@signalwire/js 4.0.0-beta.12 → 4.0.0-beta.13

package/dist/browser.mjs

@@ -1,5 +1,3 @@
-import { randomFillSync, randomUUID } from "node:crypto";
-
 //#region rolldown:runtime
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -9017,6 +9015,151 @@ var Destroyable = class {
 	}
 };
 
+//#endregion
+//#region src/core/constants.ts
+const INVITE_VERSION = 1e3;
+const DEFAULT_ICE_CANDIDATE_TIMEOUT_MS = 600;
+const DEFAULT_ICE_GATHERING_TIMEOUT_MS = 6e3;
+const DEFAULT_RECONNECT_CALLS_TIMEOUT_MS = 300 * 1e3;
+const DEFAULT_CONNECTION_TIMEOUT_MS = 1e4;
+const DEFAULT_RECONNECT_DELAY_MIN_MS = 100;
+const DEFAULT_RECONNECT_DELAY_MAX_MS = 3e3;
+const DEFAULT_DEVICE_DEBOUNCE_TIME_MS = 1500;
+const DEFAULT_DEVICE_POLLING_INTERVAL_MS = 0;
+const PREFERENCES_STORAGE_KEY = "sw:preferences";
+/** Scope value that enables automatic token refresh. */
+const SAT_REFRESH_SCOPE = "sat:refresh";
+/** API endpoints for device token operations. */
+const DEVICE_TOKEN_ENDPOINT = "/api/fabric/subscriber/devices/token";
+const DEVICE_REFRESH_ENDPOINT = "/api/fabric/subscriber/devices/refresh";
+/** Default device token TTL in seconds (15 minutes). */
+const DEVICE_TOKEN_DEFAULT_EXPIRE_IN = 900;
+/** Buffer time in milliseconds before expiry to trigger refresh. */
+const DEVICE_TOKEN_REFRESH_BUFFER_MS = 3e4;
+/** Maximum retry attempts for device token refresh on transient failure. */
+const DEVICE_TOKEN_REFRESH_MAX_RETRIES = 3;
+/** Base delay in milliseconds for exponential backoff on refresh retry. */
+const DEVICE_TOKEN_REFRESH_RETRY_BASE_MS = 1e3;
+/** Maximum retry attempts for developer credential refresh on transient failure. */
+const CREDENTIAL_REFRESH_MAX_RETRIES = 5;
+/** Base delay in milliseconds for exponential backoff on credential refresh retry. */
+const CREDENTIAL_REFRESH_RETRY_BASE_MS = 1e3;
+/** Maximum delay in milliseconds for credential refresh backoff. */
+const CREDENTIAL_REFRESH_MAX_DELAY_MS = 3e4;
+/** Buffer in milliseconds before token expiry to trigger refresh. */
+const CREDENTIAL_REFRESH_BUFFER_MS = 5e3;
+/**
+* Clock-skew allowance (ms) for treating an in-memory credential as expired
+* when deciding whether a fresh (re)connect must re-mint the token before
+* authenticating. A token within this window of its `expiry_at` is treated as
+* stale so the reconnect re-mints via the credential provider instead of
+* replaying a dead token (which the server rejects with -32003).
+*/
+const CREDENTIAL_EXPIRY_SKEW_MS = 3e4;
+/**
+* Maximum time the coordinator will wait for `DeviceTokenManager.activate()`
+* to resolve before treating the activation as failed and falling back to
+* the developer-provided refresh path. Prevents a wedged HTTP layer from
+* leaving the session with no active refresh mechanism.
+*/
+const CREDENTIAL_ACTIVATE_TIMEOUT_MS = 3e4;
+/** JSON-RPC error code for requester validation failure (corrupted auth state). */
+const RPC_ERROR_REQUESTER_VALIDATION_FAILED = -32003;
+/** JSON-RPC error code for invalid params (e.g., missing authentication block). */
+const RPC_ERROR_INVALID_PARAMS = -32602;
+/** JSON-RPC error code for authentication failure (invalid token, missing DPoP, etc.). */
+const RPC_ERROR_AUTHENTICATION_FAILED = -32002;
+/** Error names browsers use for a media permission denial (user or policy). */
+const MEDIA_ACCESS_DENIAL_NAMES = [
+	"NotAllowedError",
+	"SecurityError",
+	"PermissionDeniedError"
+];
+/** Default polling interval for RTCPeerConnection.getStats() in milliseconds. */
+const DEFAULT_STATS_POLLING_INTERVAL_MS = 1e3;
+/** Number of initial samples used to build a baseline for spike detection. */
+const DEFAULT_STATS_BASELINE_SAMPLES = 10;
+/** Duration in ms with no inbound audio packets before emitting a critical issue. */
+const DEFAULT_STATS_NO_PACKET_THRESHOLD_MS = 2e3;
+/** Multiplier applied to baseline RTT to detect a warning-level RTT spike. */
+const DEFAULT_STATS_RTT_SPIKE_MULTIPLIER = 3;
+/** Packet loss fraction (0-1) above which a warning is emitted. */
+const DEFAULT_STATS_PACKET_LOSS_THRESHOLD = .05;
+/** Multiplier applied to baseline jitter to detect a jitter spike. */
+const DEFAULT_STATS_JITTER_SPIKE_MULTIPLIER = 4;
+/** Number of seconds of metrics history to retain. */
+const DEFAULT_STATS_HISTORY_SIZE = 30;
+/** Maximum keyframe requests allowed within a single burst window. */
+const DEFAULT_KEYFRAME_MAX_BURST$1 = 3;
+/** Duration of the keyframe burst window in milliseconds. */
+const DEFAULT_KEYFRAME_BURST_WINDOW_MS$1 = 3e3;
+/** Cooldown period in ms after burst limit is reached before allowing more keyframes. */
+const DEFAULT_KEYFRAME_COOLDOWN_MS$1 = 1e4;
+/** Minimum time between re-INVITE attempts in milliseconds. */
+const DEFAULT_REINVITE_DEBOUNCE_TIME_MS = 1e4;
+/** Maximum number of re-INVITE attempts per call. */
+const DEFAULT_REINVITE_MAX_ATTEMPTS = 3;
+/** Timeout for a single re-INVITE attempt in milliseconds. */
+const DEFAULT_REINVITE_TIMEOUT_MS = 5e3;
+/** Debounce window in ms to collapse multiple detection signals into one trigger. */
+const DEFAULT_RECOVERY_DEBOUNCE_TIME_MS = 2e3;
+/** Cooldown period in ms between recovery attempts. */
+const DEFAULT_RECOVERY_COOLDOWN_MS = 1e4;
+/** Grace period in ms before treating ICE 'disconnected' as a failure. */
+const DEFAULT_ICE_DISCONNECTED_GRACE_PERIOD_MS = 3e3;
+/** Timeout for a single ICE restart attempt in milliseconds. */
+const DEFAULT_ICE_RESTART_TIMEOUT_MS$1 = 5e3;
+/** Maximum recovery attempts before emitting 'max_attempts_reached'. */
+const DEFAULT_MAX_RECOVERY_ATTEMPTS = 3;
+/** Upper bound in ms for waiting on iceGatheringState === 'complete' after an ICE restart. */
+const ICE_GATHERING_COMPLETE_TIMEOUT_MS = 1e4;
+/** Upper bound in ms for waiting on RTCPeerConnection.connectionState === 'connected' after a recovery ICE restart. */
+const PEER_CONNECTION_RECOVERY_WAIT_MS = 5e3;
+/** Polling interval in ms while waiting for RTCPeerConnection.connectionState to transition. */
+const PEER_CONNECTION_RECOVERY_POLL_MS = 100;
+/** Polling interval for LocalAudioPipeline.level$ (ms). ~30fps is smooth for meters. */
+const AUDIO_LEVEL_POLL_INTERVAL_MS = 33;
+/** RMS level threshold (0..1) above which the local participant is considered speaking. */
+const VAD_THRESHOLD = .03;
+/** Hold window in ms below the threshold before speaking$ flips back to false. */
+const VAD_HOLD_MS = 250;
+/** Whether to persist device selections to storage by default. */
+const DEFAULT_PERSIST_DEVICE_SELECTION = true;
+/** Whether to auto-apply device changes to active calls by default. */
+const DEFAULT_SYNC_DEVICES_TO_ACTIVE_CALLS = true;
+/** Storage keys for persisted device selections. */
+const DEVICE_STORAGE_KEY_AUDIO_INPUT = "sw:device:audioinput";
+const DEVICE_STORAGE_KEY_AUDIO_OUTPUT = "sw:device:audiooutput";
+const DEVICE_STORAGE_KEY_VIDEO_INPUT = "sw:device:videoinput";
+/** Whether to auto-mute video when the tab becomes hidden. */
+const DEFAULT_AUTO_MUTE_VIDEO_ON_HIDDEN = false;
+/** Whether to re-enumerate devices when the page becomes visible. */
+const DEFAULT_REFRESH_DEVICES_ON_VISIBLE = true;
+/** Whether to check peer connection health when the page becomes visible. */
+const DEFAULT_CHECK_CONNECTION_ON_VISIBLE = true;
+/** Whether automatic video degradation on low bandwidth is enabled. */
+const DEFAULT_ENABLE_AUTO_DEGRADATION = true;
+/** Bitrate in kbps below which video is automatically disabled. */
+const DEFAULT_DEGRADATION_BITRATE_THRESHOLD_KBPS = 150;
+/** Bitrate in kbps above which video is automatically re-enabled (hysteresis). */
+const DEFAULT_DEGRADATION_RECOVERY_THRESHOLD_KBPS = 300;
+/** Whether relay-only escalation is enabled as a last-resort recovery tier. */
+const DEFAULT_ENABLE_RELAY_FALLBACK = true;
+/** Whether to listen for browser online/offline/connection events. */
+const DEFAULT_ENABLE_NETWORK_CHANGE_DETECTION = true;
+/** Whether to intercept server-sent media-timeout hangups and attempt recovery. */
+const DEFAULT_ENABLE_SERVER_HANGUP_INTERCEPTION = true;
+/** Default video track constraints applied when video is enabled without explicit constraints. */
+const DEFAULT_VIDEO_CONSTRAINTS = {
+	width: { ideal: 1280 },
+	height: { ideal: 720 },
+	aspectRatio: 16 / 9
+};
+/** Whether stereo Opus is enabled by default. */
+const DEFAULT_STEREO_AUDIO = false;
+/** Max average bitrate for stereo Opus in bits per second. */
+const DEFAULT_STEREO_MAX_AVERAGE_BITRATE = 51e4;
+
 //#endregion
 //#region src/core/errors.ts
 var UnexpectedError = class extends Error {
@@ -9146,6 +9289,20 @@ var CallCreateError = class extends Error {
 		this.name = "CallCreateError";
 	}
 };
+var CallNotReadyError = class extends Error {
+	constructor(callId, options) {
+		super(`Call "${callId}" has no self member context yet: selfId/nodeId have not been received from the server`, options);
+		this.callId = callId;
+		this.name = "CallNotReadyError";
+	}
+};
+var ParticipantNotReadyError = class extends Error {
+	constructor(memberId, options) {
+		super(`Participant "${memberId}" has no call context yet: its member state (call_id/node_id) has not been received from the server`, options);
+		this.memberId = memberId;
+		this.name = "ParticipantNotReadyError";
+	}
+};
 var JSONRPCError = class extends Error {
 	constructor(code, message, data, options, requestId) {
 		super(message, options);
@@ -9226,6 +9383,33 @@ var MediaTrackError = class extends Error {
 		this.name = "MediaTrackError";
 	}
 };
+/** True when a `getUserMedia`/`getDisplayMedia` rejection is a permission denial. */
+function isMediaAccessDenial(originalError) {
+	return originalError instanceof Error && MEDIA_ACCESS_DENIAL_NAMES.includes(originalError.name);
+}
+/**
+* Failure to acquire local media (camera, microphone, or screen capture)
+* via `getUserMedia`/`getDisplayMedia`.
+*
+* Non-fatal by default: screenshare and additional-device failures never
+* end the call, and main-connection failures degrade to receive-only when
+* possible. The wrapping site sets `fatal` to `true` only when the call
+* cannot continue (receive-only fallback disabled or no receive intent).
+*/
+var MediaAccessError = class extends Error {
+	constructor(operation, media, originalError, fatal = false) {
+		super(`Media access ${isMediaAccessDenial(originalError) ? "denied" : "failed"} for ${operation} (${media})`, { cause: originalError instanceof Error ? originalError : void 0 });
+		this.operation = operation;
+		this.media = media;
+		this.originalError = originalError;
+		this.fatal = fatal;
+		this.name = "MediaAccessError";
+	}
+	/** True when the underlying failure is a permission denial (user or policy). */
+	get denied() {
+		return isMediaAccessDenial(this.originalError);
+	}
+};
 var DPoPInitError = class extends Error {
 	constructor(originalError, message = "Failed to initialize DPoP key pair") {
 		super(message, { cause: originalError instanceof Error ? originalError : void 0 });
@@ -9466,9 +9650,9 @@ var require_loglevel = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		defaultLogger$1 = new Logger();
 		defaultLogger$1.getLogger = function getLogger$1(name) {
 			if (typeof name !== "symbol" && typeof name !== "string" || name === "") throw new TypeError("You must supply a name when creating a logger.");
-			var logger$32 = _loggersByName[name];
-			if (!logger$32) logger$32 = _loggersByName[name] = new Logger(name, defaultLogger$1.methodFactory);
-			return logger$32;
+			var logger$33 = _loggersByName[name];
+			if (!logger$33) logger$33 = _loggersByName[name] = new Logger(name, defaultLogger$1.methodFactory);
+			return logger$33;
 		};
 		var _log = typeof window !== undefinedType ? window.log : void 0;
 		defaultLogger$1.noConflict = function() {
@@ -9504,8 +9688,8 @@ const defaultLoggerLevel = defaultLogger.levels.WARN;
 defaultLogger.setLevel(defaultLoggerLevel);
 let userLogger = null;
 /** Replace the built-in logger with a custom implementation. Pass `null` to restore defaults. */
-const setLogger = (logger$32) => {
-	userLogger = logger$32;
+const setLogger = (logger$33) => {
+	userLogger = logger$33;
 };
 let debugOptions = {};
 /** Configure debug options (e.g., `{ logWsTraffic: true }`). */
@@ -9549,8 +9733,8 @@ const wsTraffic = (options) => {
 	loggerInstance.debug(`${options.type.toUpperCase()}: \n`, msg, "\n");
 };
 const getLogger = () => {
-	const logger$32 = getLoggerInstance();
-	return new Proxy(logger$32, { get(_target, prop, _receiver) {
+	const logger$33 = getLoggerInstance();
+	return new Proxy(logger$33, { get(_target, prop, _receiver) {
 		if (prop === "wsTraffic") return wsTraffic;
 		const instance = getLoggerInstance();
 		const value = Reflect.get(instance, prop);
@@ -9602,7 +9786,7 @@ const asyncRetry = async ({ asyncCallable, maxRetries: retries = DEFAULT_MAX_RET
 
 //#endregion
 //#region src/controllers/HTTPRequestController.ts
-const logger$31 = getLogger();
+const logger$32 = getLogger();
 const GET_PARAMS = {
 	method: "GET",
 	headers: { Accept: "application/json" }
@@ -9666,7 +9850,7 @@ var HTTPRequestController = class HTTPRequestController extends Destroyable {
 			this._responses$.next(response);
 			return response;
 		} catch (error) {
-			logger$31.error("[HTTPRequestController] Request error:", error);
+			logger$32.error("[HTTPRequestController] Request error:", error);
 			this._status$.next("error");
 			const err = error instanceof Error ? error : new Error("HTTP request failed", { cause: error });
 			this._errors$.next(err);
@@ -9693,7 +9877,7 @@ var HTTPRequestController = class HTTPRequestController extends Destroyable {
 		const url = this.buildURL(request.url);
 		const headers = this.buildHeaders(request.headers);
 		const timeout$5 = request.timeout ?? this.requestTimeout;
-		logger$31.debug("[HTTPRequestController] Executing request:", {
+		logger$32.debug("[HTTPRequestController] Executing request:", {
 			method: request.method,
 			url,
 			headers: Object.keys(headers).reduce((acc, key) => {
@@ -9713,7 +9897,7 @@ var HTTPRequestController = class HTTPRequestController extends Destroyable {
 			});
 			clearTimeout(timeoutId);
 			const httpResponse = await this.convertResponse(response);
-			logger$31.debug("[HTTPRequestController] Response received:", {
+			logger$32.debug("[HTTPRequestController] Response received:", {
 				status: response.status,
 				statusText: response.statusText,
 				headers: [...response.headers.entries()],
@@ -9723,7 +9907,7 @@ var HTTPRequestController = class HTTPRequestController extends Destroyable {
 		} catch (error) {
 			clearTimeout(timeoutId);
 			if (error instanceof Error && error.name === "AbortError") throw new RequestTimeoutError(`Request timeout after ${timeout$5}ms`, { cause: error });
-			logger$31.error("[HTTPRequestController] Request failed:", error);
+			logger$32.error("[HTTPRequestController] Request failed:", error);
 			throw error;
 		}
 	}
@@ -9737,8 +9921,8 @@ var HTTPRequestController = class HTTPRequestController extends Destroyable {
 		const credential = this.getCredential();
 		if (credential.token) {
 			headers.Authorization = `Bearer ${credential.token}`;
-			logger$31.debug("[HTTPRequestController] Using Bearer token auth, token length:", credential.token.length);
-		} else logger$31.warn("[HTTPRequestController] No credentials available for authentication");
+			logger$32.debug("[HTTPRequestController] Using Bearer token auth, token length:", credential.token.length);
+		} else logger$32.warn("[HTTPRequestController] No credentials available for authentication");
 		return headers;
 	}
 	/**
@@ -9875,130 +10059,6 @@ var DeviceHistoryManager = class {
 	}
 };
 
-//#endregion
-//#region src/core/constants.ts
-const INVITE_VERSION = 1e3;
-const DEFAULT_ICE_CANDIDATE_TIMEOUT_MS = 600;
-const DEFAULT_ICE_GATHERING_TIMEOUT_MS = 6e3;
-const DEFAULT_RECONNECT_CALLS_TIMEOUT_MS = 300 * 1e3;
-const DEFAULT_CONNECTION_TIMEOUT_MS = 1e4;
-const DEFAULT_RECONNECT_DELAY_MIN_MS = 100;
-const DEFAULT_RECONNECT_DELAY_MAX_MS = 3e3;
-const DEFAULT_DEVICE_DEBOUNCE_TIME_MS = 1500;
-const DEFAULT_DEVICE_POLLING_INTERVAL_MS = 0;
-const PREFERENCES_STORAGE_KEY = "sw:preferences";
-/** Scope value that enables automatic token refresh. */
-const SAT_REFRESH_SCOPE = "sat:refresh";
-/** API endpoints for device token operations. */
-const DEVICE_TOKEN_ENDPOINT = "/api/fabric/subscriber/devices/token";
-const DEVICE_REFRESH_ENDPOINT = "/api/fabric/subscriber/devices/refresh";
-/** Default device token TTL in seconds (15 minutes). */
-const DEVICE_TOKEN_DEFAULT_EXPIRE_IN = 900;
-/** Buffer time in milliseconds before expiry to trigger refresh. */
-const DEVICE_TOKEN_REFRESH_BUFFER_MS = 3e4;
-/** Maximum retry attempts for device token refresh on transient failure. */
-const DEVICE_TOKEN_REFRESH_MAX_RETRIES = 3;
-/** Base delay in milliseconds for exponential backoff on refresh retry. */
-const DEVICE_TOKEN_REFRESH_RETRY_BASE_MS = 1e3;
-/** Maximum retry attempts for developer credential refresh on transient failure. */
-const CREDENTIAL_REFRESH_MAX_RETRIES = 5;
-/** Base delay in milliseconds for exponential backoff on credential refresh retry. */
-const CREDENTIAL_REFRESH_RETRY_BASE_MS = 1e3;
-/** Maximum delay in milliseconds for credential refresh backoff. */
-const CREDENTIAL_REFRESH_MAX_DELAY_MS = 3e4;
-/** Buffer in milliseconds before token expiry to trigger refresh. */
-const CREDENTIAL_REFRESH_BUFFER_MS = 5e3;
-/** JSON-RPC error code for requester validation failure (corrupted auth state). */
-const RPC_ERROR_REQUESTER_VALIDATION_FAILED = -32003;
-/** JSON-RPC error code for invalid params (e.g., missing authentication block). */
-const RPC_ERROR_INVALID_PARAMS = -32602;
-/** JSON-RPC error code for authentication failure (invalid token, missing DPoP, etc.). */
-const RPC_ERROR_AUTHENTICATION_FAILED = -32002;
-/** Default polling interval for RTCPeerConnection.getStats() in milliseconds. */
-const DEFAULT_STATS_POLLING_INTERVAL_MS = 1e3;
-/** Number of initial samples used to build a baseline for spike detection. */
-const DEFAULT_STATS_BASELINE_SAMPLES = 10;
-/** Duration in ms with no inbound audio packets before emitting a critical issue. */
-const DEFAULT_STATS_NO_PACKET_THRESHOLD_MS = 2e3;
-/** Multiplier applied to baseline RTT to detect a warning-level RTT spike. */
-const DEFAULT_STATS_RTT_SPIKE_MULTIPLIER = 3;
-/** Packet loss fraction (0-1) above which a warning is emitted. */
-const DEFAULT_STATS_PACKET_LOSS_THRESHOLD = .05;
-/** Multiplier applied to baseline jitter to detect a jitter spike. */
-const DEFAULT_STATS_JITTER_SPIKE_MULTIPLIER = 4;
-/** Number of seconds of metrics history to retain. */
-const DEFAULT_STATS_HISTORY_SIZE = 30;
-/** Maximum keyframe requests allowed within a single burst window. */
-const DEFAULT_KEYFRAME_MAX_BURST$1 = 3;
-/** Duration of the keyframe burst window in milliseconds. */
-const DEFAULT_KEYFRAME_BURST_WINDOW_MS$1 = 3e3;
-/** Cooldown period in ms after burst limit is reached before allowing more keyframes. */
-const DEFAULT_KEYFRAME_COOLDOWN_MS$1 = 1e4;
-/** Minimum time between re-INVITE attempts in milliseconds. */
-const DEFAULT_REINVITE_DEBOUNCE_TIME_MS = 1e4;
-/** Maximum number of re-INVITE attempts per call. */
-const DEFAULT_REINVITE_MAX_ATTEMPTS = 3;
-/** Timeout for a single re-INVITE attempt in milliseconds. */
-const DEFAULT_REINVITE_TIMEOUT_MS = 5e3;
-/** Debounce window in ms to collapse multiple detection signals into one trigger. */
-const DEFAULT_RECOVERY_DEBOUNCE_TIME_MS = 2e3;
-/** Cooldown period in ms between recovery attempts. */
-const DEFAULT_RECOVERY_COOLDOWN_MS = 1e4;
-/** Grace period in ms before treating ICE 'disconnected' as a failure. */
-const DEFAULT_ICE_DISCONNECTED_GRACE_PERIOD_MS = 3e3;
-/** Timeout for a single ICE restart attempt in milliseconds. */
-const DEFAULT_ICE_RESTART_TIMEOUT_MS$1 = 5e3;
-/** Maximum recovery attempts before emitting 'max_attempts_reached'. */
-const DEFAULT_MAX_RECOVERY_ATTEMPTS = 3;
-/** Upper bound in ms for waiting on iceGatheringState === 'complete' after an ICE restart. */
-const ICE_GATHERING_COMPLETE_TIMEOUT_MS = 1e4;
-/** Upper bound in ms for waiting on RTCPeerConnection.connectionState === 'connected' after a recovery ICE restart. */
-const PEER_CONNECTION_RECOVERY_WAIT_MS = 5e3;
-/** Polling interval in ms while waiting for RTCPeerConnection.connectionState to transition. */
-const PEER_CONNECTION_RECOVERY_POLL_MS = 100;
-/** Polling interval for LocalAudioPipeline.level$ (ms). ~30fps is smooth for meters. */
-const AUDIO_LEVEL_POLL_INTERVAL_MS = 33;
-/** RMS level threshold (0..1) above which the local participant is considered speaking. */
-const VAD_THRESHOLD = .03;
-/** Hold window in ms below the threshold before speaking$ flips back to false. */
-const VAD_HOLD_MS = 250;
-/** Whether to persist device selections to storage by default. */
-const DEFAULT_PERSIST_DEVICE_SELECTION = true;
-/** Whether to auto-apply device changes to active calls by default. */
-const DEFAULT_SYNC_DEVICES_TO_ACTIVE_CALLS = true;
-/** Storage keys for persisted device selections. */
-const DEVICE_STORAGE_KEY_AUDIO_INPUT = "sw:device:audioinput";
-const DEVICE_STORAGE_KEY_AUDIO_OUTPUT = "sw:device:audiooutput";
-const DEVICE_STORAGE_KEY_VIDEO_INPUT = "sw:device:videoinput";
-/** Whether to auto-mute video when the tab becomes hidden. */
-const DEFAULT_AUTO_MUTE_VIDEO_ON_HIDDEN = false;
-/** Whether to re-enumerate devices when the page becomes visible. */
-const DEFAULT_REFRESH_DEVICES_ON_VISIBLE = true;
-/** Whether to check peer connection health when the page becomes visible. */
-const DEFAULT_CHECK_CONNECTION_ON_VISIBLE = true;
-/** Whether automatic video degradation on low bandwidth is enabled. */
-const DEFAULT_ENABLE_AUTO_DEGRADATION = true;
-/** Bitrate in kbps below which video is automatically disabled. */
-const DEFAULT_DEGRADATION_BITRATE_THRESHOLD_KBPS = 150;
-/** Bitrate in kbps above which video is automatically re-enabled (hysteresis). */
-const DEFAULT_DEGRADATION_RECOVERY_THRESHOLD_KBPS = 300;
-/** Whether relay-only escalation is enabled as a last-resort recovery tier. */
-const DEFAULT_ENABLE_RELAY_FALLBACK = true;
-/** Whether to listen for browser online/offline/connection events. */
-const DEFAULT_ENABLE_NETWORK_CHANGE_DETECTION = true;
-/** Whether to intercept server-sent media-timeout hangups and attempt recovery. */
-const DEFAULT_ENABLE_SERVER_HANGUP_INTERCEPTION = true;
-/** Default video track constraints applied when video is enabled without explicit constraints. */
-const DEFAULT_VIDEO_CONSTRAINTS = {
-	width: { ideal: 1280 },
-	height: { ideal: 720 },
-	aspectRatio: 16 / 9
-};
-/** Whether stereo Opus is enabled by default. */
-const DEFAULT_STEREO_AUDIO = false;
-/** Max average bitrate for stereo Opus in bits per second. */
-const DEFAULT_STEREO_MAX_AVERAGE_BITRATE = 51e4;
-
 //#endregion
 //#region src/utils/time.ts
 function fromSecToMs(seconds) {
@@ -10010,7 +10070,7 @@ function fromMsToSec(milliseconds) {
 
 //#endregion
 //#region src/containers/PreferencesContainer.ts
-const logger$30 = getLogger();
+const logger$31 = getLogger();
 var PreferencesContainer = class PreferencesContainer {
 	static get instance() {
 		this._instance ??= new PreferencesContainer();
@@ -10672,7 +10732,7 @@ var ClientPreferences = class {
 		if (!this._storage) return;
 		const data = collectStoredPreferences();
 		this._storage.setItem(PREFERENCES_STORAGE_KEY, data, "local").catch((error) => {
-			logger$30.error(`[ClientPreferences] Failed to save preferences: ${String(error)}`);
+			logger$31.error(`[ClientPreferences] Failed to save preferences: ${String(error)}`);
 		});
 	}
 	/** Loads preferences from storage and applies them to the container. */
@@ -10681,7 +10741,7 @@ var ClientPreferences = class {
 		this._storage.getItem(PREFERENCES_STORAGE_KEY, "local").then((stored) => {
 			if (stored) applyStoredPreferences(stored);
 		}).catch((error) => {
-			logger$30.error(`[ClientPreferences] Failed to load preferences: ${String(error)}`);
+			logger$31.error(`[ClientPreferences] Failed to load preferences: ${String(error)}`);
 		});
 	}
 };
@@ -10703,7 +10763,7 @@ function toError(value) {
 //#endregion
 //#region src/controllers/NavigatorDeviceController.ts
 var import_cjs$29 = require_cjs();
-const logger$29 = getLogger();
+const logger$30 = getLogger();
 /** Maps a device kind to its storage key. */
 const DEVICE_STORAGE_KEYS = {
 	audioinput: DEVICE_STORAGE_KEY_AUDIO_INPUT,
@@ -10725,7 +10785,7 @@ var NavigatorDeviceController = class extends Destroyable {
 		super();
 		this.webRTCApiProvider = webRTCApiProvider;
 		this.deviceChangeHandler = () => {
-			logger$29.debug("[DeviceController] Device change detected");
+			logger$30.debug("[DeviceController] Device change detected");
 			this.enumerateDevices();
 		};
 		this._devicesState$ = this.createBehaviorSubject(initialDevicesState);
@@ -10790,13 +10850,13 @@ var NavigatorDeviceController = class extends Destroyable {
 		return this.cachedObservable("videoInputDevices$", () => this._devicesState$.pipe((0, import_cjs$29.map)((state) => state.videoinput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$)));
 	}
 	get selectedAudioInputDevice$() {
-		return this.cachedObservable("selectedAudioInputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.audioinput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$29.debug("[DeviceController] Selected audio input device changed:", info))));
+		return this.cachedObservable("selectedAudioInputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.audioinput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$30.debug("[DeviceController] Selected audio input device changed:", info))));
 	}
 	get selectedAudioOutputDevice$() {
-		return this.cachedObservable("selectedAudioOutputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.audiooutput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$29.debug("[DeviceController] Selected audio output device changed:", info))));
+		return this.cachedObservable("selectedAudioOutputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.audiooutput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$30.debug("[DeviceController] Selected audio output device changed:", info))));
 	}
 	get selectedVideoInputDevice$() {
-		return this.cachedObservable("selectedVideoInputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.videoinput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$29.debug("[DeviceController] Selected video input device changed:", info))));
+		return this.cachedObservable("selectedVideoInputDevice$", () => this._selectedDevicesState$.asObservable().pipe((0, import_cjs$29.map)((state) => state.videoinput), (0, import_cjs$29.distinctUntilChanged)(), (0, import_cjs$29.takeUntil)(this.destroyed$), (0, import_cjs$29.tap)((info) => logger$30.debug("[DeviceController] Selected video input device changed:", info))));
 	}
 	get selectedAudioInputDevice() {
 		if (this._audioInputDisabled$.value) return null;
@@ -10871,7 +10931,7 @@ var NavigatorDeviceController = class extends Destroyable {
 		if (device) this.persistDeviceSelection("audioinput", device);
 	}
 	selectVideoInputDevice(device) {
-		logger$29.debug("[DeviceController] Setting selected video input device:", device);
+		logger$30.debug("[DeviceController] Setting selected video input device:", device);
 		if (this._videoInputDisabled$.value && device) this._videoInputDisabled$.next(false);
 		const previous = this._selectedDevicesState$.value.videoinput;
 		if (previous && previous.deviceId !== device?.deviceId) this._deviceHistory.push("videoinput", previous);
@@ -10928,7 +10988,7 @@ var NavigatorDeviceController = class extends Destroyable {
 			}
 			const fromHistory = this._deviceHistory.findInHistory(kind, devices);
 			if (fromHistory) {
-				logger$29.debug(`[DeviceController] Device disappeared, falling back to history: ${fromHistory.label}`);
+				logger$30.debug(`[DeviceController] Device disappeared, falling back to history: ${fromHistory.label}`);
 				this.emitDeviceRecovered(kind, selected, fromHistory, "device_disconnected");
 				return fromHistory;
 			}
@@ -10981,7 +11041,7 @@ var NavigatorDeviceController = class extends Destroyable {
 		try {
 			await this._storageManager.setItem(DEVICE_STORAGE_KEYS[kind], stored, "local");
 		} catch (error) {
-			logger$29.error(`[DeviceController] Failed to persist device selection for ${kind}:`, error);
+			logger$30.error(`[DeviceController] Failed to persist device selection for ${kind}:`, error);
 		}
 	}
 	async loadPersistedDevices() {
@@ -10997,7 +11057,7 @@ var NavigatorDeviceController = class extends Destroyable {
 				[kind]: stored
 			};
 		} catch (error) {
-			logger$29.error(`[DeviceController] Failed to load persisted device for ${kind}:`, error);
+			logger$30.error(`[DeviceController] Failed to load persisted device for ${kind}:`, error);
 		}
 	}
 	/** Clears device history, persisted selections, and re-enumerates devices. */
@@ -11015,7 +11075,7 @@ var NavigatorDeviceController = class extends Destroyable {
 		this.disableDeviceMonitoring();
 		this.webRTCApiProvider.mediaDevices.addEventListener("devicechange", this.deviceChangeHandler);
 		if (PreferencesContainer.instance.devicePollingInterval > 0) this._devicesPoolingSubscription = (0, import_cjs$29.interval)(PreferencesContainer.instance.devicePollingInterval).subscribe(() => {
-			logger$29.debug("[DeviceController] Polling devices due to interval");
+			logger$30.debug("[DeviceController] Polling devices due to interval");
 			this.enumerateDevices();
 		});
 		this.enumerateDevices();
@@ -11041,13 +11101,13 @@ var NavigatorDeviceController = class extends Destroyable {
 				videoinput: []
 			});
 			this._devicesState$.next(devicesByKind);
-			logger$29.debug("[DeviceController] Devices enumerated:", {
+			logger$30.debug("[DeviceController] Devices enumerated:", {
 				audioInputs: devicesByKind.audioinput.length,
 				audioOutputs: devicesByKind.audiooutput.length,
 				videoInputs: devicesByKind.videoinput.length
 			});
 		} catch (error) {
-			logger$29.error("[DeviceController] Failed to enumerate devices:", error);
+			logger$30.error("[DeviceController] Failed to enumerate devices:", error);
 			this._errors$.next(toError(error));
 		}
 	}
@@ -11063,7 +11123,7 @@ var NavigatorDeviceController = class extends Destroyable {
 			stream.getTracks().forEach((t) => t.stop());
 			return capabilities;
 		} catch (error) {
-			logger$29.error("[DeviceController] Failed to get device capabilities:", error);
+			logger$30.error("[DeviceController] Failed to get device capabilities:", error);
 			this._errors$.next(toError(error));
 			throw error;
 		}
@@ -11314,7 +11374,7 @@ var DependencyContainer = class {
 
 //#endregion
 //#region src/controllers/CryptoController.ts
-const logger$28 = getLogger();
+const logger$29 = getLogger();
 const DPOP_DB_NAME = "sw-dpop";
 const DPOP_DB_VERSION = 1;
 const DPOP_STORE_NAME = "keys";
@@ -11373,7 +11433,7 @@ async function loadKeyPairFromDB() {
 			tx.oncomplete = () => db.close();
 		});
 	} catch (error) {
-		logger$28.warn("[DPoP] Failed to load key pair from IndexedDB:", error);
+		logger$29.warn("[DPoP] Failed to load key pair from IndexedDB:", error);
 		return null;
 	}
 }
@@ -11393,7 +11453,7 @@ async function saveKeyPairToDB(keyPair) {
 			};
 		});
 	} catch (error) {
-		logger$28.warn("[DPoP] Failed to save key pair to IndexedDB:", error);
+		logger$29.warn("[DPoP] Failed to save key pair to IndexedDB:", error);
 	}
 }
 async function deleteKeyPairFromDB() {
@@ -11412,7 +11472,7 @@ async function deleteKeyPairFromDB() {
 			};
 		});
 	} catch (error) {
-		logger$28.warn("[DPoP] Failed to delete key pair from IndexedDB:", error);
+		logger$29.warn("[DPoP] Failed to delete key pair from IndexedDB:", error);
 	}
 }
 /**
@@ -11472,13 +11532,13 @@ var CryptoController = class {
 			this._publicJwk = await crypto.subtle.exportKey("jwk", stored.publicKey);
 			this._fingerprint = await computeJwkThumbprint(this._publicJwk);
 			this._initialized = true;
-			logger$28.debug("[DPoP] Key pair restored from IndexedDB, fingerprint:", this._fingerprint);
+			logger$29.debug("[DPoP] Key pair restored from IndexedDB, fingerprint:", this._fingerprint);
 			return this._fingerprint;
 		} catch (error) {
-			logger$28.warn("[DPoP] Stored key pair unusable, generating new one:", error);
+			logger$29.warn("[DPoP] Stored key pair unusable, generating new one:", error);
 			await deleteKeyPairFromDB();
 		}
-		logger$28.debug("[DPoP] Generating RSA key pair");
+		logger$29.debug("[DPoP] Generating RSA key pair");
 		this._keyPair = await crypto.subtle.generateKey({
 			name: "RSASSA-PKCS1-v1_5",
 			modulusLength: 2048,
@@ -11493,7 +11553,7 @@ var CryptoController = class {
 		this._fingerprint = await computeJwkThumbprint(this._publicJwk);
 		this._initialized = true;
 		await saveKeyPairToDB(this._keyPair);
-		logger$28.debug("[DPoP] Key pair generated and persisted, fingerprint:", this._fingerprint);
+		logger$29.debug("[DPoP] Key pair generated and persisted, fingerprint:", this._fingerprint);
 		return this._fingerprint;
 	}
 	/**
@@ -11559,7 +11619,7 @@ var CryptoController = class {
 		this._fingerprint = null;
 		this._initialized = false;
 		deleteKeyPairFromDB();
-		logger$28.debug("[DPoP] Controller destroyed");
+		logger$29.debug("[DPoP] Controller destroyed");
 	}
 	get publicJwk() {
 		if (!this._publicJwk) throw new DPoPInitError("CryptoController not initialized. Call init() first.");
@@ -11583,7 +11643,7 @@ var CryptoController = class {
 //#endregion
 //#region src/controllers/NetworkMonitor.ts
 var import_cjs$28 = require_cjs();
-const logger$27 = getLogger();
+const logger$28 = getLogger();
 /**
 * Safely check whether we are running in a browser environment
 * with `window` and the relevant event targets.
@@ -11640,7 +11700,7 @@ var NetworkMonitor = class extends Destroyable {
 	}
 	attachListeners() {
 		if (!hasBrowserNetworkEvents()) {
-			logger$27.debug("NetworkMonitor: no browser environment detected, skipping event listeners");
+			logger$28.debug("NetworkMonitor: no browser environment detected, skipping event listeners");
 			return;
 		}
 		window.addEventListener("online", this._onOnline);
@@ -11648,7 +11708,7 @@ var NetworkMonitor = class extends Destroyable {
 		const connection = getNetworkConnection();
 		if (connection) connection.addEventListener("change", this._onConnectionChange);
 		this._listenersAttached = true;
-		logger$27.debug("NetworkMonitor: event listeners attached");
+		logger$28.debug("NetworkMonitor: event listeners attached");
 	}
 	removeListeners() {
 		if (!this._listenersAttached) return;
@@ -11659,10 +11719,10 @@ var NetworkMonitor = class extends Destroyable {
 			if (connection) connection.removeEventListener("change", this._onConnectionChange);
 		}
 		this._listenersAttached = false;
-		logger$27.debug("NetworkMonitor: event listeners removed");
+		logger$28.debug("NetworkMonitor: event listeners removed");
 	}
 	handleOnline() {
-		logger$27.info("NetworkMonitor: browser went online");
+		logger$28.info("NetworkMonitor: browser went online");
 		this._isOnline$.next(true);
 		this._networkChange$.next({
 			type: "online",
@@ -11671,7 +11731,7 @@ var NetworkMonitor = class extends Destroyable {
 		});
 	}
 	handleOffline() {
-		logger$27.info("NetworkMonitor: browser went offline");
+		logger$28.info("NetworkMonitor: browser went offline");
 		this._isOnline$.next(false);
 		this._networkChange$.next({
 			type: "offline",
@@ -11680,7 +11740,7 @@ var NetworkMonitor = class extends Destroyable {
 	}
 	handleConnectionChange() {
 		const networkType = getNetworkType();
-		logger$27.info(`NetworkMonitor: connection changed — effectiveType=${networkType ?? "unknown"}`);
+		logger$28.info(`NetworkMonitor: connection changed — effectiveType=${networkType ?? "unknown"}`);
 		this._networkChange$.next({
 			type: "connection_change",
 			timestamp: Date.now(),
@@ -11796,7 +11856,7 @@ function getNavigatorMediaDevices() {
 //#endregion
 //#region src/controllers/PreflightRunner.ts
 var import_cjs$27 = require_cjs();
-const logger$26 = getLogger();
+const logger$27 = getLogger();
 const DEFAULT_MEDIA_TEST_DURATION_S = 10;
 const ICE_GATHERING_TIMEOUT_MS = 1e4;
 const SIGNALING_RTT_TIMEOUT_MS = 5e3;
@@ -11845,7 +11905,7 @@ var PreflightRunner = class extends Destroyable {
 			if (!this._options.skipMediaTest) try {
 				bandwidth = await this.testMediaBandwidth(destination);
 			} catch (error) {
-				logger$26.warn("[PreflightRunner] Media bandwidth test failed:", error);
+				logger$27.warn("[PreflightRunner] Media bandwidth test failed:", error);
 				warnings.push("Media bandwidth test failed");
 			}
 			return {
@@ -11857,7 +11917,7 @@ var PreflightRunner = class extends Destroyable {
 				warnings
 			};
 		} catch (error) {
-			logger$26.error("[PreflightRunner] Preflight test failed:", error);
+			logger$27.error("[PreflightRunner] Preflight test failed:", error);
 			throw new PreflightError("preflight", error instanceof Error ? error : new Error(String(error)));
 		} finally {
 			this.destroy();
@@ -11888,7 +11948,7 @@ var PreflightRunner = class extends Destroyable {
 				if (track.kind === "video" && track.readyState === "live") videoWorking = true;
 			}
 		} catch (error) {
-			logger$26.warn("[PreflightRunner] Device test failed:", error);
+			logger$27.warn("[PreflightRunner] Device test failed:", error);
 		} finally {
 			if (audioStream) audioStream.getTracks().forEach((t) => t.stop());
 		}
@@ -11946,7 +12006,7 @@ var PreflightRunner = class extends Destroyable {
 				rttMs
 			};
 		} catch (error) {
-			logger$26.warn("[PreflightRunner] ICE connectivity test failed:", error);
+			logger$27.warn("[PreflightRunner] ICE connectivity test failed:", error);
 			return {
 				type: "failed",
 				turnReachable: false,
@@ -11994,7 +12054,7 @@ var PreflightRunner = class extends Destroyable {
 //#endregion
 //#region src/controllers/VisibilityController.ts
 var import_cjs$26 = require_cjs();
-const logger$25 = getLogger();
+const logger$26 = getLogger();
 /**
 * Checks whether the document visibility API is available.
 */
@@ -12031,8 +12091,8 @@ var VisibilityController = class extends Destroyable {
 		this._boundHandler = this._handleVisibilityChange.bind(this);
 		if (this._hasVisibilityApi) {
 			document.addEventListener("visibilitychange", this._boundHandler);
-			logger$25.debug("VisibilityController: listening for visibilitychange events");
-		} else logger$25.debug("VisibilityController: document visibility API not available, defaulting to visible");
+			logger$26.debug("VisibilityController: listening for visibilitychange events");
+		} else logger$26.debug("VisibilityController: document visibility API not available, defaulting to visible");
 	}
 	/**
 	* Observable of the current visibility state.
@@ -12057,7 +12117,7 @@ var VisibilityController = class extends Destroyable {
 	destroy() {
 		if (this._hasVisibilityApi) {
 			document.removeEventListener("visibilitychange", this._boundHandler);
-			logger$25.debug("VisibilityController: removed visibilitychange listener");
+			logger$26.debug("VisibilityController: removed visibilitychange listener");
 		}
 		super.destroy();
 	}
@@ -12075,7 +12135,7 @@ var VisibilityController = class extends Destroyable {
 			timestamp: Date.now()
 		};
 		this._visibilityChange$.next(changeEvent);
-		logger$25.debug("VisibilityController: visibility changed", {
+		logger$26.debug("VisibilityController: visibility changed", {
 			from: previousState,
 			to: newState
 		});
@@ -12150,22 +12210,17 @@ function unsafeStringify(arr, offset = 0) {
 
 //#endregion
 //#region ../../node_modules/uuid/dist-node/rng.js
-const rnds8Pool = new Uint8Array(256);
-let poolPtr = rnds8Pool.length;
+const rnds8 = new Uint8Array(16);
 function rng() {
-	if (poolPtr > rnds8Pool.length - 16) {
-		randomFillSync(rnds8Pool);
-		poolPtr = 0;
-	}
-	return rnds8Pool.slice(poolPtr, poolPtr += 16);
+	return crypto.getRandomValues(rnds8);
 }
 
-//#endregion
-//#region ../../node_modules/uuid/dist-node/native.js
-var native_default = { randomUUID };
-
 //#endregion
 //#region ../../node_modules/uuid/dist-node/v4.js
+function v4(options, buf, offset) {
+	if (!buf && !options && crypto.randomUUID) return crypto.randomUUID();
+	return _v4(options, buf, offset);
+}
 function _v4(options, buf, offset) {
 	options = options || {};
 	const rnds = options.random ?? options.rng?.() ?? rng();
@@ -12180,10 +12235,6 @@ function _v4(options, buf, offset) {
 	}
 	return unsafeStringify(rnds);
 }
-function v4(options, buf, offset) {
-	if (native_default.randomUUID && !buf && !options) return native_default.randomUUID();
-	return _v4(options, buf, offset);
-}
 var v4_default = v4;
 
 //#endregion
@@ -12325,7 +12376,7 @@ const RPCEventAckResponse = (id) => makeRPCResponse({
 
 //#endregion
 //#region src/managers/AttachManager.ts
-const logger$24 = getLogger();
+const logger$25 = getLogger();
 var AttachManager = class {
 	constructor(storage, deviceController, reconnectCallsTimeout, attachKey) {
 		this.storage = storage;
@@ -12346,7 +12397,7 @@ var AttachManager = class {
 		try {
 			return await this.storage.getItem(this.attachKey) ?? {};
 		} catch (error) {
-			logger$24.warn("[AttachManager] Failed to retrieve attached calls from storage", error);
+			logger$25.warn("[AttachManager] Failed to retrieve attached calls from storage", error);
 			return {};
 		}
 	}
@@ -12354,7 +12405,7 @@ var AttachManager = class {
 		try {
 			await this.storage.setItem(this.attachKey, attached);
 		} catch (error) {
-			logger$24.warn("[AttachManager] Failed to write attached calls to storage", error);
+			logger$25.warn("[AttachManager] Failed to write attached calls to storage", error);
 		}
 	}
 	/**
@@ -12373,7 +12424,7 @@ var AttachManager = class {
 	}
 	async attach(call) {
 		if (!call.to) {
-			logger$24.warn("[AttachManager] Skip attach for calls with no destination");
+			logger$25.warn("[AttachManager] Skip attach for calls with no destination");
 			return;
 		}
 		const destination = call.to;
@@ -12426,15 +12477,15 @@ var AttachManager = class {
 					callId,
 					...options
 				});
-				logger$24.info(`[AttachManager] Reattached call ${callId} (attempt ${attempt})`);
+				logger$25.info(`[AttachManager] Reattached call ${callId} (attempt ${attempt})`);
 				succeeded = true;
 				break;
 			} catch (error) {
-				logger$24.warn(`[AttachManager] Reattach attempt ${attempt}/3 failed for call ${callId}:`, error);
+				logger$25.warn(`[AttachManager] Reattach attempt ${attempt}/3 failed for call ${callId}:`, error);
 				if (attempt < 3) await new Promise((r) => setTimeout(r, (attempt + 1) * 1e3));
 			}
 			if (!succeeded) {
-				logger$24.warn(`[AttachManager] Reattach failed after 3 attempts for call ${callId}, removing reference`);
+				logger$25.warn(`[AttachManager] Reattach failed after 3 attempts for call ${callId}, removing reference`);
 				await this.detach({
 					id: callId,
 					mediaDirections: attachment.mediaDirections
@@ -13371,7 +13422,9 @@ const DEFAULT_MEMBER_CAPABILITIES = {
 	position: false,
 	meta: false,
 	remove: false,
-	audioFlags: false
+	audioFlags: false,
+	denoise: false,
+	lowbitrate: false
 };
 /**
 * Default call capabilities with no permissions
@@ -13444,7 +13497,9 @@ function computeMemberCapabilities(flags, memberType) {
 		position: hasBooleanCapability(flags, memberType, null, "position"),
 		meta: hasBooleanCapability(flags, memberType, null, "meta"),
 		remove: hasBooleanCapability(flags, memberType, null, "remove"),
-		audioFlags: hasBooleanCapability(flags, memberType, null, "audioflags")
+		audioFlags: hasBooleanCapability(flags, memberType, null, "audioflags"),
+		denoise: hasBooleanCapability(flags, memberType, null, "denoise"),
+		lowbitrate: hasBooleanCapability(flags, memberType, null, "lowbitrate")
 	};
 }
 /**
@@ -13601,7 +13656,7 @@ function toggleHandraiseMethod(is) {
 
 //#endregion
 //#region src/core/entities/Participant.ts
-const logger$23 = getLogger();
+const logger$24 = getLogger();
 const initialState = {};
 /**
 * Represents a participant in a call.
@@ -13611,9 +13666,9 @@ const initialState = {};
 * the local participant with additional device control.
 */
 var Participant = class extends Destroyable {
-	constructor(id, executeMethod, deviceController) {
+	constructor(id, callExecuteMethod, deviceController) {
 		super();
-		this.executeMethod = executeMethod;
+		this.callExecuteMethod = callExecuteMethod;
 		this.deviceController = deviceController;
 		this._state$ = this.createBehaviorSubject(initialState);
 		this.id = id;
@@ -13827,26 +13882,63 @@ var Participant = class extends Destroyable {
 	get nodeId() {
 		return this._state$.value.node_id;
 	}
+	/** Call ID for this participant's leg, or `undefined` if not available. */
+	get callId() {
+		return this._state$.value.call_id;
+	}
 	/** @internal */
 	get value() {
 		return this._state$.value;
 	}
+	/**
+	* Target triple for member RPCs, built from the participant's own state.
+	* The backend locates the member's session by the target `call_id`/`node_id`,
+	* so this must always be the participant's own call context — never the
+	* local call's id (issue #19400).
+	*
+	* Reading it doubles as a readiness probe: it throws until the first full
+	* member event (`member.joined`/`member.updated` or the `call.joined`
+	* roster) arrives, and never regresses afterwards.
+	*
+	* @throws {ParticipantNotReadyError} If the member state has not been
+	* received yet (e.g. a participant first seen via `member.talking`) — an
+	* empty call context can never address the member, so fail fast instead of
+	* sending a doomed RPC.
+	*/
+	get target() {
+		const { call_id, node_id } = this._state$.value;
+		if (!call_id || !node_id) throw new ParticipantNotReadyError(this.id);
+		return {
+			member_id: this.id,
+			call_id,
+			node_id
+		};
+	}
+	/**
+	* Executes a member RPC against this participant, injecting its own
+	* {@link target} as the target.
+	*
+	* @throws {ParticipantNotReadyError} Via {@link target}, when the
+	* member state has not been received yet.
+	*/
+	async executeMethod(method, args) {
+		return this.callExecuteMethod(this.target, method, args);
+	}
 	/** Toggles the deafened state (mutes/unmutes incoming audio). */
 	async toggleDeaf() {
-		const method = toggleDeafMethod(this.deaf);
-		await this.executeMethod(this.id, method, {});
+		await this.executeMethod(toggleDeafMethod(this.deaf), {});
 	}
 	/** Toggles the hand-raised state. */
 	async toggleHandraise() {
-		await this.executeMethod(this.id, toggleHandraiseMethod(this.handraised), {});
+		await this.executeMethod(toggleHandraiseMethod(this.handraised), {});
 	}
 	/** Mutes the participant's audio. */
 	async mute() {
-		await this.executeMethod(this.id, "call.mute", { channels: ["audio"] });
+		await this.executeMethod("call.mute", { channels: ["audio"] });
 	}
 	/** Unmutes the participant's audio. */
 	async unmute() {
-		await this.executeMethod(this.id, "call.unmute", { channels: ["audio"] });
+		await this.executeMethod("call.unmute", { channels: ["audio"] });
 	}
 	/** Toggles the participant's audio mute state. */
 	async toggleMute() {
@@ -13854,11 +13946,11 @@ var Participant = class extends Destroyable {
 	}
 	/** Mutes the participant's video. */
 	async muteVideo() {
-		await this.executeMethod(this.id, "call.mute", { channels: ["video"] });
+		await this.executeMethod("call.mute", { channels: ["video"] });
 	}
 	/** Unmutes the participant's video. */
 	async unmuteVideo() {
-		await this.executeMethod(this.id, "call.unmute", { channels: ["video"] });
+		await this.executeMethod("call.unmute", { channels: ["video"] });
 	}
 	/** Toggles the participant's video mute state. */
 	async toggleMuteVideo() {
@@ -13866,7 +13958,7 @@ var Participant = class extends Destroyable {
 	}
 	/** Toggles echo cancellation on the audio input. */
 	async toggleEchoCancellation() {
-		await this.executeMethod(this.id, "call.audioflags.set", {
+		await this.executeMethod("call.audioflags.set", {
 			echo_cancellation: !this.echoCancellation,
 			auto_gain: this.autoGain,
 			noise_suppression: this.noiseSuppression
@@ -13874,7 +13966,7 @@ var Participant = class extends Destroyable {
 	}
 	/** Toggles automatic gain control on the audio input. */
 	async toggleAudioInputAutoGain() {
-		await this.executeMethod(this.id, "call.audioflags.set", {
+		await this.executeMethod("call.audioflags.set", {
 			echo_cancellation: this.echoCancellation,
 			auto_gain: !this.autoGain,
 			noise_suppression: this.noiseSuppression
@@ -13882,14 +13974,15 @@ var Participant = class extends Destroyable {
 	}
 	/** Toggles noise suppression on the audio input. */
 	async toggleNoiseSuppression() {
-		await this.executeMethod(this.id, "call.audioflags.set", {
+		await this.executeMethod("call.audioflags.set", {
 			echo_cancellation: this.echoCancellation,
 			auto_gain: this.autoGain,
 			noise_suppression: !this.noiseSuppression
 		});
 	}
+	/** Toggles low-bitrate mode for this participant's media. */
 	async toggleLowbitrate() {
-		throw new UnimplementedError();
+		await this.executeMethod("call.lowbitrate.set", { lowbitrate: !this.lowbitrate });
 	}
 	/**
 	* Adjusts the **conference-only** microphone energy gate / sensitivity level
@@ -13905,7 +13998,7 @@ var Participant = class extends Destroyable {
 	*   (integer, larger values are more sensitive).
 	*/
 	async setAudioInputSensitivity(value) {
-		await this.executeMethod(this.id, "call.microphone.sensitivity.set", { sensitivity: value });
+		await this.executeMethod("call.microphone.sensitivity.set", { sensitivity: value });
 	}
 	/**
 	* Sets the **server-side** microphone volume on this participant's bridged
@@ -13918,7 +14011,7 @@ var Participant = class extends Destroyable {
 	* @param value - Volume level (0-100).
 	*/
 	async setAudioInputVolume(value) {
-		await this.executeMethod(this.id, "call.microphone.volume.set", { volume: value });
+		await this.executeMethod("call.microphone.volume.set", { volume: value });
 	}
 	/**
 	* Sets the **server-side** speaker volume on this participant's bridged call
@@ -13932,28 +14025,31 @@ var Participant = class extends Destroyable {
 	* @param value - Volume level (0-100).
 	*/
 	async setAudioOutputVolume(value) {
-		await this.executeMethod(this.id, "call.speaker.volume.set", { volume: value });
+		await this.executeMethod("call.speaker.volume.set", { volume: value });
 	}
 	/**
 	* Sets the participant's position in the video layout.
+	*
+	* Requires the `member.position` capability. The gateway requires a
+	* `targets` array of `{ target, position }` entries (issue #19400). A
+	* resolved promise does not guarantee a visible change: the backend silently
+	* returns `200` (no-op) for non-conference targets.
+	*
 	* @param value - The {@link VideoPosition} to assign (e.g. `'auto'`, `'reserved-0'`).
 	*/
 	async setPosition(value) {
-		await this.executeMethod(this.id, "call.member.position.set", { position: value });
+		await this.executeMethod("call.member.position.set", { targets: [{
+			target: this.target,
+			position: value
+		}] });
 	}
 	/** Removes this participant from the call. */
 	async remove() {
-		const state = this._state$.value;
-		const target = {
-			member_id: this.id,
-			call_id: state.call_id ?? "",
-			node_id: state.node_id ?? ""
-		};
-		await this.executeMethod(target, "call.member.remove", {});
+		await this.executeMethod("call.member.remove", { targets: [this.target] });
 	}
 	/** Ends the call for this participant. */
 	async end() {
-		await this.executeMethod(this.id, "call.end", {});
+		await this.executeMethod("call.end", {});
 	}
 	/**
 	* Replaces custom metadata for this participant.
@@ -13973,7 +14069,7 @@ var Participant = class extends Destroyable {
 	}
 	/** Destroys the participant, releasing all subscriptions and references. */
 	destroy() {
-		this.executeMethod = void 0;
+		this.callExecuteMethod = void 0;
 		super.destroy();
 	}
 };
@@ -13985,8 +14081,8 @@ var Participant = class extends Destroyable {
 */
 var SelfParticipant = class extends Participant {
 	/** @internal */
-	constructor(id, executeMethod, vertoManager, deviceController) {
-		super(id, executeMethod, deviceController);
+	constructor(id, callExecuteMethod, vertoManager, deviceController) {
+		super(id, callExecuteMethod, deviceController);
 		this.vertoManager = vertoManager;
 		this._studioAudio$ = this.createBehaviorSubject(false);
 		this.capabilities = new SelfCapabilities();
@@ -14010,7 +14106,7 @@ var SelfParticipant = class extends Participant {
 	async enableStudioAudio() {
 		if (this._studioAudio$.value) return;
 		this._studioAudio$.next(true);
-		await this.executeMethod(this.id, "call.audioflags.set", {
+		await this.executeMethod("call.audioflags.set", {
 			echo_cancellation: false,
 			auto_gain: false,
 			noise_suppression: false
@@ -14023,18 +14119,27 @@ var SelfParticipant = class extends Participant {
 	async disableStudioAudio() {
 		if (!this._studioAudio$.value) return;
 		this._studioAudio$.next(false);
-		await this.executeMethod(this.id, "call.audioflags.set", {
+		await this.executeMethod("call.audioflags.set", {
 			echo_cancellation: true,
 			auto_gain: true,
 			noise_suppression: true
 		});
 	}
-	/** Starts sharing the local screen. */
+	/**
+	* Starts sharing the local screen.
+	*
+	* The call is unaffected when acquisition fails.
+	*
+	* @throws The raw `getDisplayMedia` error. A dismissed picker or a
+	* permission denial rejects with a `NotAllowedError` `DOMException` —
+	* inspect `error.name` to tell benign cancels apart from real failures.
+	*/
 	async startScreenShare() {
 		try {
 			await this.vertoManager.addScreenMedia();
 		} catch (error) {
-			logger$23.error("[Participant.startScreenShare] Screen share error:", error);
+			logger$24.error("[Participant.startScreenShare] Screen share error:", error);
+			throw error;
 		}
 	}
 	/** Observable of the current screen share status. */
@@ -14049,12 +14154,20 @@ var SelfParticipant = class extends Participant {
 	async stopScreenShare() {
 		return this.vertoManager.removeScreenMedia();
 	}
-	/** Adds an additional media input device to the call. */
+	/**
+	* Adds an additional media input device to the call.
+	*
+	* The call is unaffected when acquisition fails.
+	*
+	* @throws The raw `getUserMedia` error (e.g. `NotAllowedError` on
+	* permission denial) — inspect `error.name` to decide how to react.
+	*/
 	async addAdditionalDevice(options) {
 		try {
 			await this.vertoManager.addInputDevice(options);
 		} catch (error) {
-			logger$23.error("[Participant.startScreenShare] Screen share error:", error);
+			logger$24.error("[Participant.addAdditionalDevice] Additional device error:", error);
+			throw error;
 		}
 	}
 	/** Removes an additional media input device by ID. */
@@ -14116,7 +14229,7 @@ var SelfParticipant = class extends Participant {
 	*/
 	exitStudioModeIfActive() {
 		if (this._studioAudio$.value) {
-			logger$23.debug("[SelfParticipant] Exiting studio audio mode due to individual flag toggle");
+			logger$24.debug("[SelfParticipant] Exiting studio audio mode due to individual flag toggle");
 			this._studioAudio$.next(false);
 		}
 	}
@@ -14140,7 +14253,7 @@ var SelfParticipant = class extends Participant {
 		try {
 			await super.mute();
 		} catch (error) {
-			logger$23.warn("[Participant.toggleAudioInput] Server Error while muting audio input, proceeding with local toggle anyway", error);
+			logger$24.warn("[Participant.toggleAudioInput] Server Error while muting audio input, proceeding with local toggle anyway", error);
 		} finally {
 			this.vertoManager.muteMainAudioInputDevice();
 		}
@@ -14150,7 +14263,7 @@ var SelfParticipant = class extends Participant {
 		try {
 			await super.unmute();
 		} catch (error) {
-			logger$23.warn("[Participant.toggleAudioInput] Server Error while unmuting audio input, proceeding with local toggle anyway", error);
+			logger$24.warn("[Participant.toggleAudioInput] Server Error while unmuting audio input, proceeding with local toggle anyway", error);
 		} finally {
 			await this.vertoManager.unmuteMainAudioInputDevice();
 		}
@@ -14160,7 +14273,7 @@ var SelfParticipant = class extends Participant {
 		try {
 			await super.muteVideo();
 		} catch (error) {
-			logger$23.warn("[Participant.toggleVideoInput] Server Error while muting video input, proceeding with local toggle anyway", error);
+			logger$24.warn("[Participant.toggleVideoInput] Server Error while muting video input, proceeding with local toggle anyway", error);
 		} finally {
 			this.vertoManager.muteMainVideoInputDevice();
 		}
@@ -14170,7 +14283,7 @@ var SelfParticipant = class extends Participant {
 		try {
 			await super.unmuteVideo();
 		} catch (error) {
-			logger$23.warn("[Participant.toggleVideoInput] Server Error while unmuting video input, proceeding with local toggle anyway", error);
+			logger$24.warn("[Participant.toggleVideoInput] Server Error while unmuting video input, proceeding with local toggle anyway", error);
 		} finally {
 			await this.vertoManager.unmuteMainVideoInputDevice();
 		}
@@ -14375,7 +14488,7 @@ function filterAs(predicate, resultPath) {
 //#endregion
 //#region src/operators/throwOnRPCError.ts
 var import_cjs$21 = require_cjs();
-const logger$22 = getLogger();
+const logger$23 = getLogger();
 /**
 * RxJS operator that throws a {@link JSONRPCError} when the RPC response contains an error.
 * Passes successful responses through unchanged.
@@ -14383,14 +14496,14 @@ const logger$22 = getLogger();
 function throwOnRPCError() {
 	return (0, import_cjs$21.map)((response) => {
 		if (response.error) {
-			logger$22.error("[throwOnRPCError] RPC error response:", {
+			logger$23.error("[throwOnRPCError] RPC error response:", {
 				code: response.error.code,
 				message: response.error.message,
 				data: response.error.data
 			});
 			throw new JSONRPCError(response.error.code, response.error.message, response.error.data);
 		}
-		logger$22.debug("[throwOnRPCError] RPC successful response:", response);
+		logger$23.debug("[throwOnRPCError] RPC successful response:", response);
 		return response;
 	});
 }
@@ -14398,7 +14511,7 @@ function throwOnRPCError() {
 //#endregion
 //#region src/managers/CallEventsManager.ts
 var import_cjs$20 = require_cjs();
-const logger$21 = getLogger();
+const logger$22 = getLogger();
 const initialSessionState = {};
 /** @internal */
 var CallEventsManager = class extends Destroyable {
@@ -14502,7 +14615,7 @@ var CallEventsManager = class extends Destroyable {
 	}
 	initSubscriptions() {
 		this.subscribeTo(this.callJoinedEvent$, (callJoinedEvent) => {
-			logger$21.debug("[CallEventsManager] Handling call.joined event for call/session IDs:", {
+			logger$22.debug("[CallEventsManager] Handling call.joined event for call/session IDs:", {
 				callId: callJoinedEvent.call_id,
 				roomSessionId: callJoinedEvent.room_session_id
 			});
@@ -14529,19 +14642,19 @@ var CallEventsManager = class extends Destroyable {
 			if (this._self$.value?.capabilities.setLayout) this.updateLayouts();
 		});
 		this.subscribeTo(this.memberUpdates$, (member) => {
-			logger$21.debug("[CallEventsManager] Handling member update event for member ID:", member);
+			logger$22.debug("[CallEventsManager] Handling member update event for member ID:", member);
 			this.upsertParticipant(member);
 		});
 		this.subscribeTo(this.webRtcCallSession.memberLeft$, (memberLeftEvent) => {
-			logger$21.debug("[CallEventsManager] Handling member.left event for member ID:", memberLeftEvent.member.member_id);
+			logger$22.debug("[CallEventsManager] Handling member.left event for member ID:", memberLeftEvent.member.member_id);
 			const participants = { ...this._participants$.value };
 			if (memberLeftEvent.member.member_id in participants) {
 				delete participants[memberLeftEvent.member.member_id];
 				this._participants$.next(participants);
-			} else logger$21.warn(`[CallEventsManager] Received member.left event for unknown member ID: ${memberLeftEvent.member.member_id}`);
+			} else logger$22.warn(`[CallEventsManager] Received member.left event for unknown member ID: ${memberLeftEvent.member.member_id}`);
 		});
 		this.subscribeTo(this.webRtcCallSession.callUpdated$, (callUpdatedEvent) => {
-			logger$21.debug("[CallEventsManager] Handling call.updated event:", callUpdatedEvent);
+			logger$22.debug("[CallEventsManager] Handling call.updated event:", callUpdatedEvent);
 			const roomSession = callUpdatedEvent.room_session;
 			this._sessionState$.next({
 				...this._sessionState$.value,
@@ -14556,7 +14669,7 @@ var CallEventsManager = class extends Destroyable {
 			});
 		});
 		this.subscribeTo(this.layoutChangedEvent$, (layoutChangedEvent) => {
-			logger$21.debug("[CallEventsManager] Handling layout.changed event:", layoutChangedEvent);
+			logger$22.debug("[CallEventsManager] Handling layout.changed event:", layoutChangedEvent);
 			this._sessionState$.next({
 				...this._sessionState$.value,
 				layout_name: layoutChangedEvent.id,
@@ -14566,10 +14679,10 @@ var CallEventsManager = class extends Destroyable {
 		});
 	}
 	updateParticipantPositions(layoutChangedEvent) {
-		if (Object.keys(this._participants$.value).length > 0 && !layoutChangedEvent.layers.some((layer) => !!layer.member_id)) logger$21.warn("[CallEventsManager] No layers with member_id found in layout.changed event. Nothing to update.");
+		if (Object.keys(this._participants$.value).length > 0 && !layoutChangedEvent.layers.some((layer) => !!layer.member_id)) logger$22.warn("[CallEventsManager] No layers with member_id found in layout.changed event. Nothing to update.");
 		layoutChangedEvent.layers.filter((layer) => !!layer.member_id).filter((layer) => {
 			if (!(layer.member_id in this._participants$.value)) {
-				logger$21.warn(`[CallEventsManager] Skipping layout layer for unknown member_id: ${layer.member_id}`);
+				logger$22.warn(`[CallEventsManager] Skipping layout layer for unknown member_id: ${layer.member_id}`);
 				return false;
 			}
 			return true;
@@ -14592,7 +14705,7 @@ var CallEventsManager = class extends Destroyable {
 				layouts: response.result.layouts
 			});
 		}).catch((error) => {
-			logger$21.error("[CallEventsManager] Error fetching layouts:", error);
+			logger$22.error("[CallEventsManager] Error fetching layouts:", error);
 		});
 	}
 	updateParticipants(members) {
@@ -14608,7 +14721,7 @@ var CallEventsManager = class extends Destroyable {
 		}
 		const participant = this._participants$.value[member.member_id];
 		const oldValue = participant.value;
-		logger$21.debug("[CallEventsManager] Updating participant:", member.member_id, {
+		logger$22.debug("[CallEventsManager] Updating participant:", member.member_id, {
 			oldValue,
 			newValue: member
 		});
@@ -14621,17 +14734,17 @@ var CallEventsManager = class extends Destroyable {
 	}
 	get callJoinedEvent$() {
 		return this.cachedObservable("callJoinedEvent$", () => this.webRtcCallSession.callEvent$.pipe((0, import_cjs$20.filter)(isCallJoinedPayload), (0, import_cjs$20.tap)((event) => {
-			logger$21.debug("[CallEventsManager] Call joined event:", event);
+			logger$22.debug("[CallEventsManager] Call joined event:", event);
 		})));
 	}
 	get layoutChangedEvent$() {
 		return this.cachedObservable("layoutChangedEvent$", () => this.webRtcCallSession.callEvent$.pipe(filterAs(isLayoutChangedPayload, "layout"), (0, import_cjs$20.tap)((event) => {
-			logger$21.debug("[CallEventsManager] Layout changed event:", event);
+			logger$22.debug("[CallEventsManager] Layout changed event:", event);
 		})));
 	}
 	get memberUpdates$() {
 		return this.cachedObservable("memberUpdates$", () => (0, import_cjs$20.merge)(this.webRtcCallSession.memberJoined$, this.webRtcCallSession.memberUpdated$, this.webRtcCallSession.memberTalking$).pipe((0, import_cjs$20.map)((event) => event.member), (0, import_cjs$20.tap)((event) => {
-			logger$21.debug("[CallEventsManager] Member update event:", event);
+			logger$22.debug("[CallEventsManager] Member update event:", event);
 		})));
 	}
 	destroy() {
@@ -14888,7 +15001,7 @@ function appendStereoParams(fmtpLine, maxBitrate) {
 //#endregion
 //#region src/controllers/ICEGatheringController.ts
 var import_cjs$19 = require_cjs();
-const logger$20 = getLogger();
+const logger$21 = getLogger();
 var ICEGatheringController = class extends Destroyable {
 	constructor(peerConnection, peerConnectionControllerNegotiating$, options = {}) {
 		super();
@@ -14896,23 +15009,23 @@ var ICEGatheringController = class extends Destroyable {
 		this.peerConnectionControllerNegotiating$ = peerConnectionControllerNegotiating$;
 		this.onicegatheringstatechangeHandler = () => {
 			const { iceGatheringState } = this.peerConnection;
-			logger$20.debug(`[ICEGatheringController] ICE gathering state changed to: ${iceGatheringState}`);
+			logger$21.debug(`[ICEGatheringController] ICE gathering state changed to: ${iceGatheringState}`);
 			if (iceGatheringState === "gathering") this._iceCandidatesState.next({
 				state: "gathering",
 				validSDP: false
 			});
 		};
 		this.onicecandidateHandler = (event) => {
-			logger$20.debug("[ICEGatheringController] ICE candidate event received:", event.candidate);
+			logger$21.debug("[ICEGatheringController] ICE candidate event received:", event.candidate);
 			this.removeTimer("iceCandidateTimer");
 			if (event.candidate) this.iceCandidateTimer = setTimeout(() => {
 				if (this.peerConnection.iceGatheringState !== "complete") {
-					logger$20.warn("[ICEGatheringController] ICE candidate timeout, using current SDP");
+					logger$21.warn("[ICEGatheringController] ICE candidate timeout, using current SDP");
 					this.handleICECandidateTimeout();
 				}
 			}, this.iceCandidateTimeout);
 			else {
-				logger$20.debug("[ICEGatheringController] ICE gathering completed: null candidate received");
+				logger$21.debug("[ICEGatheringController] ICE gathering completed: null candidate received");
 				this.removeTimer("iceGatheringTimer");
 				this.handleICEGatheringComplete();
 			}
@@ -14930,7 +15043,7 @@ var ICEGatheringController = class extends Destroyable {
 				this.setupEventListeners();
 				this.iceGatheringTimer = setTimeout(() => {
 					if (this.peerConnection.iceGatheringState !== "complete") {
-						logger$20.warn("[ICEGatheringController] ICE gathering timeout, using current SDP");
+						logger$21.warn("[ICEGatheringController] ICE gathering timeout, using current SDP");
 						this.handleICEGatheringTimeout();
 					}
 				}, this.iceGatheringTimeout);
@@ -14957,9 +15070,9 @@ var ICEGatheringController = class extends Destroyable {
 		this.relayOnly = value;
 	}
 	handleICEGatheringComplete() {
-		logger$20.debug("[ICEGatheringController] Handling ICE gathering complete");
-		logger$20.debug(`[ICEGatheringController] Checking ICE gathering state: ${this.peerConnection.iceGatheringState}`);
-		logger$20.debug("[ICEGatheringController] ICE gathering complete");
+		logger$21.debug("[ICEGatheringController] Handling ICE gathering complete");
+		logger$21.debug(`[ICEGatheringController] Checking ICE gathering state: ${this.peerConnection.iceGatheringState}`);
+		logger$21.debug("[ICEGatheringController] ICE gathering complete");
 		this._iceCandidatesState.next({
 			state: "complete",
 			validSDP: this.hasValidLocalDescriptionSDP
@@ -14975,21 +15088,21 @@ var ICEGatheringController = class extends Destroyable {
 		this.removeTimer("iceGatheringTimer");
 		const validSDP = this.hasValidLocalDescriptionSDP;
 		if (validSDP) {
-			logger$20.debug("[ICEGatheringController] Local SDP is valid");
+			logger$21.debug("[ICEGatheringController] Local SDP is valid");
 			this._iceCandidatesState.next({
 				state: "timeout",
 				validSDP
 			});
 			this.stopGathering();
-		} else logger$20.debug("### ICE gathering timeout\n", this.peerConnection.localDescription?.sdp);
+		} else logger$21.debug("### ICE gathering timeout\n", this.peerConnection.localDescription?.sdp);
 	}
 	handleICECandidateTimeout() {
 		if (this.iceCandidateTimer) this.removeTimer("iceCandidateTimer");
-		logger$20.warn("[ICEGatheringController] ICE candidate timeout");
+		logger$21.warn("[ICEGatheringController] ICE candidate timeout");
 		const validSDP = this.hasValidLocalDescriptionSDP;
 		if (!validSDP && !this.relayOnly) this.restartICEGatheringWithRelayOnly();
 		else {
-			logger$20.debug("[ICEGatheringController] Using current SDP due to ICE candidate timeout");
+			logger$21.debug("[ICEGatheringController] Using current SDP due to ICE candidate timeout");
 			this._iceCandidatesState.next({
 				state: "timeout",
 				validSDP
@@ -14998,7 +15111,7 @@ var ICEGatheringController = class extends Destroyable {
 		}
 	}
 	restartICEGatheringWithRelayOnly() {
-		logger$20.debug("[ICEGatheringController] Restarting ICE gathering with relay-only candidates");
+		logger$21.debug("[ICEGatheringController] Restarting ICE gathering with relay-only candidates");
 		this.relayOnly = true;
 		this.peerConnection.setConfiguration({
 			...this.peerConnection.getConfiguration(),
@@ -15013,7 +15126,7 @@ var ICEGatheringController = class extends Destroyable {
 		}
 	}
 	clearAllTimers() {
-		logger$20.debug("[ICEGatheringController] Clearing all timers");
+		logger$21.debug("[ICEGatheringController] Clearing all timers");
 		this.removeTimer("iceGatheringTimer");
 		this.removeTimer("iceCandidateTimer");
 	}
@@ -15022,7 +15135,7 @@ var ICEGatheringController = class extends Destroyable {
 		this.peerConnection.removeEventListener("icecandidate", this.onicecandidateHandler);
 	}
 	destroy() {
-		logger$20.debug("[ICEGatheringController] Destroying ICEGatheringController");
+		logger$21.debug("[ICEGatheringController] Destroying ICEGatheringController");
 		this.clearAllTimers();
 		this.removeEventListeners();
 		super.destroy();
@@ -15032,7 +15145,7 @@ var ICEGatheringController = class extends Destroyable {
 //#endregion
 //#region src/controllers/LocalAudioPipeline.ts
 var import_cjs$18 = require_cjs();
-const logger$19 = getLogger();
+const logger$20 = getLogger();
 /**
 * Web Audio pipeline for the local microphone stream.
 *
@@ -15144,7 +15257,7 @@ var LocalAudioPipeline = class extends Destroyable {
 			try {
 				this._inputSource.disconnect();
 			} catch (error) {
-				logger$19.debug("[LocalAudioPipeline] input disconnect warning:", error);
+				logger$20.debug("[LocalAudioPipeline] input disconnect warning:", error);
 			}
 			this._inputSource = null;
 		}
@@ -15154,7 +15267,7 @@ var LocalAudioPipeline = class extends Destroyable {
 		this._inputSource = this._audioContext.createMediaStreamSource(this._inputStream);
 		this._inputSource.connect(this._gainNode);
 		if (this._audioContext.state === "suspended") this._audioContext.resume().catch((error) => {
-			logger$19.warn("[LocalAudioPipeline] AudioContext resume failed:", error);
+			logger$20.warn("[LocalAudioPipeline] AudioContext resume failed:", error);
 		});
 	}
 	destroy() {
@@ -15169,7 +15282,7 @@ var LocalAudioPipeline = class extends Destroyable {
 			this._analyser.disconnect();
 		} catch {}
 		this._audioContext.close().catch((error) => {
-			logger$19.debug("[LocalAudioPipeline] audio context close warning:", error);
+			logger$20.debug("[LocalAudioPipeline] audio context close warning:", error);
 		});
 		super.destroy();
 	}
@@ -15196,7 +15309,7 @@ var LocalAudioPipeline = class extends Destroyable {
 //#endregion
 //#region src/controllers/LocalStreamController.ts
 var import_cjs$17 = require_cjs();
-const logger$18 = getLogger();
+const logger$19 = getLogger();
 var LocalStreamController = class extends Destroyable {
 	constructor(options) {
 		super();
@@ -15234,28 +15347,30 @@ var LocalStreamController = class extends Destroyable {
 	* Build the local media stream based on the provided options.
 	*/
 	async buildLocalStream() {
-		logger$18.debug("[LocalStreamController] Building local media stream.");
+		logger$19.debug("[LocalStreamController] Building local media stream.");
 		let stream;
 		if (this.options.inputAudioStream ?? this.options.inputVideoStream) {
 			const tracks = [...this.options.inputAudioStream?.getTracks() ?? [], ...this.options.inputVideoStream?.getTracks() ?? []];
 			stream = new MediaStream(tracks);
 		} else if (this.options.propose === "screenshare") {
-			logger$18.debug("[LocalStreamController] Requesting display media for screen sharing with audio:", Boolean(this.options.inputAudioDeviceConstraints));
+			logger$19.debug("[LocalStreamController] Requesting display media for screen sharing with audio:", Boolean(this.options.inputAudioDeviceConstraints));
 			stream = await this.options.getDisplayMedia({
 				video: true,
 				audio: Boolean(this.options.inputAudioDeviceConstraints)
 			});
-			logger$18.debug("[LocalStreamController] Screen share media obtained:", stream);
+			logger$19.debug("[LocalStreamController] Screen share media obtained:", stream);
 		} else {
 			const constraints = {
 				audio: this.options.inputAudioDeviceConstraints,
 				video: this.options.inputVideoDeviceConstraints
 			};
-			logger$18.debug("[LocalStreamController] Requesting user media with constraints:", constraints);
+			logger$19.debug("[LocalStreamController] Requesting user media with constraints:", constraints);
 			stream = await this.options.getUserMedia(constraints);
-			logger$18.debug("[LocalStreamController] User media obtained:", stream);
+			logger$19.debug("[LocalStreamController] User media obtained:", stream);
 		}
 		this._localStream$.next(stream);
+		this._localAudioTracks$.next(stream.getAudioTracks());
+		this._localVideoTracks$.next(stream.getVideoTracks());
 		return stream;
 	}
 	/**
@@ -15270,7 +15385,7 @@ var LocalStreamController = class extends Destroyable {
 		this._localStream$.next(localStream);
 		if (track.kind === "video") this._localVideoTracks$.next(localStream.getVideoTracks());
 		else this._localAudioTracks$.next(localStream.getAudioTracks());
-		logger$18.debug(`[LocalStreamController] ${track.kind} track added:`, track.id);
+		logger$19.debug(`[LocalStreamController] ${track.kind} track added:`, track.id);
 		return localStream;
 	}
 	/**
@@ -15282,7 +15397,7 @@ var LocalStreamController = class extends Destroyable {
 		const stream = this._localStream$.value;
 		const track = stream?.getTracks().find((t) => t.id === trackId);
 		if (!track) {
-			logger$18.debug(`[LocalStreamController] track not found: ${trackId}`);
+			logger$19.debug(`[LocalStreamController] track not found: ${trackId}`);
 			return;
 		}
 		track.removeEventListener("ended", this.mediaTrackEndedHandler);
@@ -15291,7 +15406,7 @@ var LocalStreamController = class extends Destroyable {
 		this._localStream$.next(stream);
 		if (track.kind === "video") this._localVideoTracks$.next(stream?.getVideoTracks() ?? []);
 		else this._localAudioTracks$.next(stream?.getAudioTracks() ?? []);
-		logger$18.debug(`[LocalStreamController] ${track.kind} track removed:`, trackId);
+		logger$19.debug(`[LocalStreamController] ${track.kind} track removed:`, trackId);
 		return track;
 	}
 	/**
@@ -15326,7 +15441,7 @@ var LocalStreamController = class extends Destroyable {
 	*/
 	stopAllTracks() {
 		this._localStream$.value?.getTracks().forEach((track) => {
-			logger$18.debug(`[LocalStreamController] Stopping local track: ${track.kind}`);
+			logger$19.debug(`[LocalStreamController] Stopping local track: ${track.kind}`);
 			track.removeEventListener("ended", this.mediaTrackEndedHandler);
 			track.stop();
 		});
@@ -15342,7 +15457,7 @@ var LocalStreamController = class extends Destroyable {
 
 //#endregion
 //#region src/controllers/TransceiverController.ts
-const logger$17 = getLogger();
+const logger$18 = getLogger();
 const getDirection = (send, recv) => {
 	if (send && recv) return "sendrecv";
 	else if (send && !recv) return "sendonly";
@@ -15423,6 +15538,12 @@ var TransceiverController = class extends Destroyable {
 			scaleResolutionDownBy: Number(rid) * 6 || 1
 		}));
 	}
+	/**
+	* Resolve the current MediaTrackConstraints for an input kind, normalising
+	* boolean shorthand to an empty object. Public so the surrounding
+	* RTCPeerConnectionController can drive its own pipeline-aware getUserMedia
+	* call with the same effective constraints the transceiver would have used.
+	*/
 	getConstraintsFor(kind) {
 		const constraints = kind === "audio" ? this.inputAudioDeviceConstraints : this.inputVideoDeviceConstraints;
 		return typeof constraints === "boolean" ? {} : constraints;
@@ -15444,7 +15565,7 @@ var TransceiverController = class extends Destroyable {
 			sendEncodings: isAudio ? void 0 : this.sendEncodings,
 			streams: direction === "recvonly" ? void 0 : [localStream]
 		};
-		logger$17.debug(`[TransceiverController] Setting up transceiver sender for local ${track.kind} track:`, {
+		logger$18.debug(`[TransceiverController] Setting up transceiver sender for local ${track.kind} track:`, {
 			transceiver,
 			transceiverParams
 		});
@@ -15452,11 +15573,11 @@ var TransceiverController = class extends Destroyable {
 			await transceiver.sender.replaceTrack(track);
 			transceiver.direction = transceiverParams.direction;
 			if (transceiverParams.streams?.some((stream) => Boolean(stream))) {
-				logger$17.debug(`[TransceiverController] Setting streams for transceiver sender for local ${track.kind} track:`, transceiverParams.streams);
+				logger$18.debug(`[TransceiverController] Setting streams for transceiver sender for local ${track.kind} track:`, transceiverParams.streams);
 				transceiver.sender.setStreams(...transceiverParams.streams);
 			}
 		} else {
-			logger$17.debug(`[TransceiverController] Adding new transceiver for local ${track.kind} track:`, track.id);
+			logger$18.debug(`[TransceiverController] Adding new transceiver for local ${track.kind} track:`, track.id);
 			this.peerConnection.addTransceiver(track, transceiverParams);
 		}
 	}
@@ -15470,13 +15591,13 @@ var TransceiverController = class extends Destroyable {
 				if (options.updateTransceiverDirection) transceiver.direction = "inactive";
 			}
 		} catch (error) {
-			logger$17.error("[TransceiverController] stopTrackSender error", kind, error);
+			logger$18.error("[TransceiverController] stopTrackSender error", kind, error);
 			this.options.onError?.(new MediaTrackError("stopTrackSender", kind, error));
 		}
 	}
 	async restoreTrackSender(kind) {
 		try {
-			logger$17.debug("[TransceiverController] restoreTrackSender called", kind);
+			logger$18.debug("[TransceiverController] restoreTrackSender called", kind);
 			const constraints = {};
 			const transceivers = this.transceiverByKind(kind);
 			for (const transceiver of transceivers) {
@@ -15486,23 +15607,23 @@ var TransceiverController = class extends Destroyable {
 					if (trackKind === "audio" || trackKind === "video") constraints[trackKind] = this.getConstraintsFor(trackKind);
 				}
 			}
-			logger$17.debug("[TransceiverController] restoreTrackSender constraints:", constraints);
+			logger$18.debug("[TransceiverController] restoreTrackSender constraints:", constraints);
 			if (Object.keys(constraints).length === 0) {
-				logger$17.warn("[TransceiverController] restoreTrackSender: no tracks need restoration", kind);
+				logger$18.warn("[TransceiverController] restoreTrackSender: no tracks need restoration", kind);
 				return;
 			}
 			const newTracks = (await this.options.getUserMedia(constraints)).getTracks();
-			logger$17.debug("[TransceiverController] restoreTrackSender new tracks:", newTracks);
+			logger$18.debug("[TransceiverController] restoreTrackSender new tracks:", newTracks);
 			for (const newTrack of newTracks) {
 				this.options.localStreamController.addTrack(newTrack);
 				const trackKind = newTrack.kind;
 				const transceiverOfKind = this.transceiverByKind(trackKind)[0];
 				transceiverOfKind.direction = trackKind === "audio" ? this.audioDirection : this.videoDirection;
-				logger$17.debug("[TransceiverController] restoreTrackSender setting direction for", trackKind, transceiverOfKind.direction);
+				logger$18.debug("[TransceiverController] restoreTrackSender setting direction for", trackKind, transceiverOfKind.direction);
 				await transceiverOfKind.sender.replaceTrack(newTrack);
 			}
 		} catch (error) {
-			logger$17.error("[TransceiverController] restoreTrackSender error", kind, error);
+			logger$18.error("[TransceiverController] restoreTrackSender error", kind, error);
 			this.options.onError?.(new MediaTrackError("restoreTrackSender", kind, error));
 		}
 	}
@@ -15543,14 +15664,14 @@ var TransceiverController = class extends Destroyable {
 				};
 				try {
 					await track.applyConstraints(constraintsToApply);
-					logger$17.debug(`[TransceiverController] Updated ${kind} sender constraints:`, constraintsToApply);
-					logger$17.debug(`[TransceiverController] Updated ${kind} sender constraints:`, track.getConstraints());
+					logger$18.debug(`[TransceiverController] Updated ${kind} sender constraints:`, constraintsToApply);
+					logger$18.debug(`[TransceiverController] Updated ${kind} sender constraints:`, track.getConstraints());
 				} catch (error) {
-					logger$17.warn(`[TransceiverController] applyConstraints failed for ${kind} track ${track.id}, attempting track replacement fallback:`, error);
+					logger$18.warn(`[TransceiverController] applyConstraints failed for ${kind} track ${track.id}, attempting track replacement fallback:`, error);
 					try {
 						await this.replaceTrackFallback(sender, track, kind, constraintsToApply);
 					} catch (fallbackError) {
-						logger$17.warn(`[TransceiverController] Track replacement fallback also failed for ${kind} track:`, fallbackError);
+						logger$18.warn(`[TransceiverController] Track replacement fallback also failed for ${kind} track:`, fallbackError);
 						this.options.onError?.(new MediaTrackError("updateSendersConstraints", kind, fallbackError));
 					}
 				}
@@ -15578,7 +15699,7 @@ var TransceiverController = class extends Destroyable {
 		if (!newTrack) throw new MediaTrackError("replaceTrackFallback", kind, /* @__PURE__ */ new Error("getUserMedia returned no track of the requested kind"));
 		await sender.replaceTrack(newTrack);
 		this.options.localStreamController.addTrack(newTrack);
-		logger$17.debug(`[TransceiverController] Track replacement fallback succeeded for ${kind}. New track: ${newTrack.id}`);
+		logger$18.debug(`[TransceiverController] Track replacement fallback succeeded for ${kind}. New track: ${newTrack.id}`);
 	}
 	getMediaDirections() {
 		if (this.peerConnection.connectionState === "connected") return this.peerConnection.getTransceivers().reduce((acc, transceiver) => {
@@ -15609,7 +15730,7 @@ var TransceiverController = class extends Destroyable {
 //#endregion
 //#region src/controllers/RTCPeerConnectionController.ts
 var import_cjs$16 = require_cjs();
-const logger$16 = getLogger();
+const logger$17 = getLogger();
 var RTCPeerConnectionController = class extends Destroyable {
 	constructor(options = {}, remoteSessionDescription, deviceController) {
 		super();
@@ -15625,43 +15746,43 @@ var RTCPeerConnectionController = class extends Destroyable {
 		this.oniceconnectionstatechangeHandler = () => {
 			if (this.peerConnection) {
 				const { iceConnectionState } = this.peerConnection;
-				logger$16.debug(`[RTCPeerConnectionController] ICE connection state changed to: ${iceConnectionState}`);
+				logger$17.debug(`[RTCPeerConnectionController] ICE connection state changed to: ${iceConnectionState}`);
 				this._iceConnectionState$.next(this.peerConnection.iceConnectionState);
 			}
 		};
 		this.onconnectionstatechangeHandler = () => {
 			if (this.peerConnection) {
 				const { connectionState } = this.peerConnection;
-				logger$16.debug(`[RTCPeerConnectionController] Connection state changed to: ${connectionState}`);
+				logger$17.debug(`[RTCPeerConnectionController] Connection state changed to: ${connectionState}`);
 				if (connectionState === "connected") this.removeConnectionTimer();
 				this._connectionState$.next(this.peerConnection.connectionState);
 			}
 		};
 		this.onsignalingstatechangeHandler = () => {
-			logger$16.debug(`[RTCPeerConnectionController] Signaling state changed to: ${this.peerConnection?.signalingState}`);
+			logger$17.debug(`[RTCPeerConnectionController] Signaling state changed to: ${this.peerConnection?.signalingState}`);
 		};
 		this.onicegatheringstatechangeHandler = () => {
 			if (this.peerConnection) this._iceGatheringState$.next(this.peerConnection.iceGatheringState);
 		};
 		this.onnegotiationneededHandler = (event) => {
-			logger$16.debug("[RTCPeerConnectionController] Negotiation needed event received.", event);
+			logger$17.debug("[RTCPeerConnectionController] Negotiation needed event received.", event);
 			this.negotiationNeeded$.next();
 		};
 		this.updateSelectedInputDevice = async (kind, deviceInfo) => {
 			try {
 				const { localStream } = this;
 				if (!localStream) {
-					logger$16.warn("[RTCPeerConnectionController] No local stream available to update input device.");
+					logger$17.warn("[RTCPeerConnectionController] No local stream available to update input device.");
 					return;
 				}
-				logger$16.debug(`[RTCPeerConnectionController] Updating selected ${kind} input device:`, localStream.getTracks());
+				logger$17.debug(`[RTCPeerConnectionController] Updating selected ${kind} input device:`, localStream.getTracks());
 				const track = localStream.getTracks().find((track$1) => track$1.kind === kind);
 				if (track) {
 					this.transceiverController?.stopTrackSender(kind);
 					this.localStreamController.removeTrack(track.id);
-					logger$16.debug(`[RTCPeerConnectionController] Stopped existing ${kind} track: ${track.id}`, localStream.getTracks());
+					logger$17.debug(`[RTCPeerConnectionController] Stopped existing ${kind} track: ${track.id}`, localStream.getTracks());
 					if (!deviceInfo) {
-						logger$16.debug(`[RTCPeerConnectionController] ${kind} input device selected: none`);
+						logger$17.debug(`[RTCPeerConnectionController] ${kind} input device selected: none`);
 						return;
 					}
 					const streamTrack = (await this.getUserMedia({ [kind]: {
@@ -15669,16 +15790,16 @@ var RTCPeerConnectionController = class extends Destroyable {
 						...this.deviceController.deviceInfoToConstraints(deviceInfo)
 					} })).getTracks().find((t) => t.kind === kind);
 					if (streamTrack) {
-						logger$16.debug(`[RTCPeerConnectionController] Adding new ${kind} track: ${streamTrack.id}`);
+						logger$17.debug(`[RTCPeerConnectionController] Adding new ${kind} track: ${streamTrack.id}`);
 						this.localStreamController.addTrack(streamTrack);
 						await this.transceiverController?.replaceSenderTrack(kind, streamTrack);
-						logger$16.debug(`[RTCPeerConnectionController] Added new ${kind} track: ${streamTrack.id}`, this.localStream?.getTracks());
+						logger$17.debug(`[RTCPeerConnectionController] Added new ${kind} track: ${streamTrack.id}`, this.localStream?.getTracks());
 					}
 				}
-				logger$16.debug(`[RTCPeerConnectionController] ${kind} input device selected:`, deviceInfo?.label);
+				logger$17.debug(`[RTCPeerConnectionController] ${kind} input device selected:`, deviceInfo?.label);
 			} catch (error) {
-				logger$16.error(`[RTCPeerConnectionController] Failed to select ${kind} input device:`, error);
-				this._errors$.next(toError(error));
+				logger$17.error(`[RTCPeerConnectionController] Failed to select ${kind} input device:`, error);
+				this._errors$.next(new MediaTrackError("updateSelectedInputDevice", kind, error));
 				throw error;
 			}
 		};
@@ -15749,7 +15870,19 @@ var RTCPeerConnectionController = class extends Destroyable {
 		return this._memberId;
 	}
 	stopTrackSender(kind, options = { updateTransceiverDirection: false }) {
-		this.transceiverController?.stopTrackSender(kind, options);
+		const audioCovered = kind === "audio" || kind === "both";
+		if (audioCovered && this._localAudioPipeline) this.stopRawAudioInputForPipeline();
+		if (!audioCovered) this.transceiverController?.stopTrackSender(kind, options);
+		else if (kind === "both") this.transceiverController?.stopTrackSender("video", options);
+		else if (!this._localAudioPipeline) this.transceiverController?.stopTrackSender(kind, options);
+	}
+	stopRawAudioInputForPipeline() {
+		const rawTracks = this.localStreamController.localAudioTracks;
+		for (const track of rawTracks) if (track.readyState === "live") {
+			track.stop();
+			this.localStreamController.removeTrack(track.id);
+		}
+		this._localAudioPipeline?.setInputTrack(null);
 	}
 	get isNegotiating$() {
 		return this._isNegotiating$.asObservable();
@@ -15888,7 +16021,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 			case "main":
 			default: return {
 				...options,
-				offerToReceiveAudio: true,
+				offerToReceiveAudio: this.options.receiveAudio ?? true,
 				offerToReceiveVideo: this.options.receiveVideo ?? Boolean(this.inputVideoDeviceConstraints)
 			};
 		}
@@ -15915,15 +16048,15 @@ var RTCPeerConnectionController = class extends Destroyable {
 			this.setupPeerConnection();
 			this.subscribeTo(this.negotiationNeeded$.pipe((0, import_cjs$16.auditTime)(0), (0, import_cjs$16.exhaustMap)(async () => this.startNegotiation())), {
 				next: () => {
-					logger$16.debug("[RTCPeerConnectionController] Start Negotiation completed successfully");
+					logger$17.debug("[RTCPeerConnectionController] Start Negotiation completed successfully");
 				},
 				error: (error) => {
-					logger$16.error("[RTCPeerConnectionController] Start Negotiation error:", error);
+					logger$17.error("[RTCPeerConnectionController] Start Negotiation error:", error);
 					this._errors$.next(toError(error));
 				}
 			});
 			this.subscribeTo((0, import_cjs$16.merge)(this.deviceController.selectedAudioInputDevice$.pipe((0, import_cjs$16.map)((deviceInfo) => ["audio", deviceInfo])), this.deviceController.selectedVideoInputDevice$.pipe((0, import_cjs$16.map)((deviceInfo) => ["video", deviceInfo]))).pipe((0, import_cjs$16.skipWhile)(() => !this.localStreamController.localStream)), async ([kind, deviceInfo]) => {
-				logger$16.debug(`[RTCPeerConnectionController] Selected input device changed for:`, {
+				logger$17.debug(`[RTCPeerConnectionController] Selected input device changed for:`, {
 					kind,
 					deviceInfo
 				});
@@ -15940,7 +16073,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 				this._initialized$.next(true);
 			}
 		} catch (error) {
-			logger$16.error("[RTCPeerConnectionController] Initialization error:", error);
+			logger$17.error("[RTCPeerConnectionController] Initialization error:", error);
 			this._errors$.next(toError(error));
 			this.destroy();
 		}
@@ -15972,22 +16105,22 @@ var RTCPeerConnectionController = class extends Destroyable {
 	}
 	async startNegotiation() {
 		if (this.isNegotiating) {
-			logger$16.debug("[RTCPeerConnectionController] Negotiation already in progress, skipping.");
+			logger$17.debug("[RTCPeerConnectionController] Negotiation already in progress, skipping.");
 			return;
 		}
 		this.setupEventListeners();
 		if (this.type === "answer") {
-			logger$16.debug("[RTCPeerConnectionController] This is an answer type still, skipping offer creation.");
+			logger$17.debug("[RTCPeerConnectionController] This is an answer type still, skipping offer creation.");
 			return;
 		}
 		this._isNegotiating$.next(true);
-		logger$16.debug("[RTCPeerConnectionController] Starting negotiation.");
+		logger$17.debug("[RTCPeerConnectionController] Starting negotiation.");
 		try {
 			const { offerOptions } = this;
-			logger$16.debug("[RTCPeerConnectionController] Creating offer with options:", offerOptions);
+			logger$17.debug("[RTCPeerConnectionController] Creating offer with options:", offerOptions);
 			await this.createOffer(offerOptions);
 		} catch (error) {
-			logger$16.error("[RTCPeerConnectionController] Error during negotiation:", error);
+			logger$17.error("[RTCPeerConnectionController] Error during negotiation:", error);
 			this._errors$.next(toError(error));
 		}
 	}
@@ -16003,14 +16136,14 @@ var RTCPeerConnectionController = class extends Destroyable {
 		let readyToConnect = status !== "failed";
 		try {
 			if (status === "received" && sdp) {
-				logger$16.debug("[RTCPeerConnectionController] Received answer SDP:", sdp);
+				logger$17.debug("[RTCPeerConnectionController] Received answer SDP:", sdp);
 				await this._setRemoteDescription({
 					type: "answer",
 					sdp
 				});
 			}
 		} catch (error) {
-			logger$16.error("[RTCPeerConnectionController] Error updating answer status:", error);
+			logger$17.error("[RTCPeerConnectionController] Error updating answer status:", error);
 			this._errors$.next(toError(error));
 			readyToConnect = false;
 		} finally {
@@ -16029,7 +16162,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 				await this.handleOfferReceived();
 				break;
 			case "failed":
-				logger$16.error("[RTCPeerConnectionController] Offer failed to be processed by remote.");
+				logger$17.error("[RTCPeerConnectionController] Offer failed to be processed by remote.");
 				break;
 			case "sent":
 			default:
@@ -16042,13 +16175,14 @@ var RTCPeerConnectionController = class extends Destroyable {
 	*/
 	async acceptInbound(mediaOverrides) {
 		if (mediaOverrides) {
-			const { audio, video, receiveAudio, receiveVideo } = mediaOverrides;
+			const { audio, video, receiveAudio, receiveVideo, fallbackToReceiveOnly } = mediaOverrides;
 			this.options = {
 				...this.options,
 				...audio !== void 0 ? { audio } : {},
 				...video !== void 0 ? { video } : {},
 				...receiveAudio !== void 0 ? { receiveAudio } : {},
-				...receiveVideo !== void 0 ? { receiveVideo } : {}
+				...receiveVideo !== void 0 ? { receiveVideo } : {},
+				...fallbackToReceiveOnly !== void 0 ? { fallbackToReceiveOnly } : {}
 			};
 			this.transceiverController?.updateOptions({
 				receiveAudio: this.receiveAudio,
@@ -16061,7 +16195,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 		}
 		await this.setupLocalTracks();
 		const { answerOptions } = this;
-		logger$16.debug("[RTCPeerConnectionController] Creating inbound answer with options:", answerOptions);
+		logger$17.debug("[RTCPeerConnectionController] Creating inbound answer with options:", answerOptions);
 		await this.createAnswer(answerOptions);
 	}
 	async handleOfferReceived() {
@@ -16069,7 +16203,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 		this._isNegotiating$.next(true);
 		await this._setRemoteDescription(this.sdpInit);
 		const { answerOptions } = this;
-		logger$16.debug("[RTCPeerConnectionController] Creating answer with options:", answerOptions);
+		logger$17.debug("[RTCPeerConnectionController] Creating answer with options:", answerOptions);
 		await this.createAnswer(answerOptions);
 	}
 	readyToConnect() {
@@ -16077,7 +16211,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 		this.connectionTimer = setTimeout(() => {
 			this.removeConnectionTimer();
 			if (this.peerConnection?.connectionState !== "connected") {
-				logger$16.debug("[RTCPeerConnectionController] Connection timeout, restarting ICE gathering with relay only.");
+				logger$17.debug("[RTCPeerConnectionController] Connection timeout, restarting ICE gathering with relay only.");
 				this.iceGatheringController.restartICEGatheringWithRelayOnly();
 			}
 		}, this.connectionTimeout);
@@ -16099,14 +16233,14 @@ var RTCPeerConnectionController = class extends Destroyable {
 		const stereo = this.options.stereo ?? PreferencesContainer.instance.stereoAudio;
 		if (preferredAudioCodecs.length > 0 || preferredVideoCodecs.length > 0) {
 			result = setCodecPreferences(result, preferredAudioCodecs, preferredVideoCodecs);
-			logger$16.debug("[RTCPeerConnectionController] Applied codec preferences to SDP", {
+			logger$17.debug("[RTCPeerConnectionController] Applied codec preferences to SDP", {
 				preferredAudioCodecs,
 				preferredVideoCodecs
 			});
 		}
 		if (stereo) {
 			result = enableStereoOpus(result);
-			logger$16.debug("[RTCPeerConnectionController] Applied stereo Opus to SDP");
+			logger$17.debug("[RTCPeerConnectionController] Applied stereo Opus to SDP");
 		}
 		return Promise.resolve(result);
 	}
@@ -16162,25 +16296,25 @@ var RTCPeerConnectionController = class extends Destroyable {
 				...this.peerConnection.getConfiguration(),
 				iceTransportPolicy: "relay"
 			});
-			logger$16.debug("[RTCPeerConnectionController] ICE transport policy set to relay-only");
+			logger$17.debug("[RTCPeerConnectionController] ICE transport policy set to relay-only");
 		} catch (error) {
-			logger$16.warn("[RTCPeerConnectionController] Failed to set relay-only policy:", error);
+			logger$17.warn("[RTCPeerConnectionController] Failed to set relay-only policy:", error);
 		}
 		this.setupEventListeners();
 		this._isNegotiating$.next(true);
-		logger$16.debug(`[RTCPeerConnectionController] Triggering ICE restart${relayOnly ? " (relay-only)" : ""}.`);
+		logger$17.debug(`[RTCPeerConnectionController] Triggering ICE restart${relayOnly ? " (relay-only)" : ""}.`);
 		try {
 			const offer = await this.peerConnection.createOffer({ iceRestart: true });
 			await this.setLocalDescription(offer);
 		} catch (error) {
-			logger$16.error("[RTCPeerConnectionController] ICE restart offer failed:", error);
+			logger$17.error("[RTCPeerConnectionController] ICE restart offer failed:", error);
 			this._errors$.next(toError(error));
 			this.negotiationEnded();
 			if (policyChanged) this.restoreIceTransportPolicy();
 			throw error;
 		}
 		if (policyChanged) (0, import_cjs$16.firstValueFrom)((0, import_cjs$16.race)(this._iceGatheringState$.pipe((0, import_cjs$16.filter)((state) => state === "complete"), (0, import_cjs$16.take)(1)), (0, import_cjs$16.timer)(ICE_GATHERING_COMPLETE_TIMEOUT_MS).pipe((0, import_cjs$16.map)(() => "timeout")))).then(() => this.restoreIceTransportPolicy()).catch((error) => {
-			logger$16.warn("[RTCPeerConnectionController] Error waiting for ICE gathering to complete:", error);
+			logger$17.warn("[RTCPeerConnectionController] Error waiting for ICE gathering to complete:", error);
 			this.restoreIceTransportPolicy();
 		});
 	}
@@ -16190,9 +16324,9 @@ var RTCPeerConnectionController = class extends Destroyable {
 				...this.peerConnection.getConfiguration(),
 				iceTransportPolicy: this.options.relayOnly ? "relay" : "all"
 			});
-			logger$16.debug("[RTCPeerConnectionController] ICE transport policy restored");
+			logger$17.debug("[RTCPeerConnectionController] ICE transport policy restored");
 		} catch (error) {
-			logger$16.warn("[RTCPeerConnectionController] Failed to restore ICE transport policy:", error);
+			logger$17.warn("[RTCPeerConnectionController] Failed to restore ICE transport policy:", error);
 		}
 	}
 	/**
@@ -16204,13 +16338,25 @@ var RTCPeerConnectionController = class extends Destroyable {
 		await this.setupRemoteTracks();
 	}
 	async setupLocalTracks() {
-		logger$16.debug("[RTCPeerConnectionController] Setting up local tracks/transceivers.");
-		const localStream = this.localStream ?? await this.localStreamController.buildLocalStream();
+		logger$17.debug("[RTCPeerConnectionController] Setting up local tracks/transceivers.");
+		if (this.hasNoLocalMediaToSend()) {
+			if (!this.receiveAudio && !this.receiveVideo) throw new InvalidParams("Call requests no media: enable audio/video or receiveAudio/receiveVideo");
+			logger$17.debug("[RTCPeerConnectionController] No local media requested; negotiating receive-only.");
+			this.setupReceiveOnlyTransceivers();
+			return;
+		}
+		let localStream;
+		try {
+			localStream = this.localStream ?? await this.localStreamController.buildLocalStream();
+		} catch (error) {
+			this.handleLocalMediaFailure(error);
+			return;
+		}
 		if (this.transceiverController?.useAddStream ?? false) {
-			logger$16.warn("[RTCPeerConnectionController] Using deprecated addStream API to add local stream.");
+			logger$17.warn("[RTCPeerConnectionController] Using deprecated addStream API to add local stream.");
 			this.peerConnection?.addStream(localStream);
 			if (!this.isNegotiating) {
-				logger$16.debug("[RTCPeerConnectionController] Forcing negotiationneeded after local tracks setup.");
+				logger$17.debug("[RTCPeerConnectionController] Forcing negotiationneeded after local tracks setup.");
 				this.negotiationNeeded$.next();
 			}
 			return;
@@ -16226,12 +16372,54 @@ var RTCPeerConnectionController = class extends Destroyable {
 					const transceivers = (kind === "audio" ? this.transceiverController?.audioTransceivers : this.transceiverController?.videoTransceivers) ?? [];
 					await this.transceiverController?.setupTransceiverSender(track, localStream, transceivers[index]);
 				} else {
-					logger$16.debug(`[RTCPeerConnectionController] Using addTrack for local ${kind} track:`, track.id);
+					logger$17.debug(`[RTCPeerConnectionController] Using addTrack for local ${kind} track:`, track.id);
 					this.peerConnection?.addTrack(track, localStream);
 				}
 			}
 		}
 	}
+	/** True for a main connection with no local media to send. */
+	hasNoLocalMediaToSend() {
+		const hasInputStreams = Boolean(this.options.inputAudioStream ?? this.options.inputVideoStream);
+		return this.propose === "main" && !this.localStream && !hasInputStreams && !this.inputAudioDeviceConstraints && !this.inputVideoDeviceConstraints;
+	}
+	/** The media kinds this connection wants to send: 'audiovideo' | 'video' | 'audio'. */
+	get requestedMediaKinds() {
+		const wantsAudio = Boolean(this.inputAudioDeviceConstraints);
+		const wantsVideo = Boolean(this.inputVideoDeviceConstraints);
+		if (wantsAudio && wantsVideo) return "audiovideo";
+		return wantsVideo ? "video" : "audio";
+	}
+	/**
+	* Handle a local media acquisition failure with a typed, semantically
+	* accurate MediaAccessError created at the acquisition site:
+	* - Auxiliary connections (screenshare / additional-device) throw a
+	*   non-fatal error — VertoManager surfaces it and the call is unaffected.
+	* - The main connection degrades to receive-only when allowed (default),
+	*   otherwise fails with a fatal error.
+	*/
+	handleLocalMediaFailure(error) {
+		if (this.propose === "screenshare") throw new MediaAccessError("startScreenShare", "screen", error, false);
+		if (this.propose === "additional-device") throw new MediaAccessError("addInputDevice", this.requestedMediaKinds, error, false);
+		const canReceive = this.receiveAudio || this.receiveVideo;
+		if (!((this.options.fallbackToReceiveOnly ?? true) && canReceive)) throw new MediaAccessError("acquireLocalMedia", this.requestedMediaKinds, error, true);
+		logger$17.warn("[RTCPeerConnectionController] Local media unavailable; continuing receive-only:", error);
+		this._errors$.next(new MediaAccessError("acquireLocalMedia", this.requestedMediaKinds, error, false));
+		this.setupReceiveOnlyTransceivers();
+	}
+	/**
+	* Negotiate receive-only m-lines when there are no local tracks to send.
+	* Only offer-type connections add transceivers — answer-type connections
+	* reuse the transceivers created from the remote offer.
+	*/
+	setupReceiveOnlyTransceivers() {
+		if (this.type !== "offer") return;
+		if (this.transceiverController?.useAddTransceivers ?? false) {
+			this.peerConnection?.addTransceiver("audio", { direction: this.receiveAudio ? "recvonly" : "inactive" });
+			this.peerConnection?.addTransceiver("video", { direction: this.receiveVideo ? "recvonly" : "inactive" });
+		}
+		if (!this.isNegotiating) this.negotiationNeeded$.next();
+	}
 	async getUserMedia(constraints) {
 		return (this.options.webRTCApiProvider?.mediaDevices ?? navigator.mediaDevices).getUserMedia(constraints);
 	}
@@ -16243,7 +16431,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 	async setupRemoteTracks() {
 		if (!this.peerConnection) throw new DependencyError("RTCPeerConnection is not initialized");
 		this.peerConnection.ontrack = (event) => {
-			logger$16.debug("[RTCPeerConnectionController] Remote track received:", event.track.kind);
+			logger$17.debug("[RTCPeerConnectionController] Remote track received:", event.track.kind);
 			if (event.streams[0]) this._remoteStream$.next(event.streams[0]);
 			else {
 				const existingTracks = this._remoteStream$.value?.getTracks() ?? [];
@@ -16254,8 +16442,27 @@ var RTCPeerConnectionController = class extends Destroyable {
 		await this.transceiverController?.setupRemoteTransceivers(this.type);
 	}
 	async restoreTrackSender(kind) {
-		await this.transceiverController?.restoreTrackSender(kind);
-		if (kind !== "video" && this._localAudioPipeline) await this.applyLocalAudioPipelineToSender();
+		const audioCovered = kind === "audio" || kind === "both";
+		if (audioCovered && this._localAudioPipeline) await this.restoreRawAudioInputForPipeline();
+		if (!audioCovered) await this.transceiverController?.restoreTrackSender(kind);
+		else if (kind === "both") await this.transceiverController?.restoreTrackSender("video");
+		else if (!this._localAudioPipeline) await this.transceiverController?.restoreTrackSender(kind);
+	}
+	async restoreRawAudioInputForPipeline() {
+		if (!this._localAudioPipeline) return;
+		const constraints = this.transceiverController?.getConstraintsFor("audio") ?? {};
+		let stream;
+		try {
+			stream = await this.getUserMedia({ audio: constraints });
+		} catch (error) {
+			logger$17.error("[RTCPeerConnectionController] Failed to re-acquire mic for pipeline restore:", error);
+			this._errors$.next(new MediaTrackError("restoreAudioPipelineInput", "audio", error));
+			return;
+		}
+		const newTrack = stream.getAudioTracks().at(0);
+		if (!newTrack) return;
+		this.localStreamController.addTrack(newTrack);
+		this._localAudioPipeline.setInputTrack(newTrack);
 	}
 	/**
 	* Return the lazily-created {@link LocalAudioPipeline}, constructing it on
@@ -16270,7 +16477,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 		try {
 			this._localAudioPipeline = new LocalAudioPipeline();
 		} catch (error) {
-			logger$16.warn("[RTCPeerConnectionController] Failed to create LocalAudioPipeline:", error);
+			logger$17.warn("[RTCPeerConnectionController] Failed to create LocalAudioPipeline:", error);
 			return null;
 		}
 		this.subscribeTo(this.localStreamController.localAudioTracks$, () => {
@@ -16292,7 +16499,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 		try {
 			await sender.replaceTrack(this._localAudioPipeline.outputTrack);
 		} catch (error) {
-			logger$16.warn("[RTCPeerConnectionController] Failed to route audio sender through pipeline:", error);
+			logger$17.warn("[RTCPeerConnectionController] Failed to route audio sender through pipeline:", error);
 		}
 	}
 	/**
@@ -16308,10 +16515,10 @@ var RTCPeerConnectionController = class extends Destroyable {
 		try {
 			const localStream = this.localStreamController.addTrack(track);
 			this.peerConnection.addTrack(track, localStream);
-			logger$16.debug(`[RTCPeerConnectionController] ${track.kind} track added:`, track.id);
+			logger$17.debug(`[RTCPeerConnectionController] ${track.kind} track added:`, track.id);
 		} catch (error) {
-			logger$16.error(`[RTCPeerConnectionController] Failed to add ${track.kind} track:`, error);
-			this._errors$.next(toError(error));
+			logger$17.error(`[RTCPeerConnectionController] Failed to add ${track.kind} track:`, error);
+			this._errors$.next(new MediaTrackError("addLocalTrack", track.kind, error));
 			throw error;
 		}
 	}
@@ -16327,16 +16534,16 @@ var RTCPeerConnectionController = class extends Destroyable {
 		}
 		const sender = this.peerConnection.getSenders().find((sender$1) => sender$1.track?.id === trackId);
 		if (!sender) {
-			logger$16.debug(`[RTCPeerConnectionController] track not found: ${trackId}`);
+			logger$17.debug(`[RTCPeerConnectionController] track not found: ${trackId}`);
 			return;
 		}
 		try {
 			this.peerConnection.removeTrack(sender);
 			this.localStreamController.removeTrack(trackId);
-			logger$16.debug(`[RTCPeerConnectionController] ${sender.track?.kind} track removed:`, trackId);
+			logger$17.debug(`[RTCPeerConnectionController] ${sender.track?.kind} track removed:`, trackId);
 		} catch (error) {
-			logger$16.error(`[RTCPeerConnectionController] Failed to remove ${sender.track?.kind} track:`, error);
-			this._errors$.next(toError(error));
+			logger$17.error(`[RTCPeerConnectionController] Failed to remove ${sender.track?.kind} track:`, error);
+			this._errors$.next(new MediaTrackError("removeLocalTrack", sender.track?.kind ?? "unknown", error));
 			throw error;
 		}
 	}
@@ -16362,7 +16569,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 	async replaceAudioTrackWithConstraints(constraints) {
 		const senders = this.peerConnection?.getSenders().filter((s) => s.track?.kind === "audio" && s.track.readyState === "live");
 		if (!senders || senders.length === 0) {
-			logger$16.warn("[RTCPeerConnectionController] No live audio sender to replace");
+			logger$17.warn("[RTCPeerConnectionController] No live audio sender to replace");
 			return;
 		}
 		for (const sender of senders) {
@@ -16380,7 +16587,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 			const newTrack = (await this.getUserMedia({ audio: mergedConstraints })).getAudioTracks()[0];
 			await sender.replaceTrack(newTrack);
 			this.localStreamController.addTrack(newTrack);
-			logger$16.debug(`[RTCPeerConnectionController] Audio track replaced for server-pushed params. New track: ${newTrack.id}`);
+			logger$17.debug(`[RTCPeerConnectionController] Audio track replaced for server-pushed params. New track: ${newTrack.id}`);
 		}
 	}
 	/**
@@ -16388,7 +16595,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 	* Completes all observables to prevent memory leaks.
 	*/
 	destroy() {
-		logger$16.debug(`[RTCPeerConnectionController] Destroying RTCPeerConnectionController. ${this.propose}`);
+		logger$17.debug(`[RTCPeerConnectionController] Destroying RTCPeerConnectionController. ${this.propose}`);
 		this.removeConnectionTimer();
 		this._iceGatheringController?.destroy();
 		this._localAudioPipeline?.destroy();
@@ -16414,7 +16621,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 	}
 	stopRemoteTracks() {
 		this._remoteStream$.value?.getTracks().forEach((track) => {
-			logger$16.debug(`[RTCPeerConnectionController] Stopping remote track: ${track.kind}`);
+			logger$17.debug(`[RTCPeerConnectionController] Stopping remote track: ${track.kind}`);
 			track.stop();
 		});
 	}
@@ -16431,7 +16638,7 @@ var RTCPeerConnectionController = class extends Destroyable {
 			...params,
 			sdp: finalRemote
 		};
-		logger$16.debug("[RTCPeerConnectionController] Setting remote description:", answer);
+		logger$17.debug("[RTCPeerConnectionController] Setting remote description:", answer);
 		return this.peerConnection.setRemoteDescription(answer);
 	}
 };
@@ -16446,7 +16653,11 @@ function isVertoInviteMessage(value) {
 	const msg = value;
 	return msg.method === "verto.invite" && isObject(msg.params) && hasProperty(msg.params, "sdp") && hasProperty(msg.params, "callID");
 }
-function isVertoByeMessage(value) {
+/**
+* Guards inbound `verto.bye` frames (server → client). Outbound bye messages are
+* built locally and never type-guarded, so only the inbound shape is asserted.
+*/
+function isVertoByeInboundMessage(value) {
 	if (!isVertoMethodMessage(value)) return false;
 	return value.method === "verto.bye";
 }
@@ -16466,11 +16677,19 @@ function isVertoMediaParamsInnerParams(value) {
 function isVertoPingInnerParams(value) {
 	return isObject(value) && hasProperty(value, "jsonrpc") && value.jsonrpc === "2.0" && hasProperty(value, "method") && value.method === "verto.ping";
 }
+/**
+* Guards the params of an inbound `verto.bye` frame (top-level `callID`). Use
+* this to recognise the bye payload extracted by `vertoBye$`, e.g. when racing
+* it against a boolean answer/reject signal.
+*/
+function isVertoByeInboundParamsGuard(value) {
+	return isObject(value) && hasProperty(value, "callID") && typeof value.callID === "string";
+}
 
 //#endregion
 //#region src/managers/VertoManager.ts
 var import_cjs$15 = require_cjs();
-const logger$15 = getLogger();
+const logger$16 = getLogger();
 /**
 * Decide what value goes on the `node_id` field of a `webrtc.verto` envelope.
 *
@@ -16526,7 +16745,7 @@ var WebRTCVertoManager = class extends VertoManager {
 		try {
 			await this.executeVerto(vertoModifyMessage);
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Call might already be disconnected, error sending Verto hold:", error);
+			logger$16.warn("[WebRTCManager] Call might already be disconnected, error sending Verto hold:", error);
 			throw error;
 		}
 	}
@@ -16539,7 +16758,7 @@ var WebRTCVertoManager = class extends VertoManager {
 		try {
 			await this.executeVerto(vertoModifyMessage);
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Call might already be disconnected, error sending Verto unhold:", error);
+			logger$16.warn("[WebRTCManager] Call might already be disconnected, error sending Verto unhold:", error);
 			throw error;
 		}
 	}
@@ -16592,25 +16811,25 @@ var WebRTCVertoManager = class extends VertoManager {
 			if (event.member_id) this.setSelfIdIfNull(event.member_id);
 		});
 		this.subscribeTo(this.vertoMedia$, (event) => {
-			logger$15.debug("[WebRTCManager] Received Verto media event (early media SDP):", event);
-			this._signalingStatus$.next("ringing");
+			logger$16.debug("[WebRTCManager] Received Verto media event (early media SDP):", event);
 			const { sdp, callID } = event;
+			this.emitMainSignalingStatus(callID, "ringing");
 			this._rtcPeerConnectionsMap.get(callID)?.updateAnswerStatus({
 				status: "received",
 				sdp
 			});
 		});
 		this.subscribeTo(this.vertoAnswer$, (event) => {
-			logger$15.debug("[WebRTCManager] Received Verto answer event:", event);
-			this._signalingStatus$.next("connecting");
+			logger$16.debug("[WebRTCManager] Received Verto answer event:", event);
 			const { sdp, callID } = event;
+			this.emitMainSignalingStatus(callID, "connecting");
 			this._rtcPeerConnectionsMap.get(callID)?.updateAnswerStatus({
 				status: "received",
 				sdp
 			});
 		});
 		this.subscribeTo(this.vertoMediaParams$, (event) => {
-			logger$15.debug("[WebRTCManager] Received Verto mediaParams event:", event);
+			logger$16.debug("[WebRTCManager] Received Verto mediaParams event:", event);
 			const { mediaParams, callID } = event;
 			const rtcPeerConnController = this._rtcPeerConnectionsMap.get(callID);
 			const { audio, video } = mediaParams;
@@ -16624,7 +16843,7 @@ var WebRTCVertoManager = class extends VertoManager {
 						timestamp: Date.now()
 					});
 				} catch (error) {
-					logger$15.warn("[WebRTCManager] Error applying server-pushed media params:", error);
+					logger$16.warn("[WebRTCManager] Error applying server-pushed media params:", error);
 					this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
 				}
 			})();
@@ -16646,13 +16865,13 @@ var WebRTCVertoManager = class extends VertoManager {
 	*/
 	setNodeIdIfNull(nodeId) {
 		if (!this._nodeId$.value && nodeId) {
-			logger$15.debug(`[WebRTCManager] Early node_id set: ${nodeId}`);
+			logger$16.debug(`[WebRTCManager] Early node_id set: ${nodeId}`);
 			this._nodeId$.next(nodeId);
 		}
 	}
 	setSelfIdIfNull(selfId) {
 		if (!this._selfId$.value && selfId) {
-			logger$15.debug(`[WebRTCManager] Early selfId set: ${selfId}`);
+			logger$16.debug(`[WebRTCManager] Early selfId set: ${selfId}`);
 			this._selfId$.next(selfId);
 		}
 	}
@@ -16661,7 +16880,7 @@ var WebRTCVertoManager = class extends VertoManager {
 			const vertoPongMessage = VertoPong({ ...vertoPing });
 			await this.executeVerto(vertoPongMessage);
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Call might disconnect, error sending Verto pong:", error);
+			logger$16.warn("[WebRTCManager] Call might disconnect, error sending Verto pong:", error);
 			this.onError?.(new VertoPongError(error));
 		}
 	}
@@ -16671,7 +16890,7 @@ var WebRTCVertoManager = class extends VertoManager {
 			if (audio) await this.mainPeerConnection.updateSendersConstraints("audio", audio);
 			if (video) await this.mainPeerConnection.updateSendersConstraints("video", video);
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Error updating media constraints:", error);
+			logger$16.warn("[WebRTCManager] Error updating media constraints:", error);
 			this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
 			throw error;
 		}
@@ -16701,20 +16920,20 @@ var WebRTCVertoManager = class extends VertoManager {
 		try {
 			const pc = this.mainPeerConnection.peerConnection;
 			if (!pc) {
-				logger$15.warn("[WebRTCManager] No peer connection for keyframe request");
+				logger$16.warn("[WebRTCManager] No peer connection for keyframe request");
 				return;
 			}
 			const videoReceiver = pc.getReceivers().find((r) => r.track.kind === "video");
 			if (!videoReceiver) {
-				logger$15.warn("[WebRTCManager] No video receiver for keyframe request");
+				logger$16.warn("[WebRTCManager] No video receiver for keyframe request");
 				return;
 			}
 			if (typeof videoReceiver.requestKeyFrame === "function") {
 				videoReceiver.requestKeyFrame();
-				logger$15.debug("[WebRTCManager] Keyframe requested via RTCRtpReceiver.requestKeyFrame()");
-			} else logger$15.debug("[WebRTCManager] requestKeyFrame() not supported, skipping");
+				logger$16.debug("[WebRTCManager] Keyframe requested via RTCRtpReceiver.requestKeyFrame()");
+			} else logger$16.debug("[WebRTCManager] requestKeyFrame() not supported, skipping");
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Keyframe request failed (non-fatal):", error);
+			logger$16.warn("[WebRTCManager] Keyframe request failed (non-fatal):", error);
 		}
 	}
 	/**
@@ -16732,13 +16951,13 @@ var WebRTCVertoManager = class extends VertoManager {
 		try {
 			const controller = this.mainPeerConnection;
 			if (!controller.peerConnection) {
-				logger$15.warn("[WebRTCManager] No peer connection for ICE restart");
+				logger$16.warn("[WebRTCManager] No peer connection for ICE restart");
 				return;
 			}
 			await controller.triggerIceRestart(relayOnly);
-			logger$15.info(`[WebRTCManager] ICE restart initiated${relayOnly ? " (relay-only)" : ""}`);
+			logger$16.info(`[WebRTCManager] ICE restart initiated${relayOnly ? " (relay-only)" : ""}`);
 		} catch (error) {
-			logger$15.error("[WebRTCManager] ICE restart failed:", error);
+			logger$16.error("[WebRTCManager] ICE restart failed:", error);
 			throw error;
 		}
 	}
@@ -16756,13 +16975,13 @@ var WebRTCVertoManager = class extends VertoManager {
 		const entries = Array.from(this._rtcPeerConnectionsMap.entries());
 		for (const [id, controller] of entries) try {
 			if (!controller.peerConnection) {
-				logger$15.debug(`[WebRTCManager] No peer connection for leg ${id}, skipping ICE restart`);
+				logger$16.debug(`[WebRTCManager] No peer connection for leg ${id}, skipping ICE restart`);
 				continue;
 			}
 			await controller.triggerIceRestart(relayOnly);
-			logger$15.info(`[WebRTCManager] ICE restart initiated for leg ${id}${relayOnly ? " (relay-only)" : ""}`);
+			logger$16.info(`[WebRTCManager] ICE restart initiated for leg ${id}${relayOnly ? " (relay-only)" : ""}`);
 		} catch (error) {
-			logger$15.warn(`[WebRTCManager] ICE restart failed for leg ${id}:`, error);
+			logger$16.warn(`[WebRTCManager] ICE restart failed for leg ${id}:`, error);
 		}
 	}
 	/**
@@ -16774,7 +16993,7 @@ var WebRTCVertoManager = class extends VertoManager {
 	requestKeyframeAll() {
 		for (const [id, controller] of this._rtcPeerConnectionsMap) {
 			if (controller.isScreenShare) {
-				logger$15.debug(`[WebRTCManager] Skipping keyframe for send-only screen share leg ${id}`);
+				logger$16.debug(`[WebRTCManager] Skipping keyframe for send-only screen share leg ${id}`);
 				continue;
 			}
 			try {
@@ -16784,10 +17003,10 @@ var WebRTCVertoManager = class extends VertoManager {
 				if (!videoReceiver) continue;
 				if (typeof videoReceiver.requestKeyFrame === "function") {
 					videoReceiver.requestKeyFrame();
-					logger$15.debug(`[WebRTCManager] Keyframe requested for leg ${id}`);
+					logger$16.debug(`[WebRTCManager] Keyframe requested for leg ${id}`);
 				}
 			} catch (error) {
-				logger$15.warn(`[WebRTCManager] Keyframe request failed for leg ${id} (non-fatal):`, error);
+				logger$16.warn(`[WebRTCManager] Keyframe request failed for leg ${id} (non-fatal):`, error);
 			}
 		}
 	}
@@ -16804,7 +17023,7 @@ var WebRTCVertoManager = class extends VertoManager {
 		return this.cachedObservable("vertoMediaParams$", () => this.webRtcCallSession.webrtcMessages$.pipe(filterAs(isVertoMediaParamsInnerParams, "params"), (0, import_cjs$15.takeUntil)(this.destroyed$)));
 	}
 	get vertoBye$() {
-		return this.cachedObservable("vertoBye$", () => this.webRtcCallSession.webrtcMessages$.pipe(filterAs(isVertoByeMessage, "params"), (0, import_cjs$15.takeUntil)(this.destroyed$)));
+		return this.cachedObservable("vertoBye$", () => this.webRtcCallSession.webrtcMessages$.pipe(filterAs(isVertoByeInboundMessage, "params"), (0, import_cjs$15.takeUntil)(this.destroyed$)));
 	}
 	get vertoAttach$() {
 		return this.cachedObservable("vertoAttach$", () => this.webRtcCallSession.webrtcMessages$.pipe(filterAs(isVertoAttachMessage, "params"), (0, import_cjs$15.takeUntil)(this.destroyed$)));
@@ -16848,7 +17067,7 @@ var WebRTCVertoManager = class extends VertoManager {
 				default:
 			}
 		} catch (error) {
-			logger$15.error(`[WebRTCManager] Error sending Verto ${vertoMethod}:`, error);
+			logger$16.error(`[WebRTCManager] Error sending Verto ${vertoMethod}:`, error);
 			this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
 			if (vertoMethod === "verto.modify") this.onModifyFailed?.();
 		}
@@ -16863,19 +17082,33 @@ var WebRTCVertoManager = class extends VertoManager {
 					sdp
 				});
 			} catch (error) {
-				logger$15.warn("[WebRTCManager] Error processing modify response:", error);
+				logger$16.warn("[WebRTCManager] Error processing modify response:", error);
 				const modifyError = error instanceof Error ? error : new Error(String(error), { cause: error });
 				this.onError?.(modifyError);
 			}
 		}
 	}
+	emitMainSignalingStatus(callId, status) {
+		const rtcPeerConnController = this._rtcPeerConnectionsMap.get(callId);
+		if (!rtcPeerConnController) {
+			const signalingError = new DependencyError(`Cannot emit signaling status, RTCPeerConnectionController not found for callID: ${callId}`);
+			logger$16.error("[WebRTCManager] Failed to emit signaling status:", {
+				callId,
+				status,
+				signalingError
+			});
+			this.onError?.(signalingError);
+			return;
+		}
+		if (rtcPeerConnController.isMainDevice) this._signalingStatus$.next(status);
+	}
 	processInviteResponse(response, rtcPeerConnController) {
 		if (!response.error && getValueFrom(response, "result.result.result.message") === "CALL CREATED") {
-			this._signalingStatus$.next("trying");
+			this.emitMainSignalingStatus(rtcPeerConnController.id, "trying");
 			this._nodeId$.next(getValueFrom(response, "result.node_id") ?? null);
 			const memberId = getValueFrom(response, "result.result.result.memberID") ?? null;
 			const callId = getValueFrom(response, "result.result.result.callID") ?? null;
-			logger$15.debug("[WebRTCManager] Verto invite response:", {
+			logger$16.debug("[WebRTCManager] Verto invite response:", {
 				callId,
 				memberId,
 				response
@@ -16885,14 +17118,14 @@ var WebRTCVertoManager = class extends VertoManager {
 			if (callId) {
 				this.webRtcCallSession.addCallId(callId);
 				this.attachManager.attach(this.buildAttachableCall(callId));
-			} else logger$15.warn("[WebRTCManager] Cannot attach call, missing callId:", {
+			} else logger$16.warn("[WebRTCManager] Cannot attach call, missing callId:", {
 				nodeId: this.nodeId,
 				callId
 			});
-			logger$15.info("[WebRTCManager] Verto invite successful");
-			logger$15.debug(`[WebRTCManager] nodeid: ${this._nodeId$.value}, selfId: ${this._selfId$.value}`);
+			logger$16.info("[WebRTCManager] Verto invite successful");
+			logger$16.debug(`[WebRTCManager] nodeid: ${this._nodeId$.value}, selfId: ${this._selfId$.value}`);
 		} else {
-			logger$15.error("[WebRTCManager] Verto invite failed:", response);
+			logger$16.error("[WebRTCManager] Verto invite failed:", response);
 			const inviteError = response.error ? new JSONRPCError(response.error.code, response.error.message, response.error.data) : /* @__PURE__ */ new Error("Verto invite failed: unexpected response");
 			this.onError?.(inviteError);
 		}
@@ -16919,6 +17152,7 @@ var WebRTCVertoManager = class extends VertoManager {
 			inputVideoStream: options.inputVideoStream,
 			receiveAudio: options.receiveAudio,
 			receiveVideo: options.receiveVideo,
+			fallbackToReceiveOnly: options.fallbackToReceiveOnly,
 			webRTCApiProvider: this.webRTCApiProvider,
 			preferredVideoCodecs: options.preferredVideoCodecs,
 			preferredAudioCodecs: options.preferredAudioCodecs,
@@ -16937,17 +17171,17 @@ var WebRTCVertoManager = class extends VertoManager {
 		if (options.initOffer) this.handleInboundAnswer(rtcPeerConnController);
 	}
 	async handleInboundAnswer(rtcPeerConnController) {
-		logger$15.debug("[WebRTCManager] Waiting for inbound call to be accepted or rejected");
+		logger$16.debug("[WebRTCManager] Waiting for inbound call to be accepted or rejected");
 		const vertoByeOrAccepted = await (0, import_cjs$15.firstValueFrom)((0, import_cjs$15.race)(this.vertoBye$, this.webRtcCallSession.answered$).pipe((0, import_cjs$15.takeUntil)(this.destroyed$))).catch(() => null);
 		if (vertoByeOrAccepted === null) {
-			logger$15.debug("[WebRTCManager] Inbound answer handler aborted (destroyed).");
+			logger$16.debug("[WebRTCManager] Inbound answer handler aborted (destroyed).");
 			return;
 		}
-		if (isVertoByeMessage(vertoByeOrAccepted)) {
-			logger$15.info("[WebRTCManager] Inbound call ended by remote before answer.");
+		if (isVertoByeInboundParamsGuard(vertoByeOrAccepted)) {
+			logger$16.info("[WebRTCManager] Inbound call ended by remote before answer.");
 			this.callSession?.destroy();
 		} else if (!vertoByeOrAccepted) {
-			logger$15.info("[WebRTCManager] Inbound call rejected by user.");
+			logger$16.info("[WebRTCManager] Inbound call rejected by user.");
 			try {
 				await this.bye("USER_BUSY");
 			} finally {
@@ -16955,19 +17189,19 @@ var WebRTCVertoManager = class extends VertoManager {
 				this.callSession?.destroy();
 			}
 		} else {
-			logger$15.debug("[WebRTCManager] Inbound call accepted, creating SDP answer");
+			logger$16.debug("[WebRTCManager] Inbound call accepted, creating SDP answer");
 			const answerOptions = this.webRtcCallSession.answerMediaOptions;
 			try {
 				await rtcPeerConnController.acceptInbound(answerOptions);
 			} catch (error) {
-				logger$15.error("[WebRTCManager] Error creating inbound answer:", error);
+				logger$16.error("[WebRTCManager] Error creating inbound answer:", error);
 				this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
 			}
 		}
 	}
 	setupVertoAttachHandler() {
 		this.subscribeTo(this.vertoAttach$, async (vertoAttach) => {
-			logger$15.debug("[WebRTCManager] Received Verto attach event for existing call:", vertoAttach);
+			logger$16.debug("[WebRTCManager] Received Verto attach event for existing call:", vertoAttach);
 			const { callID } = vertoAttach;
 			await this.attachManager.attach({
 				nodeId: this.nodeId ?? void 0,
@@ -17039,17 +17273,17 @@ var WebRTCVertoManager = class extends VertoManager {
 		};
 	}
 	async sendLocalDescriptionOnceAccepted(vertoMessageRequest, rtcPeerConnectionController) {
-		logger$15.debug("[WebRTCManager] Waiting for call to be accepted or ended before sending answer");
+		logger$16.debug("[WebRTCManager] Waiting for call to be accepted or ended before sending answer");
 		const vertoByeOrAccepted = await (0, import_cjs$15.firstValueFrom)((0, import_cjs$15.race)(this.vertoBye$, this.webRtcCallSession.answered$).pipe((0, import_cjs$15.takeUntil)(this.destroyed$))).catch(() => null);
 		if (vertoByeOrAccepted === null) {
-			logger$15.debug("[WebRTCManager] Destroyed while waiting for call acceptance");
+			logger$16.debug("[WebRTCManager] Destroyed while waiting for call acceptance");
 			return;
 		}
-		if (isVertoByeMessage(vertoByeOrAccepted)) {
-			logger$15.info("[WebRTCManager] Call ended before answer was sent.");
+		if (isVertoByeInboundParamsGuard(vertoByeOrAccepted)) {
+			logger$16.info("[WebRTCManager] Call ended before answer was sent.");
 			this.callSession?.destroy();
 		} else if (!vertoByeOrAccepted) {
-			logger$15.info("[WebRTCManager] Call was not accepted, sending verto.bye.");
+			logger$16.info("[WebRTCManager] Call was not accepted, sending verto.bye.");
 			try {
 				await this.bye("USER_BUSY");
 			} finally {
@@ -17057,14 +17291,14 @@ var WebRTCVertoManager = class extends VertoManager {
 				this.callSession?.destroy();
 			}
 		} else {
-			logger$15.debug("[WebRTCManager] Call accepted, sending answer");
+			logger$16.debug("[WebRTCManager] Call accepted, sending answer");
 			try {
-				this._signalingStatus$.next("connecting");
+				this.emitMainSignalingStatus(rtcPeerConnectionController.id, "connecting");
 				await this.sendLocalDescription(vertoMessageRequest, rtcPeerConnectionController);
 				await rtcPeerConnectionController.updateAnswerStatus({ status: "sent" });
 				await this.attachManager.attach(this.buildAttachableCall());
 			} catch (error) {
-				logger$15.error("[WebRTCManager] Error sending Verto answer:", error);
+				logger$16.error("[WebRTCManager] Error sending Verto answer:", error);
 				this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
 				await rtcPeerConnectionController.updateAnswerStatus({ status: "failed" });
 			}
@@ -17145,9 +17379,11 @@ var WebRTCVertoManager = class extends VertoManager {
 		await this.initAdditionalPeerConnection("screenshare", options);
 	}
 	async initAdditionalPeerConnection(propose, options) {
+		const isScreenShare = propose === "screenshare";
+		let firstPeerConnectionError;
 		let rtcPeerConnController = null;
 		try {
-			this._screenShareStatus$.next("starting");
+			if (isScreenShare) this._screenShareStatus$.next("starting");
 			rtcPeerConnController = new RTCPeerConnectionController({
 				...options,
 				...this.RTCPeerConnectionConfig,
@@ -17155,21 +17391,27 @@ var WebRTCVertoManager = class extends VertoManager {
 				webRTCApiProvider: this.webRTCApiProvider
 			}, void 0, this.deviceController);
 			this.setupLocalDescriptionHandler(rtcPeerConnController);
-			if (propose === "screenshare") this._screenShareId = rtcPeerConnController.id;
+			if (isScreenShare) this._screenShareId = rtcPeerConnController.id;
 			this._rtcPeerConnectionsMap.set(rtcPeerConnController.id, rtcPeerConnController);
 			this._rtcPeerConnections$.next(Array.from(this._rtcPeerConnectionsMap.values()));
 			this.subscribeTo(rtcPeerConnController.errors$, (error) => {
-				this.onError?.(error);
+				firstPeerConnectionError ??= error;
+				this.onError?.(error, { fatal: false });
 			});
 			await (0, import_cjs$15.firstValueFrom)(rtcPeerConnController.connectionState$.pipe((0, import_cjs$15.filter)((state) => state === "connected"), (0, import_cjs$15.take)(1), (0, import_cjs$15.timeout)(this._screenShareTimeoutMs), (0, import_cjs$15.takeUntil)(this.destroyed$)));
-			this._screenShareStatus$.next("started");
-			logger$15.info("[WebRTCManager] Screen share started successfully.");
+			if (isScreenShare) this._screenShareStatus$.next("started");
+			logger$16.info(`[WebRTCManager] Additional peer connection connected (${propose}).`);
 			return rtcPeerConnController.id;
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Error initializing additional peer connection:", error);
-			this.onError?.(error instanceof Error ? error : new Error(String(error), { cause: error }));
+			logger$16.warn("[WebRTCManager] Error initializing additional peer connection:", error);
 			if (rtcPeerConnController) rtcPeerConnController.destroy();
-			this._screenShareStatus$.next("none");
+			if (isScreenShare) this._screenShareStatus$.next("none");
+			if (firstPeerConnectionError) throw firstPeerConnectionError instanceof MediaAccessError && firstPeerConnectionError.originalError instanceof Error ? firstPeerConnectionError.originalError : firstPeerConnectionError;
+			if (error instanceof import_cjs$15.EmptyError) {
+				logger$16.debug("[WebRTCManager] Additional peer connection aborted before connecting.");
+				return;
+			}
+			throw error instanceof Error ? error : new Error(String(error), { cause: error });
 		}
 	}
 	async removeInputDevices(id) {
@@ -17185,9 +17427,9 @@ var WebRTCVertoManager = class extends VertoManager {
 		if (removeTrack) return this.mainPeerConnection.stopTrackSender(removeTrack, { updateTransceiverDirection: true });
 	}
 	async removeScreenMedia() {
-		if (!["starting", "started"].includes(this._screenShareStatus$.value)) logger$15.warn("[WebRTCManager] No active screen share to stop.");
+		if (!["starting", "started"].includes(this._screenShareStatus$.value)) logger$16.warn("[WebRTCManager] No active screen share to stop.");
 		if (!this._screenShareId) {
-			logger$15.debug("[WebRTCManager] No screen share peer connection found.");
+			logger$16.debug("[WebRTCManager] No screen share peer connection found.");
 			return;
 		}
 		this._screenShareStatus$.next("stopping");
@@ -17216,7 +17458,7 @@ var WebRTCVertoManager = class extends VertoManager {
 				dialogParams: this.dialogParams(rtcPeerConnController)
 			}));
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Call might already be disconnected, error sending Verto bye:", error);
+			logger$16.warn("[WebRTCManager] Call might already be disconnected, error sending Verto bye:", error);
 			throw error;
 		}
 	}
@@ -17234,7 +17476,7 @@ var WebRTCVertoManager = class extends VertoManager {
 		try {
 			await this.executeVerto(vertoInfoMessage);
 		} catch (error) {
-			logger$15.warn("[WebRTCManager] Error sending DTMF digits:", error);
+			logger$16.warn("[WebRTCManager] Error sending DTMF digits:", error);
 			throw error;
 		}
 	}
@@ -17245,10 +17487,10 @@ var WebRTCVertoManager = class extends VertoManager {
 			action: "transfer"
 		});
 		try {
-			logger$15.debug("[WebRTCManager] Transferring call with options:", options);
+			logger$16.debug("[WebRTCManager] Transferring call with options:", options);
 			await this.executeVerto(message);
 		} catch (error) {
-			logger$15.error("[WebRTCManager] Error transferring call:", error);
+			logger$16.error("[WebRTCManager] Error transferring call:", error);
 			throw error;
 		}
 	}
@@ -17265,7 +17507,7 @@ var WebRTCVertoManager = class extends VertoManager {
 //#endregion
 //#region src/controllers/RemoteAudioMeter.ts
 var import_cjs$14 = require_cjs();
-const logger$14 = getLogger();
+const logger$15 = getLogger();
 /**
 * Read-only audio level meter for a remote MediaStream. Attaches an
 * AnalyserNode to a MediaStreamAudioSourceNode so it observes the stream
@@ -17300,7 +17542,7 @@ var RemoteAudioMeter = class extends Destroyable {
 			try {
 				this._source.disconnect();
 			} catch (error) {
-				logger$14.debug("[RemoteAudioMeter] source disconnect warning:", error);
+				logger$15.debug("[RemoteAudioMeter] source disconnect warning:", error);
 			}
 			this._source = null;
 			this._stream = null;
@@ -17317,7 +17559,7 @@ var RemoteAudioMeter = class extends Destroyable {
 			this._source = null;
 		}
 		this._audioContext.close().catch((error) => {
-			logger$14.debug("[RemoteAudioMeter] audio context close warning:", error);
+			logger$15.debug("[RemoteAudioMeter] audio context close warning:", error);
 		});
 		super.destroy();
 	}
@@ -17336,7 +17578,7 @@ var RemoteAudioMeter = class extends Destroyable {
 //#endregion
 //#region src/controllers/RTCStatsMonitor.ts
 var import_cjs$13 = require_cjs();
-const logger$13 = getLogger();
+const logger$14 = getLogger();
 const DEFAULT_POLLING_INTERVAL_MS = 1e3;
 const DEFAULT_BASELINE_SAMPLES = 10;
 const DEFAULT_NO_AUDIO_PACKET_THRESHOLD_MS = 2e3;
@@ -17426,9 +17668,9 @@ var RTCStatsMonitor = class extends Destroyable {
 		const now = Date.now();
 		this.lastAudioPacketChangeTime = now;
 		this.lastVideoPacketChangeTime = now;
-		logger$13.debug("[RTCStatsMonitor] Starting stats monitoring");
+		logger$14.debug("[RTCStatsMonitor] Starting stats monitoring");
 		this.subscribeTo((0, import_cjs$13.interval)(this.pollingIntervalMs).pipe((0, import_cjs$13.filter)(() => this.running), (0, import_cjs$13.switchMap)(() => (0, import_cjs$13.from)(this.peerConnection.getStats()).pipe((0, import_cjs$13.catchError)((err) => {
-			logger$13.warn("[RTCStatsMonitor] Failed to get stats:", err);
+			logger$14.warn("[RTCStatsMonitor] Failed to get stats:", err);
 			return import_cjs$13.EMPTY;
 		}))), (0, import_cjs$13.filter)(() => this.running), (0, import_cjs$13.map)((report) => this.extractSample(report))), (sample$1) => this._sample$.next(sample$1));
 		this.subscribeTo(this._sample$.pipe((0, import_cjs$13.take)(this.baselineSampleCount), (0, import_cjs$13.toArray)(), (0, import_cjs$13.map)((samples) => ({
@@ -17436,7 +17678,7 @@ var RTCStatsMonitor = class extends Destroyable {
 			jitter: samples.reduce((s, b) => s + b.audioJitter, 0) / samples.length,
 			ready: true
 		}))), (baseline) => {
-			logger$13.debug(`[RTCStatsMonitor] Baseline established: rtt=${baseline.rtt.toFixed(1)}ms, jitter=${baseline.jitter.toFixed(1)}ms`);
+			logger$14.debug(`[RTCStatsMonitor] Baseline established: rtt=${baseline.rtt.toFixed(1)}ms, jitter=${baseline.jitter.toFixed(1)}ms`);
 			this._baseline$.next(baseline);
 		});
 		this.subscribeTo(this._sample$.pipe((0, import_cjs$13.scan)((acc, sample$1) => ({
@@ -17473,10 +17715,10 @@ var RTCStatsMonitor = class extends Destroyable {
 	stop() {
 		if (!this.running) return;
 		this.running = false;
-		logger$13.debug("[RTCStatsMonitor] Stopping stats monitoring");
+		logger$14.debug("[RTCStatsMonitor] Stopping stats monitoring");
 	}
 	destroy() {
-		logger$13.debug("[RTCStatsMonitor] Destroying RTCStatsMonitor");
+		logger$14.debug("[RTCStatsMonitor] Destroying RTCStatsMonitor");
 		this.stop();
 		super.destroy();
 	}
@@ -17605,7 +17847,7 @@ var RTCStatsMonitor = class extends Destroyable {
 //#endregion
 //#region src/managers/CallRecoveryManager.ts
 var import_cjs$12 = require_cjs();
-const logger$12 = getLogger();
+const logger$13 = getLogger();
 const DEFAULT_DEBOUNCE_TIME_MS = 2e3;
 const DEFAULT_COOLDOWN_MS = 1e4;
 const DEFAULT_ICE_GRACE_PERIOD_MS = 3e3;
@@ -17702,10 +17944,10 @@ var CallRecoveryManager = class extends Destroyable {
 	*/
 	async requestIceRestart() {
 		if (this._recoveryState$.value === "recovering") {
-			logger$12.info("CallRecoveryManager: manual ICE restart skipped — recovery already in progress");
+			logger$13.info("CallRecoveryManager: manual ICE restart skipped — recovery already in progress");
 			return;
 		}
-		logger$12.info("CallRecoveryManager: manual ICE restart requested");
+		logger$13.info("CallRecoveryManager: manual ICE restart requested");
 		this.transitionTo("recovering");
 		await this.executeIceRestart(false);
 		this.startCooldown();
@@ -17721,7 +17963,7 @@ var CallRecoveryManager = class extends Destroyable {
 	* WebSocket reconnect or call state recovers to 'connected'.
 	*/
 	reset() {
-		logger$12.info("CallRecoveryManager: resetting counters");
+		logger$13.info("CallRecoveryManager: resetting counters");
 		this._attemptCount = 0;
 		this._keyframeBurstCount = 0;
 		this._keyframeBurstStart = 0;
@@ -17736,7 +17978,7 @@ var CallRecoveryManager = class extends Destroyable {
 	*/
 	notifyModifyFailed() {
 		if (this._recoveryState$.value === "cooldown" || this._recoveryState$.value === "idle") {
-			logger$12.info("CallRecoveryManager: verto.modify failed — re-entering recovery");
+			logger$13.info("CallRecoveryManager: verto.modify failed — re-entering recovery");
 			this._cooldownUntil = 0;
 			this.transitionTo("idle");
 			this.pushTrigger({
@@ -17760,7 +18002,7 @@ var CallRecoveryManager = class extends Destroyable {
 				reason: `bandwidth ${bitrateKbps}kbps below threshold ${this._config.degradationBitrateThreshold}kbps`,
 				timestamp: Date.now()
 			});
-			logger$12.warn(`CallRecoveryManager: disabling video — bandwidth ${bitrateKbps}kbps < ${this._config.degradationBitrateThreshold}kbps`);
+			logger$13.warn(`CallRecoveryManager: disabling video — bandwidth ${bitrateKbps}kbps < ${this._config.degradationBitrateThreshold}kbps`);
 		} else if (wasConstrained && bitrateKbps >= this._config.degradationRecoveryThreshold) {
 			this._bandwidthConstrained$.next(false);
 			this._callbacks.enableVideo();
@@ -17769,7 +18011,7 @@ var CallRecoveryManager = class extends Destroyable {
 				reason: `bandwidth ${bitrateKbps}kbps recovered above ${this._config.degradationRecoveryThreshold}kbps`,
 				timestamp: Date.now()
 			});
-			logger$12.info(`CallRecoveryManager: restoring video — bandwidth ${bitrateKbps}kbps >= ${this._config.degradationRecoveryThreshold}kbps`);
+			logger$13.info(`CallRecoveryManager: restoring video — bandwidth ${bitrateKbps}kbps >= ${this._config.degradationRecoveryThreshold}kbps`);
 		}
 	}
 	/**
@@ -17788,14 +18030,14 @@ var CallRecoveryManager = class extends Destroyable {
 	handleWebSocketReconnect() {
 		const pcState = this._callbacks.getPeerConnectionState();
 		if (pcState === "connected" || pcState === "completed") {
-			logger$12.info("CallRecoveryManager: signal-only reconnect — peer connection still alive");
+			logger$13.info("CallRecoveryManager: signal-only reconnect — peer connection still alive");
 			this.emitEvent({
 				action: "signal_reconnect",
 				reason: "WebSocket reconnected, peer connection still connected",
 				timestamp: Date.now()
 			});
 		} else {
-			logger$12.info("CallRecoveryManager: full reconnect — peer connection also down");
+			logger$13.info("CallRecoveryManager: full reconnect — peer connection also down");
 			this.emitEvent({
 				action: "full_reconnect",
 				reason: "WebSocket reconnected, peer connection not connected — ICE restart needed",
@@ -17819,7 +18061,7 @@ var CallRecoveryManager = class extends Destroyable {
 		}), (0, import_cjs$12.debounceTime)(this._config.debounceTimeMs), (0, import_cjs$12.withLatestFrom)(this._inputs.signalingReady$), (0, import_cjs$12.filter)(([, signalingReady]) => this.passGateChecks(signalingReady)), (0, import_cjs$12.map)(([trigger]) => trigger), (0, import_cjs$12.exhaustMap)((trigger) => this.executeTieredRecovery(trigger)), (0, import_cjs$12.takeUntil)((0, import_cjs$12.merge)(this._destroyed$, this._pipelineStop$))), {
 			next: () => {},
 			error: (err) => {
-				logger$12.error("CallRecoveryManager: pipeline error", err);
+				logger$13.error("CallRecoveryManager: pipeline error", err);
 				this.transitionTo("idle");
 			}
 		});
@@ -17846,27 +18088,27 @@ var CallRecoveryManager = class extends Destroyable {
 				reason: `no packet loss for ${this._config.packetLossRecoveryDelaySec}s — restoring video`,
 				timestamp: Date.now()
 			});
-			logger$12.info(`CallRecoveryManager: restoring video — no packet loss for ${this._config.packetLossRecoveryDelaySec}s`);
+			logger$13.info(`CallRecoveryManager: restoring video — no packet loss for ${this._config.packetLossRecoveryDelaySec}s`);
 		});
 	}
 	passGateChecks(signalingReady) {
 		if (this._callbacks.isNegotiating()) {
-			logger$12.debug("CallRecoveryManager: gate blocked — negotiation in progress");
+			logger$13.debug("CallRecoveryManager: gate blocked — negotiation in progress");
 			this.transitionTo("idle");
 			return false;
 		}
 		if (!signalingReady) {
-			logger$12.debug("CallRecoveryManager: gate blocked — signaling not ready");
+			logger$13.debug("CallRecoveryManager: gate blocked — signaling not ready");
 			this.transitionTo("idle");
 			return false;
 		}
 		if (!this._callbacks.isCallConnected()) {
-			logger$12.debug("CallRecoveryManager: gate blocked — call not connected");
+			logger$13.debug("CallRecoveryManager: gate blocked — call not connected");
 			this.transitionTo("idle");
 			return false;
 		}
 		if (this.isCooldownActive()) {
-			logger$12.debug("CallRecoveryManager: gate blocked — cooldown active");
+			logger$13.debug("CallRecoveryManager: gate blocked — cooldown active");
 			this.transitionTo("cooldown");
 			return false;
 		}
@@ -17877,9 +18119,9 @@ var CallRecoveryManager = class extends Destroyable {
 	}
 	executeTieredRecovery(trigger) {
 		this.transitionTo("recovering");
-		logger$12.info(`CallRecoveryManager: starting tiered recovery — source=${trigger.source} detail=${trigger.detail}`);
+		logger$13.info(`CallRecoveryManager: starting tiered recovery — source=${trigger.source} detail=${trigger.detail}`);
 		return (0, import_cjs$12.from)(this.runTiers(trigger)).pipe((0, import_cjs$12.tap)(() => this.startCooldown()), (0, import_cjs$12.catchError)((err) => {
-			logger$12.error("CallRecoveryManager: tiered recovery failed", err);
+			logger$13.error("CallRecoveryManager: tiered recovery failed", err);
 			this.startCooldown();
 			return import_cjs$12.EMPTY;
 		}));
@@ -17887,7 +18129,7 @@ var CallRecoveryManager = class extends Destroyable {
 	async runTiers(trigger) {
 		this.executeKeyframe(trigger.detail);
 		if (trigger.issueType && DEGRADATION_ONLY_ISSUES.has(trigger.issueType)) {
-			logger$12.debug(`CallRecoveryManager: degradation-only issue (${trigger.issueType}) — Tier 1 only, skipping ICE restart`);
+			logger$13.debug(`CallRecoveryManager: degradation-only issue (${trigger.issueType}) — Tier 1 only, skipping ICE restart`);
 			return;
 		}
 		if (this._attemptCount < this._config.maxAttempts) {
@@ -17904,13 +18146,13 @@ var CallRecoveryManager = class extends Destroyable {
 				maxAttempts: this._config.maxAttempts,
 				timestamp: Date.now()
 			});
-			logger$12.warn("CallRecoveryManager: max recovery attempts reached");
+			logger$13.warn("CallRecoveryManager: max recovery attempts reached");
 		}
 	}
 	executeKeyframe(reason) {
 		const now = Date.now();
 		if (now < this._keyframeCooldownUntil) {
-			logger$12.debug("CallRecoveryManager: keyframe request skipped — cooldown active");
+			logger$13.debug("CallRecoveryManager: keyframe request skipped — cooldown active");
 			return;
 		}
 		if (now - this._keyframeBurstStart > this._config.keyframeBurstWindowMs) {
@@ -17919,7 +18161,7 @@ var CallRecoveryManager = class extends Destroyable {
 		}
 		if (this._keyframeBurstCount >= this._config.keyframeMaxBurst) {
 			this._keyframeCooldownUntil = now + this._config.keyframeCooldownMs;
-			logger$12.debug(`CallRecoveryManager: keyframe burst limit reached (${this._config.keyframeMaxBurst}), cooldown until ${this._keyframeCooldownUntil}`);
+			logger$13.debug(`CallRecoveryManager: keyframe burst limit reached (${this._config.keyframeMaxBurst}), cooldown until ${this._keyframeCooldownUntil}`);
 			return;
 		}
 		this._keyframeBurstCount += 1;
@@ -17929,12 +18171,12 @@ var CallRecoveryManager = class extends Destroyable {
 			reason,
 			timestamp: now
 		});
-		logger$12.debug(`CallRecoveryManager: keyframe requested (burst ${this._keyframeBurstCount}/${this._config.keyframeMaxBurst})`);
+		logger$13.debug(`CallRecoveryManager: keyframe requested (burst ${this._keyframeBurstCount}/${this._config.keyframeMaxBurst})`);
 	}
 	async executeIceRestart(relayOnly) {
 		this._attemptCount += 1;
 		const tier = relayOnly ? "Tier 3 (relay-only)" : "Tier 2 (standard)";
-		logger$12.info(`CallRecoveryManager: ${tier} ICE restart — attempt ${this._attemptCount}/${this._config.maxAttempts}`);
+		logger$13.info(`CallRecoveryManager: ${tier} ICE restart — attempt ${this._attemptCount}/${this._config.maxAttempts}`);
 		this.emitEvent({
 			action: "reinvite_started",
 			reason: `${tier} ICE restart`,
@@ -17951,7 +18193,7 @@ var CallRecoveryManager = class extends Destroyable {
 					maxAttempts: this._config.maxAttempts,
 					timestamp: Date.now()
 				});
-				logger$12.info(`CallRecoveryManager: ${tier} ICE restart succeeded`);
+				logger$13.info(`CallRecoveryManager: ${tier} ICE restart succeeded`);
 				this._attemptCount = 0;
 				return true;
 			}
@@ -17962,7 +18204,7 @@ var CallRecoveryManager = class extends Destroyable {
 				maxAttempts: this._config.maxAttempts,
 				timestamp: Date.now()
 			});
-			logger$12.warn(`CallRecoveryManager: ${tier} ICE restart failed`);
+			logger$13.warn(`CallRecoveryManager: ${tier} ICE restart failed`);
 			return false;
 		} catch {
 			this.emitEvent({
@@ -17972,7 +18214,7 @@ var CallRecoveryManager = class extends Destroyable {
 				maxAttempts: this._config.maxAttempts,
 				timestamp: Date.now()
 			});
-			logger$12.warn(`CallRecoveryManager: ${tier} ICE restart timed out`);
+			logger$13.warn(`CallRecoveryManager: ${tier} ICE restart timed out`);
 			return false;
 		}
 	}
@@ -17993,7 +18235,7 @@ var CallRecoveryManager = class extends Destroyable {
 	transitionTo(state) {
 		const prev = this._recoveryState$.value;
 		if (prev !== state) {
-			logger$12.debug(`CallRecoveryManager: state ${prev} -> ${state}`);
+			logger$13.debug(`CallRecoveryManager: state ${prev} -> ${state}`);
 			this._recoveryState$.next(state);
 		}
 	}
@@ -18096,7 +18338,7 @@ function mosToQualityLevel(mos) {
 //#endregion
 //#region src/core/entities/Call.ts
 var import_cjs$11 = require_cjs();
-const logger$11 = getLogger();
+const logger$12 = getLogger();
 /**
 * Ratio between the critical and warning RTT spike multipliers.
 * Warning threshold = baseline * warningMultiplier (default 3x)
@@ -18114,7 +18356,7 @@ const fromDestinationParams = (destination) => {
 		});
 		return params;
 	} catch (error) {
-		logger$11.warn(`Failed to parse destination URI: ${destination}`, error);
+		logger$12.warn(`Failed to parse destination URI: ${destination}`, error);
 		return {};
 	}
 };
@@ -18248,7 +18490,7 @@ var WebRTCCall = class extends Destroyable {
 	/** Toggles the call lock state, preventing or allowing new participants from joining. */
 	async toggleLock() {
 		const method = this.locked ? "call.unlock" : "call.lock";
-		await this.executeMethod(this.selfId ?? "", method, {});
+		await this.executeMethod(this.callSelf, method, {});
 	}
 	/**
 	* Toggles the hold state of the call (pauses/resumes local media transmission).
@@ -18297,14 +18539,24 @@ var WebRTCCall = class extends Destroyable {
 	*
 	* Constructs call context (node_id, call_id, member_id) and sends the RPC request.
 	*
-	* @param target - Target member ID string, or a {@link MemberTarget} object.
+	* @param target - Target {@link MemberTarget} triple, or the local member's
+	*   ID string for self-operations (any other string is rejected — a bare
+	*   member id cannot carry the remote member's own call context).
 	* @param method - Verto method name (e.g. `'call.mute'`, `'call.member.remove'`).
 	* @param args - Parameters for the RPC method.
 	* @returns The RPC response.
+	* @throws {CallNotReadyError} If the call has no self member context yet.
+	* @throws {InvalidParams} If a string target is not the local member's ID.
 	* @throws {JSONRPCError} If the RPC call returns an error.
 	*/
 	async executeMethod(target, method, args) {
-		const params = this.buildMethodParams(target, args);
+		const self = this.callSelf;
+		if (typeof target === "string" && target !== self.member_id) throw new InvalidParams(`Target member ID ${target} does not match call's self member ID ${self.member_id}`);
+		const params = {
+			...args,
+			self,
+			target: typeof target === "string" ? self : target
+		};
 		const request = buildRPCRequest({
 			method,
 			params
@@ -18314,29 +18566,27 @@ var WebRTCCall = class extends Destroyable {
 			if (isJSONRPCErrorResponse(response)) throw new JSONRPCError(parseInt(response.result?.code ?? "0"), `Error response from method ${method}: ${response.result?.code} ${response.result?.message}`, void 0, void 0, request.id);
 			return response;
 		} catch (error) {
-			logger$11.error(`[Call] Error executing method ${method} with params`, params, error);
+			logger$12.error(`[Call] Error executing method ${method} with params`, params, error);
 			throw error;
 		}
 	}
-	buildMethodParams(target, args) {
-		const self = {
-			node_id: this.nodeId ?? "",
-			call_id: this.id,
-			member_id: this.vertoManager.selfId ?? ""
-		};
-		if (typeof target === "object") return {
-			...args,
-			self,
-			targets: [target]
-		};
+	/**
+	* The local leg's member triple — sent as `self` in every member RPC
+	* envelope, and as the `target` of call-scoped self-operations (e.g. lock,
+	* layout).
+	*
+	* @throws {CallNotReadyError} Before `call.joined` delivers the self member
+	* context (`selfId`/`nodeId`) — an RPC without it cannot be routed, so fail
+	* fast instead of sending a doomed request.
+	*/
+	get callSelf() {
+		const node_id = this.nodeId;
+		const member_id = this.vertoManager.selfId;
+		if (!node_id || !member_id) throw new CallNotReadyError(this.id);
 		return {
-			...args,
-			self,
-			target: {
-				node_id: this.nodeId ?? "",
-				call_id: this.id,
-				member_id: target
-			}
+			node_id,
+			call_id: this.id,
+			member_id
 		};
 	}
 	/** Observable of the current call status (e.g. `'ringing'`, `'connected'`). */
@@ -18517,9 +18767,9 @@ var WebRTCCall = class extends Destroyable {
 	*/
 	initResilienceSubsystems() {
 		const pc = this.rtcPeerConnection;
-		logger$11.debug(`[Call] initResilienceSubsystems: pc=${pc ? "exists" : "undefined"}, connectionState=${pc?.connectionState}`);
+		logger$12.debug(`[Call] initResilienceSubsystems: pc=${pc ? "exists" : "undefined"}, connectionState=${pc?.connectionState}`);
 		if (!pc) {
-			logger$11.warn("[Call] No peer connection available, skipping resilience init");
+			logger$12.warn("[Call] No peer connection available, skipping resilience init");
 			return;
 		}
 		try {
@@ -18554,14 +18804,14 @@ var WebRTCCall = class extends Destroyable {
 				disableVideo: () => {
 					try {
 						this.vertoManager.muteMainVideoInputDevice();
-						logger$11.debug("[Call] Recovery manager disabled video");
+						logger$12.debug("[Call] Recovery manager disabled video");
 					} catch {
-						logger$11.debug("[Call] Recovery manager failed to disable video");
+						logger$12.debug("[Call] Recovery manager failed to disable video");
 					}
 				},
 				enableVideo: () => {
 					this.vertoManager.unmuteMainVideoInputDevice().catch(() => {
-						logger$11.debug("[Call] Recovery manager failed to enable video");
+						logger$12.debug("[Call] Recovery manager failed to enable video");
 					});
 				},
 				isNegotiating: () => this.vertoManager.mainPeerConnection.isNegotiating,
@@ -18611,7 +18861,7 @@ var WebRTCCall = class extends Destroyable {
 			this.subscribeTo(this._recoveryManager.recoveryEvent$, (event) => {
 				this._recoveryEvent$.next(event);
 				if (event.action === "max_attempts_reached") {
-					logger$11.warn("[Call] All recovery attempts exhausted, terminating call");
+					logger$12.warn("[Call] All recovery attempts exhausted, terminating call");
 					this.emitError({
 						kind: "network",
 						fatal: true,
@@ -18631,13 +18881,13 @@ var WebRTCCall = class extends Destroyable {
 				else if (event.type === "online") this._recoveryManager?.handleWebSocketReconnect();
 			});
 			this.subscribeTo(this.clientSession.authenticated$.pipe((0, import_cjs$11.skip)(1), (0, import_cjs$11.filter)(Boolean)), () => {
-				logger$11.debug("[Call] WebSocket reconnected — notifying recovery manager");
+				logger$12.debug("[Call] WebSocket reconnected — notifying recovery manager");
 				this._recoveryManager?.handleWebSocketReconnect();
 			});
 			this._statsMonitor.start();
-			logger$11.debug("[Call] Resilience subsystems initialized for call", this.id);
+			logger$12.debug("[Call] Resilience subsystems initialized for call", this.id);
 		} catch (error) {
-			logger$11.warn("[Call] Failed to initialize resilience subsystems:", error);
+			logger$12.warn("[Call] Failed to initialize resilience subsystems:", error);
 		}
 	}
 	/**
@@ -18720,19 +18970,19 @@ var WebRTCCall = class extends Destroyable {
 	}
 	isCallSessionEvent(event) {
 		try {
-			logger$11.debug("[Call] Checking if event is for this call session:", event);
+			logger$12.debug("[Call] Checking if event is for this call session:", event);
 			const callId = getValueFrom(event, "params.params.callID") ?? getValueFrom(event, "params.call_id");
 			const roomSessionId = getValueFrom(event, "params.room_session_id");
-			logger$11.debug(`[Call] Extracted session identifiers callID: ${callId} and roomSessionID: ${roomSessionId} from event:`);
+			logger$12.debug(`[Call] Extracted session identifiers callID: ${callId} and roomSessionID: ${roomSessionId} from event:`);
 			return callId === this.id || !!callId && this.callEventsManager.isCallIdValid(callId) || !!roomSessionId && this.callEventsManager.isRoomSessionIdValid(roomSessionId);
 		} catch (error) {
-			logger$11.error("[Call] Error checking if event is for this call session:", error);
+			logger$12.error("[Call] Error checking if event is for this call session:", error);
 			return false;
 		}
 	}
 	get callSessionEvents$() {
 		return this.cachedObservable("callSessionEvents$", () => this.clientSession.signalingEvent$.pipe((0, import_cjs$11.filter)((event) => this.isCallSessionEvent(event)), (0, import_cjs$11.tap)((event) => {
-			logger$11.debug("[Call] Received call session event:", event);
+			logger$12.debug("[Call] Received call session event:", event);
 		}), (0, import_cjs$11.takeUntil)(this.destroyed$), (0, import_cjs$11.share)()));
 	}
 	/** Observable of call-updated events. */
@@ -18802,16 +19052,16 @@ var WebRTCCall = class extends Destroyable {
 			this._customSubscriptions.set(eventType, filtered$);
 		}, (error) => {
 			this._customSubscriptions.delete(eventType);
-			logger$11.warn(`[Call] verto.subscribe for '${eventType}' failed, not caching:`, error);
+			logger$12.warn(`[Call] verto.subscribe for '${eventType}' failed, not caching:`, error);
 		});
 		this._customSubscriptions.set(eventType, filtered$);
 		return filtered$;
 	}
 	get webrtcMessages$() {
-		return this.cachedObservable("webrtcMessages$", () => this.callSessionEvents$.pipe(filterAs(isWebrtcMessageMetadata, "params"), (0, import_cjs$11.tap)((event) => logger$11.debug("[Call] Event is a WebRTC message event:", event)), (0, import_cjs$11.takeUntil)(this.destroyed$), (0, import_cjs$11.share)()));
+		return this.cachedObservable("webrtcMessages$", () => this.callSessionEvents$.pipe(filterAs(isWebrtcMessageMetadata, "params"), (0, import_cjs$11.tap)((event) => logger$12.debug("[Call] Event is a WebRTC message event:", event)), (0, import_cjs$11.takeUntil)(this.destroyed$), (0, import_cjs$11.share)()));
 	}
 	get callEvent$() {
-		return this.cachedObservable("callEvent$", () => this.callSessionEvents$.pipe(filterAs(isSignalwireCallMetadata, "params"), (0, import_cjs$11.tap)((event) => logger$11.debug("[Call] Event is a call event:", event)), (0, import_cjs$11.takeUntil)(this.destroyed$), (0, import_cjs$11.share)()));
+		return this.cachedObservable("callEvent$", () => this.callSessionEvents$.pipe(filterAs(isSignalwireCallMetadata, "params"), (0, import_cjs$11.tap)((event) => logger$12.debug("[Call] Event is a call event:", event)), (0, import_cjs$11.takeUntil)(this.destroyed$), (0, import_cjs$11.share)()));
 	}
 	get layoutEvent$() {
 		return this.cachedObservable("layoutEvent$", () => this.callEvent$.pipe(filterAs(isLayoutChangedMetadata, "params")));
@@ -18889,11 +19139,27 @@ var WebRTCCall = class extends Destroyable {
 		return this.deferEmission(this._answered$.asObservable());
 	}
 	/**
-	* Sets the call layout and participant positions.
+	* Sets the call layout and, optionally, individual participant positions.
+	*
+	* The gateway `call.layout.set` DTO has **no** `positions` member, so when
+	* `positions` is provided this method issues a `call.member.position.set`
+	* request per member (via {@link Participant.setPosition}, which keys each
+	* position by that member's own call context) alongside `call.layout.set`
+	* (issue #19400, Flag #6).
+	*
+	* **These operations are NOT atomic.** The layout is applied first, then each
+	* member position sequentially, so members may briefly flash into their
+	* default slots before being moved to the requested positions. Targeted
+	* members are validated upfront, though: when any of them has no
+	* {@link Participant.target | member call context} yet, the whole call
+	* rejects before any request is sent and the layout is left unchanged.
 	*
 	* @param layout - Layout name (must be one of {@link layouts}).
-	* @param positions - Map of member IDs to {@link VideoPosition} values.
+	* @param positions - Optional map of member IDs to {@link VideoPosition} values.
+	*   When omitted or empty, only the layout is changed.
 	* @throws {InvalidParams} If the layout is not in the available {@link layouts}.
+	* @throws {ParticipantNotReadyError} If a targeted member's call context has
+	*   not been received yet — thrown before any request is sent.
 	*
 	* @example
 	* ```ts
@@ -18904,11 +19170,19 @@ var WebRTCCall = class extends Destroyable {
 	*/
 	async setLayout(layout, positions) {
 		if (!this.layouts.includes(layout)) throw new InvalidParams(`Layout ${layout} is not available in the current call layouts: ${this.layouts.join(", ")}`);
+		const targets = [];
+		for (const [memberId, position] of Object.entries(positions ?? {})) {
+			const participant = this.participants.find((p) => p.id === memberId);
+			if (!participant) {
+				logger$12.warn(`[Call] setLayout: member ${memberId} not found in participants; skipping position ${position}`);
+				continue;
+			}
+			participant.target;
+			targets.push([participant, position]);
+		}
 		const selfId = await (0, import_cjs$11.firstValueFrom)(this.selfId$.pipe((0, import_cjs$11.filter)((id) => id !== null)));
-		await this.executeMethod(selfId, "call.layout.set", {
-			layout,
-			positions
-		});
+		await this.executeMethod(selfId, "call.layout.set", { layout });
+		for (const [participant, position] of targets) await participant.setPosition(position);
 	}
 	/**
 	* Transfers the call to another destination.
@@ -18940,7 +19214,7 @@ var WebRTCCall = class extends Destroyable {
 	setLocalMicrophoneGain(value) {
 		const pipeline = this.vertoManager.ensureLocalAudioPipeline();
 		if (!pipeline) {
-			logger$11.warn("[Call] setLocalMicrophoneGain: audio pipeline unavailable");
+			logger$12.warn("[Call] setLocalMicrophoneGain: audio pipeline unavailable");
 			return;
 		}
 		const percent = Math.max(0, Math.min(200, value));
@@ -18985,7 +19259,7 @@ var WebRTCCall = class extends Destroyable {
 	enablePushToTalk() {
 		const pipeline = this.vertoManager.ensureLocalAudioPipeline();
 		if (!pipeline) {
-			logger$11.warn("[Call] enablePushToTalk: audio pipeline unavailable");
+			logger$12.warn("[Call] enablePushToTalk: audio pipeline unavailable");
 			return;
 		}
 		pipeline.setPTTActive(false);
@@ -19082,6 +19356,7 @@ function inferCallErrorKind(error) {
 	if (error instanceof RPCTimeoutError) return "timeout";
 	if (error instanceof JSONRPCError) return "signaling";
 	if (error instanceof MediaTrackError) return "media";
+	if (error instanceof MediaAccessError) return "media";
 	if (error instanceof WebSocketConnectionError || error instanceof TransportConnectionError) return "network";
 	return "internal";
 }
@@ -19098,6 +19373,7 @@ const RECOVERABLE_RPC_CODES = new Set([
 function isFatalError(error) {
 	if (error instanceof VertoPongError) return false;
 	if (error instanceof MediaTrackError) return false;
+	if (error instanceof MediaAccessError) return error.fatal;
 	if (error instanceof RPCTimeoutError) return false;
 	if (error instanceof JSONRPCError && RECOVERABLE_RPC_CODES.has(error.code)) return false;
 	return true;
@@ -19123,10 +19399,10 @@ var CallFactory = class {
 				return {
 					vertoManager: new WebRTCVertoManager(callInstance, this.attachManager, this.deviceController, this.webRTCApiProvider, {
 						nodeId: options.nodeId,
-						onError: (error) => {
+						onError: (error, options$1) => {
 							const callError = {
 								kind: inferCallErrorKind(error),
-								fatal: isFatalError(error),
+								fatal: options$1?.fatal ?? isFatalError(error),
 								error,
 								callId: callInstance.id
 							};
@@ -19148,7 +19424,7 @@ var CallFactory = class {
 //#endregion
 //#region src/behaviors/Collection.ts
 var import_cjs$10 = require_cjs();
-const logger$10 = getLogger();
+const logger$11 = getLogger();
 var Fetcher = class {
 	constructor(endpoint, params, http) {
 		this.endpoint = endpoint;
@@ -19172,7 +19448,7 @@ var Fetcher = class {
 			this.hasMore = !!this.nextUrl;
 			return result.data.filter(this.filter).map(this.mapper);
 		}
-		logger$10.error("Failed to fetch entity");
+		logger$11.error("Failed to fetch entity");
 		return [];
 	}
 	async id(v) {
@@ -19248,7 +19524,7 @@ var EntityCollection = class extends Destroyable {
 			this._hasMore$.next(this.fetchController.hasMore ?? false);
 			this._loading$.next(false);
 		} catch (error) {
-			logger$10.error(`Failed to fetch initial collection data`, error);
+			logger$11.error(`Failed to fetch initial collection data`, error);
 			this._hasMore$.next(this.fetchController.hasMore ?? false);
 			this._loading$.next(false);
 			this.onError?.(new CollectionFetchError("fetchMore", error));
@@ -19262,7 +19538,7 @@ var EntityCollection = class extends Destroyable {
 			if (data) this.upsertData(data);
 			return data;
 		} catch (error) {
-			logger$10.error(`Failed to fetch data for (${String(key)}:${String(value)}) :`, error);
+			logger$11.error(`Failed to fetch data for (${String(key)}:${String(value)}) :`, error);
 			this._loading$.next(false);
 			this.onError?.(new CollectionFetchError(`tryFetch(${String(key)})`, error));
 		}
@@ -19511,13 +19787,13 @@ var Address = class extends Destroyable {
 //#endregion
 //#region src/core/utils.ts
 var import_cjs$8 = require_cjs();
-const logger$9 = getLogger();
+const logger$10 = getLogger();
 const isRPCConnectResult = (e) => {
-	logger$9.debug("isRPCConnectResult check:", e);
+	logger$10.debug("isRPCConnectResult check:", e);
 	if (!e || typeof e !== "object") return false;
 	const result = e;
 	const is = typeof result.identity === "string" && typeof result.protocol === "string" && typeof result.authorization === "object" && typeof result.authorization.jti === "string" && typeof result.authorization.project_id === "string" && typeof result.authorization.fabric_subscriber === "object";
-	logger$9.debug("isRPCConnectResult check result:", is);
+	logger$10.debug("isRPCConnectResult check result:", is);
 	return is;
 };
 var PendingRPC = class PendingRPC {
@@ -19526,7 +19802,7 @@ var PendingRPC = class PendingRPC {
 	}
 	constructor(request, responses$, options) {
 		this.id = v4_default();
-		logger$9.debug(`[PendingRPC(${this.id}) request:${request.id}: method:${request.method}] Creating PendingRPC`);
+		logger$10.debug(`[PendingRPC(${this.id}) request:${request.id}: method:${request.method}] Creating PendingRPC`);
 		this.request = request;
 		const timeoutMs = options?.timeoutMs ?? PendingRPC.defaultTimeoutMs;
 		const signal = options?.signal;
@@ -19552,22 +19828,22 @@ var PendingRPC = class PendingRPC {
 					isSettled = true;
 					if (response.error) {
 						const rpcError = new JSONRPCError(response.error.code, response.error.message, response.error.data, void 0, request.id);
-						logger$9.debug(`[PendingRPC(${this.id}) request:${request.id}] Rejecting promise with RPC error:`, rpcError);
+						logger$10.debug(`[PendingRPC(${this.id}) request:${request.id}] Rejecting promise with RPC error:`, rpcError);
 						reject(rpcError);
 					} else {
-						logger$9.debug(`[PendingRPC(${this.id}) request:${request.id}] Resolving promise with response:`, response);
+						logger$10.debug(`[PendingRPC(${this.id}) request:${request.id}] Resolving promise with response:`, response);
 						resolve(response);
 					}
 					subscription.unsubscribe();
 				},
 				error: (error) => {
-					logger$9.debug(`[PendingRPC(${this.id}) request:${request.id}] Rejecting promise with error:`, error);
+					logger$10.debug(`[PendingRPC(${this.id}) request:${request.id}] Rejecting promise with error:`, error);
 					isSettled = true;
 					reject(error);
 					subscription.unsubscribe();
 				},
 				complete: () => {
-					logger$9.debug(`[PendingRPC(${this.id}) request:${request.id}] Observable completed`);
+					logger$10.debug(`[PendingRPC(${this.id}) request:${request.id}] Observable completed`);
 					if (!isSettled) reject(new RPCTimeoutError(request.id, timeoutMs));
 					subscription.unsubscribe();
 				}
@@ -19588,7 +19864,18 @@ var PendingRPC = class PendingRPC {
 //#endregion
 //#region src/managers/ClientSessionManager.ts
 var import_cjs$7 = require_cjs();
-const logger$8 = getLogger();
+const logger$9 = getLogger();
+/**
+* Decide whether an error emitted on `call.errors$` during dial should
+* abort the dial. A non-fatal MediaAccessError means the call degraded to
+* receive-only and still connects — everything else rejects `dial()` with
+* the real cause.
+*
+* Pure function — exported for unit testing.
+*/
+function shouldAbortDial(callError) {
+	return callError.fatal || !(callError.error instanceof MediaAccessError);
+}
 const getAddressSearchURI = (options) => {
 	const to = options.to?.split("?")[0];
 	const from$9 = options.from?.startsWith("subscriber://") ? options.from.replace("subscriber://", "") : options.from;
@@ -19686,7 +19973,7 @@ var ClientSessionManager = class extends Destroyable {
 		try {
 			return await this.transport.execute(request, options);
 		} catch (error) {
-			logger$8.debug("[Session] Execute Error", error);
+			logger$9.debug("[Session] Execute Error", error);
 			this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
 			throw error;
 		}
@@ -19700,13 +19987,13 @@ var ClientSessionManager = class extends Destroyable {
 		return true;
 	}
 	setupMessageHandlers() {
-		logger$8.debug("[Session] Setting up message handlers");
+		logger$9.debug("[Session] Setting up message handlers");
 		this.subscribeTo(this.authStateEvent$, async (authStateEvent) => {
-			logger$8.debug("[Session] Authorization state event received:", authStateEvent);
+			logger$9.debug("[Session] Authorization state event received:", authStateEvent);
 			try {
 				await this.updateAuthorizationStateInStorage(authStateEvent.authorization_state);
 			} catch (error) {
-				logger$8.error("[Session] Failed to handle authorization state update:", error);
+				logger$9.error("[Session] Failed to handle authorization state update:", error);
 				this._errors$.next(new AuthStateHandlerError(error));
 			}
 		});
@@ -19714,29 +20001,29 @@ var ClientSessionManager = class extends Destroyable {
 			if (this._authState$.value.kind === "authenticated") this._authState$.next({ kind: "unauthenticated" });
 		});
 		this.subscribeTo(this.transport.connectionStatus$.pipe((0, import_cjs$7.filter)((status) => status === "connected"), (0, import_cjs$7.exhaustMap)(() => {
-			logger$8.debug("[Session] Connection established, initiating authentication");
+			logger$9.debug("[Session] Connection established, initiating authentication");
 			return (0, import_cjs$7.from)(this.authenticate()).pipe((0, import_cjs$7.catchError)((error) => {
 				this.handleAuthenticationError(error).catch((err) => {
-					logger$8.error("[Session] Error handling authentication failure:", err);
+					logger$9.error("[Session] Error handling authentication failure:", err);
 				});
 				return import_cjs$7.EMPTY;
 			}));
 		})), void 0);
 		this.subscribeTo(this.vertoInvite$, async (invite) => {
-			logger$8.debug("[Session] Verto invite received:", invite);
+			logger$9.debug("[Session] Verto invite received:", invite);
 			try {
 				await this.createInboundCall(invite);
 			} catch (error) {
-				logger$8.error("[Session] Error handling Verto invite:", error);
+				logger$9.error("[Session] Error handling Verto invite:", error);
 				this._errors$.next(new VertoInviteHandlerError(error));
 			}
 		});
 		this.subscribeTo(this.vertoAttach$, async (attach) => {
-			logger$8.debug("[Session] Verto attach received:", attach);
+			logger$9.debug("[Session] Verto attach received:", attach);
 			try {
 				await this.handleVertoAttach(attach);
 			} catch (error) {
-				logger$8.error("[Session] Error handling Verto attach:", error);
+				logger$9.error("[Session] Error handling Verto attach:", error);
 				this._errors$.next(new VertoAttachHandlerError(error));
 			}
 		});
@@ -19746,36 +20033,36 @@ var ClientSessionManager = class extends Destroyable {
 			const storedState = await this.storage.getItem(this.authorizationStateKey);
 			this.authorizationState$.next(storedState ?? void 0);
 		} catch (error) {
-			logger$8.error("Failed to retrieve authorization state from storage:", error);
+			logger$9.error("Failed to retrieve authorization state from storage:", error);
 			this.authorizationState$.next(void 0);
 		}
 	}
 	async updateAuthorizationStateInStorage(authorizationState) {
 		if (!authorizationState) {
-			logger$8.debug("[Session] Removing authorization state from storage");
+			logger$9.debug("[Session] Removing authorization state from storage");
 			try {
 				await this.storage.removeItem(this.authorizationStateKey);
 				this.authorizationState$.next(void 0);
 			} catch (error) {
-				logger$8.error("Failed to remove authorization state from storage:", error);
+				logger$9.error("Failed to remove authorization state from storage:", error);
 				throw error;
 			}
 			return;
 		}
 		try {
-			logger$8.debug("[Session] Updating authorization state in storage");
+			logger$9.debug("[Session] Updating authorization state in storage");
 			await this.storage.setItem(this.authorizationStateKey, authorizationState);
 			this.authorizationState$.next(authorizationState);
 		} catch (error) {
-			logger$8.error("Failed to retrieve authorization state from storage:", error);
+			logger$9.error("Failed to retrieve authorization state from storage:", error);
 			throw error;
 		}
 	}
 	get authStateEvent$() {
 		return this.cachedObservable("authStateEvent$", () => this.signalingEvent$.pipe((0, import_cjs$7.tap)((msg) => {
-			logger$8.debug("[Session] Received incoming message:", msg);
+			logger$9.debug("[Session] Received incoming message:", msg);
 		}), filterAs(isSignalwireAuthorizationStateMetadata, "params"), (0, import_cjs$7.tap)((event) => {
-			logger$8.debug("[Session] Authorization state event received:", event.authorization_state);
+			logger$9.debug("[Session] Authorization state event received:", event.authorization_state);
 		})));
 	}
 	get signalingEvent$() {
@@ -19813,42 +20100,72 @@ var ClientSessionManager = class extends Destroyable {
 		await (0, import_cjs$7.firstValueFrom)(this.authenticated$.pipe((0, import_cjs$7.takeUntil)(this.destroyed$), (0, import_cjs$7.filter)(Boolean), (0, import_cjs$7.take)(1), (0, import_cjs$7.timeout)({ first: 15e3 })));
 	}
 	async handleAuthenticationError(error) {
-		logger$8.error("Authentication error:", error);
-		const isRecoverableAuthError = error instanceof JSONRPCError && (error.code === RPC_ERROR_REQUESTER_VALIDATION_FAILED || error.code === RPC_ERROR_INVALID_PARAMS || error.code === RPC_ERROR_AUTHENTICATION_FAILED);
+		logger$9.error("Authentication error:", error);
+		const isRecoverableAuthError$1 = error instanceof JSONRPCError && (error.code === RPC_ERROR_REQUESTER_VALIDATION_FAILED || error.code === RPC_ERROR_INVALID_PARAMS || error.code === RPC_ERROR_AUTHENTICATION_FAILED);
 		const hasStoredState = await (0, import_cjs$7.firstValueFrom)(this.authorizationState$.pipe((0, import_cjs$7.take)(1))) !== void 0;
-		if (isRecoverableAuthError && hasStoredState) {
-			logger$8.debug("[Session] Recoverable auth error — cleaning up stored state and reconnecting fresh");
+		if (isRecoverableAuthError$1 && hasStoredState) {
+			logger$9.debug("[Session] Recoverable auth error — cleaning up stored state and reconnecting fresh");
 			try {
 				await this.cleanupStoredConnectionParams();
 			} catch (cleanupError) {
-				logger$8.error("Failed to cleanup stored connection params:", cleanupError);
+				logger$9.error("Failed to cleanup stored connection params:", cleanupError);
 			} finally {
 				this.transport.reconnect();
 			}
 		} else this._errors$.next(error);
 	}
+	/**
+	* Clear the resume state (authorization_state + protocol) only.
+	*
+	* This is the stale-auth-state recovery helper used by handleAuthError:
+	* the server rejected a reconnect, so the resume state is discarded and a
+	* fresh connect follows. Attach records are deliberately preserved — the
+	* session lives on through the reconnect and reattachCalls() needs the
+	* stored call references afterwards. Do NOT add detachAll() here.
+	*
+	* For public teardown (disconnect/destroy), use {@link teardownSessionState}
+	* instead, which clears the attach records as well.
+	*/
 	async cleanupStoredConnectionParams() {
 		await this.transport.setProtocol(void 0);
 		await this.updateAuthorizationStateInStorage(void 0);
 		this._authorization$.next(void 0);
 	}
+	/**
+	* Public-teardown helper for disconnect()/destroy(). Clears the resume
+	* state (authorization_state + protocol) AND the attach records as one
+	* atomic unit.
+	*
+	* The two stores are coupled: the backend only honors attach records
+	* within the session identified by the resume state, so ending the
+	* session must clear both. Clearing one without the other strands records
+	* no future session can honor (disconnect) or revives a session the
+	* developer explicitly ended (destroy).
+	*
+	* Distinct from {@link cleanupStoredConnectionParams}, which keeps the
+	* attach records for the stale-auth-state recovery path.
+	*/
+	async teardownSessionState() {
+		await this.cleanupStoredConnectionParams();
+		await this.attachManager.detachAll();
+	}
 	async updateAuthState(authorization_state) {
 		try {
 			await this.storage.setItem(this.authorizationStateKey, authorization_state);
 		} catch (error) {
-			logger$8.error("Failed to update authorization state in storage:", error);
+			logger$9.error("Failed to update authorization state in storage:", error);
 			this._errors$.next(new AuthStateHandlerError(error));
 		}
 	}
 	async reauthenticate(token, dpopToken, options) {
-		logger$8.debug("[Session] Re-authenticating session");
+		logger$9.debug("[Session] Re-authenticating session");
 		try {
 			let resolvedDpopToken = dpopToken;
 			if (!resolvedDpopToken && this.dpopManager?.initialized) try {
 				resolvedDpopToken = await this.dpopManager.createRpcProof({ method: "signalwire.reauthenticate" });
 			} catch (error) {
 				if (this.clientBound) throw error;
-				logger$8.warn("[Session] Failed to create DPoP proof for reauthenticate:", error);
+				logger$9.warn("[Session] Failed to create DPoP proof for reauthenticate:", error);
 			}
 			const request = RPCReauthenticate({
 				project: this._authorization$.value?.project_id ?? "",
@@ -19856,24 +20173,24 @@ var ClientSessionManager = class extends Destroyable {
 				...resolvedDpopToken ? { dpop_token: resolvedDpopToken } : {}
 			});
 			await (0, import_cjs$7.lastValueFrom)((0, import_cjs$7.from)(this.transport.execute(request)).pipe(throwOnRPCError(), (0, import_cjs$7.take)(1), (0, import_cjs$7.catchError)((err) => {
-				logger$8.error("[Session] Re-authentication RPC failed:", err);
+				logger$9.error("[Session] Re-authentication RPC failed:", err);
 				throw err;
 			})));
 			if (options?.clientBound) this._wasClientBound = true;
-			logger$8.debug("[Session] Re-authentication successful, updating stored auth state");
+			logger$9.debug("[Session] Re-authentication successful, updating stored auth state");
 		} catch (error) {
-			logger$8.error("[Session] Re-authentication failed:", error);
+			logger$9.error("[Session] Re-authentication failed:", error);
 			this._errors$.next(new AuthStateHandlerError(error));
 			throw error;
 		}
 	}
 	async authenticate() {
-		logger$8.debug("[Session] Starting authentication process");
+		logger$9.debug("[Session] Starting authentication process");
 		const persistedParams = await (0, import_cjs$7.firstValueFrom)((0, import_cjs$7.combineLatest)({
 			protocol: this.transport.protocol$,
 			authorization_state: this.authorizationState$
 		}).pipe((0, import_cjs$7.take)(1)));
-		logger$8.debug("[Session] Persisted params:\n", {
+		logger$9.debug("[Session] Persisted params:\n", {
 			protocol: persistedParams.protocol,
 			authStateLength: persistedParams.authorization_state?.length
 		});
@@ -19881,16 +20198,20 @@ var ClientSessionManager = class extends Destroyable {
 		const storedToken = this.getCredential().token;
 		const isReconnect = hasReconnectState && storedToken;
 		let dpopToken;
-		if (isReconnect) logger$8.debug("[Session] Reconnecting with stored jwt_token + authorization_state");
-		else if (this.onBeforeReconnect && this.clientBound) {
-			logger$8.debug("[Session] Refreshing credentials before fresh connect");
-			await this.onBeforeReconnect();
+		if (isReconnect) logger$9.debug("[Session] Reconnecting with stored jwt_token + authorization_state");
+		else {
+			const credential = this.getCredential();
+			const credentialExpired = credential.expiry_at !== void 0 && credential.expiry_at <= Date.now() + CREDENTIAL_EXPIRY_SKEW_MS;
+			if (this.onBeforeReconnect && (this.clientBound || credentialExpired)) {
+				logger$9.debug("[Session] Refreshing credentials before fresh connect");
+				await this.onBeforeReconnect();
+			}
 		}
-		if ((!isReconnect || this.clientBound) && this.dpopManager?.initialized) try {
+		if (this.dpopManager?.initialized) try {
 			dpopToken = await this.dpopManager.createRpcProof({ method: "signalwire.connect" });
 		} catch (error) {
 			if (this.clientBound) throw error;
-			logger$8.warn("[Session] Failed to create DPoP proof for connect, proceeding without:", error);
+			logger$9.warn("[Session] Failed to create DPoP proof for connect, proceeding without:", error);
 		}
 		const rpcConnectRequest = RPCConnect({
 			authentication: isReconnect ? { jwt_token: storedToken } : this.authentication,
@@ -19907,26 +20228,27 @@ var ClientSessionManager = class extends Destroyable {
 			} : {}
 		});
 		const response = await (0, import_cjs$7.lastValueFrom)((0, import_cjs$7.from)(this.transport.execute(rpcConnectRequest)).pipe(throwOnRPCError(), (0, import_cjs$7.map)((res) => res.result), (0, import_cjs$7.filter)(isRPCConnectResult), (0, import_cjs$7.tap)(() => {
-			logger$8.debug("[Session] Response passed filter, processing authentication result");
+			logger$9.debug("[Session] Response passed filter, processing authentication result");
 		}), (0, import_cjs$7.take)(1), (0, import_cjs$7.catchError)((err) => {
-			logger$8.error("[Session] Authentication RPC failed:", err);
+			logger$9.error("[Session] Authentication RPC failed:", err);
 			throw err;
 		})));
-		logger$8.debug("[Session] Processing authentication result:", {
+		logger$9.debug("[Session] Processing authentication result:", {
 			hasProtocol: !!response.protocol,
 			hasAuthorization: !!response.authorization,
 			hasIceServers: !!response.ice_servers
 		});
 		if (response.protocol) await this.transport.setProtocol(response.protocol);
 		this._authorization$.next(response.authorization);
+		if (response.authorization.cnf?.jkt) this._wasClientBound = true;
 		this._iceServers$.next(response.ice_servers ?? []);
 		this._authState$.next({ kind: "authenticated" });
-		logger$8.debug("[Session] Authentication completed successfully");
+		logger$9.debug("[Session] Authentication completed successfully");
 	}
 	async disconnect() {
 		this.transport.disconnect();
 		this._authState$.next({ kind: "unauthenticated" });
-		await this.cleanupStoredConnectionParams();
+		await this.teardownSessionState();
 	}
 	async createInboundCall(invite) {
 		const callSession = await this.createCall({
@@ -19957,11 +20279,11 @@ var ClientSessionManager = class extends Destroyable {
 	async handleVertoAttach(attach) {
 		const { callID } = attach;
 		if (callID in this._calls$.value) {
-			logger$8.debug(`[Session] Verto attach for existing call ${callID}, deferring to per-call handler`);
+			logger$9.debug(`[Session] Verto attach for existing call ${callID}, deferring to per-call handler`);
 			return;
 		}
 		const storedOptions = await this.attachManager.consumePendingAttachment(callID);
-		logger$8.debug(`[Session] Creating reattached call for callID: ${callID}`);
+		logger$9.debug(`[Session] Creating reattached call for callID: ${callID}`);
 		const callSession = await this.createCall({
 			nodeId: attach.node_id,
 			callId: callID,
@@ -19985,14 +20307,14 @@ var ClientSessionManager = class extends Destroyable {
 				to: destinationURI,
 				...options
 			});
-			await (0, import_cjs$7.firstValueFrom)((0, import_cjs$7.race)(callSession.selfId$.pipe((0, import_cjs$7.filter)((id) => Boolean(id)), (0, import_cjs$7.take)(1), (0, import_cjs$7.timeout)(this.callCreateTimeout)), callSession.errors$.pipe((0, import_cjs$7.take)(1), (0, import_cjs$7.switchMap)((callError) => (0, import_cjs$7.throwError)(() => callError.error)))));
+			await (0, import_cjs$7.firstValueFrom)((0, import_cjs$7.race)(callSession.selfId$.pipe((0, import_cjs$7.filter)((id) => Boolean(id)), (0, import_cjs$7.take)(1), (0, import_cjs$7.timeout)(this.callCreateTimeout)), callSession.errors$.pipe((0, import_cjs$7.filter)(shouldAbortDial), (0, import_cjs$7.take)(1), (0, import_cjs$7.switchMap)((callError) => (0, import_cjs$7.throwError)(() => callError.error)))));
 			this._calls$.next({
 				[`${callSession.id}`]: callSession,
 				...this._calls$.value
 			});
 			return callSession;
 		} catch (error) {
-			logger$8.error("[Session] Error creating outbound call:", error);
+			logger$9.error("[Session] Error creating outbound call:", error);
 			callSession?.destroy();
 			const callError = new CallCreateError(error instanceof import_cjs$7.TimeoutError ? "Call create timeout" : "Call creation failed", error, "outbound");
 			this._errors$.next(callError);
@@ -20010,7 +20332,7 @@ var ClientSessionManager = class extends Destroyable {
 				address = this._directory.get(addressId);
 				if (!address) throw new DependencyError(`Address ID: ${addressId} not found`);
 			} catch {
-				logger$8.warn(`[Session] Directory lookup failed for ${addressURI}, proceeding with raw URI`);
+				logger$9.warn(`[Session] Directory lookup failed for ${addressURI}, proceeding with raw URI`);
 			}
 			const callSession = this.callFactory.createCall(address, { ...options });
 			this.subscribeTo(callSession.status$.pipe((0, import_cjs$7.filter)((status) => status === "destroyed"), (0, import_cjs$7.take)(1)), () => {
@@ -20019,7 +20341,7 @@ var ClientSessionManager = class extends Destroyable {
 			});
 			return callSession;
 		} catch (error) {
-			logger$8.error("[Session] Error creating call session:", error);
+			logger$9.error("[Session] Error creating call session:", error);
 			throw new CallCreateError("Call create error", error, options.initOffer ? "inbound" : "outbound");
 		}
 	}
@@ -20038,6 +20360,14 @@ var ClientSessionWrapper = class {
 	get authenticated() {
 		return this.clientSessionManager.authenticated;
 	}
+	/**
+	* Whether the session is using a Client Bound SAT (DPoP). Sticky — set
+	* when the binding is established or restored from a resumed session's
+	* server authorization.
+	*/
+	get clientBound() {
+		return this.clientSessionManager.clientBound;
+	}
 	get signalingEvent$() {
 		return this.clientSessionManager.signalingEvent$;
 	}
@@ -20068,7 +20398,7 @@ const isString = (obj) => typeof obj === "string";
 //#endregion
 //#region src/managers/ConversationsManager.ts
 var import_cjs$6 = require_cjs();
-const logger$7 = getLogger();
+const logger$8 = getLogger();
 var ConversationMessagesFetcher = class extends Fetcher {
 	constructor(groupId, http) {
 		super(`/api/fabric/conversations/${groupId}/messages`, "page_size=100", http);
@@ -20108,13 +20438,13 @@ var ConversationsManager = class {
 			}
 			throw new ConversationError("Join Failed - Unexpected response");
 		} catch (error) {
-			logger$7.error("[ConversationsManager] Failed to join conversation:", error);
+			logger$8.error("[ConversationsManager] Failed to join conversation:", error);
 			throw error;
 		}
 	}
 	async getConversationMessageCollection(addressId) {
 		const groupId = this.groupIds.get(addressId) ?? await this.join(addressId);
-		return Promise.resolve(new ConversationMessageCollection(groupId, this.clientSession.signalingEvent$.pipe(filterAs(isConversationMessageMetadata, "params"), (0, import_cjs$6.tap)((event) => logger$7.debug("[ConversationsManager ] Conversation Event:", event)), (0, import_cjs$6.map)((params) => ({ ...params }))), this.http, this.onError));
+		return Promise.resolve(new ConversationMessageCollection(groupId, this.clientSession.signalingEvent$.pipe(filterAs(isConversationMessageMetadata, "params"), (0, import_cjs$6.tap)((event) => logger$8.debug("[ConversationsManager ] Conversation Event:", event)), (0, import_cjs$6.map)((params) => ({ ...params }))), this.http, this.onError));
 	}
 	async sendText(text, destinationAddressId) {
 		const groupId = this.groupIds.get(destinationAddressId) ?? await this.join(destinationAddressId);
@@ -20131,7 +20461,7 @@ var ConversationsManager = class {
 			})).ok) return;
 			throw new ConversationError("Send Text Failed - Unexpected response");
 		} catch (error) {
-			logger$7.error("[ConversationsManager] Failed to send text message:", error);
+			logger$8.error("[ConversationsManager] Failed to send text message:", error);
 			throw error;
 		}
 	}
@@ -20140,7 +20470,7 @@ var ConversationsManager = class {
 //#endregion
 //#region src/managers/DeviceTokenManager.ts
 var import_cjs$5 = require_cjs();
-const logger$6 = getLogger();
+const logger$7 = getLogger();
 /**
 * Resolves the token expiry timestamp (epoch seconds) using a 3-tier priority chain:
 * 1. `data.expires_at` — server-provided absolute timestamp
@@ -20150,7 +20480,7 @@ const logger$6 = getLogger();
 function resolveExpiresAt(data) {
 	if (data.expires_at) return data.expires_at;
 	if (data.expires_in) return Math.floor(Date.now() / 1e3) + data.expires_in;
-	logger$6.warn("[DeviceToken] Could not determine token expiry, using default");
+	logger$7.warn("[DeviceToken] Could not determine token expiry, using default");
 	return Math.floor(Date.now() / 1e3) + DEVICE_TOKEN_DEFAULT_EXPIRE_IN;
 }
 /**
@@ -20183,11 +20513,12 @@ var DeviceTokenManager = class extends Destroyable {
 		this.getCredential = getCredential;
 		this._currentToken$ = this.createBehaviorSubject(null);
 		this._refreshInProgress = false;
+		this._paused = false;
 		this._effectiveExpireIn = DEVICE_TOKEN_DEFAULT_EXPIRE_IN;
 		this.subscribeTo(this._currentToken$.pipe((0, import_cjs$5.filter)(Boolean), (0, import_cjs$5.switchMap)((tokenData) => {
 			const expiresAt = resolveExpiresAt(tokenData);
 			const refreshIn = Math.max(expiresAt * 1e3 - Date.now() - DEVICE_TOKEN_REFRESH_BUFFER_MS, 1e3);
-			logger$6.debug(`[DeviceToken] Scheduling Client Bound SAT refresh in ${refreshIn}ms`);
+			logger$7.debug(`[DeviceToken] Scheduling Client Bound SAT refresh in ${refreshIn}ms`);
 			return (0, import_cjs$5.timer)(refreshIn);
 		})), () => {
 			this.executeRefresh();
@@ -20201,7 +20532,12 @@ var DeviceTokenManager = class extends Destroyable {
 	* Activates the Client Bound SAT flow when the user's token has
 	* `sat:refresh` scope.
 	*
-	* Steps:
+	* Returns an {@link ActivationResult} indicating whether the manager
+	* took ownership of refresh duties. The caller must use the `activated`
+	* boolean to decide whether to keep its own refresh path armed — when
+	* `activated` is `false`, the caller is responsible for refresh.
+	*
+	* Steps on success:
 	* 1. Check user's `sat_claims` for `sat:refresh` scope
 	* 2. Call `/api/fabric/subscriber/devices/token` with a DPoP proof
 	* 3. Reauthenticate the session with the Client Bound SAT + DPoP proof
@@ -20210,32 +20546,66 @@ var DeviceTokenManager = class extends Destroyable {
 	async activate(user, session, updateCredential) {
 		const { satClaims } = user;
 		if (!satClaims?.scope?.includes(SAT_REFRESH_SCOPE)) {
-			logger$6.debug("[DeviceToken] No sat:refresh scope, skipping Client Bound SAT activation");
-			return;
+			logger$7.debug("[DeviceToken] No sat:refresh scope, skipping Client Bound SAT activation");
+			return {
+				activated: false,
+				reason: "no-scope"
+			};
 		}
 		this._session = session;
 		this._updateCredential = updateCredential;
 		try {
+			const cached = this._currentToken$.value;
+			if (cached && this.isTokenFresh(cached)) {
+				logger$7.debug("[DeviceToken] Reusing cached Client Bound SAT — skipping /devices/token");
+				const rpcProof$1 = await this.dpopManager.createRpcProof({ method: "signalwire.reauthenticate" });
+				await session.reauthenticate(cached.token, rpcProof$1, { clientBound: true });
+				updateCredential({ token: cached.token });
+				return { activated: true };
+			}
 			const tokenData = await this.obtainToken();
 			if (!tokenData.expires_at && !tokenData.expires_in && satClaims.expires_at) tokenData.expires_at = satClaims.expires_at;
 			this._effectiveExpireIn = resolveExpireIn(tokenData);
 			const rpcProof = await this.dpopManager.createRpcProof({ method: "signalwire.reauthenticate" });
 			await session.reauthenticate(tokenData.token, rpcProof, { clientBound: true });
 			updateCredential({ token: tokenData.token });
-			logger$6.info("[DeviceToken] Client Bound SAT activated successfully");
-			this._currentToken$.next(tokenData);
+			logger$7.info("[DeviceToken] Client Bound SAT activated successfully");
+			this.emitCurrentToken(tokenData);
+			return { activated: true };
 		} catch (error) {
-			logger$6.error("[DeviceToken] Failed to activate Client Bound SAT:", error);
+			logger$7.error("[DeviceToken] Failed to activate Client Bound SAT:", error);
 			this.errorHandler(new DPoPInitError(error, "Failed to activate Client Bound SAT"));
-			const credential = this.getCredential();
-			const expiresAt = satClaims.expires_at ?? (credential.expiry_at ? credential.expiry_at / 1e3 : Date.now() / 1e3 + DEVICE_TOKEN_DEFAULT_EXPIRE_IN / 1e3);
-			this._currentToken$.next({
-				token: credential.token ?? "",
-				expires_at: expiresAt
-			});
+			return {
+				activated: false,
+				reason: "endpoint-failed"
+			};
 		}
 	}
 	/**
+	* Emit a freshly received token to the reactive pipeline, stamping an
+	* absolute `expires_at` when the response carried only `expires_in`.
+	* Resolving the expiry at RECEIVE time (not at read time) is what lets
+	* {@link refreshNowIfDue} detect due-ness on resume: a bare `expires_in`
+	* re-resolved later would always compute a full TTL from "now" and never
+	* cross the refresh buffer.
+	*/
+	emitCurrentToken(token) {
+		const stamped = token.expires_at ? token : {
+			...token,
+			expires_at: resolveExpiresAt(token)
+		};
+		this._currentToken$.next(stamped);
+	}
+	/**
+	* Returns true when the cached token has enough headroom before expiry to
+	* be safely reused on reactivation. The headroom matches the refresh
+	* buffer, so a token within the refresh window is treated as stale (the
+	* reactive pipeline is about to refresh it anyway).
+	*/
+	isTokenFresh(token) {
+		return resolveExpiresAt(token) * 1e3 - Date.now() > DEVICE_TOKEN_REFRESH_BUFFER_MS;
+	}
+	/**
 	* Obtains a Client Bound SAT from `/api/fabric/subscriber/devices/token`.
 	* Returns the full {@link DeviceTokenResponse} including expiry metadata.
 	*/
@@ -20265,7 +20635,7 @@ var DeviceTokenManager = class extends Destroyable {
 	* handled by the reactive pipeline).
 	*/
 	async refreshToken(session, currentToken, updateCredential) {
-		logger$6.debug("[DeviceToken] Refreshing Client Bound SAT");
+		logger$7.debug("[DeviceToken] Refreshing Client Bound SAT");
 		const dpopProof = await this.dpopManager.createHttpProof({
 			method: "POST",
 			uri: DEVICE_REFRESH_ENDPOINT,
@@ -20287,7 +20657,7 @@ var DeviceTokenManager = class extends Destroyable {
 		const rpcProof = await this.dpopManager.createRpcProof({ method: "signalwire.reauthenticate" });
 		await session.reauthenticate(data.token, rpcProof);
 		updateCredential({ token: data.token });
-		logger$6.info("[DeviceToken] Client Bound SAT refreshed successfully");
+		logger$7.info("[DeviceToken] Client Bound SAT refreshed successfully");
 		return data;
 	}
 	/**
@@ -20296,18 +20666,22 @@ var DeviceTokenManager = class extends Destroyable {
 	* On all retries exhausted, emits to `errorHandler`.
 	*/
 	async executeRefresh() {
+		if (this._paused) {
+			logger$7.debug("[DeviceToken] Manager paused, skipping refresh");
+			return;
+		}
 		if (this._refreshInProgress) {
-			logger$6.debug("[DeviceToken] Refresh already in progress, skipping");
+			logger$7.debug("[DeviceToken] Refresh already in progress, skipping");
 			return;
 		}
 		const session = this._session;
 		const updateCredential = this._updateCredential;
 		if (!session || !updateCredential) {
-			logger$6.warn("[DeviceToken] Cannot refresh: session or updateCredential not set");
+			logger$7.warn("[DeviceToken] Cannot refresh: session or updateCredential not set");
 			return;
 		}
 		if (!session.authenticated) {
-			logger$6.debug("[DeviceToken] Session not authenticated, deferring refresh");
+			logger$7.debug("[DeviceToken] Session not authenticated, deferring refresh");
 			return;
 		}
 		this._refreshInProgress = true;
@@ -20315,9 +20689,9 @@ var DeviceTokenManager = class extends Destroyable {
 			const currentToken = this.getCredential().token;
 			if (!currentToken) throw new TokenRefreshError("No current token available for refresh");
 			const newTokenData = await this.retryRefresh(session, currentToken, updateCredential);
-			this._currentToken$.next(newTokenData);
+			this.emitCurrentToken(newTokenData);
 		} catch (error) {
-			logger$6.error("[DeviceToken] Automatic Client Bound SAT refresh failed:", error);
+			logger$7.error("[DeviceToken] Automatic Client Bound SAT refresh failed:", error);
 			this.errorHandler(error instanceof TokenRefreshError ? error : new TokenRefreshError("Automatic token refresh failed", error));
 		} finally {
 			this._refreshInProgress = false;
@@ -20335,18 +20709,324 @@ var DeviceTokenManager = class extends Destroyable {
 			lastError = error;
 			if (attempt < DEVICE_TOKEN_REFRESH_MAX_RETRIES - 1) {
 				const delay$1 = DEVICE_TOKEN_REFRESH_RETRY_BASE_MS * Math.pow(2, attempt);
-				logger$6.warn(`[DeviceToken] Refresh attempt ${attempt + 1} failed, retrying in ${delay$1}ms`);
+				logger$7.warn(`[DeviceToken] Refresh attempt ${attempt + 1} failed, retrying in ${delay$1}ms`);
 				await new Promise((resolve) => setTimeout(resolve, delay$1));
 			}
 		}
 		throw lastError instanceof Error ? lastError : new TokenRefreshError("All refresh retries exhausted", lastError);
 	}
+	/**
+	* Force an immediate refresh when the cached Client Bound SAT is already
+	* past its refresh window. Called on resume from suspension where
+	* background-tab throttling can delay the reactive timer past the buffer.
+	* A no-op when no token is cached or it still has headroom; the normal
+	* {@link executeRefresh} guards (paused / in-progress / unauthenticated)
+	* still apply.
+	*/
+	refreshNowIfDue() {
+		const token = this._currentToken$.value;
+		if (!token) return;
+		if (resolveExpiresAt(token) * 1e3 - Date.now() <= DEVICE_TOKEN_REFRESH_BUFFER_MS) {
+			logger$7.debug("[DeviceToken] Resume: cached SAT past refresh window; refreshing now");
+			this.executeRefresh();
+		}
+	}
+	/**
+	* Stops the reactive refresh pipeline from firing. Use when the underlying
+	* session is being torn down (e.g., during {@link SignalWire.disconnect})
+	* so a scheduled refresh cannot fire against a destroyed session.
+	*
+	* The manager's state (cached token, effective TTL, subscriptions) is
+	* preserved — call {@link resume} to re-enable firing after reconnect.
+	*/
+	pause() {
+		this._paused = true;
+	}
+	/** Re-enables the reactive refresh pipeline after a previous {@link pause}. */
+	resume() {
+		this._paused = false;
+	}
 	/** Cleans up the manager, cancelling the reactive pipeline and all subscriptions. */
 	destroy() {
 		super.destroy();
 	}
 };
 
+//#endregion
+//#region src/managers/CredentialRefreshCoordinator.ts
+const logger$6 = getLogger();
+const defaultDeviceTokenManagerFactory = (dpopManager, http, errorHandler, getCredential) => new DeviceTokenManager(dpopManager, http, errorHandler, getCredential);
+/**
+* Centralizes credential-refresh ownership across the two competing
+* mechanisms — developer-provided `CredentialProvider.refresh()` and the
+* Client Bound SAT path via {@link DeviceTokenManager}.
+*
+* Maintains the invariant: **at most one refresh mechanism is armed at a
+* time, and at least one is armed whenever the current credential has an
+* `expiry_at`**.
+*
+* Replaces the previous design where refresh state was distributed across
+* `SignalWire` (timer field, scheduler method, activation helper) and
+* `DeviceTokenManager` (reactive pipeline). Centralizing the invariant in
+* one component eliminates the bug class that produced issue #19074.
+*
+* Race-safety:
+* - `_activating` flag prevents overlapping `activate()` calls from racing.
+* - `_activationGeneration` lets late resolutions detect they've been
+*   preempted by a newer activation (e.g., reconnect during in-flight
+*   `obtainToken`).
+*/
+var CredentialRefreshCoordinator = class extends Destroyable {
+	constructor(dpopManager, deps) {
+		super();
+		this.deps = deps;
+		this._activating = false;
+		this._activationGeneration = 0;
+		this._developerRefreshInProgress = false;
+		if (dpopManager?.initialized) this._deviceTokenManager = (deps.deviceTokenManagerFactory ?? defaultDeviceTokenManagerFactory)(dpopManager, deps.http, (error) => deps.notifier.onError(error), () => deps.store.read());
+	}
+	/** True when the Client Bound SAT path is available (DPoP initialized). */
+	get clientBoundSATAvailable() {
+		return this._deviceTokenManager !== void 0;
+	}
+	/** True when the developer-provided refresh timer is currently armed. */
+	get developerRefreshArmed() {
+		return this._developerTimerId !== void 0;
+	}
+	/**
+	* Arms the developer-provided refresh timer to fire shortly before
+	* `expiresAt`. Replaces any previously scheduled developer refresh.
+	*
+	* Idempotent — multiple calls just reschedule. On retry exhaustion,
+	* invokes `deps.onRefreshExhausted` so the orchestrator can disconnect.
+	*/
+	scheduleDeveloperRefresh(provider, expiresAt, attempt = 0) {
+		this._activeProvider = provider;
+		if (this._developerTimerId !== void 0) clearTimeout(this._developerTimerId);
+		const refreshInterval = attempt === 0 ? Math.max(expiresAt - Date.now() - CREDENTIAL_REFRESH_BUFFER_MS, 1e3) : Math.min(CREDENTIAL_REFRESH_RETRY_BASE_MS * Math.pow(2, attempt) * (.5 + Math.random() * .5), CREDENTIAL_REFRESH_MAX_DELAY_MS);
+		this._developerTimerId = setTimeout(() => {
+			this._developerTimerId = void 0;
+			this.executeDeveloperRefresh(provider, expiresAt, attempt);
+		}, refreshInterval);
+	}
+	/**
+	* Runs the developer-provided refresh once: mints a new credential, stores
+	* and persists it, reauthenticates the live session (via the notifier), and
+	* reschedules against the new expiry. On failure retries with backoff up to
+	* {@link CREDENTIAL_REFRESH_MAX_RETRIES}, then signals exhaustion.
+	*
+	* Shared by the scheduled timer tick and {@link forceRefreshIfDue}. The
+	* `_developerRefreshInProgress` guard prevents the two from overlapping.
+	*/
+	async executeDeveloperRefresh(provider, expiresAt, attempt) {
+		if (this._developerRefreshInProgress) {
+			logger$6.debug("[Coordinator] Developer refresh already in progress; skipping");
+			return;
+		}
+		this._developerRefreshInProgress = true;
+		try {
+			const newCredentials = await this.refreshCredential(provider);
+			this.deps.store.write(newCredentials);
+			this.deps.store.persist(newCredentials);
+			try {
+				await this.deps.notifier.onCredentialRefreshed(newCredentials);
+			} catch (reauthError) {
+				logger$6.warn("[Coordinator] onCredentialRefreshed rejected (non-fatal):", reauthError);
+			}
+			logger$6.info("[Coordinator] Credentials refreshed successfully.");
+			if (newCredentials.expiry_at) this.scheduleDeveloperRefresh(provider, newCredentials.expiry_at, 0);
+		} catch (error) {
+			const nextAttempt = attempt + 1;
+			logger$6.error(`[Coordinator] Credential refresh failed (attempt ${nextAttempt}/${CREDENTIAL_REFRESH_MAX_RETRIES}):`, error);
+			this.deps.notifier.onError(error instanceof Error ? error : new Error(String(error), { cause: error }));
+			if (nextAttempt < CREDENTIAL_REFRESH_MAX_RETRIES) this.scheduleDeveloperRefresh(provider, expiresAt, nextAttempt);
+			else {
+				logger$6.error("[Coordinator] Credential refresh exhausted all retries. Disconnecting.");
+				this.deps.notifier.onError(new TokenRefreshError("Credential refresh failed after max retries"));
+				this.deps.notifier.onRefreshExhausted();
+			}
+		} finally {
+			this._developerRefreshInProgress = false;
+		}
+	}
+	/**
+	* Force an immediate refresh when the current credential is already past its
+	* scheduled refresh window. Called on resume from suspension, where
+	* background-tab timer throttling can delay the armed refresh well past
+	* expiry, leaving the live session stale.
+	*
+	* Routes to whichever mechanism is armed: the developer timer if armed,
+	* otherwise the Client Bound SAT pipeline. A no-op when nothing is due.
+	*/
+	forceRefreshIfDue() {
+		if (this._developerTimerId !== void 0 && this._activeProvider) {
+			const expiry = this.deps.store.read().expiry_at;
+			if (expiry !== void 0 && Date.now() >= expiry - CREDENTIAL_REFRESH_BUFFER_MS) {
+				logger$6.debug("[Coordinator] Resume: credential past refresh window; forcing refresh");
+				clearTimeout(this._developerTimerId);
+				this._developerTimerId = void 0;
+				this.executeDeveloperRefresh(this._activeProvider, expiry, 0);
+			}
+			return;
+		}
+		this._deviceTokenManager?.refreshNowIfDue();
+	}
+	/**
+	* Sync the credential's expiry from the server-provided authorization (the
+	* `signalwire.connect` result). SATs are opaque JWE, so
+	* `fabric_subscriber.expires_at` is the authoritative expiry of the token
+	* the session actually connected with — the provider-reported `expiry_at`
+	* is only a hint (and may be wrong or absent). Corrects the stored
+	* credential and re-arms the developer refresh timer against the real
+	* deadline when the provider supports `refresh()`.
+	*/
+	syncExpiryFromAuthorization(authorization, provider) {
+		const expiresAtSec = authorization?.fabric_subscriber?.expires_at;
+		if (!expiresAtSec) return;
+		const expiryAt = expiresAtSec * 1e3;
+		const credential = this.deps.store.read();
+		if (credential.expiry_at === expiryAt) return;
+		logger$6.debug(`[Coordinator] Correcting credential expiry from server authorization: ${new Date(expiryAt).toISOString()}`);
+		const updated = {
+			...credential,
+			expiry_at: expiryAt
+		};
+		this.deps.store.write(updated);
+		this.deps.store.persist(updated);
+		if (provider?.refresh) this.scheduleDeveloperRefresh(provider, expiryAt);
+	}
+	/**
+	* Invoke `provider.refresh()` deduped against any concurrent developer
+	* refresh. Concurrent callers — the scheduled tick, a resume-forced refresh,
+	* and the orchestrator's -32003 recovery / reconnect re-mint — share one
+	* in-flight promise, so a provider backed by one-time-use rotating refresh
+	* tokens is never invoked twice in parallel.
+	*
+	* The caller owns applying the returned credential (store write, session
+	* reauth, rescheduling); this method only serializes the network call.
+	*/
+	async refreshCredential(provider) {
+		if (this._refreshInFlight) return this._refreshInFlight;
+		if (!provider.refresh) throw new InvalidCredentialsError("Credential provider does not support refresh");
+		const run = provider.refresh();
+		this._refreshInFlight = run;
+		const clear = () => {
+			if (this._refreshInFlight === run) this._refreshInFlight = void 0;
+		};
+		run.then(clear, clear);
+		return run;
+	}
+	/**
+	* Cancels any scheduled developer-provided refresh. Idempotent.
+	*
+	* @internal Used by the coordinator's own activation flow. External
+	* callers should use {@link suspend} for disconnect-time quiescence —
+	* `suspend()` also pauses the internal Client Bound SAT pipeline.
+	*/
+	cancelDeveloperRefresh() {
+		if (this._developerTimerId !== void 0) {
+			clearTimeout(this._developerTimerId);
+			this._developerTimerId = void 0;
+		}
+	}
+	/**
+	* Suspends both refresh paths — cancels the developer timer and pauses
+	* the internal reactive pipeline. Use when the underlying session is
+	* being torn down (e.g., {@link SignalWire.disconnect}). The next
+	* {@link activate} call re-enables the internal pipeline.
+	*
+	* The internal manager's cached token survives — see
+	* {@link DeviceTokenManager.pause} — so a subsequent reconnect can
+	* skip the `/devices/token` exchange entirely.
+	*/
+	suspend() {
+		this.cancelDeveloperRefresh();
+		this._deviceTokenManager?.pause();
+	}
+	/**
+	* Asks the Client Bound SAT path to take over refresh. If it accepts,
+	* the developer-provided timer (if any) is cancelled. If it declines, the
+	* developer timer remains armed and a `credential_refresh_fallback`
+	* warning is emitted.
+	*
+	* **Idempotent** — re-entrant calls during an in-flight activation are
+	* dropped. Use `_activationGeneration` to detect stale resolutions
+	* (e.g., a reconnect-triggered activate() that races with an earlier one).
+	*/
+	async activate(user, session) {
+		if (this._activating) {
+			logger$6.debug("[Coordinator] activate() in flight; ignoring re-entrant call");
+			return;
+		}
+		if (!this._deviceTokenManager) return;
+		this._deviceTokenManager.resume();
+		const generation = ++this._activationGeneration;
+		this._activating = true;
+		try {
+			const result = await this.withActivationTimeout(this._deviceTokenManager.activate(user, session, (cred) => this.deps.store.merge(cred)));
+			if (generation !== this._activationGeneration) {
+				logger$6.debug("[Coordinator] activate() result discarded (preempted by newer activation)");
+				return;
+			}
+			if (result.activated) {
+				this.cancelDeveloperRefresh();
+				logger$6.debug("[Coordinator] Developer refresh disabled — Client Bound SAT owns refresh");
+				return;
+			}
+			logger$6.warn(`[SignalWire] [SW-REFRESH-FALLBACK] Client Bound SAT declined (reason=${result.reason}); using developer-provided refresh handler.`);
+			this.deps.notifier.onWarning({
+				code: "credential_refresh_fallback",
+				source: "CredentialProvider",
+				reason: result.reason,
+				message: `Client Bound SAT activation declined (${result.reason}); using developer-provided refresh.`
+			});
+		} finally {
+			this._activating = false;
+		}
+	}
+	destroy() {
+		this.cancelDeveloperRefresh();
+		this._deviceTokenManager?.destroy();
+		this._deviceTokenManager = void 0;
+		super.destroy();
+	}
+	/**
+	* Races the manager's `activate()` against a hard timeout. A wedged HTTP
+	* layer (e.g., proxy issues) could otherwise hang the activation
+	* indefinitely, leaving the session with no refresh mechanism while the
+	* `_activating` guard blocks subsequent retries.
+	*
+	* On timeout, the manager is paused immediately. The inner `activate()`
+	* may still complete in the background and emit to `_currentToken$`,
+	* which would normally arm the reactive refresh pipeline; pausing
+	* prevents that pipeline from firing while the developer refresh path
+	* is the active mechanism — preserving the "at most one mechanism
+	* armed" invariant. The next `activate()` call resumes the manager.
+	*/
+	async withActivationTimeout(inner) {
+		return new Promise((resolve) => {
+			const timer$4 = setTimeout(() => {
+				this._deviceTokenManager?.pause();
+				resolve({
+					activated: false,
+					reason: "activation-timeout"
+				});
+			}, CREDENTIAL_ACTIVATE_TIMEOUT_MS);
+			inner.then((result) => {
+				clearTimeout(timer$4);
+				resolve(result);
+			}, (error) => {
+				clearTimeout(timer$4);
+				this.deps.notifier.onError(error instanceof Error ? error : new Error(String(error)));
+				resolve({
+					activated: false,
+					reason: "endpoint-failed"
+				});
+			});
+		});
+	}
+};
+
 //#endregion
 //#region src/managers/DiagnosticsCollector.ts
 const logger$5 = getLogger();
@@ -20867,6 +21547,10 @@ var TransportManager = class extends Destroyable {
 				if (!isSignalwireRequest(message)) return true;
 				const eventChannel = message.params.event_channel;
 				if (!eventChannel) return true;
+				if (message.params.event_type.startsWith("conversation.")) {
+					logger$2.debug(`[Transport] Received conversation event: ${message.params.event_type} (event_channel: ${eventChannel})`);
+					return true;
+				}
 				const currentProtocol = this._currentProtocol;
 				if (!currentProtocol) return true;
 				if (!eventChannel.includes(currentProtocol)) {
@@ -21010,6 +21694,33 @@ var TransportManager = class extends Destroyable {
 	}
 };
 
+//#endregion
+//#region src/utils/authRecovery.ts
+/**
+* Walk an error's `error`/`cause` chain looking for a {@link JSONRPCError}.
+* Errors thrown by call creation are wrapped (e.g. `CallCreateError`), so the
+* underlying signaling error is nested. Bounded by a visited set to guard
+* against cyclic causes.
+*/
+function findJSONRPCError(error) {
+	const seen = /* @__PURE__ */ new Set();
+	let current = error;
+	while (current instanceof Error && !seen.has(current)) {
+		seen.add(current);
+		if (current instanceof JSONRPCError) return current;
+		current = current.error ?? current.cause;
+	}
+}
+/**
+* Whether an error is a session-recoverable authentication failure
+* (`-32002` authentication failed or `-32003` requester validation failed)
+* that a credential re-mint + retry can heal.
+*/
+function isRecoverableAuthError(error) {
+	const rpcError = findJSONRPCError(error);
+	return rpcError !== void 0 && (rpcError.code === RPC_ERROR_REQUESTER_VALIDATION_FAILED || rpcError.code === RPC_ERROR_AUTHENTICATION_FAILED);
+}
+
 //#endregion
 //#region src/clients/SignalWire.ts
 var import_cjs$1 = require_cjs();
@@ -21060,6 +21771,7 @@ var SignalWire = class extends Destroyable {
 		this._isConnected$ = this.createBehaviorSubject(false);
 		this._isRegistered$ = this.createBehaviorSubject(false);
 		this._errors$ = this.createReplaySubject(1);
+		this._warnings$ = this.createReplaySubject(10);
 		this._options = {};
 		this._deps = new DependencyContainer();
 		this._credentialProvider = credentialProvider;
@@ -21119,6 +21831,29 @@ var SignalWire = class extends Destroyable {
 	*/
 	async resolveCredentials() {
 		const fingerprint = await this.initDPoP();
+		this._refreshCoordinator = new CredentialRefreshCoordinator(this._dpopManager, {
+			http: this._deps.http,
+			notifier: {
+				onError: (error) => this._errors$.next(error),
+				onWarning: (warning) => this._warnings$.next(warning),
+				onRefreshExhausted: () => void this.disconnect(),
+				onCredentialRefreshed: async (credential) => this.reauthenticateLiveSession(credential)
+			},
+			store: {
+				read: () => this._deps.credential,
+				write: (credential) => {
+					this._deps.credential = credential;
+				},
+				merge: (partial) => {
+					this._deps.credential = {
+						...this._deps.credential,
+						...partial
+					};
+					this.persistCredential(this._deps.credential);
+				},
+				persist: (credential) => this.persistCredential(credential)
+			}
+		});
 		if (this._credentialProvider) return this.validateCredentials(this._credentialProvider, void 0, fingerprint);
 		for (const scope of this._deps.persistSession ? ["local", "session"] : ["session"]) try {
 			const cached = await this._deps.storage.getItem("sw:cached_credential", scope);
@@ -21148,11 +21883,32 @@ var SignalWire = class extends Destroyable {
 			logger$1.error("[SignalWire] Provided credentials have expired.");
 			throw new InvalidCredentialsError("Provided credentials have expired.");
 		}
-		if (_credentials.expiry_at && credentialProvider?.refresh) this.scheduleCredentialRefresh(credentialProvider, _credentials.expiry_at);
+		if (_credentials.expiry_at && credentialProvider?.refresh) this._refreshCoordinator?.scheduleDeveloperRefresh(credentialProvider, _credentials.expiry_at);
+		else if (_credentials.expiry_at && !credentialProvider?.refresh) {
+			logger$1.warn(`[SignalWire] [SW-NO-REFRESH-HANDLER] Credential has expiry_at=${_credentials.expiry_at} but no refresh handler. Session will terminate at expiry unless the SAT has 'sat:refresh' scope.`);
+			this._warnings$.next({
+				code: "credential_no_refresh_handler",
+				source: "CredentialProvider",
+				message: "Credential has expiry_at but no refresh handler. Session will terminate at expiry unless the SAT carries 'sat:refresh' scope.",
+				expiresAt: _credentials.expiry_at
+			});
+		}
 		this._deps.credential = _credentials;
 		this.persistCredential(_credentials);
-		if (this.isConnected && this._clientSession.authenticated && _credentials.token) try {
-			await this._clientSession.reauthenticate(_credentials.token);
+		await this.reauthenticateLiveSession(_credentials);
+	}
+	/**
+	* Reauthenticate the currently-open session with a freshly obtained
+	* credential so the new token takes effect on the live socket immediately —
+	* not just on the next reconnect. No-op when the session is not
+	* connected/authenticated or the credential carries no token (e.g. an
+	* authorization-state-only refresh). Non-fatal: reauth failures surface on
+	* `errors$` without aborting the refresh that triggered this.
+	*/
+	async reauthenticateLiveSession(credential) {
+		if (!this.isConnected || !this._clientSession.authenticated || !credential.token) return;
+		try {
+			await this._clientSession.reauthenticate(credential.token);
 			logger$1.info("[SignalWire] Session refreshed with new credentials.");
 		} catch (error) {
 			logger$1.error("[SignalWire] Failed to refresh session with new credentials:", error);
@@ -21160,33 +21916,101 @@ var SignalWire = class extends Destroyable {
 		}
 	}
 	/**
-	* Schedules credential refresh with exponential backoff retry on failure.
-	* On success, resets attempt counter and schedules the next refresh.
-	* After exhausting retries, emits TokenRefreshError and disconnects.
+	* One-shot recovery for a live session that failed with a recoverable auth
+	* error (`-32002`/`-32003`) because its token went stale — e.g. a refresh
+	* timer that was throttled while the tab was backgrounded.
+	*
+	* Two steps, first that succeeds wins:
+	*   1. Reauthenticate with the in-memory token (a fresh DPoP proof is
+	*      generated automatically). Heals a session whose token was already
+	*      refreshed by the coordinator but never applied to the open socket,
+	*      and a client-bound session whose server-side auth merely drifted.
+	*   2. Re-mint via the developer provider's `refresh()` and reauthenticate.
+	*      Skipped for client-bound sessions (the DeviceTokenManager owns their
+	*      refresh; re-minting a base SAT here would drop the DPoP binding).
+	*
+	* @param allowRemint - Whether step 2 (provider re-mint) may run. Callers
+	*   pass `false` for non-auth failures so a transient network error never
+	*   escalates to a token re-mint; step 1 (in-memory reauth) always runs.
+	* @returns `true` if the session was reauthenticated, `false` otherwise.
 	*/
-	scheduleCredentialRefresh(credentialProvider, expiresAt, attempt = 0) {
-		if (this._refreshTimerId !== void 0) clearTimeout(this._refreshTimerId);
-		const refreshInterval = attempt === 0 ? Math.max(expiresAt - Date.now() - CREDENTIAL_REFRESH_BUFFER_MS, 1e3) : Math.min(CREDENTIAL_REFRESH_RETRY_BASE_MS * Math.pow(2, attempt) * (.5 + Math.random() * .5), CREDENTIAL_REFRESH_MAX_DELAY_MS);
-		this._refreshTimerId = setTimeout(async () => {
-			try {
-				if (!credentialProvider.refresh) throw new InvalidCredentialsError("Credential provider does not support refresh");
-				const newCredentials = await credentialProvider.refresh();
-				this._deps.credential = newCredentials;
-				this.persistCredential(newCredentials);
-				logger$1.info("[SignalWire] Credentials refreshed successfully.");
-				if (newCredentials.expiry_at) this.scheduleCredentialRefresh(credentialProvider, newCredentials.expiry_at, 0);
-			} catch (error) {
-				const nextAttempt = attempt + 1;
-				logger$1.error(`[SignalWire] Credential refresh failed (attempt ${nextAttempt}/${CREDENTIAL_REFRESH_MAX_RETRIES}):`, error);
-				this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
-				if (nextAttempt < CREDENTIAL_REFRESH_MAX_RETRIES) this.scheduleCredentialRefresh(credentialProvider, expiresAt, nextAttempt);
-				else {
-					logger$1.error("[SignalWire] Credential refresh exhausted all retries. Disconnecting.");
-					this._errors$.next(new TokenRefreshError("Credential refresh failed after max retries"));
-					this.disconnect();
-				}
+	async recoverStaleCredential(allowRemint = true) {
+		const currentToken = this._deps.credential.token;
+		if (currentToken) try {
+			await this._clientSession.reauthenticate(currentToken);
+			return true;
+		} catch (error) {
+			logger$1.debug("[SignalWire] In-memory reauth failed during recovery:", error);
+		}
+		if (!allowRemint || this._clientSession.clientBound || !this._credentialProvider?.refresh) return false;
+		try {
+			const newCredentials = await this.remintCredential(this._credentialProvider);
+			if (!newCredentials.token) return false;
+			this._deps.credential = newCredentials;
+			this.persistCredential(newCredentials);
+			await this._clientSession.reauthenticate(newCredentials.token);
+			if (newCredentials.expiry_at) this._refreshCoordinator?.scheduleDeveloperRefresh(this._credentialProvider, newCredentials.expiry_at);
+			return true;
+		} catch (error) {
+			logger$1.error("[SignalWire] Credential recovery failed:", error);
+			return false;
+		}
+	}
+	/**
+	* Re-mint a credential via `provider.refresh()`, routed through the
+	* coordinator's shared in-flight guard so concurrent re-mint paths (a
+	* scheduled/resume refresh, -32003 recovery, and reconnect) never fire a
+	* second `provider.refresh()` in parallel — which rotating one-time-use
+	* refresh tokens reject. Falls back to a direct call only if the coordinator
+	* has not been constructed yet.
+	*/
+	async remintCredential(provider) {
+		if (this._refreshCoordinator) return this._refreshCoordinator.refreshCredential(provider);
+		if (!provider.refresh) throw new InvalidCredentialsError("Credential provider does not support refresh");
+		return provider.refresh();
+	}
+	/**
+	* Re-mint credentials before a fresh (re)connect (`onBeforeReconnect` hook).
+	* The session invokes this only when it is client-bound OR the in-memory
+	* token is expired. The re-mint mechanism depends on the binding:
+	*   - Client-bound: `authenticate()` with the DPoP fingerprint to obtain a
+	*     fresh base SAT the upcoming reconnect can re-bind (the
+	*     DeviceTokenManager re-activates afterwards).
+	*   - Unbound: the developer's non-interactive `refresh()` handler.
+	*     `authenticate()` is deliberately NOT used here — it may be interactive
+	*     (a login prompt) and must not fire on a background reconnect.
+	*
+	* Rejects on failure so the session aborts the reconnect rather than
+	* replaying a stale token.
+	*/
+	async refreshCredentialForReconnect() {
+		if (!this._credentialProvider) return;
+		try {
+			let newCredentials;
+			if (this._clientSession.clientBound) {
+				const fingerprint = this._dpopManager?.initialized ? this._dpopManager.fingerprint : void 0;
+				logger$1.debug("[SignalWire] Re-minting client-bound base SAT before reconnect");
+				newCredentials = await this._credentialProvider.authenticate(fingerprint ? { fingerprint } : void 0);
+			} else if (this._credentialProvider.refresh) {
+				logger$1.debug("[SignalWire] Refreshing unbound credential before reconnect");
+				newCredentials = await this.remintCredential(this._credentialProvider);
+			} else {
+				logger$1.warn("[SignalWire] [SW-NO-REFRESH-HANDLER] Token expired on reconnect but no refresh handler; reconnecting with the existing token.");
+				return;
 			}
-		}, refreshInterval);
+			if (!newCredentials.token) {
+				logger$1.warn("[SignalWire] Re-minted credential has no token; keeping the existing credential for reconnect.");
+				return;
+			}
+			this._deps.credential = newCredentials;
+			this.persistCredential(newCredentials);
+			if (newCredentials.expiry_at && this._credentialProvider.refresh) this._refreshCoordinator?.scheduleDeveloperRefresh(this._credentialProvider, newCredentials.expiry_at);
+			logger$1.debug("[SignalWire] Credential refreshed successfully for reconnect");
+		} catch (error) {
+			logger$1.error("[SignalWire] Failed to refresh credentials for reconnect:", error);
+			this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
+			throw error;
+		}
 	}
 	/** Persist credential to localStorage when persistSession is enabled. */
 	persistCredential(credential) {
@@ -21274,51 +22098,20 @@ var SignalWire = class extends Destroyable {
 		this._attachManager = new AttachManager(this._deps.storage, this._deps.deviceController, PreferencesContainer.instance.reconnectCallsTimeout, this._deps.attachedCallsKey);
 		this._clientSession = new ClientSessionManager(() => this._deps.credential, this._transport, this._deps.storage, this._deps.authorizationStateKey, this._deps.deviceController, this._attachManager, this._deps.webRTCApiProvider, this._dpopManager, this._networkMonitor?.networkChange$);
 		this._publicSession = new ClientSessionWrapper(this._clientSession);
-		this._clientSession.onBeforeReconnect = async () => {
-			if (!this._credentialProvider) return;
-			try {
-				const fingerprint = this._dpopManager?.initialized ? this._dpopManager.fingerprint : void 0;
-				logger$1.debug("[SignalWire] Credential expired, refreshing before reconnect");
-				const newCredentials = await this._credentialProvider.authenticate(fingerprint ? { fingerprint } : void 0);
-				this._deps.credential = newCredentials;
-				logger$1.debug("[SignalWire] Credential refreshed successfully for reconnect");
-			} catch (error) {
-				logger$1.error("[SignalWire] Failed to refresh credentials for reconnect:", error);
-				this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
-				throw error;
-			}
-		};
+		this._clientSession.onBeforeReconnect = async () => this.refreshCredentialForReconnect();
 		this.subscribeTo(this._clientSession.errors$, (error) => {
 			this._errors$.next(error);
 		});
+		this.subscribeTo(this._clientSession.authorization$, (authorization) => {
+			this._refreshCoordinator?.syncExpiryFromAuthorization(authorization, this._credentialProvider);
+		});
 		await this._clientSession.connect();
-		if (this._dpopManager?.initialized) {
-			if (this._refreshTimerId) {
-				clearTimeout(this._refreshTimerId);
-				this._refreshTimerId = void 0;
-				logger$1.debug("[SignalWire] Developer refresh disabled — Client Bound SAT activation starting");
-			}
-			this._deviceTokenManager = new DeviceTokenManager(this._dpopManager, this._deps.http, (error) => this._errors$.next(error), () => this._deps.credential);
-			await this._deviceTokenManager.activate(this._deps.user, this._clientSession, (cred) => {
-				this._deps.credential = {
-					...this._deps.credential,
-					...cred
-				};
-			});
-		}
+		await this._refreshCoordinator?.activate(this._deps.user, this._clientSession);
 		this.subscribeTo(this._clientSession.authenticated$.pipe((0, import_cjs$1.skip)(1), (0, import_cjs$1.filter)(Boolean)), async () => {
 			try {
-				if (this._deviceTokenManager) {
-					await this._deviceTokenManager.activate(this._deps.user, this._clientSession, (cred) => {
-						this._deps.credential = {
-							...this._deps.credential,
-							...cred
-						};
-					});
-					logger$1.debug("[SignalWire] Client Bound SAT re-activated after reconnect");
-				}
+				await this._refreshCoordinator?.activate(this._deps.user, this._clientSession);
 			} catch (error) {
-				logger$1.error("[SignalWire] Client Bound SAT re-activation failed (non-fatal):", error);
+				logger$1.error("[SignalWire] Refresh re-arm after reconnect failed (non-fatal):", error);
 				this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
 			}
 			try {
@@ -21404,6 +22197,19 @@ var SignalWire = class extends Destroyable {
 	get errors$() {
 		return this.deferEmission(this._errors$.asObservable());
 	}
+	/**
+	* Observable stream of non-fatal SDK warnings.
+	*
+	* Subscribe to detect SDK behaviors that affect session liveness or developer-facing
+	* contracts but do not warrant disconnection — e.g., a fallback from Client Bound SAT
+	* refresh to the developer-provided `refresh()` because the SAT lacks `sat:refresh`
+	* scope. Discriminated by `code`.
+	*
+	* Independent from {@link errors$}: existing error consumers are not notified.
+	*/
+	get warnings$() {
+		return this.deferEmission(this._warnings$.asObservable());
+	}
 	/** Platform WebRTC capabilities detected at construction time. */
 	get platformCapabilities() {
 		this._platformCapabilities ??= detectPlatformCapabilities(this._options.webRTCApiProvider);
@@ -21461,6 +22267,13 @@ var SignalWire = class extends Destroyable {
 		}
 		try {
 			this._visibilityController = new VisibilityController();
+			this.subscribeTo(this._visibilityController.visibilityChange$.pipe((0, import_cjs$1.filter)((event) => event.to === "visible")), () => {
+				try {
+					this._refreshCoordinator?.forceRefreshIfDue();
+				} catch (error) {
+					logger$1.warn("[SignalWire] Resume credential revalidation failed (non-fatal):", error);
+				}
+			});
 			this.subscribeTo(this._visibilityController.visibilityChange$.pipe((0, import_cjs$1.filter)((event) => event.to === "visible" && PreferencesContainer.instance.refreshDevicesOnVisible)), () => {
 				logger$1.debug("[SignalWire] Page visible, re-enumerating devices");
 				try {
@@ -21472,7 +22285,7 @@ var SignalWire = class extends Destroyable {
 			logger$1.warn("[SignalWire] Failed to initialize VisibilityController:", error);
 		}
 		try {
-			this._diagnosticsCollector = new DiagnosticsCollector({ sdkVersion: "3.30.0" });
+			this._diagnosticsCollector = new DiagnosticsCollector({ sdkVersion: "4.0.0-rc.2" });
 		} catch (error) {
 			logger$1.warn("[SignalWire] Failed to initialize DiagnosticsCollector:", error);
 		}
@@ -21480,14 +22293,19 @@ var SignalWire = class extends Destroyable {
 	/**
 	* Disconnects the WebSocket and tears down the current session.
 	*
+	* Ends the session identified by the protocol and clears its persisted
+	* resume state (`authorization_state` + protocol) and attach records
+	* together — a later {@link connect} with the same credentials starts a
+	* fresh session and cannot reattach to the ended session's calls.
+	* Credentials and device preferences are preserved. To temporarily stop
+	* receiving inbound calls while keeping the session alive, use
+	* `unregister()` instead.
+	*
 	* The client can be reconnected by calling {@link connect} again,
 	* which creates a fresh transport and session.
 	*/
 	async disconnect() {
-		if (this._refreshTimerId) {
-			clearTimeout(this._refreshTimerId);
-			this._refreshTimerId = void 0;
-		}
+		this._refreshCoordinator?.suspend();
 		this._diagnosticsCollector?.record("connection", "disconnected");
 		await this.teardownTransportAndSession();
 		this._isConnected$.next(false);
@@ -21538,21 +22356,23 @@ var SignalWire = class extends Destroyable {
 				this._errors$.next(error instanceof Error ? error : new Error(String(error), { cause: error }));
 				throw error;
 			}
-			logger$1.debug("[SignalWire] Failed to register user, trying reauthentication...");
-			try {
-				await this._clientSession.reauthenticate(this._deps.credential.token);
-				logger$1.debug("[SignalWire] Reauthentication successful, retrying register()");
+			logger$1.debug("[SignalWire] Failed to register user, attempting credential recovery...");
+			let failureCause = error;
+			if (await this.recoverStaleCredential(isRecoverableAuthError(error))) try {
+				logger$1.debug("[SignalWire] Recovery succeeded, retrying register()");
 				await this._transport.execute(RPCExecute({
 					method: "subscriber.online",
 					params: {}
 				}));
 				this._isRegistered$.next(true);
-			} catch (reauthError) {
-				logger$1.error("[SignalWire] Reauthentication failed during register():", reauthError);
-				const registerError = new InvalidCredentialsError("Failed to register user, and reauthentication attempt also failed. Please check your credentials.", { cause: reauthError instanceof Error ? reauthError : new Error(String(reauthError), { cause: reauthError }) });
-				this._errors$.next(registerError);
-				throw registerError;
+				return;
+			} catch (retryError) {
+				logger$1.error("[SignalWire] Register retry after recovery failed:", retryError);
+				failureCause = retryError;
 			}
+			const registerError = new InvalidCredentialsError("Failed to register user, and credential recovery also failed. Please check your credentials.", { cause: failureCause instanceof Error ? failureCause : new Error(String(failureCause), { cause: failureCause }) });
+			this._errors$.next(registerError);
+			throw registerError;
 		}
 	}
 	/**
@@ -21605,7 +22425,15 @@ var SignalWire = class extends Destroyable {
 		};
 		await this.waitAuthentication();
 		logger$1.debug("[SignalWire] Dialing with options:", computed_options);
-		return this._clientSession.createOutboundCall(destination, computed_options);
+		try {
+			return await this._clientSession.createOutboundCall(destination, computed_options);
+		} catch (error) {
+			if (!isRecoverableAuthError(error)) throw error;
+			logger$1.debug("[SignalWire] Dial hit a recoverable auth error; recovering credential and retrying once");
+			if (!await this.recoverStaleCredential()) throw error;
+			await this.waitAuthentication();
+			return this._clientSession.createOutboundCall(destination, computed_options);
+		}
 	}
 	/**
 	* Runs a multi-phase connectivity test against the given destination.
@@ -21874,17 +22702,23 @@ var SignalWire = class extends Destroyable {
 		prefs.preferredVideoInput = null;
 		await this._deviceController.clearDeviceState();
 	}
-	/** Destroys the client, clearing timers and releasing all resources. */
+	/**
+	* Destroys the client, clearing timers and releasing all resources.
+	*
+	* Intentionally destroying the client ends its session: the resume state
+	* (`authorization_state` + protocol) and the attach records are both
+	* cleared. Credentials and device preferences are preserved — use
+	* {@link resetToDefaults} for a full wipe. To temporarily stop receiving
+	* inbound calls while keeping the session alive, use `unregister()`.
+	*/
 	destroy() {
-		if (this._refreshTimerId) {
-			clearTimeout(this._refreshTimerId);
-			this._refreshTimerId = void 0;
-		}
-		this._deviceTokenManager?.destroy();
+		this._refreshCoordinator?.destroy();
+		this._refreshCoordinator = void 0;
 		this._dpopManager?.destroy();
-		if (this._attachManager) this._attachManager.detachAll();
-		this._transport.destroy();
-		this._clientSession.destroy();
+		const session = this._clientSession;
+		session?.teardownSessionState();
+		this._transport?.destroy();
+		session?.destroy();
 		try {
 			this._networkMonitor?.destroy();
 		} catch {}
@@ -21997,7 +22831,7 @@ var StaticCredentialProvider = class {
 /**
 * Library version from package.json, injected at build time.
 */
-const version = "3.30.0";
+const version = "4.0.0-rc.2";
 /**
 * Flag indicating the library has been loaded and is ready to use.
 * For UMD builds: `window.SignalWire.ready`
@@ -22019,7 +22853,7 @@ const ready = true;
 */
 const emitReadyEvent = () => {
 	if (typeof window !== "undefined") {
-		const event = new CustomEvent("signalwire:js:ready", { detail: { version: "3.30.0" } });
+		const event = new CustomEvent("signalwire:js:ready", { detail: { version: "4.0.0-rc.2" } });
 		window.dispatchEvent(event);
 	}
 };
@@ -22043,5 +22877,5 @@ emitReadyEvent();
 if (typeof process === "undefined") globalThis.process = { env: { NODE_ENV: "production" } };
 
 //#endregion
-export { Address, CallCreateError, ClientPreferences, CollectionFetchError, DPoPInitError, DeviceTokenError, EmbedTokenCredentialProvider, InvalidCredentialsError, MediaTrackError, MessageParseError, OverconstrainedFallbackError, Participant, PreflightError, RecoveryError, SelfCapabilities, SelfParticipant, SignalWire, StaticCredentialProvider, TokenRefreshError, UnexpectedError, User, VertoPongError, WebRTCCall, embeddableCall, getLogger, isSelfParticipant, ready, setDebugOptions, setLogLevel, setLogger, version };
+export { Address, CallCreateError, CallNotReadyError, ClientPreferences, CollectionFetchError, DPoPInitError, DeviceTokenError, EmbedTokenCredentialProvider, InvalidCredentialsError, MediaAccessError, MediaTrackError, MessageParseError, OverconstrainedFallbackError, Participant, ParticipantNotReadyError, PreflightError, RecoveryError, SelfCapabilities, SelfParticipant, SignalWire, StaticCredentialProvider, TokenRefreshError, UnexpectedError, User, VertoPongError, WebRTCCall, embeddableCall, getLogger, isSelfParticipant, ready, setDebugOptions, setLogLevel, setLogger, version };
 //# sourceMappingURL=browser.mjs.map