Features
- add debug logging back (993483c)
- nop logger, perf (b83c53f)

Bug Fixes
- device picker wait for ready & COEP: credentialless (beb5b14)
- picker error display (b837499)
- sab fallback (5dbb593)

🌐 Cross-platform: Windows + macOS support (was Linux-only). Uses hidapi for stable device IDs across platforms.

⚡ WebSocket data plane: Binary WebSocket + SharedArrayBuffer for input/output reports. sendReport latency ~50ms → ~3ms. Toggleable per-site.

🔬 WASM HID descriptor parser: Full parser via hidreport crate, runs in isolated world. Chromium-compatible collections output (camelCase, usages XOR usageMinimum/usageMaximum, full field attributes).

⚙ Per-site settings popup: Override fire-and-forget, SAB enabled, SAB buffer capacity (2048–32768) per site.

🎛 Settings page: Global defaults including 4-level log control (Error/Warn/Info/Debug).

🔌 Auto-reconnect: 4-layer (NM host, WebSocket, worker, SAB drain) with exponential backoff.

🔀 Native hotplug: udev (Linux), RegisterDeviceNotification (Windows), IOHidManager (macOS).

🔒 Security: HID blocklist (FIDO/U2F keys), session token in WebSocket subprotocol, WS origin check.

🐛 Fixes: Composite USB dedup, SAB slot size, WS broadcast timing race, sendReport race, SAB swap on reconnect, empty collections, reportId serialization, item shape mismatch, variable-length reports, Windows/macOS builds.

🚀 Performance: Dual HidDevice handles (reader+writer), unbounded channels, MessageChannel yield (0-delay vs 4ms setTimeout clamp).

🎨 UI: Shadow DOM device picker, theme system, device count display.

📁 Restructured: js/ html/ css/ res/ layout. New permissions: webRequest, webRequestBlocking (COOP/COEP injection).