
+                >
+                  {busy ? (
+                    <Spinner size="100" />
+                  ) : (
+                    sizedIcon(icon, '100', {
+                      filled: kind === 'microphone' ? !enabled : enabled,
+                    })
+                  )}
+                </IconButton>
+              )}
+            </TooltipProvider>
+          );
+        })}
+      </Box>
+      {error && (
+        <Text size="T200" style={{ color: color.Critical.Main }}>
+          {error}
+        </Text>
+      )}
+    </Box>
+  );
+}
+
+function useNativeMediaSnapshot(
+  connectionId: string,
+  active: boolean
+): NativeMediaSnapshot | undefined {
+  const [snapshot, setSnapshot] = useState<NativeMediaSnapshot>();
+
+  useEffect(() => {
+    if (!active) {
+      setSnapshot(undefined);
+      return undefined;
+    }
+    let current = true;
+    void (async () => {
+      try {
+        const next = toNativeMediaSnapshot(await getState());
+        if (current && next?.connectionId === connectionId) setSnapshot(next);
+      } catch {
+        // The probe can still receive a state event if the initial read fails.
+      }
+    })();
+    const unlisten = onState((state) => {
+      const next = toNativeMediaSnapshot(state);
+      if (next?.connectionId === connectionId) setSnapshot(next);
+    });
+    return () => {
+      current = false;
+      void (async () => {
+        (await unlisten)();
+      })();
+    };
+  }, [active, connectionId]);
+
+  return snapshot;
+}
 
 function LivekitServerMissingMessage() {
   return (
@@ -83,24 +348,127 @@ function WidgetPreparationErrorMessage({ message }: { message: string }) {
 
 function NativeCallProbe({
   lifecycle,
+  connectionId,
   error,
   onHangup,
 }: {
   lifecycle: string;
+  connectionId: string;
   error?: string;
   onHangup: () => void;
 }) {
+  const diagnostics = useNativeCallDiagnostics();
+  const mediaSnapshot = useNativeMediaSnapshot(connectionId, lifecycle !== 'error');
+
   return (
     <Box alignItems="Center" justifyContent="Center" direction="Column" gap="200" grow="Yes">
       <Text size="L400">Native call: {lifecycle}</Text>
       <Text size="T300" align="Center">
-        Media is not implemented.
+        Experimental native call
       </Text>
+      <NativeMediaControls connectionId={connectionId} snapshot={mediaSnapshot} />
       {error && (
         <Text style={{ color: color.Critical.Main }} size="T300" align="Center">
           {error}
         </Text>
       )}
+      <Box direction="Column" gap="100" style={{ width: '100%', maxWidth: toRem(382) }}>
+        <Text size="T300">Native diagnostics</Text>
+        <Box direction="Column" gap="100" style={{ maxHeight: toRem(140), overflowY: 'auto' }}>
+          {diagnostics.length > 0 ? (
+            diagnostics.map((diagnostic) => (
+              <Text key={JSON.stringify(diagnostic)} size="T300">
+                {diagnostic.code && `${diagnostic.code} · `}
+                {diagnostic.stage} · {diagnostic.errorName}: {diagnostic.errorMessage}
+                {diagnostic.cause &&
+                  ` (cause: ${diagnostic.cause.errorName}: ${diagnostic.cause.errorMessage})`}
+              </Text>
+            ))
+          ) : (
+            <Text size="T300">No native call diagnostics yet.</Text>
+          )}
+        </Box>
+        <Button
+          size="300"
+          variant="Secondary"
+          fill="Soft"
+          radii="300"
+          onClick={() => void copyToClipboard(serializeNativeCallDiagnostics(diagnostics))}
+        >
+          <Text as="span" size="B300">
+            Copy diagnostics
+          </Text>
+        </Button>
+      </Box>
+      <Button size="300" variant="Critical" fill="Soft" radii="300" onClick={onHangup}>
+        <Text as="span" size="B300">
+          End
+        </Text>
+      </Button>
+    </Box>
+  );
+}
+
+const livekitJsLifecycleLabels: Record<LivekitJsCallSession['lifecycle'], string> = {
+  idle: 'Idle',
+  'joining-matrix': 'Joining call',
+  provisioning: 'Preparing connection',
+  'connecting-livekit': 'Connecting to LiveKit',
+  active: 'Connected',
+  stopping: 'Ending connection',
+  failed: 'Connection failed',
+};
+
+function LivekitJsE2EEStatus({
+  lifecycle,
+  failure,
+}: Pick<LivekitJsCallSession, 'lifecycle' | 'failure'>) {
+  if (failure === 'e2ee-unsupported') {
+    return <Text style={{ color: color.Warning.Main }}>Unavailable on this device</Text>;
+  }
+  if (failure === 'setup-failed') {
+    return <Text style={{ color: color.Warning.Main }}>Unavailable</Text>;
+  }
+  if (failure === 'e2ee-import-failed') {
+    return <Text style={{ color: color.Critical.Main }}>Failed to prepare</Text>;
+  }
+  if (lifecycle === 'active') return <Text>Ready</Text>;
+  return <Text>Waiting</Text>;
+}
+
+export function LivekitJsCallProbe({
+  session,
+  onHangup,
+}: {
+  session: Pick<LivekitJsCallSession, 'lifecycle' | 'failure'>;
+  onHangup: () => void;
+}) {
+  const failureMessage =
+    session.failure === 'e2ee-unsupported'
+      ? 'End-to-end encryption is unavailable on this device.'
+      : session.failure === 'e2ee-import-failed'
+        ? 'End-to-end encryption setup failed.'
+        : session.failure === 'setup-failed'
+          ? 'LiveKit JS connection setup failed.'
+          : undefined;
+
+  return (
+    <Box alignItems="Center" justifyContent="Center" direction="Column" gap="200" grow="Yes">
+      <Text size="L400">LiveKit JS connection probe</Text>
+      <Text size="T300" align="Center">
+        Connection-only experiment · media is not published
+      </Text>
+      <Box direction="Column" gap="100" style={{ width: '100%', maxWidth: toRem(382) }}>
+        <Text size="T300">Connection: {livekitJsLifecycleLabels[session.lifecycle]}</Text>
+        <Text size="T300">
+          E2EE readiness: <LivekitJsE2EEStatus {...session} />
+        </Text>
+        {failureMessage && (
+          <Text style={{ color: color.Critical.Main }} size="T300">
+            {failureMessage}
+          </Text>
+        )}
+      </Box>
       <Button size="300" variant="Critical" fill="Soft" radii="300" onClick={onHangup}>
         <Text as="span" size="B300">
           End
@@ -110,6 +478,145 @@ function NativeCallProbe({
   );
 }
 
+export type NativeCallDiagnostic = {
+  code?: string;
+  stage?: string;
+  errorName?: string;
+  errorMessage?: string;
+  cause?: {
+    errorName?: string;
+    errorMessage?: string;
+  };
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === 'object' && value !== null;
+
+const safeString = (value: unknown): string | undefined =>
+  typeof value === 'string' ? value : undefined;
+
+const nativeCallStages = new Set([
+  'joining the call',
+  'no transport',
+  'authorizing',
+  'connecting',
+  'media control',
+]);
+
+const nativeCallCodes = new Set([
+  'actor_unavailable',
+  'audio_failed',
+  'busy',
+  'camera_failed',
+  'close_failed',
+  'connect_failed',
+  'media_unsupported',
+  'screen_share_failed',
+  'stale_connection',
+  'video_failed',
+  'unknown',
+]);
+
+const nativeCallErrorNames = new Set([
+  'AggregateError',
+  'AbortError',
+  'DataError',
+  'DOMException',
+  'Error',
+  'EvalError',
+  'InvalidStateError',
+  'NetworkError',
+  'NotAllowedError',
+  'NotSupportedError',
+  'OperationError',
+  'QuotaExceededError',
+  'RangeError',
+  'ReferenceError',
+  'SecurityError',
+  'SyntaxError',
+  'TimeoutError',
+  'TypeError',
+  'URIError',
+  'UnknownError',
+]);
+
+const nativeCallErrorMessages = new Set([
+  'MatrixRTC device unavailable',
+  'MatrixRTC membership listener setup failed',
+  'MatrixRTC membership publication failed',
+  'MatrixRTC membership wait cancelled',
+  'MatrixRTC slot was not assigned',
+  'No LiveKit transport available',
+  'media kind is not supported on this platform',
+  'native audio failed',
+  'native camera failed',
+  'native screen share failed',
+  'native video failed',
+  'redacted',
+]);
+
+const allowlistedString = (value: unknown, allowlist: Set<string>): string | undefined => {
+  const string = safeString(value);
+  if (string === undefined) return undefined;
+  return allowlist.has(string) ? string : 'redacted';
+};
+
+const safeCause = (value: unknown): NativeCallDiagnostic['cause'] | undefined => {
+  if (!isRecord(value)) return undefined;
+  const errorName = allowlistedString(value.errorName, nativeCallErrorNames);
+  const errorMessage = allowlistedString(value.errorMessage, nativeCallErrorMessages);
+  if (!errorName && !errorMessage) return undefined;
+  return { ...(errorName ? { errorName } : {}), ...(errorMessage ? { errorMessage } : {}) };
+};
+
+export const getNativeCallDiagnostics = (logs: readonly LogEntry[]): NativeCallDiagnostic[] =>
+  logs
+    .filter((entry) => entry.category === 'call' && entry.namespace === 'nativeCallController')
+    .reduce<LogEntry[]>((sorted, entry) => {
+      const index = sorted.findIndex((candidate) => candidate.timestamp < entry.timestamp);
+      if (index === -1) sorted.push(entry);
+      else sorted.splice(index, 0, entry);
+      return sorted;
+    }, [])
+    .map((entry) => {
+      const data = isRecord(entry.data) ? entry.data : {};
+      const code = allowlistedString(data.code, nativeCallCodes);
+      const stage = allowlistedString(data.stage, nativeCallStages);
+      const errorName = allowlistedString(data.errorName, nativeCallErrorNames);
+      const errorMessage = allowlistedString(data.errorMessage, nativeCallErrorMessages);
+      const cause = safeCause(data.cause);
+      return {
+        ...(code ? { code } : {}),
+        ...(stage ? { stage } : {}),
+        ...(errorName ? { errorName } : {}),
+        ...(errorMessage ? { errorMessage } : {}),
+        ...(cause ? { cause } : {}),
+      };
+    });
+
+export const serializeNativeCallDiagnostics = (
+  diagnostics: readonly NativeCallDiagnostic[]
+): string => JSON.stringify(diagnostics, null, 2);
+
+export function useNativeCallDiagnostics(): NativeCallDiagnostic[] {
+  const [diagnostics, setDiagnostics] = useState<NativeCallDiagnostic[]>(() =>
+    getNativeCallDiagnostics(getDebugLogger().getLogs())
+  );
+
+  useEffect(() => {
+    const debugLogger = getDebugLogger();
+    const update = (entry?: LogEntry): void => {
+      if (entry && (entry.category !== 'call' || entry.namespace !== 'nativeCallController')) {
+        return;
+      }
+      setDiagnostics(getNativeCallDiagnostics(debugLogger.getLogs()));
+    };
+    return debugLogger.addListener(update);
+  }, []);
+
+  return diagnostics;
+}
+
 function CallPrescreen() {
   const room = useRoom();
   const callEmbed = useAtomValue(callEmbedAtom);
@@ -183,6 +690,29 @@ function CallJoined({ containerRef }: CallJoinedProps) {
   );
 }
 
+export function useNativeCallProbeSession(
+  nativeCallForRoom: NativeCallSession | undefined,
+  nativeCallsEnabled: boolean
+): boolean {
+  const nativeCallProbeEnabled = isNativeCallProbeEnabled(nativeCallsEnabled);
+  const hungUpSession = useRef<NativeCallSession | undefined>(undefined);
+
+  useEffect(() => {
+    if (
+      !nativeCallForRoom ||
+      nativeCallProbeEnabled ||
+      hungUpSession.current === nativeCallForRoom
+    ) {
+      return;
+    }
+
+    hungUpSession.current = nativeCallForRoom;
+    void nativeCallForRoom.hangup();
+  }, [nativeCallForRoom, nativeCallProbeEnabled]);
+
+  return nativeCallProbeEnabled;
+}
+
 interface CallViewProps {
   resizable?: boolean;
 }
@@ -199,9 +729,19 @@ export function CallView({ resizable }: CallViewProps) {
   const callEmbed = useCallEmbed();
   const callJoined = useCallJoined(callEmbed);
   const nativeCall = useAtomValue(nativeCallAtom);
-
-  const nativeCallForRoom = nativeCall?.roomId === room.roomId ? nativeCall : undefined;
-  const currentJoined = !nativeCallForRoom && callEmbed?.roomId === room.roomId && callJoined;
+  const livekitJsCall = useAtomValue(livekitJsCallAtom);
+  const [nativeCallsEnabled] = useSetting(settingsAtom, 'nativeCallsEnabled');
+  const [livekitJsMediaTestEnabled] = useSetting(settingsAtom, 'livekitJsMediaTestEnabled');
+
+  const nativeCallSessionForRoom = nativeCall?.roomId === room.roomId ? nativeCall : undefined;
+  const nativeCallProbeEnabled = useNativeCallProbeSession(
+    nativeCallSessionForRoom,
+    nativeCallsEnabled
+  );
+  const nativeCallForRoom = nativeCallProbeEnabled ? nativeCallSessionForRoom : undefined;
+  const livekitJsCallForRoom = livekitJsCall?.roomId === room.roomId ? livekitJsCall : undefined;
+  const currentJoined =
+    !nativeCallForRoom && !livekitJsCallForRoom && callEmbed?.roomId === room.roomId && callJoined;
 
   const [heightRatio, setHeightRatio] = useState(isMobile ? 0.3 : 0.72);
   const [availableHeight, setAvailableHeight] = useState(0);
@@ -316,13 +856,25 @@ export function CallView({ resizable }: CallViewProps) {
         />
       )}
 
-      {!currentJoined && !nativeCallForRoom && <CallPrescreen />}
+      {!currentJoined && !nativeCallForRoom && !livekitJsCallForRoom && <CallPrescreen />}
       {nativeCallForRoom ? (
         <NativeCallProbe
           lifecycle={nativeCallForRoom.lifecycle}
+          connectionId={nativeCallForRoom.connectionId}
           error={nativeCallForRoom.error}
           onHangup={() => void nativeCallForRoom.hangup()}
         />
+      ) : canRenderLivekitJsMediaTest(livekitJsMediaTestEnabled, livekitJsCallForRoom) ? (
+        <LivekitJsMediaTestSurface
+          room={livekitJsCallForRoom.room}
+          media={livekitJsCallForRoom.media}
+          onHangup={() => void livekitJsCallForRoom.hangup()}
+        />
+      ) : livekitJsCallForRoom ? (
+        <LivekitJsCallProbe
+          session={livekitJsCallForRoom}
+          onHangup={() => void livekitJsCallForRoom.hangup()}
+        />
       ) : (
         <CallJoined containerRef={callContainerRef} />
       )}
diff --git a/src/app/features/call/LivekitJsMediaTest.test.tsx b/src/app/features/call/LivekitJsMediaTest.test.tsx
new file mode 100644
index 0000000000..a9fbd53a88
--- /dev/null
+++ b/src/app/features/call/LivekitJsMediaTest.test.tsx
@@ -0,0 +1,176 @@
+import { type Context, type ReactNode, useContext } from 'react';
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import type { Room } from 'livekit-client';
+import type { LivekitJsCallSession } from '$state/livekitJsCall';
+import { canRenderLivekitJsMediaTest, LivekitJsMediaTestSurface } from './LivekitJsMediaTest';
+
+const mocks = vi.hoisted(() => ({
+  mockRoomContext: undefined as unknown as Context<Room | undefined>,
+  mockUseTracks: vi.fn<() => readonly unknown[]>(() => []),
+  mockObservedRoom: vi.fn<(room: Room) => void>(),
+  mockUseLocalParticipant: vi.fn<
+    () => {
+      localParticipant: { identity: string };
+      isMicrophoneEnabled: boolean;
+      isCameraEnabled: boolean;
+      isScreenShareEnabled: boolean;
+    }
+  >(),
+}));
+
+vi.mock('@livekit/components-react', async () => {
+  const { createContext } = await import('react');
+  mocks.mockRoomContext = createContext<Room | undefined>(undefined);
+  return {
+    ParticipantTile: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+    RoomAudioRenderer: () => <div data-testid="room-audio-renderer" />,
+    RoomContext: mocks.mockRoomContext,
+    Track: { Source: { Camera: 'camera', ScreenShare: 'screen_share' } },
+    useLocalParticipant: mocks.mockUseLocalParticipant,
+    useTracks: mocks.mockUseTracks,
+    VideoTrack: () => <div data-testid="video-track" />,
+  };
+});
+
+vi.mock('$components/icons/phosphor', () => ({
+  Microphone: 'microphone',
+  MicrophoneSlash: 'microphone-slash',
+  ScreenShare: 'screen-share',
+  VideoCamera: 'video-camera',
+  VideoCameraSlash: 'video-camera-slash',
+  sizedIcon: () => null,
+}));
+
+vi.mock('folds', () => ({
+  Box: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  Button: ({ children, onClick }: { children: ReactNode; onClick: () => void }) => (
+    <button type="button" onClick={onClick}>
+      {children}
+    </button>
+  ),
+  color: { Critical: { Main: 'red' } },
+  IconButton: ({
+    children,
+    onClick,
+    disabled,
+    'aria-label': ariaLabel,
+  }: {
+    children: ReactNode;
+    onClick: () => void;
+    disabled?: boolean;
+    'aria-label': string;
+  }) => (
+    <button type="button" aria-label={ariaLabel} onClick={onClick} disabled={disabled}>
+      {children}
+    </button>
+  ),
+  Text: ({ children }: { children: ReactNode }) => <span>{children}</span>,
+}));
+
+const room = {
+  connect: vi.fn<() => Promise<void>>(),
+  disconnect: vi.fn<() => Promise<void>>(),
+} as unknown as Room;
+
+const makeSession = (overrides: Partial<LivekitJsCallSession> = {}): LivekitJsCallSession => ({
+  roomId: '!room:example.org',
+  lifecycle: 'active',
+  failure: null,
+  room,
+  media: {
+    setMicrophoneEnabled: vi.fn<() => Promise<void>>().mockResolvedValue(),
+    setCameraEnabled: vi.fn<() => Promise<void>>().mockResolvedValue(),
+    setScreenShareEnabled: vi.fn<() => Promise<void>>().mockResolvedValue(),
+  },
+  hangup: vi.fn<() => Promise<void>>().mockResolvedValue(),
+  ...overrides,
+});
+
+beforeEach(() => {
+  mocks.mockUseTracks.mockReset();
+  mocks.mockUseTracks.mockReturnValue([]);
+  mocks.mockObservedRoom.mockReset();
+  mocks.mockUseLocalParticipant.mockReset();
+  mocks.mockUseLocalParticipant.mockImplementation(() => {
+    const activeRoom = useContext(mocks.mockRoomContext);
+    if (activeRoom) mocks.mockObservedRoom(activeRoom);
+    return {
+      localParticipant: { identity: 'local-user' },
+      isMicrophoneEnabled: false,
+      isCameraEnabled: false,
+      isScreenShareEnabled: false,
+    };
+  });
+});
+
+describe('LiveKit JS manual media test', () => {
+  it('renders only for an enabled active session with the controller bridge', () => {
+    const session = makeSession();
+    expect(canRenderLivekitJsMediaTest(true, session)).toBe(true);
+    expect(canRenderLivekitJsMediaTest(false, session)).toBe(false);
+    expect(canRenderLivekitJsMediaTest(true, { ...session, lifecycle: 'joining-matrix' })).toBe(
+      false
+    );
+    expect(canRenderLivekitJsMediaTest(true, { ...session, media: undefined })).toBe(false);
+  });
+
+  it('provides the controller-owned Room and does not connect or capture on render', () => {
+    const session = makeSession();
+    render(
+      <LivekitJsMediaTestSurface room={session.room!} media={session.media!} onHangup={() => {}} />
+    );
+
+    expect(mocks.mockObservedRoom).toHaveBeenCalledWith(room);
+    expect(room.connect).not.toHaveBeenCalled();
+    expect(room.disconnect).not.toHaveBeenCalled();
+    expect(session.media!.setMicrophoneEnabled).not.toHaveBeenCalled();
+    expect(session.media!.setCameraEnabled).not.toHaveBeenCalled();
+    expect(session.media!.setScreenShareEnabled).not.toHaveBeenCalled();
+    expect(screen.getByText(/manual local media test only/i)).toBeInTheDocument();
+    expect(screen.getByTestId('room-audio-renderer')).toBeInTheDocument();
+  });
+
+  it('calls the narrow facade directly from manual controls', async () => {
+    const session = makeSession();
+    render(
+      <LivekitJsMediaTestSurface room={session.room!} media={session.media!} onHangup={() => {}} />
+    );
+
+    fireEvent.click(screen.getByRole('button', { name: 'Turn on microphone' }));
+    await waitFor(() => expect(session.media!.setMicrophoneEnabled).toHaveBeenCalledWith(true));
+    fireEvent.click(screen.getByRole('button', { name: 'Start camera' }));
+    await waitFor(() => expect(session.media!.setCameraEnabled).toHaveBeenCalledWith(true));
+    fireEvent.click(screen.getByRole('button', { name: 'Start screen sharing' }));
+
+    await waitFor(() => expect(session.media!.setScreenShareEnabled).toHaveBeenCalledWith(true));
+  });
+
+  it('shows safe controller failure text without exposing raw errors', async () => {
+    const session = makeSession();
+    session.media!.setCameraEnabled = vi
+      .fn<() => Promise<void>>()
+      .mockRejectedValue({ code: 'e2ee-key-not-ready', secret: 'do-not-show' });
+    render(
+      <LivekitJsMediaTestSurface room={session.room!} media={session.media!} onHangup={() => {}} />
+    );
+
+    fireEvent.click(screen.getByRole('button', { name: 'Start camera' }));
+
+    expect(await screen.findByText('Waiting for encrypted media keys.')).toBeInTheDocument();
+    expect(screen.queryByText(/do-not-show|secret/i)).not.toBeInTheDocument();
+  });
+
+  it('keeps End as the only teardown action', () => {
+    const onHangup = vi.fn<() => void>();
+    const session = makeSession();
+    render(
+      <LivekitJsMediaTestSurface room={session.room!} media={session.media!} onHangup={onHangup} />
+    );
+
+    fireEvent.click(screen.getByRole('button', { name: 'End' }));
+
+    expect(onHangup).toHaveBeenCalledOnce();
+    expect(room.disconnect).not.toHaveBeenCalled();
+  });
+});
diff --git a/src/app/features/call/LivekitJsMediaTest.tsx b/src/app/features/call/LivekitJsMediaTest.tsx
new file mode 100644
index 0000000000..b09abd9e50
--- /dev/null
+++ b/src/app/features/call/LivekitJsMediaTest.tsx
@@ -0,0 +1,227 @@
+import { useState } from 'react';
+import {
+  Microphone,
+  MicrophoneSlash,
+  ScreenShare,
+  VideoCamera,
+  VideoCameraSlash,
+  sizedIcon,
+} from '$components/icons/phosphor';
+import { Box, Button, color, IconButton, Text } from 'folds';
+import {
+  ParticipantTile,
+  RoomAudioRenderer,
+  RoomContext,
+  useLocalParticipant,
+  useTracks,
+  VideoTrack,
+} from '@livekit/components-react';
+import { Track, type Room } from 'livekit-client';
+import type { LivekitJsCallSession } from '$state/livekitJsCall';
+import type { LivekitJsMediaFacade, LivekitJsMediaFailure } from './livekitJsController';
+
+export const canRenderLivekitJsMediaTest = (
+  enabled: boolean,
+  session: LivekitJsCallSession | undefined
+): session is LivekitJsCallSession & { room: Room; media: LivekitJsMediaFacade } =>
+  enabled &&
+  session?.lifecycle === 'active' &&
+  session.room !== undefined &&
+  session.media !== undefined;
+
+const mediaFailureMessages: Record<LivekitJsMediaFailure, string> = {
+  'media-test-disabled': 'Manual media test is disabled.',
+  'e2ee-unsupported': 'Encrypted media is unavailable.',
+  'e2ee-key-not-ready': 'Waiting for encrypted media keys.',
+  'e2ee-key-failed': 'Encrypted media setup failed.',
+  'room-not-active': 'The LiveKit room is not active.',
+  'media-operation-failed': 'The media operation failed.',
+};
+
+const getMediaFailureMessage = (error: unknown): string => {
+  if (
+    typeof error === 'object' &&
+    error !== null &&
+    'code' in error &&
+    typeof error.code === 'string' &&
+    error.code in mediaFailureMessages
+  ) {
+    return mediaFailureMessages[error.code as LivekitJsMediaFailure];
+  }
+  return 'The media operation failed.';
+};
+
+function VideoTiles({ localIdentity }: { localIdentity: string }) {
+  const tracks = useTracks([Track.Source.Camera, Track.Source.ScreenShare], {
+    onlySubscribed: false,
+  });
+
+  if (tracks.length === 0) {
+    return <Text size="T300">No camera or screen-share tracks are active.</Text>;
+  }
+
+  return (
+    <Box
+      style={{
+        display: 'grid',
+        gridTemplateColumns: 'repeat(auto-fit, minmax(180px, 1fr))',
+        gap: '8px',
+        width: '100%',
+      }}
+    >
+      {tracks.map((track) => (
+        <ParticipantTile
+          key={`${track.participant.identity}-${track.source}`}
+          trackRef={track}
+          style={{
+            minHeight: '120px',
+            overflow: 'hidden',
+            borderRadius: '12px',
+            background: 'var(--sable-surface-container-low)',
+          }}
+        >
+          <VideoTrack trackRef={track} />
+          <Text
+            size="T200"
+            style={{
+              position: 'absolute',
+              bottom: '8px',
+              left: '8px',
+              padding: '2px 6px',
+              borderRadius: '6px',
+              background: 'rgba(0, 0, 0, 0.65)',
+            }}
+          >
+            {track.participant.identity === localIdentity ? 'You' : track.participant.identity}
+          </Text>
+        </ParticipantTile>
+      ))}
+    </Box>
+  );
+}
+
+function MediaControl({
+  label,
+  enabled,
+  pending,
+  icon,
+  onClick,
+}: {
+  label: string;
+  enabled: boolean;
+  pending: boolean;
+  icon: typeof Microphone;
+  onClick: () => void;
+}) {
+  return (
+    <IconButton
+      aria-label={label}
+      variant={enabled ? 'Success' : 'Surface'}
+      fill="Soft"
+      radii="300"
+      size="300"
+      outlined
+      disabled={pending}
+      onClick={onClick}
+    >
+      {sizedIcon(icon, '100', { filled: enabled })}
+    </IconButton>
+  );
+}
+
+export function LivekitJsMediaTestSurface({
+  room,
+  media,
+  onHangup,
+}: {
+  room: Room;
+  media: LivekitJsMediaFacade;
+  onHangup: () => void;
+}) {
+  return (
+    <RoomContext.Provider value={room}>
+      <LivekitJsMediaTestContent media={media} onHangup={onHangup} />
+    </RoomContext.Provider>
+  );
+}
+
+function LivekitJsMediaTestContent({
+  media,
+  onHangup,
+}: {
+  media: LivekitJsMediaFacade;
+  onHangup: () => void;
+}) {
+  const { localParticipant, isMicrophoneEnabled, isCameraEnabled, isScreenShareEnabled } =
+    useLocalParticipant();
+  const [pending, setPending] = useState<'microphone' | 'camera' | 'screen' | undefined>();
+  const [error, setError] = useState<string>();
+
+  const runMediaAction = async (
+    kind: 'microphone' | 'camera' | 'screen',
+    action: () => Promise<void>
+  ): Promise<void> => {
+    if (pending) return;
+    setPending(kind);
+    setError(undefined);
+    try {
+      await action();
+    } catch (actionError) {
+      setError(getMediaFailureMessage(actionError));
+    } finally {
+      setPending(undefined);
+    }
+  };
+
+  return (
+    <Box alignItems="Center" justifyContent="Center" direction="Column" gap="200" grow="Yes">
+      <RoomAudioRenderer />
+      <Text size="L400">LiveKit JS manual media test</Text>
+      <Text size="T300" align="Center">
+        Manual local media test only · encrypted media is required · not release-ready
+      </Text>
+      <VideoTiles localIdentity={localParticipant.identity} />
+      <Box alignItems="Center" gap="200">
+        <MediaControl
+          label={isMicrophoneEnabled ? 'Turn off microphone' : 'Turn on microphone'}
+          enabled={isMicrophoneEnabled}
+          pending={pending !== undefined}
+          icon={isMicrophoneEnabled ? Microphone : MicrophoneSlash}
+          onClick={() =>
+            void runMediaAction('microphone', () =>
+              media.setMicrophoneEnabled(!isMicrophoneEnabled)
+            )
+          }
+        />
+        <MediaControl
+          label={isCameraEnabled ? 'Stop camera' : 'Start camera'}
+          enabled={isCameraEnabled}
+          pending={pending !== undefined}
+          icon={isCameraEnabled ? VideoCamera : VideoCameraSlash}
+          onClick={() =>
+            void runMediaAction('camera', () => media.setCameraEnabled(!isCameraEnabled))
+          }
+        />
+        <MediaControl
+          label={isScreenShareEnabled ? 'Stop screen sharing' : 'Start screen sharing'}
+          enabled={isScreenShareEnabled}
+          pending={pending !== undefined}
+          icon={ScreenShare}
+          onClick={() =>
+            void runMediaAction('screen', () => media.setScreenShareEnabled(!isScreenShareEnabled))
+          }
+        />
+      </Box>
+      {error && (
+        <Text size="T300" style={{ color: color.Critical.Main }}>
+          {error}
+        </Text>
+      )}
+      <Button size="300" variant="Critical" fill="Soft" radii="300" onClick={onHangup}>
+        <Text as="span" size="B300">
+          End
+        </Text>
+      </Button>
+    </Box>
+  );
+}
diff --git a/src/app/features/call/callStartSelection.test.ts b/src/app/features/call/callStartSelection.test.ts
new file mode 100644
index 0000000000..eeb520ea2e
--- /dev/null
+++ b/src/app/features/call/callStartSelection.test.ts
@@ -0,0 +1,19 @@
+import { describe, expect, it } from 'vitest';
+import { selectCallStartOwner } from './callStartSelection';
+
+describe('selectCallStartOwner', () => {
+  it('prioritizes the enabled supported LiveKit JS probe', () => {
+    expect(selectCallStartOwner({ livekitJsProbeEnabled: true, nativeProbeEnabled: true })).toBe(
+      'livekit-js'
+    );
+  });
+
+  it('preserves native then Element Call fallback priority', () => {
+    expect(selectCallStartOwner({ livekitJsProbeEnabled: false, nativeProbeEnabled: true })).toBe(
+      'native'
+    );
+    expect(selectCallStartOwner({ livekitJsProbeEnabled: false, nativeProbeEnabled: false })).toBe(
+      'element'
+    );
+  });
+});
diff --git a/src/app/features/call/callStartSelection.ts b/src/app/features/call/callStartSelection.ts
new file mode 100644
index 0000000000..e408896872
--- /dev/null
+++ b/src/app/features/call/callStartSelection.ts
@@ -0,0 +1,13 @@
+export type CallStartOwner = 'livekit-js' | 'native' | 'element';
+
+export const selectCallStartOwner = ({
+  livekitJsProbeEnabled,
+  nativeProbeEnabled,
+}: {
+  livekitJsProbeEnabled: boolean;
+  nativeProbeEnabled: boolean;
+}): CallStartOwner => {
+  if (livekitJsProbeEnabled) return 'livekit-js';
+  if (nativeProbeEnabled) return 'native';
+  return 'element';
+};
diff --git a/src/app/features/call/livekitJsCallProbe.test.ts b/src/app/features/call/livekitJsCallProbe.test.ts
new file mode 100644
index 0000000000..b7038c5e69
--- /dev/null
+++ b/src/app/features/call/livekitJsCallProbe.test.ts
@@ -0,0 +1,20 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+const desktopTauri = vi.hoisted(() => vi.fn<() => boolean>());
+
+vi.mock('$utils/platform', () => ({ isDesktopTauri: desktopTauri }));
+
+import { isLivekitJsCallProbeEnabled } from './livekitJsCallProbe';
+
+beforeEach(() => desktopTauri.mockReset());
+
+describe('isLivekitJsCallProbeEnabled', () => {
+  it('requires both the persisted setting and supported desktop Tauri runtime', () => {
+    desktopTauri.mockReturnValue(true);
+    expect(isLivekitJsCallProbeEnabled(false)).toBe(false);
+    expect(isLivekitJsCallProbeEnabled(true)).toBe(true);
+
+    desktopTauri.mockReturnValue(false);
+    expect(isLivekitJsCallProbeEnabled(true)).toBe(false);
+  });
+});
diff --git a/src/app/features/call/livekitJsCallProbe.ts b/src/app/features/call/livekitJsCallProbe.ts
new file mode 100644
index 0000000000..2ef9076ad7
--- /dev/null
+++ b/src/app/features/call/livekitJsCallProbe.ts
@@ -0,0 +1,4 @@
+import { isDesktopTauri } from '$utils/platform';
+
+export const isLivekitJsCallProbeEnabled = (enabled = false): boolean =>
+  enabled && isDesktopTauri();
diff --git a/src/app/features/call/livekitJsController.test.ts b/src/app/features/call/livekitJsController.test.ts
new file mode 100644
index 0000000000..acd3fd3fe9
--- /dev/null
+++ b/src/app/features/call/livekitJsController.test.ts
@@ -0,0 +1,917 @@
+import { beforeEach, describe, expect, it, vi, type Mock } from 'vitest';
+import {
+  MatrixRTCSessionEvent,
+  type CallMembership,
+  type MatrixRTCSession,
+} from '$types/matrix-sdk';
+import type { MatrixClient, Room as MatrixRoom } from '$types/matrix-sdk';
+import type { Room as LivekitRoom, RoomOptions } from 'livekit-client';
+import {
+  createLivekitJsController,
+  type LivekitJsControllerDependencies,
+  type LivekitJsPlatformBridge,
+  type LivekitJsPlatformStartRequest,
+} from './livekitJsController';
+import type { PlatformCallEvent } from '$plugins/call/platformCallLifecycle';
+import type {
+  LivekitMatrixKeyProvider,
+  LivekitMatrixKeyProviderState,
+} from './livekitMatrixKeyProvider';
+import { resetCallOwnerForTests } from '$state/callOwner';
+
+const transport = { type: 'livekit' as const, livekit_service_url: 'https://sfu.example' };
+const room = { roomId: '!room:example.org' } as MatrixRoom;
+const membership = {
+  userId: '@alice:example.org',
+  deviceId: 'DEVICE',
+  rtcBackendIdentity: 'local-backend-identity',
+} as CallMembership;
+
+const deferred = <T>(): {
+  promise: Promise<T>;
+  resolve: (value: T) => void;
+} => {
+  let resolve!: (value: T) => void;
+  const promise = new Promise<T>((promiseResolve) => {
+    resolve = promiseResolve;
+  });
+  return { promise, resolve };
+};
+
+type SessionHandler = (...args: unknown[]) => void;
+
+type TestSession = MatrixRTCSession & {
+  handlers: Map<MatrixRTCSessionEvent, SessionHandler>;
+};
+
+const makeSession = (order: string[] = []): TestSession => {
+  const handlers = new Map<MatrixRTCSessionEvent, SessionHandler>();
+  const session = {
+    handlers,
+    memberships: [] as CallMembership[],
+    slotId: 'm.call#real-slot',
+    on: vi.fn<(...args: unknown[]) => void>().mockImplementation((event, handler) => {
+      handlers.set(event as MatrixRTCSessionEvent, handler as SessionHandler);
+    }),
+    removeListener: vi.fn<(...args: unknown[]) => void>().mockImplementation((event, handler) => {
+      if (handlers.get(event as MatrixRTCSessionEvent) === handler) {
+        handlers.delete(event as MatrixRTCSessionEvent);
+      }
+    }),
+    joinRTCSession: vi
+      .fn<(...args: unknown[]) => void>()
+      .mockImplementation(() => order.push('join')),
+    leaveRoomSession: vi.fn<MatrixRTCSession['leaveRoomSession']>().mockImplementation(async () => {
+      order.push('leave');
+      return true;
+    }),
+  } as unknown as TestSession;
+  return session;
+};
+
+const emitOwnMembership = (session: TestSession): void => {
+  session.memberships = [membership];
+  session.handlers.get(MatrixRTCSessionEvent.MembershipsChanged)?.([], [membership]);
+};
+
+type FakeProvider = {
+  state: LivekitMatrixKeyProviderState;
+  attach: Mock<(session: MatrixRTCSession) => void>;
+  detach: Mock<() => void>;
+  setLocalOutboundIdentity: Mock<(identity: string | undefined) => void>;
+  getKeyState: Mock<() => LivekitMatrixKeyProviderState>;
+  subscribe: Mock<
+    (listener: (state: Readonly<LivekitMatrixKeyProviderState>) => void) => () => void
+  >;
+};
+
+const makeProvider = (state: Partial<LivekitMatrixKeyProviderState> = {}): FakeProvider => {
+  const provider = {
+    state: {
+      ready: false,
+      localOutboundIdentity: null,
+      keyIndex: null,
+      lastImportFailure: null,
+      ...state,
+    },
+    attach: vi.fn<(session: MatrixRTCSession) => void>(),
+    detach: vi.fn<() => void>(),
+    setLocalOutboundIdentity: vi.fn<(identity: string | undefined) => void>(),
+    getKeyState: vi.fn<() => LivekitMatrixKeyProviderState>(),
+    subscribe:
+      vi.fn<(listener: (state: Readonly<LivekitMatrixKeyProviderState>) => void) => () => void>(),
+  } as FakeProvider;
+  provider.getKeyState.mockImplementation(() => provider.state);
+  provider.subscribe.mockImplementation((listener) => {
+    listener(provider.state);
+    return () => undefined;
+  });
+  return provider;
+};
+
+const makeClient = (session: MatrixRTCSession): MatrixClient =>
+  ({
+    getDeviceId: () => 'DEVICE',
+    getSafeUserId: () => '@alice:example.org',
+    matrixRTC: { getRoomSession: () => session },
+  }) as unknown as MatrixClient;
+
+const makeDependencies = (
+  session: TestSession,
+  order: string[],
+  provider = makeProvider()
+): {
+  dependencies: LivekitJsControllerDependencies;
+  provider: FakeProvider;
+  roomOptions: { value?: RoomOptions };
+  livekitRoom: {
+    connect: Mock<(url: string, token: string, options?: unknown) => Promise<void>>;
+    disconnect: Mock<() => Promise<void>>;
+    localParticipant: {
+      setMicrophoneEnabled: Mock<LivekitRoom['localParticipant']['setMicrophoneEnabled']>;
+      setCameraEnabled: Mock<LivekitRoom['localParticipant']['setCameraEnabled']>;
+      setScreenShareEnabled: Mock<LivekitRoom['localParticipant']['setScreenShareEnabled']>;
+    };
+  };
+  mediaParticipant: {
+    setMicrophoneEnabled: Mock<LivekitRoom['localParticipant']['setMicrophoneEnabled']>;
+    setCameraEnabled: Mock<LivekitRoom['localParticipant']['setCameraEnabled']>;
+    setScreenShareEnabled: Mock<LivekitRoom['localParticipant']['setScreenShareEnabled']>;
+  };
+} => {
+  const worker = { terminate: vi.fn<() => void>() } as unknown as Worker;
+  provider.attach.mockImplementation(() => order.push('attach'));
+  provider.detach.mockImplementation(() => order.push('detach'));
+  const mediaParticipant = {
+    setMicrophoneEnabled: vi
+      .fn<LivekitRoom['localParticipant']['setMicrophoneEnabled']>()
+      .mockResolvedValue(undefined),
+    setCameraEnabled: vi
+      .fn<LivekitRoom['localParticipant']['setCameraEnabled']>()
+      .mockResolvedValue(undefined),
+    setScreenShareEnabled: vi
+      .fn<LivekitRoom['localParticipant']['setScreenShareEnabled']>()
+      .mockResolvedValue(undefined),
+  };
+  const livekitRoom = {
+    localParticipant: mediaParticipant,
+    connect: vi
+      .fn<(url: string, token: string, options?: unknown) => Promise<void>>()
+      .mockImplementation(async () => {
+        order.push('connect');
+      }),
+    disconnect: vi.fn<() => Promise<void>>().mockImplementation(async () => {
+      order.push('disconnect');
+    }),
+  };
+  const roomOptions: { value?: RoomOptions } = {};
+  return {
+    provider,
+    roomOptions,
+    livekitRoom,
+    mediaParticipant,
+    dependencies: {
+      createKeyProvider: () => provider as unknown as LivekitMatrixKeyProvider,
+      isE2EESupported: () => true,
+      createWorker: () => {
+        order.push('worker');
+        return worker;
+      },
+      createRoom: (options) => {
+        order.push('room');
+        roomOptions.value = options;
+        return livekitRoom;
+      },
+      getPreferredTransport: async () => {
+        order.push('transport');
+        return transport;
+      },
+      provisionToken: async () => {
+        order.push('provision');
+        return { url: 'wss://livekit.example', jwt: 'jwt' };
+      },
+    },
+  };
+};
+
+const connectToActive = async (
+  controller: ReturnType<typeof createLivekitJsController>,
+  session: TestSession
+): Promise<void> => {
+  const connectPromise = controller.connect({ mx: makeClient(session), room });
+  await vi.waitFor(() =>
+    expect(session.on).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.MembershipsChanged,
+      expect.any(Function)
+    )
+  );
+  emitOwnMembership(session);
+  await connectPromise;
+};
+
+type FakePlatform = {
+  bridge: LivekitJsPlatformBridge;
+  getCapabilities: Mock<() => Promise<unknown>>;
+  start: Mock<(request: LivekitJsPlatformStartRequest) => Promise<unknown>>;
+  stop: Mock<(request: { sessionId: string }) => Promise<unknown>>;
+  emit: (event: PlatformCallEvent) => void;
+};
+
+const makePlatform = (supported: boolean, order: string[]): FakePlatform => {
+  let handler: ((event: PlatformCallEvent) => void) | undefined;
+  const getCapabilities = vi.fn<() => Promise<unknown>>().mockImplementation(async () => {
+    order.push('platform-caps');
+    return { supported, microphone: supported, playback: supported };
+  });
+  const start = vi
+    .fn<(request: LivekitJsPlatformStartRequest) => Promise<unknown>>()
+    .mockImplementation(async (request) => {
+      order.push(`platform-start:${request.microphone}:${request.playback}`);
+      return { sessionId: request.sessionId };
+    });
+  const stop = vi
+    .fn<(request: { sessionId: string }) => Promise<unknown>>()
+    .mockImplementation(async () => {
+      order.push('platform-stop');
+      return {};
+    });
+  const bridge: LivekitJsPlatformBridge = {
+    getCapabilities: getCapabilities as LivekitJsPlatformBridge['getCapabilities'],
+    start: start as LivekitJsPlatformBridge['start'],
+    stop: stop as LivekitJsPlatformBridge['stop'],
+    onEvent: async (nextHandler) => {
+      handler = nextHandler;
+      return () => {
+        order.push('platform-unlisten');
+      };
+    },
+  };
+  return { bridge, getCapabilities, start, stop, emit: (event) => handler?.(event) };
+};
+
+describe('livekit JS controller', () => {
+  beforeEach(() => resetCallOwnerForTests());
+
+  it('attaches E2EE before joining and provisions before connecting one no-media Room', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const { dependencies, provider, roomOptions, mediaParticipant, livekitRoom } = makeDependencies(
+      session,
+      order
+    );
+    const controller = createLivekitJsController(dependencies);
+
+    await connectToActive(controller, session);
+
+    expect(order).toEqual([
+      'attach',
+      'transport',
+      'join',
+      'provision',
+      'worker',
+      'room',
+      'connect',
+    ]);
+    expect(provider.attach).toHaveBeenCalledBefore(session.joinRTCSession as Mock);
+    expect(session.joinRTCSession).toHaveBeenCalledWith(
+      { userId: '@alice:example.org', deviceId: 'DEVICE', memberId: '@alice:example.org:DEVICE' },
+      [transport],
+      undefined,
+      { callIntent: 'audio', notificationType: 'notification', manageMediaKeys: true }
+    );
+    expect(roomOptions.value?.encryption).toEqual({
+      keyProvider: provider,
+      worker: expect.anything(),
+    });
+    expect(mediaParticipant.setMicrophoneEnabled).not.toHaveBeenCalled();
+    expect(mediaParticipant.setCameraEnabled).not.toHaveBeenCalled();
+    expect(mediaParticipant.setScreenShareEnabled).not.toHaveBeenCalled();
+    expect(controller.getState().room).toBe(livekitRoom);
+    expect(controller.getState().media).toBeUndefined();
+    expect(controller.getState().lifecycle).toBe('active');
+  });
+
+  it('refuses unsupported E2EE without joining or creating a Room', async () => {
+    const session = makeSession();
+    const { dependencies } = makeDependencies(session, []);
+    dependencies.isE2EESupported = () => false;
+    const controller = createLivekitJsController(dependencies);
+
+    await controller.connect({ mx: makeClient(session), room });
+
+    expect(session.joinRTCSession).not.toHaveBeenCalled();
+    expect(controller.getState()).toMatchObject({
+      lifecycle: 'failed',
+      failure: 'e2ee-unsupported',
+    });
+  });
+
+  it('refuses a provider import failure without connecting LiveKit', async () => {
+    const session = makeSession();
+    const provider = makeProvider({ lastImportFailure: 'import-failed' });
+    const { dependencies } = makeDependencies(session, [], provider);
+    const controller = createLivekitJsController(dependencies);
+
+    await controller.connect({ mx: makeClient(session), room });
+
+    expect(session.joinRTCSession).not.toHaveBeenCalled();
+    expect(controller.getState()).toMatchObject({
+      lifecycle: 'failed',
+      failure: 'e2ee-import-failed',
+    });
+  });
+
+  it('disconnects LiveKit before leaving MatrixRTC and cleans up idempotently', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const { dependencies, provider } = makeDependencies(session, order);
+    const controller = createLivekitJsController(dependencies);
+    await connectToActive(controller, session);
+
+    await Promise.all([controller.disconnect(), controller.disconnect()]);
+
+    expect(order.indexOf('disconnect')).toBeGreaterThan(-1);
+    expect(order.indexOf('detach')).toBeGreaterThan(order.indexOf('disconnect'));
+    expect(order.indexOf('disconnect')).toBeLessThan(order.indexOf('leave'));
+    expect(order.indexOf('detach')).toBeLessThan(order.indexOf('leave'));
+    expect(provider.detach).toHaveBeenCalledOnce();
+    expect(controller.getState().room).toBeUndefined();
+    expect(controller.getState().media).toBeUndefined();
+    expect(controller.getState().lifecycle).toBe('idle');
+  });
+
+  it('detaches once when setup fails after MatrixRTC join', async () => {
+    const session = makeSession();
+    const { dependencies, provider } = makeDependencies(session, []);
+    dependencies.provisionToken = vi
+      .fn<NonNullable<LivekitJsControllerDependencies['provisionToken']>>()
+      .mockRejectedValue(new Error('provision failed'));
+    const controller = createLivekitJsController(dependencies);
+    const connectPromise = controller.connect({ mx: makeClient(session), room });
+
+    await vi.waitFor(() =>
+      expect(session.on).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipsChanged,
+        expect.any(Function)
+      )
+    );
+    emitOwnMembership(session);
+    await connectPromise;
+
+    expect(provider.detach).toHaveBeenCalledOnce();
+    expect(session.leaveRoomSession).toHaveBeenCalledOnce();
+    expect(controller.getState().room).toBeUndefined();
+    expect(controller.getState().media).toBeUndefined();
+    expect(controller.getState().lifecycle).toBe('failed');
+  });
+
+  it('cancels during provisioning without creating a Room or becoming active', async () => {
+    const session = makeSession();
+    const pendingProvision = deferred<{ url: string; jwt: string }>();
+    const { dependencies, provider, roomOptions } = makeDependencies(session, []);
+    dependencies.provisionToken = vi
+      .fn<NonNullable<LivekitJsControllerDependencies['provisionToken']>>()
+      .mockImplementation(() => pendingProvision.promise);
+    const controller = createLivekitJsController(dependencies);
+    const connectPromise = controller.connect({ mx: makeClient(session), room });
+
+    await vi.waitFor(() =>
+      expect(session.on).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipsChanged,
+        expect.any(Function)
+      )
+    );
+    emitOwnMembership(session);
+    await vi.waitFor(() => expect(dependencies.provisionToken).toHaveBeenCalledOnce());
+    const disconnectPromise = controller.disconnect();
+    pendingProvision.resolve({ url: 'wss://livekit.example', jwt: 'jwt' });
+    await Promise.all([connectPromise, disconnectPromise]);
+
+    expect(roomOptions.value).toBeUndefined();
+    expect(provider.detach).toHaveBeenCalledOnce();
+    expect(session.leaveRoomSession).toHaveBeenCalledOnce();
+    expect(controller.getState().room).toBeUndefined();
+    expect(controller.getState().media).toBeUndefined();
+    expect(controller.getState().lifecycle).toBe('idle');
+  });
+
+  it('cancels during Room.connect and cleans up its stale room before leaving', async () => {
+    const session = makeSession();
+    const pendingConnect = deferred<void>();
+    const { dependencies, provider } = makeDependencies(session, []);
+    const livekitRoom = {
+      connect: vi
+        .fn<(url: string, token: string, options?: unknown) => Promise<void>>()
+        .mockImplementation(() => pendingConnect.promise),
+      disconnect: vi.fn<() => Promise<void>>().mockResolvedValue(undefined),
+    };
+    dependencies.createRoom = () => livekitRoom;
+    const controller = createLivekitJsController(dependencies);
+    const connectPromise = controller.connect({ mx: makeClient(session), room });
+
+    await vi.waitFor(() =>
+      expect(session.on).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipsChanged,
+        expect.any(Function)
+      )
+    );
+    emitOwnMembership(session);
+    await vi.waitFor(() => expect(livekitRoom.connect).toHaveBeenCalledOnce());
+    const disconnectPromise = controller.disconnect();
+    pendingConnect.resolve();
+    await Promise.all([connectPromise, disconnectPromise]);
+
+    expect(livekitRoom.disconnect).toHaveBeenCalledOnce();
+    expect(provider.detach).toHaveBeenCalledOnce();
+    expect(session.leaveRoomSession).toHaveBeenCalledOnce();
+    expect(controller.getState().lifecycle).toBe('idle');
+    expect(controller.getState().lifecycle).not.toBe('active');
+  });
+
+  it('rejects duplicate setup and cancellation leaves started MatrixRTC membership', async () => {
+    const session = makeSession();
+    const { dependencies, provider } = makeDependencies(session, []);
+    const controller = createLivekitJsController(dependencies);
+    const firstConnect = controller.connect({ mx: makeClient(session), room });
+    await vi.waitFor(() =>
+      expect(session.on).toHaveBeenCalledWith(
+        MatrixRTCSessionEvent.MembershipsChanged,
+        expect.any(Function)
+      )
+    );
+
+    await expect(controller.connect({ mx: makeClient(session), room })).rejects.toThrow(
+      'already in use'
+    );
+    await controller.disconnect();
+    await firstConnect;
+
+    expect(session.leaveRoomSession).toHaveBeenCalledWith(5000);
+    expect(provider.detach).toHaveBeenCalledOnce();
+    expect(controller.getState().lifecycle).toBe('idle');
+  });
+
+  it('does not expose media publication methods', () => {
+    const session = makeSession();
+    const { dependencies } = makeDependencies(session, []);
+    const controller = createLivekitJsController(dependencies);
+
+    expect(Object.keys(controller).toSorted()).toEqual([
+      'connect',
+      'disconnect',
+      'getState',
+      'subscribe',
+    ]);
+    expect('publishTrack' in controller).toBe(false);
+    expect('setMicrophoneEnabled' in controller).toBe(false);
+    expect('setCameraEnabled' in controller).toBe(false);
+    expect('setScreenShareEnabled' in controller).toBe(false);
+  });
+
+  it('disconnects the old mode before replacing it with a manual-media controller', async () => {
+    const firstSession = makeSession();
+    const first = makeDependencies(firstSession, []);
+    const firstController = createLivekitJsController(first.dependencies);
+    await connectToActive(firstController, firstSession);
+
+    const replacementSession = makeSession();
+    const replacement = makeDependencies(replacementSession, [], makeProvider({ ready: true }));
+    const replacementController = createLivekitJsController(replacement.dependencies, {
+      manualMediaTest: true,
+    });
+
+    await firstController.disconnect();
+    expect(firstController.getState().room).toBeUndefined();
+    await connectToActive(replacementController, replacementSession);
+
+    expect(replacementController.getState().media).toBeDefined();
+  });
+
+  it('publishes media only through the explicit manual-media-test controller', async () => {
+    const session = makeSession();
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant, livekitRoom } = makeDependencies(session, [], provider);
+    // No platform bridge configured: use an explicit unsupported (desktop) bridge.
+    dependencies.platformBridge = makePlatform(false, []).bridge;
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+    await controller.setCameraEnabled(true);
+    await controller.setScreenShareEnabled(true);
+
+    expect(mediaParticipant.setMicrophoneEnabled).toHaveBeenCalledWith(true);
+    expect(mediaParticipant.setCameraEnabled).toHaveBeenCalledWith(true);
+    expect(mediaParticipant.setScreenShareEnabled).toHaveBeenCalledWith(true);
+    expect(controller.getState().room).toBe(livekitRoom);
+    expect(controller.getState().media?.setMicrophoneEnabled).toBeDefined();
+  });
+
+  it('refuses manual media when the local key is not ready or has failed', async () => {
+    const session = makeSession();
+    const provider = makeProvider();
+    const { dependencies } = makeDependencies(session, [], provider);
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+
+    await connectToActive(controller, session);
+    await expect(controller.setMicrophoneEnabled(true)).rejects.toMatchObject({
+      code: 'e2ee-key-not-ready',
+    });
+
+    provider.state.lastImportFailure = 'import-failed';
+    await expect(controller.setCameraEnabled(true)).rejects.toMatchObject({
+      code: 'e2ee-key-failed',
+    });
+  });
+
+  it('refuses manual media when runtime E2EE support is unavailable', async () => {
+    const session = makeSession();
+    const { dependencies } = makeDependencies(session, []);
+    dependencies.isE2EESupported = () => false;
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+
+    await expect(controller.setScreenShareEnabled(true)).rejects.toMatchObject({
+      code: 'e2ee-unsupported',
+    });
+    expect(controller.getState().mediaFailure).toBe('e2ee-unsupported');
+  });
+
+  it('treats unsupported desktop platform capabilities as a no-op', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(false, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+
+    expect(platform.getCapabilities).toHaveBeenCalledOnce();
+    expect(platform.start).not.toHaveBeenCalled();
+    expect(platform.stop).not.toHaveBeenCalled();
+    expect(mediaParticipant.setMicrophoneEnabled).toHaveBeenCalledWith(true);
+    expect(controller.getState().platform).toBeUndefined();
+  });
+
+  it('starts the platform lifecycle before enabling the local microphone', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    mediaParticipant.setMicrophoneEnabled.mockImplementation(async () => {
+      order.push('mic');
+      return undefined;
+    });
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+
+    await connectToActive(controller, session);
+    expect(platform.start).not.toHaveBeenCalled();
+    await controller.setMicrophoneEnabled(true);
+
+    expect(order.indexOf('platform-caps')).toBeGreaterThan(order.indexOf('connect'));
+    expect(order.indexOf('platform-start:true:true')).toBeGreaterThan(order.indexOf('connect'));
+    expect(order.indexOf('platform-start:true:true')).toBeLessThan(order.indexOf('mic'));
+    expect(platform.start).toHaveBeenCalledWith({
+      sessionId: 'opaque-session-1',
+      microphone: true,
+      playback: true,
+    });
+    expect(controller.getState().platform?.active).toBe(true);
+  });
+
+  it('stops the platform lifecycle after Room disconnect and before MatrixRTC leave', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    mediaParticipant.setMicrophoneEnabled.mockImplementation(async () => {
+      order.push('mic');
+      return undefined;
+    });
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+
+    await controller.disconnect();
+
+    expect(order.lastIndexOf('mic')).toBeLessThan(order.indexOf('disconnect'));
+    expect(order.indexOf('disconnect')).toBeLessThan(order.indexOf('platform-stop'));
+    expect(order.indexOf('platform-stop')).toBeLessThan(order.indexOf('detach'));
+    expect(order.indexOf('platform-stop')).toBeLessThan(order.indexOf('leave'));
+    expect(platform.stop).toHaveBeenCalledOnce();
+    expect(controller.getState().platform).toBeUndefined();
+    expect(controller.getState().lifecycle).toBe('idle');
+  });
+
+  it('refuses the media operation and skips platform stop when platform start fails', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    platform.start.mockRejectedValue(new Error('native start failed'));
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+
+    await expect(controller.setMicrophoneEnabled(true)).rejects.toMatchObject({
+      code: 'platform-lifecycle-failed',
+    });
+
+    expect(mediaParticipant.setMicrophoneEnabled).not.toHaveBeenCalled();
+    expect(controller.getState().mediaFailure).toBe('platform-lifecycle-failed');
+    expect(controller.getState().platform?.active).toBe(false);
+
+    await controller.disconnect();
+    expect(platform.stop).not.toHaveBeenCalled();
+    expect(provider.detach).toHaveBeenCalledOnce();
+  });
+
+  it('restarts platform lifecycle with the same session when flags change', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+
+    await controller.setCameraEnabled(true);
+    expect(platform.start).toHaveBeenLastCalledWith({
+      sessionId: 'opaque-session-1',
+      microphone: false,
+      playback: true,
+    });
+    expect(platform.stop).not.toHaveBeenCalled();
+
+    await controller.setMicrophoneEnabled(true);
+    expect(platform.stop).toHaveBeenCalledWith({ sessionId: 'opaque-session-1' });
+    expect(platform.start).toHaveBeenLastCalledWith({
+      sessionId: 'opaque-session-1',
+      microphone: true,
+      playback: true,
+    });
+    expect(platform.start).toHaveBeenCalledTimes(2);
+
+    const stopsBefore = platform.stop.mock.calls.length;
+    await controller.setMicrophoneEnabled(true);
+    expect(platform.stop.mock.calls.length).toBe(stopsBefore);
+    expect(platform.start).toHaveBeenCalledTimes(2);
+  });
+
+  it('filters stale session and revision platform events', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+    await controller.setCameraEnabled(true);
+
+    platform.emit({ revision: 2, sessionId: 'other-session', type: 'media_reset' });
+    platform.emit({ revision: 3, sessionId: 'opaque-session-1', type: 'media_reset' });
+    platform.emit({
+      revision: 3,
+      sessionId: 'opaque-session-1',
+      type: 'focus_changed',
+      focused: false,
+    });
+    platform.emit({
+      revision: 4,
+      sessionId: 'opaque-session-1',
+      type: 'focus_changed',
+      focused: false,
+    });
+    await vi.waitFor(() => expect(controller.getState().platform?.focused).toBe(false));
+
+    const snapshot = controller.getState().platform;
+    expect(snapshot?.mediaReset).toBe(true);
+    expect(snapshot?.focused).toBe(false);
+    expect(snapshot?.active).toBe(true);
+    expect(controller.getState().mediaFailure).toBeNull();
+  });
+
+  it('refuses manual media when the platform capability lookup fails', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(false, order);
+    platform.getCapabilities.mockReset();
+    platform.getCapabilities.mockRejectedValue(new Error('capability bridge unavailable'));
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+
+    await expect(controller.setMicrophoneEnabled(true)).rejects.toMatchObject({
+      code: 'platform-lifecycle-failed',
+    });
+
+    expect(mediaParticipant.setMicrophoneEnabled).not.toHaveBeenCalled();
+    expect(platform.start).not.toHaveBeenCalled();
+    expect(controller.getState().mediaFailure).toBe('platform-lifecycle-failed');
+    expect(controller.getState().platform).toBeUndefined();
+  });
+
+  it.each([
+    ['malformed supported', { supported: 'yes', microphone: true, playback: true }],
+    ['missing microphone', { supported: true, playback: true }],
+    ['malformed microphone', { supported: true, microphone: 1, playback: true }],
+    ['missing playback', { supported: true, microphone: true }],
+    ['malformed playback', { supported: true, microphone: true, playback: null }],
+    ['missing everything', {}],
+    ['a null result', null],
+    ['an undefined result', undefined],
+  ])(
+    'refuses manual media without calling media methods on %s capability result',
+    async (_label, capabilities) => {
+      const order: string[] = [];
+      const session = makeSession(order);
+      const platform = makePlatform(false, order);
+      platform.getCapabilities.mockReset();
+      platform.getCapabilities.mockResolvedValue(capabilities);
+      const provider = makeProvider({
+        ready: true,
+        localOutboundIdentity: 'local-backend-identity',
+        keyIndex: 1,
+      });
+      const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+      dependencies.platformBridge = platform.bridge;
+      const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+      await connectToActive(controller, session);
+
+      await expect(controller.setMicrophoneEnabled(true)).rejects.toMatchObject({
+        code: 'platform-lifecycle-failed',
+      });
+      await expect(controller.setCameraEnabled(true)).rejects.toMatchObject({
+        code: 'platform-lifecycle-failed',
+      });
+
+      expect(mediaParticipant.setMicrophoneEnabled).not.toHaveBeenCalled();
+      expect(mediaParticipant.setCameraEnabled).not.toHaveBeenCalled();
+      expect(mediaParticipant.setScreenShareEnabled).not.toHaveBeenCalled();
+      expect(platform.start).not.toHaveBeenCalled();
+      expect(controller.getState().mediaFailure).toBe('platform-lifecycle-failed');
+      expect(controller.getState().platform).toBeUndefined();
+    }
+  );
+
+  it('disables the LiveKit microphone track before downgrading the platform lifecycle', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    mediaParticipant.setMicrophoneEnabled.mockImplementation(async (enabled) => {
+      order.push(enabled ? 'mic-on' : 'mic-off');
+      return undefined;
+    });
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+    expect(platform.start).toHaveBeenLastCalledWith({
+      sessionId: 'opaque-session-1',
+      microphone: true,
+      playback: true,
+    });
+
+    await controller.setMicrophoneEnabled(false);
+
+    expect(order.indexOf('mic-on')).toBeLessThan(order.indexOf('mic-off'));
+    expect(order.indexOf('mic-off')).toBeLessThan(order.indexOf('platform-stop'));
+    expect(order.indexOf('platform-stop')).toBeLessThan(order.indexOf('platform-start:false:true'));
+    expect(platform.start).toHaveBeenLastCalledWith({
+      sessionId: 'opaque-session-1',
+      microphone: false,
+      playback: true,
+    });
+    expect(controller.getState().platform?.active).toBe(true);
+    expect(controller.getState().mediaFailure).toBeNull();
+  });
+
+  it('retains the microphone lifecycle when the JS microphone disable fails', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    mediaParticipant.setMicrophoneEnabled.mockImplementation(async (enabled) => {
+      order.push(enabled ? 'mic-on' : 'mic-off');
+      return undefined;
+    });
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+
+    mediaParticipant.setMicrophoneEnabled.mockRejectedValueOnce(new Error('track stuck'));
+    await expect(controller.setMicrophoneEnabled(false)).rejects.toMatchObject({
+      code: 'media-operation-failed',
+    });
+
+    expect(platform.stop).not.toHaveBeenCalled();
+    expect(platform.start).toHaveBeenCalledTimes(1);
+    expect(controller.getState().mediaFailure).toBe('media-operation-failed');
+    expect(controller.getState().platform?.active).toBe(true);
+
+    // A later media operation must not downgrade the microphone lifecycle.
+    await controller.setCameraEnabled(true);
+    expect(platform.stop).not.toHaveBeenCalled();
+    expect(platform.start).toHaveBeenCalledTimes(1);
+
+    // Teardown still stops the retained microphone lifecycle.
+    await controller.disconnect();
+    expect(platform.stop).toHaveBeenCalledWith({ sessionId: 'opaque-session-1' });
+    expect(order.lastIndexOf('platform-stop')).toBeLessThan(order.indexOf('leave'));
+    expect(controller.getState().lifecycle).toBe('idle');
+  });
+
+  it('stops manual media safely on a platform failure event', async () => {
+    const order: string[] = [];
+    const session = makeSession(order);
+    const platform = makePlatform(true, order);
+    const provider = makeProvider({
+      ready: true,
+      localOutboundIdentity: 'local-backend-identity',
+      keyIndex: 1,
+    });
+    const { dependencies, mediaParticipant } = makeDependencies(session, order, provider);
+    dependencies.platformBridge = platform.bridge;
+    dependencies.createPlatformSessionId = () => 'opaque-session-1';
+    const controller = createLivekitJsController(dependencies, { manualMediaTest: true });
+    await connectToActive(controller, session);
+    await controller.setMicrophoneEnabled(true);
+
+    platform.emit({
+      revision: 1,
+      sessionId: 'opaque-session-1',
+      type: 'failed',
+      code: 'audio_unavailable',
+    });
+    await vi.waitFor(() =>
+      expect(controller.getState().mediaFailure).toBe('platform-lifecycle-failed')
+    );
+
+    expect(controller.getState().platform).toMatchObject({
+      active: false,
+      failure: 'audio_unavailable',
+    });
+    expect(mediaParticipant.setMicrophoneEnabled).toHaveBeenLastCalledWith(false);
+    expect(controller.getState().lifecycle).toBe('active');
+  });
+});
diff --git a/src/app/features/call/livekitJsController.ts b/src/app/features/call/livekitJsController.ts
new file mode 100644
index 0000000000..02b441148d
--- /dev/null
+++ b/src/app/features/call/livekitJsController.ts
@@ -0,0 +1,738 @@
+import { Room as LivekitRoom, type RoomOptions } from 'livekit-client';
+import type { AutoDiscoveryInfo } from '../../cs-api';
+import type { MatrixClient, MatrixRTCSession, Room as MatrixRoom } from '$types/matrix-sdk';
+import {
+  disconnectLivekitThenLeaveMatrixRTC,
+  joinAndProvisionMatrixRTC,
+} from './matrixRtcCallLifecycle';
+import {
+  LivekitMatrixKeyProvider,
+  type LivekitMatrixKeyProviderState,
+  isLivekitE2EESupported,
+} from './livekitMatrixKeyProvider';
+import { getPreferredLivekitTransport, provisionLivekitToken } from './livekitProvisioning';
+import { acquireCallOwner, type CallOwnerLease } from '$state/callOwner';
+import {
+  getPlatformCapabilities as getPluginPlatformCapabilities,
+  onPlatformCallEvent,
+  startPlatformLifecycle,
+  stopPlatformLifecycle,
+  type PlatformCallCapabilities,
+  type PlatformCallEvent,
+  type PlatformCallFailureCode,
+  type PlatformCallRoute,
+} from '$plugins/call/platformCallLifecycle';
+
+export type LivekitJsControllerLifecycle =
+  | 'idle'
+  | 'joining-matrix'
+  | 'provisioning'
+  | 'connecting-livekit'
+  | 'active'
+  | 'stopping'
+  | 'failed';
+
+export type LivekitJsControllerFailure = 'e2ee-unsupported' | 'e2ee-import-failed' | 'setup-failed';
+
+export type LivekitJsMediaFailure =
+  | 'media-test-disabled'
+  | 'e2ee-unsupported'
+  | 'e2ee-key-not-ready'
+  | 'e2ee-key-failed'
+  | 'room-not-active'
+  | 'platform-lifecycle-failed'
+  | 'media-operation-failed';
+
+export class LivekitJsMediaError extends Error {
+  public constructor(public readonly code: LivekitJsMediaFailure) {
+    super(`LiveKit JS media test refused: ${code}`);
+    this.name = 'LivekitJsMediaError';
+  }
+}
+
+export type LivekitJsMediaFacade = {
+  setMicrophoneEnabled: (enabled: boolean) => Promise<void>;
+  setCameraEnabled: (enabled: boolean) => Promise<void>;
+  setScreenShareEnabled: (enabled: boolean) => Promise<void>;
+};
+
+export type LivekitJsPlatformStartRequest = {
+  sessionId: string;
+  microphone: boolean;
+  playback: boolean;
+};
+
+export type LivekitJsPlatformBridge = {
+  getCapabilities: () => Promise<PlatformCallCapabilities>;
+  start: (request: LivekitJsPlatformStartRequest) => Promise<unknown>;
+  stop: (request: { sessionId: string }) => Promise<unknown>;
+  onEvent: (handler: (event: PlatformCallEvent) => void) => Promise<() => void>;
+};
+
+export type LivekitJsPlatformState = {
+  active: boolean;
+  focused: boolean;
+  route: PlatformCallRoute | null;
+  interrupted: boolean;
+  mediaReset: boolean;
+  failure: PlatformCallFailureCode | null;
+};
+
+export type LivekitJsControllerState = {
+  lifecycle: LivekitJsControllerLifecycle;
+  failure: LivekitJsControllerFailure | null;
+  mediaFailure: LivekitJsMediaFailure | null;
+  room?: LivekitRoom;
+  media?: LivekitJsMediaFacade;
+  platform?: LivekitJsPlatformState;
+  e2ee: Readonly<LivekitMatrixKeyProviderState>;
+};
+
+export type LivekitJsControllerStateListener = (state: Readonly<LivekitJsControllerState>) => void;
+
+export type LivekitJsConnectOptions = {
+  mx: MatrixClient;
+  room: MatrixRoom;
+  discovery?: Pick<AutoDiscoveryInfo, 'org.matrix.msc4143.rtc_foci'>;
+  callIntent?: 'audio' | 'video';
+  dm?: boolean;
+  ongoing?: boolean;
+};
+
+type LivekitLocalParticipantLike = Pick<
+  LivekitRoom['localParticipant'],
+  'setMicrophoneEnabled' | 'setCameraEnabled' | 'setScreenShareEnabled'
+>;
+
+type LivekitRoomLike = Pick<LivekitRoom, 'connect' | 'disconnect'> & {
+  localParticipant?: LivekitLocalParticipantLike;
+};
+
+type ManualMediaMethods = LivekitJsMediaFacade;
+
+type LivekitJsControllerBase = {
+  connect: (options: LivekitJsConnectOptions) => Promise<void>;
+  disconnect: () => Promise<void>;
+  getState: () => Readonly<LivekitJsControllerState>;
+  subscribe: (listener: LivekitJsControllerStateListener) => () => void;
+};
+
+type LivekitJsManualController = LivekitJsControllerBase & ManualMediaMethods;
+
+export type LivekitJsControllerOptions = {
+  manualMediaTest?: boolean;
+};
+
+export type LivekitJsControllerDependencies = {
+  createRoom?: (options: RoomOptions) => LivekitRoomLike;
+  createWorker?: () => Worker;
+  createKeyProvider?: () => LivekitMatrixKeyProvider;
+  isE2EESupported?: () => boolean;
+  getPreferredTransport?: typeof getPreferredLivekitTransport;
+  provisionToken?: typeof provisionLivekitToken;
+  platformBridge?: LivekitJsPlatformBridge;
+  createPlatformSessionId?: () => string;
+};
+
+type ControllerRecord = {
+  session: MatrixRTCSession;
+  provider: LivekitMatrixKeyProvider;
+  worker?: Worker;
+  room?: LivekitRoomLike;
+  matrixJoinStarted: boolean;
+  providerDetached: boolean;
+  ownerLease: CallOwnerLease;
+  cancelled: boolean;
+  e2eeFailure: boolean;
+  cancelMembershipWait?: () => void;
+  removeKeyStateListener?: () => void;
+  platformSessionId?: string;
+  platformCaps?: Promise<PlatformCallCapabilities>;
+  platformActive: boolean;
+  platformFlags: { microphone: boolean; playback: boolean };
+  platformDesired: { microphone: boolean; playback: boolean };
+  platformRevision: number;
+  platformUnlisten?: () => void;
+  platformEventOp?: Promise<void>;
+  mediaPublished: boolean;
+  cleanupPromise?: Promise<void>;
+  resourcesReady: Promise<void>;
+  resolveResources: () => void;
+};
+
+const initialE2EEState: LivekitMatrixKeyProviderState = {
+  ready: false,
+  localOutboundIdentity: null,
+  keyIndex: null,
+  lastImportFailure: null,
+};
+
+const defaultCreateRoom = (options: RoomOptions): LivekitRoomLike => new LivekitRoom(options);
+
+const defaultCreateWorker = (): Worker =>
+  new Worker(new URL('livekit-client/e2ee-worker', import.meta.url), { type: 'module' });
+
+const defaultPlatformBridge: LivekitJsPlatformBridge = {
+  getCapabilities: getPluginPlatformCapabilities,
+  start: startPlatformLifecycle,
+  stop: stopPlatformLifecycle,
+  onEvent: onPlatformCallEvent,
+};
+
+let platformSessionCounter = 0;
+const defaultCreatePlatformSessionId = (): string => {
+  platformSessionCounter += 1;
+  const random =
+    typeof crypto !== 'undefined' && typeof crypto.randomUUID === 'function'
+      ? crypto.randomUUID()
+      : `${Date.now().toString(36)}-${platformSessionCounter.toString(36)}`;
+  return `livekit-js-platform-${random}`;
+};
+
+export function createLivekitJsController(
+  dependencies: LivekitJsControllerDependencies | undefined,
+  options: { manualMediaTest: true }
+): LivekitJsManualController;
+export function createLivekitJsController(
+  dependencies?: LivekitJsControllerDependencies,
+  options?: LivekitJsControllerOptions
+): LivekitJsControllerBase;
+export function createLivekitJsController(
+  dependencies: LivekitJsControllerDependencies = {},
+  controllerOptions: LivekitJsControllerOptions = {}
+) {
+  const createRoom = dependencies.createRoom ?? defaultCreateRoom;
+  const createWorker = dependencies.createWorker ?? defaultCreateWorker;
+  const createKeyProvider =
+    dependencies.createKeyProvider ?? (() => new LivekitMatrixKeyProvider());
+  const supportsE2EE = dependencies.isE2EESupported ?? isLivekitE2EESupported;
+  const getPreferredTransport = dependencies.getPreferredTransport ?? getPreferredLivekitTransport;
+  const provisionToken = dependencies.provisionToken ?? provisionLivekitToken;
+  const platformBridge = dependencies.platformBridge ?? defaultPlatformBridge;
+  const createPlatformSessionId =
+    dependencies.createPlatformSessionId ?? defaultCreatePlatformSessionId;
+  const manualMediaTest = controllerOptions.manualMediaTest === true;
+
+  let state: LivekitJsControllerState = {
+    lifecycle: 'idle',
+    failure: null,
+    mediaFailure: null,
+    room: undefined,
+    media: undefined,
+    e2ee: initialE2EEState,
+  };
+  let record: ControllerRecord | undefined;
+  let operation: Promise<void> | undefined;
+  const listeners = new Set<LivekitJsControllerStateListener>();
+
+  const publish = (changes: Partial<LivekitJsControllerState>): void => {
+    state = { ...state, ...changes };
+    const snapshot = { ...state, e2ee: { ...state.e2ee } };
+    listeners.forEach((listener) => {
+      try {
+        listener(snapshot);
+      } catch {
+        // A state observer must not interrupt lifecycle cleanup.
+      }
+    });
+  };
+
+  const cleanup = async (
+    current: ControllerRecord,
+    result: 'idle' | 'failed',
+    failure: LivekitJsControllerFailure | null
+  ): Promise<void> => {
+    if (current.cleanupPromise) {
+      await current.cleanupPromise;
+      return;
+    }
+
+    current.cancelled = true;
+    current.cancelMembershipWait?.();
+    current.cancelMembershipWait = undefined;
+    publish({ lifecycle: 'stopping' });
+    const detachProvider = (): void => {
+      if (current.providerDetached) return;
+      current.providerDetached = true;
+      try {
+        current.provider.detach();
+      } catch {}
+    };
+    current.cleanupPromise = (async () => {
+      if (!current.room && !current.worker) await current.resourcesReady;
+      const stopRoom = async (): Promise<void> => {
+        if (current.mediaPublished && current.room?.localParticipant) {
+          try {
+            await current.room.localParticipant.setMicrophoneEnabled(false);
+            await current.room.localParticipant.setCameraEnabled(false);
+            await current.room.localParticipant.setScreenShareEnabled(false);
+          } catch {
+            // Best-effort unpublish; disconnect clears any remaining tracks.
+          }
+        }
+        await current.room?.disconnect();
+      };
+      const stopPlatform = async (): Promise<void> => {
+        if (current.platformEventOp) {
+          try {
+            await current.platformEventOp;
+          } catch {
+            // Event settling must not block platform stop.
+          }
+        }
+        if (current.platformActive && current.platformSessionId) {
+          try {
+            await platformBridge.stop({ sessionId: current.platformSessionId });
+          } catch {
+            // Platform stop failures never block room/provider cleanup.
+          }
+          current.platformActive = false;
+        }
+        current.platformUnlisten?.();
+        current.platformUnlisten = undefined;
+        publish({ platform: undefined });
+      };
+      if (current.matrixJoinStarted) {
+        await disconnectLivekitThenLeaveMatrixRTC(async () => {
+          try {
+            await stopRoom();
+          } finally {
+            await stopPlatform();
+            detachProvider();
+          }
+        }, current.session);
+      } else {
+        try {
+          await stopRoom();
+        } catch {
+          // Cleanup continues even when a setup room rejects disconnect.
+        } finally {
+          await stopPlatform();
+          detachProvider();
+        }
+      }
+      current.worker?.terminate();
+      current.removeKeyStateListener?.();
+      current.removeKeyStateListener = undefined;
+      current.ownerLease.release();
+      if (record === current) record = undefined;
+      publish({
+        lifecycle: result,
+        failure,
+        mediaFailure: result === 'idle' ? null : state.mediaFailure,
+        room: undefined,
+        media: undefined,
+        ...(result === 'idle' ? { e2ee: initialE2EEState } : {}),
+      });
+    })();
+    await current.cleanupPromise;
+  };
+
+  const setup = async (
+    current: ControllerRecord,
+    connectOptions: LivekitJsConnectOptions
+  ): Promise<void> => {
+    let failure: LivekitJsControllerFailure | null = null;
+    try {
+      publish({ lifecycle: 'joining-matrix', failure: null });
+      if (!supportsE2EE()) {
+        failure = 'e2ee-unsupported';
+      } else {
+        current.provider.attach(current.session);
+        if (current.e2eeFailure || current.provider.getKeyState().lastImportFailure) {
+          failure = 'e2ee-import-failed';
+        } else {
+          const joined = await joinAndProvisionMatrixRTC({
+            mx: connectOptions.mx,
+            room: connectOptions.room,
+            session: current.session,
+            discovery: connectOptions.discovery,
+            getPreferredTransport,
+            provisionToken,
+            callIntent: connectOptions.callIntent ?? 'audio',
+            ...(connectOptions.ongoing
+              ? {}
+              : { notificationType: connectOptions.dm ? 'ring' : 'notification' }),
+            manageMediaKeys: true,
+            isCancelled: () => current.cancelled,
+            onStage: (stage) => publish({ lifecycle: stage }),
+            onMembershipWait: (cancel) => {
+              current.cancelMembershipWait = cancel;
+            },
+            onJoinStarted: () => {
+              current.matrixJoinStarted = true;
+            },
+          });
+
+          current.provider.setLocalOutboundIdentity(joined.ownMembership?.rtcBackendIdentity);
+          if (current.e2eeFailure || current.provider.getKeyState().lastImportFailure) {
+            failure = 'e2ee-import-failed';
+          } else if (!current.cancelled) {
+            publish({ lifecycle: 'connecting-livekit' });
+            current.worker = createWorker();
+            current.room = createRoom({
+              encryption: {
+                keyProvider: current.provider,
+                worker: current.worker,
+              },
+            });
+            await current.room.connect(joined.provisioned.url, joined.provisioned.jwt);
+            if (current.e2eeFailure) failure = 'e2ee-import-failed';
+          }
+        }
+      }
+    } catch {
+      failure = current.e2eeFailure ? 'e2ee-import-failed' : 'setup-failed';
+    } finally {
+      current.resolveResources();
+    }
+
+    if (failure) {
+      await cleanup(current, 'failed', failure);
+    } else if (current.cancelled) {
+      await cleanup(current, 'idle', null);
+    } else {
+      publish({
+        lifecycle: 'active',
+        failure: null,
+        room: current.room as LivekitRoom,
+        media: manualMediaTest
+          ? {
+              setMicrophoneEnabled,
+              setCameraEnabled,
+              setScreenShareEnabled,
+            }
+          : undefined,
+      });
+    }
+  };
+
+  const requireMediaParticipant = (): LivekitLocalParticipantLike => {
+    if (!manualMediaTest) throw new LivekitJsMediaError('media-test-disabled');
+    if (!supportsE2EE()) throw new LivekitJsMediaError('e2ee-unsupported');
+    if (state.lifecycle !== 'active' || !record?.room?.localParticipant) {
+      throw new LivekitJsMediaError('room-not-active');
+    }
+
+    const keyState = record.provider.getKeyState();
+    if (keyState.lastImportFailure) throw new LivekitJsMediaError('e2ee-key-failed');
+    if (!keyState.ready || !keyState.localOutboundIdentity) {
+      throw new LivekitJsMediaError('e2ee-key-not-ready');
+    }
+    return record.room.localParticipant;
+  };
+
+  const publishPlatform = (current: ControllerRecord, patch: Partial<LivekitJsPlatformState>) => {
+    if (record !== current) return;
+    const base: LivekitJsPlatformState = state.platform ?? {
+      active: current.platformActive,
+      focused: true,
+      route: null,
+      interrupted: false,
+      mediaReset: false,
+      failure: null,
+    };
+    publish({ platform: { ...base, ...patch } });
+  };
+
+  const getPlatformCapabilities = (
+    current: ControllerRecord
+  ): Promise<PlatformCallCapabilities> => {
+    if (!current.platformCaps) {
+      current.platformCaps = platformBridge.getCapabilities();
+    }
+    return current.platformCaps;
+  };
+
+  const applyPlatformEvent = async (
+    current: ControllerRecord,
+    event: PlatformCallEvent
+  ): Promise<void> => {
+    if (current.cancelled || event.sessionId !== current.platformSessionId) return;
+    if (event.revision <= current.platformRevision) return;
+    current.platformRevision = event.revision;
+    switch (event.type) {
+      case 'focus_changed':
+        publishPlatform(current, { focused: event.focused });
+        break;
+      case 'route_changed':
+        publishPlatform(current, { route: event.route });
+        break;
+      case 'interrupted':
+        publishPlatform(current, { interrupted: event.state === 'began' });
+        break;
+      case 'media_reset':
+        publishPlatform(current, { mediaReset: true });
+        break;
+      case 'failed': {
+        // Native code never controls tracks; JS fails the manual test safely.
+        current.platformActive = false;
+        publishPlatform(current, { active: false, failure: event.code });
+        publish({ mediaFailure: 'platform-lifecycle-failed' });
+        const participant = current.room?.localParticipant;
+        if (participant && current.mediaPublished) {
+          try {
+            await participant.setMicrophoneEnabled(false);
+            await participant.setCameraEnabled(false);
+            await participant.setScreenShareEnabled(false);
+          } catch {
+            // Disconnect cleanup unpublishes any remaining tracks.
+          }
+        }
+        break;
+      }
+      default:
+        break;
+    }
+  };
+
+  const ensurePlatformListener = async (current: ControllerRecord): Promise<void> => {
+    if (current.platformUnlisten) return;
+    const unlisten = await platformBridge.onEvent((event) => {
+      current.platformEventOp = applyPlatformEvent(current, event).finally(() => {
+        current.platformEventOp = undefined;
+      });
+    });
+    if (current.cancelled || !current.platformActive) {
+      unlisten();
+      return;
+    }
+    current.platformUnlisten = unlisten;
+  };
+
+  const ensurePlatformLifecycle = async (current: ControllerRecord): Promise<void> => {
+    let capabilities: PlatformCallCapabilities;
+    try {
+      capabilities = await getPlatformCapabilities(current);
+    } catch {
+      // A rejected capability request is not the desktop no-op case.
+      throw new LivekitJsMediaError('platform-lifecycle-failed');
+    }
+    if (
+      !capabilities ||
+      typeof capabilities.supported !== 'boolean' ||
+      typeof capabilities.microphone !== 'boolean' ||
+      typeof capabilities.playback !== 'boolean'
+    ) {
+      // A malformed capability result fails closed like a rejection.
+      throw new LivekitJsMediaError('platform-lifecycle-failed');
+    }
+    if (!capabilities.supported || current.cancelled) return;
+
+    const desired = { ...current.platformDesired };
+    if (
+      current.platformActive &&
+      current.platformFlags.microphone === desired.microphone &&
+      current.platformFlags.playback === desired.playback
+    ) {
+      return;
+    }
+
+    try {
+      if (current.platformActive && current.platformSessionId) {
+        await platformBridge.stop({ sessionId: current.platformSessionId });
+        current.platformActive = false;
+      }
+      if (!current.platformSessionId) current.platformSessionId = createPlatformSessionId();
+      await platformBridge.start({ sessionId: current.platformSessionId, ...desired });
+      current.platformFlags = desired;
+      current.platformActive = true;
+      publishPlatform(current, { active: true, failure: null });
+      await ensurePlatformListener(current);
+    } catch {
+      current.platformActive = false;
+      publishPlatform(current, { active: false });
+      throw new LivekitJsMediaError('platform-lifecycle-failed');
+    }
+  };
+
+  const runMediaAction = async (
+    action: (participant: LivekitLocalParticipantLike) => Promise<unknown>,
+    platformOrder: 'platform-first' | 'platform-after' = 'platform-first'
+  ): Promise<void> => {
+    let current: ControllerRecord;
+    let participant: LivekitLocalParticipantLike;
+    try {
+      participant = requireMediaParticipant();
+      // requireMediaParticipant guarantees an active record; narrow for TS.
+      if (!record) throw new LivekitJsMediaError('room-not-active');
+      current = record;
+      if (platformOrder === 'platform-first') await ensurePlatformLifecycle(current);
+    } catch (error) {
+      if (error instanceof LivekitJsMediaError) publish({ mediaFailure: error.code });
+      throw error;
+    }
+
+    try {
+      await action(participant);
+    } catch {
+      const error = new LivekitJsMediaError('media-operation-failed');
+      publish({ mediaFailure: error.code });
+      throw error;
+    }
+    if (platformOrder === 'platform-after') {
+      try {
+        await ensurePlatformLifecycle(current);
+      } catch (error) {
+        if (error instanceof LivekitJsMediaError) publish({ mediaFailure: error.code });
+        throw error;
+      }
+    }
+    publish({ mediaFailure: null });
+  };
+
+  const markMediaPublished = (promise: Promise<void>, published: boolean): Promise<void> =>
+    promise.then(() => {
+      if (published && record) record.mediaPublished = true;
+    });
+
+  const setMicrophoneEnabled = (enabled: boolean): Promise<void> => {
+    if (record) record.platformDesired.microphone = enabled;
+    const promise = markMediaPublished(
+      // A microphone disable must unpublish the JS track before the platform
+      // lifecycle is stopped or downgraded.
+      runMediaAction(
+        (participant) => participant.setMicrophoneEnabled(enabled),
+        enabled ? 'platform-first' : 'platform-after'
+      ),
+      enabled
+    );
+    if (enabled) return promise;
+    return promise.catch((error) => {
+      // The JS track failed to disable, so the microphone may still be
+      // live: retain the microphone platform lifecycle.
+      if (
+        record &&
+        error instanceof LivekitJsMediaError &&
+        error.code === 'media-operation-failed'
+      ) {
+        record.platformDesired.microphone = true;
+      }
+      throw error;
+    });
+  };
+
+  const setCameraEnabled = (enabled: boolean): Promise<void> =>
+    markMediaPublished(
+      runMediaAction((participant) => participant.setCameraEnabled(enabled)),
+      enabled
+    );
+
+  const setScreenShareEnabled = (enabled: boolean): Promise<void> =>
+    markMediaPublished(
+      runMediaAction((participant) => participant.setScreenShareEnabled(enabled)),
+      enabled
+    );
+
+  const connect = (connectOptions: LivekitJsConnectOptions): Promise<void> => {
+    if (state.lifecycle === 'failed' && !record && !operation) {
+      publish({
+        lifecycle: 'idle',
+        failure: null,
+        mediaFailure: null,
+        room: undefined,
+        media: undefined,
+        e2ee: initialE2EEState,
+      });
+    }
+    if (record || operation || state.lifecycle !== 'idle') {
+      return Promise.reject(new Error('LiveKit JS call controller is already in use'));
+    }
+
+    const ownerLease = acquireCallOwner('livekit-js', connectOptions.room.roomId);
+    if (!ownerLease) {
+      publish({
+        lifecycle: 'failed',
+        failure: 'setup-failed',
+        mediaFailure: null,
+        room: undefined,
+        media: undefined,
+      });
+      return Promise.resolve();
+    }
+
+    let resolveResources!: () => void;
+    const resourcesReady = new Promise<void>((resolve) => {
+      resolveResources = resolve;
+    });
+    let session: MatrixRTCSession;
+    let provider: LivekitMatrixKeyProvider;
+    try {
+      session = connectOptions.mx.matrixRTC.getRoomSession(connectOptions.room);
+      provider = createKeyProvider();
+    } catch {
+      ownerLease.release();
+      publish({
+        lifecycle: 'failed',
+        failure: 'setup-failed',
+        mediaFailure: null,
+        room: undefined,
+        media: undefined,
+      });
+      return Promise.resolve();
+    }
+    const current: ControllerRecord = {
+      session,
+      provider,
+      matrixJoinStarted: false,
+      cancelled: false,
+      e2eeFailure: false,
+      providerDetached: false,
+      ownerLease,
+      resourcesReady,
+      resolveResources,
+      platformActive: false,
+      platformFlags: { microphone: false, playback: false },
+      platformDesired: { microphone: false, playback: true },
+      platformRevision: -1,
+      mediaPublished: false,
+    };
+    record = current;
+    current.removeKeyStateListener = current.provider.subscribe((e2ee) => {
+      publish({ e2ee });
+      if (e2ee.lastImportFailure) {
+        current.e2eeFailure = true;
+        current.cancelMembershipWait?.();
+        if (current.room) void cleanup(current, 'failed', 'e2ee-import-failed');
+      }
+    });
+
+    operation = setup(current, connectOptions).finally(() => {
+      operation = undefined;
+    });
+    return operation;
+  };
+
+  const disconnect = async (): Promise<void> => {
+    if (!record) {
+      if (state.lifecycle === 'failed') {
+        publish({ lifecycle: 'idle', failure: null, mediaFailure: null });
+      }
+      return;
+    }
+    await cleanup(record, 'idle', null);
+    await operation;
+  };
+
+  const controller: LivekitJsControllerBase = {
+    connect,
+    disconnect,
+    getState: (): Readonly<LivekitJsControllerState> => ({
+      ...state,
+      e2ee: { ...state.e2ee },
+    }),
+    subscribe: (listener: LivekitJsControllerStateListener): (() => void) => {
+      listeners.add(listener);
+      listener({ ...state, e2ee: { ...state.e2ee } });
+      return () => listeners.delete(listener);
+    },
+  };
+
+  if (!manualMediaTest) return controller;
+  return {
+    ...controller,
+    setMicrophoneEnabled,
+    setCameraEnabled,
+    setScreenShareEnabled,
+  };
+}
diff --git a/src/app/features/call/livekitMatrixKeyProvider.test.ts b/src/app/features/call/livekitMatrixKeyProvider.test.ts
new file mode 100644
index 0000000000..3d482e163e
--- /dev/null
+++ b/src/app/features/call/livekitMatrixKeyProvider.test.ts
@@ -0,0 +1,299 @@
+import { beforeEach, describe, expect, it, vi, type Mock } from 'vitest';
+import { MatrixRTCSessionEvent } from '$types/matrix-sdk';
+import { LivekitMatrixKeyProvider, isLivekitE2EESupported } from './livekitMatrixKeyProvider';
+
+type EncryptionKeyChangedHandler = (
+  key: Uint8Array<ArrayBuffer>,
+  keyIndex: number,
+  membershipParts: unknown,
+  rtcBackendIdentity: string
+) => void;
+
+type SessionOn = (event: MatrixRTCSessionEvent, handler: EncryptionKeyChangedHandler) => void;
+
+type TestSession = {
+  on: Mock<SessionOn>;
+  off: Mock<SessionOn>;
+  reemitEncryptionKeys: Mock<() => void>;
+};
+
+const deferred = <T>(): {
+  promise: Promise<T>;
+  resolve: (value: T) => void;
+  reject: (reason?: unknown) => void;
+} => {
+  let resolve!: (value: T) => void;
+  let reject!: (reason?: unknown) => void;
+  const promise = new Promise<T>((promiseResolve, promiseReject) => {
+    resolve = promiseResolve;
+    reject = promiseReject;
+  });
+  return { promise, resolve, reject };
+};
+
+const session = (): TestSession => ({
+  on: vi.fn<SessionOn>(),
+  off: vi.fn<SessionOn>(),
+  reemitEncryptionKeys: vi.fn<() => void>(),
+});
+
+const handlerFor = (testSession: TestSession): EncryptionKeyChangedHandler =>
+  testSession.on.mock.calls.find(
+    ([event]) => event === MatrixRTCSessionEvent.EncryptionKeyChanged
+  )?.[1] as EncryptionKeyChangedHandler;
+
+describe('LivekitMatrixKeyProvider', () => {
+  const importedKey = { imported: true } as unknown as CryptoKey;
+  const importKey = vi.fn<typeof crypto.subtle.importKey>().mockResolvedValue(importedKey);
+
+  beforeEach(() => {
+    importKey.mockClear();
+    vi.stubGlobal('crypto', { subtle: { importKey } });
+  });
+
+  it('attaches, re-emits tracked keys, and forwards HKDF material with identity and index', async () => {
+    const testSession = session();
+    const provider = new LivekitMatrixKeyProvider();
+    const onSetEncryptionKey = vi.spyOn(
+      provider as unknown as {
+        onSetEncryptionKey: (key: CryptoKey, identity: string, index: number) => void;
+      },
+      'onSetEncryptionKey'
+    );
+    const matrixKey = new Uint8Array([1, 2, 3, 4]);
+    provider.setLocalOutboundIdentity('hashed-member');
+
+    expect(provider.getOptions()).toMatchObject({
+      ratchetWindowSize: 10,
+      keyringSize: 256,
+      sharedKey: false,
+    });
+
+    provider.attach(testSession as never);
+
+    expect(testSession.on).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.EncryptionKeyChanged,
+      expect.any(Function)
+    );
+    expect(testSession.reemitEncryptionKeys).toHaveBeenCalledOnce();
+
+    handlerFor(testSession)(matrixKey, 7, { userId: '@alice:example.org' }, 'hashed-member');
+    await vi.waitFor(() => expect(onSetEncryptionKey).toHaveBeenCalledOnce());
+
+    expect(importKey).toHaveBeenCalledWith('raw', matrixKey, 'HKDF', false, [
+      'deriveBits',
+      'deriveKey',
+    ]);
+    expect(onSetEncryptionKey).toHaveBeenCalledWith(importedKey, 'hashed-member', 7);
+    expect(provider.getKeyState()).toEqual({
+      ready: true,
+      localOutboundIdentity: 'hashed-member',
+      keyIndex: 7,
+      lastImportFailure: null,
+    });
+  });
+
+  it('removes the old session listener before attaching a new one', () => {
+    const oldSession = session();
+    const newSession = session();
+    const provider = new LivekitMatrixKeyProvider();
+
+    provider.attach(oldSession as never);
+    const oldHandler = handlerFor(oldSession);
+    provider.attach(newSession as never);
+
+    expect(oldSession.off).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.EncryptionKeyChanged,
+      oldHandler
+    );
+    expect(newSession.on).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.EncryptionKeyChanged,
+      oldHandler
+    );
+  });
+
+  it('detaches the exact listener and does not expose raw key material', async () => {
+    const testSession = session();
+    const provider = new LivekitMatrixKeyProvider();
+    const rawKey = new Uint8Array([9, 8, 7]);
+
+    provider.attach(testSession as never);
+    const handler = handlerFor(testSession);
+    handler(rawKey, 3, {}, 'member');
+    await vi.waitFor(() => expect(provider.getKeys()).toHaveLength(1));
+    provider.detach();
+
+    expect(testSession.off).toHaveBeenCalledWith(
+      MatrixRTCSessionEvent.EncryptionKeyChanged,
+      handler
+    );
+    expect(provider.getKeys()[0]?.key).toBe(importedKey);
+    expect(provider.getKeys()[0]?.key).not.toBe(rawKey);
+  });
+
+  it('does not forward an import that completes after detach', async () => {
+    const testSession = session();
+    const pendingImport = deferred<CryptoKey>();
+    importKey.mockImplementationOnce(() => pendingImport.promise);
+    const provider = new LivekitMatrixKeyProvider();
+    const onSetEncryptionKey = vi.spyOn(
+      provider as unknown as {
+        onSetEncryptionKey: (key: CryptoKey, identity: string, index: number) => void;
+      },
+      'onSetEncryptionKey'
+    );
+
+    provider.attach(testSession as never);
+    handlerFor(testSession)(new Uint8Array([1]), 1, {}, 'member');
+    await vi.waitFor(() => expect(importKey).toHaveBeenCalledOnce());
+    provider.detach();
+    pendingImport.resolve(importedKey);
+    await Promise.resolve();
+    await Promise.resolve();
+
+    expect(onSetEncryptionKey).not.toHaveBeenCalled();
+  });
+
+  it('does not forward an import that completes after attaching a replacement session', async () => {
+    const oldSession = session();
+    const newSession = session();
+    const pendingImport = deferred<CryptoKey>();
+    importKey.mockImplementationOnce(() => pendingImport.promise);
+    const provider = new LivekitMatrixKeyProvider();
+    const onSetEncryptionKey = vi.spyOn(
+      provider as unknown as {
+        onSetEncryptionKey: (key: CryptoKey, identity: string, index: number) => void;
+      },
+      'onSetEncryptionKey'
+    );
+
+    provider.attach(oldSession as never);
+    handlerFor(oldSession)(new Uint8Array([1]), 1, {}, 'old-member');
+    await vi.waitFor(() => expect(importKey).toHaveBeenCalledOnce());
+    provider.attach(newSession as never);
+    pendingImport.resolve(importedKey);
+    await Promise.resolve();
+    await Promise.resolve();
+
+    expect(onSetEncryptionKey).not.toHaveBeenCalled();
+  });
+
+  it('keeps the effective key index from regressing when imports complete out of order', async () => {
+    const testSession = session();
+    const firstImport = deferred<CryptoKey>();
+    const secondImport = deferred<CryptoKey>();
+    importKey
+      .mockImplementationOnce(() => firstImport.promise)
+      .mockImplementationOnce(() => secondImport.promise);
+    const provider = new LivekitMatrixKeyProvider();
+    provider.setLocalOutboundIdentity('member');
+    const onSetEncryptionKey = vi.spyOn(
+      provider as unknown as {
+        onSetEncryptionKey: (key: CryptoKey, identity: string, index: number) => void;
+      },
+      'onSetEncryptionKey'
+    );
+
+    provider.attach(testSession as never);
+    const handler = handlerFor(testSession);
+    handler(new Uint8Array([1]), 1, {}, 'member');
+    handler(new Uint8Array([2]), 2, {}, 'member');
+    await vi.waitFor(() => expect(importKey).toHaveBeenCalledTimes(2));
+
+    secondImport.resolve(importedKey);
+    await Promise.resolve();
+    expect(onSetEncryptionKey).not.toHaveBeenCalled();
+    firstImport.resolve(importedKey);
+    await vi.waitFor(() => expect(onSetEncryptionKey).toHaveBeenCalledTimes(2));
+
+    expect(onSetEncryptionKey.mock.calls[0]).toEqual([importedKey, 'member', 1]);
+    expect(onSetEncryptionKey.mock.calls[1]).toEqual([importedKey, 'member', 2]);
+    expect(provider.getKeyState().keyIndex).toBe(2);
+  });
+
+  it('tracks key-index regression independently for each participant', async () => {
+    const testSession = session();
+    const provider = new LivekitMatrixKeyProvider();
+    provider.setLocalOutboundIdentity('local-member');
+    const onSetEncryptionKey = vi.spyOn(
+      provider as unknown as {
+        onSetEncryptionKey: (key: CryptoKey, identity: string, index: number) => void;
+      },
+      'onSetEncryptionKey'
+    );
+
+    provider.attach(testSession as never);
+    const handler = handlerFor(testSession);
+    handler(new Uint8Array([1]), 10, {}, 'remote-member');
+    handler(new Uint8Array([2]), 1, {}, 'local-member');
+
+    await vi.waitFor(() => expect(onSetEncryptionKey).toHaveBeenCalledTimes(2));
+
+    expect(onSetEncryptionKey).toHaveBeenNthCalledWith(1, importedKey, 'remote-member', 10);
+    expect(onSetEncryptionKey).toHaveBeenNthCalledWith(2, importedKey, 'local-member', 1);
+    expect(provider.getKeyState()).toMatchObject({
+      ready: true,
+      localOutboundIdentity: 'local-member',
+      keyIndex: 1,
+      lastImportFailure: null,
+    });
+  });
+
+  it('records a safe failure when key import is rejected', async () => {
+    const testSession = session();
+    importKey.mockRejectedValueOnce(new Error('raw key internals'));
+    const provider = new LivekitMatrixKeyProvider();
+    provider.setLocalOutboundIdentity('member');
+
+    provider.attach(testSession as never);
+    handlerFor(testSession)(new Uint8Array([1]), 1, {}, 'member');
+
+    await vi.waitFor(() => expect(provider.getKeyState().lastImportFailure).toBe('import-failed'));
+    expect(JSON.stringify(provider.getKeyState())).not.toContain('raw key internals');
+
+    handlerFor(testSession)(new Uint8Array([2]), 2, {}, 'member');
+    await vi.waitFor(() => expect(provider.getKeyState().ready).toBe(true));
+    expect(provider.getKeyState().lastImportFailure).toBeNull();
+  });
+
+  it('records a safe failure when WebCrypto import support is missing', async () => {
+    vi.stubGlobal('crypto', { subtle: {} });
+    const testSession = session();
+    const provider = new LivekitMatrixKeyProvider();
+
+    provider.attach(testSession as never);
+    handlerFor(testSession)(new Uint8Array([1]), 1, {}, 'member');
+
+    await vi.waitFor(() =>
+      expect(provider.getKeyState().lastImportFailure).toBe('webcrypto-unavailable')
+    );
+  });
+});
+
+describe('isLivekitE2EESupported', () => {
+  beforeEach(() => {
+    vi.stubGlobal('crypto', { subtle: { importKey: vi.fn<typeof crypto.subtle.importKey>() } });
+  });
+
+  it('fails closed when the current LiveKit API reports unsupported E2EE', () => {
+    Object.defineProperty(window, 'RTCRtpScriptTransform', {
+      configurable: true,
+      value: undefined,
+    });
+    Object.defineProperty(window, 'RTCRtpSender', {
+      configurable: true,
+      value: undefined,
+    });
+
+    expect(isLivekitE2EESupported()).toBe(false);
+  });
+
+  it('reports support when LiveKit and WebCrypto are available', () => {
+    Object.defineProperty(window, 'RTCRtpScriptTransform', {
+      configurable: true,
+      value: vi.fn<() => void>(),
+    });
+
+    expect(isLivekitE2EESupported()).toBe(true);
+  });
+});
diff --git a/src/app/features/call/livekitMatrixKeyProvider.ts b/src/app/features/call/livekitMatrixKeyProvider.ts
new file mode 100644
index 0000000000..716d2fcab4
--- /dev/null
+++ b/src/app/features/call/livekitMatrixKeyProvider.ts
@@ -0,0 +1,199 @@
+import { BaseKeyProvider, isE2EESupported } from 'livekit-client';
+import {
+  MatrixRTCSessionEvent,
+  type CallMembershipIdentityParts,
+  type MatrixRTCSession,
+} from '$types/matrix-sdk';
+
+export const isLivekitE2EESupported = (): boolean => {
+  const subtle = globalThis.crypto?.subtle;
+  return typeof subtle?.importKey === 'function' && isE2EESupported();
+};
+
+export type LivekitMatrixKeyImportFailure = 'webcrypto-unavailable' | 'import-failed';
+
+export type LivekitMatrixKeyProviderState = {
+  ready: boolean;
+  localOutboundIdentity: string | null;
+  keyIndex: number | null;
+  lastImportFailure: LivekitMatrixKeyImportFailure | null;
+};
+
+export type LivekitMatrixKeyProviderStateListener = (
+  state: Readonly<LivekitMatrixKeyProviderState>
+) => void;
+
+type KeyImportResult =
+  | {
+      keyMaterial: CryptoKey;
+      rtcBackendIdentity: string;
+      encryptionKeyIndex: number;
+    }
+  | { failure: LivekitMatrixKeyImportFailure };
+
+export class LivekitMatrixKeyProvider extends BaseKeyProvider {
+  private rtcSession?: MatrixRTCSession;
+  private attachmentGeneration = 0;
+  private nextImportSequence = 0;
+  private nextUpdateSequence = 0;
+  private readonly pendingUpdates = new Map<number, KeyImportResult>();
+  private readonly acceptedKeyIndices = new Map<string, number>();
+  private readonly stateListeners = new Set<LivekitMatrixKeyProviderStateListener>();
+  private localOutboundIdentity: string | null = null;
+  private state: LivekitMatrixKeyProviderState = {
+    ready: false,
+    localOutboundIdentity: null,
+    keyIndex: null,
+    lastImportFailure: null,
+  };
+
+  public constructor() {
+    super({
+      ratchetWindowSize: 10,
+      keyringSize: 256,
+      sharedKey: false,
+    });
+  }
+
+  public attach(session: MatrixRTCSession): void {
+    this.detach();
+    this.rtcSession = session;
+    session.on(MatrixRTCSessionEvent.EncryptionKeyChanged, this.onEncryptionKeyChanged);
+    session.reemitEncryptionKeys();
+  }
+
+  public detach(): void {
+    this.attachmentGeneration += 1;
+    this.nextImportSequence = 0;
+    this.nextUpdateSequence = 0;
+    this.pendingUpdates.clear();
+    this.acceptedKeyIndices.clear();
+    this.updateState({
+      ready: false,
+      keyIndex: null,
+      lastImportFailure: null,
+    });
+
+    if (!this.rtcSession) return;
+
+    this.rtcSession.off(MatrixRTCSessionEvent.EncryptionKeyChanged, this.onEncryptionKeyChanged);
+    this.rtcSession = undefined;
+  }
+
+  public setLocalOutboundIdentity(identity: string | undefined): void {
+    this.localOutboundIdentity = identity ?? null;
+    const keyIndex = identity === undefined ? undefined : this.acceptedKeyIndices.get(identity);
+    this.updateState({
+      localOutboundIdentity: this.localOutboundIdentity,
+      ready: keyIndex !== undefined,
+      keyIndex: keyIndex ?? null,
+    });
+  }
+
+  public getKeyState(): Readonly<LivekitMatrixKeyProviderState> {
+    return { ...this.state };
+  }
+
+  public subscribe(listener: LivekitMatrixKeyProviderStateListener): () => void {
+    this.stateListeners.add(listener);
+    listener(this.getKeyState());
+    return () => {
+      this.stateListeners.delete(listener);
+    };
+  }
+
+  private readonly onEncryptionKeyChanged = (
+    encryptionKey: Uint8Array<ArrayBuffer>,
+    encryptionKeyIndex: number,
+    _membershipParts: CallMembershipIdentityParts,
+    rtcBackendIdentity: string
+  ): void => {
+    const generation = this.attachmentGeneration;
+    const sequence = this.nextImportSequence++;
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle || typeof subtle.importKey !== 'function') {
+      this.enqueueUpdate(generation, sequence, { failure: 'webcrypto-unavailable' });
+      return;
+    }
+
+    let importPromise: Promise<CryptoKey>;
+    try {
+      importPromise = subtle.importKey('raw', encryptionKey, 'HKDF', false, [
+        'deriveBits',
+        'deriveKey',
+      ]);
+    } catch {
+      this.enqueueUpdate(generation, sequence, { failure: 'import-failed' });
+      return;
+    }
+
+    void importPromise.then(
+      (keyMaterial) => {
+        this.enqueueUpdate(generation, sequence, {
+          keyMaterial,
+          rtcBackendIdentity,
+          encryptionKeyIndex,
+        });
+      },
+      () => {
+        this.enqueueUpdate(generation, sequence, { failure: 'import-failed' });
+      }
+    );
+  };
+
+  private enqueueUpdate(generation: number, sequence: number, result: KeyImportResult): void {
+    if (generation !== this.attachmentGeneration) return;
+    this.pendingUpdates.set(sequence, result);
+
+    while (this.pendingUpdates.has(this.nextUpdateSequence)) {
+      const update = this.pendingUpdates.get(this.nextUpdateSequence);
+      this.pendingUpdates.delete(this.nextUpdateSequence);
+      this.nextUpdateSequence += 1;
+      if (!update) continue;
+
+      if ('failure' in update) {
+        this.updateState({ lastImportFailure: update.failure });
+        continue;
+      }
+
+      const lastParticipantKeyIndex = this.acceptedKeyIndices.get(update.rtcBackendIdentity) ?? -1;
+      if (update.encryptionKeyIndex < lastParticipantKeyIndex) continue;
+
+      try {
+        this.onSetEncryptionKey(
+          update.keyMaterial,
+          update.rtcBackendIdentity,
+          update.encryptionKeyIndex
+        );
+      } catch {
+        this.updateState({ lastImportFailure: 'import-failed' });
+        continue;
+      }
+
+      this.acceptedKeyIndices.set(
+        update.rtcBackendIdentity,
+        Math.max(
+          this.acceptedKeyIndices.get(update.rtcBackendIdentity) ?? -1,
+          update.encryptionKeyIndex
+        )
+      );
+
+      this.updateState({ lastImportFailure: null });
+      if (update.rtcBackendIdentity === this.localOutboundIdentity) {
+        this.updateState({ ready: true, keyIndex: update.encryptionKeyIndex });
+      }
+    }
+  }
+
+  private updateState(changes: Partial<LivekitMatrixKeyProviderState>): void {
+    this.state = { ...this.state, ...changes };
+    const state = this.getKeyState();
+    this.stateListeners.forEach((listener) => {
+      try {
+        listener(state);
+      } catch {
+        // A state observer must not interrupt key updates.
+      }
+    });
+  }
+}
diff --git a/src/app/features/call/matrixRtcCallLifecycle.ts b/src/app/features/call/matrixRtcCallLifecycle.ts
new file mode 100644
index 0000000000..8cb8b50750
--- /dev/null
+++ b/src/app/features/call/matrixRtcCallLifecycle.ts
@@ -0,0 +1,212 @@
+import type { AutoDiscoveryInfo } from '../../cs-api';
+import {
+  MatrixRTCSessionEvent,
+  type CallMembership,
+  type CallMembershipIdentityParts,
+  type JoinSessionConfig,
+  type MatrixClient,
+  type MatrixRTCSession,
+  type Room,
+} from '$types/matrix-sdk';
+import { getPreferredLivekitTransport, provisionLivekitToken } from './livekitProvisioning';
+import type { LivekitProvisioningResult } from './livekitProvisioning';
+import type { LivekitTransportConfig } from '$types/matrix-sdk';
+
+const membershipWaitTimeoutMs = 10_000;
+
+export type MatrixRTCJoinProvisionOptions = {
+  mx: MatrixClient;
+  room: Room;
+  session: MatrixRTCSession;
+  discovery?: Pick<AutoDiscoveryInfo, 'org.matrix.msc4143.rtc_foci'>;
+  getPreferredTransport?: typeof getPreferredLivekitTransport;
+  provisionToken?: typeof provisionLivekitToken;
+  callIntent: JoinSessionConfig['callIntent'];
+  notificationType?: JoinSessionConfig['notificationType'];
+  manageMediaKeys?: boolean;
+  isCancelled?: () => boolean;
+  onStage?: (stage: 'joining-matrix' | 'provisioning') => void;
+  onMembershipWait?: (cancel: (() => void) | undefined) => void;
+  onJoinStarted?: () => void;
+  onMembershipError?: (error: unknown) => void;
+};
+
+export type MatrixRTCJoinProvisionResult = {
+  session: MatrixRTCSession;
+  transport: LivekitTransportConfig;
+  identity: CallMembershipIdentityParts;
+  ownMembership: CallMembership | undefined;
+  slotId: string;
+  provisioned: LivekitProvisioningResult;
+};
+
+type MembershipWait = {
+  promise: Promise<void>;
+  cancel: () => void;
+};
+
+const waitForOwnMembership = (
+  session: MatrixRTCSession,
+  userId: string,
+  deviceId: string,
+  onMembershipError?: (error: unknown) => void
+): MembershipWait => {
+  let resolveWait!: () => void;
+  let rejectWait!: (reason?: unknown) => void;
+  let settled = false;
+  let timeout: ReturnType<typeof setTimeout> | undefined;
+  let membershipsListenerInstalled = false;
+  let membershipErrorListenerInstalled = false;
+
+  const handleMembershipsChanged = (
+    _oldMemberships: CallMembership[],
+    memberships: CallMembership[]
+  ): void => {
+    if (
+      memberships.some(
+        (membership) => membership.userId === userId && membership.deviceId === deviceId
+      )
+    ) {
+      settle(resolveWait);
+    }
+  };
+
+  const handleMembershipManagerError = (error: unknown): void => {
+    onMembershipError?.(error);
+    settle(() => rejectWait(new Error('MatrixRTC membership publication failed')));
+  };
+
+  const removeListeners = (): void => {
+    if (membershipsListenerInstalled) {
+      try {
+        session.removeListener(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
+      } catch {}
+      membershipsListenerInstalled = false;
+    }
+    if (membershipErrorListenerInstalled) {
+      try {
+        session.removeListener(
+          MatrixRTCSessionEvent.MembershipManagerError,
+          handleMembershipManagerError
+        );
+      } catch {}
+      membershipErrorListenerInstalled = false;
+    }
+  };
+
+  const settle = (settlePromise: () => void): void => {
+    if (settled) return;
+    settled = true;
+    if (timeout !== undefined) clearTimeout(timeout);
+    removeListeners();
+    settlePromise();
+  };
+
+  const promise = new Promise<void>((resolve, reject) => {
+    resolveWait = resolve;
+    rejectWait = reject;
+  });
+
+  try {
+    session.on(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
+    membershipsListenerInstalled = true;
+    session.on(MatrixRTCSessionEvent.MembershipManagerError, handleMembershipManagerError);
+    membershipErrorListenerInstalled = true;
+    timeout = setTimeout(
+      () => settle(() => rejectWait(new Error('MatrixRTC membership publication timed out'))),
+      membershipWaitTimeoutMs
+    );
+  } catch {
+    settle(() => rejectWait(new Error('MatrixRTC membership listener setup failed')));
+  }
+
+  return {
+    promise,
+    cancel: () => settle(() => rejectWait(new Error('MatrixRTC membership wait cancelled'))),
+  };
+};
+
+export const joinAndProvisionMatrixRTC = async ({
+  mx,
+  room,
+  session,
+  discovery,
+  getPreferredTransport = getPreferredLivekitTransport,
+  provisionToken = provisionLivekitToken,
+  callIntent,
+  notificationType,
+  manageMediaKeys = false,
+  isCancelled,
+  onStage,
+  onMembershipWait,
+  onJoinStarted,
+  onMembershipError,
+}: MatrixRTCJoinProvisionOptions): Promise<MatrixRTCJoinProvisionResult> => {
+  const deviceId = mx.getDeviceId();
+  if (!deviceId) throw new Error('MatrixRTC device unavailable');
+
+  const transport = await getPreferredTransport(mx, discovery);
+  if (!transport) throw new Error('No LiveKit transport available');
+
+  const userId = mx.getSafeUserId();
+  const identity = { userId, deviceId, memberId: `${userId}:${deviceId}` };
+  if (isCancelled?.()) throw new Error('MatrixRTC setup cancelled');
+  const membershipWait = waitForOwnMembership(
+    session,
+    identity.userId,
+    identity.deviceId,
+    onMembershipError
+  );
+  onMembershipWait?.(membershipWait.cancel);
+  onStage?.('joining-matrix');
+
+  try {
+    const joinConfig: JoinSessionConfig = {
+      callIntent,
+      ...(notificationType ? { notificationType } : {}),
+      ...(manageMediaKeys ? { manageMediaKeys: true } : {}),
+    };
+    onJoinStarted?.();
+    session.joinRTCSession(identity, [transport], undefined, joinConfig);
+    await membershipWait.promise;
+  } catch (error) {
+    membershipWait.cancel();
+    throw error;
+  } finally {
+    onMembershipWait?.(undefined);
+  }
+
+  if (isCancelled?.()) throw new Error('MatrixRTC setup cancelled');
+  const slotId = session.slotId;
+  if (!slotId) throw new Error('MatrixRTC slot was not assigned');
+  const ownMembership = session.memberships?.find(
+    (membership) =>
+      membership.userId === identity.userId && membership.deviceId === identity.deviceId
+  );
+
+  onStage?.('provisioning');
+  const provisioned = await provisionToken({
+    mx,
+    roomId: room.roomId,
+    slotId,
+    deviceId,
+    serviceUrl: transport.livekit_service_url,
+    memberId: identity.memberId,
+    userId: identity.userId,
+  });
+  if (isCancelled?.()) throw new Error('MatrixRTC setup cancelled');
+
+  return { session, transport, identity, ownMembership, slotId, provisioned };
+};
+
+export const disconnectLivekitThenLeaveMatrixRTC = async (
+  disconnect: () => Promise<void>,
+  session: MatrixRTCSession
+): Promise<void> => {
+  try {
+    await disconnect();
+  } catch {}
+  try {
+    await session.leaveRoomSession(5000);
+  } catch {}
+};
diff --git a/src/app/features/call/nativeCallController.test.ts b/src/app/features/call/nativeCallController.test.ts
index a61224e071..72b2a72cc9 100644
--- a/src/app/features/call/nativeCallController.test.ts
+++ b/src/app/features/call/nativeCallController.test.ts
@@ -1,10 +1,18 @@
-import { describe, expect, it, vi } from 'vitest';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
 import { MatrixRTCSessionEvent, type CallMembership } from '$types/matrix-sdk';
 import type { MatrixClient, MatrixRTCSession, Room } from '$types/matrix-sdk';
 import { createNativeCallController } from './nativeCallController';
 import type { NativeCallSession } from '$state/nativeCall';
 import type { CallLifecycleError, CallState } from '$plugins/call/callLifecycle';
 
+const { debugError } = vi.hoisted(() => ({
+  debugError: vi.fn<(...args: unknown[]) => void>(),
+}));
+
+vi.mock('$utils/debugLogger', () => ({
+  createDebugLogger: () => ({ error: debugError }),
+}));
+
 const room = { roomId: '!room:example.org' } as Room;
 
 const makeSession = (slotId = 'm.call#real-slot') =>
@@ -66,6 +74,10 @@ const waitForMembershipErrorListener = async (session: MatrixRTCSession): Promis
 };
 
 describe('native call controller', () => {
+  beforeEach(() => {
+    debugError.mockClear();
+  });
+
   it('joins with one identity, provisions the session slot, then connects', async () => {
     const session = makeSession();
     const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
@@ -146,7 +158,9 @@ describe('native call controller', () => {
       },
       getPreferredTransport: async () => transport,
       provisionToken: async () => {
-        throw new Error('openid-secret jwt-secret');
+        throw Object.assign(new Error('openid-secret jwt-secret'), {
+          cause: { name: 'PluginError', message: 'request-body-secret' },
+        });
       },
     });
 
@@ -177,11 +191,67 @@ describe('native call controller', () => {
     expect(setSession).toHaveBeenLastCalledWith(
       expect.objectContaining({
         lifecycle: 'error',
-        error: 'Native call setup failed during token provisioning.',
+        error: 'Native call setup failed during authorizing.',
       })
     );
     expect(setSession.mock.calls.flat()).not.toContain('openid-secret');
     expect(setSession.mock.calls.flat()).not.toContain('jwt-secret');
+    expect(JSON.stringify(setSession.mock.calls)).not.toContain('openid-secret');
+    expect(JSON.stringify(setSession.mock.calls)).not.toContain('jwt-secret');
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call setup failed',
+      expect.objectContaining({
+        stage: 'authorizing',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+        cause: { errorName: 'UnknownError', errorMessage: 'redacted' },
+      })
+    );
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('openid-secret');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('jwt-secret');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('request-body-secret');
+  });
+
+  it('logs allowlisted transport failures with a stage-safe session error', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    const disconnect = vi
+      .fn<(request: { connectionId: string }) => Promise<CallState>>()
+      .mockResolvedValue({ revision: 1, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async () => vi.fn<() => void>(),
+      getPreferredTransport: async () => undefined,
+    });
+
+    await controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({
+        lifecycle: 'error',
+        error: 'Native call setup failed during no transport.',
+      })
+    );
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call setup failed',
+      expect.objectContaining({
+        stage: 'no transport',
+        errorName: 'Error',
+        errorMessage: 'No LiveKit transport available',
+      })
+    );
   });
 
   it('cleans up when the membership manager fails before publication', async () => {
@@ -235,10 +305,21 @@ describe('native call controller', () => {
     expect(setSession).toHaveBeenLastCalledWith(
       expect.objectContaining({
         lifecycle: 'error',
-        error: 'Native call setup failed during MatrixRTC.',
+        error: 'Native call setup failed during joining the call.',
       })
     );
     expect(setSession.mock.calls.flat()).not.toContain('secret-membership-error');
+    expect(JSON.stringify(setSession.mock.calls)).not.toContain('secret-membership-error');
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call setup failed',
+      expect.objectContaining({
+        stage: 'joining the call',
+        errorName: 'Error',
+        errorMessage: 'redacted',
+      })
+    );
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('secret-membership-error');
   });
 
   it('cleans up when local membership publication times out', async () => {
@@ -297,7 +378,7 @@ describe('native call controller', () => {
       expect(setSession).toHaveBeenLastCalledWith(
         expect.objectContaining({
           lifecycle: 'error',
-          error: 'Native call setup failed during MatrixRTC.',
+          error: 'Native call setup failed during joining the call.',
         })
       );
     } finally {
@@ -343,7 +424,7 @@ describe('native call controller', () => {
       expect(setSession).toHaveBeenLastCalledWith(
         expect.objectContaining({
           lifecycle: 'error',
-          error: 'Native call setup failed during MatrixRTC.',
+          error: 'Native call setup failed during joining the call.',
         })
       );
       expect(setSession.mock.calls.flat()).not.toContain('secret-device');
@@ -480,4 +561,276 @@ describe('native call controller', () => {
       expect.objectContaining({ lifecycle: 'error', error: 'Native call ended.' })
     );
   });
+
+  it('redacts secret-bearing lifecycle errors and keeps the allowlisted code', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let errorHandler: ((error: CallLifecycleError) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        errorHandler = handler;
+        return vi.fn<() => void>();
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    errorHandler?.({
+      revision: 3,
+      code: 'connect_failed',
+      message: 'wss://sfu-secret.example jwt-secret-token',
+      connectionId: 'connection-id',
+    });
+
+    await vi.waitFor(() =>
+      expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' })
+    );
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({ lifecycle: 'error', error: 'Native call setup failed.' })
+    );
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call connection failed',
+      expect.objectContaining({
+        stage: 'connecting',
+        errorName: 'UnknownError',
+        errorMessage: 'redacted',
+        code: 'connect_failed',
+      })
+    );
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('sfu-secret');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('jwt-secret-token');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('connection-id');
+    expect(JSON.stringify(setSession.mock.calls)).not.toContain('sfu-secret');
+    expect(JSON.stringify(setSession.mock.calls)).not.toContain('jwt-secret-token');
+  });
+
+  it('redacts unknown lifecycle error codes instead of logging them', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let errorHandler: ((error: CallLifecycleError) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        errorHandler = handler;
+        return vi.fn<() => void>();
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    errorHandler?.({
+      revision: 3,
+      code: 'secret-lifecycle-code',
+      message: 'payload-secret',
+      connectionId: 'connection-id',
+    });
+
+    await vi.waitFor(() =>
+      expect(disconnect).toHaveBeenCalledWith({ connectionId: 'connection-id' })
+    );
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call connection failed',
+      expect.objectContaining({
+        stage: 'connecting',
+        errorName: 'UnknownError',
+        errorMessage: 'redacted',
+        code: 'unknown',
+      })
+    );
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('secret-lifecycle-code');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('payload-secret');
+  });
+
+  it.each([
+    ['audio_failed', 'native audio failed'],
+    ['camera_failed', 'native camera failed'],
+    ['screen_share_failed', 'native screen share failed'],
+    ['video_failed', 'native video failed'],
+    ['media_unsupported', 'media kind is not supported on this platform'],
+  ])('keeps the call alive when a media control fails with %s', async (code, message) => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let errorHandler: ((error: CallLifecycleError) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        errorHandler = handler;
+        return vi.fn<() => void>();
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    errorHandler?.({ revision: 3, code, message, connectionId: 'connection-id' });
+
+    expect(disconnect).not.toHaveBeenCalled();
+    expect(session.leaveRoomSession).not.toHaveBeenCalled();
+    expect(setSession).toHaveBeenLastCalledWith(
+      expect.objectContaining({ lifecycle: 'connected' })
+    );
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call connection failed',
+      expect.objectContaining({ stage: 'media control', code, errorMessage: message })
+    );
+  });
+
+  it('redacts raw media failure details without hanging up the call', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let errorHandler: ((error: CallLifecycleError) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        errorHandler = handler;
+        return vi.fn<() => void>();
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    errorHandler?.({
+      revision: 3,
+      code: 'camera_failed',
+      message: 'https://sfu-secret.example/track?access_token=jwt-secret-token',
+      connectionId: 'connection-id',
+    });
+
+    expect(disconnect).not.toHaveBeenCalled();
+    expect(session.leaveRoomSession).not.toHaveBeenCalled();
+    expect(debugError).toHaveBeenCalledWith(
+      'call',
+      'Native call connection failed',
+      expect.objectContaining({
+        stage: 'media control',
+        code: 'camera_failed',
+        errorMessage: 'redacted',
+      })
+    );
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('sfu-secret');
+    expect(JSON.stringify(debugError.mock.calls)).not.toContain('jwt-secret-token');
+  });
+
+  it('ignores lifecycle errors for stale or anonymous connections', async () => {
+    const session = makeSession();
+    const setSession = vi.fn<(session: NativeCallSession | undefined) => void>();
+    let errorHandler: ((error: CallLifecycleError) => void) | undefined;
+    const disconnect = vi.fn<(request: { connectionId: string }) => Promise<CallState>>();
+    disconnect.mockResolvedValue({ revision: 3, state: 'idle', connectionId: null });
+    const controller = createNativeCallController({
+      setSession,
+      connectionId: () => 'connection-id',
+      disconnect,
+      onState: async () => vi.fn<() => void>(),
+      onError: async (handler: (error: CallLifecycleError) => void) => {
+        errorHandler = handler;
+        return vi.fn<() => void>();
+      },
+      getPreferredTransport: async () => transport,
+      provisionToken: async () => ({ url: 'wss://livekit.example', jwt: 'jwt' }),
+      connect: async () => ({ revision: 2, state: 'connected', connectionId: 'connection-id' }),
+    });
+
+    const startPromise = controller.start({
+      mx: makeClient(session),
+      room,
+      elementCallActive: false,
+      dm: false,
+      video: false,
+      ongoing: false,
+    });
+    await waitForMembershipListener(session);
+    emitOwnMembership(session);
+    await startPromise;
+    debugError.mockClear();
+    setSession.mockClear();
+
+    errorHandler?.({
+      revision: 3,
+      code: 'stale_connection',
+      message: 'stale-secret',
+      connectionId: 'other-connection',
+    });
+    errorHandler?.({
+      revision: 4,
+      code: 'connect_failed',
+      message: 'null-secret',
+      connectionId: null,
+    });
+
+    expect(debugError).not.toHaveBeenCalled();
+    expect(disconnect).not.toHaveBeenCalled();
+    expect(setSession).not.toHaveBeenCalled();
+  });
 });
diff --git a/src/app/features/call/nativeCallController.ts b/src/app/features/call/nativeCallController.ts
index 69c5e4e908..7bb4c9b839 100644
--- a/src/app/features/call/nativeCallController.ts
+++ b/src/app/features/call/nativeCallController.ts
@@ -1,12 +1,5 @@
 import type { AutoDiscoveryInfo } from '../../cs-api';
-import {
-  MatrixRTCSessionEvent,
-  type CallMembership,
-  type JoinSessionConfig,
-  type MatrixClient,
-  type MatrixRTCSession,
-  type Room,
-} from '$types/matrix-sdk';
+import { type MatrixClient, type MatrixRTCSession, type Room } from '$types/matrix-sdk';
 import {
   connect,
   disconnect,
@@ -18,6 +11,11 @@ import {
 } from '$plugins/call/callLifecycle';
 import { getPreferredLivekitTransport, provisionLivekitToken } from './livekitProvisioning';
 import type { NativeCallLifecycle, NativeCallSession } from '$state/nativeCall';
+import { createDebugLogger } from '$utils/debugLogger';
+import {
+  joinAndProvisionMatrixRTC,
+  disconnectLivekitThenLeaveMatrixRTC,
+} from './matrixRtcCallLifecycle';
 
 type SetNativeCall = (session: NativeCallSession | undefined) => void;
 
@@ -30,6 +28,7 @@ type NativeCallControllerDependencies = {
   getPreferredTransport: typeof getPreferredLivekitTransport;
   provisionToken: typeof provisionLivekitToken;
   connectionId?: () => string;
+  onCleanup?: () => void;
 };
 
 type NativeCallStartOptions = {
@@ -54,95 +53,128 @@ type NativeCallRecord = {
   cleanupPromise?: Promise<void>;
 };
 
+const debugLog = createDebugLogger('nativeCallController');
+
 const errorMessage = 'Native call setup failed.';
 const endedMessage = 'Native call ended.';
 
-type SetupStage = 'MatrixRTC' | 'LiveKit transport' | 'token provisioning' | 'LiveKit connection';
+type SetupStage =
+  | 'joining the call'
+  | 'no transport'
+  | 'authorizing'
+  | 'connecting'
+  | 'media control';
+
+const safeErrorNames = new Set([
+  'AggregateError',
+  'AbortError',
+  'DataError',
+  'DOMException',
+  'Error',
+  'EvalError',
+  'InvalidStateError',
+  'NetworkError',
+  'NotAllowedError',
+  'NotSupportedError',
+  'OperationError',
+  'QuotaExceededError',
+  'RangeError',
+  'ReferenceError',
+  'SecurityError',
+  'SyntaxError',
+  'TimeoutError',
+  'TypeError',
+  'URIError',
+  'UnknownError',
+]);
+
+const safeErrorMessages = new Set([
+  'MatrixRTC device unavailable',
+  'MatrixRTC membership listener setup failed',
+  'MatrixRTC membership publication failed',
+  'MatrixRTC membership wait cancelled',
+  'media kind is not supported on this platform',
+  'native audio failed',
+  'native camera failed',
+  'native screen share failed',
+  'native video failed',
+  'MatrixRTC slot was not assigned',
+  'No LiveKit transport available',
+]);
+
+const safeLifecycleErrorCodes = new Set([
+  'actor_unavailable',
+  'audio_failed',
+  'busy',
+  'camera_failed',
+  'close_failed',
+  'connect_failed',
+  'media_unsupported',
+  'screen_share_failed',
+  'stale_connection',
+  'video_failed',
+]);
+
+const mediaControlErrorCodes = new Set([
+  'audio_failed',
+  'camera_failed',
+  'media_unsupported',
+  'screen_share_failed',
+  'video_failed',
+]);
+
+const isMediaControlError = (error: CallLifecycleError): boolean =>
+  typeof error.code === 'string' && mediaControlErrorCodes.has(error.code);
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  typeof value === 'object' && value !== null;
+
+const getErrorProperty = (error: unknown, property: 'name' | 'message' | 'cause'): unknown => {
+  if (error instanceof Error) return error[property];
+  return isRecord(error) ? error[property] : undefined;
+};
 
-const membershipWaitTimeoutMs = 10_000;
+const safeErrorName = (error: unknown): string => {
+  const name = getErrorProperty(error, 'name');
+  return typeof name === 'string' && safeErrorNames.has(name) ? name : 'UnknownError';
+};
 
-type MembershipWait = {
-  promise: Promise<void>;
-  cancel: () => void;
+const safeErrorMessage = (error: unknown): string => {
+  const message = getErrorProperty(error, 'message');
+  return typeof message === 'string' && safeErrorMessages.has(message) ? message : 'redacted';
 };
 
-const waitForOwnMembership = (
-  session: MatrixRTCSession,
-  userId: string,
-  deviceId: string
-): MembershipWait => {
-  let resolveWait!: () => void;
-  let rejectWait!: (reason?: unknown) => void;
-  let settled = false;
-  let timeout: ReturnType<typeof setTimeout> | undefined;
-  let membershipsListenerInstalled = false;
-  let membershipErrorListenerInstalled = false;
-
-  const removeListeners = (): void => {
-    if (membershipsListenerInstalled) {
-      try {
-        session.removeListener(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
-      } catch {}
-      membershipsListenerInstalled = false;
-    }
-    if (membershipErrorListenerInstalled) {
-      try {
-        session.removeListener(
-          MatrixRTCSessionEvent.MembershipManagerError,
-          handleMembershipManagerError
-        );
-      } catch {}
-      membershipErrorListenerInstalled = false;
-    }
+const setupFailureDiagnostics = (stage: SetupStage, error: unknown): Record<string, unknown> => {
+  const cause = getErrorProperty(error, 'cause');
+  return {
+    stage,
+    errorName: safeErrorName(error),
+    errorMessage: safeErrorMessage(error),
+    ...(cause !== undefined
+      ? {
+          cause: {
+            errorName: safeErrorName(cause),
+            errorMessage: safeErrorMessage(cause),
+          },
+        }
+      : {}),
   };
+};
 
-  const settle = (settlePromise: () => void): void => {
-    if (settled) return;
-    settled = true;
-    if (timeout !== undefined) clearTimeout(timeout);
-    removeListeners();
-    settlePromise();
-  };
+const logSetupFailure = (stage: SetupStage, error: unknown): void => {
+  debugLog.error('call', 'Native call setup failed', setupFailureDiagnostics(stage, error));
+};
 
-  const handleMembershipsChanged = (
-    _oldMemberships: CallMembership[],
-    memberships: CallMembership[]
-  ): void => {
-    if (
-      memberships.some(
-        (membership) => membership.userId === userId && membership.deviceId === deviceId
-      )
-    ) {
-      settle(resolveWait);
-    }
-  };
+const safeLifecycleErrorCode = (code: unknown): string =>
+  typeof code === 'string' && safeLifecycleErrorCodes.has(code) ? code : 'unknown';
 
-  const handleMembershipManagerError = (): void => {
-    settle(() => rejectWait(new Error('MatrixRTC membership publication failed')));
-  };
+const lifecycleFailureDiagnostics = (error: CallLifecycleError): Record<string, unknown> => ({
+  ...setupFailureDiagnostics(isMediaControlError(error) ? 'media control' : 'connecting', error),
+  code: safeLifecycleErrorCode(error.code),
+});
 
-  const promise = new Promise<void>((resolve, reject) => {
-    resolveWait = resolve;
-    rejectWait = reject;
-  });
-
-  try {
-    session.on(MatrixRTCSessionEvent.MembershipsChanged, handleMembershipsChanged);
-    membershipsListenerInstalled = true;
-    session.on(MatrixRTCSessionEvent.MembershipManagerError, handleMembershipManagerError);
-    membershipErrorListenerInstalled = true;
-    timeout = setTimeout(
-      () => settle(() => rejectWait(new Error('MatrixRTC membership publication timed out'))),
-      membershipWaitTimeoutMs
-    );
-  } catch {
-    settle(() => rejectWait(new Error('MatrixRTC membership listener setup failed')));
-  }
-
-  return {
-    promise,
-    cancel: () => settle(() => rejectWait(new Error('MatrixRTC membership wait cancelled'))),
-  };
+const logLifecycleFailure = (error: CallLifecycleError): void => {
+  debugLog.error('call', 'Native call connection failed', lifecycleFailureDiagnostics(error));
 };
 
 const setupErrorMessage = (stage: SetupStage): string =>
@@ -170,6 +202,7 @@ export const createNativeCallController = (
         | 'getPreferredTransport'
         | 'provisionToken'
         | 'connectionId'
+        | 'onCleanup'
       >
     >
 ) => {
@@ -182,6 +215,7 @@ export const createNativeCallController = (
     getPreferredTransport: dependencies.getPreferredTransport ?? getPreferredLivekitTransport,
     provisionToken: dependencies.provisionToken ?? provisionLivekitToken,
     connectionId: dependencies.connectionId ?? (() => crypto.randomUUID()),
+    onCleanup: dependencies.onCleanup,
   };
   let activeRecord: NativeCallRecord | undefined;
   let displayedRecord: NativeCallRecord | undefined;
@@ -254,12 +288,10 @@ export const createNativeCallController = (
     }
 
     record.cleanupPromise = (async () => {
-      try {
-        await deps.disconnect({ connectionId: record.connectionId });
-      } catch {}
-      try {
-        await record.session.leaveRoomSession(5000);
-      } catch {}
+      await disconnectLivekitThenLeaveMatrixRTC(
+        () => deps.disconnect({ connectionId: record.connectionId }).then(() => undefined),
+        record.session
+      );
       await Promise.allSettled([
         record.stateUnlistenPromise?.then((unlisten) => unlisten()) ?? Promise.resolve(),
         record.errorUnlistenPromise?.then((unlisten) => unlisten()) ?? Promise.resolve(),
@@ -273,6 +305,7 @@ export const createNativeCallController = (
           deps.setSession(undefined);
         } catch {}
       }
+      deps.onCleanup?.();
     })();
     await record.cleanupPromise;
   };
@@ -295,6 +328,10 @@ export const createNativeCallController = (
   const handleError = (record: NativeCallRecord, error: CallLifecycleError): void => {
     if (!isCurrent(record)) return;
     if (!isMatchingConnection(error.connectionId, record)) return;
+    logLifecycleFailure(error);
+    // Media toggle failures are recoverable: keep the call alive and only
+    // record a safe diagnostic.
+    if (isMediaControlError(error)) return;
     void cleanup(record, errorMessage, false);
   };
 
@@ -307,15 +344,17 @@ export const createNativeCallController = (
     video,
     ongoing,
   }: NativeCallStartOptions) => {
-    if (activeRecord || elementCallActive) return;
+    if (activeRecord || elementCallActive) {
+      deps.onCleanup?.();
+      return;
+    }
 
     let record: NativeCallRecord | undefined;
-    let stage: SetupStage = 'MatrixRTC';
+    let stage: SetupStage = 'joining the call';
     try {
       const deviceId = mx.getDeviceId();
       if (!deviceId) {
-        setSetupError(room.roomId, setupErrorMessage(stage));
-        return;
+        throw new Error('MatrixRTC device unavailable');
       }
 
       const connectionId = deps.connectionId!();
@@ -335,53 +374,44 @@ export const createNativeCallController = (
       record.errorUnlistenPromise = deps.onError((error) => handleError(currentRecord, error));
       await Promise.all([record.stateUnlistenPromise, record.errorUnlistenPromise]);
 
-      stage = 'LiveKit transport';
-      const transport = await deps.getPreferredTransport(mx, discovery);
-      if (!transport) throw new Error('No LiveKit transport available');
-
-      const userId = mx.getSafeUserId();
-      const identity = { userId, deviceId, memberId: `${userId}:${deviceId}` };
-      const joinConfig: JoinSessionConfig = {
+      stage = 'no transport';
+      const joined = await joinAndProvisionMatrixRTC({
+        mx,
+        room,
+        session,
+        discovery,
+        getPreferredTransport: deps.getPreferredTransport,
+        provisionToken: deps.provisionToken,
         callIntent: video ? 'video' : 'audio',
         ...(ongoing ? {} : { notificationType: dm ? 'ring' : 'notification' }),
-      };
-      stage = 'MatrixRTC';
-      const membershipWait = waitForOwnMembership(session, identity.userId, identity.deviceId);
-      record.cancelMembershipWait = membershipWait.cancel;
-      session.joinRTCSession(identity, [transport], undefined, joinConfig);
-      await membershipWait.promise;
-      record.cancelMembershipWait = undefined;
-      const slotId = session.slotId;
-      if (!slotId) throw new Error('MatrixRTC slot was not assigned');
-      if (!isCurrent(record)) return;
-
-      stage = 'token provisioning';
-      const provisioned = await deps.provisionToken({
-        mx,
-        roomId: room.roomId,
-        slotId,
-        deviceId,
-        serviceUrl: transport.livekit_service_url,
-        memberId: identity.memberId,
-        userId: identity.userId,
+        isCancelled: () => !isCurrent(currentRecord),
+        onStage: (joinStage) => {
+          stage = joinStage === 'joining-matrix' ? 'joining the call' : 'authorizing';
+        },
+        onMembershipWait: (cancel) => {
+          currentRecord.cancelMembershipWait = cancel;
+        },
+        onMembershipError: (error) => logSetupFailure('joining the call', error),
       });
-      if (!isCurrent(record)) return;
+      if (!isCurrent(currentRecord)) return;
 
-      stage = 'LiveKit connection';
+      stage = 'connecting';
       const state = await deps.connect({
         connectionId,
-        serverUrl: provisioned.url,
-        participantToken: provisioned.jwt,
+        serverUrl: joined.provisioned.url,
+        participantToken: joined.provisioned.jwt,
         audio: true,
         video,
         screenShare: false,
       });
-      handleState(record, state);
-    } catch {
+      handleState(currentRecord, state);
+    } catch (error) {
+      logSetupFailure(stage, error);
       if (record) {
         await cleanup(record, setupErrorMessage(stage), false);
       } else {
         setSetupError(room.roomId, setupErrorMessage(stage));
+        deps.onCleanup?.();
       }
     }
   };
diff --git a/src/app/features/call/useCallSignaling.ts b/src/app/features/call/useCallSignaling.ts
index 878a6fb74f..41bf833cbe 100644
--- a/src/app/features/call/useCallSignaling.ts
+++ b/src/app/features/call/useCallSignaling.ts
@@ -12,6 +12,7 @@ import {
   type IncomingCall,
 } from '$state/callEmbed';
 import { nativeCallAtom } from '$state/nativeCall';
+import { livekitJsCallAtom, selectActiveCallSession } from '$state/livekitJsCall';
 import { settingsAtom } from '$state/settings';
 import {
   parseIncomingRtcNotification,
@@ -54,6 +55,7 @@ export function useIncomingCallSignaling() {
   const store = useStore();
   const callEmbed = useAtomValue(callEmbedAtom);
   const nativeCall = useAtomValue(nativeCallAtom);
+  const livekitJsCall = useAtomValue(livekitJsCallAtom);
   const mDirects = useAtomValue(mDirectAtom);
   const settings = useAtomValue(settingsAtom);
   const incomingCall = useAtomValue(incomingCallAtom);
@@ -92,6 +94,7 @@ export function useIncomingCallSignaling() {
   type SignalingHandlerRefs = {
     callEmbed: typeof callEmbed;
     nativeCall: typeof nativeCall;
+    livekitJsCall: typeof livekitJsCall;
     mDirects: typeof mDirects;
     outgoingRingbackAllowed: boolean;
     handleIncomingCall: (incoming: IncomingCall) => void;
@@ -120,7 +123,7 @@ export function useIncomingCallSignaling() {
     hasCallBeenActiveRef.current = false;
     outgoingRingRoomIdRef.current = null;
     outgoingStartRef.current = null;
-  }, [callEmbed?.roomId, nativeCall?.connectionId]);
+  }, [callEmbed?.roomId, nativeCall?.connectionId, livekitJsCall?.roomId]);
 
   useEffect(() => {
     ringtoneManager.syncSources(
@@ -150,7 +153,7 @@ export function useIncomingCallSignaling() {
 
   const handleOutgoingDecline = useCallback(
     (decline: OutgoingDeclineEvent) => {
-      const activeCall = callEmbed ?? nativeCall;
+      const activeCall = selectActiveCallSession(callEmbed, nativeCall, livekitJsCall);
       if (!activeCall || activeCall.roomId !== decline.roomId) {
         return;
       }
@@ -211,7 +214,9 @@ export function useIncomingCallSignaling() {
       Sentry.metrics.count('sable.call.outgoing.declined', 1);
       stopOutgoingRing();
 
-      const hangup = callEmbed?.hangup() ?? nativeCall?.hangup() ?? Promise.resolve();
+      const hangup =
+        selectActiveCallSession(callEmbed, nativeCall, livekitJsCall)?.hangup() ??
+        Promise.resolve();
       void hangup
         .catch((error) => {
           debugLog.warn('call', 'Failed to hang up after outgoing decline', {
@@ -227,7 +232,7 @@ export function useIncomingCallSignaling() {
           }, OUTGOING_DECLINE_EMBED_CLEAR_MS);
         });
     },
-    [callEmbed, mDirects, mx, nativeCall, setCallEmbed, stopOutgoingRing, store]
+    [callEmbed, livekitJsCall, mDirects, mx, nativeCall, setCallEmbed, stopOutgoingRing, store]
   );
 
   const callAudioAllowed = canPlayCallAudio({
@@ -287,6 +292,7 @@ export function useIncomingCallSignaling() {
   signalingHandlerRefs.current = {
     callEmbed,
     nativeCall,
+    livekitJsCall,
     mDirects,
     outgoingRingbackAllowed,
     handleIncomingCall,
@@ -425,11 +431,12 @@ export function useIncomingCallSignaling() {
       if (!senderId || !eventId) return;
 
       if (senderId === myUserId) {
-        if (
-          type === RTC_NOTIFICATION_EVENT_TYPE &&
-          (handlers().callEmbed?.roomId === room.roomId ||
-            handlers().nativeCall?.roomId === room.roomId)
-        ) {
+        const activeCall = selectActiveCallSession(
+          handlers().callEmbed,
+          handlers().nativeCall,
+          handlers().livekitJsCall
+        );
+        if (type === RTC_NOTIFICATION_EVENT_TYPE && activeCall?.roomId === room.roomId) {
           activeOutgoingNotificationIdRef.current = eventId;
         }
         return;
@@ -444,7 +451,11 @@ export function useIncomingCallSignaling() {
 
       // Only inspect declines for the active outgoing call room. Cleartext declines are
       // cheap; encrypted events are decrypted only when they might be RTC declines.
-      const activeCall = handlers().callEmbed ?? handlers().nativeCall;
+      const activeCall = selectActiveCallSession(
+        handlers().callEmbed,
+        handlers().nativeCall,
+        handlers().livekitJsCall
+      );
       if (!activeCall || activeCall.roomId !== room.roomId) {
         return;
       }
@@ -504,8 +515,11 @@ export function useIncomingCallSignaling() {
     let outgoingRingTimeoutId: number | undefined;
 
     const evaluateOutgoingFallback = () => {
-      const activeCallRoomId =
-        handlers().callEmbed?.roomId ?? handlers().nativeCall?.roomId;
+      const activeCallRoomId = selectActiveCallSession(
+        handlers().callEmbed,
+        handlers().nativeCall,
+        handlers().livekitJsCall
+      )?.roomId;
 
       const stop = () => {
         handlers().stopOutgoingRing();
diff --git a/src/app/features/call/useCallStartCapabilities.ts b/src/app/features/call/useCallStartCapabilities.ts
index bad149ca5f..f3c3c7f7f5 100644
--- a/src/app/features/call/useCallStartCapabilities.ts
+++ b/src/app/features/call/useCallStartCapabilities.ts
@@ -2,6 +2,8 @@ import { useCallback, useMemo } from 'react';
 import type { Room } from '$types/matrix-sdk';
 import { EventType } from '$types/matrix-sdk';
 import { useCallEmbed } from '$hooks/useCallEmbed';
+import { useAtomValue } from 'jotai';
+import { livekitJsCallAtom } from '$state/livekitJsCall';
 import { useLivekitSupport } from '$hooks/useLivekitSupport';
 import { useMatrixClient } from '$hooks/useMatrixClient';
 import { useStateEventCallback } from '$hooks/useStateEventCallback';
@@ -15,6 +17,7 @@ import {
 export const useCallStartCapabilities = (room: Room): CallStartCapabilities => {
   const mx = useMatrixClient();
   const callEmbed = useCallEmbed();
+  const livekitJsCall = useAtomValue(livekitJsCallAtom);
   const livekitSupported = useLivekitSupport();
   const rtcSupported = webRTCSupported();
   const myUserId = mx.getSafeUserId();
@@ -42,9 +45,17 @@ export const useCallStartCapabilities = (room: Room): CallStartCapabilities => {
     return evaluateCallStartCapabilities({
       room,
       myUserId,
-      activeCallRoomId: callEmbed?.roomId,
+      activeCallRoomId: callEmbed?.roomId ?? livekitJsCall?.roomId,
       livekitSupported,
       rtcSupported,
     });
-  }, [room, myUserId, callEmbed?.roomId, livekitSupported, rtcSupported, updateCount]);
+  }, [
+    room,
+    myUserId,
+    callEmbed?.roomId,
+    livekitJsCall?.roomId,
+    livekitSupported,
+    rtcSupported,
+    updateCount,
+  ]);
 };
diff --git a/src/app/features/settings/experimental/Experimental.test.tsx b/src/app/features/settings/experimental/Experimental.test.tsx
new file mode 100644
index 0000000000..b151189009
--- /dev/null
+++ b/src/app/features/settings/experimental/Experimental.test.tsx
@@ -0,0 +1,164 @@
+import type { ReactNode } from 'react';
+import type * as SettingsModule from '$state/settings';
+import { fireEvent, render, screen } from '@testing-library/react';
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+import { Experimental } from './Experimental';
+
+const {
+  mockPlatformSupported,
+  mockSetLiveKitJsCallsEnabled,
+  mockSetLiveKitJsMediaTestEnabled,
+  mockUseSetting,
+} = vi.hoisted(() => ({
+  mockPlatformSupported: vi.fn<() => boolean>(),
+  mockSetLiveKitJsCallsEnabled: vi.fn<(value: boolean) => void>(),
+  mockSetLiveKitJsMediaTestEnabled: vi.fn<(value: boolean) => void>(),
+  mockUseSetting:
+    vi.fn<(_atom: unknown, key: string) => readonly [boolean, (value: boolean) => void]>(),
+}));
+
+vi.mock('$state/settings', async (importOriginal) => {
+  const actual = await importOriginal<typeof SettingsModule>();
+  return { ...actual, settingsAtom: {} };
+});
+
+vi.mock('$state/hooks/settings', () => ({
+  useSetting: mockUseSetting,
+}));
+
+vi.mock('$features/call/nativeCallProbe', () => ({
+  isNativeCallProbePlatformSupported: mockPlatformSupported,
+}));
+
+vi.mock('$components/page', () => ({
+  PageContent: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  SettingsSectionPage: ({ children }: { children: ReactNode }) => <section>{children}</section>,
+}));
+
+vi.mock('$components/info-card', () => ({
+  InfoCard: () => <div>Experimental warning</div>,
+}));
+
+vi.mock('$components/setting-tile', () => ({
+  SettingToggle: ({
+    title,
+    description,
+    focusId,
+    value,
+    onChange,
+  }: {
+    title: string;
+    description: ReactNode;
+    focusId: string;
+    value: boolean;
+    onChange: (value: boolean) => void;
+  }) => (
+    <div>
+      <span>{title}</span>
+      <span>{description}</span>
+      <button type="button" aria-label={focusId} onClick={() => onChange(!value)}>
+        {String(value)}
+      </button>
+    </div>
+  ),
+}));
+
+vi.mock('./BandwithSavingEmojis', () => ({ BandwidthSavingEmojis: () => null }));
+vi.mock('./MSC4268HistoryShare', () => ({ MSC4268HistoryShare: () => null }));
+vi.mock('./MSC4274MediaGalleries', () => ({ MSC4274MediaGalleries: () => null }));
+
+vi.mock('folds', () => ({
+  Box: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  Scroll: ({ children }: { children: ReactNode }) => <div>{children}</div>,
+  Text: ({ children }: { children: ReactNode }) => <span>{children}</span>,
+}));
+
+beforeEach(() => {
+  mockPlatformSupported.mockReset();
+  mockPlatformSupported.mockReturnValue(true);
+  mockSetLiveKitJsCallsEnabled.mockReset();
+  mockSetLiveKitJsMediaTestEnabled.mockReset();
+  mockUseSetting.mockImplementation((_atom: unknown, key: string) => {
+    if (key === 'livekitJsCallsEnabled') return [false, mockSetLiveKitJsCallsEnabled];
+    if (key === 'livekitJsMediaTestEnabled') return [false, mockSetLiveKitJsMediaTestEnabled];
+    return [false, vi.fn<() => void>()];
+  });
+});
+
+describe('Experimental LiveKit JS calls setting', () => {
+  it('shows the connection probe toggle on supported Tauri platforms', () => {
+    render(<Experimental requestClose={() => {}} />);
+
+    expect(screen.getByText('LiveKit JS Calls')).toBeInTheDocument();
+    expect(screen.getByText('Try the LiveKit JS connection probe')).toBeInTheDocument();
+    expect(
+      screen.getByText(
+        'Runs an experimental LiveKit JS connection probe. It does not publish media. Element Call remains the normal fallback.'
+      )
+    ).toBeInTheDocument();
+  });
+
+  it('hides the connection probe toggle outside supported Tauri platforms', () => {
+    mockPlatformSupported.mockReturnValue(false);
+
+    render(<Experimental requestClose={() => {}} />);
+
+    expect(screen.queryByText('LiveKit JS Calls')).not.toBeInTheDocument();
+    expect(screen.queryByText('Try the LiveKit JS connection probe')).not.toBeInTheDocument();
+  });
+
+  it('persists the opt-in through the settings hook', () => {
+    render(<Experimental requestClose={() => {}} />);
+
+    fireEvent.click(screen.getByRole('button', { name: 'livekit-js-calls' }));
+
+    expect(mockSetLiveKitJsCallsEnabled).toHaveBeenCalledWith(true);
+  });
+
+  it('shows the manual media test only when the connection probe is enabled', () => {
+    const { rerender } = render(<Experimental requestClose={() => {}} />);
+
+    expect(screen.queryByText('Enable the manual LiveKit JS media test')).not.toBeInTheDocument();
+
+    mockUseSetting.mockImplementation((_atom: unknown, key: string) => {
+      if (key === 'livekitJsCallsEnabled') return [true, mockSetLiveKitJsCallsEnabled];
+      if (key === 'livekitJsMediaTestEnabled') return [false, mockSetLiveKitJsMediaTestEnabled];
+      return [false, vi.fn<() => void>()];
+    });
+    rerender(<Experimental requestClose={() => {}} />);
+
+    expect(screen.getByText('Enable the manual LiveKit JS media test')).toBeInTheDocument();
+    expect(
+      screen.getByText(
+        'Manual local media test only. Encrypted media is required. There is no fallback or automatic call selection. This is not release-ready.'
+      )
+    ).toBeInTheDocument();
+  });
+
+  it('does not show the manual media test on unsupported platforms', () => {
+    mockPlatformSupported.mockReturnValue(false);
+    mockUseSetting.mockImplementation((_atom: unknown, key: string) => {
+      if (key === 'livekitJsCallsEnabled') return [true, mockSetLiveKitJsCallsEnabled];
+      if (key === 'livekitJsMediaTestEnabled') return [false, mockSetLiveKitJsMediaTestEnabled];
+      return [false, vi.fn<() => void>()];
+    });
+
+    render(<Experimental requestClose={() => {}} />);
+
+    expect(screen.queryByText('Enable the manual LiveKit JS media test')).not.toBeInTheDocument();
+  });
+
+  it('persists the manual media test opt-in through the settings hook', () => {
+    mockUseSetting.mockImplementation((_atom: unknown, key: string) => {
+      if (key === 'livekitJsCallsEnabled') return [true, mockSetLiveKitJsCallsEnabled];
+      if (key === 'livekitJsMediaTestEnabled') return [false, mockSetLiveKitJsMediaTestEnabled];
+      return [false, vi.fn<() => void>()];
+    });
+
+    render(<Experimental requestClose={() => {}} />);
+
+    fireEvent.click(screen.getByRole('button', { name: 'livekit-js-media-test' }));
+
+    expect(mockSetLiveKitJsMediaTestEnabled).toHaveBeenCalledWith(true);
+  });
+});
diff --git a/src/app/features/settings/experimental/Experimental.tsx b/src/app/features/settings/experimental/Experimental.tsx
index 910272fe4e..93eb06d012 100644
--- a/src/app/features/settings/experimental/Experimental.tsx
+++ b/src/app/features/settings/experimental/Experimental.tsx
@@ -52,6 +52,41 @@ function NativeCallsToggle() {
   );
 }
 
+function LiveKitJsCallsToggle() {
+  const [livekitJsCallsEnabled, setLivekitJsCallsEnabled] = useSetting(
+    settingsAtom,
+    'livekitJsCallsEnabled'
+  );
+  const [livekitJsMediaTestEnabled, setLivekitJsMediaTestEnabled] = useSetting(
+    settingsAtom,
+    'livekitJsMediaTestEnabled'
+  );
+
+  if (!isNativeCallProbePlatformSupported()) return null;
+
+  return (
+    <Box direction="Column" gap="100">
+      <Text size="L400">LiveKit JS Calls</Text>
+      <SettingToggle
+        title="Try the LiveKit JS connection probe"
+        focusId="livekit-js-calls"
+        description="Runs an experimental LiveKit JS connection probe. It does not publish media. Element Call remains the normal fallback."
+        value={livekitJsCallsEnabled}
+        onChange={setLivekitJsCallsEnabled}
+      />
+      {livekitJsCallsEnabled && (
+        <SettingToggle
+          title="Enable the manual LiveKit JS media test"
+          focusId="livekit-js-media-test"
+          description="Manual local media test only. Encrypted media is required. There is no fallback or automatic call selection. This is not release-ready."
+          value={livekitJsMediaTestEnabled}
+          onChange={setLivekitJsMediaTestEnabled}
+        />
+      )}
+    </Box>
+  );
+}
+
 type ExperimentalProps = {
   requestBack?: () => void;
   requestClose: () => void;
@@ -80,6 +115,7 @@ export function Experimental({ requestBack, requestClose }: Readonly<Experimenta
               <BandwidthSavingEmojis />
               <PersonaToggle />
               <NativeCallsToggle />
+              <LiveKitJsCallsToggle />
               <MSC4274MediaGalleries />
             </Box>
           </PageContent>
diff --git a/src/app/generated/tauri/commands.ts b/src/app/generated/tauri/commands.ts
index 4d9caaff5e..c0cf22449d 100644
--- a/src/app/generated/tauri/commands.ts
+++ b/src/app/generated/tauri/commands.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-28T09:36:39.569954197+00:00
+ * Generated at: 2026-07-29T12:35:15.472053709+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
@@ -34,6 +34,14 @@ export async function exportDiagnostics(params: types.ExportDiagnosticsParams):
   return invoke('export_diagnostics', params);
 }
 
+export async function getPlatformCallCapabilities(): Promise<types.PlatformCallCapabilities> {
+  return invoke('getPlatformCallCapabilities');
+}
+
+export async function getPlatformCallState(): Promise<types.PlatformCallState> {
+  return invoke('getPlatformCallState');
+}
+
 export async function getDesktopRuntimeState(): Promise<types.DesktopRuntimeState> {
   return invoke('get_desktop_runtime_state');
 }
@@ -70,6 +78,10 @@ export async function saveDownload(params: types.SaveDownloadParams): Promise<bo
   return invoke('save_download', params);
 }
 
+export async function setMediaEnabled(params: types.SetMediaEnabledParams): Promise<types.CallState> {
+  return invoke('set_media_enabled', params);
+}
+
 export async function setMediaEncryption(params: types.SetMediaEncryptionParams): Promise<void> {
   return invoke('set_media_encryption', params);
 }
@@ -110,10 +122,26 @@ export async function showSnapOverlay(): Promise<void> {
   return invoke('show_snap_overlay');
 }
 
+export async function startPlatformCallLifecycle(params: types.StartPlatformCallLifecycleParams): Promise<types.PlatformCallState> {
+  return invoke('startPlatformCallLifecycle', params);
+}
+
+export async function startCallForegroundService(): Promise<void> {
+  return invoke('start_call_foreground_service');
+}
+
 export async function startWindowTrackingWithTarget(params: types.StartWindowTrackingWithTargetParams): Promise<void> {
   return invoke('start_window_tracking_with_target', params);
 }
 
+export async function stopPlatformCallLifecycle(params: types.StopPlatformCallLifecycleParams): Promise<types.PlatformCallState> {
+  return invoke('stopPlatformCallLifecycle', params);
+}
+
+export async function stopCallForegroundService(): Promise<void> {
+  return invoke('stop_call_foreground_service');
+}
+
 export async function stopWindowTracking(): Promise<void> {
   return invoke('stop_window_tracking');
 }
diff --git a/src/app/generated/tauri/events.ts b/src/app/generated/tauri/events.ts
index d5ce042cee..401ce89830 100644
--- a/src/app/generated/tauri/events.ts
+++ b/src/app/generated/tauri/events.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-28T09:36:39.570756294+00:00
+ * Generated at: 2026-07-29T12:35:15.472585808+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
diff --git a/src/app/generated/tauri/index.ts b/src/app/generated/tauri/index.ts
index 7cf70421dc..a300506863 100644
--- a/src/app/generated/tauri/index.ts
+++ b/src/app/generated/tauri/index.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-28T09:36:39.570886134+00:00
+ * Generated at: 2026-07-29T12:35:15.472650188+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
diff --git a/src/app/generated/tauri/types.ts b/src/app/generated/tauri/types.ts
index a1c43ba916..84d27a3514 100644
--- a/src/app/generated/tauri/types.ts
+++ b/src/app/generated/tauri/types.ts
@@ -1,7 +1,7 @@
 /**
  * Auto-generated TypeScript bindings for Tauri commands
  * Generated by tauri-typegen v0.5.0
- * Generated at: 2026-07-28T09:36:39.566252609+00:00
+ * Generated at: 2026-07-29T12:35:15.471191832+00:00
  * Generator: none
  *
  * Do not edit manually - regenerate using: cargo tauri-typegen generate
@@ -49,6 +49,9 @@ export interface LoopbackFetchResponse {
   body: number[];
 }
 
+
+export type MediaKind = "Microphone" | "Camera" | "ScreenShare";
+
 export interface NativeUploadResponse {
   status: number;
   body: string;
@@ -59,6 +62,12 @@ export interface ProgressPayload {
   total: number;
 }
 
+export interface SetMediaEnabledRequest {
+  connectionId: string;
+  kind: MediaKind;
+  enabled: boolean;
+}
+
 export interface ShareBatch {
   batchId: string;
   items: ShareItem[];
@@ -71,6 +80,16 @@ export interface ShareItem {
   mime?: string | null;
 }
 
+export interface StartPlatformCallLifecycleRequest {
+  sessionId: string;
+  microphone: boolean;
+  playback: boolean;
+}
+
+export interface StopPlatformCallLifecycleRequest {
+  sessionId: string;
+}
+
 export interface WindowTarget {
   window_class?: string | null;
   exe_name?: string | null;
@@ -131,6 +150,11 @@ export interface SaveDownloadParams {
   [key: string]: unknown;
 }
 
+export interface SetMediaEnabledParams {
+  payload: SetMediaEnabledRequest;
+  [key: string]: unknown;
+}
+
 export interface SetMediaEncryptionParams {
   url: string;
   key: string;
@@ -179,11 +203,21 @@ export interface ShareInboxReadParams {
   [key: string]: unknown;
 }
 
+export interface StartPlatformCallLifecycleParams {
+  payload: StartPlatformCallLifecycleRequest;
+  [key: string]: unknown;
+}
+
 export interface StartWindowTrackingWithTargetParams {
   target: WindowTarget;
   [key: string]: unknown;
 }
 
+export interface StopPlatformCallLifecycleParams {
+  payload: StopPlatformCallLifecycleRequest;
+  [key: string]: unknown;
+}
+
 export interface SyncDesktopSettingsParams {
   settings: DesktopSettings;
   [key: string]: unknown;
diff --git a/src/app/hooks/useCallEmbed.ts b/src/app/hooks/useCallEmbed.ts
index 81da3b6dd0..316233035c 100644
--- a/src/app/hooks/useCallEmbed.ts
+++ b/src/app/hooks/useCallEmbed.ts
@@ -1,5 +1,13 @@
 import type { RefObject } from 'react';
-import { createContext, useCallback, useContext, useEffect, useMemo, useState } from 'react';
+import {
+  createContext,
+  useCallback,
+  useContext,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+} from 'react';
 import type { MatrixClient, Room } from '$types/matrix-sdk';
 import { useSetAtom } from 'jotai';
 import * as Sentry from '@sentry/react';
@@ -22,6 +30,11 @@ import { useAutoDiscoveryInfo } from './useAutoDiscoveryInfo';
 import { useStore } from 'jotai';
 import { settingsAtom } from '$state/settings';
 import { useSetting } from '$state/hooks/settings';
+import { livekitJsCallAtom, isLivekitJsCallActive } from '$state/livekitJsCall';
+import { acquireCallOwner, type CallOwnerLease } from '$state/callOwner';
+import { createLivekitJsController } from '$features/call/livekitJsController';
+import { isLivekitJsCallProbeEnabled } from '$features/call/livekitJsCallProbe';
+import { selectCallStartOwner } from '$features/call/callStartSelection';
 
 const debugLog = createDebugLogger('useCallEmbed');
 
@@ -76,19 +89,89 @@ export const useCallStart = (dm = false) => {
   const callEmbedRef = useCallEmbedRef();
   const store = useStore();
   const [nativeCallsEnabled] = useSetting(settingsAtom, 'nativeCallsEnabled');
+  const [livekitJsCallsEnabled] = useSetting(settingsAtom, 'livekitJsCallsEnabled');
+  const [livekitJsMediaTestEnabled] = useSetting(settingsAtom, 'livekitJsMediaTestEnabled');
   const discovery = useAutoDiscoveryInfo();
+  const nativeOwnerLeaseRef = useRef<CallOwnerLease | undefined>(undefined);
+  const livekitJsRoomIdRef = useRef<string | undefined>(undefined);
+  const livekitJsController = useMemo(
+    () => createLivekitJsController(undefined, { manualMediaTest: livekitJsMediaTestEnabled }),
+    [livekitJsMediaTestEnabled]
+  );
   const nativeCallController = useMemo(
     () =>
       createNativeCallController({
         setSession: setNativeCall,
+        onCleanup: () => {
+          nativeOwnerLeaseRef.current?.release();
+          nativeOwnerLeaseRef.current = undefined;
+        },
       }),
     [setNativeCall]
   );
 
+  useEffect(() => {
+    const unsubscribe = livekitJsController.subscribe((controllerState) => {
+      const roomId = livekitJsRoomIdRef.current;
+      if (!roomId) return;
+      if (controllerState.lifecycle === 'idle') {
+        store.set(livekitJsCallAtom, undefined);
+        return;
+      }
+      store.set(livekitJsCallAtom, {
+        roomId,
+        lifecycle: controllerState.lifecycle,
+        failure: controllerState.failure,
+        room: controllerState.lifecycle === 'active' ? controllerState.room : undefined,
+        media: controllerState.lifecycle === 'active' ? controllerState.media : undefined,
+        hangup: () => livekitJsController.disconnect(),
+      });
+    });
+    return () => {
+      unsubscribe();
+      livekitJsRoomIdRef.current = undefined;
+      void livekitJsController.disconnect().finally(() => {
+        store.set(livekitJsCallAtom, undefined);
+      });
+    };
+  }, [livekitJsController, store]);
+
   const startCall = useCallback(
     (room: Room, pref?: CallPreferences) => {
-      if (isNativeCallProbeEnabled(nativeCallsEnabled)) {
-        if (store.get(callEmbedAtom) || isNativeCallActive(store.get(nativeCallAtom))) return;
+      const startOwner = selectCallStartOwner({
+        livekitJsProbeEnabled: isLivekitJsCallProbeEnabled(livekitJsCallsEnabled),
+        nativeProbeEnabled: isNativeCallProbeEnabled(nativeCallsEnabled),
+      });
+      if (startOwner === 'livekit-js') {
+        if (
+          store.get(callEmbedAtom) ||
+          isNativeCallActive(store.get(nativeCallAtom)) ||
+          isLivekitJsCallActive(store.get(livekitJsCallAtom))
+        )
+          return;
+        livekitJsRoomIdRef.current = room.roomId;
+        void livekitJsController
+          .connect({
+            mx,
+            room,
+            discovery,
+            callIntent: pref?.video ? 'video' : 'audio',
+            dm,
+            ongoing: mx.matrixRTC.getRoomSession(room).memberships.length > 0,
+          })
+          .catch(() => undefined);
+        return;
+      }
+      if (startOwner === 'native') {
+        if (
+          store.get(callEmbedAtom) ||
+          isNativeCallActive(store.get(nativeCallAtom)) ||
+          isLivekitJsCallActive(store.get(livekitJsCallAtom))
+        )
+          return;
+        const ownerLease = acquireCallOwner('native', room.roomId);
+        if (!ownerLease) return;
+        nativeOwnerLeaseRef.current = ownerLease;
         const ongoing = mx.matrixRTC.getRoomSession(room).memberships.length > 0;
         void nativeCallController
           .start({
@@ -103,8 +186,11 @@ export const useCallStart = (dm = false) => {
           .catch(() => undefined);
         return;
       }
+      const ownerLease = acquireCallOwner('element', room.roomId);
+      if (!ownerLease) return;
       const container = callEmbedRef.current;
       if (!container) {
+        ownerLease.release();
         debugLog.error('call', 'Failed to start call — no embed container', {
           roomId: room.roomId,
         });
@@ -130,6 +216,7 @@ export const useCallStart = (dm = false) => {
         );
         setCallEmbed(callEmbed);
       } catch (err) {
+        ownerLease.release();
         debugLog.error('call', 'Call embed creation failed', {
           roomId: room.roomId,
           error: err instanceof Error ? err.message : String(err),
@@ -152,6 +239,8 @@ export const useCallStart = (dm = false) => {
       discovery,
       nativeCallController,
       nativeCallsEnabled,
+      livekitJsCallsEnabled,
+      livekitJsController,
     ]
   );
 
diff --git a/src/app/plugins/call/callLifecycle.test.ts b/src/app/plugins/call/callLifecycle.test.ts
index 8a213bd509..78dfdb1723 100644
--- a/src/app/plugins/call/callLifecycle.test.ts
+++ b/src/app/plugins/call/callLifecycle.test.ts
@@ -3,6 +3,7 @@ import { beforeEach, describe, expect, it, vi } from 'vitest';
 const pluginConnect = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
 const pluginDisconnect = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
 const pluginGetState = vi.hoisted(() => vi.fn<() => Promise<unknown>>());
+const invoke = vi.hoisted(() => vi.fn<(...args: unknown[]) => Promise<unknown>>());
 const listen = vi.hoisted(() => vi.fn<(...args: unknown[]) => Promise<unknown>>());
 
 vi.mock('tauri-plugin-call-lifecycle-api', () => ({
@@ -10,6 +11,7 @@ vi.mock('tauri-plugin-call-lifecycle-api', () => ({
   disconnect: pluginDisconnect,
   getState: pluginGetState,
 }));
+vi.mock('@tauri-apps/api/core', () => ({ invoke }));
 vi.mock('@tauri-apps/api/event', () => ({ listen }));
 
 import {
@@ -18,6 +20,7 @@ import {
   getState,
   onError,
   onState,
+  setMediaEnabled,
   type CallLifecycleError,
   type CallState,
 } from './callLifecycle';
@@ -27,10 +30,28 @@ describe('call lifecycle wrapper', () => {
     pluginConnect.mockReset();
     pluginDisconnect.mockReset();
     pluginGetState.mockReset();
+    invoke.mockReset();
     listen.mockReset();
     listen.mockResolvedValue(vi.fn());
   });
 
+  it('uses the namespaced media command and native snake-case payload', async () => {
+    const state = {
+      revision: 1,
+      state: 'connected',
+      connectionId: 'connection-id',
+    } satisfies CallState;
+    invoke.mockResolvedValue(state);
+
+    await expect(
+      setMediaEnabled({ connectionId: 'connection-id', kind: 'screen_share', enabled: true })
+    ).resolves.toEqual(state);
+
+    expect(invoke).toHaveBeenCalledWith('plugin:call-lifecycle|set_media_enabled', {
+      payload: { connectionId: 'connection-id', kind: 'screen_share', enabled: true },
+    });
+  });
+
   it('delegates lifecycle commands to the guest API', async () => {
     const state = {
       revision: 1,
diff --git a/src/app/plugins/call/callLifecycle.ts b/src/app/plugins/call/callLifecycle.ts
index dc2d201619..410cdcab78 100644
--- a/src/app/plugins/call/callLifecycle.ts
+++ b/src/app/plugins/call/callLifecycle.ts
@@ -8,6 +8,7 @@ import {
   type ConnectionState,
   type DisconnectRequest,
 } from 'tauri-plugin-call-lifecycle-api';
+import { invoke } from '@tauri-apps/api/core';
 import { listen, type UnlistenFn } from '@tauri-apps/api/event';
 
 const STATE_EVENT = 'plugin:call-lifecycle://state';
@@ -15,10 +16,22 @@ const ERROR_EVENT = 'plugin:call-lifecycle://error';
 
 export type { CallLifecycleError, CallState, ConnectRequest, ConnectionState, DisconnectRequest };
 
+export type MediaKind = 'microphone' | 'camera' | 'screen_share';
+
+export type SetMediaEnabledRequest = {
+  connectionId: string;
+  kind: MediaKind;
+  enabled: boolean;
+};
+
 export const connect = pluginConnect;
 export const disconnect = pluginDisconnect;
 export const getState = pluginGetState;
 
+export function setMediaEnabled(request: SetMediaEnabledRequest): Promise<CallState> {
+  return invoke<CallState>('plugin:call-lifecycle|set_media_enabled', { payload: request });
+}
+
 export function onState(handler: (state: CallState) => void): Promise<UnlistenFn> {
   return listen<CallState>(STATE_EVENT, (event) => handler(event.payload));
 }
diff --git a/src/app/plugins/call/platformCallLifecycle.test.ts b/src/app/plugins/call/platformCallLifecycle.test.ts
new file mode 100644
index 0000000000..b4c743f03d
--- /dev/null
+++ b/src/app/plugins/call/platformCallLifecycle.test.ts
@@ -0,0 +1,99 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest';
+
+const pluginGetCapabilities = vi.hoisted(() => vi.fn<() => Promise<unknown>>());
+const pluginGetState = vi.hoisted(() => vi.fn<() => Promise<unknown>>());
+const pluginListenEvent = vi.hoisted(() =>
+  vi.fn<(handler: (event: unknown) => void) => Promise<unknown>>()
+);
+const pluginStart = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
+const pluginStop = vi.hoisted(() => vi.fn<(request: unknown) => Promise<unknown>>());
+
+vi.mock('tauri-plugin-call-lifecycle-api', () => ({
+  getPlatformCallCapabilities: pluginGetCapabilities,
+  getPlatformCallState: pluginGetState,
+  listenPlatformCallEvent: pluginListenEvent,
+  startPlatformCallLifecycle: pluginStart,
+  stopPlatformCallLifecycle: pluginStop,
+}));
+
+import {
+  getPlatformCapabilities,
+  getPlatformState,
+  onPlatformCallEvent,
+  startPlatformLifecycle,
+  stopPlatformLifecycle,
+  type PlatformCallEvent,
+  type PlatformCallState,
+} from './platformCallLifecycle';
+
+describe('platform call lifecycle wrapper', () => {
+  beforeEach(() => {
+    pluginGetCapabilities.mockReset();
+    pluginGetState.mockReset();
+    pluginListenEvent.mockReset();
+    pluginStart.mockReset();
+    pluginStop.mockReset();
+    pluginListenEvent.mockResolvedValue(vi.fn());
+  });
+
+  it('delegates capabilities/start/stop/state commands with opaque session payloads', async () => {
+    const capabilities = { supported: true, microphone: true, playback: true };
+    const state = {
+      revision: 2,
+      state: 'active',
+      sessionId: 'opaque-session',
+      microphone: true,
+      playback: true,
+      capabilities,
+    } satisfies PlatformCallState;
+    pluginGetCapabilities.mockResolvedValue(capabilities);
+    pluginStart.mockResolvedValue(state);
+    pluginStop.mockResolvedValue(state);
+    pluginGetState.mockResolvedValue(state);
+
+    await expect(getPlatformCapabilities()).resolves.toEqual(capabilities);
+    await expect(
+      startPlatformLifecycle({ sessionId: 'opaque-session', microphone: true, playback: true })
+    ).resolves.toEqual(state);
+    await expect(stopPlatformLifecycle({ sessionId: 'opaque-session' })).resolves.toEqual(state);
+    await expect(getPlatformState()).resolves.toEqual(state);
+
+    expect(pluginStart).toHaveBeenCalledWith({
+      sessionId: 'opaque-session',
+      microphone: true,
+      playback: true,
+    });
+    expect(pluginStop).toHaveBeenCalledWith({ sessionId: 'opaque-session' });
+  });
+
+  it('forwards bounded platform events and drops malformed payloads', async () => {
+    const handler = vi.fn<(event: PlatformCallEvent) => void>();
+    await onPlatformCallEvent(handler);
+    const listener = pluginListenEvent.mock.calls[0]?.[0] as (event: unknown) => void;
+
+    const routeEvent: PlatformCallEvent = {
+      revision: 4,
+      sessionId: 'opaque-session',
+      type: 'route_changed',
+      route: 'speaker',
+    };
+    listener(routeEvent);
+    listener({ revision: 5, sessionId: 'opaque-session', type: 'media_reset' });
+    listener({
+      revision: 6,
+      sessionId: 'opaque-session',
+      type: 'failed',
+      code: 'audio_unavailable',
+    });
+
+    // Malformed or out-of-contract payloads never reach the handler.
+    listener({ revision: 7, sessionId: 'opaque-session', type: 'route_changed', route: 'eth0' });
+    listener({ revision: 8, sessionId: 'opaque-session', type: 'publish_track' });
+    listener({ revision: '9', sessionId: 'opaque-session', type: 'media_reset' });
+    listener({ revision: 10, type: 'media_reset' });
+    listener({ revision: 11, sessionId: 'opaque-session', type: 'failed', code: 'raw-native' });
+
+    expect(handler).toHaveBeenCalledTimes(3);
+    expect(handler).toHaveBeenNthCalledWith(1, routeEvent);
+  });
+});
diff --git a/src/app/plugins/call/platformCallLifecycle.ts b/src/app/plugins/call/platformCallLifecycle.ts
new file mode 100644
index 0000000000..3b73c3babd
--- /dev/null
+++ b/src/app/plugins/call/platformCallLifecycle.ts
@@ -0,0 +1,81 @@
+import {
+  getPlatformCallCapabilities as pluginGetCapabilities,
+  getPlatformCallState as pluginGetState,
+  listenPlatformCallEvent as pluginListenEvent,
+  startPlatformCallLifecycle as pluginStart,
+  stopPlatformCallLifecycle as pluginStop,
+  type PlatformCallCapabilities,
+  type PlatformCallEvent,
+  type PlatformCallFailureCode,
+  type PlatformCallRoute,
+  type PlatformCallState,
+  type StartPlatformCallLifecycleRequest,
+  type StopPlatformCallLifecycleRequest,
+} from 'tauri-plugin-call-lifecycle-api';
+import type { UnlistenFn } from '@tauri-apps/api/event';
+
+export type {
+  PlatformCallCapabilities,
+  PlatformCallEvent,
+  PlatformCallFailureCode,
+  PlatformCallRoute,
+  PlatformCallState,
+  StartPlatformCallLifecycleRequest,
+  StopPlatformCallLifecycleRequest,
+};
+
+const EVENT_TYPES = new Set([
+  'focus_changed',
+  'route_changed',
+  'interrupted',
+  'media_reset',
+  'failed',
+]);
+
+const ROUTES = new Set<PlatformCallRoute>(['earpiece', 'speaker', 'wired', 'bluetooth', 'unknown']);
+
+const FAILURE_CODES = new Set<PlatformCallFailureCode>([
+  'unsupported',
+  'permission_denied',
+  'audio_unavailable',
+  'start_failed',
+  'stop_failed',
+  'stale_session',
+  'busy',
+]);
+
+const isBoundedEvent = (payload: unknown): payload is PlatformCallEvent => {
+  if (!payload || typeof payload !== 'object') return false;
+  const event = payload as Record<string, unknown>;
+  if (typeof event.revision !== 'number' || typeof event.sessionId !== 'string') return false;
+  if (typeof event.type !== 'string' || !EVENT_TYPES.has(event.type)) return false;
+  switch (event.type) {
+    case 'focus_changed':
+      return typeof event.focused === 'boolean';
+    case 'route_changed':
+      return typeof event.route === 'string' && ROUTES.has(event.route as PlatformCallRoute);
+    case 'interrupted':
+      return event.state === 'began' || event.state === 'ended';
+    case 'media_reset':
+      return true;
+    case 'failed':
+      return (
+        typeof event.code === 'string' && FAILURE_CODES.has(event.code as PlatformCallFailureCode)
+      );
+    default:
+      return false;
+  }
+};
+
+export const getPlatformCapabilities = pluginGetCapabilities;
+export const startPlatformLifecycle = pluginStart;
+export const stopPlatformLifecycle = pluginStop;
+export const getPlatformState = pluginGetState;
+
+export function onPlatformCallEvent(
+  handler: (event: PlatformCallEvent) => void
+): Promise<UnlistenFn> {
+  return pluginListenEvent((payload) => {
+    if (isBoundedEvent(payload)) handler(payload);
+  });
+}
diff --git a/src/app/state/callEmbed.ts b/src/app/state/callEmbed.ts
index 3dcc6c7459..6a81124540 100644
--- a/src/app/state/callEmbed.ts
+++ b/src/app/state/callEmbed.ts
@@ -2,6 +2,7 @@ import { atom } from 'jotai';
 import * as Sentry from '@sentry/react';
 import type { CallEmbed } from '../plugins/call';
 import type { CallEmbedStartError } from '$plugins/call/callEmbedError';
+import { releaseCallOwner } from './callOwner';
 
 const baseCallEmbedAtom = atom<CallEmbed | undefined>(undefined);
 const baseCallEmbedStartErrorAtom = atom<CallEmbedStartError | null>(null);
@@ -25,6 +26,7 @@ export const callEmbedAtom = atom<CallEmbed | undefined, [CallEmbed | undefined]
         embedCreatedAt = null;
       }
       prevCallEmbed.dispose();
+      releaseCallOwner('element', prevCallEmbed.roomId);
     }
 
     if (callEmbed !== undefined) {
diff --git a/src/app/state/callOwner.test.ts b/src/app/state/callOwner.test.ts
new file mode 100644
index 0000000000..d36a9b7409
--- /dev/null
+++ b/src/app/state/callOwner.test.ts
@@ -0,0 +1,28 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { acquireCallOwner, getActiveCallOwner, resetCallOwnerForTests } from './callOwner';
+
+beforeEach(() => resetCallOwnerForTests());
+
+describe('call owner guard', () => {
+  it('allows one owner and rejects competing owners until release', () => {
+    const native = acquireCallOwner('native', '!room:example.org');
+
+    expect(native).toBeDefined();
+    expect(acquireCallOwner('livekit-js', '!room:example.org')).toBeUndefined();
+    expect(getActiveCallOwner()).toMatchObject({ kind: 'native' });
+
+    native?.release();
+    expect(acquireCallOwner('element', '!room:example.org')).toBeDefined();
+  });
+
+  it('makes release idempotent and cannot release a replacement lease', () => {
+    const first = acquireCallOwner('element', '!room:example.org');
+    first?.release();
+    const second = acquireCallOwner('livekit-js', '!room:example.org');
+
+    first?.release();
+    expect(getActiveCallOwner()).toMatchObject({ kind: 'livekit-js' });
+    second?.release();
+    expect(getActiveCallOwner()).toBeUndefined();
+  });
+});
diff --git a/src/app/state/callOwner.ts b/src/app/state/callOwner.ts
new file mode 100644
index 0000000000..a266a13008
--- /dev/null
+++ b/src/app/state/callOwner.ts
@@ -0,0 +1,40 @@
+export type CallOwnerKind = 'element' | 'native' | 'livekit-js';
+
+export type CallOwnerLease = {
+  kind: CallOwnerKind;
+  roomId: string;
+  release: () => void;
+};
+
+let activeOwner: CallOwnerLease | undefined;
+
+export const acquireCallOwner = (
+  kind: CallOwnerKind,
+  roomId: string
+): CallOwnerLease | undefined => {
+  if (activeOwner) return undefined;
+
+  let released = false;
+  const lease: CallOwnerLease = {
+    kind,
+    roomId,
+    release: () => {
+      if (released || activeOwner !== lease) return;
+      released = true;
+      activeOwner = undefined;
+    },
+  };
+  activeOwner = lease;
+  return lease;
+};
+
+export const getActiveCallOwner = (): Pick<CallOwnerLease, 'kind' | 'roomId'> | undefined =>
+  activeOwner;
+
+export const releaseCallOwner = (kind: CallOwnerKind, roomId: string): void => {
+  if (activeOwner?.kind === kind && activeOwner.roomId === roomId) activeOwner.release();
+};
+
+export const resetCallOwnerForTests = (): void => {
+  activeOwner = undefined;
+};
diff --git a/src/app/state/livekitJsCall.test.ts b/src/app/state/livekitJsCall.test.ts
new file mode 100644
index 0000000000..bb5a075c6f
--- /dev/null
+++ b/src/app/state/livekitJsCall.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, it } from 'vitest';
+import { selectActiveCallSession } from './livekitJsCall';
+import { acquireCallOwner, getActiveCallOwner, resetCallOwnerForTests } from './callOwner';
+
+describe('selectActiveCallSession', () => {
+  it('selects the JS owner when Element Call and native sessions are absent', () => {
+    const livekitSession = {
+      roomId: '!room:example.org',
+      lifecycle: 'active' as const,
+      failure: null,
+      hangup: async () => undefined,
+    };
+
+    expect(selectActiveCallSession(undefined, undefined, livekitSession)).toBe(livekitSession);
+  });
+
+  it('preserves Element Call and native precedence', () => {
+    const element = { roomId: '!element:example.org' };
+    const native = {
+      roomId: '!native:example.org',
+      connectionId: 'native',
+      lifecycle: 'connected' as const,
+      hangup: async () => undefined,
+    };
+    const livekit = {
+      roomId: '!livekit:example.org',
+      lifecycle: 'active' as const,
+      failure: null,
+      hangup: async () => undefined,
+    };
+
+    expect(selectActiveCallSession(element, native, livekit)).toBe(element);
+    expect(selectActiveCallSession(undefined, native, livekit)).toBe(native);
+  });
+
+  it('routes past a failed native session to the active JS owner and releases its lease', async () => {
+    resetCallOwnerForTests();
+    const lease = acquireCallOwner('livekit-js', '!room:example.org');
+    const livekit = {
+      roomId: '!room:example.org',
+      lifecycle: 'active' as const,
+      failure: null,
+      hangup: async () => lease?.release(),
+    };
+    const native = {
+      roomId: '!room:example.org',
+      connectionId: 'native',
+      lifecycle: 'error' as const,
+      hangup: async () => undefined,
+    };
+
+    await selectActiveCallSession(undefined, native, livekit)?.hangup();
+
+    expect(getActiveCallOwner()).toBeUndefined();
+  });
+
+  it('routes past a failed JS session to Element Call and releases its lease', async () => {
+    resetCallOwnerForTests();
+    const lease = acquireCallOwner('element', '!room:example.org');
+    const element = {
+      roomId: '!room:example.org',
+      hangup: async () => lease?.release(),
+    };
+    const livekit = {
+      roomId: '!room:example.org',
+      lifecycle: 'failed' as const,
+      failure: 'setup-failed' as const,
+      hangup: async () => undefined,
+    };
+
+    await selectActiveCallSession(element, undefined, livekit)?.hangup();
+
+    expect(getActiveCallOwner()).toBeUndefined();
+  });
+});
diff --git a/src/app/state/livekitJsCall.ts b/src/app/state/livekitJsCall.ts
new file mode 100644
index 0000000000..278c4951f5
--- /dev/null
+++ b/src/app/state/livekitJsCall.ts
@@ -0,0 +1,35 @@
+import { atom } from 'jotai';
+import type {
+  LivekitJsControllerFailure,
+  LivekitJsControllerLifecycle,
+  LivekitJsMediaFacade,
+} from '$features/call/livekitJsController';
+import type { Room as LivekitRoom } from 'livekit-client';
+import type { NativeCallSession } from './nativeCall';
+
+export type LivekitJsCallSession = {
+  roomId: string;
+  lifecycle: LivekitJsControllerLifecycle;
+  failure: LivekitJsControllerFailure | null;
+  room?: LivekitRoom;
+  media?: LivekitJsMediaFacade;
+  hangup: () => Promise<void>;
+};
+
+export const livekitJsCallAtom = atom<LivekitJsCallSession | undefined>(undefined);
+
+export const isLivekitJsCallActive = (session: LivekitJsCallSession | undefined): boolean =>
+  session?.lifecycle !== undefined &&
+  session.lifecycle !== 'idle' &&
+  session.lifecycle !== 'failed';
+
+export const selectActiveCallSession = <Element>(
+  elementCall: Element | undefined,
+  nativeCall: NativeCallSession | undefined,
+  livekitJsCall: LivekitJsCallSession | undefined
+): Element | NativeCallSession | LivekitJsCallSession | undefined => {
+  if (elementCall) return elementCall;
+  if (nativeCall && nativeCall.lifecycle !== 'error') return nativeCall;
+  if (isLivekitJsCallActive(livekitJsCall)) return livekitJsCall;
+  return undefined;
+};
diff --git a/src/app/state/settings.defaults.test.ts b/src/app/state/settings.defaults.test.ts
index 159d3f7a6f..377abb661e 100644
--- a/src/app/state/settings.defaults.test.ts
+++ b/src/app/state/settings.defaults.test.ts
@@ -21,6 +21,24 @@ describe('mergePersistedSettings', () => {
     );
   });
 
+  it('defaults the LiveKit JS connection probe off and persists the opt-in', () => {
+    expect(defaultSettings.livekitJsCallsEnabled).toBe(false);
+
+    localStorage.setItem('settings', JSON.stringify({ livekitJsCallsEnabled: true }));
+    expect(mergePersistedSettings(localStorage.getItem('settings'), {}).livekitJsCallsEnabled).toBe(
+      true
+    );
+  });
+
+  it('defaults the LiveKit JS media test off and persists the opt-in', () => {
+    expect(defaultSettings.livekitJsMediaTestEnabled).toBe(false);
+
+    localStorage.setItem('settings', JSON.stringify({ livekitJsMediaTestEnabled: true }));
+    expect(
+      mergePersistedSettings(localStorage.getItem('settings'), {}).livekitJsMediaTestEnabled
+    ).toBe(true);
+  });
+
   it('layers deployer defaults over code defaults when localStorage is empty', () => {
     const merged = mergePersistedSettings(null, { twitterEmoji: false });
     expect(merged.twitterEmoji).toBe(false);
@@ -97,6 +115,20 @@ describe('sanitizeSettingsDefaults', () => {
     });
   });
 
+  it('accepts the LiveKit JS connection probe setting', () => {
+    expect(sanitizeSettingsDefaults({ livekitJsCallsEnabled: true })).toEqual({
+      livekitJsCallsEnabled: true,
+    });
+    expect(sanitizeSettingsDefaults({ livekitJsCallsEnabled: 'yes' })).toEqual({});
+  });
+
+  it('accepts the LiveKit JS media test setting', () => {
+    expect(sanitizeSettingsDefaults({ livekitJsMediaTestEnabled: true })).toEqual({
+      livekitJsMediaTestEnabled: true,
+    });
+    expect(sanitizeSettingsDefaults({ livekitJsMediaTestEnabled: 'yes' })).toEqual({});
+  });
+
   it('drops unknown keys', () => {
     expect(sanitizeSettingsDefaults({ notARealSetting: true, hour24Clock: true })).toEqual({
       hour24Clock: true,
diff --git a/src/app/state/settings.ts b/src/app/state/settings.ts
index a007f9e247..de19059235 100644
--- a/src/app/state/settings.ts
+++ b/src/app/state/settings.ts
@@ -181,6 +181,8 @@ export interface Settings {
   enableMSC4268CMD: boolean;
   enableMediaGalleries: boolean;
   nativeCallsEnabled: boolean;
+  livekitJsCallsEnabled: boolean;
+  livekitJsMediaTestEnabled: boolean;
   settingsSyncEnabled: boolean;
 
   // Cosmetics!
@@ -339,6 +341,8 @@ export const defaultSettings: Settings = {
   enableMSC4268CMD: false,
   enableMediaGalleries: false,
   nativeCallsEnabled: false,
+  livekitJsCallsEnabled: false,
+  livekitJsMediaTestEnabled: false,
 
   // Push notifications (SW/Sygnal): default on for mobile, opt-in on desktop.
   // In-app pill banner: default on for mobile (primary foreground alert), opt-in on desktop.