[vibesoftwarecoder]

Fifth step of USB forwarding, after the host tunnel (ApolloVibe #13) and the session manager (#26). This is the first change a user can see. USB forwarding stays OFF by default, and with it off nothing is created and the stream behaves exactly as before.

What it adds

• A "USB forwarding" section in Settings (Windows only, hidden elsewhere): an enable checkbox, usbipd-win status, a device list with Share / Stop sharing buttons and a per-device "Forward automatically when streaming" checkbox, and plain help text. Sharing asks Windows for permission only when you press the button, and never blocks the window.
• Session wiring (small, best effort): when enabled, the manager starts after the stream window exists and is stopped in teardown. A single try/catch keeps any failure away from the stream. Updates are logged from the existing idle wake, at most once a second, with no Qt event pump.
• Hotkey Ctrl+Alt+Shift+U pauses or resumes forwarding. With the setting off it is not intercepted and the keys go to the host as before.
• The tunnel host is always the stream's host in one canonical form; the pinned server certificate and client identity come from pairing.
• Quitting a stream cannot freeze behind a slow usbipd: the device check runs on a pool thread, and stopping never waits for it.

Safety notes

• An independent review acted as the compiler for the stream-path files and found no compile errors. It found no Critical or High issues. Its Medium findings (a possible freeze at teardown, and child processes owned by singletons at exit) are fixed and tested.

Tests

• 323 passed, 1 skipped, 0 failed across 11 standalone Qt Test projects (loopback only). The skip needs usbipd-win installed.
• 16 deliberate breaks of the code were each caught by a test.

Not covered

• The changes to session.cpp, the input handler and main.cpp, and the new QML, were never compiled or run on the test machine; CI compiles them. How the section looks and how gamepad focus behaves is not checked.
• A real host, a real UAC prompt and a real USB device.
• qmllint: 254 warnings vs 220 before, all unresolved-module "unqualified access" and import warnings for the new singletons.

🤖 Generated with Claude Code