feat(VideoManager): add WebSocket JPEG video source

[alireza787b]

Description

This adds a generic WebSocket JPEG Video Stream source. Each binary WebSocket message carries one complete JPEG image; text messages are ignored.

The implementation:

• accepts full ws:// and wss:// URLs in Video settings;
• owns QWebSocket on a dedicated Qt event-loop thread and feeds bounded appsrc ! jpegparse into the existing receiver;
• limits compressed messages to 16 MiB, dimensions to 8,192 pixels, and the decoded four-byte display-surface budget to 64 MiB;
• retains at most two compressed frames and drops older queued frames when decoding falls behind;
• verifies WSS certificates with QGC's trust configuration, rejects redirects and URL user information, and avoids logging endpoint values;
• reports malformed JPEG messages, handshake failures, disconnects, and TLS failures through the receiver pipeline bus and reconnect lifecycle; and
• requires Qt WebSockets only when GStreamer video is enabled.

This first transport slice proves live reception. It does not change recording policy and supports unauthenticated endpoints only; authorization headers and secret storage belong in a separate generic security proposal.

This PR is stacked after #14730 at d5ab4fbd5980522a788cb186c17c424d51b2ca8c. Compared with that exact HTTP head, the WebSocket slice is 17 files with 1,324 additions and 27 deletions. The branch no longer carries the independent #14727 work or duplicates the fixture already merged through #14729.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• CI/Build changes
• Other

Testing

• Tested locally
• Added/updated unit tests
• Tested with simulator (not applicable)
• Tested with camera hardware

An integrated candidate containing this transport was manually exercised on Linux, Windows, and Android. Camera-free tests cover valid and fragmented JPEG delivery, malformed-message closure, baseline and progressive JPEG validation, decoded-size limits, bounded queues, trusted and untrusted WSS, handshake failure, remote disconnect, immediate teardown, unsafe URLs, and receiver lifecycle.

The focused transport probe previously passed 100/100 delivery runs and 100/100 untrusted-WSS error-delivery runs; the same paths passed 20/20 each under ASan/UBSan.

Current head: 743d6d08d986ef03997971b583d9e5934610b386. Fresh exact-head CI is running after the rebase. The previous integrated head completed the QGC Linux x64/arm64, unit/integration, sanitizer, coverage, Windows, macOS, iOS, Android, Docker, custom-plugin, and CodeQL checks.

Platforms Tested

• Linux
• Windows
• macOS (QGC CI build)
• Android
• iOS (QGC CI build)

Flight Stacks Tested

Not applicable; this change is confined to video reception.

Screenshots

Not applicable; the UI addition uses the existing Video settings layout.

Checklist

• I have read the Contribution Guidelines
• I have read the Code of Conduct
• My code follows the project coding standards
• I have added tests that prove the feature works
• New and existing unit and integration tests pass at the current exact head (running)

Related Issues

• Stacked after feat(VideoManager): add HTTP MJPEG video source #14730.
• test(UnitTest): handle early local HTTP requests #14729 is already merged into the common base.
• fix(VideoManager): redact stream URLs in diagnostics #14727 is an independent complementary diagnostics hardening PR.
• fix(VideoManager): preserve Windows software frames #14728, now merged, provides the Windows software-frame fallback.
• Supersedes the WebSocket portion of closed draft feat(VideoManager): add HTTP MJPEG and WebSocket JPEG sources #13594.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the project's dual license (Apache 2.0 and GPL v3).

[github-actions]

Build Results

Platform Status

Platform	Status	Details
Linux	Failed	View
Windows	Failed	View
MacOS	Failed	View
Android	Failed	View

Some builds failed.

Pre-commit

Check	Status	Details
pre-commit	Failed (non-blocking)	View

Pre-commit hooks: 2 passed, 76 failed, 7 skipped.

---

_{Updated: 2026-09-03 04:20:07 UTC • Commit: 743d6d0 • Triggered by: Linux}

[codecov]

Codecov Report

❌ Patch coverage is 32.70548% with 393 lines in your changes missing coverage. Please review.
✅ Project coverage is 32.70%. Comparing base (f29efd3) to head (082bc25).
⚠️ Report is 236 commits behind head on master.

Files with missing lines	Patch %	Lines
...VideoReceiver/GStreamer/QGCWebSocketVideoSource.cc	50.57%	41 Missing and 87 partials ⚠️
...anager/VideoReceiver/GStreamer/GstSourceFactory.cc	30.00%	34 Missing and 85 partials ⚠️
...anager/VideoReceiver/GStreamer/GstVideoReceiver.cc	0.00%	93 Missing ⚠️
src/Settings/VideoSettings.cc	19.44%	21 Missing and 8 partials ⚠️
src/VideoManager/VideoManager.cc	0.00%	19 Missing ⚠️
src/Camera/VehicleCameraControl.cc	0.00%	4 Missing ⚠️
...anager/VideoReceiver/GStreamer/GStreamerHelpers.cc	0.00%	0 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##           master   #14731      +/-   ##
==========================================
+ Coverage   25.47%   32.70%   +7.23%     
==========================================
  Files         769      785      +16     
  Lines       65912    68063    +2151     
  Branches    30495    31556    +1061     
==========================================
+ Hits        16788    22261    +5473     
+ Misses      37285    30761    -6524     
- Partials    11839    15041    +3202     

Flag	Coverage Δ
unittests	32.70% <32.70%> (+7.23%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
src/Settings/VideoSettings.h	100.00% <100.00%> (+85.71%)	⬆️
src/Utilities/Network/QGCNetworkHelper.h	0.00% <ø> (ø)
...Manager/VideoReceiver/GStreamer/GstVideoReceiver.h	0.00% <ø> (ø)
...anager/VideoReceiver/GStreamer/GStreamerHelpers.cc	38.65% <0.00%> (+1.96%)	⬆️
src/Camera/VehicleCameraControl.cc	9.52% <0.00%> (+7.77%)	⬆️
src/VideoManager/VideoManager.cc	7.83% <0.00%> (+5.93%)	⬆️
src/Settings/VideoSettings.cc	31.90% <19.44%> (+16.11%)	⬆️
...anager/VideoReceiver/GStreamer/GstVideoReceiver.cc	2.98% <0.00%> (+0.08%)	⬆️
...anager/VideoReceiver/GStreamer/GstSourceFactory.cc	30.90% <30.00%> (ø)
...VideoReceiver/GStreamer/QGCWebSocketVideoSource.cc	50.57% <50.57%> (ø)

... and 469 files with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ed09a05...082bc25. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[alireza787b]

@HTRamsey, this focused WS/WSS JPEG transport slice is ready for review at
cefd23dfb4a432bd5cb0dd7d25bc895a551648ea.

It is stacked directly on the HTTP MJPEG source in #14730. The incremental
delta is 17 files, with the production source accompanied by camera-free
delivery, malformed-input, WSS trust, failure propagation, and lifecycle
tests. The integrated candidate was also exercised on Linux, Windows, and
Android.

The exact head passed Linux release builds, 189 unit and 63 integration tests,
ASan/UBSan (189 unit and 46 integration tests), coverage thresholds, Windows,
Android, macOS, iOS, Custom Build, pre-commit, CodeQL, and both Codecov checks.
All eight Docker variants built successfully. Fedora then failed only in the
post-build Anchore step when the external Grype installer received an HTTP 302
for its GitHub release asset. I do not have permission to rerun an upstream
Actions job; a maintainer rerun of that single failed job would be appreciated.
The preceding production head passed the complete Docker matrix, and the only
subsequent change is the focused test polling correction.

This transport remains generic and unauthenticated. It does not add
PixEagle-specific behavior, Authorization headers, Origin configuration,
custom CAs, or secret persistence; those require a separate security design.

For clarity, the aggregate build comment labels pre-commit as “failed
(non-blocking)” while also reporting 0 passed, 0 failed, and 0 skipped. The
linked pre-commit workflow and its GitHub check both concluded success.
Likewise, both codecov/project and codecov/patch concluded success; their
check-run results are authoritative over the report comment icon.

[alireza787b]

Restacked this branch at 7d37d7b7df5c23d63f4878d4c98501156157fd96 on the exact refreshed HTTP head from #14730 (b482159230f4941135ec298310e94e11fa70930c).

• The incremental WebSocket review diff is 17 files, +1,324/-27.
• Removed the independent fix(VideoManager): redact stream URLs in diagnostics #14727 commits and the test(UnitTest): handle early local HTTP requests #14729 fixture commits already in master.
• Preserved the tested WebSocket lifecycle, TLS, bounded-frame, and pipeline-error behavior while removing inherited references to the unmerged redaction API.

Local checks passed: JSON parsing, git diff --check, whitespace/EOF hooks, and the GStreamer CMake plugin-policy test. Fresh exact-head CI is running. For the incremental review, compare b48215923...7d37d7b7d.