diff --git a/.env.example b/.env.example
index 55cb367a0..0876262b2 100644
--- a/.env.example
+++ b/.env.example
@@ -115,7 +115,8 @@ GEMINI_LIVE_MODEL=gemini-3.8-live
 # Client Token). Client-exposed by design, like GOOGLE_MAPS_API_KEY.
 MAPILLARY_CLIENT_TOKEN=
 
-# Optional: OpenSky auth mode (oauth | basic | auto | anon)
+# Optional: OpenSky auth mode (oauth | auto | anon). OpenSky retired
+# username/password (basic) sign-in on 2026-03-18; "basic" now loads anonymously.
 # Default: oauth — requires client credentials below
 # Set to "anon" to skip aircraft auth (rate-limited but works)
 OPENSKY_AUTH_MODE=oauth
@@ -128,7 +129,9 @@ OPENSKY_CLIENT_SECRET=
 # Optional paid Patreon tokens raise request limits; there is no free API key.
 LL2_API_TOKEN=
 
-# Optional: OpenSky credentials JSON file path (alternative to above)
+# Optional: OpenSky credentials JSON file path, used when the two values above
+# are empty: the credentials.json your OpenSky account page downloads when you
+# create an API client. Use an absolute path for compatibility with launchers.
 # OPENSKY_CREDENTIALS_FILE=/path/to/credentials.json
 
 # Optional: dev server config
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 000000000..e8c9f8bdf
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,59 @@
+## What this changes
+
+<!-- One or two sentences: what changed and why. Link the issue if there is one. -->
+
+## How I verified it
+
+- [ ] `npm run build`
+- [ ] `npm test`
+- [ ] `npm run test:track` (dev server running)
+- [ ] Feature gate for the area I touched: <!-- e.g. `node scripts/qa-radio.mjs`, or "none applies" -->
+
+<!-- Screenshots are welcome for anything visual. -->
+
+## New layer checklist
+
+<!--
+Fill this in if the PR adds a new data layer. Delete the whole section if it doesn't.
+See "Adding a new layer" in CONTRIBUTING.md.
+-->
+
+**Screenshots**
+
+<!-- At least one screenshot of the layer on the globe, plus its info card or panel if it has one. -->
+
+**Recording**
+
+<!--
+Preferably 15 to 30 seconds: turn the layer on, move around, open a record.
+Drag an .mp4 or .mov in here; GitHub accepts up to 10 MB on free accounts.
+If it's bigger, link to it instead.
+-->
+
+**Proposed category**
+
+<!--
+Which layer-panel group should it sit in? The current groups are in PANEL_GROUPS
+in src/ui/layerPanel.js: Movement, Cameras, Infrastructure, Events, Weather, Utilities.
+If none fits, propose a new group and say why.
+-->
+
+Category:
+
+**Data source and licence**
+
+- Source (provider and endpoint):
+- Licence or terms (link):
+- Attribution shown in the app:
+- Needs a key? (none / optional / required):
+- Fetched at runtime, or bundled in the repo:
+
+<!-- Bundled data must be data we have the right to redistribute. -->
+
+- [ ] Added a row to `DATA_SOURCES.md`
+- [ ] Credit is registered in `src/data/dataCredits.js`
+- [ ] Share-link token assigned with `npm run layer-token:next`, if the layer is shareable
+
+## Docs
+
+- [ ] `docs/CURRENT-STATE.md` updated and a `changelog.d/<pr-number>-<slug>.md` fragment added, or this PR doesn't change runtime behaviour
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0ad3a7368..356289841 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,11 +1,707 @@
 # Changelog
 
+## [Unreleased]
+
+## [0.3.0] — 2026-10-27 — Street Level, On Your Phone, in Your Language
+
+- Show a Street Level view facing 359.5° or more as 0°. The viewer caption
+  rounded the bearing without wrapping, so a view facing 359.6° read "360°"
+  (Aditya, @Rohilalala, #1431).
+
+- The visual styles and their presets mark their labels with the catalog-free
+  `msg()`, so the share-link codec, and any server that loads it, no longer
+  bundles every translation catalog (about 0.9 MB) (samehkhamis, #1421).
+
+- Keep a location search that found nothing, or failed, in the field so it can
+  be corrected: the query stays, focused and selected, and a persistent
+  announced message under the search row says what to do next, instead of a
+  toast followed by a cleared and closed field (samehkhamis, #1420).
+
+- Hosts can read share links on their server: the share-link codec and the
+  `/share/<code>` address helpers are now package exports,
+  `@gods-eye-view/core/share/view-codec` and `@gods-eye-view/core/share/link-path`
+  (samehkhamis, #1419).
+
+- Share links are now short: the share button makes `/share/<code>` links
+  that open on any copy of the app, follow the aircraft, military aircraft or
+  satellite you were following, and fall back to its last-known position with
+  a notice if it isn't reporting. A mistyped link is refused instead of
+  opening a different view. Long `#v=2` links keep working (samehkhamis, #1418).
+
+- Make Clear All clear the saved and shared layer selection. Layers that a
+  context mode had already switched off no longer stay in the share link and
+  come back on reload (samehkhamis, #1417).
+
+- Restore a share link opened in an already-open tab. Pasting a link into the
+  address bar, following one, or using Back/Forward now moves the camera and
+  restores the style, map, panels and layers instead of changing only the URL
+  (samehkhamis, #1416).
+
+- Add a Scope checkbox and extend feathering to 200%, retaining scope settings
+  across HUD layouts, share links and scenes. First run opens with Scope ON at
+  100% feather; explicit settings and historical links retain their values. Give
+  Tactical, Operator and Minimal text black backplates only when Scope is OFF,
+  including vertical metadata, without changing the original HUD text color, glow or
+  opacity. Scope ON retains its original HUD presentation (bilawalsidhu, #1410).
+  Keep title and tagline positions stable when toggling Scope, include the eye
+  in the title backing, and brighten the two secondary labels only with Scope OFF.
+
+- Remove four modules nothing in the app imports: `src/app/sourceSlot.js`,
+  `src/data/flowTiles.js`, `src/data/issPass.js` and `src/data/localGeojson.js`.
+  The local GeoJSON layer tests now build layers the way the catalog does, so
+  they keep covering `localGeojsonCore.js`. Package exports are unchanged
+  (samehkhamis, #1403).
+
+- Aircraft on the ground keep getting ground-height samples after the
+  computer's clock steps back, instead of waiting for it to catch up
+  (quanticsoul4772, #1399).
+
+- The Sharpen slider at 0 now turns the sharpen pass off instead of still
+  sharpening at a low amount (quanticsoul4772, #1398).
+
+- Show a locally heard aircraft tracking 359.5° or more as TRK 0°. The Local
+  ADS-B card rounded the track without wrapping, so 359.7° read "TRK 360°"
+  (Rudy Celekli, @rudycelekli, #1396).
+
+- Report a fire detection's acquisition time as a UTC timestamp in
+  `get_active_fires`. The tool joined FIRMS's unpadded date and time, so a
+  00:45 UTC detection read "2026-01-01 45"; it now reads
+  `2026-01-01T00:45:00.000Z`. Missing or invalid dates and times remain
+  unknown rather than rolling into another calendar day
+  (Rudy Celekli, @rudycelekli, #1395).
+
+- Report Docker container health with a local HTTP check using Node, with the
+  same port parsing as the launcher (John Rogers, @14traits, #1394).
+
+- Start the Docker install on SELinux hosts such as Fedora and RHEL. Compose now
+  mounts the checkout with `:z`; without it the container could not read `/app`
+  and stopped with "Cannot find module '/app/scripts/docker-start.mjs'"
+  (Anıl Güvenç, @anilguvenc, #1391).
+
+- Render awareness-overlay bearings and courses that round through north as
+  `000°`, rather than `360°` (Rudy Celekli, #1390).
+
+- Show cockpit wind from 359.5° or more as 0°, not 360°. Rounding 359.6°
+  printed "N · 360°" on the local wind direction
+  (Rudy Celekli, @rudycelekli, #1389).
+
+- Show a drawn line of 999.5 m or more as 1.0 km. The draw hint kept metres
+  below 1000, then rounded 999.6 m up to "1000 m"
+  (Rudy Celekli, @rudycelekli, #1388).
+
+- Show a Contacts entry 999.5 m or more away as 1.0 km. The panel kept meters
+  below 1000, then rounded 999.6 m up to "1000 m"
+  (Rudy Celekli, @rudycelekli, #1387).
+
+- Show a route leg of 995 m or more as 1.0 km. The route summary and step
+  cards kept meters below 1000, then rounded 996 m up to "1000 m"
+  (Rudy Celekli, @rudycelekli, #1386).
+
+- Show a route leg of 59.5 seconds or more as 1 min. The route summary and step
+  cards kept seconds below 60, then rounded 59.6 s up to "60 s"
+  (Rudy Celekli, @rudycelekli, #1385).
+
+- The HUD's AI place summary drops a reply that arrives after the camera has
+  started moving, so a summary asked for before a flight no longer names the
+  old place mid-flight. Cancelled or partially typed summaries retry even if the place
+  context stays the same (quanticsoul4772, #1384).
+
+- Reduce repeated work in aircraft detection candidates by caching unchanged
+  callsign/registration text and reusing resolved fleet models. Metadata updates,
+  live positions and tracked-aircraft/model handoffs remain immediate
+  (samehkhamis, #1379).
+
+- Increase touch-first globe zoom sensitivity to three times the default while
+  retaining Cesium collision and distance limits.
+- Reuse one delayed display timestamp per civil-aircraft fleet update and cache
+  extrapolation coordinate frames until their fix coordinates change. Preserve
+  contact counts, movement cadence, tracked motion and ground corrections.
+
+- Turning a layer off frees the memory its entities held. Cesium kept
+  removed layers' draw commands in reused per-pass arrays, so Data Centers
+  kept 116 MiB after it was switched off, submarine cables 74 MiB and dams
+  30 MiB; they now keep 13, 9 and 9 MiB (quanticsoul4772, #1367).
+
+- Aircraft 3D models (Flights, Military Flights, Local ADS-B) skip Cesium's
+  dynamic environment map, a sky render and GPU readback per model. With
+  ~150 models in the scene at Atlanta on Google 3D, GPU time per frame at
+  rest falls from 14.3-14.8 ms to 12.1-12.5 ms; a same-model comparison
+  showed no visible change (quanticsoul4772, #1366).
+
+- Drop the decimal when fire radiative power rounds to 10 MW. A 9.96 MW
+  detection was labeled 10.0 MW because the one-decimal cutoff ran before
+  rounding (Rudy Celekli, @rudycelekli, #1354).
+
+- Count a transit report that is 90 seconds old as one minute. The card kept
+  seconds through 89s, then rounded 90s up to "Reported 2 min ago"
+  (Rudy Celekli, @rudycelekli, #1353).
+
+- Read a destination heading that rounds to north as 000. 359.6° was shown as
+  360° on the destination bearing while the compass tape already uses 000
+  (Rudy Celekli, @rudycelekli, #1352).
+
+- Keep a tracked vessel's speed, course, heading and fix time when AISStream
+  static data arrives; the static message only merges name, type, destination
+  and IMO (rudycelekli, #1351).
+- Apply changed static metadata immediately, retaining known fields when a
+  later static report omits them, without refreshing the vessel's position
+  (samehkhamis, #1351).
+
+- Convert NHC cyclone movement speed from miles per hour to knots, so
+  `movement.speedKt` in cyclone query results is no longer about 15% high
+  (rudycelekli, #1350).
+
+- Label NHC cyclone classifications by their published meanings: `PTC` is a
+  post-tropical cyclone, `PC` a potential tropical cyclone, and subtropical
+  systems arrive as `STS` and `STD` (rudycelekli, #1349).
+
+- Wake staged weather imagery on a 150 ms timer while waiting for readiness,
+  avoiding a continuous render loop and cancelling the wake when work ends
+  (@nu-stats, #1345).
+
+- Phrase slight and sharp ramps as directions, so a ramp reads "slightly left"
+  instead of "on the slightly left", and a lane names its side in both
+  the proxy response and localized browser instructions
+  (Rudy Celekli, @rudycelekli, #1343).
+
+- Keep an impossible wildfire acquisition date off the detection clock, so a
+  fire is not labeled with a later day it did not happen
+  (Rudy Celekli, @rudycelekli, #1342).
+
+- Reject impossible KartaView photo timestamps, so 31 February is unknown
+  instead of rolling forward into March and passing the imagery date filter
+  (Rudy Celekli, @rudycelekli, #1341).
+
+- Read a hemisphere letter that is separated from its number, so a search for
+  `40.7128 N 74.0060 W` flies there instead of falling through to the geocoders
+  (Rudy Celekli, @rudycelekli, #1340).
+
+- Carry HUD LAT/LON seconds that round up to 60.00" into the minutes and
+  degrees, so longitude -122.35 reads `122°21'00.00"W` instead of
+  `122°20'60.00"W` (rudycelekli, #1339).
+
+- Improve touch selection of aircraft and vessels through the shared contact
+  picker, reveal tracked aircraft details when opening Context, support downward
+  swipe dismissal of phone drawers while preserving scrolling and controls, and
+  enlarge the phone logo (samehkhamis, #1338).
+
+- Evict terrain-height cache entries in fetch-time order without repeatedly
+  sorting the full cache, while keeping refreshed points newest and ordering
+  restored entries by their fetch time (daikaginza, #1326).
+
+- Add a phone layout for viewports 720px and narrower: the globe stays full
+  screen and a bottom tab bar (Layers, Cameras, Context, Search, More) opens one
+  panel sheet at a time, keeping attribution visible and scene STOP reachable.
+  Adapted from the phone tab-shell in #203 by blearymoth (samehkhamis, #1325).
+
+- Export the KartaView and Panoramax Street Level providers, so a host composing
+  its own provider list can offer the keyless providers without Mapillary
+  (samehkhamis, #1324).
+- A Mapillary source can take a `graphEndpoint`, a Graph API base that adds the
+  token itself (such as a same-origin proxy). Its sequence lookups go there
+  through the source's transport, and the photo viewer uses MapillaryJS's
+  Graph provider at that endpoint, so no client token is needed in the page
+  (samehkhamis, #1324).
+
+- Remove dead code across the repository: three modules nothing imports
+  (`src/ui.js`, `src/standalone/ui.js`, `src/data/localLayers.js`), exports
+  and locals nothing reads, a duplicate copy of the bundled dams data and an
+  unused ship model. The app no longer builds an unused default wind layer
+  and Bhote Koshi locator layer when it loads. Package exports are unchanged
+  (samehkhamis, #1321).
+
+- Validate provider response formats, strengthen camera source checks, and apply consistent API response protections (samehkhamis, #1317).
+
+- Clarify shared field CSS ownership: CCTV owns calibration editor sizing,
+  while Radio and Cyber supply explicit field palettes without changing the
+  current appearance or native control behavior (mazy1998, #1309).
+
+- Share read-only status badge presentation across CCTV source/frame labels,
+  calibration provenance and Weather coverage, preserving status meanings,
+  palettes, translations and announcements while preparing the view contract
+  for a future Vue migration (mazy1998, #1306).
+
+- Share native dropdown and numeric-field styling across Scene, CCTV, Display
+  and Radio controls, with a shared CCTV number-input builder that preserves
+  existing precision, validation and commit behavior (mazy1998, #1305).
+
+- Point distances wrap longitude differences across the antimeridian, in voice
+  proximity checks and `places_nearby` (quanticsoul4772, #1304).
+
+- `get_wind` flags stale forecasts (`stale`) when the wind proxy serves a
+  cached model run (quanticsoul4772, #1303).
+
+- Give ordinary Scene and CCTV actions shared native buttons with consistent
+  default, destructive and compact styling while preserving their existing
+  behavior and specialized controls (mazy1998, #1302).
+
+- Unify segmented selectors for model coverage, detection allocation, drawing
+  shape, Street View and imagery comparison while preserving their existing
+  behavior. Keep compact labels such as FILL and FLAT on one line, and let
+  collapsed Weather release space to the open rail panel. Reserve the full mode
+  button height in Recent Imagery so keyboard focus is not clipped (mazy1998, #1301).
+
+- Add a shared Voice Preview and Settings panel with browser-local preferences,
+  inactivity controls and accessible floating provider controls on compact layouts;
+  recover inactivity after confirmed audio-less replies, release retired audio
+  observers and keep cost warnings visible outside Settings
+  (manjunath22466, #1299).
+
+- Add Simplified Chinese (zh-CN) to the language picker, with localized dates
+  and readable Chinese labels. Based on translations by @abiyeenzo (#914)
+  and @EDIT-Aeterna (#979).
+  (German, @gekh, #1298).
+
+- Add the S2 GhostMaps layer: S2 Underground's public KMZ intel products
+  (Common Intelligence Picture, 30-day kinetic pull, Border Crisis Map, Iran
+  and Yemen products and the newest incident drop) from
+  github.com/s2underground/GhostMaps, with one chip per product and report
+  cards on click. `/api/ghostmaps` watches the repository's branch head every
+  15 s and pushes each new commit to open pages, which reload only the
+  products that changed (Black Pine Defense).
+- Clear a temporary GhostMaps upstream error and notify open pages when the
+  repository becomes reachable again, including when no new edition was published.
+- Release packed-image resources when a load is cancelled or fails, respect
+  injected or omitted GhostMaps sources, and wait for background cache warm-up
+  before removing provider test fixtures.
+- Include Simplified Chinese translations and keep the combined voice prompt
+  within its existing size limit while retaining all spoken aliases.
+
+- A Street Level provider whose `zoomFor` still answers `{zoom, kind}`, the
+  shape before the core went slim, draws its lines again instead of a silent
+  blank; an overview level or any answer that is not a whole zoom shows the
+  zoom-in hint (asturksever, #1288).
+
+- Give ordinary sliders a shared native control and consistent track, thumb,
+  value, focus and disabled styling while preserving feature behavior and
+  specialized controls (mazy1998, #1287).
+
+- The Street Level SINCE note sits on the value's line, in its type and a
+  size smaller: with KartaView lit it reads ANY DATE (by upload date). It
+  had lost its size variable in the Street Level slim-down and rendered
+  larger than the value, on a line of its own (asturksever, #1286).
+
+- Keep aircraft route labels on the scheduled airport leg instead of accepting
+  its distant great-circle extensions, preserving generous endpoint tolerance
+  across the signed-angle branch cut (rudycelekli, #1284).
+
+- Report cached CelesTrak satellite records as stale in the Data Layers row,
+  preserving separate core and dense catalog provenance through refresh,
+  removal and lifecycle cleanup (rudycelekli, #1283).
+
+- Pause periodic network updates in hidden tabs; the overdue update on return restarts the polling schedule, so the next poll follows one interval later even when that update fails (asturksever, #1282).
+- Report and guard browser visibility during Transit QA so hidden-page polling pauses cannot masquerade as playback regressions (asturksever, #1282).
+- Require each live city to supply its own feed vehicles in Transit QA; retained vehicles cannot qualify another city (asturksever, #1282).
+- Bound the Transit card-anchor probe by observed poll coverage instead of a fixed 20-second window (asturksever, #1282).
+- Keep visible-page Transit probes focused through the browser testing API (asturksever, #1282).
+- Add a real-browser regression gate for hidden-tab periodic work, explicit refresh, resume and teardown (asturksever, #1282).
+- Restore minimized test windows before screenshots so native compositor pauses cannot stall browser acceptance (asturksever, #1282).
+
+- Hold rendering only for animated content (asturksever, #1281).
+- Exercise current vector road sources and published camera bounds in Traffic fixture QA (asturksever, #1281).
+- Establish browser-level foreground visibility for Traffic QA and reject hidden-page samples (asturksever, #1281).
+- Supply CORS headers on cross-origin traffic fixtures and report browser exceptions without disabling browser security (asturksever, #1281).
+- Isolate the Traffic keyless browser scenario from the keyed page’s workers and intercepted cache (asturksever, #1281).
+- Restore minimized test windows before screenshots so native compositor pauses cannot stall browser acceptance (asturksever, #1281).
+- Intercept only Traffic provider URLs, leaving Cesium worker and module loading untouched (asturksever, #1281).
+- Settle an unfinished Traffic height correction when the last animated point leaves, so the layer stops reporting loading once its render hold is released (asturksever, #1281).
+
+- Throttle mission hover picks with a trailing check for the last pointer position, and clear stale cursors (asturksever, #1279).
+
+- Reserve singleflight before disk cache reads (asturksever, #1278).
+
+- Bound each height request to one upstream chunk (asturksever, #1276).
+
+- Preserve enable during first-load replacement (asturksever, #1275).
+- Release disabled weather camera listeners and make teardown resource leaks fail the browser probe (asturksever, #1275).
+- Keep visible-page weather teardown probes focused through the browser testing API (asturksever, #1275).
+
+- Scan the kml root delimiter in bounded time (asturksever, #1274).
+
+- Retire unavailable history and keep local trails (asturksever, #1273).
+
+- Normalize geocoder bias across the antimeridian (asturksever, #1272).
+
+- Reject inherited style keys during restore (asturksever, #1271).
+
+- Respect provider cooldowns and bound tle groups (asturksever, #1270).
+
+- Coalesce refreshes and cool down opensky failures (asturksever, #1269).
+
+- Normalize station tags and retain valid mixed rows; skipped malformed rows still report degraded coverage (asturksever, #1268).
+- Correct Radio QA push-to-talk setup to target the mounted voice controller (asturksever, #1268).
+
+- Honor Docker Compose trusted-peer and allowed-host settings from the shell
+  or project `.env`, and let `GEV_KEY_SETUP_TRUSTED_PEERS=none` disable gateway
+  access to Provider Settings before Vite starts (asturksever, #1265).
+
+- Prevent malformed Overpass filters from blocking the local server, and reject
+  cross-site or excessive query requests before reading their bodies
+  (asturksever, #1264; fixes #1248).
+- Release unread responses from the optional Google-token probe so keyless
+  browser validation can settle; the Overpass gate recognizes only that probe's
+  expected 404 as an unavailable capability (asturksever, #1264).
+- Make tracking arrival checks respect the aircraft update cadence while checking
+  orientation on the first reveal, avoiding false failures at faster render
+  rates (asturksever, #1264).
+
+- The terrain-heights bounds tests no longer read the checkout's
+  `.gev-cache/terrain-heights.json`. Each test gets a cache file of its own, so
+  `npm test` no longer fails after the dev server has cached terrain near
+  Austin (KnottyDyes, #1244).
+
+- Replace the blocky JPEG sky around the globe with the 9,096 stars of the
+  Yale Bright Star Catalogue, drawn as sharp points where they are at the
+  scene time, over a soft Milky Way from ESO/S. Brunier (CC BY 4.0). The Sun
+  and Moon stay; the anime style hides the Milky Way. Assets: 296 kB (gekh,
+  #1243).
+
+- `get_traffic_flow` flags stale cached TomTom tiles and reports the oldest
+  tile fetch time (`stale`, `oldest_tile_at`), with pending freshness metadata
+  released on failed or cancelled tile reads (quanticsoul4772, #1239).
+
+- Add Taiwan's national freeway cameras from the Freeway Bureau, MOTC to CCTV:
+  ~1,800 cameras read at runtime from the official MOTC 2.0 open-data table,
+  with on-demand snapshots and attribution. No API key is required; set
+  `CCTV_TAIWAN_ENABLED=0` to skip it (419vive, #1237).
+
+- Require a geocoded containment anchor for ambiguous analyst region names,
+  preserve boundary provenance and cancellation safety, and retain exact-name
+  precedence for natural outlines (manjunath22466, #1235).
+
+- Serve the camera catalog while it refreshes. An expired catalog made every
+  camera request wait for the slowest pack to reload; it is now answered at
+  once while one background refresh runs, so only the first load waits. Estonia's
+  slow Tarktee feeds get 30 s instead of 15 s, so the pack no longer drops out
+  on about a third of loads (quanticsoul4772, #1234).
+
+- Harden the Tarktee (Estonia) DATEX2 camera catalog fetches: refuse redirects,
+  cancel both response streams when either response fails or overflows the 4 MB
+  byte cap, and deduplicate camera IDs before per-pack prioritization
+  (yaka0007, #1233).
+
+- Skip bike-share stations with missing, blank or invalid coordinates instead
+  of placing them at coerced zero coordinates or accepting out-of-range values.
+  Explicit zero coordinates and numeric strings remain supported (Bortlesboat, #1232).
+
+- OpenSky sign-in matches what OpenSky accepts since 2026-03-18. The server
+  now reads `OPENSKY_CREDENTIALS_FILE` (the `credentials.json` OpenSky's
+  account page downloads) on every platform, not only through the macOS
+  launcher, and no longer sends retired username/password Basic auth:
+  `OPENSKY_AUTH_MODE=basic` loads anonymously with one warning saying what to
+  set instead (quanticsoul4772, #1229).
+- Credential-file warnings omit parser excerpts and filesystem error details;
+  the path example also works with the macOS launchers.
+
+- Load Ontario 511 cameras again. 511on.ca's camera endpoint now requires a
+  free developer key; set `ONTARIO_511_API_KEY` to enable the pack, which is
+  otherwise skipped with one log line saying where to get a key
+  (quanticsoul4772, #1228).
+
+- The first-run card can be closed on a phone or tablet. "ESC to dismiss" is
+  now a button that closes the card the same way ESC does; touch screens read
+  DISMISS, and phones no longer hide it, so choosing a mission is not the only
+  way out (KnottyDyes, #1226).
+
+- Add continuous globe rotation with direction and speed controls and a globe-fit
+  check before starting (manjunath22466, #1225).
+
+- Open God's Eye View from Pinokio in the system browser using the supported
+  `popout` menu option. The application's framing policy is unchanged
+  (NukeThemAII, #1222).
+
+- Avoid starting or queuing a reply when the local channel rejects a typed OpenAI
+  command, while preserving an earlier accepted deferred input
+  (Manjunath, #1220).
+
+- Keep NASA FIRMS fire and ALPR camera labels English in voice tool results
+  (`track_entity`, `get_entity_context`, pointer context); the voice card still
+  shows them in the interface language (daikaginza, #1207).
+
+- Report actual outcomes when voice enables or disables CCTV through the shared
+  layer lifecycle, including failed and cancelled changes (manjunath22466,
+  #1205).
+
+- Draw CCTV stills at their source aspect on the monitor plane instead of
+  stretching them to the 16:9 canvas. Most DOT cameras publish 4:3 frames, so
+  every still was widened; they are now centered and pillarboxed on the dark
+  the placeholder already ends on (Danielslay86, #1201).
+
+- Color CCTV cameras with a video feed violet. Cameras with an HLS, MP4 or
+  WebM feed were the same cyan as stills, so a DelDOT or Statens vegvesen
+  video camera could only be found by opening it. Stills stay cyan and the
+  active camera stays amber, and focus de-emphasis fades the violet the same
+  way (Danielslay86, #1200).
+
+- Keep Space Missions marked STALE when Launch Library 2 falls back to cached
+  launch data, and return to NOMINAL after a fresh response without discarding
+  retained missions (rudycelekli, #1199).
+
+- Share Launch Library request cache keys across installations refreshing in the
+  same UTC minute, identify the app to the provider, and explain that standard
+  space-missions access needs no key. Optional higher-rate LL2 tokens are paid
+  upgrades; existing local cache and server-only token handling are unchanged
+  (rudycelekli, #1197).
+
+- Add nine Spanish city bike systems to Bike Share and `get_bike_share`: BiciMAD
+  (Madrid), Valenbisi (Valencia), Bizi Zaragoza, Sevici (Seville), BIKI
+  (Valladolid), BiciCoruña, Dbizi (Donostia-San Sebastián), Bilbao Bizi and
+  BicinRivas, about 1,840 stations. Station names read underscores as word
+  breaks, and station capacity counts docks rather than PBSC's geofenced area
+  (ulihhhh, #1190).
+
+- Keep missing launch-pad coordinates unknown so launches use the location
+  fallback or stay off the map instead of appearing at 0°N 0°E. Missing stage
+  flight numbers no longer show "FLIGHT 0"
+  (Rudy Celekli, @rudycelekli, #1186).
+
+- Flights' ground floor works across the antimeridian. The viewer-distance
+  check behind the 150 km floor radius and its copy in the photoreal mesh-floor
+  sampler subtracted longitudes without wrapping, so two points 21 km apart
+  across 180° measured about 38,000 km and low or grounded aircraft just across
+  the line from the viewer were never floored. A contact's display corridor
+  walked a segment across 180° the long way round, spending its cell budget on
+  ground behind the contact, and a contact on the seam lost its cell hysteresis.
+  SEARCH NEARBY SITES on a view across 180° searched Google Places around
+  longitude 0, on the far side of the globe, with a radius sized from the view's
+  height alone; it now searches the view (Aditya, @Rohilalala, #1173).
+
+- Keep missing CCTV numbers unknown instead of reading them as zero. `Number`
+  turns null, blank strings and booleans into 0 or 1, and the camera source
+  list sends an unknown number as JSON null, so a source-pack camera that left
+  out its pose reached the browser as zeros clamped to each field's floor —
+  facing north, pitch −2°, FOV 20°, range 120 m, mount 6 m and ground 0 m —
+  instead of the defaults (id-hash heading, −17°, 74°, 700 m, 24 m and the
+  city's ground); a null or blank position placed the camera at 0,0. The
+  server's `toFiniteNumber` and the browser's `safeNumber` now treat absent,
+  blank and boolean values as missing. The same conversion also stops a
+  Tallinn row with a null heading reading as a confident north-facing camera,
+  a Caltrans camera with a blank elevation losing its 150 m ground prior, and
+  a TfL or Catalonia camera with a null or blank coordinate being kept at 0,0
+  or on the zero meridian (omerbberk, #1172).
+
+- Director shot actions land on the requested shot. A seek to a shot's start
+  could round a hair below it and select the end of the previous shot for some
+  shot counts and durations (Aditya, @Rohilalala, #1171).
+
+- Fire-perimeter queries handle outlines and holes crossing the antimeridian:
+  areas enclosed near ±180° are included, areas at the opposite meridian are
+  excluded, and returned perimeter coordinates stay near the dateline. Incident
+  cards use the same circular longitude mean and compare multipart outline
+  areas along short longitude edges, keeping the card on the largest polygon
+  (Arianna Method, @ariannamethod, #1142).
+
+- Scenes keep the "Scene not saved" status when a capture, update, append or
+  import cannot be saved, and an unreadable saved project no longer overwrites
+  the recovery checkpoint. `startScene()` resolves to its documented result,
+  `afterShotId` works without an explicit scene, and `scenesRun` counts the
+  distinct scenes queued (djabhi31, #1135).
+
+- Label camera-tool Street View fallbacks as historical Google imagery rather
+  than the current camera view; keep unknown frame provenance explicit
+  (rudycelekli, #1118).
+
+- Release superseded Google Street View open waits and suppress metadata
+  requests whose viewer was unmounted while the service loaded (rudycelekli,
+  #1117).
+
+- Exclude aircraft without a reported altitude from requested altitude bands;
+  unfiltered aircraft queries still retain them (rudycelekli, #1115).
+
+- A failed Esri Satellite or keyless terrain load still shows OSM or flat terrain
+  at once, but no longer lasts the whole session: while the fallback is on
+  screen, the real provider is retried in the background (30 seconds, doubling
+  to a 10-minute cap) and replaces it live once it loads. Map switches never
+  wait for a retry (Aditya, @Rohilalala, #1111).
+
+- Skip TLE sets whose line 1 and line 2 carry different catalog numbers, so a
+  spliced catalog cannot pair one satellite's elements with another's; the next
+  valid set still parses (VG31OP, #1101).
+
+- Overpass data whose element tags contain a failure phrase ("timed out",
+  "runtime error", "too many requests" and similar, e.g. a place named "Timed
+  Out Escape Rooms") is returned as data instead of being refused and putting
+  the endpoint on cooldown; upstream failures are read from the remark (Aditya,
+  @Rohilalala, #1097).
+
+- Military aircraft keep their last heading and speed when an adsb.lol row omits
+  `track` or `gs`, instead of turning north and stopping; a grounded row without
+  a speed still reads 0 (Aditya, @Rohilalala, #1096).
+
+- Update DOMPurify to 3.4.17, Sharp to 0.35.5 and source-map-js to 1.2.2 for
+  GHSA-p98j-92pf-mc4p, GHSA-6688-9rhm-gjv2, GHSA-wq5f-xc86-pv6w and
+  GHSA-68fv-2mgg-jv7q; `npm audit` now reports no vulnerabilities (NurstarK,
+  #1094).
+
+- Location search accepts two-dimensional WGS84 `geo:` URIs offline, with
+  the existing coordinate framing and label. Unsupported URI fields are passed
+  to the remaining search providers unchanged (cj-vana, #1071).
+
+- Keyless standalone startup answers an unavailable Google tile-token endpoint
+  with uncached 204 instead of a browser-visible 404. Existing providers take
+  precedence, and unrelated API routes behave as before. (dvilrgamerz, #1066)
+
+- On Windows, `npm run doctor` and the Pinokio install no longer print Node's
+  DEP0190 warning ("Passing args to a child process with shell option true can
+  lead to security vulnerabilities"): npm.cmd's fixed subcommand is now part of
+  the shell command string instead of an argument array (quanticsoul4772, #1057).
+
+- `aircraft_in_area` and `vessels_in_area` take `group_by` and `stats`, so an
+  MCP client can ask which airlines, countries, aircraft types or ship types
+  dominate an area, or the average altitude or speed, over every match instead
+  of estimating from the returned rows. Airlines come from the ICAO designator
+  in each callsign (SWA1234 counts as SWA), so the breakdown works on feeds
+  that report no operator; operator and type are counted only where the feed
+  reports them. Ship types count by family, so AIS codes 70 to 79 are all
+  cargo; type 0 ("not available") and the reserved codes 100 to 255 count as
+  unknown. Altitude and speed stats cover airborne aircraft only, so parked
+  aircraft do not pull the means down. Every vessel answer, `find_vessel`
+  included, now reads AIS ship-type codes as their family and a destination
+  with no letters as unknown (quanticsoul4772, #1056).
+
+- Add Hong Kong Transport Department traffic snapshot cameras as a keyless CCTV
+  source pack: the public DATA.GOV.HK English locations XML, frames pinned to
+  `tdcctv.data.one.gov.hk`, with DATA.GOV.HK Terms of Use attribution. By
+  default nearly the full TD catalog (~1,013 cameras; cap 1,100) loads,
+  prioritized across Hong Kong Island, Kowloon and the New Territories. Headings
+  use the shared id-hash fallback at low confidence. `CCTV_HK_MAX_SOURCES` sets
+  the cap (8–1,200) and `CCTV_HK_ENABLED=0` turns the pack off (JCY2515, #990).
+
+- Cross-site pages can no longer fill the terrain-height cache or spend the
+  visitor's own `/api/terrain/heights` rate-limit quota through the visitor's
+  browser. The route refuses a cross-site `Sec-Fetch-Site` or a foreign or
+  opaque `Origin` before rate limiting, cache access or upstream work. Unlike
+  the cost-bearing routes it still answers same-origin requests that arrive
+  through a reverse proxy, so terrain keeps rendering behind nginx, Caddy or
+  Cloudflare instead of falling back to the geoid (Sunil56224972, daikaginza,
+  #975).
+
+- Street Level is rebuilt around one small provider registry: Mapillary,
+  KartaView, Panoramax and Google Street View share one coverage drawer and
+  one photo viewer, one source lit at a time. Floating and docked panels,
+  FOLLOW, surface modes, the legend and the Mapillary proxy's disk cache are
+  gone; `.gev-cache/mapillary/` from earlier runs is no longer read and can be
+  deleted (gekh, #974).
+
+- Cross-site browser requests can no longer spend the TomTom traffic-tile
+  budget through `/api/tomtom/*`. The shared same-site gate runs before status,
+  cache, and upstream work; same-origin app requests and non-browser local
+  callers remain supported (Sunil56224972, #973).
+
+- Recent Imagery: opening DETAILS scrolls its card into view when it opens below
+  the fold. The panel used to restore the previous scroll position right after
+  the reveal, so the card stayed out of sight (Ian Blenke, #970).
+
+- Harden Vite's filesystem deny list for local-only artifacts: repo `dist/`,
+  `.gev-logs/`, and `.gev-cache/` are denied without blocking dependency
+  `dist/` directories, and checkout paths containing glob metacharacters are
+  escaped before building the root-anchored pattern (blowing-a-raspberry, #948).
+
+- Give each Statens vegvesen camera its own ground height from Kartverket's
+  keyless point-height API (CC BY 4.0) instead of one flat 150 m prior, so
+  mountain-pass cameras no longer sit hundreds of metres below the terrain
+  where neither the point-height prior nor the ground snap resolves. About 850
+  of ~855 cameras get a height; the rest keep the old prior. Requests carry 20
+  points, the most the API answers from its 1 m terrain model, eight at a
+  time; a cold lookup takes about 6–13 s. Cameras over water use the water
+  surface rather than the sea-floor depth the API returns there; for bridge
+  cameras that is still below the deck. Heights are cached for good and misses
+  for 6 h, so a refresh only asks about new or moved cameras. After a
+  failing request (a 408, 429 or 5xx, a network error, a request over 10 s or
+  an unreadable body) the lookup stops and backs off (Retry-After, else
+  30 min, longer than the refresh). The lane waits at most 12 s from its
+  start, and only on a cold cache; a slower first lookup leaves the cameras it
+  had not reached on the flat prior until the next 15-minute refresh, and
+  keeps filling the cache meanwhile.
+  `CCTV_VEGVESEN_HEIGHTS=0` turns it off. Follow-up to #929 (trygvehhh, #945).
+
+- Extract a reusable model-free World Packet from the existing voice
+  `get_current_view_state` owner without restoring disabled layers to the
+  model context. Keep the enabled-only payload, disabled-layer count, source
+  provenance, action result and view-state contract; read the layer roster once
+  per packet; voice retains the speech/card envelope at its own boundary.
+  Credits: original GEV voice/layer contributors and #880 implementation.
+
+- Add optional Gemini Live voice to the standalone app, with a provider chooser,
+  server-held API key, microphone streaming, shared map actions and captions.
+  Switching providers ends the old conversation and preserves the input mode
+  (Manjunath, #872).
+
+- Close the compact Radio disclosure when an adaptive tactical right-rail
+  restore directly expands Context, before Space Missions can be covered.
+  A repeated Context-open request also clears stale disclosure state.
+  Real PanelChrome constructor wiring and the rail reflow path are covered
+  by focused regressions. Credits: kvnloo (#816), raysung-2026's original
+  #804 report, asturksever's review, and quanticsoul4772's independent
+  Windows diagnosis.
+
+- Changelog entries are now one file per pull request. A change adds
+  `changelog.d/<pull request>-<slug>.md` instead of editing the top of
+  `CHANGELOG.md`, which two pull requests in flight could not share — it was the
+  most frequent merge conflict in the open queue, and for six of them the only
+  one. `npm run changelog` splices the directory into `CHANGELOG.md` at release
+  time and empties it; `npm run changelog:check` reports the batch and changes
+  nothing. Fragment text is copied through unchanged (daikaginza, #787).
+
+- Read satellite catalog numbers written in Alpha-5, the TLE spelling of
+  numbers above 99999: a letter for the first two digits, skipping I and O
+  (`A0000` is 100000, `Z9999` is 339999). The satellites layer converted such a
+  field to `NaN`, so every Alpha-5 satellite shared one catalog entry and all
+  but the first were dropped as duplicates; the satellite tools read the same
+  field as no number, so such a satellite could not be found by it. The layer
+  and the tools now decode the field in `src/sources/tle.js`, and reject a
+  malformed one (a sign, decimal point, hex, embedded space or stray letter)
+  instead of reading part of it as a number. This is Alpha-5 TLE
+  compatibility: CelesTrak's TLE feed carries no satellite above 99999, which
+  needs the OMM feed (#1191) (Honorius Neogy, #767, fixes #751).
+
+- The dev server no longer watches `.gev-cache` and `.gev-logs`. Providers write
+  cache files and logs there while the app runs, and none of it is source, so
+  the watcher now skips it; this guards against the DNS-lookup delays heavy
+  cache writes have caused, though no difference was measured on current main
+  (monwiss, #761).
+
+- Bound what a caller can grow through `/api/terrain/heights`. Every distinct
+  5-decimal point was a permanent in-memory entry, a permanent line in an
+  uncapped `.gev-cache/terrain-heights.json`, and a live upstream call, with
+  nothing limiting the rate. The point cache now holds at most 50,000 entries
+  and evicts oldest-first, a cache file above
+  24 MB is not read back, and the route is limited to 90 requests/minute per
+  client (270 global). Evicting a point costs one refetch, never a wrong
+  answer, since terrain does not move. Ordinary use is unaffected: a full
+  `test:track` run drives 10 requests, peaking at 8/min (daikaginza, #686).
+
+- Add FL511 (Florida DOT) traffic cameras as an opt-in CCTV source pack:
+  the statewide ArcGIS catalog, read a page at a time under a byte cap with
+  redirects refused, and frames pinned to FL511's two image hosts over HTTPS.
+  FL511's terms limit its content to individual, personal use, and any other
+  use (a public deployment included) needs FDOT's express written consent, so
+  the pack stays off unless `CCTV_FLORIDA_ENABLED=1`. Headings come from the
+  catalog's direction codes, and camera ids come from the image channel, since
+  the catalog's ID column repeats across regions. `CCTV_FLORIDA_MAX_SOURCES`
+  sets the cap (Danielslay86, #605).
+
+- The client's great-circle distances now come from one shared
+  `src/geoDistance.js` (`greatCircleKm`/`greatCircleMeters`, `{lat, lon}`
+  points). The Earth radius is standardized on 6371.0088 km, so distances shift
+  by about 1.4 ppm and region areas by about 2.8 ppm, and missing or
+  out-of-range points return `Infinity` (onionviolet, #287; Rajojha-1, #749).
+
 - The tracked-aircraft descriptor now publishes `verticalRateMps`, on both the
   civil and military layers, so a consumer reading `getTrackedInfo()` no longer
   has to reach past it into the raw poll record for climb/descent. Reported,
   never derived: an aircraft that has not transmitted a rate reads as `null`
   rather than a level-flight `0`.
 
+- Bound how often the GBFS proxy will relay. `/api/gbfs` already restricted
+  where it could go — https, an allowlisted host, a station feed path, no
+  redirects, a 12-second deadline and a 5 MB body cap — but nothing restricted
+  how often, so the dev server would make unlimited requests at a third-party
+  bikeshare operator on any caller's behalf. The route now admits 120
+  requests/minute per client address, refusing the rest with 429 and
+  `Retry-After` before any outbound fetch. The bikeshare layer needs about 15 a
+  minute with every catalogued system in range, so ordinary use is unchanged.
+
 - Add nine Ontario transit feeds: TTC, MiWay, Hamilton HSR, Durham Region,
   YRT/Viva, Guelph, Burlington, Barrie and Kingston, each carrying its own
   licence quote and attribution. A feed can now name its own modes, so Toronto's
@@ -282,8 +978,6 @@
   point. A slow render gets one bounded second frame request, while hidden,
   stale, moved-camera, invalid and oversized captures still fail closed.
 
-## [Unreleased]
-
 - Add a keyless Air quality layer to the Weather group, with Environment and
   Climate Change Canada's AQHI as the first registered provider. Readings carry
   `{ provider, scale, value, band }` so another network can be added without
@@ -498,6 +1192,28 @@
   needs only the Map Tiles API and the Maps JavaScript API (Street View). Keyless sessions and the Photon/Nominatim
   fallback order are unchanged.
 
+- Voice can switch on every shipped data layer (the two scene-driven
+  Bhote Koshi layers stay scene-only), including transit, Recent
+  Imagery, wind, the weather layers, cyclones and mapped installations, and
+  understands their spoken names ("buses", "hurricanes", "military bases").
+  One voice manifest (`src/voice/layerManifest.js`) generates the tool enums
+  and aliases, and a unit test fails when a new layer has no entry.
+- `analyst_query` counts up to 250,000 loaded records per layer instead of the
+  first 2,000, and says when a layer went past that (`complete: false`). It
+  also answers over bikeshare stations, transit vehicles, rocket launches,
+  cyclones, ALPR cameras, mapped installations, local ADS-B aircraft and fire perimeters; fire
+  records carry their sensor (VIIRS or MODIS).
+- Unknown fields, operators, units, value types, scope kinds and invalid
+  centres are refused with the allowed values instead of answering zero or widening to anywhere. A
+  layer that is off, still loading or unavailable is reported as such, not
+  as a count of zero; a partly answerable query is marked `partial`.
+  Distance sorts honour `sortDir`, a written unit such as `altitudeM(ft)`
+  converts, and large rankings no longer sort the whole set.
+- Results carry `lat`/`lon` for each item and a `display` object with the
+  scope, the feed window (earthquakes and fires cover the last 24 h) and any
+  caveat for the screen. The model is asked to answer in one short phrase.
+- The weather and Recent Imagery panels can be opened by voice.
+
 ## [0.2.1] — 2026-10-02 — God's Eye View through Your Agent (with security fixes and other features)
 
 - Ship each bundled data pack once. The region, marine, admin-boundary,
@@ -780,32 +1496,6 @@
   (`src/ui/imagerySplit.js`, `src/maps/imageryComparison.js`), and
   `MapSourceController.subscribe()` reports every settled map switch.
 
-## Unreleased — voice reaches every layer; honest analyst answers
-
-- Voice can switch on every shipped data layer (the two scene-driven
-  Bhote Koshi layers stay scene-only), including transit, Recent
-  Imagery, wind, the weather layers, cyclones and mapped installations, and
-  understands their spoken names ("buses", "hurricanes", "military bases").
-  One voice manifest (`src/voice/layerManifest.js`) generates the tool enums
-  and aliases, and a unit test fails when a new layer has no entry.
-- `analyst_query` counts up to 250,000 loaded records per layer instead of the
-  first 2,000, and says when a layer went past that (`complete: false`). It
-  also answers over bikeshare stations, transit vehicles, rocket launches,
-  cyclones, ALPR cameras, mapped installations, local ADS-B aircraft and fire perimeters; fire
-  records carry their sensor (VIIRS or MODIS).
-- Unknown fields, operators, units, value types, scope kinds and invalid
-  centres are refused with the allowed values instead of answering zero or widening to anywhere. A
-  layer that is off, still loading or unavailable is reported as such, not
-  as a count of zero; a partly answerable query is marked `partial`.
-  Distance sorts honour `sortDir`, a written unit such as `altitudeM(ft)`
-  converts, and large rankings no longer sort the whole set.
-- Results carry `lat`/`lon` for each item and a `display` object with the
-  scope, the feed window (earthquakes and fires cover the last 24 h) and any
-  caveat for the screen. The model is asked to answer in one short phrase.
-- The weather and Recent Imagery panels can be opened by voice.
-
-## Unreleased — local receiver feeds
-
 ### Local receiver feeds
 
 - The Local ADS-B layer also reads local 1090 MHz and 978 MHz UAT decoder
@@ -948,7 +1638,6 @@
 Add feed provenance to analyst/view answers and HUD context while retaining existing response fields and runner ownership (Matt Van Horn, #347).
 
 Analyst records for loaded satellites, datacenters and dams, with explicit bounded count/rank coverage (Matt Van Horn, #351).
-
 - New Fire Perimeters layer (Events group): live NIFC WFIGS interagency
   wildfire incident perimeters as ground-clamped polygons with a
   containment-colored fire line, refreshed every 5 minutes from the public
@@ -1225,6 +1914,7 @@ of current runtime behavior, see [`docs/CURRENT-STATE.md`](docs/CURRENT-STATE.md
 
 ### Other changes
 
+
 - Add ECMWF IFS model selection to Wind (#464, thanks @beneduzi), with model-scoped forecast-step caches, cancellation of replaced requests, and separate issue/valid timestamps.
 
 - Add bounded Director feature actions with accessible controls, explicit camera/layer admission and cancellation; restore pack geometry on same-shot seek. Preserve existing scenes and content attribution.
@@ -2033,3 +2723,4 @@ represent previously published GitHub Releases.
 ## [0.1.0] — 2026-02-09
 
 - Initial project version.
+
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index bb2c2de9e..a7fe8ab76 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -108,7 +108,7 @@ prints anything; never fix that by renaming or deleting PR A's published token.
 The highest-leverage places to jump in:
 
 - **🌆 Add a CCTV source pack.** Austin is the reference camera source. Adding another city means a clean public camera catalog with coordinates, attribution, and server-registered frame URLs (the proxy only fetches registered URLs — never client-supplied ones, see [SECURITY.md](SECURITY.md)). City packs are the best first lane.
-- **🛰️ Add or improve a data layer.** Layer factories live in `src/layers/<family>/`, with source, record, controller and renderer owners implementing the layer interface (`init/enable/disable/update/destroy/getStats`, optional `getDetectableObjects`/`getStats`). Use an existing layer as a template.
+- **🛰️ Add or improve a data layer.** Layer factories live in `src/layers/<family>/`, with source, record, controller and renderer owners implementing the layer interface (`init/enable/disable/update/destroy/getStats`, optional `getDetectableObjects`/`getStats`). Use an existing layer as a template, and see [Adding a new layer](#adding-a-new-layer) for what the PR needs.
 - **🎙️ Extend voice control.** Voice arguments are defined in `src/voice/actionSchemas.js`, with server-side descriptions in `server/providers/openai/tools.js` and client-side execution in `src/voice/gevActions.js`. Keep the tool surface tight and the responses honest (confirm only what actually happened).
 - **🎨 Add a visual style.** Styles are GLSL post-process shaders in `src/styles/`.
 - **🐛 Fix bugs / improve the first-run experience.** See [docs/KNOWN-ISSUES.md](docs/KNOWN-ISSUES.md).
@@ -153,6 +153,33 @@ ownership and adoption process.
 3. If you change runtime behavior, update `docs/CURRENT-STATE.md` in the same PR, and add your changelog entry as `changelog.d/<pr-number>-<slug>.md` instead of editing `CHANGELOG.md` — see [changelog.d/README.md](changelog.d/README.md). Distinct filenames don't conflict; a release assembles the directory into `CHANGELOG.md`. A documentation claim that needs a regression test should assert against `docs/CURRENT-STATE.md` or `README.md`, which a PR still edits directly.
 4. If you add or change a data source, update [DATA_SOURCES.md](DATA_SOURCES.md) with its license and attribution. **Don't add data you don't have the right to redistribute** — fetch it at runtime instead.
 5. Describe what you changed and how you verified it (screenshots welcome for anything visual).
+6. If you add a new layer, fill in the new-layer section of the PR template. See [Adding a new layer](#adding-a-new-layer).
+
+## Adding a new layer
+
+A new layer changes what everyone sees on the globe, so maintainers need to see
+it working and know where its data comes from before reviewing the code. PRs
+that add a layer must include all four of these in the description. The PR
+template has a section for them.
+
+1. **Screenshots.** At least one of the layer on the globe, plus its info card
+   or panel if it has one.
+2. **A screen recording**, preferably 15 to 30 seconds: turn the layer on, move
+   around, and open a record. Drag an `.mp4` or `.mov` into the PR description.
+   GitHub accepts videos up to 10 MB on free accounts, so link to a larger file
+   instead of attaching it.
+3. **The proposed category.** Say which layer-panel group the layer belongs in.
+   The groups are defined in `PANEL_GROUPS` in `src/ui/layerPanel.js` (today:
+   Movement, Cameras, Infrastructure, Events, Weather and Utilities). A layer
+   that isn't listed there falls under "Other layers". If none of the groups
+   fits, propose a new one and explain why.
+4. **The data source and licence.** Name the provider and endpoint, link its
+   licence or terms, give the attribution shown in the app, and say whether it
+   needs a key and whether the data is fetched at runtime or bundled. Add the
+   same details to [DATA_SOURCES.md](DATA_SOURCES.md) and register the credit
+   in `src/data/dataCredits.js`.
+
+Maintainers may hold a layer PR until all four are there.
 
 ## Maintainers
 
diff --git a/DATA_SOURCES.md b/DATA_SOURCES.md
index 3557c4137..e31d0d3f0 100644
--- a/DATA_SOURCES.md
+++ b/DATA_SOURCES.md
@@ -38,6 +38,7 @@ How to read this:
 | **Environment and Climate Change Canada** (MSC GeoMet OGC API) | Air quality (AQHI) — Canadian station observations | [ECCC Data Servers End-use Licence](https://eccc-msc.github.io/open-data/licence/readme_en/) (open, attribution required, no endorsement implied) | "Contains information licensed under the Environment and Climate Change Canada Data Servers End-use Licence" |
 | **NASA GIBS** (WMTS tiles + Worldview Snapshots) and **NASA CMR** (granule catalog) | Recent Imagery layer: HLS S30/L30 (Sentinel-2, Landsat 8/9) and VIIRS true-colour tiles draped on the map, per-day thumbnails and PNG exports; the HLS granule catalog (dates, cloud, footprints) for a selected box | U.S. public domain (NASA data); keyless, browser-direct (CORS `*`); no bulk use — one 30-day catalog query per box, tiles bounded to the box, six tile requests in flight | "We acknowledge the use of imagery provided by services from NASA's Global Imagery Browse Services (GIBS), part of NASA's Earth Science Data and Information System (ESDIS)." — [gibs.earthdata.nasa.gov](https://gibs.earthdata.nasa.gov), [HLS](https://lpdaac.usgs.gov/products/hlss30v002/) |
 | **NIFC WFIGS** (Wildland Fire Interagency Geospatial Services, ArcGIS feature service) | Fire Perimeters layer: current interagency wildfire incident perimeters, containment, and incident facts | U.S. public domain (interagency wildland-fire data published through the [NIFC Open Data portal](https://data-nifc.opendata.arcgis.com/)); fetched keyless through `/api/fire-perimeters` (5-minute server cache) with `exceededTransferLimit` paging | "Wildfire perimeters: National Interagency Fire Center (WFIGS)" |
+| **S2 Underground GhostMaps** (`github.com/s2underground/GhostMaps`) | S2 GhostMaps layer: the current edition of S2's KMZ intel products (Common Intelligence Picture, 30-day kinetic pull, Border Crisis Map, Iran and Yemen products, newest incident drop). Keyless. `/api/ghostmaps` reads the branch head from git's ref advertisement every 15 s (`GHOSTMAPS_POLL_SECONDS`, minimum 5 s), lists the tree through the GitHub REST API only when the head changes (optional `GITHUB_TOKEN`), downloads files by commit-pinned raw URLs into `.gev-cache/ghostmaps/` and pushes new catalogs to browsers over server-sent events | [CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/) (repository README: "S2 Underground © 2025 by S2A1"); non-commercial, attribution required; files are fetched at runtime, never stored in this repository | "S2 GhostMaps intel products: S2 Underground © by S2A1, CC BY-NC-SA 4.0" — shown in-app |
 | **InciWeb** (inciweb.wildfire.gov)                                    | Per-incident "InciWeb ↗" card links to official incident pages (narratives, evacuation/closure notices) | U.S. government public incident information. Links are matched best-effort by incident name and state, with incident page origin and update times checked on selection. Same-origin `/api/fire-perimeters/inciweb` routes cache the catalog for 1 hour and publication metadata for 30 minutes; linked pages remain InciWeb content | "Incident information: InciWeb (inciweb.wildfire.gov)" |
 | **OpenFreeMap / OpenMapTiles** | Vector tiles | OpenStreetMap data under ODbL 1.0 | OpenFreeMap © OpenMapTiles |
 | **Overture Maps Foundation** | Military area names pack | [ODbL 1.0](https://opendatacommons.org/licenses/odbl/1-0/) | Overture Maps Foundation |
diff --git a/Dockerfile b/Dockerfile
index d34f4887a..433d170a8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -39,6 +39,11 @@ COPY --chown=node:node . .
 ENV HOST=0.0.0.0
 ENV PORT=4173
 EXPOSE 4173
+# node:slim has no curl, so probe with Node's built-in fetch. 127.0.0.1 is
+# always on the Host allowlist, and the generous start period covers Vite's
+# first-run dependency optimisation.
+HEALTHCHECK --interval=30s --timeout=10s --start-period=30s --retries=3 \
+  CMD ["node", "-e", "fetch('http://127.0.0.1:'+(Number.parseInt(process.env.PORT,10)||4173)+'/').then((r)=>process.exit(r.ok?0:1),()=>process.exit(1))"]
 # The launcher is `npm run dev` plus one step: it trusts the container's
 # gateway address for Provider Settings, because that is where Docker delivers
 # the host's own browser from (never 127.0.0.1). See scripts/docker-start.mjs.
diff --git a/README.md b/README.md
index aaca828fe..6632e4491 100644
--- a/README.md
+++ b/README.md
@@ -111,13 +111,15 @@ app's **POWER UP** panel; [Keys & Costs](#-api-keys) explains the options.
 
 Available on **Windows, macOS, and Linux**. The Pinokio maintainer reports
 cross-platform testing of the fixed installer. The launcher installs the
-locked dependencies, finds a free local port, and opens the app.
+locked dependencies, finds a free local port, and opens the app in your system
+browser. The Server menu item keeps the launcher console available.
 
 **Tried before and installation failed?** Update Pinokio and try again.
 Version 8.2 fixes the launcher installation issue;
 [details from the Pinokio maintainer](https://pinokio.co/posts/01m1m4p9xxm3qw7dnnpj2wr93g).
 
-**Pinokio opens but the globe is very choppy?** Before treating that as a GPU
+**Using an older launcher or opening the embedded view manually?** If the globe
+is very choppy, before treating that as a GPU
 compatibility or minimum-hardware problem, copy the local server URL shown by
 Pinokio and open the same URL in your normal hardware-accelerated browser. One
 Pinokio 8.2.0 user reported severe stutter in Pinokio's embedded view that went
@@ -207,6 +209,8 @@ env UID=1026 GID=100 docker compose up -d
 
 Keep the `env`: bash treats `UID` as read-only, so a plain `UID=1026` in front of a command is silently ignored. If the container can't write the checkout, it says so at start. Docker Desktop on macOS and Windows maps ownership for you.
 
+On SELinux hosts (Fedora, RHEL), compose mounts the checkout with `:z` so the container may read it; Docker may relabel the checkout for container access, which can take a moment on a large checkout. Without that, the start fails with `Cannot find module '/app/scripts/docker-start.mjs'`.
+
 Behind a reverse proxy, put your keys in `.env` or pass them as environment variables - Provider Settings refuses proxied requests on purpose - and add the hostname you serve it on, for example `GEV_ALLOWED_HOSTS=globe.example.lan` (see [Sharing an instance](#-sharing-an-instance)).
 
 </details>
diff --git a/SECURITY.md b/SECURITY.md
index 1baad029f..4423eead3 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,6 +2,11 @@
 
 God's Eye View is a local-first client for **public** data. It is built for exploration, demos, and learning — not as a hardened production service. This document explains the security model so you can run it safely and report issues responsibly.
 
+Vite's development file server also denies `.gev-logs/`, `.gev-cache/`, and
+the package checkout's root `dist/` directory. Dependency `dist/` directories
+remain available. This filesystem deny list does not filter `public/` assets or
+preview output; never put private artifacts in a public asset directory.
+
 ## Reporting a vulnerability
 
 Please report security issues **privately** — do not open a public issue for anything exploitable.
diff --git a/build/vite.js b/build/vite.js
index a02f2340f..960603814 100644
--- a/build/vite.js
+++ b/build/vite.js
@@ -1,9 +1,29 @@
+import { fileURLToPath } from 'node:url';
 import { applicationHtmlPlugin } from './application-html.js';
 import cesium from 'vite-plugin-cesium';
 import { DEFAULT_ALLOWED_HOSTS, hostCheckPlugin } from './allowedHosts.js';
 import { embedFramingPlugin } from './embed-framing.js';
 import { panelBuildPlugin } from './panel.js';
 
+/**
+ * The repository root (this file lives at `<root>/build/vite.js`), as a
+ * forward-slash path for glob matching. Vite's `fs.deny` patterns are
+ * matched against the full absolute file path, and a bare `**\/dist/**`
+ * matches a `dist` directory at *any* depth — including dependencies that
+ * ship their own, such as `node_modules/vite/dist/client/client.mjs` (the
+ * dev client itself). Anchoring to this repository's root denies only the
+ * project's own build output.
+ */
+const REPO_ROOT = fileURLToPath(new URL('..', import.meta.url))
+  .replace(/\\/g, '/')
+  .replace(/\/$/, '');
+
+export function escapeFsDenyPath(path) {
+  return path.replace(/[()[\]{}*?!+@|]/g, '\\$&');
+}
+
+const REPO_ROOT_GLOB = escapeFsDenyPath(REPO_ROOT);
+
 /**
  * Content-Security-Policy for every document the dev/preview server serves.
  * No inline script is permitted, and the only foreign script origins are the
@@ -165,7 +185,19 @@ export function createBrowserViteConfig({
       // build/allowedHosts.js); IP addresses are always accepted.
       allowedHosts: [...allowedHosts],
       fs: {
-        deny: ['.env', '.env.*', '*.{crt,pem}', '**/.git/**', '**/ENVIRONMENT'],
+        deny: [
+          '.env',
+          '.env.*',
+          '*.{crt,pem}',
+          '**/.git/**',
+          '**/ENVIRONMENT',
+          '**/.gev-logs/**',
+          '**/.gev-cache/**',
+          // Root-anchored: a bare '**/dist/**' would also deny every
+          // dependency's own dist/ (e.g. node_modules/vite/dist/client),
+          // breaking /@vite/client and other dev-client assets.
+          `${REPO_ROOT_GLOB}/dist/**`,
+        ],
       },
       // These headers protect the document containing Provider Settings and
       // give the whole page a real Content-Security-Policy (BROWSER_CSP).
diff --git a/changelog.d/1014-director-callback-failures.md b/changelog.d/1014-director-callback-failures.md
new file mode 100644
index 000000000..f3877eca4
--- /dev/null
+++ b/changelog.d/1014-director-callback-failures.md
@@ -0,0 +1,4 @@
+- Director clock listeners, interaction observers and scene release failures
+  no longer leave the director inconsistent: each scene is released once, and
+  a phase error is kept (with the release failure logged) when cleanup also
+  fails (deepeshbind, #1014).
diff --git a/changelog.d/1056-area-tool-breakdowns.md b/changelog.d/1056-area-tool-breakdowns.md
deleted file mode 100644
index 3ca857a45..000000000
--- a/changelog.d/1056-area-tool-breakdowns.md
+++ /dev/null
@@ -1,12 +0,0 @@
-- `aircraft_in_area` and `vessels_in_area` take `group_by` and `stats`, so an
-  MCP client can ask which airlines, countries, aircraft types or ship types
-  dominate an area, or the average altitude or speed, over every match instead
-  of estimating from the returned rows. Airlines come from the ICAO designator
-  in each callsign (SWA1234 counts as SWA), so the breakdown works on feeds
-  that report no operator; operator and type are counted only where the feed
-  reports them. Ship types count by family, so AIS codes 70 to 79 are all
-  cargo; type 0 ("not available") and the reserved codes 100 to 255 count as
-  unknown. Altitude and speed stats cover airborne aircraft only, so parked
-  aircraft do not pull the means down. Every vessel answer, `find_vessel`
-  included, now reads AIS ship-type codes as their family and a destination
-  with no letters as unknown (quanticsoul4772, #1056).
diff --git a/changelog.d/1057-windows-npm-dep0190.md b/changelog.d/1057-windows-npm-dep0190.md
deleted file mode 100644
index 1e8e1da55..000000000
--- a/changelog.d/1057-windows-npm-dep0190.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- On Windows, `npm run doctor` and the Pinokio install no longer print Node's
-  DEP0190 warning ("Passing args to a child process with shell option true can
-  lead to security vulnerabilities"): npm.cmd's fixed subcommand is now part of
-  the shell command string instead of an argument array (quanticsoul4772, #1057).
diff --git a/changelog.d/1071-geo-uri-search.md b/changelog.d/1071-geo-uri-search.md
deleted file mode 100644
index eba251948..000000000
--- a/changelog.d/1071-geo-uri-search.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Location search accepts two-dimensional WGS84 `geo:` URIs offline, with
-  the existing coordinate framing and label. Unsupported URI fields are passed
-  to the remaining search providers unchanged (cj-vana, #1071).
diff --git a/changelog.d/1094-dependency-security-patches.md b/changelog.d/1094-dependency-security-patches.md
deleted file mode 100644
index 058359efc..000000000
--- a/changelog.d/1094-dependency-security-patches.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Update DOMPurify to 3.4.17, Sharp to 0.35.5 and source-map-js to 1.2.2 for
-  GHSA-p98j-92pf-mc4p, GHSA-6688-9rhm-gjv2, GHSA-wq5f-xc86-pv6w and
-  GHSA-68fv-2mgg-jv7q; `npm audit` now reports no vulnerabilities (NurstarK,
-  #1094).
diff --git a/changelog.d/1096-military-hold-track-speed.md b/changelog.d/1096-military-hold-track-speed.md
deleted file mode 100644
index adc1793c4..000000000
--- a/changelog.d/1096-military-hold-track-speed.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Military aircraft keep their last heading and speed when an adsb.lol row omits
-  `track` or `gs`, instead of turning north and stopping; a grounded row without
-  a speed still reads 0 (Aditya, @Rohilalala, #1096).
diff --git a/changelog.d/1097-overpass-remark-failure-phrases.md b/changelog.d/1097-overpass-remark-failure-phrases.md
deleted file mode 100644
index 4543710da..000000000
--- a/changelog.d/1097-overpass-remark-failure-phrases.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Overpass data whose element tags contain a failure phrase ("timed out",
-  "runtime error", "too many requests" and similar, e.g. a place named "Timed
-  Out Escape Rooms") is returned as data instead of being refused and putting
-  the endpoint on cooldown; upstream failures are read from the remark (Aditya,
-  @Rohilalala, #1097).
diff --git a/changelog.d/1101-tle-catalog-number-match.md b/changelog.d/1101-tle-catalog-number-match.md
deleted file mode 100644
index d1e2aa407..000000000
--- a/changelog.d/1101-tle-catalog-number-match.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Skip TLE sets whose line 1 and line 2 carry different catalog numbers, so a
-  spliced catalog cannot pair one satellite's elements with another's; the next
-  valid set still parses (VG31OP, #1101).
diff --git a/changelog.d/1111-map-fallback-retry.md b/changelog.d/1111-map-fallback-retry.md
deleted file mode 100644
index 45086eab1..000000000
--- a/changelog.d/1111-map-fallback-retry.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- A failed Esri Satellite or keyless terrain load still shows OSM or flat terrain
-  at once, but no longer lasts the whole session: while the fallback is on
-  screen, the real provider is retried in the background (30 seconds, doubling
-  to a 10-minute cap) and replaces it live once it loads. Map switches never
-  wait for a retry (Aditya, @Rohilalala, #1111).
diff --git a/changelog.d/1115-aircraft-altitude-band-unknown.md b/changelog.d/1115-aircraft-altitude-band-unknown.md
deleted file mode 100644
index a6b69472d..000000000
--- a/changelog.d/1115-aircraft-altitude-band-unknown.md
+++ /dev/null
@@ -1,2 +0,0 @@
-- Exclude aircraft without a reported altitude from requested altitude bands;
-  unfiltered aircraft queries still retain them (rudycelekli, #1115).
diff --git a/changelog.d/1117-google-viewer-lifecycle.md b/changelog.d/1117-google-viewer-lifecycle.md
deleted file mode 100644
index 66d73d4a2..000000000
--- a/changelog.d/1117-google-viewer-lifecycle.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Release superseded Google Street View open waits and suppress metadata
-  requests whose viewer was unmounted while the service loaded (rudycelekli,
-  #1117).
diff --git a/changelog.d/1118-cctv-snapshot-fallback-provenance.md b/changelog.d/1118-cctv-snapshot-fallback-provenance.md
deleted file mode 100644
index 648891785..000000000
--- a/changelog.d/1118-cctv-snapshot-fallback-provenance.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Label camera-tool Street View fallbacks as historical Google imagery rather
-  than the current camera view; keep unknown frame provenance explicit
-  (rudycelekli, #1118).
diff --git a/changelog.d/1135-director-save-status-run-results.md b/changelog.d/1135-director-save-status-run-results.md
deleted file mode 100644
index aa3c6f0e6..000000000
--- a/changelog.d/1135-director-save-status-run-results.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Scenes keep the "Scene not saved" status when a capture, update, append or
-  import cannot be saved, and an unreadable saved project no longer overwrites
-  the recovery checkpoint. `startScene()` resolves to its documented result,
-  `afterShotId` works without an explicit scene, and `scenesRun` counts the
-  distinct scenes queued (djabhi31, #1135).
diff --git a/changelog.d/1142-antimeridian-fire-perimeters.md b/changelog.d/1142-antimeridian-fire-perimeters.md
deleted file mode 100644
index 8b847163e..000000000
--- a/changelog.d/1142-antimeridian-fire-perimeters.md
+++ /dev/null
@@ -1,6 +0,0 @@
-- Fire-perimeter queries handle outlines and holes crossing the antimeridian:
-  areas enclosed near ±180° are included, areas at the opposite meridian are
-  excluded, and returned perimeter coordinates stay near the dateline. Incident
-  cards use the same circular longitude mean and compare multipart outline
-  areas along short longitude edges, keeping the card on the largest polygon
-  (Arianna Method, @ariannamethod, #1142).
diff --git a/changelog.d/1171-director-goto-shot.md b/changelog.d/1171-director-goto-shot.md
deleted file mode 100644
index 4c08351ef..000000000
--- a/changelog.d/1171-director-goto-shot.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Director shot actions land on the requested shot. A seek to a shot's start
-  could round a hair below it and select the end of the previous shot for some
-  shot counts and durations (Aditya, @Rohilalala, #1171).
diff --git a/changelog.d/1172-cctv-missing-numbers.md b/changelog.d/1172-cctv-missing-numbers.md
deleted file mode 100644
index d401021e9..000000000
--- a/changelog.d/1172-cctv-missing-numbers.md
+++ /dev/null
@@ -1,13 +0,0 @@
-- Keep missing CCTV numbers unknown instead of reading them as zero. `Number`
-  turns null, blank strings and booleans into 0 or 1, and the camera source
-  list sends an unknown number as JSON null, so a source-pack camera that left
-  out its pose reached the browser as zeros clamped to each field's floor —
-  facing north, pitch −2°, FOV 20°, range 120 m, mount 6 m and ground 0 m —
-  instead of the defaults (id-hash heading, −17°, 74°, 700 m, 24 m and the
-  city's ground); a null or blank position placed the camera at 0,0. The
-  server's `toFiniteNumber` and the browser's `safeNumber` now treat absent,
-  blank and boolean values as missing. The same conversion also stops a
-  Tallinn row with a null heading reading as a confident north-facing camera,
-  a Caltrans camera with a blank elevation losing its 150 m ground prior, and
-  a TfL or Catalonia camera with a null or blank coordinate being kept at 0,0
-  or on the zero meridian (omerbberk, #1172).
diff --git a/changelog.d/1173-antimeridian-ground-floor.md b/changelog.d/1173-antimeridian-ground-floor.md
deleted file mode 100644
index 939559bb5..000000000
--- a/changelog.d/1173-antimeridian-ground-floor.md
+++ /dev/null
@@ -1,10 +0,0 @@
-- Flights' ground floor works across the antimeridian. The viewer-distance
-  check behind the 150 km floor radius and its copy in the photoreal mesh-floor
-  sampler subtracted longitudes without wrapping, so two points 21 km apart
-  across 180° measured about 38,000 km and low or grounded aircraft just across
-  the line from the viewer were never floored. A contact's display corridor
-  walked a segment across 180° the long way round, spending its cell budget on
-  ground behind the contact, and a contact on the seam lost its cell hysteresis.
-  SEARCH NEARBY SITES on a view across 180° searched Google Places around
-  longitude 0, on the far side of the globe, with a radius sized from the view's
-  height alone; it now searches the view (Aditya, @Rohilalala, #1173).
diff --git a/changelog.d/1186-launch-unknown-coordinates.md b/changelog.d/1186-launch-unknown-coordinates.md
deleted file mode 100644
index d03c2d902..000000000
--- a/changelog.d/1186-launch-unknown-coordinates.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Keep missing launch-pad coordinates unknown so launches use the location
-  fallback or stay off the map instead of appearing at 0°N 0°E. Missing stage
-  flight numbers no longer show "FLIGHT 0"
-  (Rudy Celekli, @rudycelekli, #1186).
diff --git a/changelog.d/1190-bikeshare-spain-cities.md b/changelog.d/1190-bikeshare-spain-cities.md
deleted file mode 100644
index f07faa813..000000000
--- a/changelog.d/1190-bikeshare-spain-cities.md
+++ /dev/null
@@ -1,6 +0,0 @@
-- Add nine Spanish city bike systems to Bike Share and `get_bike_share`: BiciMAD
-  (Madrid), Valenbisi (Valencia), Bizi Zaragoza, Sevici (Seville), BIKI
-  (Valladolid), BiciCoruña, Dbizi (Donostia-San Sebastián), Bilbao Bizi and
-  BicinRivas, about 1,840 stations. Station names read underscores as word
-  breaks, and station capacity counts docks rather than PBSC's geofenced area
-  (ulihhhh, #1190).
diff --git a/changelog.d/1197-launch-library-provider-guidance.md b/changelog.d/1197-launch-library-provider-guidance.md
deleted file mode 100644
index 34cbe299e..000000000
--- a/changelog.d/1197-launch-library-provider-guidance.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Share Launch Library request cache keys across installations refreshing in the
-  same UTC minute, identify the app to the provider, and explain that standard
-  space-missions access needs no key. Optional higher-rate LL2 tokens are paid
-  upgrades; existing local cache and server-only token handling are unchanged
-  (rudycelekli, #1197).
diff --git a/changelog.d/1199-launch-cache-provenance.md b/changelog.d/1199-launch-cache-provenance.md
deleted file mode 100644
index 04f33cb7f..000000000
--- a/changelog.d/1199-launch-cache-provenance.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Keep Space Missions marked STALE when Launch Library 2 falls back to cached
-  launch data, and return to NOMINAL after a fresh response without discarding
-  retained missions (rudycelekli, #1199).
diff --git a/changelog.d/1200-cctv-live-icon-color.md b/changelog.d/1200-cctv-live-icon-color.md
deleted file mode 100644
index 30d67e1d4..000000000
--- a/changelog.d/1200-cctv-live-icon-color.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Color CCTV cameras with a video feed violet. Cameras with an HLS, MP4 or
-  WebM feed were the same cyan as stills, so a DelDOT or Statens vegvesen
-  video camera could only be found by opening it. Stills stay cyan and the
-  active camera stays amber, and focus de-emphasis fades the violet the same
-  way (Danielslay86, #1200).
diff --git a/changelog.d/1201-cctv-stills-aspect.md b/changelog.d/1201-cctv-stills-aspect.md
deleted file mode 100644
index fdb560064..000000000
--- a/changelog.d/1201-cctv-stills-aspect.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Draw CCTV stills at their source aspect on the monitor plane instead of
-  stretching them to the 16:9 canvas. Most DOT cameras publish 4:3 frames, so
-  every still was widened; they are now centered and pillarboxed on the dark
-  the placeholder already ends on (Danielslay86, #1201).
diff --git a/changelog.d/1205-cctv-tool-routing.md b/changelog.d/1205-cctv-tool-routing.md
deleted file mode 100644
index ed7552591..000000000
--- a/changelog.d/1205-cctv-tool-routing.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Report actual outcomes when voice enables or disables CCTV through the shared
-  layer lifecycle, including failed and cancelled changes (manjunath22466,
-  #1205).
diff --git a/changelog.d/1220-openai-typed-send.md b/changelog.d/1220-openai-typed-send.md
deleted file mode 100644
index cd1b5b470..000000000
--- a/changelog.d/1220-openai-typed-send.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Avoid starting or queuing a reply when the local channel rejects a typed OpenAI
-  command, while preserving an earlier accepted deferred input
-  (Manjunath, #1220).
diff --git a/changelog.d/1225-globe-rotation.md b/changelog.d/1225-globe-rotation.md
deleted file mode 100644
index 844966030..000000000
--- a/changelog.d/1225-globe-rotation.md
+++ /dev/null
@@ -1,2 +0,0 @@
-- Add continuous globe rotation with direction and speed controls and a globe-fit
-  check before starting (manjunath22466, #1225).
diff --git a/changelog.d/1228-cctv-ontario-511-key.md b/changelog.d/1228-cctv-ontario-511-key.md
deleted file mode 100644
index d9dc7986f..000000000
--- a/changelog.d/1228-cctv-ontario-511-key.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Load Ontario 511 cameras again. 511on.ca's camera endpoint now requires a
-  free developer key; set `ONTARIO_511_API_KEY` to enable the pack, which is
-  otherwise skipped with one log line saying where to get a key
-  (quanticsoul4772, #1228).
diff --git a/changelog.d/1233-tarktee-datex-catalog-hardening.md b/changelog.d/1233-tarktee-datex-catalog-hardening.md
deleted file mode 100644
index 39f184526..000000000
--- a/changelog.d/1233-tarktee-datex-catalog-hardening.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Harden the Tarktee (Estonia) DATEX2 camera catalog fetches: refuse redirects,
-  cancel both response streams when either response fails or overflows the 4 MB
-  byte cap, and deduplicate camera IDs before per-pack prioritization
-  (yaka0007, #1233).
diff --git a/changelog.d/1234-cctv-catalog-background-refresh.md b/changelog.d/1234-cctv-catalog-background-refresh.md
deleted file mode 100644
index 2d3706b14..000000000
--- a/changelog.d/1234-cctv-catalog-background-refresh.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Serve the camera catalog while it refreshes. An expired catalog made every
-  camera request wait for the slowest pack to reload; it is now answered at
-  once while one background refresh runs, so only the first load waits. Estonia's
-  slow Tarktee feeds get 30 s instead of 15 s, so the pack no longer drops out
-  on about a third of loads (quanticsoul4772, #1234).
diff --git a/changelog.d/1235-location-resolution.md b/changelog.d/1235-location-resolution.md
deleted file mode 100644
index 160688005..000000000
--- a/changelog.d/1235-location-resolution.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Require a geocoded containment anchor for ambiguous analyst region names,
-  preserve boundary provenance and cancellation safety, and retain exact-name
-  precedence for natural outlines (manjunath22466, #1235).
diff --git a/changelog.d/1237-taiwan-freeway-cctv.md b/changelog.d/1237-taiwan-freeway-cctv.md
deleted file mode 100644
index 1578971d4..000000000
--- a/changelog.d/1237-taiwan-freeway-cctv.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Add Taiwan's national freeway cameras from the Freeway Bureau, MOTC to CCTV:
-  ~1,800 cameras read at runtime from the official MOTC 2.0 open-data table,
-  with on-demand snapshots and attribution. No API key is required; set
-  `CCTV_TAIWAN_ENABLED=0` to skip it (419vive, #1237).
diff --git a/changelog.d/1243-starfield-sky.md b/changelog.d/1243-starfield-sky.md
deleted file mode 100644
index 04d0cfbf8..000000000
--- a/changelog.d/1243-starfield-sky.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Replace the blocky JPEG sky around the globe with the 9,096 stars of the
-  Yale Bright Star Catalogue, drawn as sharp points where they are at the
-  scene time, over a soft Milky Way from ESO/S. Brunier (CC BY 4.0). The Sun
-  and Moon stay; the anime style hides the Milky Way. Assets: 296 kB (gekh,
-  #1243).
diff --git a/changelog.d/1264-overpass-request-admission.md b/changelog.d/1264-overpass-request-admission.md
deleted file mode 100644
index c5e763e30..000000000
--- a/changelog.d/1264-overpass-request-admission.md
+++ /dev/null
@@ -1,9 +0,0 @@
-- Prevent malformed Overpass filters from blocking the local server, and reject
-  cross-site or excessive query requests before reading their bodies
-  (asturksever, #1264; fixes #1248).
-- Release unread responses from the optional Google-token probe so keyless
-  browser validation can settle; the Overpass gate recognizes only that probe's
-  expected 404 as an unavailable capability (asturksever, #1264).
-- Make tracking arrival checks respect the aircraft update cadence while checking
-  orientation on the first reveal, avoiding false failures at faster render
-  rates (asturksever, #1264).
diff --git a/changelog.d/1265-docker-trusted-peers.md b/changelog.d/1265-docker-trusted-peers.md
deleted file mode 100644
index f86fe3732..000000000
--- a/changelog.d/1265-docker-trusted-peers.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Honor Docker Compose trusted-peer and allowed-host settings from the shell
-  or project `.env`, and let `GEV_KEY_SETUP_TRUSTED_PEERS=none` disable gateway
-  access to Provider Settings before Vite starts (asturksever, #1265).
diff --git a/changelog.d/1268-radio-issue-fix.md b/changelog.d/1268-radio-issue-fix.md
deleted file mode 100644
index ab68243d6..000000000
--- a/changelog.d/1268-radio-issue-fix.md
+++ /dev/null
@@ -1,2 +0,0 @@
-- Normalize station tags and retain valid mixed rows; skipped malformed rows still report degraded coverage (asturksever, #1268).
-- Correct Radio QA push-to-talk setup to target the mounted voice controller (asturksever, #1268).
diff --git a/changelog.d/1269-aircraft-issue-fix.md b/changelog.d/1269-aircraft-issue-fix.md
deleted file mode 100644
index 8984a9141..000000000
--- a/changelog.d/1269-aircraft-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Coalesce refreshes and cool down opensky failures (asturksever, #1269).
diff --git a/changelog.d/1270-space-issue-fix.md b/changelog.d/1270-space-issue-fix.md
deleted file mode 100644
index b483c4c01..000000000
--- a/changelog.d/1270-space-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Respect provider cooldowns and bound tle groups (asturksever, #1270).
diff --git a/changelog.d/1271-share-issue-fix.md b/changelog.d/1271-share-issue-fix.md
deleted file mode 100644
index 7a01330ba..000000000
--- a/changelog.d/1271-share-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Reject inherited style keys during restore (asturksever, #1271).
diff --git a/changelog.d/1273-history-issue-fix.md b/changelog.d/1273-history-issue-fix.md
deleted file mode 100644
index f672a5c22..000000000
--- a/changelog.d/1273-history-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Retire unavailable history and keep local trails (asturksever, #1273).
diff --git a/changelog.d/1274-import-issue-fix.md b/changelog.d/1274-import-issue-fix.md
deleted file mode 100644
index 99bbc1429..000000000
--- a/changelog.d/1274-import-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Scan the kml root delimiter in bounded time (asturksever, #1274).
diff --git a/changelog.d/1275-forecast-issue-fix.md b/changelog.d/1275-forecast-issue-fix.md
deleted file mode 100644
index 2013bc4f2..000000000
--- a/changelog.d/1275-forecast-issue-fix.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Preserve enable during first-load replacement (asturksever, #1275).
-- Release disabled weather camera listeners and make teardown resource leaks fail the browser probe (asturksever, #1275).
-- Keep visible-page weather teardown probes focused through the browser testing API (asturksever, #1275).
diff --git a/changelog.d/1276-terrain-issue-fix.md b/changelog.d/1276-terrain-issue-fix.md
deleted file mode 100644
index 17e8f4b50..000000000
--- a/changelog.d/1276-terrain-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Bound each height request to one upstream chunk (asturksever, #1276).
diff --git a/changelog.d/1278-overpass-issue-fix.md b/changelog.d/1278-overpass-issue-fix.md
deleted file mode 100644
index 4b028f046..000000000
--- a/changelog.d/1278-overpass-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Reserve singleflight before disk cache reads (asturksever, #1278).
diff --git a/changelog.d/1279-launch-issue-fix.md b/changelog.d/1279-launch-issue-fix.md
deleted file mode 100644
index ec451e7ae..000000000
--- a/changelog.d/1279-launch-issue-fix.md
+++ /dev/null
@@ -1 +0,0 @@
-- Throttle mission hover picks with a trailing check for the last pointer position, and clear stale cursors (asturksever, #1279).
diff --git a/changelog.d/1281-traffic-issue-fix.md b/changelog.d/1281-traffic-issue-fix.md
deleted file mode 100644
index 3ce673038..000000000
--- a/changelog.d/1281-traffic-issue-fix.md
+++ /dev/null
@@ -1,8 +0,0 @@
-- Hold rendering only for animated content (asturksever, #1281).
-- Exercise current vector road sources and published camera bounds in Traffic fixture QA (asturksever, #1281).
-- Establish browser-level foreground visibility for Traffic QA and reject hidden-page samples (asturksever, #1281).
-- Supply CORS headers on cross-origin traffic fixtures and report browser exceptions without disabling browser security (asturksever, #1281).
-- Isolate the Traffic keyless browser scenario from the keyed page’s workers and intercepted cache (asturksever, #1281).
-- Restore minimized test windows before screenshots so native compositor pauses cannot stall browser acceptance (asturksever, #1281).
-- Intercept only Traffic provider URLs, leaving Cesium worker and module loading untouched (asturksever, #1281).
-- Settle an unfinished Traffic height correction when the last animated point leaves, so the layer stops reporting loading once its render hold is released (asturksever, #1281).
diff --git a/changelog.d/1283-satellite-cache-provenance.md b/changelog.d/1283-satellite-cache-provenance.md
deleted file mode 100644
index c9b0dd7dc..000000000
--- a/changelog.d/1283-satellite-cache-provenance.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Report cached CelesTrak satellite records as stale in the Data Layers row,
-  preserving separate core and dense catalog provenance through refresh,
-  removal and lifecycle cleanup (rudycelekli, #1283).
diff --git a/changelog.d/1284-route-plausibility-segment.md b/changelog.d/1284-route-plausibility-segment.md
deleted file mode 100644
index 4ab211957..000000000
--- a/changelog.d/1284-route-plausibility-segment.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Keep aircraft route labels on the scheduled airport leg instead of accepting
-  its distant great-circle extensions, preserving generous endpoint tolerance
-  across the signed-angle branch cut (rudycelekli, #1284).
diff --git a/changelog.d/1286-since-note-inline.md b/changelog.d/1286-since-note-inline.md
deleted file mode 100644
index f66467d67..000000000
--- a/changelog.d/1286-since-note-inline.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- The Street Level SINCE note sits on the value's line, in its type and a
-  size smaller: with KartaView lit it reads ANY DATE (by upload date). It
-  had lost its size variable in the Street Level slim-down and rendered
-  larger than the value, on a line of its own (asturksever, #1286).
diff --git a/changelog.d/1287-shared-sliders.md b/changelog.d/1287-shared-sliders.md
deleted file mode 100644
index b5e5fb215..000000000
--- a/changelog.d/1287-shared-sliders.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Give ordinary sliders a shared native control and consistent track, thumb,
-  value, focus and disabled styling while preserving feature behavior and
-  specialized controls (mazy1998, #1287).
diff --git a/changelog.d/1298-simplified-chinese.md b/changelog.d/1298-simplified-chinese.md
deleted file mode 100644
index d35d08cf1..000000000
--- a/changelog.d/1298-simplified-chinese.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Add Simplified Chinese (zh-CN) to the language picker, with localized dates
-  and readable Chinese labels. Based on translations by @abiyeenzo (#914)
-  and @EDIT-Aeterna (#979).
-  (German, @gekh, #1298).
diff --git a/changelog.d/1301-shared-segmented-selectors.md b/changelog.d/1301-shared-segmented-selectors.md
deleted file mode 100644
index 379b8c716..000000000
--- a/changelog.d/1301-shared-segmented-selectors.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- Unify segmented selectors for model coverage, detection allocation, drawing
-  shape, Street View and imagery comparison while preserving their existing
-  behavior. Keep compact labels such as FILL and FLAT on one line, and let
-  collapsed Weather release space to the open rail panel. Reserve the full mode
-  button height in Recent Imagery so keyboard focus is not clipped (mazy1998, #1301).
diff --git a/changelog.d/1302-shared-action-buttons.md b/changelog.d/1302-shared-action-buttons.md
deleted file mode 100644
index 3c8318488..000000000
--- a/changelog.d/1302-shared-action-buttons.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Give ordinary Scene and CCTV actions shared native buttons with consistent
-  default, destructive and compact styling while preserving their existing
-  behavior and specialized controls (mazy1998, #1302).
diff --git a/changelog.d/1305-shared-native-form-fields.md b/changelog.d/1305-shared-native-form-fields.md
deleted file mode 100644
index 129d81bcf..000000000
--- a/changelog.d/1305-shared-native-form-fields.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Share native dropdown and numeric-field styling across Scene, CCTV, Display
-  and Radio controls, with a shared CCTV number-input builder that preserves
-  existing precision, validation and commit behavior (mazy1998, #1305).
diff --git a/changelog.d/1306-shared-status-badges.md b/changelog.d/1306-shared-status-badges.md
deleted file mode 100644
index 007a028d1..000000000
--- a/changelog.d/1306-shared-status-badges.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Share read-only status badge presentation across CCTV source/frame labels,
-  calibration provenance and Weather coverage, preserving status meanings,
-  palettes, translations and announcements while preparing the view contract
-  for a future Vue migration (mazy1998, #1306).
diff --git a/changelog.d/1309-shared-field-css-ownership.md b/changelog.d/1309-shared-field-css-ownership.md
deleted file mode 100644
index 1b8817bac..000000000
--- a/changelog.d/1309-shared-field-css-ownership.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Clarify shared field CSS ownership: CCTV owns calibration editor sizing,
-  while Radio and Cyber supply explicit field palettes without changing the
-  current appearance or native control behavior (mazy1998, #1309).
diff --git a/changelog.d/1317-provider-response-hardening.md b/changelog.d/1317-provider-response-hardening.md
deleted file mode 100644
index 398688fc0..000000000
--- a/changelog.d/1317-provider-response-hardening.md
+++ /dev/null
@@ -1 +0,0 @@
-- Validate provider response formats, strengthen camera source checks, and apply consistent API response protections (samehkhamis, #1317).
diff --git a/changelog.d/1321-dead-code-cleanup.md b/changelog.d/1321-dead-code-cleanup.md
deleted file mode 100644
index e8cad2a23..000000000
--- a/changelog.d/1321-dead-code-cleanup.md
+++ /dev/null
@@ -1,6 +0,0 @@
-- Remove dead code across the repository: three modules nothing imports
-  (`src/ui.js`, `src/standalone/ui.js`, `src/data/localLayers.js`), exports
-  and locals nothing reads, a duplicate copy of the bundled dams data and an
-  unused ship model. The app no longer builds an unused default wind layer
-  and Bhote Koshi locator layer when it loads. Package exports are unchanged
-  (samehkhamis, #1321).
diff --git a/changelog.d/1324-street-level-provider-exports.md b/changelog.d/1324-street-level-provider-exports.md
deleted file mode 100644
index a3dc4cb6b..000000000
--- a/changelog.d/1324-street-level-provider-exports.md
+++ /dev/null
@@ -1,8 +0,0 @@
-- Export the KartaView and Panoramax Street Level providers, so a host composing
-  its own provider list can offer the keyless providers without Mapillary
-  (samehkhamis, #1324).
-- A Mapillary source can take a `graphEndpoint`, a Graph API base that adds the
-  token itself (such as a same-origin proxy). Its sequence lookups go there
-  through the source's transport, and the photo viewer uses MapillaryJS's
-  Graph provider at that endpoint, so no client token is needed in the page
-  (samehkhamis, #1324).
diff --git a/changelog.d/1325-phone-layout.md b/changelog.d/1325-phone-layout.md
deleted file mode 100644
index c1653df62..000000000
--- a/changelog.d/1325-phone-layout.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Add a phone layout for viewports 720px and narrower: the globe stays full
-  screen and a bottom tab bar (Layers, Cameras, Context, Search, More) opens one
-  panel sheet at a time, keeping attribution visible and scene STOP reachable.
-  Adapted from the phone tab-shell in #203 by blearymoth (samehkhamis, #1325).
diff --git a/changelog.d/1338-mobile-contact-context.md b/changelog.d/1338-mobile-contact-context.md
deleted file mode 100644
index e240dc82a..000000000
--- a/changelog.d/1338-mobile-contact-context.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Improve touch selection of aircraft and vessels through the shared contact
-  picker, reveal tracked aircraft details when opening Context, support downward
-  swipe dismissal of phone drawers while preserving scrolling and controls, and
-  enlarge the phone logo (samehkhamis, #1338).
diff --git a/changelog.d/1341-kartaview-impossible-timestamps.md b/changelog.d/1341-kartaview-impossible-timestamps.md
deleted file mode 100644
index 302ff38f4..000000000
--- a/changelog.d/1341-kartaview-impossible-timestamps.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Reject impossible KartaView photo timestamps, so 31 February is unknown
-  instead of rolling forward into March and passing the imagery date filter
-  (Rudy Celekli, @rudycelekli, #1341).
diff --git a/changelog.d/1342-firms-acquisition-calendar.md b/changelog.d/1342-firms-acquisition-calendar.md
deleted file mode 100644
index e0003636d..000000000
--- a/changelog.d/1342-firms-acquisition-calendar.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Keep an impossible wildfire acquisition date off the detection clock, so a
-  fire is not labeled with a later day it did not happen
-  (Rudy Celekli, @rudycelekli, #1342).
diff --git a/changelog.d/1430-traditional-chinese.md b/changelog.d/1430-traditional-chinese.md
new file mode 100644
index 000000000..e644829fc
--- /dev/null
+++ b/changelog.d/1430-traditional-chinese.md
@@ -0,0 +1,4 @@
+- Add Traditional Chinese (zh-Hant) with language selection and localized
+  Chinese readouts: the Simplified Chinese catalog written in Traditional
+  characters, based on translations by @abiyeenzo (#914) and @EDIT-Aeterna
+  (#979) (German, @gekh, #1430).
diff --git a/changelog.d/287-shared-great-circle-distance.md b/changelog.d/287-shared-great-circle-distance.md
deleted file mode 100644
index c2db9d54d..000000000
--- a/changelog.d/287-shared-great-circle-distance.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- The client's great-circle distances now come from one shared
-  `src/geoDistance.js` (`greatCircleKm`/`greatCircleMeters`, `{lat, lon}`
-  points). The Earth radius is standardized on 6371.0088 km, so distances shift
-  by about 1.4 ppm and region areas by about 2.8 ppm, and missing or
-  out-of-range points return `Infinity` (onionviolet, #287; Rajojha-1, #749).
diff --git a/changelog.d/605-fl511-florida-cameras.md b/changelog.d/605-fl511-florida-cameras.md
deleted file mode 100644
index 76f840198..000000000
--- a/changelog.d/605-fl511-florida-cameras.md
+++ /dev/null
@@ -1,9 +0,0 @@
-- Add FL511 (Florida DOT) traffic cameras as an opt-in CCTV source pack:
-  the statewide ArcGIS catalog, read a page at a time under a byte cap with
-  redirects refused, and frames pinned to FL511's two image hosts over HTTPS.
-  FL511's terms limit its content to individual, personal use, and any other
-  use (a public deployment included) needs FDOT's express written consent, so
-  the pack stays off unless `CCTV_FLORIDA_ENABLED=1`. Headings come from the
-  catalog's direction codes, and camera ids come from the image channel, since
-  the catalog's ID column repeats across regions. `CCTV_FLORIDA_MAX_SOURCES`
-  sets the cap (Danielslay86, #605).
diff --git a/changelog.d/686-terrain-heights-bounds.md b/changelog.d/686-terrain-heights-bounds.md
deleted file mode 100644
index 7e0004069..000000000
--- a/changelog.d/686-terrain-heights-bounds.md
+++ /dev/null
@@ -1,9 +0,0 @@
-- Bound what a caller can grow through `/api/terrain/heights`. Every distinct
-  5-decimal point was a permanent in-memory entry, a permanent line in an
-  uncapped `.gev-cache/terrain-heights.json`, and a live upstream call, with
-  nothing limiting the rate. The point cache now holds at most 50,000 entries
-  and evicts oldest-first, a cache file above
-  24 MB is not read back, and the route is limited to 90 requests/minute per
-  client (270 global). Evicting a point costs one refetch, never a wrong
-  answer, since terrain does not move. Ordinary use is unaffected: a full
-  `test:track` run drives 10 requests, peaking at 8/min (daikaginza, #686).
diff --git a/changelog.d/761-dev-unwatched-runtime-dirs.md b/changelog.d/761-dev-unwatched-runtime-dirs.md
deleted file mode 100644
index d3aaf0a91..000000000
--- a/changelog.d/761-dev-unwatched-runtime-dirs.md
+++ /dev/null
@@ -1,5 +0,0 @@
-- The dev server no longer watches `.gev-cache` and `.gev-logs`. Providers write
-  cache files and logs there while the app runs, and none of it is source, so
-  the watcher now skips it; this guards against the DNS-lookup delays heavy
-  cache writes have caused, though no difference was measured on current main
-  (monwiss, #761).
diff --git a/changelog.d/767-alpha5-catalog-numbers.md b/changelog.d/767-alpha5-catalog-numbers.md
deleted file mode 100644
index 8a96698a1..000000000
--- a/changelog.d/767-alpha5-catalog-numbers.md
+++ /dev/null
@@ -1,11 +0,0 @@
-- Read satellite catalog numbers written in Alpha-5, the TLE spelling of
-  numbers above 99999: a letter for the first two digits, skipping I and O
-  (`A0000` is 100000, `Z9999` is 339999). The satellites layer converted such a
-  field to `NaN`, so every Alpha-5 satellite shared one catalog entry and all
-  but the first were dropped as duplicates; the satellite tools read the same
-  field as no number, so such a satellite could not be found by it. The layer
-  and the tools now decode the field in `src/sources/tle.js`, and reject a
-  malformed one (a sign, decimal point, hex, embedded space or stray letter)
-  instead of reading part of it as a number. This is Alpha-5 TLE
-  compatibility: CelesTrak's TLE feed carries no satellite above 99999, which
-  needs the OMM feed (#1191) (Honorius Neogy, #767, fixes #751).
diff --git a/changelog.d/787-changelog-fragments.md b/changelog.d/787-changelog-fragments.md
deleted file mode 100644
index 41509c046..000000000
--- a/changelog.d/787-changelog-fragments.md
+++ /dev/null
@@ -1,7 +0,0 @@
-- Changelog entries are now one file per pull request. A change adds
-  `changelog.d/<pull request>-<slug>.md` instead of editing the top of
-  `CHANGELOG.md`, which two pull requests in flight could not share — it was the
-  most frequent merge conflict in the open queue, and for six of them the only
-  one. `npm run changelog` splices the directory into `CHANGELOG.md` at release
-  time and empties it; `npm run changelog:check` reports the batch and changes
-  nothing. Fragment text is copied through unchanged (daikaginza, #787).
diff --git a/changelog.d/816-radio-owner-restoration.md b/changelog.d/816-radio-owner-restoration.md
deleted file mode 100644
index df38617ee..000000000
--- a/changelog.d/816-radio-owner-restoration.md
+++ /dev/null
@@ -1,7 +0,0 @@
-- Close the compact Radio disclosure when an adaptive tactical right-rail
-  restore directly expands Context, before Space Missions can be covered.
-  A repeated Context-open request also clears stale disclosure state.
-  Real PanelChrome constructor wiring and the rail reflow path are covered
-  by focused regressions. Credits: kvnloo (#816), raysung-2026's original
-  #804 report, asturksever's review, and quanticsoul4772's independent
-  Windows diagnosis.
diff --git a/changelog.d/872-gemini-live-voice.md b/changelog.d/872-gemini-live-voice.md
deleted file mode 100644
index 519e4d37b..000000000
--- a/changelog.d/872-gemini-live-voice.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Add optional Gemini Live voice to the standalone app, with a provider chooser,
-  server-held API key, microphone streaming, shared map actions and captions.
-  Switching providers ends the old conversation and preserves the input mode
-  (Manjunath, #872).
diff --git a/changelog.d/880-world-packet-boundary.md b/changelog.d/880-world-packet-boundary.md
deleted file mode 100644
index 7ee574e35..000000000
--- a/changelog.d/880-world-packet-boundary.md
+++ /dev/null
@@ -1,6 +0,0 @@
-- Extract a reusable model-free World Packet from the existing voice
-  `get_current_view_state` owner without restoring disabled layers to the
-  model context. Keep the enabled-only payload, disabled-layer count, source
-  provenance, action result and view-state contract; read the layer roster once
-  per packet; voice retains the speech/card envelope at its own boundary.
-  Credits: original GEV voice/layer contributors and #880 implementation.
diff --git a/changelog.d/945-cctv-vegvesen-kartverket-heights.md b/changelog.d/945-cctv-vegvesen-kartverket-heights.md
deleted file mode 100644
index 1572c0316..000000000
--- a/changelog.d/945-cctv-vegvesen-kartverket-heights.md
+++ /dev/null
@@ -1,17 +0,0 @@
-- Give each Statens vegvesen camera its own ground height from Kartverket's
-  keyless point-height API (CC BY 4.0) instead of one flat 150 m prior, so
-  mountain-pass cameras no longer sit hundreds of metres below the terrain
-  where neither the point-height prior nor the ground snap resolves. About 850
-  of ~855 cameras get a height; the rest keep the old prior. Requests carry 20
-  points, the most the API answers from its 1 m terrain model, eight at a
-  time; a cold lookup takes about 6–13 s. Cameras over water use the water
-  surface rather than the sea-floor depth the API returns there; for bridge
-  cameras that is still below the deck. Heights are cached for good and misses
-  for 6 h, so a refresh only asks about new or moved cameras. After a
-  failing request (a 408, 429 or 5xx, a network error, a request over 10 s or
-  an unreadable body) the lookup stops and backs off (Retry-After, else
-  30 min, longer than the refresh). The lane waits at most 12 s from its
-  start, and only on a cold cache; a slower first lookup leaves the cameras it
-  had not reached on the flat prior until the next 15-minute refresh, and
-  keeps filling the cache meanwhile.
-  `CCTV_VEGVESEN_HEIGHTS=0` turns it off. Follow-up to #929 (trygvehhh, #945).
diff --git a/changelog.d/970-recent-imagery-details-scroll.md b/changelog.d/970-recent-imagery-details-scroll.md
deleted file mode 100644
index 761e265c0..000000000
--- a/changelog.d/970-recent-imagery-details-scroll.md
+++ /dev/null
@@ -1,3 +0,0 @@
-- Recent Imagery: opening DETAILS scrolls its card into view when it opens below
-  the fold. The panel used to restore the previous scroll position right after
-  the reveal, so the card stayed out of sight (Ian Blenke, #970).
diff --git a/changelog.d/973-tomtom-cross-site-gate.md b/changelog.d/973-tomtom-cross-site-gate.md
deleted file mode 100644
index e4a029406..000000000
--- a/changelog.d/973-tomtom-cross-site-gate.md
+++ /dev/null
@@ -1,4 +0,0 @@
-- Cross-site browser requests can no longer spend the TomTom traffic-tile
-  budget through `/api/tomtom/*`. The shared same-site gate runs before status,
-  cache, and upstream work; same-origin app requests and non-browser local
-  callers remain supported (Sunil56224972, #973).
diff --git a/changelog.d/974-street-level-slim.md b/changelog.d/974-street-level-slim.md
deleted file mode 100644
index 8bc2b5346..000000000
--- a/changelog.d/974-street-level-slim.md
+++ /dev/null
@@ -1,6 +0,0 @@
-- Street Level is rebuilt around one small provider registry: Mapillary,
-  KartaView, Panoramax and Google Street View share one coverage drawer and
-  one photo viewer, one source lit at a time. Floating and docked panels,
-  FOLLOW, surface modes, the legend and the Mapillary proxy's disk cache are
-  gone; `.gev-cache/mapillary/` from earlier runs is no longer read and can be
-  deleted (gekh, #974).
diff --git a/changelog.d/975-terrain-cross-site-gate.md b/changelog.d/975-terrain-cross-site-gate.md
deleted file mode 100644
index 6c0e42156..000000000
--- a/changelog.d/975-terrain-cross-site-gate.md
+++ /dev/null
@@ -1,8 +0,0 @@
-- Cross-site pages can no longer fill the terrain-height cache or spend the
-  visitor's own `/api/terrain/heights` rate-limit quota through the visitor's
-  browser. The route refuses a cross-site `Sec-Fetch-Site` or a foreign or
-  opaque `Origin` before rate limiting, cache access or upstream work. Unlike
-  the cost-bearing routes it still answers same-origin requests that arrive
-  through a reverse proxy, so terrain keeps rendering behind nginx, Caddy or
-  Cloudflare instead of falling back to the geoid (Sunil56224972, daikaginza,
-  #975).
diff --git a/changelog.d/990-hong-kong-cctv.md b/changelog.d/990-hong-kong-cctv.md
deleted file mode 100644
index a150b66ae..000000000
--- a/changelog.d/990-hong-kong-cctv.md
+++ /dev/null
@@ -1,7 +0,0 @@
-- Add Hong Kong Transport Department traffic snapshot cameras as a keyless CCTV
-  source pack: the public DATA.GOV.HK English locations XML, frames pinned to
-  `tdcctv.data.one.gov.hk`, with DATA.GOV.HK Terms of Use attribution. By
-  default nearly the full TD catalog (~1,013 cameras; cap 1,100) loads,
-  prioritized across Hong Kong Island, Kowloon and the New Territories. Headings
-  use the shared id-hash fallback at low confidence. `CCTV_HK_MAX_SOURCES` sets
-  the cap (8–1,200) and `CCTV_HK_ENABLED=0` turns the pack off (JCY2515, #990).
diff --git a/compose.yaml b/compose.yaml
index c2d3bf3d4..38cf438ca 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -22,5 +22,8 @@ services:
       # UI land in the .env on your host instead of vanishing with the
       # container. node_modules stays in the image: sharp and friends are
       # compiled for Linux and must not be shadowed by a host install.
-      - .:/app
+      # `:z` relabels the checkout for containers on SELinux hosts (Fedora,
+      # RHEL); without it the container cannot read /app at all and Node
+      # reports the launcher as "Cannot find module". Elsewhere it is ignored.
+      - .:/app:z
       - /app/node_modules
diff --git a/docs/CODE-BOUNDARIES.md b/docs/CODE-BOUNDARIES.md
index 9085a7b72..efc7b86bc 100644
--- a/docs/CODE-BOUNDARIES.md
+++ b/docs/CODE-BOUNDARIES.md
@@ -81,8 +81,6 @@ moves it. Do not label all ingestion modules platform-independent by filename.
 | --------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------ |
 | `src/data/manager.js`                               | Lifecycle/panel compatibility and existing tests; normal assembly constructs lifecycle and presentation separately |
 | `src/data/<layer>.js`                               | Legacy default instances; new assembly calls layer factories with supplied sources                                 |
-| `src/data/localGeojson.js`                          | Infrastructure compatibility factories; catalog imports services from `src/app/localGeojsonServices.js` directly   |
-| `src/app/sourceSlot.js`                             | Re-export for direct callers/tests; portable slot ownership is `src/sources/sourceSlot.js`                         |
 | `src/app/sources.js`, `src/services/application.js` | Existing default/override API; current application construction supplies its own instances                         |
 | `server/providers/local.js`                         | Existing Node composition barrel and provider helper re-exports                                                    |
 
@@ -600,6 +598,10 @@ state subscriptions retain their existing event contract.
   tracking handoff. It reads Cockpit admission and uses supplied tracking operations.
 - `ui/share-restoration` owns the initial restore transaction, layer coordinator,
   status notices and gesture/timer cleanup.
+- `share/view-codec` is the share-link codec (`decodeShareView`,
+  `encodeShareView`). It is pure (no DOM, no Cesium), so a host's server can
+  read a `/share/<code>` link, for example to describe it in link previews.
+  `share/link-path` reads and builds the `/share/<code>` address itself.
 - `ui/visual-settings` owns style preferences, detection overrides, display inputs
   and IR cleanup. Its engine services and panel operations are explicit.
 - `ui/panel-chrome` owns disclosure, docking, collapse preferences and temporary
diff --git a/docs/CURRENT-STATE.md b/docs/CURRENT-STATE.md
index ede889fdc..33677e05f 100644
--- a/docs/CURRENT-STATE.md
+++ b/docs/CURRENT-STATE.md
@@ -1,5 +1,31 @@
 # God's Eye View Current State
 
+Docker Compose mounts the checkout with the shared SELinux `:z` label so
+containers can read it on enforcing SELinux hosts. The separate image-owned
+`node_modules` volume and loopback-only port publishing remain unchanged.
+
+The HUD's LAT/LON degrees-minutes-seconds readout rounds the coordinate once, to
+hundredths of a second, and then splits it. A value within 0.005" of the next
+whole minute carries into the minutes and degrees, so `-122.35` reads
+`122°21'00.00"W` rather than `122°20'60.00"W`. The field widths and hemisphere
+letters are unchanged.
+
+Aircraft detection candidates reuse normalized display text until callsign or
+registration changes, including in-place enrichment. Each candidate resolves its
+fleet model once per collection. Positions, model ownership and tracked-aircraft
+anchors remain live on every collection; contact admission is unchanged.
+
+Civil aircraft share one delayed render timestamp per fleet update. Extrapolated
+fixes reuse their local coordinate frame until their coordinates change, including
+in-place ground-height corrections. Update cadence, contact counts, interpolation,
+turn rates and tracked-aircraft motion are unchanged. Cached frames are weakly
+keyed by each position fix and do not retain retired history.
+
+Touch-first devices use three times the default Cesium zoom sensitivity, so
+pinching traverses globe and street scales with fewer gestures. Cesium retains
+its distance-aware zoom, collision handling and minimum/maximum distance limits.
+Fine-pointer desktop mouse and trackpad sensitivity is unchanged.
+
 Analyst region queries resolve unique Natural Earth names offline without
 geocoding, so Gold Coast and Ivory Coast name the West African natural regions.
 Duplicate names require a geocoded containment anchor; when several entries for
@@ -9,13 +35,7 @@ broader suffix variants. Follow-ups retain boundary provenance, and cancelled
 lookups preserve the previous analyst cohort and boundary source. Navigation
 search keeps a successful geocode, with no search or view-based region recovery.
 
-Overpass reserves each normalized query before its disk-cache lookup. The
-initial disk lookup, upstream quota admission, fetching and memory publication
-are coalesced under that reservation. A caller that joined a reservation
-rejected by another client's quota retries admission with its own quota.
-Stale fallback runs per response after the reservation is released, and disk
-writes finish asynchronously. Settled and rejected reservations are removed
-only while they still own their map entry.
+Manager-owned periodic network updates pause while the document is hidden. Returning to a visible tab runs one overdue update per enabled layer without overlapping an active refresh and restarts that layer's polling schedule from the return, so the next poll follows one interval later whether or not the catch-up update succeeds; explicit refresh requests remain available. Transit also defers camera-driven feed admission while hidden and rechecks coverage on return. Visibility listeners are released with their polling intervals.
 
 Terrain height requests accept at most 64 points, matching the browser service's
 existing batch size and one bounded upstream chunk. Larger requests return HTTP
@@ -176,6 +196,23 @@ Regression coverage lives in `src/tools/area.test.mjs`,
 `src/tools/queries/environment.test.mjs` and
 `src/layers/perimeters/cards.test.mjs`.
 
+## Scope display controls
+
+Display's native Scope checkbox defaults ON with feather at 100%, adjustable
+from 0–200%. OFF disables the slider while retaining its value. HUD layout
+changes preserve both settings; share links and scenes restore them. The
+historical missing-`scf` fallback remains 35%; explicit 0% keeps the hard edge.
+
+With Scope OFF, Tactical, Operator and Minimal add text-sized black backplates
+at 70% opacity behind telemetry, vertical metadata and scene chrome. Original
+HUD text color, glow and opacity are preserved. Scope OFF brightens the tagline
+and Active Style label with the shared secondary text color. The title plate
+covers the eye and title without moving the title or tagline. Scope ON retains
+the original HUD presentation; Cyber retains its existing skin.
+
+`node scripts/qa-scope-hud.mjs` checks native input, range, layout persistence,
+restoration and both Scope presentations. `QA_SCREENSHOT_DIR` saves screenshots.
+
 ## Cyber HUD — September 30, 2026
 
 Display > HUD > Layout includes Cyber, also available through the HUD voice
@@ -286,6 +323,10 @@ catalog construction owns each instance.
 Wind animates one forecast without advancing forecast time. Separate Weather
 observation layers provide radar and satellite history; none claims measured cloud volume.
 Weather imagery releases its camera move listener on disable and registers it once on re-enable. Disabling also clears active imagery work.
+A staged weather frame with loaded tiles and no pending requests rechecks
+readiness on a single 150 ms wake timer instead of requesting every render.
+The existing readiness conditions and two settled frames still govern promotion;
+completion, cancellation, replacement and teardown clear the wake timer.
 Weather imagery drapes onto the globe basemap. On photorealistic 3D Tiles each
 observed product is instead a raised, translucent shell: one rectangle over the
 product bounds at a fixed height (global infrared 5.5 km, regional infrared
@@ -411,6 +452,9 @@ Cyclones combine fixed NHC/CPHC status and summary GIS endpoints through a bound
 same-origin provider. The status endpoint lacks browser CORS; each installation
 fetches keyless public sources at runtime, with no centralized ingestion service.
 The five-minute snapshot covers Atlantic and eastern/central North Pacific only.
+Classification labels follow NHC status codes: `PC` is a potential tropical
+cyclone, `PTC` a post-tropical cyclone, and `STS`/`STD` a subtropical
+storm/depression. Unknown codes remain visible unchanged.
 Current positions, advisory issue time and position time stay distinct. NHC may
 release an advisory before its nominal time (routinely up to about 30 minutes,
 rarely about an hour), so advisory issue and position times up to and including
@@ -423,6 +467,8 @@ than relabeling older geometry. The cone represents forecast center uncertainty,
 not storm size or the full hazard area. Successful empty and unavailable states
 are distinct. One owned native Cesium data source preserves polygon holes and
 geographic seams and releases on disable; forecast animation is not implied.
+NHC movement speed is converted from miles per hour to rounded knots by the
+proxy; advisory wind intensity is already in knots and is passed through.
 Cyclone markers, labels, tracks and cones are hidden beyond the horizon on every map source.
 Consult the linked official advisory for safety decisions.
 
@@ -459,6 +505,14 @@ than a reading. Heading keeps its existing separate check for its own sentinel.
 Genuine readings are unchanged, including a stopped vessel's zero and the
 highest speed and course the fields can encode.
 
+For an already tracked vessel, AISStream static messages update name, type,
+destination and IMO without changing its position, motion, fix timestamps,
+position freshness or trail. Non-empty static values replace earlier values;
+omitted, empty or unavailable fields retain known metadata across Class B's
+separate reports and in the cache used by the next position update. Position
+reports still prefer their own metadata name. Invalid Class B parts are ignored;
+absent fields prefer the latest live value over the static cache.
+
 Native `<select>` controls declare a dark colour scheme and explicit option
 colours, so the browser-painted option list matches the panel it drops out of.
 The scheme is declared on the controls rather than on the document root, so
@@ -517,6 +571,36 @@ replacement session; audio meters release failed initialization and reject revok
 frames. Delayed action results and post-capture continuations cannot resume a
 stopped conversation or send output into a replacement. See [voice ownership](VOICE-OWNERSHIP.md).
 
+The opt-in voice panel shares Preview and Voice Settings, with browser-local
+Preview and inactivity preferences. Voice-requested timeout changes apply directly
+without a confirmation question; results distinguish a live change from a saved
+browser preference. `set_voice_inactivity_timeout` accepts integer minutes from 1–60,
+or 0 for None. Named `voice-settings` and `voice-preview` panel targets exit
+Cockpit before opening the requested voice UI. `control_cockpit` also accepts
+`voicePanel: "preview" | "settings"` for an explicit exit-and-show request.
+Newer manual choices, Stop and provider replacement prevent an older operation
+from revealing its UI. Ambiguous requests to open settings ask whether the user
+means Voice Settings or Provider Settings before opening either panel. Named
+Voice Settings applies directly; Provider Settings opens the existing local
+provider dialog when available. Visual Presets targets the visual controls tray,
+while Scenes targets saved scenes. Selecting Preview does not enable a disabled
+Preview preference. Unverified speech captions use the localized Recent
+speech label; ordinary user captions retain YOU. Caption attribution does not
+control tool dispatch.
+
+Voice inactivity waits for local input, output and actions to become quiet.
+A matching OpenAI response that explicitly completes without audio can restore
+idle eligibility; completion of an audio response does not prove playback has
+drained. Missing or ambiguous output evidence remains conservative. Gemini
+retires its per-audio observer wrappers on close, replacement or session end,
+so repeated Stop/Start does not retain old audio instances until the panel closes.
+The panel keeps the model tier and regular cost estimate in Voice Settings;
+warning, capped and unknown cost states also appear in the dock heading when
+Settings is closed. The existing hard cost cap still stops the session and
+announces the reason.
+
+Automatic Voice Preview uses output from the active mounted provider, including late replies that may answer an older request. Manual panel choices remain until genuine local input rearms automatic presentation. Preview stays off when disabled, remains hidden in Cockpit, and retires on Stop or provider replacement. Display events do not grant command authority.
+
 Contacts nearest-aircraft follow-ups retain the snapshot's distance basis even
 after the camera moves. An explicit new scope replaces that basis. Provider
 instructions require an analyst query for requested lists and use the requested
@@ -531,6 +615,9 @@ to layer toggles, fly_to_location, frame_overhead, select_nearest_aircraft,
 get_entity_context, annotate_map and analyst_query. Analyst speech and the card
 share one deterministic count/scope headline; lower bounds use "At least" and
 partial answers name the unanswered layers. `get_current_view_state` lists enabled layers only.
+FIRMS and ALPR entity labels remain English in shared context and tool data;
+voice-card titles and pointer presentation translate those known labels at display
+time, while arbitrary names and callsigns remain unchanged.
 The model-free `gods-eye-view/agent/world-packet` export exposes
 `getWorldPacket({ viewer, styleManager, dataManager, sceneDirector })` to
 non-voice consumers. It reads the same enabled-only state and feed
@@ -750,6 +837,12 @@ transports and cancellation through response parsing. Stop and application
 teardown abort pending connections; reconnect requests a new client secret.
 Microphone, radio handoff, tool schemas and default model behavior are preserved.
 
+Coordinate search accepts whitespace-separated decimal degrees with prefix or
+suffix hemisphere letters, including `40.7128 N 74.0060 W`. Components require
+an actual separator and an unambiguous hemisphere assignment; malformed numeric
+fragments and scientific notation fall through to geocoders instead of becoming
+exact coordinate results.
+
 Geospatial lookups are composed through `src/search`: forward/reverse geocoding,
 text/nearby search and routing use configurable providers/endpoints. Annotation,
 HUD and voice consumers share the configured service. Existing Google/Photon
@@ -1051,6 +1144,10 @@ Shot selection updates the highlight without replacing the row, preserving
 native double-click rename. Replacing rows revokes their old listeners. Disposal stops controls immediately;
 late file and failed-action completions cannot update removed presentation.
 
+Director clock listeners, interaction observers and scene release failures no
+longer leave the director inconsistent, and a phase error is kept when cleanup
+also fails.
+
 ## Cockpit component ownership
 
 Cockpit presentation is separated from its camera/controller behavior. Existing
@@ -1269,6 +1366,8 @@ Stopping the controller revokes animation before asynchronous UI teardown; final
 destruction removes its stages and restores the borrowed bloom configuration.
 Snow's sideways sway stays within a fixed range at any session age; Wind scales
 its amplitude.
+Sharpen runs only when enabled with intensity above 0.001. At slider zero its
+stage is disabled; raising the slider resumes it when sharpen is enabled.
 
 ## Display control ownership
 
@@ -1499,7 +1598,11 @@ camera is refused there with a JSON 404 and is served solely through
 ## GBFS upstream bounds
 
 Station information is normalized in `src/sources/gbfsStations.js` for both the
-globe layer and `get_bike_share`. Names accept legacy strings or GBFS v3 Localized
+globe layer and `get_bike_share`. Stations with missing, blank, nonnumeric or
+out-of-range coordinates (latitude outside ±90, longitude outside ±180) are
+skipped. Numbers and nonblank numeric strings are accepted, including genuine
+zero and the `latitude`/`longitude` aliases; other JSON types are rejected.
+Names accept legacy strings or GBFS v3 Localized
 String arrays regardless of the reported feed version. Nonempty English text
 (including regional `en-*` tags, case-insensitive) takes precedence, then the first
 usable translation. An unusable `name` falls back to `short_name` with the same
@@ -1669,6 +1772,14 @@ The TomTom `/api/tomtom/*` routes run the shared same-site admission gate before
 status, cache or upstream work, refusing cross-site browser requests while
 preserving same-origin app requests and non-browser local callers. The browser
 layers and their rendering remain in their existing modules.
+Past the daily tile budget, or while TomTom fails, the proxy answers with its
+last copy of a tile (`x-tomtom-cache: STALE-BUDGET` / `STALE-ERROR`) however old
+it is, and every tile carries `x-tomtom-fetched-at`, the proxy fetch time
+(or the persisted cache file time after restart). The flow source keeps that mark with each decoded tile, so
+`get_traffic_flow` returns `stale` and `oldest_tile_at` and says when traffic
+may be out of date instead of presenting cached tiles as live. Pending freshness
+metadata is released when body reads fail, are cancelled, or exceed their size
+limit, as well as when a tile decodes or the source resets.
 GBFS null or empty availability counts retain an unknown value through station
 parsing and rendering; they use the neutral station color rather than reporting
 an empty dock. Explicit zero and caller-supplied numeric fallbacks remain valid.
@@ -1793,6 +1904,12 @@ supported. `.env.example` and `pinokio/_ENVIRONMENT` document both entries.
 The Street View headings tool uses the same server-first selection after
 resolving environment overrides per variable; its explicit `--key` wins.
 
+In standalone development and preview servers, a missing Google tile-token
+provider returns an uncached `204 No Content` for `GET /api/google/tiles-token`
+(and HEAD) instead of a browser-visible 404. The fallback is registered after
+real token providers and before the unknown-API handler, so existing Google
+browser keys, provider-issued tokens, and unrelated API routes remain unchanged.
+
 ## Infrastructure marker visibility
 
 Datacenter/dam registration uses fresh reusable factories with the application's
@@ -1916,6 +2033,10 @@ Updated: September 23, 2026
 
 ## Aircraft and vessel server modules
 
+OpenSky credential-file failures emit a fixed warning once per process; neither
+JSON parser excerpts nor filesystem error messages are logged. The environment
+example uses an absolute path compatible with the macOS launchers.
+
 Standalone aircraft routes now live in `server/providers/aircraft/`: OpenSky
 state vectors and regional fallback, adsb.lol military positions, ADSBDB
 enrichment and track backfill. Vessel routes and websocket/watchdog setup live
@@ -1940,6 +2061,9 @@ accessible name remains "Don't show this again". Control behavior is unchanged.
 ## FIRMS source status
 
 The FIRMS CSV parser rejects impossible acquisition calendar dates before the proxy filters records to the trailing 24 hours, while retaining valid UTC acquisition times.
+The `get_active_fires` tool reports acquisition times as UTC ISO timestamps,
+including zero-padded hours and minutes; missing or invalid dates and times
+remain `null`, including impossible calendar dates from a custom source.
 
 The FIRMS proxy records source success after appending its rows. If aggregation
 throws, that source reports failure without a contradictory success entry.
@@ -2043,10 +2167,18 @@ fetching, trailing-24-hour filtering and partial-success caching are unchanged.
 > `localStorage['gev:first-run-mission:v1'] === 'suppressed'`, written **only**
 > by the "Don't show this again" checkbox → the per-session
 > `sessionStorage['gev:first-run-mission-session:v1'] === 'dismissed'`, written
-> by **every** close path (mission, Explore, ESC). So it returns each fresh
-> browser session until the visitor ticks the box; clearing storage un-ticks it,
-> which is accepted. Both stores fail open — an unreadable store still shows the
-> launcher rather than silently swallowing first launch.
+> by **every** close path (mission, Explore, ESC, the footer dismiss button). So
+> it returns each fresh browser session until the visitor ticks the box; clearing
+> storage un-ticks it, which is accepted. Both stores fail open — an unreadable
+> store still shows the launcher rather than silently swallowing first launch.
+>
+> **The footer dismiss button is the keyboardless ESC.** Phones and tablets have
+> no ESC key, so the footer hint is a `data-first-run-dismiss` button that calls
+> the same `dismiss()` as ESC. It stays visible at every width (phones used to
+> hide it, leaving a mission as the only way out) and reads DISMISS on a
+> `(hover: none) and (pointer: coarse)` screen, "ESC to dismiss" otherwise. Its
+> 44px touch target is a `::before` outside the layout, so the footer row keeps
+> its one-line height.
 >
 > **What a mission may persist (do not "simplify" this).** Layer enablement is
 > durable in this app (`gev:layer-state:v2`, written by
@@ -2107,6 +2239,16 @@ fetching, trailing-24-hour filtering and partial-success caching are unchanged.
 > always exits non-zero, `1` meaning the control is healthy and `2` meaning it
 > is not. Plus the unit pins above.
 
+> **2026-10-24 — a turned-off layer's memory is released:** Cesium 1.138
+> keeps the draw commands past each frame's count in the opaque and other
+> per-pass arrays (`View.frustumCommandsList`) and in the offscreen pick view,
+> so a turned-off layer's entities stayed reachable (Data Centers kept 116
+> MiB). `src/sceneCommandRelease.js`, installed in `src/app/tools.js`,
+> requests one frame through `governorRequestRender` after every layer
+> disable and then trims those arrays. It reads private Cesium fields;
+> `src/sceneCommandRelease.test.mjs` pins them and fails if Cesium renames
+> them or changes which passes it truncates.
+
 > **2026-08-08 — performance waves 1+2:** the app idles via an explicit render
 > governor (`src/renderGovernor.js` — hold/release from every per-frame
 > animator; discrete mutators call `governorRequestRender`). Any NEW
@@ -3595,7 +3737,7 @@ test:track` 43 tracking invariants · headless QA harnesses under
 
 ### Interface localization (October 2026)
 
-Shipped locales: **en** (source and fallback), **es**, **ru** and **zh-CN**. The code lives in
+Shipped locales: **en** (source and fallback), **es**, **ru**, **zh-CN** and **zh-Hant**. The code lives in
 `src/i18n/`. How to mark UI text: [`docs/I18N.md`](./I18N.md); translator workflow:
 [`docs/TRANSLATORS.md`](./TRANSLATORS.md).
 
@@ -3606,8 +3748,8 @@ Shipped locales: **en** (source and fallback), **es**, **ru** and **zh-CN**. The
   value). English has no catalog; every other locale is
   `src/i18n/locales/<code>.json`, and a missing entry falls back to English.
 - **Locale choice.** `?lang=` → stored choice (`gev:locale:v1`) →
-  `navigator.languages` → English. Chinese tags map to `zh-CN`; tags containing
-  `Hant`, `TW`, `HK` or `MO` are skipped. `?lang=` is not stored, and share links drop
+  `navigator.languages` → English. Chinese tags default to `zh-CN`; Traditional Chinese tags
+  select `zh-Hant`. Explicit `Hans` selects `zh-CN` regardless of region. `?lang=` is not stored, and share links drop
   it, so a recipient keeps their own language. The globe picker in the
   bottom-right corner (`src/ui/localePicker.js`) stores the choice, drops
   `?lang=` (keeps it only when storage is blocked) and reloads. It asks first
@@ -3685,6 +3827,7 @@ its criteria cannot be silently ignored.
 | Street Level 📷 | Mapillary street-level imagery (vector tiles, Graph API, MapillaryJS) | `src/layers/streetLevel/` via `src/app/layers/streetLevel.js` | `/api/mapillary/status`, `/api/mapillary/tiles/coverage/{z}/{x}/{y}` (`MAPILLARY_CLIENT_TOKEN`) | camera-driven (320 ms debounce, ≤9 tiles, server memory cache 24 h) |
 | Wind 🌬                 | NOAA GFS 10 m wind (keyless, 0.25°→1° grid; animated particles)                                                                                                                                 | `src/data/wind.js`                                    | `/api/wind`                                              | 1 h (forecast cycle)                                                              |
 | GNSS Integrity 📡 (`gnss-integrity`) | adsb.lol point snapshot, low navigation accuracy binned per 0.5° cell (GEV NIC/NACp threshold + gpsjam.org formula and bands, keyless, ODbL) | `src/layers/gnss/` via `src/app/layers/gnss.js` | `/api/gnss-integrity` | camera-driven (600 ms debounce, minimum 2.5 s between reads) + 60s poll (server cache 60 s; 30 min rolling window) |
+| S2 GhostMaps 👻 (`s2-ghostmaps`) | S2 Underground's public GhostMaps repository on GitHub (KMZ intel products, keyless, CC BY-NC-SA 4.0) | `src/layers/ghostMaps/` via `src/app/layers/ghostMaps.js` | `/api/ghostmaps/catalog`, `/api/ghostmaps/events` (server-sent events), `/api/ghostmaps/file/{product}` | branch head checked every 15 s; new commits pushed to the page; 5 min catalog backstop |
 | Fire Perimeters 🔥 | NIFC WFIGS current interagency perimeters (keyless, paged past the 2000-record cap); InciWeb catalog + incident page origin and update time checks for verified incident-page links | `src/layers/perimeters/` via `src/app/layers/perimeters.js` | `/api/fire-perimeters` + `/api/fire-perimeters/inciweb/*` | 5 min (server caches: catalog 1 h; publication 30 min) |
 
 GNSS Integrity samples a 250 nm circle around the Earth point under the screen
@@ -3731,6 +3874,10 @@ disabled. With it, coverage draws as z11–14 sequence lines below 60 km; the pr
 tiles (12 MB → ~80 KB) and shares one upstream fetch between concurrent
 requests for a tile.
 
+Line coverage accepts a provider’s numeric `zoomFor` result or its legacy
+`{zoom, kind}` shape. Overview levels and invalid zooms show the zoom-in hint
+instead of silently requesting no tiles.
+
 Coverage is z11–14 sequence lines below 60 km; above that nothing is drawn and
 the panel says to zoom in. Tiles come from the visible ground within range of
 the camera, nearest first, at most 9 (the halves of a view across
@@ -3763,6 +3910,8 @@ reports it (`keyAlternatives`), and the panel's KEY REQUIRED, its coverage
 line and the layer row's tooltip say to light it. The
 viewer sits under the header with EXPAND, FIT/FILL and close above the
 image. SINCE is a stepped slider whose readout names the cut-off date.
+The viewer caption's bearing wraps after rounding to whole degrees, so a view
+facing 359.5° or more reads `0°` rather than `360°`.
 
 MapillaryJS loads on the first photo. Opening one frames it with a single
 camera flight through the application's deferred navigation (`begin` /
@@ -4025,6 +4174,10 @@ routing it shows `Routing…`, and a router miss reads
 The layer holds continuous render only while a route is drawn (the dashes
 animate). Disable clears all state.
 
+At the metre/kilometre boundary, route distance labels use the rounded
+ten-metre value to select the unit, switching to kilometres at 995 metres;
+a 996-metre leg displays as `1.0 km` rather than `1000 m`.
+
 **Keys needed: none.** Directions works on a keyless boot, and the layer is off
 until the operator turns it on.
 
@@ -4077,6 +4230,13 @@ and as the last line of the list, because the arrival step is among the ones
 dropped. A route of exactly 200 is complete, and a roundabout exit after the
 200th keeps folding into it.
 
+Directions ramp and exit text uses “on the left/right” only for a bare side;
+slight and sharp modifiers read as “slightly/sharply left/right”. Lane instructions
+name the left or right lane. The localized page and proxy English stay in sync.
+
+Route duration labels select their unit after rounding seconds, switching to
+minutes at 59.5 seconds; a 59.6-second leg displays as `1 min`, rather than `60 s`.
+
 A step's card opens from its dot on the globe or from its line in the list, and
 the list covers every step including departure and arrival, which have no dot.
 What a card needs is a resolved ground anchor: a step whose ground cell has not
@@ -4189,7 +4349,9 @@ to 0.45 at two minutes, 0.20 at ten minutes and 0.08 at fifteen minutes.
 
 **Cards and DETECT.** The card presents route, mode/operator, displayed motion,
 display delay and newest-report age, reported speed/stop, vehicle ID, and
-available trail duration. Its anchor follows the rendered marker; text is
+available trail duration. Report age is rounded to whole seconds and stays in seconds while that rounded
+count is below 90; otherwise it shows completed minutes calculated from the
+rounded second count. Its anchor follows the rendered marker; text is
 checked at 4 Hz and published when it changes. DETECT labels retain route,
 mode and motion, with the selected label suppressed beside its fuller card.
 Candidate membership changes on revisions, coalesced at 4 Hz; paints read
@@ -4217,6 +4379,8 @@ animation. Polls, surface completions and trail fades request individual renders
 Disable clears vehicles, detection references, requests, timers and holds;
 destruction also releases collections and registrations.
 
+The `scripts/qa-layer-visibility.mjs` gate uses the development-only registration seam and real browser tab visibility to prove periodic work pauses while hidden, explicit refresh still works, resume performs one overdue refresh, and disabled layers stay stopped.
+
 **Acceptance harness.** Run against an already running development server:
 
 ```sh
@@ -4303,6 +4467,9 @@ silent for five minutes are removed. Credits appear when the feed is used.
 coordinator, but it is not a user-visible Data Layers entry. Its visible entry
 point is the right-side `CONTEXT` chooser's `CONTACTS` mode.
 
+Contacts distance labels select metres or kilometres after rounding to the
+nearest metre, so a 999.5-metre contact displays as `1.0 km`, not `1000 m`.
+
 At global scale, ambient Radio cluster badges are hard-opacity shared-host
 entries: count/category updates and identity replacement do not run keyhole or
 enter/exit ramps. Shared collision, viewport rejection, allocation, and horizon
@@ -4569,7 +4736,7 @@ current route throughout enabling, enabled, disabling, and uncertain lifecycle
 renders. Both routes preserve Radio power, playback, station, filter, and volume
 state.
 
-Bundled datasets live in `src/data/local_data/` with per-folder provenance READMEs; they are lazily loaded via `src/data/localGeojson.js` (Vite `?url` assets) when toggled on.
+Bundled datasets live in `src/data/local_data/` with per-folder provenance READMEs; they are lazily loaded via `src/data/localGeojsonCore.js` (Vite `?url` assets) when toggled on.
 
 A bundled dataset that fails to load is a broken install, not a blip, so it is
 never swallowed: `localGeojson.js` guards `response.ok`, reports `error` +
@@ -4601,6 +4768,7 @@ silently demoting every later lookup for the session.
 - Selected AIS vessels use their layer-owned full-detail presentation model in the shared world-overlay host; mapped installations promote their own entry to a selected card. Both remain crisp above post-processing without duplicate selected labels; non-selected AIS cards retain their source-owned grid/visibility selection and are host-batched with other world cards.
 - Space Mission ascent replay uses the compact rocket/thrust overlay only through orbit insertion. Once the replay enters its orbit phase, that vehicle glyph is replaced by a fixed-size cyan dot following the same orbit path and callout.
 - While a subject is selected, an inner keyhole compass rotates against camera heading and up to three cyan shafted bearing arrows lock to its single faint tick-marked rim, with their labels inset just inside the circle. Labels explicitly separate the geographic bearing (`BRG`) from the contact's reported course (`CRS`) so the pointer direction is not confused with aircraft heading. They point toward the nearest observed/mapped examples; each cohort displays up to ten examples while retaining the complete locally loaded in-range cohort for navigation, with three visible at a time and a ten-second page rotation shared by the panel and arrows. This distinct neutral-context color avoids implying that all context indicators are military-flight symbols. `PREVIOUS`, `FOCUS`, and `NEXT` controls navigate selection history or the next nearby cohort example through the existing tracker. NEXT uses a cycle-scoped visited set and starts a deterministic new walk after exhausting the current candidates instead of re-admitting the nearest visited contact.
+- Awareness `BRG` and `CRS` labels wrap after rounding to whole degrees, so a direction of 359.5° displays as `000°` rather than `360°`.
 - Installations are viewport-bounded OSM map features (`military=airfield|naval_base|range|barracks|base` and `landuse=military`), capped to a 10° non-dateline request and 700 upstream features. The proxy caches five minutes and serves a one-hour stale fallback. Empty, stale, unavailable, and zoom-too-wide states remain visibly distinct.
 - With a selected subject, Contacts hands the installation layer the subject position every refresh. The layer loads a window around the subject (see Installations and map-source guidance), because a follow or Cockpit camera never fires `moveEnd` and often looks at the horizon: a first load from a globe view used to leave the row at "?" for the whole track. The row and the Cockpit scope read `WITHIN 100 KM` instead of `CURRENT VIEWPORT ONLY`, and an empty window reads "none mapped within 100 km; not a complete 250 km survey". `scripts/qa-context-arrivals.mjs` flies synthetic aircraft over Camp Mabry and Fort Cavazos from a wide start, presses CONTACTS, Cockpit and SEARCH NEARBY SITES, and records a clip.
 - The selected-only visual is one static, unfilled blue circle. It marks the 250 km proximity context window only; it is not coverage or a radar/weapon envelope. Missing broadcasts and unmapped sites are explicitly not evidence of absence.
@@ -4633,7 +4801,7 @@ silently demoting every later lookup for the session.
   multi-sensor datasheets publish a capability range, not the lens's current zoom, so those
   cameras keep their estimate and show `SPEC FOV min–max° (CAPABILITY)` beside it. Public
   camera state carries `fovSource`, `specFovMinDeg`, `specFovMaxDeg` and `spec` (#452).
-- **FIRMS**: no ground clamping (zero 3D-tiles height sampling), ≤18 screen-decluttered ambient labels, click-to-inspect detail card, 2.5k/3k sprite budgets viewport-clipped by FRP.
+- **FIRMS**: no ground clamping (zero 3D-tiles height sampling), ≤18 screen-decluttered ambient labels, click-to-inspect detail card, 2.5k/3k sprite budgets viewport-clipped by FRP. Fire-power labels share display rounding before localization: one decimal below the rounded 10 MW boundary, then whole megawatts (for example, 9.96 MW reads 10 MW).
 - **CCTV v2 foundation:** a pitched
   frustum wireframe (4 corner rays + far-cap rectangle) with a monitor plane at the frustum's
   far cap, retargeting the existing video/canvas texture pipeline. Stills are drawn at their source aspect, centered on the placeholder dark (`#01070c`), instead of being stretched to the 16:9 canvas. Manual calibration only —
@@ -5010,7 +5178,7 @@ and unreachable upstream (502/504) separately from road geometry.
   - **Contact-match ties break on hex ascending.** `track_entity` is a mutation fulfilling "follow that one", and the model's observed answer to a non-ok track result is to retry with guesses rather than ask, so the lookup always commits rather than returning an ambiguity. What it owes the caller is stability: hex is unique and always present, so the same query resolves to the same contact for as long as both are loaded.
 - **Visual grounding**: at `local` view scale with no structured identity, the client captures the Cesium canvas (≤1200px JPEG, black-frame detection, double-render for freshness) and sends it as `input_image` with a strict "do not invent labels" instruction.
 - **Context window**: only the latest viewport screenshot stays in context — the client deletes the prior image item (`conversation.item.delete`) before adding a new one (images are the most expensive item, re-billed every turn). Text history is bounded by the **server-side** `truncation: { type: 'retention_ratio', retention_ratio, token_limits.post_instructions }` set in `/api/realtime/token` (cache-friendly batched truncation). There is intentionally **no** client-side per-turn conversation-item cap — deleting from the front of history each turn busts the Realtime prompt cache. A spatially-aware summarize-and-prune policy is specced for a future iteration.
-- **Model tier + spend guard** (`src/voice/voiceCost.js`, August 2026): the voice heading row carries a `STD`/`MINI` toggle and a running session-cost readout (`~$0.42`).
+- **Model tier + spend guard** (`src/voice/voiceCost.js`, August 2026): hosts without the voice panel keep the `STD`/`MINI` toggle and running session-cost readout (`~$0.42`) in the heading. Panel hosts place these controls in Voice Settings and mirror warning, capped or unknown cost states in the heading.
   - **Tier selection.** `standard` = `gpt-realtime-2` (default), `mini` = `gpt-realtime-2.1-mini` (~3× cheaper per audio token). The client sends `?tier=` to `/api/realtime/token`; the endpoint resolves it through the shared registry, so an unknown, empty, or hostile value falls back to `standard` rather than reaching OpenAI as a model id. Responses echo `X-GEV-Voice-Tier` / `X-GEV-Voice-Model` (plus `X-GEV-Voice-Tier-Fallback: 1` when a bogus tier was downgraded). Persisted at `godsEyeView.voiceCost.tier`.
   - **Applies NEXT session.** The model is fixed when the ephemeral token is minted, so a live session always keeps the model it connected with; toggling mid-session only records the preference (the button title says so). The cost tracker's lifetime is the session's lifetime and its model binding is immutable from `start()` to `stop()` — rebuilding it on toggle would erase accrued spend and let repeated toggles bypass the cap. The tracker may only be replaced once the session is FULLY SETTLED (`isVoiceSessionSettled()`: not active **and** no data channel **and** no peer connection) — `!isActive()` alone is not enough, because the `error` status reports inactive while the transport can still deliver a late `response.done`. The toggle itself reads and writes only the persisted preference, never the live tracker.
   - **Env overrides.** `OPENAI_REALTIME_MODEL` / `OPENAI_REALTIME_MODEL_MINI` remain authoritative per tier, so a drifted upstream model id is a `.env` fix rather than a code change. Because an override can point a tier at any model, the client prices against the model id the server actually echoed, **not** the tier it requested. An unrecognised id is billed at the most expensive known rates plus one console warning — under-metering is what lets a cap be overrun.
@@ -5037,6 +5205,7 @@ and unreachable upstream (502/504) separately from road geometry.
 - HUD `SUMMARY` readout requests a five-word intelligence-style summary from `/api/openai/hud-summary` (model `OPENAI_HUD_SUMMARY_MODEL`, default `gpt-5-nano`, minimal reasoning).
 - Input is the live basemap label context (place/street/nearby-place labels + enabled layers) — the model is instructed not to infer from coordinates.
 - Output is sanitized to exactly five words; falls back to the deterministic telemetry summary on error/timeout (5s abort); typewriter animation on update.
+- A summary asked for before the camera starts moving never paints over the next view: `moveStart` marks the summary dirty and bumps its revision, as `moveEnd` does, aborts the request in flight and stops a reply still typing; neither a reply nor a fallback line (on an error, the 5 s timeout, the abort, or a failed context build) paints once the revision has moved. A dropped request forgets its signature and a timeout counts as a failure, so the next 15 s tick asks again even over the same place. An interrupted typewriter reply also forgets its signature; fully displayed answers remain reusable.
 
 ### Place-search providers
 
@@ -5102,9 +5271,22 @@ HTTP refusals and outages remain retryable. Searches share a 12-second total
 deadline, with Photon requests capped at six seconds each. Caller/application
 cancellation stops retries and late cache writes. Replacing a location search
 cancels the previous lookup; disposing its controls cancels the active lookup. Photon uses a soft proximity bias, up to five
-candidates, and an unbiased retry for name mismatches. Invalid/wrapped bounds
+candidates, and an unbiased retry for name mismatches. Invalid or wrapped bounds returned by providers
 are omitted rather than framing the wrong part of the globe.
 
+A location search that finds nothing, or fails, leaves the field open with the
+query still in it, focused and selected, so it can be corrected and resubmitted
+without reopening search. The miss is shown under the field as a persistent
+`role="alert"` message ("Location not found." or "Search failed." with what to
+do next) referenced by the input's `aria-describedby`, with `aria-invalid` set;
+it is not a toast. Typing, a new search, or closing the emptied field clears it.
+A search that arrives still clears and closes the field.
+
+For request viewport bias, Photon unwraps antimeridian-crossing longitude bounds
+before computing their midpoint, then wraps that midpoint back into ±180 degrees.
+Malformed viewport bounds add no proximity bias. Nominatim omits a crossing
+request viewbox and continues searching without that geographic preference.
+
 ### Map Stack Switcher (June 2026)
 
 - `src/mapStackController.js` switches between Google Photorealistic 3D (`photoreal`, the default when a Google or ion key is present), keyless Esri World Imagery (the zero-key default landing, with keyless terrain), Bing Aerial / Aerial-with-Labels via Cesium ion world imagery (require `CESIUM_ION_TOKEN`), and OSM tile fallback. Bing Road is **retired**: it is gone from `MAP_STACKS`, from the `set_map_stack` enum, and from the voice aliases (road phrasings now resolve to OSM, the one shipped road basemap). An old `map=bing-road` link is simply an unknown id and takes `setStack()`'s existing photoreal fallback with the Google 3D tile lit — pinned live in `scripts/qa-map-source-tray.mjs`.
@@ -5169,6 +5351,7 @@ are omitted rather than framing the wrong part of the globe.
 - **A vertex is a lon/lat, and the mark is DRAPED.** Clicks are picked through `pickWorldFromScreen` — one of two scene helpers the annotation resolver factory (`src/annotations/resolver.js`) exposes alongside `sampleGroundHeight`, so the app has ONE depth-aware pick cascade rather than a second written beside it — which returns the height the pick landed on as well as the coordinate, so the live preview hangs on the roof or hillside under the pointer instead of sinking to sea level. The world renderer draws areas and routes with `clampToGround`, so the height is dropped at finish in one place (`finishSpec`) rather than being carried downstream and discarded silently: what you get is the outline you drew, lying on the surface beneath it.
 - **Draped marks classify onto `ClassificationType.BOTH`** — terrain AND 3D tiles — not onto 3D tiles alone. With only `CESIUM_3D_TILE`, every area fill, area outline, route and arrow rendered to nothing on a keyless boot, where Cesium's own globe carries Esri/OSM imagery and there are no tiles to classify against; the labels appeared and the geometry did not. That hit spoken annotations exactly as hard as hand-drawn ones. `scripts/qa-draw-tool.mjs` counts the mark's own colour in the rendered frame before and after a shape is finished, on a keyed AND a keyless server, so "the board says there is a mark" can no longer pass for "the mark is on screen".
 - **A finished area is a CLOSED ring.** The fill polygon closes itself but the outline beside it is a polyline, so an open ring drew every edge except the one back to the first vertex — a triangle with two sides. `finishSpec` repeats the first position at the end. A line is never closed: joining its ends would invent a segment nobody drew.
+- Drawn-line distance labels select metres or kilometres after rounding to the nearest metre, so a 999.5-metre line displays as `1.0 km` rather than `1000 m`.
 - **Measurements and centres are computed on unwrapped longitudes** (`unwrapLongitudes` / `wrapLongitude` in `drawMode.js`, used by `ringAreaM2`, `ringCentroid` and the engine's manual-area anchor). A ~50,000 m² rectangle straddling the antimeridian reads its 0.002° width as 359.998° under raw arithmetic: it measured thousands of square kilometres and anchored on the Greenwich meridian, half a world from the shape. Path length was already safe — haversine is periodic in the longitude delta — and a test pins that so a "fix" cannot break it.
 - **Bounds.** One shape holds at most `MAX_VERTICES` = 512 points; two clicks within 0.5 m are one vertex (that is what makes a double-click finish without leaving a stray point); a vertex that is not a finite on-globe coordinate is refused. A shape that encloses nothing is refused rather than placed: three collinear points are not an area and a line under a metre long is not a line, and the hint says which.
 - Pointer ownership: while a session is open the tool holds the single pointer claim (`claimPointer('draw')`, `src/data/inputOwnership.js`) and **every** ambient scene selection handler — the shared tracking click gesture behind flights, military and CCTV, plus vessels, satellites, launches, fires, installations, bikeshare, radio, submarine cables, the bundled GeoJSON layers and the CCTV calibration gizmo — returns before picking. A vertex over an aircraft is a vertex, not a selection.
@@ -5178,6 +5361,28 @@ are omitted rather than framing the wrong part of the globe.
 - Pure half: `src/annotations/drawMode.js` (session, minimum vertices, double-click de-dup at 0.5 m, vertex ceiling, degenerate-geometry refusal, ring closing, dateline-safe length/area/centroid, hint text). Regression surface: `src/annotations/drawMode.test.mjs` and `src/data/inputOwnership.test.mjs` (pure), `src/annotations/drawToolBehaviour.test.mjs` (the tool driven against DOM and viewer doubles — leases, borrowed input actions, teardown, the Enter key, preview heights), `src/annotations/drawTool.test.mjs` (structural: where files live, which ids the markup carries, what the docs may claim), and the rendered harness `scripts/qa-draw-tool.mjs`.
 - The annotation tree is a declared ownership group: `./annotations` → `src/annotations/index.js` in `package.json`, with its module graph listed in `scripts/package-boundaries.json`, so an annotation module reaching outside that graph is a gate failure rather than a surprise in a layer's bundle. `drawMode.js`, `drawTool.js` and their tests are in `scripts/format-scope.json`.
 
+### S2 GhostMaps (October 2026)
+
+- **What it shows.** Events ▸ **S2 GhostMaps** draws the current edition of S2 Underground's KMZ intel products from `github.com/s2underground/GhostMaps`. The products are the Common Intelligence Picture and the 30-day kinetic pull (both on by default), the Border Crisis Map, the Iran Common Intelligence Picture, Iran Kinetic Events, Yemen FLOT, and **Latest Drop**: the newest dated incident file outside those series, `0_Archive`, `Basedata` and `Reference Material`. Each product has a chip in the row. The chip choice is kept in `localStorage` (`gev.ghostmaps.products`) and falls back to the defaults when storage is blocked.
+- **Editions.** `src/layers/ghostMaps/catalog.js` (pure) matches whole repository paths per product. The newest edition wins by the date written in the file name, then by `Export_N`/`vN`. Undated names, such as the fixed 30-day file, are identified by blob sha. Files over 50 MiB are left out (the 62 MB census KMZ, for example). A renamed folder drops the product rather than matching elsewhere.
+- **Updates.** The repository is not ours, so there is no webhook. `server/providers/ghostMaps.js` starts with the first `/api/ghostmaps` request, so an install that never enables the layer never contacts GitHub.
+  - It reads the branch head from git's smart-HTTP ref advertisement (`/info/refs?service=git-upload-pack`, about 0.5 KB, outside the REST rate limit) every `GHOSTMAPS_POLL_SECONDS` (15 s by default, 5 s minimum). Failures back off from 15 s to 5 min.
+  - Only a new head costs REST calls: one recursive tree and one commit. An optional `GITHUB_TOKEN` raises the REST limit.
+  - After an upstream outage, a successful branch-head check clears the error and pushes a recovered catalog even when the commit is unchanged. Cached products stay in place; subsequent healthy unchanged checks stay silent.
+  - The new catalog goes to `.gev-cache/ghostmaps/catalog.json` and to every open page over server-sent events (`/api/ghostmaps/events`, 25 s heartbeat, at most 64 subscribers). Default products are downloaded at once.
+  - The layer reloads only products whose blob changed. The new edition's data source is added before the old one is removed. A product that leaves the catalog leaves the globe.
+  - The row reads `LIVE` while the stream is open. A five-minute catalog read is the backstop.
+- **Files.** `/api/ghostmaps/file/{product}` serves only catalog products. Files are downloaded by commit-pinned raw URLs, so a CDN cannot return an older edition. They are cached on disk by blob sha, and blobs no current product uses are pruned. A request whose `?v=` names the current blob is `immutable`. Repository paths never reach the page.
+- **Source ownership.** The application catalog receives `sources['s2-ghostmaps']` through the shared source contracts; an omitted or null source stays unavailable without opening a stream or fetching. The standalone source factory supplies the same-origin implementation and accepts replacements. Packed-image URLs are released on cancelled or failed product construction, and remain owned by a successfully loaded product until it is removed.
+- **Voice and locales.** S2 can be toggled through its registered id and aliases. The model already sees the S2 GhostMaps brand in the id, and compact alias-hint separators keep the complete voice prompt within its existing 52,000-character limit; accepted aliases are unchanged. The row and reports are translated in Spanish, Russian and Simplified Chinese.
+- **Rendering.** The page parses the KMZ with the import module's zip, KMZ and XML helpers into one `CustomDataSource` per product.
+  - Points become ground-clamped billboards with the depth test off, so they never sink into terrain or 3D tiles. Because the Google 3D map hides the globe, nothing else would stop far-side pins drawing through the planet. Pins are therefore horizon-culled with Street Level's `createHorizonCull` before their first frame and again whenever the camera moves.
+  - Lines and polygon outlines are ground-clamped polylines.
+  - Styles, StyleMaps and inline styles are honoured. Icons come only from images packed in the same KMZ and at most 512 KB. Anything else uses a per-product round marker.
+  - Network links, overlays, models and remote hrefs are never followed. Hidden placemarks are skipped. Bounds are 20,000 placemarks and 250,000 positions per product.
+- **Reports.** Clicking a marker opens a card with the product, folder, edition date and the placemark's report fields. `src/layers/ghostMaps/records.js` reads ArcGIS popup tables as text only: `<Null>` and internal fields are dropped and values are capped. Description markup is never inserted into the page. The first `http(s)` research link opens from the card. The card is `stateless`, so it comes and goes with the click, as CCTV cards do. It is also `horizonCull`ed, so it hides when its marker turns behind the planet. Picks are registered under `s2-ghostmaps`.
+- **Validation.** Unit tests: `src/layers/ghostMaps/*.test.mjs` cover editions, the catalog, ref parsing, description tables and wrapping; `server/providers/ghostMaps.test.mjs` covers commit detection, events, pinned downloads, cache pruning, restart and routing. `node scripts/qa-ghostmaps.mjs --url http://localhost:4173` covers the live load, the open stream, picks and cards (asserted on the overlay host's diagnostics, since the `desynchronized` overlay canvas can read back a stale buffer headless), far-side culling, a synthetic push, chip persistence, disable and phone width.
+
 ### Import Your Own Files (October 2026)
 
 - DISPLAY ▸ **Import** reads GeoJSON (`.geojson`/`.json`), KML, KMZ and GPX from the picker or a file drop anywhere in the app. Each file gets show/hide, Fly-to and Remove controls. GeoJSON and GPX use the row's color; KML/KMZ retain their styles and show a hatched swatch. The file bytes remain on the device for the page session. Rendered overlays can appear in map screenshots sent through voice or other existing screenshot tools.
@@ -5213,7 +5418,13 @@ pins and share links already supply complete boxes.
 
 - **The TRACKED contact's 2D↔3D handoff is DEFAULT behaviour (2026-08-19), driven by camera distance alone.** It does NOT consult the DISPLAY-rail `3D` toggle, which continues to own the FLEET (the un-instanced draw-call budget stays the operator's decision). Policy lives in `src/data/trackedModelRegime.js` and is shared by both layers: enter below `TRACKED_MODEL_ENTER_ALT_M` = 150,000 m and hand back to the billboard only above `TRACKED_MODEL_EXIT_ALT_M` = 172,500 m. **The swap distance was set by playtesting on 2026-08-20:** a first pass at 1,000,000 m switched too early; 2D reads correctly at ~600 km and the handoff belongs at ~150 km. **Consequence, recorded on purpose:** the tracked contact now enters 3D NEARER than the FLEET does (`MODEL_ALT_CEIL_M` = 800,000 m, unchanged), so with the DISPLAY-rail `3D` toggle on, 150–800 km draws surrounding contacts as models while the selected one is still a glyph. Nothing double-draws (the fleet pass skips the tracked icao) and aligning the two is a fleet-side decision, deliberately out of scope. **The two thresholds are asymmetric on purpose:** a single threshold makes a tracked orbit sitting ON the boundary strobe billboard↔model as the camera's altitude wobbles across it. Do not collapse them. The latch is scoped per selection, so a new target re-evaluates against the ENTER ceiling rather than inheriting the previous target's exit band. Exactly ONE model is involved; it loads on demand when the regime opens, is HIDDEN (not released) on regime exit so re-entry has no load gap, and is released by the existing teardown on deselect/re-track/destroy. Cockpit and TR-3B suppression are unchanged. **Two invariants around it:** (a) the hysteresis latch AND the load-failure latch are per-selection state cleared by `_resetTrackedSelectionState()` in the tracking lifecycle (deselect / re-track / cross-layer / init / destroy) — the predicate's icao-change guard is defence only, since it needs a drawn frame while nothing is selected and the render governor's idle mode does not promise one; (b) on-demand loading is bounded at 3 attempts per selection with a 1.5 s backoff and one console warning naming the asset — the driver runs every `scene.preUpdate`, so an unbounded catch means a missing GLB spins load→reject at frame rate. The billboard stays the visual throughout a failed load.
 - **Grounded 3D handoff is terrain-validity gated (2026-08-23).** A ready civilian or military glTF does not own the visual until `groundSnap` (`src/data/groundSnap.js`) can answer with a MEASURED photoreal-surface height. On success the layer writes `height + the model's measured belly offset` before revealing the model. Cache movement is measured on the WGS84 surface, not across altitude, so a stationary contact keeps its snap through poll-time vertical-datum changes. Model existence or GPU readiness alone never suppresses the billboard floor, and ordinary zoom/style/deselect transitions preserve a valid snap cache. **Two states, and the difference is the whole design.** COLD — nothing has ever resolved for this icao (tiles still streaming on first sight, sample failure, backoff after a first miss): there is no evidence of where the ground is, `heightFor` returns null, the model stays hidden and the depth-test-free 2D billboard remains opaque and floored. WARM — a snap resolved and then a >`MOVE_INVALIDATE_M` (50 m) taxi move stopped it answering directly: the measurement is DEMOTED to a bounded last-known rather than deleted, and it keeps answering while the resample is outstanding, so a taxiing aircraft does not pop 3D→2D→3D across a 2–30 s retry backoff. The bound is `HELD_SNAP_MAX_DRIFT_M` = 250 m from the spot the value was measured at, past which the hold is dropped rather than stretched and the contact is COLD again. It is spatial with no timer beside it (ground under a contact that has not moved does not change; what invalidates the value is the contact MOVING) and deliberately a quarter of the billboard chain's `HELD_FLOOR_MAX_DRIFT_KM` — that hold only ever RAISES a sprite, while a held snap IS the model's placement, so its error shows in both directions. A fresh sample releases the hold, and so does a ground flip (which already calls `forget`). **A loading model is HIDDEN, never zero-scaled:** admission sets `show = false` (Cesium's default is `true`, and an unplaced primitive would claim the visual at the identity matrix), and ownership is `ready && show` — Cesium 1.138's `Model.update` has no `show` guard, so hiding a primitive costs its load nothing.
+- **Ground-snap clock rollback recovery.** If the wall clock moves before the
+  sampling-window start, ground snap opens a new window while retaining the
+  normal four-samples-per-250-ms budget. Retry timestamps more than the maximum
+  30-second backoff ahead of the current clock are ignored. A smaller rollback
+  can retain a bounded retry delay of up to 30 seconds.
 - Commercial and military aircraft use the same high-level FLEET model regime: 2D billboards when zoomed out, optional glTF models when closer, controlled by the DISPLAY rail `3D` toggle and `Proximity` / `All` modes. Since 2026-08-16 (Hangar fleet) models are PER-CLASS: real CC-BY GLBs for light/bizjet/turboprop/widebody/helicopter/uav (`CLASS_MODEL_REAL` in `src/data/aircraftClass.js` — meters-baked, scale 1, per-model belly/radius; provenance in `public/models/README.md`), the shared `airplane.glb` for the remaining civilian classes, and the military layer maps weight classes (real GLBs / 747 heavies / `jet.glb` fastjets, per-model heading offsets, flat amber or emergency red). Textured civilians carry a HEAVY tint, not a light one: `MODEL_COLOR_BLEND_AMOUNT` is `0.94` in BOTH layers under Cesium's `ColorBlendMode.MIX`, so the class colour supplies 94% of the surface and the asset's own texture ~6%. The visual direction is clean light silhouettes with only a weak diffuse contribution from the approved textures, so liveries deliberately do NOT read. IR boost raises the blend to a full `1.0`. Under NVG/FLIR (map preset or Cockpit vision) models render unlit flat-white at full alpha and scene fog is disabled (fog otherwise blacks out distant models with the globe hidden); state restores on exit.
+- **Aircraft models skip Cesium's dynamic environment map (2026-10-24).** Flights, Military Flights and Local ADS-B pass `environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS` (`{ enabled: false }`, `src/data/aircraftModelLighting.js`) to every drawn model. Otherwise each `Model` renders the sky around it and reads it back from the GPU (`readPixels`) when it is first placed, and again whenever it moves more than 1 km, the scene's atmosphere settings change, or (under sunlight dynamic lighting) an hour of scene time passes (`DynamicEnvironmentMapManager`, Cesium 1.138). With the class colour supplying 94% of the surface, the models are lit from Cesium's default spherical harmonics instead, with no specular environment map, so the sky's model-lighting cube map no longer reaches aircraft. `src/data/aircraftModelLighting.test.mjs` pins the option at every drawn model call; the two preload calls only warm the glTF cache and are never drawn.
 - The DISPLAY-rail `3D` toggle is the user-facing activation path for both aircraft layers. Their small approved GLBs build their render resources without Cesium's frame-spread job queue, preventing continuous Photorealistic 3D Tiles streaming from starving model readiness; model caps, tracking, camera, and fallback billboards are unchanged.
 - **The `3D` toggle DEFAULTS ON in `proximity` on a first run.** Proximity is itself the budget — models appear only below `MODEL_ALT_CEIL_M` and only for the nearest `MODEL_MAX` in view — so the default costs nothing at globe scale, and `all` remains a deliberate opt-in. A fresh boot runs NO layer-state restoration (`LayerStateCoordinator.start()` returns early with neither a share payload nor stored state), so four independent initializers decide what a first-run operator sees and must agree: `booleanOption('models3d', 'e', true)` in `src/data/layerState.js`, `_models3dEnabled = true` in BOTH flight layers, `this._models3dEnabled = true` in `src/ui/aircraftDisplay.js`, and the `active` / `visible` classes on `#models3d-toggle` / `#models3d-mode-row` in `index.html`. All four are pinned together in `src/data/layerState.test.mjs`. Explicit state still wins: because the codec omits default-valued options, `models3d: false` is now what travels in a link (`lo=…f.e.0`) and restores OFF at both aircraft layers. **Consequence for returning users:** a stored `gev:layer-state:v2` blob is a FULL options snapshot, so a session that wrote one before this change carries `models3d:false` and keeps 3D off until the operator flips it (or clears the key) — the durable snapshot is treated as the recipient's own state, by design.
 - **Consequence of the flip on the recorded tracked/fleet inversion:** the 150–800 km band where surrounding contacts draw as models while the SELECTED one is still a glyph is now what an operator sees WITHOUT arming anything. The inversion itself is unchanged and still deliberate (see `src/data/trackedModelRegime.js`); only its reachability changed.
@@ -5268,11 +5479,21 @@ pins and share links already supply complete boxes.
 
 ## Auth + Launch
 
+Vite's development filesystem deny list excludes local `.gev-logs/` and
+`.gev-cache/` contents and the package checkout's root `dist/`, while allowing
+dependency `dist/` assets. Checkout glob characters are escaped. This does not
+apply to `public/` assets or built-preview serving.
+
+
 - Recommended launcher: `./scripts/dev-fresh.sh` (also: `dev-secure.sh` for stricter bindings, `dev-cctv.sh` for CCTV source-pack tuning)
 - A successful Pinokio install writes the owner-only `pinokio/.installed`
   marker. The nested launcher menu resolves that marker from its own directory:
   an absent marker exposes Install, a present marker exposes Start, and a
-  running server with a captured ready URL exposes Open God's Eye View.
+  running server with a captured ready URL exposes Open God's Eye View. That
+  default item uses Pinokio's `popout` option to open the system browser; the
+  Server item retains the launcher console. The app's framing headers stay
+  unchanged. This does not assume all Pinokio desktop versions enforce those
+  headers in their embedded view.
 - Build gate: `npm run build`
 - Network access: local-only by default (`HOST=localhost` in dev-fresh.sh); LAN is an explicit opt-in via `HOST=0.0.0.0` (launcher prints a key-exposure warning + LAN URL; see SECURITY.md)
 - OpenSky default mode: OAuth (`OPENSKY_AUTH_MODE=oauth`; `anon` works without credentials)
@@ -5387,7 +5608,8 @@ pins and share links already supply complete boxes.
 - **Cockpit left-panel clearance:** the Cockpit Contact card and peripheral HUD participate in the adaptive left accordion's live obstacle measurements, including live viewport-height changes. Expanding Layers or Scenes keeps the active panel in the available upper-left corridor with internal scrolling; it does not cover the Contact card, lower Cockpit controls, or Cesium credit line. Outside Cockpit the hidden card does not alter the normal corridor.
 - **Cockpit Context scope:** the 250 km radius applies to the air/sea proximity cohorts. Installation counts come only from the currently loaded viewport and are labeled `CURRENT VIEWPORT ONLY` in the cockpit as well as the normal Context panel; neither surface presents them as a complete 250 km installation survey.
 - **Cockpit camera anchor:** first-person mode does not write feed-boundary corrections directly into the camera. A cockpit-only inertial anchor advances from the selected aircraft's displayed course and speed, then converges toward the authoritative delayed track with correction capped below forward motion. The displayed kinematics are derived from the same consecutive fix segment as the rendered position, with raw feed speed/course used only as fallback; a transient zero/missing feed speed therefore cannot freeze a visibly moving aircraft after layer enable or a map/cockpit handoff. Rendered altitude continues to come from that interpolated track position. Late ADS-B fixes and short render stalls can remove drift without accelerating or reversing the view. Camera placement runs before scene update/culling at a bounded 20 Hz so a moving cockpit does not force Photoreal 3D Tiles to retraverse on every display frame; textual instruments update at 10 Hz and context/layout work at 4 Hz. Every far Cockpit contact pip shares one stable Cesium texture-atlas entry and skips unused screen-projected course calculations, while only in-range 2D aircraft silhouettes pay the screen-projected rotation cost; ambient glTF collections are hidden/retained rather than synchronously destroyed at cockpit entry, and context rails lay out only on explicit content/state changes and viewport resize. The deliberate 15/30-second layer interpolation delays and per-Cesium-frame position caches remain unchanged.
-- **Cockpit route, vision, and view controls:** visible on-screen `COCKPIT`, `RESET`, and `EXIT COCKPIT` controls replace reliance on the `C` shortcut. RESET uses the same canonical globe route as the map and voice actions, exits Cockpit, and releases its camera ownership rather than exposing the hidden map-style top action. When the tracked commercial flight has a plausible ADSBDB route, the top of the right briefing rail shows a compact `FROM → TO` airport strip and the visor shows a centered estimated-destination chevron with its relative bearing; absent or implausible route data hides the strip and cue rather than guessing. The cockpit-local vision control is an interactive `PREV / CURRENT / NEXT` carousel over `NORMAL`, `CRT`, `NVG`, `FLIR`, `ANIME`, `NOIR`, and `SNOW`; its previous/next actions wrap, and activating the current value advances to the next style. Cockpit enters on the active map preset, so a Cyber FLIR map opens Cockpit on FLIR while Normal remains a distinct option instead of producing a second FLIR entry. Cockpit choices temporarily activate the existing Cesium post-process stages, while exiting Cockpit through either EXIT or RESET restores the pre-entry map style. The regional-news page uses a free Google News RSS locality query first, with the existing GDELT query retained only as a fail-soft fallback; linked headlines remain reporting, not verified incidents or risk intelligence.
+- **Cockpit route, vision, and view controls:** visible on-screen `COCKPIT`, `RESET`, and `EXIT COCKPIT` controls replace reliance on the `C` shortcut. RESET uses the same canonical globe route as the map and voice actions, exits Cockpit, and releases its camera ownership rather than exposing the hidden map-style top action. When the tracked commercial flight has a plausible ADSBDB route, the top of the right briefing rail shows a compact `FROM → TO` airport strip and the visor shows a centered estimated-destination chevron with its relative bearing; its destination label rounds to whole degrees in 000–359, wrapping rounded north to 000° while the chevron continues to use the relative bearing independently of label rounding; absent or implausible route data hides the strip and cue rather than guessing. The cockpit-local vision control is an interactive `PREV / CURRENT / NEXT` carousel over `NORMAL`, `CRT`, `NVG`, `FLIR`, `ANIME`, `NOIR`, and `SNOW`; its previous/next actions wrap, and activating the current value advances to the next style. Cockpit enters on the active map preset, so a Cyber FLIR map opens Cockpit on FLIR while Normal remains a distinct option instead of producing a second FLIR entry. Cockpit choices temporarily activate the existing Cesium post-process stages, while exiting Cockpit through either EXIT or RESET restores the pre-entry map style. The regional-news page uses a free Google News RSS locality query first, with the existing GDELT query retained only as a fail-soft fallback; linked headlines remain reporting, not verified incidents or risk intelligence.
+- Cockpit wind-direction labels wrap after rounding to whole degrees, so a direction of 359.5° displays as `N · 0°` rather than `N · 360°`.
 - **Cockpit missing observations:** missing local weather observations remain unknown rather than being converted to zero or clear skies, in the briefing and in the cloud effects; a missing temperature drops the whole local weather record, including its wind and condition.
 - **Cockpit weather status:** the earlier multi-canvas atmospheric compositor remains fail-closed and is not attached to the live viewer. Cockpit clouds are a separate transparent WebGL pass with a capped 520×320 framebuffer, 24 ray steps, three FBM octaves, and a 12 FPS ceiling. It defaults off and starts only when local storage explicitly contains the persisted `WX ON` opt-in (`'1'`). When opted in, observations refresh after five minutes or 25 km of aircraft movement, fail transparent when unavailable or clear, and stop on exit or disable. `WX OFF` governs atmospheric rendering only: the briefing still fetches source-backed Natural Earth region, headline, and Open-Meteo local-information data, aborting and replacing any in-flight request when the selected aircraft changes. No weather effect runs in map mode and no synthetic fallback is shown.
 - **Cockpit trail visibility:** entering cockpit hides the selected aircraft's trail body and head so they cannot cross the first-person view; exit restores them. This cockpit-only presentation change does not alter the normal map-mode invariant that aircraft trails render through terrain using their depth-fail material.
@@ -5407,10 +5629,11 @@ the `_detectionUserOverridden` / explicit-intent flags that would suppress a
 separate landed behaviour. Pinned in `src/reasonableDefaults.test.mjs` (feather,
 detection, OUTSIDE opacity) and `src/data/layerState.test.mjs` (3D).
 
-**The 2026-08-24 defaults** (superseding the interim 08-23 values of 8%/3%):
+**Current defaults** (scope feather revised to 100% on 2026-10-25;
+detection and outside opacity retain the 2026-08-24 defaults):
 the first-run look is Detection DENSE
-`75%`, ELASTIC allocation, Fade `7%`, OUTSIDE opacity `1%`, scope feather `11%`,
-and 3D fleet mode PROXIMITY, with `AIRCRAFT_BRACKET_FLOOR_ANCHOR` at `0.01` so
+`75%`, ELASTIC allocation, Fade `7%`, OUTSIDE opacity `1%`, Scope ON with feather
+`100%`, and 3D fleet mode PROXIMITY, with `AIRCRAFT_BRACKET_FLOOR_ANCHOR` at `0.01` so
 brackets keep their approved brightness exactly at the new OUTSIDE default. Two
 terms that must never be conflated: scope FEATHER softens the black scope-mask
 edge; detection FADE is the label/card fading band around the keyhole. The
@@ -5480,14 +5703,10 @@ easier to meet (detection is now on more often), but does not create it.
   calibrated so `AIRCRAFT_BRACKET_ALPHA_FLOOR` (0.35) lands exactly at the
   default, and the mapping follows bracket brightness rather than slider
   position. The `ko` PARSE fallback stays at `5`.
-- **Scope feather: `11%`** — a soft scope-mask edge (moved `0% → 8% → 11%`; `0%` hard crop for one day,
-  `35%` before that). `SCOPE_FEATHER_RATIO_DEFAULT` in `src/scopeMask.js`,
-  mirrored by `#scope-feather-slider`'s markup value AND readout and
-  `_scopeFeatherPct` in `sharelink.js`. The slider is untouched and still spans
-  0–100, and an explicit `0` is still the hard-crop path — pinned, so moving the
-  default cannot quietly delete it. The `scf` PARSE fallback deliberately stays
-  at `35`: a link predating `scf` was authored when 35 was what its author saw,
-  and restoring the author's view is what a share link is for.
+- **Scope: `ON`, feather: `100%`**. `SCOPE_FEATHER_RATIO_DEFAULT` in
+  `src/scopeMask.js` matches the slider, readout and share generator. The range
+  is 0–200%; explicit 0% is a hard edge. Missing-`scf` links retain the historical
+  35% parse fallback.
 - **3D aircraft models: `ON`, mode `proximity`** — see the 3D Aircraft section
   above and the DISPLAY-rail entry below (was `OFF`).
 - Style shader starting params: CRT/NVG/FLIR pixelation `1.2` (just above the native `1.0` floor); thermal/FLIR ships an optional Ironbow "Predator" palette (`palette` uniform, default `0` = accurate grayscale).
@@ -5515,6 +5734,11 @@ easier to meet (detection is now on more often), but does not create it.
   short-way-round longitude span and wraps the padded edges, so a dateline-
   crossing box stays its true width. Raw subtraction inflated a 0.41° metro box
   to 86.7° and a 60° territory to 132°.
+- **Point distances take the short way round 180°.** The annotation
+  resolver's `approximateDistanceM` (voice "point out" proximity checks) and
+  `places_nearby` distances wrap the longitude difference. Raw subtraction put
+  Savusavu 38,148 km from a camera over the Lau Islands, so the proximity check
+  refused it, and sorted a place 2 km across 180° last.
 - CCTV calibration persists at `godsEyeView.cctv.calibration.v2` (v2 rebuild;
   the store was wiped clean, no import from the old `v1` key).
 - CCTV v3 floor QA pins are: zero samples for heading-only edits; zero transient
@@ -5905,6 +6129,8 @@ callsign, class and category, adsbdb operator/type and a plausible route when
 known, altitude, ground speed, track, vertical rate, position age, message
 count, "Heard by your receiver"); markers are not camera-followed. Positioned
 aircraft join detection boxes, labelled only with a decoded callsign.
+The card's `TRK` label wraps after rounding to whole degrees, so a track of
+359.5° displays as `TRK 0°` rather than `TRK 360°`.
 
 Receivers publish one record shape from `src/sources/adsbRecords.js`
 (`icao`, `callsign`, `category`, `onGround`, `lat`, `lon`, `altitudeFt`,
@@ -6011,7 +6237,7 @@ closed. Performance and live agency reliability require recorded validation.
 
 ## Wind forecast models
 
-Wind supports selectable GFS/IFS models with persisted model choice. Each fetch chooses the available cycle and forecast step nearest the current time; rows show both issue and valid UTC timestamps. Grid identities include model, cycle, forecast step and any requested scalar field. The six model/field cache slots each retain the last two issued grids for manifest/grid rollover, coalesce concurrent requests, retain last-good data on failures and retry no faster than once per minute. Model changes clear the old field immediately, cancel old acquisition and ignore superseded results.
+Wind supports selectable GFS/IFS models with persisted model choice. Each fetch chooses the available cycle and forecast step nearest the current time; rows show both issue and valid UTC timestamps. Grid identities include model, cycle, forecast step and any requested scalar field. The six model/field cache slots each retain the last two issued grids for manifest/grid rollover, coalesce concurrent requests, retain last-good data on failures and retry no faster than once per minute. Model changes clear the old field immediately, cancel old acquisition and ignore superseded results. Last-good data is marked stale; the wind row shows it, and `get_wind` returns `stale` and adds "(forecast may be stale)" to its summary.
 
 ### Local Weather review candidate
 
@@ -6113,3 +6339,12 @@ when their footprints touch or contain one another, never across a seam toleranc
 - `scripts/qa-form-fields.mjs` exercises native selections, number validity,
   calibration commit/cancel and stale-camera/disposal guards against an installed
   controller with fixture ports, plus default/Cyber and narrow translated layouts.
+
+## Docker health reporting
+
+The Docker image probes its local HTTP root with Node every 30 seconds, using
+the launcher's parsed `PORT` (default 4173). A successful HTTP response marks
+the container healthy. Checks time out after 10 seconds, with a 30-second
+startup grace period and three consecutive failures before reporting unhealthy.
+This reports app HTTP availability, not individual provider health, and does not
+configure automatic restarts.
diff --git a/docs/INFRASTRUCTURE-LAYERS.md b/docs/INFRASTRUCTURE-LAYERS.md
index 76567e605..31d3cb4cb 100644
--- a/docs/INFRASTRUCTURE-LAYERS.md
+++ b/docs/INFRASTRUCTURE-LAYERS.md
@@ -53,9 +53,8 @@ Cesium installation shared with its viewer; it must not bundle separate copies.
 `gods-eye-view/infrastructure/geojson` exports the lower-level
 `createLocalGeoJsonLayer(options, services)` and existing infrastructure overlay
 helpers. `gods-eye-view/infrastructure/lod` exports the existing LOD policy helpers.
-The standalone app's `src/data/localGeojson.js` keeps its original single-argument
-factory and supplies its existing functions. Other consumers should use the package
-exports, which do not import standalone application globals.
+Consumers use the package exports, which do not import standalone application
+globals.
 
 Dataset files and source/license notices remain under `src/data/local_data/`.
 Their input counts are 4,351 datacenter features and 704 dam features. Cesium may
diff --git a/docs/SHARE-LINK-FORMAT.md b/docs/SHARE-LINK-FORMAT.md
new file mode 100644
index 000000000..cfb6d50fb
--- /dev/null
+++ b/docs/SHARE-LINK-FORMAT.md
@@ -0,0 +1,365 @@
+# Share-link format
+
+A share link restores a view: where the camera is, what it follows, the visual
+style, data layers and panel layout. There are two forms.
+
+- **Long form** — `#v=2&lat=30.2672&lon=-97.7431&…`. Parsed by
+  `src/sharelink.js`. The address bar follows the live view in this form, and
+  links already in the wild keep working; the long form is never removed.
+- **Short form** — `<app>/share/<code>`, where `<app>` is wherever the app is
+  served (an origin's root, or a base path) and `<code>` is encoded and
+  decoded by `src/share/viewCodec.js`, which is pure (no DOM, no Cesium) and
+  needs no server. Hosts import it as `@gods-eye-view/core/share/view-codec`
+  (a server can read a code to describe the view in a link preview). The share button makes this form. The same code opens on
+  any copy of the app. `src/share/shareLinkPath.js` reads and builds the
+  address, and `src/share/legacyShareState.js` converts between the long
+  form's parsed state and the code's state.
+
+The same view in both forms (a real session's link):
+
+| Form  | Characters        |
+| ----- | ----------------- |
+| Long  | 302 (the hash)    |
+| Short | 39 (the `<code>`) |
+
+For example, a camera-only place view is a 24-character code (31 with its
+created-at time).
+Following an aircraft is 42–50: 42 when the link is made from the app's own
+follow camera with the fix taken as the link is made, 44 with a fix four
+seconds older, and 50 after orbiting to another heading and pitch. A view in
+any other style that keeps the style's own look adds only the style (two
+bytes): the 42-character followed aircraft in Noir is 44.
+
+## Opening a short link
+
+At start-up the app reads `<code>` from an address whose path ends in
+`share/<code>` (a host can pass the code instead, as `initialShareCode` to
+`createApplicationControls`). A code that decodes runs the same restore as a
+long link; once the app next writes the address, `/share/<code>` is replaced
+by the app's own address and the long form, without a new history entry, so
+a reload follows the live view. A code that is rejected restores nothing: the
+app starts as usual and says the link can't be opened.
+
+A thing view turns on its entity's layer and follows the entity by id, using
+the same restore as a long link's followed flight or satellite (and its
+expiry windows); a vessel is selected once the vessel feed has it. Opening is
+best effort: until the entity is found, and if it is not found in time, the
+camera is where the link was made, looking at the entity's last-known fix,
+and the app says that the entity isn't reporting and when the fix was taken.
+The share button makes a thing view while the camera follows an aircraft,
+military aircraft or satellite. A selected vessel is not followed (the camera
+stays where the user puts it), so a link made then is a place view; vessel
+thing views open, but the app does not make them yet.
+
+## Payload
+
+The code is unpadded base64url (`A–Z a–z 0–9 - _`). The decoded bytes are:
+
+1. one **version byte**, currently `1`;
+2. a sequence of **fields**, each a varint tag `field_number << 3 | wire_type`
+   followed by its value;
+3. one **check byte**: the CRC-8 of everything before it.
+
+| Wire type | Value                                                       |
+| --------- | ----------------------------------------------------------- |
+| 0 varint  | unsigned LEB128, at most 8 bytes, at most 2^53 − 1          |
+| 1 fixed64 | 8 bytes (not used by v1; skipped)                           |
+| 2 LEN     | varint length, then that many bytes (text or a sub-message) |
+| 5 fixed32 | 4 bytes (not used by v1; skipped)                           |
+
+Signed values are zigzag varints (0, −1, 1, −2 → 0, 1, 2, 3). Text is printable
+ASCII. Fields are written in ascending order; the decoder accepts any order.
+
+A field whose value equals its default is **omitted**. The decoder fills every
+omitted field from the same defaults table the encoder reads (for a
+style-dependent field, the decoded style's defaults), so an empty
+payload (code `AQc`: the version byte and its check byte) is the all-default
+view.
+
+### Check byte
+
+The check byte is CRC-8 with polynomial x⁸ + x² + x + 1 (`0x07`), initial
+value 0, no reflection and no final XOR (CRC-8/SMBUS; the check value of the
+ASCII digits `123456789` is `0xF4`). A decoder that computes a different value
+rejects the code (`checksum`) before reading any field, so a mistyped code
+never opens a different view. A degree-8 CRC catches every error burst of up
+to 8 bits; one base64url character is 6 bits, so **every single-character
+typo is rejected** (a test tries every substitution at every position). Two
+swapped neighbours, a dropped or an extra character are caught with a
+probability of about 255 in 256 (many of them already fail as base64url).
+
+## Field registry (top level)
+
+| #   | State key                    | Type  | Default     | Encoding                                                |
+| --- | ---------------------------- | ----- | ----------- | ------------------------------------------------------- |
+| 1   | `view.kind`                  | enum  | see below   | 0 place, 1 thing                                        |
+| 2   | `lat`                        | coord | 0           | zigzag of degrees × 10⁴                                 |
+| 3   | `lon`                        | coord | 0           | zigzag of degrees × 10⁴                                 |
+| 4   | `alt`                        | sint  | 800         | whole metres                                            |
+| 5   | `heading`                    | angle | 0           | whole degrees, see angles                               |
+| 6   | `pitch`                      | sint  | −35         | whole degrees                                           |
+| 7   | `roll`                       | angle | 0           | whole degrees                                           |
+| 8   | `sharedAtMs`                 | epoch | none        | zigzag seconds since 2026-01-01T00:00:00Z               |
+| 9   | booleans                     | flags | 0           | bit set when the value differs from default             |
+| 10  | `layerState.enabledLayerIds` | LEN   | none        | layer bitset, see layers                                |
+| 11  | `layerState.options`         | LEN   | none        | packed option triples, see layers                       |
+| 12  | `panelState`                 | LEN   | none        | packed panel entries, see panels                        |
+| 13  | thing                        | LEN   | none        | sub-message, see thing views                            |
+| 14  | `style`                      | enum  | `normal`    | normal, retro, surveillance, thermal, anime, noir, snow |
+| 15  | `mapStack`                   | enum  | `photoreal` | photoreal, bing-aerial, bing-labels, esri-imagery, osm  |
+| 16  | `hudVariant`                 | enum  | style       | tactical, operator, minimal, cyber                      |
+| 17  | `bloomIntensity`             | uint  | style       |                                                         |
+| 18  | `bloomVersion`               | uint  | 2           |                                                         |
+| 19  | `sharpenIntensity`           | uint  | style       |                                                         |
+| 20  | `detectionMode`              | enum  | style       | OFF, SPARSE, BALANCED, DENSE                            |
+| 21  | `detectionDensity`           | uint  | style       | one of 0, 25, 50, 75, 100                               |
+| 22  | `detectionAllocation`        | enum  | style       | ELASTIC, WEIGHTED                                       |
+| 23  | `detectionFadePct`           | uint  | style       | 0–40                                                    |
+| 24  | `detectionOutsideOpacityPct` | uint  | style       | 0–100                                                   |
+| 25  | `scopeFeatherPct`            | uint  | 100         | 0–200                                                   |
+| 26  | `scopeTerminusPct`           | uint  | none        | 94–100; absent is the adaptive terminus                 |
+| 27  | `styleParams`                | LEN   | style       | packed `(token, value × 100)` pairs                     |
+
+Field 1 absent means `thing` when field 13 is present and `place` otherwise,
+so v1 never writes it; a later view kind writes its code.
+
+Enum codes are the list position (0, 1, 2…). A name not in the list is written
+as LEN text in the same field, so the app can add a style or map before this
+table learns its code. A new style's settings are encoded against its own
+defaults, while a decoder that does not know the style uses Normal's; adding a
+style also extends the pinned style-defaults table.
+
+Flag bits (field 9): 0 `bloom`, 1 `sharpen`, 2 `hudVisible`, 3
+`celestialRing` (each defaulting by style), 4 `scopeEnabled` (default on).
+
+### Style defaults
+
+A default marked **style** is what the view's style applies when it is
+selected in a fresh session (`SHARE_VIEW_STYLE_DEFAULTS`): the app's
+first-load baseline (`GLOBAL_POST_DEFAULTS` in `src/ui/visualPresets.js`),
+with the style's preset on top (`STYLE_PRESET_DEFAULTS`), and the style's
+shader parameters at the preset's values, else the shader's own. The encoder
+compares against the defaults of the view's style, and the decoder fills
+omitted settings from the defaults of the style it decoded (an unknown style
+uses Normal's). So a view that keeps its style's look costs its camera and
+style alone. (A recipient-side preference the app remembers, such as the
+detection allocation, is not a style default: a sender who changed it pays
+for it.) In v1:
+
+| Setting                   | Every style   |
+| ------------------------- | ------------- |
+| bloom, intensity          | off, 0        |
+| sharpen, intensity        | on, 49        |
+| HUD visible, variant      | on, tactical  |
+| detection mode, density   | DENSE, 75     |
+| allocation, fade, outside | ELASTIC, 7, 1 |
+| celestial ring            | off           |
+
+| Style        | Shader parameters (field 27 defaults)                           |
+| ------------ | --------------------------------------------------------------- |
+| normal       | none                                                            |
+| retro        | pixelation 1, distortion 0, instability 0.42                    |
+| surveillance | gain 0.18, bloom 0.22, scanlineStr 0.96, pixelation 1           |
+| thermal      | sensitivity 0.85, bloom 0.2, mode 0.33, pixelation 1, palette 0 |
+| anime        | saturation 1, edgeThick 0.5                                     |
+| noir         | contrastAmt 1.2, grainAmt 0.5, vignetteAmt 0.5                  |
+| snow         | density 0.6, wind 0.5                                           |
+
+These are frozen like every other default: the codec reads them from the
+app's tables today, and a test pins them, so if a table moves the old values
+are frozen in the codec rather than changing what shared links mean.
+
+### Precision
+
+| Value                       | Stored as                 | Matches the long form |
+| --------------------------- | ------------------------- | --------------------- |
+| Latitude, longitude         | 10⁻⁴ degree (about 11 m)  | `toFixed(4)`          |
+| Altitude, range             | whole metres              | `Math.round`          |
+| Heading, pitch, roll        | whole degrees             | `Math.round`          |
+| Intensities and percentages | integers                  | `Math.round`          |
+| Style parameters            | hundredths after clamping | `sp` (× 100)          |
+| Created-at and observed-at  | whole seconds             | `at`                  |
+
+Angles: heading and roll are normalized into [0, 360) — the long form can
+write `roll=360` for a camera at 359.6°, which the compact form stores as 0 —
+and written as the nearer signed turn, so 350° costs one byte (−10).
+When a state is encoded, out-of-range input is clamped (latitude, pitch) or
+wrapped (longitude). A payload that stores a latitude or longitude beyond
+±90/±180 cannot come from the encoder and is rejected.
+
+### Layers (fields 10 and 11)
+
+A layer's number is derived from its permanent layer-state token
+(`src/data/layerStateTokenReservations.json`): a one-character token is its
+index in `0–9a–z`, a two-character token is 36 + first × 36 + second. The
+token ledger never reassigns a token, so layer numbers never change and new
+layers need no change here.
+
+Field 10 is a bitset: bit _n_ of byte ⌊n/8⌋ (least significant first) is set
+when layer _n_ is on. Present-but-empty means "every layer off"; an absent
+field leaves the recipient's layers alone (the long form's `l=` versus no `l`).
+A thing view's entity layer is always on, so its bit is not written: in a
+thing view, present-but-empty means "only the entity's layer", and an absent
+field opens with only the entity's layer on (the app writes the field
+whenever it has a layer set).
+
+Field 11 repeats `(layer number, option key, value)` for each option that
+differs from its frozen absent meaning (`SHARE_VIEW_LAYER_OPTION_ABSENT`). The
+option key is `option token index × 2 + kind`: kind 0 means the value is a
+zigzag varint (an option whose long-form spelling is a canonical integer),
+kind 1 means a varint length and ASCII text (the long-form spelling). Values
+are decoded by the layer-state codec's own option decoders.
+
+A followed aircraft, military aircraft or satellite is a thing view in the
+compact form, not a tracking option: the encoder moves it out of the layer
+options, and the converter moves it back for the long form.
+
+### Panels (field 12)
+
+Each entry is one varint: `panel number × 16 + collapsed × 4 + pinned`, where
+collapsed and pinned are 0 (no value), 1 (false) or 2 (true). Only panels that
+differ from the frozen default layout are written, plus a collapsed-0 entry
+for each panel the state has no opinion about (an older long-form link that
+predates the panel); a panel with no entry takes its default. Values of 3 are
+reserved: a decoder ignores that entry, as for collapsed 0.
+
+| #   | Panel                  | Long-form token | Default             |
+| --- | ---------------------- | --------------- | ------------------- |
+| 0   | `control-panel`        | `c`             | collapsed, unpinned |
+| 1   | `location-bar`         | `l`             | collapsed, unpinned |
+| 2   | `data-panel`           | `d`             | collapsed           |
+| 3   | `cctv-panel`           | `v`             | collapsed           |
+| 4   | `recent-imagery-panel` | `i`             | expanded            |
+| 5   | `street-level-panel`   | `t`             | collapsed           |
+| 6   | `radio-panel`          | `r`             | collapsed           |
+| 7   | `scene-panel`          | `s`             | collapsed           |
+| 8   | `global-context-panel` | `g`             | collapsed           |
+| 9   | `pp-toggles`           | `p`             | collapsed           |
+| 10  | `param-slider-panel`   | `m`             | expanded            |
+
+### Style parameters (field 27)
+
+Pairs of varints `(token index, value × 100)` for the parameters of the
+view's style that differ from its defaults, using the long form's `sp` tokens
+(`SHARE_VIEW_STYLE_PARAMS`). The decoded state always lists every parameter
+of the style: the stored ones over the style's defaults. A long link without
+`sp` converts to the style's defaults.
+
+## View kinds
+
+A **place** view (field 13 absent) opens at its camera, fields 2–7.
+
+A **thing** view (field 13 present) follows an entity. Field 13 is a
+sub-message:
+
+| #   | Field       | Encoding                                                 | Default |
+| --- | ----------- | -------------------------------------------------------- | ------- |
+| 1   | aircraft    | entity id: varint (24-bit ICAO address) or LEN text      |         |
+| 2   | military    | entity id: varint (24-bit ICAO address) or LEN text      |         |
+| 3   | vessel      | entity id: varint (MMSI) or LEN text                     |         |
+| 4   | satellite   | entity id: varint (NORAD catalog number) or LEN text     |         |
+| 5   | range       | uint metres from the entity to the camera                | 2000    |
+| 6   | heading     | angle, the camera's heading while following              | 0       |
+| 7   | pitch       | sint whole degrees, the camera's pitch while following   | −35     |
+| 8   | fix lat     | coord, the entity's last-known latitude                  | none    |
+| 9   | fix lon     | coord, its last-known longitude                          | none    |
+| 10  | fix alt     | sint metres                                              | 0       |
+| 11  | fix age     | sint seconds the fix predates the created-at time        | 0       |
+| 12  | observed-at | epoch, when the fix was taken; only without a created-at | none    |
+
+The entity kind is the field that carries the id (its code in
+`SHARE_VIEW_ENTITY_KINDS`), so it costs nothing; exactly one of fields 1–4 is
+present (two is malformed). Entity ids are the ones the layers look up: an
+aircraft's ICAO 24-bit address (six hex digits, stored as a number; other
+forms such as TIS-B `~abc123` as text), a vessel's MMSI and a satellite's
+NORAD catalog number (decimal numbers; an MMSI with a leading zero stays
+text). Ids are lowercase and match `[0-9a-z~_-]{1,16}`.
+
+Fields 5–7 are the follow offset: the camera looks along (heading, pitch) at
+the entity from `range` metres away, heading clockwise from north, in the
+entity's local east-north-up frame. The defaults match the app's own follow
+camera, which looks north at about −35°, so only its range is written.
+
+Fields 8–12 are the last-known fix, the entity's position when the link was
+made. Fields 8 and 9 are both written whenever there is a fix; their presence
+marks it. Its time is the created-at time (field 8 at the top level) minus
+field 11, or field 12 when the view has no created-at time.
+
+**The camera of a thing view with a fix is derived, not stored**: fields 2–7
+are not written, and the camera is where following the fix from the offset
+puts it (`followCameraFor` in `src/share/follow.js`): the camera sits
+`−r·cos p·sin h`, `−r·cos p·cos h` and `−r·sin p` metres east, north and up
+of the fix (heading h, pitch p, range r), on a sphere of radius 6 371 000 m,
+and looks back at the fix (its heading and pitch are those of that direction
+at the camera, roll 0; at follow distances they equal h and p). A
+decoder ignores fields 2–7 when the fix is present. A thing view without a
+fix (one converted from a long link, which records neither offset nor fix)
+writes its camera in fields 2–7 like a place view.
+
+A decoder that meets a view kind or an entity kind it does not know (an id in
+a thing field it skips) opens the view as a place at its camera — the derived
+one when there is a fix — and reports `fallback`.
+
+## Decoding rules
+
+`decodeShareView(code)` takes the bare code and never throws. It returns
+`{ ok: true, state, unknownFields?, fallback? }` or `{ ok: false, reason }`.
+
+Rejected (the whole link): input over 2048 characters, bad base64url
+(padding, foreign characters, impossible length, stray bits), fewer than two
+bytes, a check byte that does not match (`checksum`), an unknown version byte,
+a truncated value, a varint over 8 bytes or above 2⁵³ − 1, an
+overlong varint, a LEN longer than what remains (at any level, including
+inside the thing sub-message), a reserved wire type, field number 0, a known
+field with the wrong wire type or repeated, two entity ids in one thing, a
+duplicate panel/option/style entry, non-ASCII text, and a latitude or
+longitude (camera or fix) beyond ±90/±180.
+
+Tolerated and reported in `unknownFields`: unknown fields at any level
+(skipped by wire type), unknown enum codes and names (the default is used),
+unknown flag bits, layers, panel values and style parameters, and layer
+options the layer-state codec rejects or that are filed under a layer other
+than their owner. Detection mode and allocation names outside their lists
+fall back to the default rather than reaching the long form's lenient
+migration. The map stack and HUD variant are open: a name outside their lists
+that matches `[A-Za-z0-9_-]{1,32}` is kept as written (the app decides what
+it means) and is not reported; only a name outside that grammar is. A
+created-at time in the future is dropped, as the long form's `at` is.
+
+## Changing the format
+
+These rules keep every link that was ever shared working, in every version of
+the app that can open it.
+
+1. **Field numbers are permanent.** Never renumber, never reuse. A field that
+   is no longer written stays in `SHARE_VIEW_FIELDS` marked `retired: true`.
+2. **A field's type and wire type are permanent.** To change one, add a new
+   field.
+3. **Defaults are frozen meanings.** A default is what an omitted field meant
+   when links were written. If the app's default moves, leave the table alone:
+   the encoder will start writing the new value explicitly. Style defaults
+   are read from the app's style tables; when those move, freeze the old
+   values in the codec (see Style defaults). The same applies
+   to `SHARE_VIEW_LAYER_OPTION_ABSENT` and the panel defaults.
+4. **Codes are append-only.** Enum lists, entity kinds, flag bits, panel
+   numbers and style parameter tokens only grow.
+5. **Add, don't change.** A new setting takes the next free field number
+   (28 onwards; fields 1–15 have one-byte tags and are all taken). A new
+   boolean takes the next flag bit instead, which costs nothing when it is at
+   its default.
+6. **New view kinds and entity kinds** get the next code. A new entity kind's
+   id takes the next free thing field (13 onwards), so older apps skip it and
+   fall back to the camera. A thing that needs more than an id (for example a
+   CCTV camera, a radio station or a transit vehicle) adds further thing
+   fields the same way.
+7. **A new layer option** needs an entry in `SHARE_VIEW_LAYER_OPTION_ABSENT`
+   (a test fails until it has one).
+8. **Bump the version byte only** for a change older decoders must refuse.
+   Decoders reject any version they do not know. The trailing CRC-8 check
+   byte belongs to every version.
+9. **Derivations are frozen too.** `followCameraFor` and the follow-offset
+   defaults are part of the format: changing them moves the camera of every
+   thing link already shared.
+
+Add a test for every change: a round trip, and a payload written with the new
+field that the previous decoder still reads.
diff --git a/docs/TRANSLATORS.md b/docs/TRANSLATORS.md
index 538f8c50e..830ca155e 100644
--- a/docs/TRANSLATORS.md
+++ b/docs/TRANSLATORS.md
@@ -1,6 +1,6 @@
 # Translating God's Eye View
 
-Shipped languages: **English** (source and fallback), **Spanish** (`es`), **Russian** (`ru`) and **Simplified Chinese** (`zh-CN`).
+Shipped languages: **English** (source and fallback), **Spanish** (`es`), **Russian** (`ru`), **Simplified Chinese** (`zh-CN`) and **Traditional Chinese** (`zh-Hant`).
 
 ## How it works
 
@@ -63,4 +63,4 @@ These are contracts, not copy: layer ids and registry keys, status enums and oth
 
 ## Language notes
 
-Each language keeps its glossary, plural forms, units and style in its own file, `docs/translations/<code>.md`: [Spanish](./translations/es.md), [Russian](./translations/ru.md), [Simplified Chinese](./translations/zh-CN.md). Read it before translating, and add a term there when you settle on one.
+Each language keeps its glossary, plural forms, units and style in its own file, `docs/translations/<code>.md`: [Spanish](./translations/es.md), [Russian](./translations/ru.md), [Simplified Chinese](./translations/zh-CN.md), [Traditional Chinese](./translations/zh-Hant.md). Read it before translating, and add a term there when you settle on one.
diff --git a/docs/opensky-auth.md b/docs/opensky-auth.md
index 67844f912..c5f0a387b 100644
--- a/docs/opensky-auth.md
+++ b/docs/opensky-auth.md
@@ -3,10 +3,11 @@
 God's Eye View uses explicit auth modes for `/api/flights`:
 
 - `OPENSKY_AUTH_MODE=oauth` (default, recommended)
-- `OPENSKY_AUTH_MODE=auto` (OAuth first, then Basic fallback)
-- `OPENSKY_AUTH_MODE=basic`
+- `OPENSKY_AUTH_MODE=auto` (OAuth when configured, otherwise anonymous)
 - `OPENSKY_AUTH_MODE=anon`
 
+`OPENSKY_AUTH_MODE=basic` is retired (see below).
+
 Reference: OpenSky REST API docs recommend OAuth2 Client Credentials flow.
 
 ## Quick Start (OAuth Client JSON)
@@ -41,13 +42,18 @@ Launchers resolve OAuth creds in this order:
 2. `OPENSKY_CREDENTIALS_FILE`
 3. Keychain (`opensky-network` / `client_id`, `client_secret`)
 
-## Basic Auth (Legacy)
+The server itself reads 1 and 2, so `npm run dev`, `npm run preview` and
+Pinokio also work with only `OPENSKY_CREDENTIALS_FILE` set in `.env`, on any
+platform. It reads the file on each token refresh.
 
-Basic auth is still supported for now, but OpenSky is moving away from it.
+## Basic Auth (Retired)
 
-```bash
-OPENSKY_AUTH_MODE=basic ./scripts/dev-fresh.sh
-```
+OpenSky stopped accepting username/password (HTTP Basic) sign-in on
+2026-03-18; its API now takes only OAuth2 client credentials. With
+`OPENSKY_AUTH_MODE=basic` the server no longer sends `OPENSKY_USERNAME` /
+`OPENSKY_PASSWORD`: it requests anonymously (reason `basic_retired`) and
+logs once what to set instead. Create an API client on your OpenSky
+account page and use its `credentials.json` as above.
 
 ## Troubleshooting
 
@@ -61,6 +67,6 @@ Useful reasons:
 
 - `oauth_invalid_or_missing`: OAuth client not found/usable
 - `oauth_invalid_credentials`: OAuth client rejected by OpenSky
-- `basic_invalid_credentials`: username/password rejected
-- `missing_basic_creds`: basic mode missing user/pass
+- `missing_oauth_creds`: auto mode found no OAuth client
+- `basic_retired`: basic mode requested; answered anonymously
 - `rate_limited`: OpenSky throttling
diff --git a/docs/translations/zh-Hant.md b/docs/translations/zh-Hant.md
new file mode 100644
index 000000000..ac355516b
--- /dev/null
+++ b/docs/translations/zh-Hant.md
@@ -0,0 +1,17 @@
+# Traditional Chinese (`zh-Hant`)
+
+Catalog: `src/i18n/locales/zh-Hant.json`. General rules: [TRANSLATORS.md](../TRANSLATORS.md).
+
+`zh-Hant` is the Simplified Chinese catalog (`zh-CN`, credited to abiyeenzo, #914, and EDIT-Aeterna, #979) written in Traditional characters with OpenCC character conversion. Wording and terminology are the same as in `zh-CN`: change a term in [zh-CN.md](./zh-CN.md) and the `zh-CN` catalog first, then convert. Only the script differs.
+
+After `s2tw` conversion, fix the characters OpenCC picks wrongly: 年曆史 → 年歷史, 下遊 → 下游, 並道 → 併道, 發佈 → 發布, 公佈 → 公布.
+
+## Style
+
+- Follow [zh-CN.md](./zh-CN.md) for wording, punctuation, spacing, units and the glossary, written in Traditional characters.
+- Relative-time placeholders may already include 前. In `LIVE · updated {age}`, the caller supplies the complete relative age; do not append another 前.
+- The picker displays 中文（繁體） / Chinese (Traditional); explicit Hans tags select Simplified Chinese.
+
+## Plurals
+
+`Intl.PluralRules('zh-Hant')` uses only `other`. Keep the measure words of the `zh-CN` entry: 「{count} 架飛機」、「{count} 艘船」.
diff --git a/index.html b/index.html
index a9874d550..26cf734fb 100644
--- a/index.html
+++ b/index.html
@@ -26,7 +26,7 @@
        with the sources: src/materialSymbolsSubset.test.mjs fails when a source
        names a glyph this list is missing, because a missing glyph does not draw
        a box — the ligature never forms and the element renders the literal word. -->
-  <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20,400,0,0&icon_names=adjust,arrow_drop_down,arrow_forward,arrow_left,arrow_right,bolt,chevron_left,chevron_right,close,close_fullscreen,dark_mode,draw,east,flare,flight,layers,layers_clear,light_mode,local_fire_department,more_horiz,my_location,navigation,normal,on,open_in_full,public,radar,radio,right_panel_close,right_panel_open,rocket_launch,search,skip_next,skip_previous,upload_file,videocam,view_in_ar,visibility,visibility_off" rel="stylesheet" />
+  <link href="https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@20,400,0,0&icon_names=adjust,arrow_drop_down,arrow_forward,arrow_left,arrow_right,bolt,chevron_left,chevron_right,close,close_fullscreen,dark_mode,draw,east,flare,flight,layers,layers_clear,light_mode,local_fire_department,more_horiz,my_location,navigation,normal,on,open_in_full,public,radar,radio,right_panel_close,right_panel_open,rocket_launch,search,settings,skip_next,skip_previous,upload_file,videocam,view_in_ar,visibility,visibility_off" rel="stylesheet" />
 </head>
 <body>
   <!-- gev:template scene-chrome -->
diff --git a/package-lock.json b/package-lock.json
index 7b6d3476f..9d4714ce2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "gods-eye-view",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "gods-eye-view",
-      "version": "0.2.1",
+      "version": "0.3.0",
       "license": "MIT",
       "dependencies": {
         "@jtarrio/signals": "^0.10.0",
diff --git a/package.json b/package.json
index d6f74bc0f..aa42dffe1 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "gods-eye-view",
   "private": true,
-  "version": "0.2.1",
+  "version": "0.3.0",
   "description": "A real-time intelligence console for planet Earth — photorealistic 3D globe, live aircraft/ships/satellites/earthquakes/CCTV, and hands-free voice control. Runs in a browser.",
   "type": "module",
   "license": "MIT",
@@ -168,6 +168,7 @@
     "./layers/recent-imagery/source": "./src/layers/recentImagery/source.js",
     "./layers/perimeters": "./src/layers/perimeters/index.js",
     "./layers/gnss": "./src/layers/gnss/index.js",
+    "./layers/ghostmaps": "./src/layers/ghostMaps/index.js",
     "./sources/firms-csv": "./src/data/firmsCsv.js",
     "./layers/firms": "./src/layers/firms/index.js",
     "./layers/satellites": "./src/layers/satellites/index.js",
@@ -222,6 +223,8 @@
     "./data/lifecycle": "./src/data/lifecycle.js",
     "./ui/navigation": "./src/ui/navigationController.js",
     "./ui/share-restoration": "./src/ui/shareRestoration.js",
+    "./share/view-codec": "./src/share/viewCodec.js",
+    "./share/link-path": "./src/share/shareLinkPath.js",
     "./ui/visual-settings": "./src/ui/visualSettings.js",
     "./ui/panel-chrome": "./src/ui/panelChrome.js",
     "./layers/flights/records": "./src/layers/flights/records.js",
@@ -244,6 +247,7 @@
     "./layers/earthquakes/source": "./src/layers/earthquakes/source.js",
     "./layers/perimeters/source": "./src/layers/perimeters/source.js",
     "./layers/gnss/source": "./src/layers/gnss/source.js",
+    "./layers/ghostmaps/source": "./src/layers/ghostMaps/source.js",
     "./layers/firms/source": "./src/layers/firms/source.js",
     "./layers/installations/source": "./src/layers/installations/source.js",
     "./layers/launches/source": "./src/layers/launches/source.js",
diff --git a/pinokio/pinokio.js b/pinokio/pinokio.js
index d781c1a58..49c42a361 100644
--- a/pinokio/pinokio.js
+++ b/pinokio/pinokio.js
@@ -22,8 +22,10 @@ module.exports = {
     if (starting) {
       const local = info.local('start.js');
       if (local?.url) {
+        // Open in the system browser without changing the app's framing policy.
+        // This also avoids relying on Pinokio's embedded browser behavior.
         return [
-          { default: true, icon: 'fa-solid fa-earth-americas', text: 'Open God\'s Eye View', href: local.url },
+          { default: true, icon: 'fa-solid fa-earth-americas', text: 'Open God\'s Eye View', href: local.url, popout: true },
           { icon: 'fa-solid fa-terminal', text: 'Server', href: 'start.js' },
         ];
       }
diff --git a/scripts/check-import-directions.mjs b/scripts/check-import-directions.mjs
index 3f4fec617..b6d8dba67 100644
--- a/scripts/check-import-directions.mjs
+++ b/scripts/check-import-directions.mjs
@@ -153,14 +153,6 @@ export function checkImportDirections(root) {
           file,
           'Actions must consume feed state without the manager facade',
         );
-      if (
-        file === 'src/app/constructCatalog.js' &&
-        to === 'src/data/localGeojson.js'
-      )
-        report(
-          file,
-          'Catalog must use the services owner without compatibility layer construction',
-        );
     }
     return record;
   }
diff --git a/scripts/format-scope.json b/scripts/format-scope.json
index 7b7171c68..ee23b8b6a 100644
--- a/scripts/format-scope.json
+++ b/scripts/format-scope.json
@@ -6,6 +6,7 @@
   "scripts/qa-form-fields.mjs",
   "scripts/package-boundaries.json",
   "scripts/format.mjs",
+  "scripts/qa-layer-visibility.mjs",
   "scripts/next-layer-state-token.mjs",
   "scripts/check-layer-state-tokens.mjs",
   "scripts/qa-layer-token-twochar.mjs",
@@ -193,6 +194,7 @@
   "src/ui/visualInput.js",
   "src/ui/visualInput.test.mjs",
   "scripts/qa-visual-input.mjs",
+  "scripts/qa-scope-hud.mjs",
   "scripts/qa-segmented-controls.mjs",
   "src/ui/displayControls.js",
   "src/ui/segmentedControl.test.mjs",
@@ -517,7 +519,6 @@
   "src/layers/bikeshare/selection.js",
   "src/data/traffic.js",
   "src/data/bikeshare.js",
-  "src/data/flowTiles.js",
   "src/layers/traffic/source.test.mjs",
   "src/layers/bikeshare/source.test.mjs",
   "src/layers/bikeshare/proxyRoute.test.mjs",
@@ -650,7 +651,6 @@
   "src/agent/worldPacket.test.mjs",
   "src/voice/layerSummary.js",
   "build/application-html.js",
-  "src/app/sourceSlot.js",
   "src/app/sources.js",
   "src/ui/composition.js",
   "src/services/application.js",
@@ -872,6 +872,18 @@
   "src/layers/gnss/source.test.mjs",
   "src/layers/gnss/ownership.test.mjs",
   "scripts/qa-gnss.mjs",
+  "server/providers/ghostMaps.js",
+  "server/providers/ghostMaps.test.mjs",
+  "src/app/layers/ghostMaps.js",
+  "src/layers/ghostMaps/index.js",
+  "src/layers/ghostMaps/catalog.js",
+  "src/layers/ghostMaps/kml.js",
+  "src/layers/ghostMaps/records.js",
+  "src/layers/ghostMaps/source.js",
+  "src/layers/ghostMaps/catalog.test.mjs",
+  "src/layers/ghostMaps/records.test.mjs",
+  "src/layers/ghostMaps/lifecycle.test.mjs",
+  "scripts/qa-ghostmaps.mjs",
   "src/layers/cyclones/index.js",
   "src/layers/cyclones/rendering.js",
   "src/layers/cyclones/labels.js",
@@ -1088,5 +1100,22 @@
   "scripts/qa-status-badges.mjs",
   "src/dockerTrustedPeers.test.mjs",
   "src/cameraGlobeRotation.test.mjs",
-  "src/voice/globeResetConfirmation.test.mjs"
+  "src/voice/globeResetConfirmation.test.mjs",
+  "src/hudDms.test.mjs",
+  "src/voice/panel/preferences.test.mjs",
+  "src/voice/panel/host.test.mjs",
+  "src/voice/panel/manualPanel.test.mjs",
+  "src/voice/panel/nativeActivity.test.mjs",
+  "src/voice/panel/inactivity.test.mjs",
+  "src/voice/panel/actionObserver.test.mjs",
+  "src/voice/panel/testDom.mjs",
+  "src/voice/realtimeCostPanel.test.mjs",
+  "docs/SHARE-LINK-FORMAT.md",
+  "src/share/wire.test.mjs",
+  "src/share/viewCodec.test.mjs",
+  "src/share/legacyShareState.test.mjs",
+  "src/testSupport/shareViewFixtures.mjs",
+  "src/ui/shareLinks.test.mjs",
+  "src/ui/shareButton.test.mjs",
+  "src/share/shareLinkPath.test.mjs"
 ]
diff --git a/scripts/package-boundaries.json b/scripts/package-boundaries.json
index 3970a1ee2..9f06f73f6 100644
--- a/scripts/package-boundaries.json
+++ b/scripts/package-boundaries.json
@@ -441,7 +441,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -463,11 +464,7 @@
       "src/styles/anime.js",
       "src/styles/noir.js",
       "src/styles/snow.js",
-      "src/i18n/index.js",
-      "src/i18n/locale.js",
-      "src/i18n/locales/es.json",
-      "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/marker.js"
     ],
     "external": ["cesium"]
   },
@@ -484,7 +481,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -514,6 +512,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/ui/keyGuidance.js",
       "src/ui/statusText.js",
@@ -534,7 +533,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -550,7 +550,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -570,6 +571,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/ui/statusBadge.js"
     ],
@@ -596,6 +598,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/layerNames.js"
     ],
     "external": []
@@ -630,6 +633,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium"]
@@ -646,6 +650,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": []
@@ -770,6 +775,9 @@
       "src/ui/scenePresentation.js",
       "src/ui/actionButton.js",
       "src/ui/scenes.js",
+      "src/ui/shareFollow.js",
+      "src/share/follow.js",
+      "src/data/trackedCamera.js",
       "src/ui/shareRestoration.js",
       "src/ui/shellElements.js",
       "src/ui/shellFeedback.js",
@@ -801,11 +809,13 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/ui/keyGuidance.js",
       "src/ui/layerNames.js",
       "src/ui/statusText.js",
-      "src/ui/statusBadge.js"
+      "src/ui/statusBadge.js",
+      "src/scopeMaskPolicy.js"
     ],
     "external": ["cesium"]
   },
@@ -921,6 +931,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium"]
@@ -957,6 +968,7 @@
       "src/data/layerState.js",
       "src/data/layerStateTokenReservations.json",
       "src/data/modelVisualAnchor.js",
+      "src/data/aircraftModelLighting.js",
       "src/data/motionModel.js",
       "src/data/renderAltitude.js",
       "src/data/routePlausible.js",
@@ -987,6 +999,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium"]
@@ -1009,6 +1022,7 @@
       "src/data/layerState.js",
       "src/data/layerStateTokenReservations.json",
       "src/data/modelVisualAnchor.js",
+      "src/data/aircraftModelLighting.js",
       "src/data/motionModel.js",
       "src/data/renderAltitude.js",
       "src/data/trackedModelRegime.js",
@@ -1033,7 +1047,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1054,6 +1069,7 @@
       "src/data/layerStateCoordinator.js",
       "src/data/layerStateTokenReservations.json",
       "src/data/modelVisualAnchor.js",
+      "src/data/aircraftModelLighting.js",
       "src/data/motionModel.js",
       "src/data/renderAltitude.js",
       "src/data/routePlausible.js",
@@ -1094,7 +1110,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1124,6 +1141,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/layers/recentImagery/display.js"
     ],
@@ -1153,14 +1171,14 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
   "satellites-layer": {
     "exports": ["./layers/satellites"],
     "modules": [
-      "src/data/issPass.js",
       "src/data/satelliteClass.js",
       "src/data/satellitePass.js",
       "src/sources/tle.js",
@@ -1185,6 +1203,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium", "satellite.js"]
@@ -1217,7 +1236,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1260,6 +1280,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/layers/installations/classLabel.js"
     ],
     "external": ["cesium", "@mapbox/vector-tile", "pbf"]
@@ -1284,6 +1305,7 @@
       "src/layers/awareness/navigation.js",
       "src/layers/awareness/panel.js",
       "src/layers/awareness/policy.js",
+      "src/layers/awareness/presentation.js",
       "src/layers/awareness/queries.js",
       "src/layers/awareness/rendering.js",
       "src/layers/awareness/state.js",
@@ -1295,6 +1317,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium"]
@@ -1344,7 +1367,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium", "pbf", "@mapbox/vector-tile"]
   },
@@ -1373,7 +1397,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1421,7 +1446,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["hls.js", "cesium"]
   },
@@ -1485,6 +1511,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/layers/streetLevel/providers/mapillary/policy.js"
     ],
     "external": ["cesium", "pbf", "@mapbox/vector-tile", "mapillary-js"]
@@ -1513,7 +1540,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium", "@mapbox/vector-tile", "pbf"]
   },
@@ -1553,7 +1581,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1575,7 +1604,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1631,7 +1661,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -1652,6 +1683,12 @@
       "src/voice/layerSummary.js",
       "src/voice/voiceCost.js",
       "src/voice/commands.js",
+      "src/voice/panel/actionObserver.js",
+      "src/voice/panel/host.js",
+      "src/voice/panel/inactivity.js",
+      "src/voice/panel/manualPanel.js",
+      "src/voice/panel/nativeActivity.js",
+      "src/voice/panel/preferences.js",
       "src/voice/session.js",
       "src/voice/sessionCommands.js",
       "src/voice/realtimeSession.js",
@@ -1688,6 +1725,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/statusText.js",
       "src/voice/providerCommands.js",
       "src/voice/providerCapabilities.js",
@@ -1849,14 +1887,12 @@
       "src/data/iconOrientation.js",
       "src/data/infrastructure.js",
       "src/data/installationFeedback.js",
-      "src/data/issPass.js",
       "src/data/labelArbiter.js",
       "src/data/idSwitches.js",
       "src/data/layerState.js",
       "src/data/layerStateCoordinator.js",
       "src/data/layerStateTokenReservations.json",
       "src/data/lifecycle.js",
-      "src/data/localGeojson.js",
       "src/data/localGeojsonCore.js",
       "src/data/localGeojsonLod.js",
       "src/data/local_data/natural_earth/marine.json",
@@ -1872,6 +1908,7 @@
       "src/data/militaryInstallations.js",
       "src/data/militaryRegistry.js",
       "src/data/modelVisualAnchor.js",
+      "src/data/aircraftModelLighting.js",
       "src/data/motionModel.js",
       "src/data/naturalEarthRegions.js",
       "src/data/adminBoundaries.js",
@@ -1940,6 +1977,7 @@
       "src/layers/awareness/navigation.js",
       "src/layers/awareness/panel.js",
       "src/layers/awareness/policy.js",
+      "src/layers/awareness/presentation.js",
       "src/layers/awareness/queries.js",
       "src/layers/awareness/rendering.js",
       "src/layers/awareness/state.js",
@@ -2185,6 +2223,11 @@
       "src/services/meshFloorSampler.js",
       "src/services/requests.js",
       "src/services/terrainHeights.js",
+      "src/share/follow.js",
+      "src/share/legacyShareState.js",
+      "src/share/shareLinkPath.js",
+      "src/share/viewCodec.js",
+      "src/share/wire.js",
       "src/sharelink.js",
       "src/sources/live/aircraft.js",
       "src/sources/live/contract.js",
@@ -2277,6 +2320,7 @@
       "src/ui/scenePresentation.js",
       "src/ui/actionButton.js",
       "src/ui/scenes.js",
+      "src/ui/shareFollow.js",
       "src/ui/shareRestoration.js",
       "src/ui/shellElements.js",
       "src/ui/shellFeedback.js",
@@ -2289,6 +2333,12 @@
       "src/ui/visualPresets.js",
       "src/ui/visualSettings.js",
       "src/voice/commands.js",
+      "src/voice/panel/actionObserver.js",
+      "src/voice/panel/host.js",
+      "src/voice/panel/inactivity.js",
+      "src/voice/panel/manualPanel.js",
+      "src/voice/panel/nativeActivity.js",
+      "src/voice/panel/preferences.js",
       "src/voice/control.js",
       "src/voice/gevActions.js",
       "src/agent/worldPacket.js",
@@ -2353,6 +2403,12 @@
       "src/layers/gnss/index.js",
       "src/layers/gnss/source.js",
       "src/layers/gnss/records.js",
+      "src/app/layers/ghostMaps.js",
+      "src/layers/ghostMaps/index.js",
+      "src/layers/ghostMaps/catalog.js",
+      "src/layers/ghostMaps/records.js",
+      "src/layers/ghostMaps/kml.js",
+      "src/layers/ghostMaps/source.js",
       "src/layers/cctv/sourcePolicy.js",
       "src/sources/reference.js",
       "src/search/nominatim.js",
@@ -2552,6 +2608,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/layers/recentImagery/display.js",
       "src/ui/keyGuidance.js",
@@ -2570,7 +2627,9 @@
       "src/voice/geminiSession.js",
       "src/voice/geminiAudio.js",
       "src/voice/geminiCaptureWorklet.js",
-      "src/ui/statusBadge.js"
+      "src/ui/statusBadge.js",
+      "src/sceneCommandRelease.js",
+      "src/scopeMaskPolicy.js"
     ],
     "external": [
       "hls.js",
@@ -2665,13 +2724,11 @@
       "src/data/iconOrientation.js",
       "src/data/infrastructure.js",
       "src/data/installationFeedback.js",
-      "src/data/issPass.js",
       "src/data/satellitePass.js",
       "src/data/labelArbiter.js",
       "src/data/idSwitches.js",
       "src/data/layerState.js",
       "src/data/layerStateTokenReservations.json",
-      "src/data/localGeojson.js",
       "src/data/localGeojsonCore.js",
       "src/data/localGeojsonLod.js",
       "src/data/local_data/natural_earth/marine.json",
@@ -2681,6 +2738,7 @@
       "src/data/installationNames.js",
       "src/data/militaryInstallationData.js",
       "src/data/modelVisualAnchor.js",
+      "src/data/aircraftModelLighting.js",
       "src/data/motionModel.js",
       "src/data/naturalEarthRegions.js",
       "src/data/adminBoundaries.js",
@@ -2730,6 +2788,7 @@
       "src/layers/awareness/navigation.js",
       "src/layers/awareness/panel.js",
       "src/layers/awareness/policy.js",
+      "src/layers/awareness/presentation.js",
       "src/layers/awareness/queries.js",
       "src/layers/awareness/rendering.js",
       "src/layers/awareness/state.js",
@@ -2986,6 +3045,12 @@
       "src/layers/gnss/index.js",
       "src/layers/gnss/source.js",
       "src/layers/gnss/records.js",
+      "src/app/layers/ghostMaps.js",
+      "src/layers/ghostMaps/index.js",
+      "src/layers/ghostMaps/catalog.js",
+      "src/layers/ghostMaps/records.js",
+      "src/layers/ghostMaps/kml.js",
+      "src/layers/ghostMaps/source.js",
       "src/layers/cctv/sourcePolicy.js",
       "src/search/nominatim.js",
       "src/nominatimGeocode.js",
@@ -3128,6 +3193,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js",
       "src/layers/recentImagery/display.js",
       "src/layers/installations/classLabel.js",
@@ -3138,7 +3204,10 @@
       "src/layers/airQuality/source.js",
       "src/ui/statusText.js",
       "src/ui/layerNames.js",
-      "src/layers/streetLevel/providers/mapillary/policy.js"
+      "src/layers/streetLevel/providers/mapillary/policy.js",
+      "src/data/geoImportImages.js",
+      "src/data/geoImportPins.js",
+      "src/data/geoFileImport.js"
     ],
     "external": [
       "hls.js",
@@ -3235,6 +3304,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/i18n/index.js"
     ],
     "external": ["cesium"]
@@ -3250,13 +3320,15 @@
       "src/data/layerStateTokenReservations.json",
       "src/loadingFeedback.js",
       "src/navigationPolicy.js",
+      "src/share/follow.js",
       "src/ui/shareRestoration.js",
       "src/ui/uiLifetime.js",
       "src/i18n/index.js",
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -3287,11 +3359,15 @@
       "src/ui/visualPresets.js",
       "src/ui/visualSettings.js",
       "src/ui/segmentedControl.js",
+      "src/i18n/marker.js",
       "src/i18n/index.js",
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
+      "src/scopeMaskPolicy.js",
+      "src/ui/displayControls.js"
     ],
     "external": ["cesium"]
   },
@@ -3315,7 +3391,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": []
   },
@@ -3407,6 +3484,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/unitLabels.js"
     ],
     "external": ["cesium"]
@@ -3462,6 +3540,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/statusText.js",
       "src/voice/providerCapabilities.js"
     ],
@@ -3654,7 +3733,6 @@
     "exports": ["./layers/transit/standalone"],
     "modules": [
       "src/cyberSonar.js",
-      "src/app/sourceSlot.js",
       "src/celestialRing.js",
       "src/data/approxDistance.js",
       "src/data/cameraSensitivity.js",
@@ -3716,7 +3794,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium", "egm96-universal", "pbf"]
   },
@@ -3759,7 +3838,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium", "pbf"]
   },
@@ -3812,7 +3892,8 @@
       "src/i18n/locale.js",
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
-      "src/i18n/locales/zh-CN.json"
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json"
     ],
     "external": ["cesium"]
   },
@@ -3829,6 +3910,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/statusText.js",
       "src/ui/layerNames.js"
     ],
@@ -3843,6 +3925,69 @@
     ],
     "external": []
   },
+  "share-view-codec": {
+    "exports": ["./share/view-codec"],
+    "modules": [
+      "src/share/viewCodec.js",
+      "src/share/follow.js",
+      "src/share/wire.js",
+      "src/ui/visualPresets.js",
+      "src/bloom.js",
+      "src/styles/anime.js",
+      "src/styles/noir.js",
+      "src/styles/retro.js",
+      "src/styles/snow.js",
+      "src/styles/surveillance.js",
+      "src/styles/thermal.js",
+      "src/view/index.js",
+      "src/data/layerState.js",
+      "src/data/layerStateTokenReservations.json",
+      "src/data/idSwitches.js",
+      "src/data/detectionPolicy.js",
+      "src/scopeMaskPolicy.js",
+      "src/i18n/marker.js"
+    ],
+    "external": []
+  },
+  "share-link-path": {
+    "exports": ["./share/link-path"],
+    "modules": ["src/share/shareLinkPath.js"],
+    "external": []
+  },
+  "ghostmaps": {
+    "exports": ["./layers/ghostmaps"],
+    "modules": [
+      "src/layers/ghostMaps/index.js",
+      "src/layers/ghostMaps/catalog.js",
+      "src/layers/ghostMaps/records.js",
+      "src/layers/ghostMaps/kml.js",
+      "src/layers/ghostMaps/source.js",
+      "src/sources/httpBody.js",
+      "src/data/geoFileImport.js",
+      "src/i18n/marker.js",
+      "src/i18n/index.js",
+      "src/i18n/locale.js",
+      "src/i18n/locales/es.json",
+      "src/i18n/locales/ru.json",
+      "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
+      "src/data/geoImportImages.js",
+      "src/data/geoImportPins.js",
+      "src/layers/streetLevel/tileMath.js",
+      "src/layers/streetLevel/view.js"
+    ],
+    "external": ["cesium"]
+  },
+  "ghostmaps-source": {
+    "exports": ["./layers/ghostmaps/source"],
+    "modules": [
+      "src/layers/ghostMaps/source.js",
+      "src/layers/ghostMaps/catalog.js",
+      "src/sources/httpBody.js",
+      "src/i18n/marker.js"
+    ],
+    "external": []
+  },
   "perimeters-source": {
     "exports": ["./layers/perimeters/source"],
     "modules": [
@@ -4022,6 +4167,7 @@
       "src/i18n/locales/es.json",
       "src/i18n/locales/ru.json",
       "src/i18n/locales/zh-CN.json",
+      "src/i18n/locales/zh-Hant.json",
       "src/ui/statusText.js",
       "src/ui/layerNames.js"
     ],
diff --git a/scripts/qa-ghostmaps.mjs b/scripts/qa-ghostmaps.mjs
new file mode 100644
index 000000000..83dc8ed97
--- /dev/null
+++ b/scripts/qa-ghostmaps.mjs
@@ -0,0 +1,645 @@
+#!/usr/bin/env node
+/**
+ * qa-ghostmaps.mjs — headless proof for the S2 Underground GhostMaps layer
+ * (id `s2-ghostmaps`): S2's public KMZ intel products, kept current from
+ * github.com/s2underground/GhostMaps.
+ *
+ * Drives the REAL app in headless Chromium against a dev server (keyless).
+ *
+ *   (i)   LIVE — enabling the layer loads the default products (Common
+ *         Intelligence Picture and the 30-day kinetic pull) from the live
+ *         repository through /api/ghostmaps, one data source per product,
+ *         matching the proxy's catalog commit; the row shows one chip per
+ *         catalog product with the defaults active, and the page holds an
+ *         open event stream to /api/ghostmaps/events.
+ *   (ii)  PICK — a Common Intelligence Picture marker at the screen centre
+ *         picks as this layer's entity; clicking it paints its report card
+ *         and clicking empty ground clears it.
+ *   (iii) PUSH (synthetic) — the event stream is replaced in the page and a
+ *         catalog naming a new edition of one product is pushed: only that
+ *         product reloads (a new data source replaces the old one, no
+ *         duplicates), the other keeps its data source. A catalog without a
+ *         product removes it.
+ *   (iv)  CHIPS — clicking an active product chip removes that product,
+ *         clicking it again restores it; the choice survives a reload.
+ *   (v)   DISABLE — every GhostMaps data source leaves the viewer.
+ *   (vi)  VIEWPORT — at a 390x844 phone viewport the open row and its chips
+ *         fit the panel width with no horizontal overflow.
+ *   (vii) FAR SIDE — pins skip the depth test, so they are horizon-culled:
+ *         seen from over the Indian Ocean no pin clearly behind the planet is
+ *         shown; back over North America the near-side pins show again.
+ *
+ * Screenshots go to qa-shots/ghostmaps-*.png (gitignored).
+ *
+ * Run:  node scripts/qa-ghostmaps.mjs --url http://localhost:4173
+ * Optional: --timeout-ms 180000 for a slow boot, --shots <dir>.
+ * Exits non-zero on any FAIL. Does not commit anything.
+ */
+
+import puppeteer from 'puppeteer';
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const argv = process.argv.slice(2);
+const getOpt = (name, dflt) => {
+  const i = argv.indexOf(name);
+  return i >= 0 && argv[i + 1] ? argv[i + 1] : dflt;
+};
+const APP_URL = getOpt('--url', 'http://localhost:4173');
+const HEADFUL = argv.includes('--headful');
+const TIMEOUT_MS = Number(getOpt('--timeout-ms', '90000'));
+const SHOTS_DIR = path.resolve(
+  getOpt('--shots', path.join(__dirname, '..', 'qa-shots')),
+);
+const LAYER_ID = 's2-ghostmaps';
+
+const results = [];
+function record(name, ok, detail) {
+  results.push({ name, ok, detail });
+  const tag = ok ? '\x1b[32mPASS\x1b[0m' : '\x1b[31mFAIL\x1b[0m';
+  console.log(`  [${tag}] ${name}${detail ? `  — ${detail}` : ''}`);
+}
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+async function boot(page) {
+  await page.goto(`${APP_URL}/?welcome=0`, {
+    waitUntil: 'domcontentloaded',
+    timeout: TIMEOUT_MS,
+  });
+  await page.waitForFunction(
+    () => window.__godsEyeView?.viewer && window.__godsEyeView?.dataManager,
+    { timeout: TIMEOUT_MS },
+  );
+  await sleep(5000);
+  await page.keyboard.press('Escape');
+}
+
+/** GhostMaps data sources on the viewer: name → entity count. */
+function ghostSources(prefix) {
+  const { dataSources } = window.__godsEyeView.viewer;
+  const out = [];
+  for (let i = 0; i < dataSources.length; i++) {
+    const ds = dataSources.get(i);
+    if (ds.name?.startsWith(prefix))
+      out.push({ name: ds.name, count: ds.entities.values.length });
+  }
+  return out;
+}
+
+function paintedOverlayPixels() {
+  const canvas = document.getElementById('world-overlay-canvas');
+  if (!canvas) return -1;
+  const pixels = canvas
+    .getContext('2d')
+    .getImageData(0, 0, canvas.width, canvas.height).data;
+  let count = 0;
+  for (let i = 3; i < pixels.length; i += 4) if (pixels[i] > 0) count++;
+  return count;
+}
+
+async function enableAndSettle(page) {
+  await page.evaluate((id) => {
+    const panel = document.getElementById('data-panel');
+    if (panel?.classList.contains('collapsed'))
+      panel.querySelector('[data-collapse-target="data-panel"]')?.click();
+    return window.__godsEyeView.dataManager.setEnabled(id, true);
+  }, LAYER_ID);
+  await page.waitForFunction(
+    (id) => {
+      const stats = window.__godsEyeView.dataManager.layers
+        .get(id)
+        .module.getStats();
+      return !stats.loading && stats.count > 0;
+    },
+    { timeout: TIMEOUT_MS, polling: 500 },
+    LAYER_ID,
+  );
+}
+
+const stats = (page) =>
+  page.evaluate(
+    (id) => window.__godsEyeView.dataManager.layers.get(id).module.getStats(),
+    LAYER_ID,
+  );
+const sources = (page) =>
+  page.evaluate(`(${ghostSources})(${JSON.stringify(`${LAYER_ID}:`)})`);
+
+async function showRow(page) {
+  await page.evaluate((id) => {
+    document
+      .querySelector(`[data-layer-id="${id}"]`)
+      ?.scrollIntoView({ block: 'center' });
+  }, LAYER_ID);
+  await sleep(400);
+}
+
+async function main() {
+  fs.mkdirSync(SHOTS_DIR, { recursive: true });
+  const browser = await puppeteer.launch({
+    headless: !HEADFUL,
+    args: ['--use-angle=swiftshader', '--enable-unsafe-swiftshader'],
+    defaultViewport: { width: 1440, height: 900 },
+  });
+  try {
+    // ---- (i) LIVE ---------------------------------------------------------
+    const page = await browser.newPage();
+    // Start clean once; a reload must keep what the page stored.
+    await page.evaluateOnNewDocument(() => {
+      try {
+        if (sessionStorage.getItem('qa-ghostmaps-clean')) return;
+        localStorage.clear();
+        sessionStorage.setItem('qa-ghostmaps-clean', '1');
+      } catch {
+        /* sandboxed frames have no storage */
+      }
+    });
+    page.on('pageerror', (error) =>
+      console.log(`  [page error] ${error.message}`),
+    );
+    await boot(page);
+    const catalog = await page.evaluate(() =>
+      fetch('/api/ghostmaps/catalog').then((r) => r.json()),
+    );
+    record(
+      'LIVE: proxy catalog names a commit and the default products',
+      /^[0-9a-f]{40}$/.test(catalog.commit || '') &&
+        ['cip', 'kinetic-30d'].every((id) =>
+          catalog.products.some((p) => p.id === id && p.defaultOn),
+        ),
+      `${catalog.commit?.slice(0, 7)} "${catalog.message}", ${catalog.products.length} products`,
+    );
+    const t0 = Date.now();
+    await enableAndSettle(page);
+    const live = await stats(page);
+    const liveSources = await sources(page);
+    record(
+      'LIVE: default products load as one data source each',
+      liveSources.length === 2 &&
+        liveSources.every((s) => s.count > 0) &&
+        live.products.sort().join() === 'cip,kinetic-30d',
+      `${liveSources.map((s) => `${s.name}=${s.count}`).join(', ')} in ${Date.now() - t0} ms`,
+    );
+    record(
+      'LIVE: layer reports the proxy commit and no error',
+      live.commit === catalog.commit && !live.error,
+      `commit ${live.commit?.slice(0, 7)}, error ${live.error}`,
+    );
+    await showRow(page);
+    const chips = await page.evaluate(
+      (id) =>
+        [
+          ...document.querySelectorAll(
+            `[data-layer-id="${id}"] .data-toggle-chip`,
+          ),
+        ].map((chip) => ({
+          id: chip.dataset.chipId,
+          active: chip.getAttribute('aria-pressed') === 'true',
+        })),
+      LAYER_ID,
+    );
+    record(
+      'LIVE: one chip per product, defaults pressed',
+      chips.length === catalog.products.length &&
+        chips.every(
+          (chip) =>
+            chip.active ===
+            catalog.products.find((p) => p.id === chip.id)?.defaultOn,
+        ),
+      chips.map((c) => `${c.id}${c.active ? '*' : ''}`).join(' '),
+    );
+    const stream = await page
+      .waitForFunction(
+        (id) =>
+          window.__godsEyeView.dataManager.layers.get(id).module.getStats()
+            .stream === 'open',
+        { timeout: 15000, polling: 250 },
+        LAYER_ID,
+      )
+      .then(
+        () => true,
+        () => false,
+      );
+    record('LIVE: the /api/ghostmaps/events stream is open', stream);
+    await page.screenshot({ path: path.join(SHOTS_DIR, 'ghostmaps-live.png') });
+
+    // ---- (ii) PICK ----------------------------------------------------------
+    const target = await page.evaluate((id) => {
+      const gev = window.__godsEyeView;
+      const ds = [...Array(gev.viewer.dataSources.length).keys()]
+        .map((i) => gev.viewer.dataSources.get(i))
+        .find((item) => item.name === `${id}:cip`);
+      const entity = ds.entities.values.find((e) => e.billboard);
+      const carto = gev.viewer.scene.globe.ellipsoid.cartesianToCartographic(
+        entity.position.getValue(gev.viewer.clock.currentTime),
+      );
+      try {
+        gev.viewer.camera.cancelFlight();
+      } catch {
+        /* no flight */
+      }
+      gev.viewer.camera.setView({
+        destination: gev.viewer.scene.globe.ellipsoid.cartographicToCartesian({
+          longitude: carto.longitude,
+          latitude: carto.latitude,
+          height: 40000,
+        }),
+        orientation: { heading: 0, pitch: -Math.PI / 2, roll: 0 },
+      });
+      gev.viewer.scene.requestRender?.();
+      return entity.id;
+    }, LAYER_ID);
+    await page
+      .waitForFunction(
+        () => window.__godsEyeView.viewer.scene.globe.tilesLoaded,
+        { timeout: 30000 },
+      )
+      .catch(() => {});
+    // The horizon cull reveals the pin on the frame after the camera moves.
+    await page
+      .waitForFunction(
+        () => {
+          const v = window.__godsEyeView.viewer;
+          v.scene.requestRender?.();
+          const c = v.scene.canvas;
+          return v.scene
+            .drillPick({ x: c.clientWidth / 2, y: c.clientHeight / 2 }, 8)
+            .some((p) =>
+              String(p?.id?.id ?? p?.id ?? '').startsWith('ghostmaps:cip:'),
+            );
+        },
+        { timeout: 15000, polling: 500 },
+      )
+      .catch(() => {});
+    const probe = await page.evaluate(() => {
+      const v = window.__godsEyeView.viewer;
+      const c = v.scene.canvas;
+      const box = c.getBoundingClientRect();
+      const centre = { x: c.clientWidth / 2, y: c.clientHeight / 2 };
+      const picked = v.scene.drillPick(centre, 8);
+      // Empty ground: the first point below the marker (the card is drawn
+      // above it) that picks nothing at all; markers can be dense in a city.
+      let empty = null;
+      for (let r = 120; r < 420 && !empty; r += 60)
+        for (const a of [2, 1, 3, 0, 4]) {
+          const p = {
+            x: centre.x + r * Math.cos((a * Math.PI) / 4),
+            y: centre.y + r * Math.sin((a * Math.PI) / 4),
+          };
+          if (!v.scene.pick(p)) {
+            empty = p;
+            break;
+          }
+        }
+      empty ||= { x: centre.x + 400, y: centre.y + 300 };
+      return {
+        ids: picked.map((p) => String(p?.id?.id ?? p?.id ?? '')),
+        centre: { x: centre.x + box.left, y: centre.y + box.top },
+        empty: { x: empty.x + box.left, y: empty.y + box.top },
+      };
+    });
+    record(
+      'PICK: the centred marker picks as a GhostMaps entity',
+      probe.ids.some((id) => id.startsWith('ghostmaps:cip:')),
+      `${target} → [${probe.ids.slice(0, 3).join(', ')}]`,
+    );
+    const before = await page.evaluate(paintedOverlayPixels);
+    await page.mouse.click(probe.centre.x, probe.centre.y);
+    const painted = await page
+      .waitForFunction(`(${paintedOverlayPixels})() > ${before + 100}`, {
+        timeout: 10000,
+        polling: 250,
+      })
+      .then(
+        () => true,
+        () => false,
+      );
+    const after = await page.evaluate(paintedOverlayPixels);
+    record(
+      'PICK: clicking the marker paints its report card',
+      painted,
+      `${before} → ${after} pixels`,
+    );
+    await page.screenshot({ path: path.join(SHOTS_DIR, 'ghostmaps-card.png') });
+    const cardState = () =>
+      page.evaluate((id) => {
+        const d = window.__gevWorldOverlay?.getDiagnostics?.();
+        return {
+          entries: d?.entriesBySource?.[id] ?? null,
+          painted: d?.paintedBySource?.[id] ?? null,
+        };
+      }, LAYER_ID);
+    const selectedState = await cardState();
+    record(
+      'PICK: the overlay host holds and paints exactly one card',
+      selectedState.entries === 1 && selectedState.painted === 1,
+      JSON.stringify(selectedState),
+    );
+    await page.mouse.click(probe.empty.x, probe.empty.y);
+    // The overlay canvas is `desynchronized`, so headless read-back can
+    // return a stale buffer; the host's own model is the authority here.
+    const cleared = await page
+      .waitForFunction(
+        (id) => {
+          const d = window.__gevWorldOverlay.getDiagnostics();
+          return (
+            d.entriesBySource?.[id] === 0 && !(d.paintedBySource?.[id] > 0)
+          );
+        },
+        { timeout: 10000, polling: 250 },
+        LAYER_ID,
+      )
+      .then(
+        () => true,
+        () => false,
+      );
+    record(
+      'PICK: clicking empty ground clears the card',
+      cleared,
+      JSON.stringify(await cardState()),
+    );
+
+    // ---- (vii) FAR SIDE ---------------------------------------------------
+    // Pins skip the depth test; with Google 3D tiles nothing else hides the
+    // far side. A pin clearly behind the planet (sphere test with margin) must
+    // be hidden, and pins facing the camera must still show.
+    const horizonCounts = (lon, lat) =>
+      page.evaluate(
+        async (id, lo, la) => {
+          const gev = window.__godsEyeView;
+          const d2r = Math.PI / 180;
+          try {
+            gev.viewer.camera.cancelFlight();
+          } catch {
+            /* no flight */
+          }
+          gev.viewer.camera.setView({
+            destination:
+              gev.viewer.scene.globe.ellipsoid.cartographicToCartesian({
+                longitude: lo * d2r,
+                latitude: la * d2r,
+                height: 18_000_000,
+              }),
+            orientation: { heading: 0, pitch: -Math.PI / 2, roll: 0 },
+          });
+          gev.viewer.scene.requestRender?.();
+          await new Promise((r) => setTimeout(r, 1200));
+          const c = gev.viewer.camera.positionWC;
+          const norm = (v) => Math.hypot(v.x, v.y, v.z);
+          let far = 0;
+          let nearShown = 0;
+          for (let i = 0; i < gev.viewer.dataSources.length; i++) {
+            const ds = gev.viewer.dataSources.get(i);
+            if (!ds.name?.startsWith(`${id}:`)) continue;
+            for (const e of ds.entities.values) {
+              if (!e.billboard) continue;
+              const p = e.position.getValue(gev.viewer.clock.currentTime);
+              // Angle from the camera's nadir to the pin, against the
+              // geometric horizon angle; the cull's 1 km margin shows pins up
+              // to about 1° past it, so "clearly behind" is beyond 2°.
+              const angle = Math.acos(
+                (p.x * c.x + p.y * c.y + p.z * c.z) / (norm(p) * norm(c)),
+              );
+              const horizon = Math.acos(norm(p) / norm(c));
+              const margin = (2 * Math.PI) / 180;
+              if (e.show && angle > horizon + margin) far++;
+              if (e.show && angle < horizon - margin) nearShown++;
+            }
+          }
+          return { far, nearShown };
+        },
+        LAYER_ID,
+        lon,
+        lat,
+      );
+    const fromIndianOcean = await horizonCounts(80, -30);
+    record(
+      'FAR SIDE: pins behind the planet are hidden',
+      fromIndianOcean.far === 0,
+      JSON.stringify(fromIndianOcean),
+    );
+    await page.screenshot({
+      path: path.join(SHOTS_DIR, 'ghostmaps-far-side.png'),
+    });
+    const fromAmerica = await horizonCounts(-98, 39);
+    record(
+      'FAR SIDE: pins facing the camera show again',
+      fromAmerica.far === 0 && fromAmerica.nearShown > 100,
+      JSON.stringify(fromAmerica),
+    );
+
+    // ---- (iv) CHIPS -------------------------------------------------------
+    const clickChip = async (id) => {
+      // Row controls render on the next frame after the layer settles.
+      await page.waitForSelector(
+        `[data-layer-id="${LAYER_ID}"] .data-toggle-chip[data-chip-id="${id}"]`,
+        { timeout: 15000 },
+      );
+      return page.evaluate(
+        (layer, chip) =>
+          document
+            .querySelector(
+              `[data-layer-id="${layer}"] .data-toggle-chip[data-chip-id="${chip}"]`,
+            )
+            ?.click(),
+        LAYER_ID,
+        id,
+      );
+    };
+    await clickChip('kinetic-30d');
+    await page.waitForFunction(
+      (id) =>
+        !window.__godsEyeView.dataManager.layers
+          .get(id)
+          .module.getStats()
+          .products.includes('kinetic-30d'),
+      { timeout: 15000 },
+      LAYER_ID,
+    );
+    const without = await sources(page);
+    record(
+      'CHIPS: turning a product off removes only its data source',
+      without.length === 1 && without[0].name === `${LAYER_ID}:cip`,
+      without.map((s) => s.name).join(', '),
+    );
+    await page.reload({ waitUntil: 'domcontentloaded' });
+    await page.waitForFunction(() => window.__godsEyeView?.dataManager, {
+      timeout: TIMEOUT_MS,
+    });
+    await sleep(3000);
+    await enableAndSettle(page);
+    const kept = await stats(page);
+    record(
+      'CHIPS: the product choice survives a reload',
+      kept.products.join() === 'cip',
+      kept.products.join(', '),
+    );
+    await showRow(page);
+    await clickChip('kinetic-30d');
+    await page.waitForFunction(
+      (id) =>
+        window.__godsEyeView.dataManager.layers
+          .get(id)
+          .module.getStats()
+          .products.includes('kinetic-30d'),
+      { timeout: 30000 },
+      LAYER_ID,
+    );
+    record(
+      'CHIPS: turning it back on restores it',
+      (await sources(page)).length === 2,
+    );
+
+    // ---- (v) DISABLE ------------------------------------------------------
+    await page.evaluate(
+      (id) => window.__godsEyeView.dataManager.setEnabled(id, false),
+      LAYER_ID,
+    );
+    await sleep(500);
+    record(
+      'DISABLE: every GhostMaps data source leaves the viewer',
+      (await sources(page)).length === 0,
+    );
+    await page.close();
+
+    // ---- (iii) PUSH (synthetic) ----------------------------------------------
+    const push = await browser.newPage();
+    await push.evaluateOnNewDocument(() => {
+      localStorage.clear();
+      // A controllable stand-in for the real stream.
+      class QaEventSource {
+        constructor(url) {
+          this.url = url;
+          this.listeners = new Set();
+          (window.__qaStreams ||= []).push(this);
+        }
+        addEventListener(type, listener) {
+          if (type === 'catalog') this.listeners.add(listener);
+        }
+        removeEventListener(type, listener) {
+          this.listeners.delete(listener);
+        }
+        close() {
+          this.closed = true;
+        }
+        emit(catalog) {
+          for (const listener of this.listeners)
+            listener({ data: JSON.stringify(catalog) });
+        }
+      }
+      window.EventSource = QaEventSource;
+    });
+    await boot(push);
+    await enableAndSettle(push);
+    const identity = () =>
+      push.evaluate((id) => {
+        const { dataSources } = window.__godsEyeView.viewer;
+        window.__qaIds ||= new WeakMap();
+        window.__qaNext ||= 1;
+        const out = {};
+        for (let i = 0; i < dataSources.length; i++) {
+          const ds = dataSources.get(i);
+          if (!ds.name?.startsWith(`${id}:`)) continue;
+          if (!window.__qaIds.has(ds))
+            window.__qaIds.set(ds, window.__qaNext++);
+          out[ds.name] = window.__qaIds.get(ds);
+        }
+        return out;
+      }, LAYER_ID);
+    const first = await identity();
+    const pushed = Date.now();
+    await push.evaluate(async (id) => {
+      const catalog = await fetch('/api/ghostmaps/catalog').then((r) =>
+        r.json(),
+      );
+      const kinetic = catalog.products.find((p) => p.id === 'kinetic-30d');
+      kinetic.version = 'f'.repeat(40);
+      catalog.message = 'QA push';
+      window.__qaStreams
+        .filter((s) => !s.closed)
+        .forEach((s) => s.emit(catalog));
+    }, LAYER_ID);
+    await push.waitForFunction(
+      (id) => {
+        const layer = window.__godsEyeView.dataManager.layers.get(id).module;
+        return (
+          !layer.getStats().loading &&
+          layer.getRowControls().info.includes('QA push')
+        );
+      },
+      { timeout: 20000, polling: 100 },
+      LAYER_ID,
+    );
+    await sleep(500);
+    const second = await identity();
+    record(
+      'PUSH: a new edition reloads only that product',
+      Object.keys(second).length === 2 &&
+        second[`${LAYER_ID}:kinetic-30d`] !==
+          first[`${LAYER_ID}:kinetic-30d`] &&
+        second[`${LAYER_ID}:cip`] === first[`${LAYER_ID}:cip`],
+      `${JSON.stringify(first)} → ${JSON.stringify(second)} in ${Date.now() - pushed} ms`,
+    );
+    await push.evaluate(async () => {
+      const catalog = await fetch('/api/ghostmaps/catalog').then((r) =>
+        r.json(),
+      );
+      catalog.products = catalog.products.filter((p) => p.id !== 'kinetic-30d');
+      window.__qaStreams
+        .filter((s) => !s.closed)
+        .forEach((s) => s.emit(catalog));
+    });
+    await sleep(1000);
+    const third = await identity();
+    record(
+      'PUSH: a product leaving the catalog leaves the globe',
+      Object.keys(third).join() === `${LAYER_ID}:cip`,
+      Object.keys(third).join(', '),
+    );
+    await push.close();
+
+    // ---- (vi) VIEWPORT ----------------------------------------------------
+    const phone = await browser.newPage();
+    await phone.setViewport({ width: 390, height: 844, isMobile: true });
+    await phone.evaluateOnNewDocument(() => localStorage.clear());
+    await boot(phone);
+    await enableAndSettle(phone);
+    await showRow(phone);
+    const fit = await phone.evaluate((id) => {
+      const row = document.querySelector(`[data-layer-id="${id}"]`);
+      const panel = document.getElementById('data-panel');
+      const controls = row?.querySelector('.data-toggle-controls');
+      return {
+        row: Boolean(row),
+        overflow: controls ? controls.scrollWidth - controls.clientWidth : -1,
+        pageOverflow:
+          document.documentElement.scrollWidth -
+          document.documentElement.clientWidth,
+        panelRight: panel?.getBoundingClientRect().right,
+        width: window.innerWidth,
+      };
+    }, LAYER_ID);
+    record(
+      'VIEWPORT: chips fit the phone-width panel',
+      fit.row && fit.overflow <= 1 && fit.pageOverflow <= 0,
+      JSON.stringify(fit),
+    );
+    await phone.screenshot({
+      path: path.join(SHOTS_DIR, 'ghostmaps-phone.png'),
+    });
+    await phone.close();
+  } finally {
+    await browser.close();
+  }
+  const failed = results.filter((r) => !r.ok);
+  console.log(
+    `\n${results.length - failed.length}/${results.length} passed. Screenshots: ${SHOTS_DIR}`,
+  );
+  process.exit(failed.length ? 1 : 0);
+}
+
+main().catch((error) => {
+  console.error(error);
+  process.exit(1);
+});
diff --git a/scripts/qa-layer-visibility.mjs b/scripts/qa-layer-visibility.mjs
new file mode 100644
index 000000000..8a903918e
--- /dev/null
+++ b/scripts/qa-layer-visibility.mjs
@@ -0,0 +1,124 @@
+#!/usr/bin/env node
+/**
+ * Real-browser proof for manager-owned periodic work and document visibility.
+ * Uses the app's development-only layer registration seam; no provider keys.
+ * Run: node scripts/qa-layer-visibility.mjs --url http://localhost:4173
+ * Hiding uses a real background tab, never a patched document.hidden getter.
+ */
+import assert from 'node:assert/strict';
+import puppeteer from 'puppeteer';
+import { chromeExecutablePath } from './qa-chrome.mjs';
+
+const args = process.argv.slice(2);
+const urlIndex = args.indexOf('--url');
+const url = new URL(
+  (urlIndex >= 0 ? args[urlIndex + 1] : undefined) ||
+    process.env.QA_BASE_URL ||
+    'http://localhost:4173',
+);
+url.searchParams.set('welcome', '0');
+const browser = await puppeteer.launch({
+  executablePath: chromeExecutablePath(),
+  headless: true,
+  args: [
+    '--no-sandbox',
+    '--disable-background-timer-throttling',
+    '--disable-renderer-backgrounding',
+  ],
+});
+const pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const check = (name, actual, expected) => {
+  assert.equal(actual, expected, name);
+  console.log(`PASS ${name}: ${actual}`);
+};
+try {
+  const page = await browser.newPage();
+  const focus = await page.createCDPSession();
+  await focus.send('Emulation.setFocusEmulationEnabled', { enabled: true });
+  await page.goto(url.href, { waitUntil: 'domcontentloaded' });
+  await page.waitForFunction(
+    () => window.__gevQaRegisterLayer && window.__godsEyeView?.dataManager,
+  );
+  await page.evaluate(async () => {
+    const manager = window.__godsEyeView.dataManager;
+    window.__qaVisibilityUpdates = 0;
+    window.__gevQaRegisterLayer(manager, {
+      id: 'qa-document-visibility',
+      name: 'Visibility QA',
+      updateInterval: 750,
+      init() {},
+      enable() {},
+      disable() {},
+      destroy() {},
+      async update() {
+        window.__qaVisibilityUpdates++;
+        return true;
+      },
+      getStats() {
+        return { count: window.__qaVisibilityUpdates };
+      },
+    });
+    await manager.setEnabled('qa-document-visibility', true, { origin: 'qa' });
+  });
+  const count = () => page.evaluate(() => window.__qaVisibilityUpdates);
+  await page.waitForFunction(() => window.__qaVisibilityUpdates >= 3);
+  check('periodic updates run while visible', (await count()) >= 3, true);
+  await focus.send('Emulation.setFocusEmulationEnabled', { enabled: false });
+  const cover = await browser.newPage();
+  await cover.bringToFront();
+  await page.waitForFunction(() => document.visibilityState === 'hidden');
+  const hiddenCount = await count();
+  await pause(2200);
+  check('hidden tab makes no periodic updates', await count(), hiddenCount);
+  check(
+    'explicit refresh remains available while hidden',
+    await page.evaluate(() =>
+      window.__godsEyeView.dataManager.refreshLayer('qa-document-visibility'),
+    ),
+    true,
+  );
+  check('explicit hidden refresh runs once', await count(), hiddenCount + 1);
+  await focus.send('Emulation.setFocusEmulationEnabled', { enabled: true });
+  await page.waitForFunction(
+    () =>
+      document.visibilityState === 'visible' &&
+      window.__qaVisibilityUpdates > 0,
+  );
+  await pause(200);
+  check(
+    'resume performs one overdue refresh without a catch-up burst',
+    await count(),
+    hiddenCount + 2,
+  );
+  await page.evaluate(() =>
+    window.__godsEyeView.dataManager.setEnabled(
+      'qa-document-visibility',
+      false,
+      { origin: 'qa' },
+    ),
+  );
+  const stopped = await count();
+  await focus.send('Emulation.setFocusEmulationEnabled', { enabled: false });
+  await cover.bringToFront();
+  await page.waitForFunction(() => document.visibilityState === 'hidden');
+  await focus.send('Emulation.setFocusEmulationEnabled', { enabled: true });
+  await pause(1100);
+  check(
+    'disabled layer does not resume on visibility change',
+    await count(),
+    stopped,
+  );
+  check(
+    'QA layer destroys cleanly',
+    await page.evaluate(() =>
+      window.__gevQaUnregisterLayer(
+        window.__godsEyeView.dataManager,
+        'qa-document-visibility',
+      ),
+    ),
+    true,
+  );
+  console.log('RESULT: 7 passed');
+} finally {
+  await browser.close();
+}
diff --git a/scripts/qa-scope-hud.mjs b/scripts/qa-scope-hud.mjs
new file mode 100644
index 000000000..7fece45ee
--- /dev/null
+++ b/scripts/qa-scope-hud.mjs
@@ -0,0 +1,681 @@
+#!/usr/bin/env node
+/**
+ * Scope and HUD browser acceptance. Requires the development server.
+ * Run: node scripts/qa-scope-hud.mjs
+ * Optional: QA_BASE_URL, QA_SCREENSHOT_DIR (screenshots stay outside the repo).
+ * Proves a fresh boot defaults to Scope ON at 100%, native checkbox click/Space,
+ * feather 0/11/100/200, layout independence,
+ * share/scene restore, and visible text backing including rotated metadata.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import puppeteer from 'puppeteer';
+
+const browser = await puppeteer.launch({
+  headless: true,
+  args: [
+    '--no-sandbox',
+    ...(process.platform === 'darwin'
+      ? ['--use-angle=metal', '--enable-gpu']
+      : ['--use-gl=angle', '--use-angle=swiftshader']),
+  ],
+});
+const page = await browser.newPage();
+const errors = [];
+page.on('pageerror', (error) => errors.push(error.message));
+let failures = 0;
+const check = (name, passed, detail) => {
+  console.log(`[${passed ? 'PASS' : 'FAIL'}] ${name}`);
+  if (!passed) {
+    failures += 1;
+    if (detail) console.log(JSON.stringify(detail));
+  }
+};
+const readScope = () =>
+  page.evaluate(() => {
+    const scope = window.__godsEyeView.styleManager.getVisualState().scope;
+    const canvas = document.getElementById('scope-mask');
+    const context = canvas.getContext('2d');
+    const radialX = Math.round(
+      canvas.width / 2 + Math.min(canvas.width, canvas.height) * 0.35,
+    );
+    return {
+      enabled: scope.enabled,
+      feather: scope.featherPct / 100,
+      cornerAlpha: context.getImageData(1, 1, 1, 1).data[3],
+      radialAlpha: context.getImageData(
+        radialX,
+        Math.round(canvas.height / 2),
+        1,
+        1,
+      ).data[3],
+      checked: document.getElementById('scope-toggle').checked,
+      disabled: document.getElementById('scope-feather-slider').disabled,
+      value: Number(document.getElementById('scope-feather-slider').value),
+      readout: document.getElementById('scope-feather-value').textContent,
+    };
+  });
+
+const readHudGlyphs = () =>
+  page.evaluate(() => {
+    const hud = document.getElementById('intel-hud');
+    const probe = document.createElement('span');
+    probe.style.display = 'none';
+    hud.appendChild(probe);
+    const baseline = {
+      color: getComputedStyle(probe).color,
+      shadow: getComputedStyle(probe).textShadow,
+    };
+    probe.remove();
+    const glyphs = [
+      '.hud-mode',
+      '.hud-system',
+      '.hud-summary-label',
+      '.hud-summary',
+      '.hud-orbital',
+      '#hud-mgrs',
+      '#hud-coll',
+    ].map((selector) => {
+      const el = hud.querySelector(selector);
+      const style = getComputedStyle(el);
+      let opacity = 1;
+      for (
+        let current = el;
+        current && current !== hud;
+        current = current.parentElement
+      )
+        opacity *= Number(getComputedStyle(current).opacity);
+      return {
+        selector,
+        color: style.color,
+        shadow: style.textShadow,
+        opacity,
+      };
+    });
+    return { baseline, glyphs };
+  });
+
+async function settleTextBackings(enabled) {
+  // The pre-existing active-style value transitions all properties for 300ms.
+  // Wait for its backing to finish changing before inspecting or capturing it.
+  await page
+    .waitForFunction(
+      (scopeEnabled) => {
+        const expected = scopeEnabled
+          ? 'rgba(0, 0, 0, 0)'
+          : 'rgba(0, 0, 0, 0.7)';
+        return [
+          ...document.querySelectorAll(
+            '#intel-hud .hud-readout, .scene-text-holdout',
+          ),
+        ].every(
+          (el) =>
+            getComputedStyle(el).backgroundColor === expected &&
+            getComputedStyle(el).boxShadow === 'none',
+        );
+      },
+      { timeout: 2_000 },
+      enabled,
+    )
+    .catch(() => null);
+}
+
+const readSceneChrome = () =>
+  page.evaluate(() => {
+    const title = document.querySelector('#title-bar h1');
+    const eye = title.querySelector('.title-logo');
+    const subtitle = document.querySelector('#title-bar .subtitle');
+    const label = document.querySelector('#style-indicator .indicator-label');
+    const rect = (el, text = false) => {
+      if (!el.getClientRects().length) return null;
+      const range = document.createRange();
+      range.selectNodeContents(el);
+      const box = text
+        ? range.getBoundingClientRect()
+        : el.getBoundingClientRect();
+      return {
+        left: box.left,
+        top: box.top,
+        right: box.right,
+        bottom: box.bottom,
+      };
+    };
+    const titleBox = rect(title);
+    const eyeBox = rect(eye);
+    const backing = getComputedStyle(title, '::before');
+    const plate = {
+      left: titleBox.left + parseFloat(backing.left),
+      top: titleBox.top + parseFloat(backing.top),
+      right: titleBox.right - parseFloat(backing.right),
+      bottom: titleBox.bottom - parseFloat(backing.bottom),
+    };
+    const contains = (box) =>
+      Object.entries(box).every(([side, value]) =>
+        ['left', 'top'].includes(side)
+          ? plate[side] <= value + 0.5
+          : plate[side] >= value - 0.5,
+      );
+    const probe = document.createElement('span');
+    document.body.appendChild(probe);
+    probe.style.color = 'var(--text-dim)';
+    const dim = getComputedStyle(probe).color;
+    probe.style.color = 'var(--text-secondary)';
+    const secondary = getComputedStyle(probe).color;
+    probe.remove();
+    return {
+      positions: {
+        title: titleBox,
+        eye: eyeBox,
+        text: rect(title.querySelector('[translate="no"]'), true),
+        subtitle: rect(subtitle, true),
+      },
+      titleUnbacked: backing.backgroundColor === 'rgba(0, 0, 0, 0)',
+      titleCovered:
+        backing.position === 'absolute' &&
+        backing.backgroundColor === 'rgba(0, 0, 0, 0.7)' &&
+        contains(titleBox) &&
+        contains(eyeBox),
+      leftAligned:
+        !rect(subtitle) || Math.abs(plate.left - rect(subtitle).left) <= 0.5,
+      colors: [getComputedStyle(subtitle).color, getComputedStyle(label).color],
+      dim,
+      secondary,
+    };
+  });
+
+function checkSceneChrome(name, before, after) {
+  const stable = Object.keys(before.positions).every((key) => {
+    const a = before.positions[key];
+    const b = after.positions[key];
+    return a && b
+      ? Object.keys(a).every((side) => Math.abs(a[side] - b[side]) <= 0.5)
+      : a === b;
+  });
+  check(`${name}: title, eye and subtitle stay in place across Scope`, stable, {
+    before,
+    after,
+  });
+  check(
+    `${name}: OFF title plate covers the eye and aligns with the subtitle`,
+    before.titleUnbacked && after.titleCovered && after.leftAligned,
+    after,
+  );
+  check(
+    `${name}: secondary labels brighten only with Scope OFF`,
+    before.colors.every((color) => color === before.dim) &&
+      after.colors.every((color) => color === after.secondary),
+    { before: before.colors, after: after.colors },
+  );
+}
+
+async function openApplication(url) {
+  await page.goto(url.href, { waitUntil: 'domcontentloaded' });
+  await page.waitForFunction(
+    () => window.__godsEyeView?.styleManager?._applicationShortcuts,
+    { timeout: 60_000 },
+  );
+  await page.waitForFunction(
+    () => {
+      const cover = document.getElementById('loading-screen');
+      return (
+        cover?.classList.contains('hidden') &&
+        Number(getComputedStyle(cover).opacity) === 0
+      );
+    },
+    { timeout: 60_000 },
+  );
+}
+
+try {
+  await page.setViewport({ width: 1440, height: 900 });
+  const url = new URL(process.env.QA_BASE_URL || 'http://127.0.0.1:4173');
+  url.searchParams.set('welcome', '0');
+  // This browser has a fresh profile. Start without authored state so the
+  // first assertion exercises the defaults rather than a share-link restore.
+  url.hash = '';
+  await openApplication(url);
+  const fresh = await readScope();
+  check(
+    'bare-URL fresh boot opens Scope ON with 100% feather',
+    fresh.enabled &&
+      fresh.checked &&
+      !fresh.disabled &&
+      fresh.feather === 1 &&
+      fresh.value === 100 &&
+      fresh.readout === '100%' &&
+      fresh.cornerAlpha > 0,
+    fresh,
+  );
+
+  // Use a known city view for canvas and readability checks below.
+  url.hash =
+    'v=2&lat=30.2672&lon=-97.7431&alt=2500&heading=0&pitch=-45&roll=0&map=esri&sc=1&scf=100&l=';
+  // Changing only the hash does not rerun startup restoration. Leave the app
+  // document first so this fixture is applied by a new application boot.
+  await page.goto('about:blank');
+  await openApplication(url);
+  await page.evaluate(() => {
+    const manager = window.__godsEyeView.styleManager;
+    manager.setPanelCollapsed('pp-toggles', false, {
+      persist: false,
+      syncShare: false,
+    });
+    manager.hud.setMode('on');
+    manager.setStyle('normal');
+  });
+  const initial = await readScope();
+  check(
+    'Austin fixture restores Scope ON and 100% feather',
+    initial.enabled &&
+      initial.checked &&
+      !initial.disabled &&
+      initial.feather === 1 &&
+      initial.value === 100 &&
+      initial.readout === '100%' &&
+      initial.cornerAlpha > 0,
+    initial,
+  );
+  const name = await page.$eval('#scope-toggle', (el) => ({
+    type: el.type,
+    label: el.labels?.[0]?.textContent.trim(),
+  }));
+  check(
+    'Scope uses a native checkbox with a visible label',
+    name.type === 'checkbox' && name.label?.includes('Scope'),
+    name,
+  );
+  await page.click('#scope-toggle');
+  const off = await readScope();
+  check(
+    'click disables Scope and its feather slider',
+    !off.enabled &&
+      !off.checked &&
+      off.disabled &&
+      off.feather === 1 &&
+      off.cornerAlpha === 0,
+    off,
+  );
+  await page.focus('#scope-toggle');
+  await page.keyboard.press('Space');
+  const on = await readScope();
+  check(
+    'Space re-enables the native checkbox without losing feather',
+    on.enabled &&
+      on.checked &&
+      !on.disabled &&
+      on.feather === 1 &&
+      on.cornerAlpha > 0,
+    on,
+  );
+
+  const paintedAlpha = [];
+  for (const pct of [0, 11, 100, 200]) {
+    await page.$eval(
+      '#scope-feather-slider',
+      (el, value) => {
+        el.value = String(value);
+        el.dispatchEvent(new Event('input', { bubbles: true }));
+      },
+      pct,
+    );
+    const state = await readScope();
+    paintedAlpha.push(state.radialAlpha);
+    check(
+      `feather ${pct}% reaches the mask and readout`,
+      state.value === pct &&
+        state.feather === pct / 100 &&
+        state.readout === `${pct}%`,
+      state,
+    );
+  }
+  check(
+    'painted gradient widens beyond the old 100% ceiling',
+    paintedAlpha[0] === 0 &&
+      paintedAlpha[1] === 0 &&
+      paintedAlpha[2] > 0 &&
+      paintedAlpha[3] > paintedAlpha[2],
+    paintedAlpha,
+  );
+  await page.focus('#scope-feather-slider');
+  await page.keyboard.press('Home');
+  check('native Home reaches the hard edge', (await readScope()).feather === 0);
+  await page.keyboard.press('End');
+  check(
+    'native End reaches the expanded 200% maximum',
+    (await readScope()).feather === 2,
+  );
+  await page.click('#scope-toggle');
+  for (const layout of ['minimal', 'operator', 'cyber', 'tactical']) {
+    await page.select('#hud-layout-select', layout);
+    const state = await readScope();
+    check(
+      `Scope OFF and 200% survive ${layout}`,
+      !state.enabled &&
+        !state.checked &&
+        state.disabled &&
+        state.feather === 2 &&
+        state.value === 200 &&
+        state.cornerAlpha === 0,
+      state,
+    );
+  }
+
+  const restored = await page.evaluate(async () => {
+    const manager = window.__godsEyeView.styleManager;
+    const links = manager.shareLinkManager;
+    manager._syncShareState();
+    const params = links._buildHashParams();
+    const encoded = { enabled: params.get('sc'), feather: params.get('scf') };
+    await manager.applyVisualState({ scope: { enabled: true, featherPct: 0 } });
+    await manager._visualSettings.restoreShareState({
+      scopeEnabled: encoded.enabled === '1',
+      scopeFeatherPct: Number(encoded.feather),
+    });
+    const shared = manager.getVisualState().scope;
+    await manager.applyVisualState({
+      scope: { enabled: true, featherPct: 200 },
+    });
+    const scene = manager.getVisualState().scope;
+    await manager.applyVisualState({
+      scope: { enabled: false, featherPct: 200 },
+    });
+    return { encoded, shared, scene };
+  });
+  check(
+    'share state serializes and restores Scope OFF with 200%',
+    restored.encoded.enabled === '0' &&
+      restored.encoded.feather === '200' &&
+      restored.shared.enabled === false &&
+      restored.shared.featherPct === 200,
+    restored,
+  );
+  check(
+    'scene state restores Scope ON with 200%',
+    restored.scene.enabled === true && restored.scene.featherPct === 200,
+    restored,
+  );
+
+  for (const layout of ['minimal', 'operator', 'tactical']) {
+    await page.select('#hud-layout-select', layout);
+    await page.evaluate(() =>
+      window.__godsEyeView.styleManager.applyVisualState({
+        scope: { enabled: true, featherPct: 100 },
+      }),
+    );
+    await settleTextBackings(true);
+    const originalGlyphs = await readHudGlyphs();
+    const originalChrome = await readSceneChrome();
+    const original = await page.evaluate(() => {
+      const hud = document.getElementById('intel-hud');
+      const wrappers = [...hud.querySelectorAll('.hud-readout')];
+      const scene = [...document.querySelectorAll('.scene-text-holdout')];
+      const unexpectedBackings = [...wrappers, ...scene]
+        .map((el) => {
+          const style = getComputedStyle(el);
+          return {
+            selector: el.id || el.className,
+            background: style.backgroundColor,
+            shadow: style.boxShadow,
+          };
+        })
+        .filter(
+          (style) =>
+            style.background !== 'rgba(0, 0, 0, 0)' || style.shadow !== 'none',
+        );
+      return {
+        markerAbsent: !document.documentElement.hasAttribute('data-scope-mask'),
+        unbacked: unexpectedBackings.length === 0,
+        unexpectedBackings,
+        wrappersTransparent: wrappers.every(
+          (el) => getComputedStyle(el).display === 'contents',
+        ),
+        operatorFrame:
+          hud.dataset.variant !== 'operator' ||
+          (getComputedStyle(hud.querySelector('.hud-corner'))
+            .backgroundColor === 'rgba(0, 0, 0, 0.36)' &&
+            getComputedStyle(hud.querySelector('.hud-top-bar'))
+              .backgroundImage !== 'none'),
+      };
+    });
+    check(
+      `${layout}: Scope ON retains the original presentation without new backplates`,
+      original.markerAbsent &&
+        original.unbacked &&
+        original.wrappersTransparent &&
+        original.operatorFrame,
+      original,
+    );
+    check(
+      `${layout}: original HUD color, glow and metadata alpha remain intact`,
+      originalGlyphs.glyphs.every(
+        (glyph) =>
+          glyph.color === originalGlyphs.baseline.color &&
+          glyph.shadow === originalGlyphs.baseline.shadow,
+      ) &&
+        originalGlyphs.glyphs.find(
+          (glyph) => glyph.selector === '.hud-summary-label',
+        ).opacity === 0.55 &&
+        originalGlyphs.glyphs.find((glyph) => glyph.selector === '.hud-orbital')
+          .opacity === 0.7 &&
+        originalGlyphs.glyphs.find((glyph) => glyph.selector === '#hud-coll')
+          .opacity === 0.5,
+      originalGlyphs,
+    );
+    if (process.env.QA_SCREENSHOT_DIR) {
+      fs.mkdirSync(process.env.QA_SCREENSHOT_DIR, { recursive: true });
+      await page.screenshot({
+        path: path.join(
+          process.env.QA_SCREENSHOT_DIR,
+          `scope-on-${layout}.png`,
+        ),
+      });
+    }
+    await page.evaluate(() =>
+      window.__godsEyeView.styleManager.applyVisualState({
+        scope: { enabled: false },
+      }),
+    );
+    await settleTextBackings(false);
+    const backedGlyphs = await readHudGlyphs();
+    checkSceneChrome(layout, originalChrome, await readSceneChrome());
+    check(
+      `${layout}: Scope OFF adds backing without changing glyph styles`,
+      JSON.stringify(backedGlyphs) === JSON.stringify(originalGlyphs),
+      backedGlyphs,
+    );
+    const coverage = await page.evaluate(() => {
+      const hud = document.getElementById('intel-hud');
+      const walker = document.createTreeWalker(hud, NodeFilter.SHOW_TEXT);
+      const missing = [];
+      let visible = 0;
+      let node;
+      while ((node = walker.nextNode())) {
+        if (
+          !node.textContent.trim() ||
+          node.parentElement.closest('.hud-bracket')
+        )
+          continue;
+        const range = document.createRange();
+        range.selectNodeContents(node);
+        if (
+          ![...range.getClientRects()].some(
+            (rect) => rect.width > 0 && rect.height > 0,
+          )
+        )
+          continue;
+        visible += 1;
+        const backing = node.parentElement.closest('.hud-readout');
+        const color = backing && getComputedStyle(backing).backgroundColor;
+        if (
+          !backing ||
+          color !== 'rgba(0, 0, 0, 0.7)' ||
+          getComputedStyle(backing).boxShadow !== 'none' ||
+          backing.parentElement.closest('.hud-readout')
+        )
+          missing.push(node.textContent.trim());
+      }
+      const wrapped = [...hud.querySelectorAll('.hud-readout')].filter(
+        (el) => el.offsetWidth > 0 && el.offsetHeight > 0,
+      );
+      const empty = wrapped.filter((el) => !el.innerText.trim()).length;
+      const overlaps = [];
+      for (const parent of new Set(wrapped.map((el) => el.parentElement))) {
+        const siblings = wrapped.filter((el) => el.parentElement === parent);
+        for (let i = 1; i < siblings.length; i += 1) {
+          const previous = siblings[i - 1].getBoundingClientRect();
+          const current = siblings[i].getBoundingClientRect();
+          const horizontal =
+            Math.min(previous.right, current.right) -
+            Math.max(previous.left, current.left);
+          const vertical =
+            Math.min(previous.bottom, current.bottom) -
+            Math.max(previous.top, current.top);
+          // Horizontal bars share a vertical band. Only intersecting text boxes
+          // can stack their backing alpha; allow subpixel layout rounding.
+          if (horizontal > 0.5 && vertical > 0.5) {
+            overlaps.push({
+              parent: parent.className,
+              previous: siblings[i - 1].innerText,
+              current: siblings[i].innerText,
+              vertical,
+            });
+          }
+        }
+      }
+      const lineIds = [
+        'hud-mgrs',
+        'hud-latlon',
+        'hud-gsd',
+        'hud-alt',
+        'hud-timestamp',
+        'hud-bottom-line',
+      ];
+      const multiline = lineIds.filter((id) => {
+        const el = document.getElementById(id);
+        if (!el.getClientRects().length) return false;
+        const range = document.createRange();
+        range.selectNodeContents(el);
+        return (
+          range.getBoundingClientRect().height >
+          parseFloat(getComputedStyle(el).lineHeight) * 1.5
+        );
+      });
+      const edges = [...hud.querySelectorAll('.hud-edge')]
+        .filter((el) => getComputedStyle(el).display !== 'none')
+        .map((el) => {
+          const box = el.querySelector('.hud-readout').getBoundingClientRect();
+          return (
+            getComputedStyle(el).transform !== 'none' &&
+            box.height > box.width &&
+            Number(getComputedStyle(el).opacity) === 1
+          );
+        });
+      const broadBackings = [
+        ...hud.querySelectorAll('.hud-corner, .hud-top-bar, .hud-bottom-bar'),
+      ].filter(
+        (el) =>
+          el.offsetWidth > 0 &&
+          getComputedStyle(el).backgroundColor !== 'rgba(0, 0, 0, 0)',
+      );
+      return {
+        scopeOff: document.documentElement.dataset.scopeMask === 'off',
+        visible,
+        missing,
+        empty,
+        overlaps,
+        multiline,
+        edges,
+        broadBackings: broadBackings.length,
+      };
+    });
+    check(
+      `${layout}: all visible HUD text has one backing`,
+      coverage.scopeOff &&
+        coverage.visible > 0 &&
+        coverage.missing.length === 0 &&
+        coverage.empty === 0 &&
+        coverage.broadBackings === 0,
+      coverage,
+    );
+    check(
+      `${layout}: adjacent readout backings do not overlap`,
+      coverage.overlaps.length === 0,
+      coverage,
+    );
+    check(
+      `${layout}: desktop telemetry remains single line; rotated backing follows the labels`,
+      coverage.multiline.length === 0 && coverage.edges.every(Boolean),
+      coverage,
+    );
+    if (process.env.QA_SCREENSHOT_DIR) {
+      fs.mkdirSync(process.env.QA_SCREENSHOT_DIR, { recursive: true });
+      await page.screenshot({
+        path: path.join(
+          process.env.QA_SCREENSHOT_DIR,
+          `scope-off-${layout}.png`,
+        ),
+      });
+    }
+  }
+  const details = await page.evaluate(() => {
+    const summary = document.getElementById('hud-summary');
+    summary.textContent = 'LONG TELEMETRY SUMMARY '.repeat(30);
+    const ais = document.getElementById('hud-ais-vessel');
+    ais.textContent = 'AIS: 4 VESSELS\nLATEST OBSERVATION';
+    return {
+      summaryClipped:
+        summary.scrollWidth > summary.clientWidth &&
+        getComputedStyle(summary).textOverflow === 'ellipsis',
+      aisMultiline:
+        getComputedStyle(ais).whiteSpace === 'pre-line' &&
+        ais.textContent.split('\n').length === 2 &&
+        ais.getBoundingClientRect().height + 0.5 >=
+          parseFloat(getComputedStyle(ais).lineHeight) * 2,
+      recColor: getComputedStyle(document.getElementById('hud-rec-dot')).color,
+    };
+  });
+  check(
+    'summary clipping, multiline AIS and red REC dot retain their behavior',
+    details.summaryClipped &&
+      details.aisMultiline &&
+      details.recColor === 'rgb(255, 51, 51)',
+    details,
+  );
+  await page.setViewport({ width: 390, height: 844 });
+  await page.select('#hud-layout-select', 'minimal');
+  const narrow = await page.evaluate(() =>
+    [...document.querySelectorAll('#intel-hud .hud-readout')]
+      .filter(
+        (el) =>
+          el.getClientRects().length &&
+          getComputedStyle(el).display !== 'contents',
+      )
+      .every((el) => {
+        const box = el.getBoundingClientRect();
+        return box.left >= 0 && box.right <= innerWidth;
+      }),
+  );
+  check('narrow HUD text backings stay within the viewport', narrow);
+  for (const layout of ['minimal', 'operator', 'tactical']) {
+    await page.select('#hud-layout-select', layout);
+    await page.evaluate(() =>
+      window.__godsEyeView.styleManager.applyVisualState({
+        scope: { enabled: true },
+      }),
+    );
+    await settleTextBackings(true);
+    const before = await readSceneChrome();
+    await page.evaluate(() =>
+      window.__godsEyeView.styleManager.applyVisualState({
+        scope: { enabled: false },
+      }),
+    );
+    await settleTextBackings(false);
+    checkSceneChrome(`narrow ${layout}`, before, await readSceneChrome());
+  }
+  check('runtime has no uncaught browser errors', errors.length === 0, errors);
+} finally {
+  await browser.close();
+}
+console.log(`RESULT: ${failures} failures`);
+process.exitCode = failures ? 1 : 0;
diff --git a/scripts/qa-transit-browser.mjs b/scripts/qa-transit-browser.mjs
index eb7b59985..23925c743 100644
--- a/scripts/qa-transit-browser.mjs
+++ b/scripts/qa-transit-browser.mjs
@@ -47,6 +47,7 @@ export async function reportTransitVisibility(page, label) {
     const layer = app.dataManager.layers.get('transit').module;
     const state = layer._transitStateForTest();
     return {
+      pageVisibility: document.visibilityState,
       total: state._vehicles.size,
       visible: state._visible.size,
       moving: state._moving.size,
@@ -59,6 +60,10 @@ export async function reportTransitVisibility(page, label) {
     };
   });
   console.log(`  ${label}: ${JSON.stringify(result)}`);
+  if (result.pageVisibility !== 'visible')
+    throw new Error(
+      `${label}: Transit QA requires a visible page; hidden pages deliberately pause polling`,
+    );
   if (result.renderLoop === false || result.renderErrors.length)
     throw new Error(
       `${label}: Cesium render loop stopped or raised an error: ${JSON.stringify(result.renderErrors)}`,
diff --git a/scripts/qa-transit-controls.mjs b/scripts/qa-transit-controls.mjs
index b76e14706..70ed1503c 100644
--- a/scripts/qa-transit-controls.mjs
+++ b/scripts/qa-transit-controls.mjs
@@ -1,6 +1,7 @@
 const pause = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 export const BOSTON = {
   id: 'boston',
+  feedId: 'mbta',
   label: 'Boston (MBTA)',
   lat: 42.3554,
   lon: -71.0605,
@@ -11,6 +12,7 @@ const LIVE_CITIES = [
   BOSTON,
   {
     id: 'austin',
+    feedId: 'capmetro-austin',
     label: 'Austin (CapMetro)',
     lat: 30.2672,
     lon: -97.7431,
@@ -19,6 +21,7 @@ const LIVE_CITIES = [
   },
   {
     id: 'minneapolis',
+    feedId: 'metrotransit-msp',
     label: 'Minneapolis (Metro Transit)',
     lat: 44.9778,
     lon: -93.265,
@@ -27,6 +30,7 @@ const LIVE_CITIES = [
   },
   {
     id: 'helsinki',
+    feedId: 'hsl-helsinki',
     label: 'Helsinki (HSL)',
     lat: 60.1699,
     lon: 24.9384,
@@ -35,6 +39,7 @@ const LIVE_CITIES = [
   },
   {
     id: 'oslo',
+    feedId: 'entur-norway',
     label: 'Oslo (Entur)',
     lat: 59.9139,
     lon: 10.7522,
diff --git a/scripts/qa-transit-recovery.mjs b/scripts/qa-transit-recovery.mjs
index 5f6404b41..a54e81239 100644
--- a/scripts/qa-transit-recovery.mjs
+++ b/scripts/qa-transit-recovery.mjs
@@ -1,6 +1,6 @@
 /** Camera-jump regression against an existing server; never starts a server. */
 import puppeteer from 'puppeteer';
-import { chromeExecutablePath } from './qa-chrome.mjs';
+import { chromeExecutablePath, captureQaScreenshot } from './qa-chrome.mjs';
 import { mkdir, writeFile } from 'node:fs/promises';
 import { reduceTrailPixels } from '../src/layers/transit/qaMetrics.js';
 
@@ -307,7 +307,7 @@ try {
   result.pixelPass = pixels.pass;
   result.pixelDetails = pixels;
   result.errors = errors;
-  await page.screenshot({ path: `${shots}/recovery.png` });
+  await captureQaScreenshot(page, { path: `${shots}/recovery.png` });
   await writeFile(`${shots}/recovery.json`, JSON.stringify(result, null, 2));
   for (const key of ['on', 'off', 'onAgain', 'offAgain']) delete result[key];
   const pass =
diff --git a/scripts/qa-transit-scenes.mjs b/scripts/qa-transit-scenes.mjs
index 1ceb45b22..f325cb9f7 100644
--- a/scripts/qa-transit-scenes.mjs
+++ b/scripts/qa-transit-scenes.mjs
@@ -1,3 +1,4 @@
+import { captureQaScreenshot } from './qa-chrome.mjs';
 import { getRegisteredTransitFeed } from '../src/data/transitFeeds.js';
 
 // Not registered or active: camera discovery and live polls never own this feed.
@@ -219,7 +220,7 @@ export async function runFleetBudgets({
         allocations.layerFrameBytes / allocationTrace.rows.length <= 8192,
       `${allocations.layerFrameBytes / allocationTrace.rows.length} transit-authored bytes/frame; whole frame ${allocations.frameBytes / allocationTrace.rows.length}; top three ${JSON.stringify(details.topAllocatorsPerFrame)}; collected objects included. Full profile saved.`,
     );
-    await page.screenshot({
+    await captureQaScreenshot(page, {
       path: `${shots}/${tag}-fleet-${count}.jpg`,
       type: 'jpeg',
       quality: 85,
@@ -392,7 +393,7 @@ export async function runBostonMatrix({
         JSON.stringify({ pixels, contrast }),
         { unexercised: pixels.length < 6 },
       );
-      await page.screenshot({
+      await captureQaScreenshot(page, {
         path: `${shots}/${tag}-matrix-${background.name}-${look.name}-fleet.jpg`,
         type: 'jpeg',
         quality: 90,
@@ -407,7 +408,7 @@ export async function runBostonMatrix({
           target.key,
         );
         await wait(500);
-        await page.screenshot({
+        await captureQaScreenshot(page, {
           path: `${shots}/${tag}-matrix-${background.name}-${look.name}-${target.route}-selected.jpg`,
           type: 'jpeg',
           quality: 90,
@@ -431,7 +432,7 @@ export async function runBostonMatrix({
         );
       }
       await wait(300);
-      await page.screenshot({
+      await captureQaScreenshot(page, {
         path: `${shots}/${tag}-matrix-${background.name}-${look.name}-restored.jpg`,
         type: 'jpeg',
         quality: 90,
@@ -579,7 +580,7 @@ export async function runBostonLive({
       JSON.stringify(selection),
       { unexercised: !target },
     );
-    await page.screenshot({
+    await captureQaScreenshot(page, {
       path: `${shots}/${tag}-boston-live-${view.name}.jpg`,
       type: 'jpeg',
       quality: 90,
@@ -1010,7 +1011,7 @@ export async function runTrailVisibility({
     stable: pixels.stable[i],
     eligible: pixels.eligible[i],
   }));
-  await page.screenshot({
+  await captureQaScreenshot(page, {
     path: `${shots}/${tag}-${altitude}m-trail-visible.jpg`,
     type: 'jpeg',
     quality: 95,
diff --git a/scripts/qa-transit.mjs b/scripts/qa-transit.mjs
index fb0fd0bd9..49a25fd18 100644
--- a/scripts/qa-transit.mjs
+++ b/scripts/qa-transit.mjs
@@ -36,10 +36,11 @@ import {
  */
 import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import puppeteer from 'puppeteer';
-import { chromeExecutablePath } from './qa-chrome.mjs';
+import { chromeExecutablePath, captureQaScreenshot } from './qa-chrome.mjs';
 import { createTransitHistory } from '../server/providers/transitHistory.js';
 import { DETECTION_THEME_MAP } from '../src/overlays/worldOverlayTokens.js';
 import { transitModeTier } from '../src/data/transitPresetStyle.js';
+import { TRANSIT_POLL_MS } from '../src/layers/transit/policy.js';
 
 import {
   reduceAnchor,
@@ -264,6 +265,7 @@ const browser = await puppeteer.launch({
   executablePath: chromeExecutablePath(),
   args: [
     '--no-sandbox',
+    '--disable-backgrounding-occluded-windows',
     '--disable-background-timer-throttling',
     '--disable-renderer-backgrounding',
     '--window-size=1920,1080',
@@ -271,6 +273,10 @@ const browser = await puppeteer.launch({
   ],
 });
 const page = await browser.newPage();
+// This gate measures visible-page motion. OS minimization must not silently
+// switch it into the app's intentional hidden-tab polling pause.
+const focus = await page.createCDPSession();
+await focus.send('Emulation.setFocusEmulationEnabled', { enabled: true });
 boundPageEvaluations(page);
 await page.setViewport({ width: 1920, height: 1080 });
 const pageErrors = [];
@@ -286,11 +292,13 @@ page.on('request', (request) => {
 });
 
 const shot = (name, caption) =>
-  page
-    .screenshot({ path: `${SHOTS}/${name}`, type: 'jpeg', quality: 82 })
-    .then(() => {
-      console.log(`  shot ${name} — ${caption}`);
-    });
+  captureQaScreenshot(page, {
+    path: `${SHOTS}/${name}`,
+    type: 'jpeg',
+    quality: 82,
+  }).then(() => {
+    console.log(`  shot ${name} — ${caption}`);
+  });
 
 const view = (city) =>
   `${BASE}/?welcome=0#lat=${city.lat}&lon=${city.lon}&alt=600&heading=${city.heading}&pitch=-45`;
@@ -389,22 +397,42 @@ try {
         orientation: { heading: 0, pitch: (-40 * Math.PI) / 180, roll: 0 },
       });
     }, city);
-    await page.waitForFunction(
-      () =>
-        (window.__godsEyeView.dataManager.layers
-          .get('transit')
-          .module.getStats().count || 0) > 0,
-      { timeout: 90_000 },
-    );
+    const arrived = await page
+      .waitForFunction(
+        (feedId) =>
+          [
+            ...window.__godsEyeView.dataManager.layers
+              .get('transit')
+              .module._transitStateForTest()
+              ._vehicles.keys(),
+          ].some((key) => key.startsWith(`${feedId}:`)),
+        { timeout: 90_000 },
+        city.feedId,
+      )
+      .then(
+        () => true,
+        () => false,
+      );
+    if (!arrived) {
+      check(
+        `${city.label}: live feed arrived`,
+        false,
+        `No vehicles from ${city.feedId}; retained vehicles from other cities cannot qualify this view`,
+        { unexercised: true },
+      );
+      continue;
+    }
     await wait(9_000);
-    const fleet = await page.evaluate(() => {
+    const fleet = await page.evaluate((feedId) => {
       const layer =
         window.__godsEyeView.dataManager.layers.get('transit').module;
       return {
-        count: layer._transitStateForTest()._vehicles.size,
+        count: [...layer._transitStateForTest()._vehicles.keys()].filter(
+          (key) => key.startsWith(`${feedId}:`),
+        ).length,
         stats: layer.getStats(),
       };
-    });
+    }, city.feedId);
     check(
       `${city.label}: vehicles are rendered`,
       fleet.count >= 20,
@@ -426,6 +454,7 @@ try {
         .module._transitStateForTest();
       let best = null;
       for (const entry of state._vehicles.values()) {
+        if (!entry.key.startsWith(`${c.feedId}:`)) continue;
         const d = Math.hypot(entry.to.lat - c.lat, entry.to.lon - c.lon);
         if (!best || d < best.d)
           best = { d, lat: entry.to.lat, lon: entry.to.lon, key: entry.key };
@@ -1607,6 +1636,7 @@ try {
             m[3] * v[0] + m[7] * v[1] + m[11] * v[2] + m[15] * v[3],
           ];
           const frames = [];
+          const observedPolls = new Set();
           const publicationsBefore = state._cardPublications || 0;
           let headSamples = 0,
             headErrorPx = 0,
@@ -1623,6 +1653,13 @@ try {
                 const proj = scene.camera.frustum.projectionMatrix;
                 const p = entry.marker.position;
                 const clip = mul(proj, mul(view, [p.x, p.y, p.z, 1]));
+                if (
+                  entry.marker.show !== false &&
+                  rect &&
+                  Number.isFinite(entry.pollSeq)
+                ) {
+                  observedPolls.add(entry.pollSeq);
+                }
                 frames.push({
                   t: performance.now() - t0,
                   mx: ((clip[0] / clip[3]) * 0.5 + 0.5) * canvas.clientWidth,
@@ -1668,7 +1705,15 @@ try {
                   headSamples++;
                 }
               }
-              if (performance.now() - t0 >= durationMs) finish();
+              const elapsed = performance.now() - t0;
+              // Keep at least 20 seconds of motion and require an observed poll
+              // transition. A fixed 20s wall-clock window can miss a 15s poll
+              // when an earlier refresh is still settling.
+              if (
+                (elapsed >= 20_000 && observedPolls.size >= 2) ||
+                elapsed >= durationMs
+              )
+                finish();
             };
             let remove;
             const finish = () => {
@@ -1676,6 +1721,7 @@ try {
               remove?.();
               resolve({
                 selected: true,
+                elapsedMs: performance.now() - t0,
                 frames,
                 textPublishes:
                   (state._cardPublications || 0) - publicationsBefore,
@@ -1690,7 +1736,7 @@ try {
           });
         },
         target.key,
-        20_000,
+        3 * TRANSIT_POLL_MS,
       );
     }
     check(
@@ -1711,8 +1757,9 @@ try {
       );
       check(
         'card text publication stays throttled while the anchor runs at frame rate',
-        anchor.textPublishes > 0 && anchor.textPublishes <= 20_000 / 250 + 3,
-        `${anchor.textPublishes} text publications in 20 s`,
+        anchor.textPublishes > 0 &&
+          anchor.textPublishes <= anchor.elapsedMs / 250 + 3,
+        `${anchor.textPublishes} text publications in ${(anchor.elapsedMs / 1000).toFixed(1)} s`,
       );
     } else {
       check(
diff --git a/scripts/setup-doctor.mjs b/scripts/setup-doctor.mjs
index 01e048091..7075be2c1 100644
--- a/scripts/setup-doctor.mjs
+++ b/scripts/setup-doctor.mjs
@@ -124,6 +124,19 @@ export function resolveOpenSkyAuthMode({
   return OPENSKY_AUTH_MODES.has(mode) ? mode : OPENSKY_AUTH_MODE_DEFAULT;
 }
 
+/** Whether OPENSKY_CREDENTIALS_FILE is set, with the same precedence as the auth mode. The server reads that file when the client id and secret are empty. */
+export function resolveOpenSkyCredentialsFile({
+  authoritativeEnvironment = false,
+  environment = process.env,
+  rootDir = ROOT,
+} = {}) {
+  const environmentDefines = Object.prototype.hasOwnProperty.call(environment, 'OPENSKY_CREDENTIALS_FILE');
+  const value = authoritativeEnvironment && environmentDefines
+    ? String(environment.OPENSKY_CREDENTIALS_FILE || '')
+    : String(environment.OPENSKY_CREDENTIALS_FILE || '') || readDoctorDotenvValue('OPENSKY_CREDENTIALS_FILE', rootDir);
+  return isConfiguredValue(value.trim());
+}
+
 function hasKeychainItem(service, account) {
   if (process.platform !== 'darwin') return false;
   const result = spawnSync('security', [
@@ -153,10 +166,11 @@ export function resolveCredential(spec, {
 
 export function buildCapabilitySummary(
   credentials,
-  { openSkyAuthMode = OPENSKY_AUTH_MODE_DEFAULT } = {},
+  { openSkyAuthMode = OPENSKY_AUTH_MODE_DEFAULT, openSkyCredentialsFile = false } = {},
 ) {
   const configured = (name) => credentials[name]?.configured === true;
-  const hasOAuthCredentials = configured('OPENSKY_CLIENT_ID') && configured('OPENSKY_CLIENT_SECRET');
+  const hasClientPair = configured('OPENSKY_CLIENT_ID') && configured('OPENSKY_CLIENT_SECRET');
+  const hasOAuthCredentials = hasClientPair || openSkyCredentialsFile === true;
   const requestedOpenSkyMode = String(openSkyAuthMode || '').trim().toLowerCase();
   const openSkyMode = OPENSKY_AUTH_MODES.has(requestedOpenSkyMode)
     ? requestedOpenSkyMode
@@ -164,11 +178,13 @@ export function buildCapabilitySummary(
   const flights = openSkyMode === 'anon'
     ? 'OpenSky keyless anonymous access (rate-limited)'
     : openSkyMode === 'basic'
-      ? 'OpenSky Basic mode selected (credential presence and validity not verified)'
+      ? 'OpenSky Basic mode selected: OpenSky retired username/password sign-in, so flights load anonymously (rate-limited)'
       : openSkyMode === 'auto'
         ? 'OpenSky auto mode selected (runtime credential choice and validity not verified)'
-        : hasOAuthCredentials
+        : hasClientPair
           ? 'OpenSky OAuth credentials present (runtime mode and validity not verified)'
+          : hasOAuthCredentials
+            ? 'OpenSky OAuth credentials file set (OPENSKY_CREDENTIALS_FILE; file contents and validity not verified)'
           : 'OpenSky keyless anonymous access (rate-limited)';
   const route = selectMapStartupRoute({
     googleApiKey: configured('GOOGLE_MAPS_API_KEY') ? 'configured' : '',
@@ -215,6 +231,7 @@ export function inspectSetup({ includeKeychain = true, authoritativeEnvironment
     credentials,
     capabilities: buildCapabilitySummary(credentials, {
       openSkyAuthMode: resolveOpenSkyAuthMode({ authoritativeEnvironment, rootDir }),
+      openSkyCredentialsFile: resolveOpenSkyCredentialsFile({ authoritativeEnvironment, rootDir }),
     }),
   };
 }
diff --git a/server/providers/aircraft/opensky.js b/server/providers/aircraft/opensky.js
index a69885e2f..f7019d752 100644
--- a/server/providers/aircraft/opensky.js
+++ b/server/providers/aircraft/opensky.js
@@ -1,3 +1,5 @@
+import fs from 'node:fs';
+import os from 'node:os';
 import { normalizeAdsbLolPointResponse } from '../../../src/data/adsbLolFallback.js';
 import {
   coalesceProxyRequest,
@@ -137,6 +139,10 @@ function openskyAdaptiveTtlMs(remaining) {
 }
 /** @type {boolean} Guards duplicate auth-failure warnings in logs. */
 let _openskyAuthWarned = false;
+/** One warning per process when OPENSKY_CREDENTIALS_FILE cannot be read. */
+let _openskyCredentialsFileWarned = false;
+/** One warning per process when OPENSKY_AUTH_MODE=basic is requested. */
+let _openskyBasicRetiredWarned = false;
 /** @type {boolean} Guards duplicate invalid-auth-mode warnings. */
 let _openskyAuthModeWarned = false;
 /** Default auth mode when OPENSKY_AUTH_MODE env is unset. */
@@ -156,6 +162,48 @@ const ADSBLOL_POINT_MAX_RESPONSE_BYTES = 8 * 1024 * 1024;
 // current instead of coasting a stale worldwide frame indefinitely.
 const OPENSKY_SOURCE_STALE_MS = 120_000;
 
+/**
+ * The OpenSky API client for OAuth: OPENSKY_CLIENT_ID and
+ * OPENSKY_CLIENT_SECRET, or else the credentials.json that OpenSky's account
+ * page downloads, named by OPENSKY_CREDENTIALS_FILE ("~" is the home
+ * directory). The file is read on each token refresh, so a replaced file is
+ * picked up without a restart.
+ *
+ * @param {Record<string, string|undefined>} [env]
+ * @param {(path: string) => string} [readFile]
+ * @returns {{ clientId: string, clientSecret: string } | null}
+ */
+export function openSkyClientCredentials(
+  env = process.env,
+  readFile = (path) => fs.readFileSync(path, 'utf8'),
+) {
+  const clientId = String(env.OPENSKY_CLIENT_ID || '').trim();
+  const clientSecret = String(env.OPENSKY_CLIENT_SECRET || '').trim();
+  if (clientId && clientSecret) return { clientId, clientSecret };
+  const file = String(env.OPENSKY_CREDENTIALS_FILE || '').trim();
+  if (!file) return null;
+  const path = file.replace(/^~(?=$|[\\/])/, os.homedir());
+  let raw;
+  try {
+    raw = JSON.parse(readFile(path));
+  } catch {
+    if (!_openskyCredentialsFileWarned) {
+      console.warn(
+        '[OpenSky] OPENSKY_CREDENTIALS_FILE could not be read or parsed as JSON.',
+      );
+      _openskyCredentialsFileWarned = true;
+    }
+    return null;
+  }
+  const fileId = String(raw?.clientId ?? raw?.client_id ?? '').trim();
+  const fileSecret = String(
+    raw?.clientSecret ?? raw?.client_secret ?? '',
+  ).trim();
+  return fileId && fileSecret
+    ? { clientId: fileId, clientSecret: fileSecret }
+    : null;
+}
+
 /**
  * Obtain a valid OpenSky OAuth2 bearer token, refreshing if needed.
  *
@@ -174,9 +222,9 @@ export async function getOpenSkyToken() {
   // return the same promise instead of issuing a duplicate token request
   if (_openskyTokenPromise) return _openskyTokenPromise;
 
-  const clientId = process.env.OPENSKY_CLIENT_ID;
-  const clientSecret = process.env.OPENSKY_CLIENT_SECRET;
-  if (!clientId || !clientSecret) return null;
+  const credentials = openSkyClientCredentials();
+  if (!credentials) return null;
+  const { clientId, clientSecret } = credentials;
 
   // Wrap the async token fetch in a shared promise stored in _openskyTokenPromise
   _openskyTokenPromise = (async () => {
@@ -417,8 +465,10 @@ function openSkySourceIsStale(sourceEpochMs, now = Date.now()) {
  *
  * Supports four auth modes controlled by OPENSKY_AUTH_MODE env:
  *   - 'oauth'  (default) — client_credentials bearer token
- *   - 'basic'  — HTTP Basic with OPENSKY_USERNAME / OPENSKY_PASSWORD
- *   - 'auto'   — try OAuth first, fall back to Basic, then anon
+ *   - 'basic'  — retired: OpenSky stopped accepting HTTP Basic (username and
+ *                password) on 2026-03-18, so this requests anonymously and
+ *                warns once
+ *   - 'auto'   — try OAuth first, then anon
  *   - 'anon'   — no credentials
  *
  * Successful responses are cached for OPENSKY_CACHE_MS (~9 s). On
@@ -524,21 +574,21 @@ export function openSkyProxy() {
           _openskySnapshotInFlight,
           'global',
           async () => {
-            const basicUser = process.env.OPENSKY_USERNAME || '';
-            const basicPass = process.env.OPENSKY_PASSWORD || '';
-            const hasBasicCreds = Boolean(basicUser && basicPass);
             const headers = { Accept: 'application/json' };
             let usedMode = 'anon';
             let reason = 'forced_anonymous';
 
             if (requestedMode === 'basic') {
-              if (hasBasicCreds) {
-                headers.Authorization = `Basic ${Buffer.from(`${basicUser}:${basicPass}`).toString('base64')}`;
-                usedMode = 'basic';
-                reason = 'basic_credentials';
-              } else {
-                reason = 'missing_basic_creds';
+              // OpenSky no longer accepts a Basic header, so sending
+              // OPENSKY_USERNAME / OPENSKY_PASSWORD would only fail; ask
+              // anonymously and say once what to configure instead.
+              if (!_openskyBasicRetiredWarned) {
+                console.warn(
+                  '[OpenSky] OPENSKY_AUTH_MODE=basic: OpenSky retired username/password sign-in on 2026-03-18, so flights load anonymously (rate-limited). Use OAuth client credentials: OPENSKY_CLIENT_ID and OPENSKY_CLIENT_SECRET, or OPENSKY_CREDENTIALS_FILE.',
+                );
+                _openskyBasicRetiredWarned = true;
               }
+              reason = 'basic_retired';
             } else if (requestedMode === 'oauth') {
               const token = await getOpenSkyToken();
               if (token) {
@@ -554,31 +604,12 @@ export function openSkyProxy() {
                 headers.Authorization = `Bearer ${token}`;
                 usedMode = 'oauth';
                 reason = 'oauth_token';
-              } else if (hasBasicCreds) {
-                headers.Authorization = `Basic ${Buffer.from(`${basicUser}:${basicPass}`).toString('base64')}`;
-                usedMode = 'basic';
-                reason = 'oauth_unavailable_fallback_basic';
               } else {
-                reason = 'missing_oauth_and_basic_creds';
+                reason = 'missing_oauth_creds';
               }
             }
 
-            let { upstream, body } = await fetchOpenSkyStates(headers);
-            // Auto-mode fallback: if OAuth was rejected, retry with Basic credentials
-            if (
-              (upstream.status === 401 || upstream.status === 403) &&
-              requestedMode === 'auto' &&
-              usedMode === 'oauth' &&
-              hasBasicCreds
-            ) {
-              const retryHeaders = {
-                Accept: 'application/json',
-                Authorization: `Basic ${Buffer.from(`${basicUser}:${basicPass}`).toString('base64')}`,
-              };
-              ({ upstream, body } = await fetchOpenSkyStates(retryHeaders));
-              usedMode = 'basic';
-              reason = 'oauth_rejected_fallback_basic';
-            }
+            const { upstream, body } = await fetchOpenSkyStates(headers);
 
             const sourceEpochMs = upstream.ok
               ? openSkySourceEpochMs(body)
@@ -586,12 +617,6 @@ export function openSkyProxy() {
             // Refine the reason string to reflect the actual outcome
             if (upstream.ok && reason === 'forced_anonymous') {
               reason = 'anonymous_ok';
-            } else if (
-              upstream.ok &&
-              usedMode === 'basic' &&
-              reason === 'basic_credentials'
-            ) {
-              reason = 'basic_ok';
             } else if (
               upstream.ok &&
               usedMode === 'oauth' &&
@@ -627,12 +652,11 @@ export function openSkyProxy() {
               body,
               usedMode,
               reason,
-              hasBasicCreds,
               sourceEpochMs,
             };
           },
         );
-        let { upstream, body, usedMode, reason, hasBasicCreds, sourceEpochMs } =
+        let { upstream, body, usedMode, reason, sourceEpochMs } =
           await refresh.promise;
         if (
           upstream.ok &&
@@ -684,35 +708,24 @@ export function openSkyProxy() {
         }
 
         if (upstream.status === 401 || upstream.status === 403) {
-          if (requestedMode === 'basic' && !hasBasicCreds) {
+          if (requestedMode === 'oauth' && usedMode !== 'oauth') {
             body = JSON.stringify({
               error:
-                'OpenSky auth missing. Basic mode requires OPENSKY_USERNAME and OPENSKY_PASSWORD.',
-            });
-            reason = 'missing_basic_creds';
-          } else if (requestedMode === 'oauth' && usedMode !== 'oauth') {
-            body = JSON.stringify({
-              error:
-                'OpenSky auth invalid. OAuth mode requires valid OPENSKY_CLIENT_ID and OPENSKY_CLIENT_SECRET.',
+                'OpenSky auth invalid. OAuth mode requires valid OPENSKY_CLIENT_ID and OPENSKY_CLIENT_SECRET, or OPENSKY_CREDENTIALS_FILE.',
             });
             reason = 'oauth_invalid_or_missing';
-          } else if (usedMode === 'basic') {
-            body = JSON.stringify({
-              error: 'OpenSky auth invalid. Username/password were rejected.',
-            });
-            reason = 'basic_invalid_credentials';
           } else if (usedMode === 'oauth') {
             body = JSON.stringify({
               error:
                 'OpenSky auth invalid. OAuth client credentials were rejected.',
             });
             reason = 'oauth_invalid_credentials';
-          } else if (requestedMode === 'auto' && !hasBasicCreds) {
+          } else if (requestedMode === 'auto') {
             body = JSON.stringify({
               error:
-                'OpenSky auth missing. Provide basic credentials or valid OAuth client credentials.',
+                'OpenSky auth missing. Provide OAuth client credentials: OPENSKY_CLIENT_ID and OPENSKY_CLIENT_SECRET, or OPENSKY_CREDENTIALS_FILE.',
             });
-            reason = 'missing_oauth_and_basic_creds';
+            reason = 'missing_oauth_creds';
           } else {
             body = JSON.stringify({
               error: 'OpenSky auth required.',
diff --git a/server/providers/aircraft/openskyCredentials.test.mjs b/server/providers/aircraft/openskyCredentials.test.mjs
new file mode 100644
index 000000000..539579517
--- /dev/null
+++ b/server/providers/aircraft/openskyCredentials.test.mjs
@@ -0,0 +1,81 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import os from 'node:os';
+import path from 'node:path';
+import { openSkyClientCredentials } from './opensky.js';
+
+const file = (contents) => (filePath) => {
+  file.read = filePath;
+  if (contents instanceof Error) throw contents;
+  return contents;
+};
+
+test('OpenSky client env vars come first', () => {
+  const read = () => assert.fail('the file is not read when env vars are set');
+  assert.deepEqual(
+    openSkyClientCredentials(
+      {
+        OPENSKY_CLIENT_ID: ' id ',
+        OPENSKY_CLIENT_SECRET: 'secret',
+        OPENSKY_CREDENTIALS_FILE: 'credentials.json',
+      },
+      read,
+    ),
+    { clientId: 'id', clientSecret: 'secret' },
+  );
+});
+
+test('OPENSKY_CREDENTIALS_FILE supplies the client when env vars are empty', () => {
+  const env = {
+    OPENSKY_CLIENT_ID: '',
+    OPENSKY_CREDENTIALS_FILE: '~/Downloads/credentials.json',
+  };
+  // The file OpenSky's account page downloads uses camelCase keys.
+  assert.deepEqual(
+    openSkyClientCredentials(
+      env,
+      file('{"clientId":"cid","clientSecret":"csecret"}'),
+    ),
+    { clientId: 'cid', clientSecret: 'csecret' },
+  );
+  assert.equal(
+    path.normalize(file.read),
+    path.normalize(path.join(os.homedir(), 'Downloads/credentials.json')),
+  );
+  assert.deepEqual(
+    openSkyClientCredentials(
+      env,
+      file('{"client_id":"cid","client_secret":"csecret"}'),
+    ),
+    { clientId: 'cid', clientSecret: 'csecret' },
+  );
+});
+
+test('a missing, unreadable or incomplete credentials file means no client', () => {
+  assert.equal(openSkyClientCredentials({}, file('{}')), null);
+  const env = { OPENSKY_CREDENTIALS_FILE: 'credentials.json' };
+  const missing = Object.assign(new Error('nope'), { code: 'ENOENT' });
+  assert.equal(openSkyClientCredentials(env, file(missing)), null);
+  assert.equal(openSkyClientCredentials(env, file('not json')), null);
+  assert.equal(openSkyClientCredentials(env, file('{"clientId":"cid"}')), null);
+});
+
+test('credential file warnings never expose file contents or read errors', async (t) => {
+  const warnings = [];
+  t.mock.method(console, 'warn', (message) => warnings.push(message));
+  for (const contents of [
+    '{"clientId":"id","clientSecret":FAKE_SECRET_123}',
+    new Error('could not read FAKE_SECRET_123'),
+  ]) {
+    const { openSkyClientCredentials: resolve } = await import(
+      `./opensky.js?warning=${warnings.length}`
+    );
+    const env = { OPENSKY_CREDENTIALS_FILE: '/synthetic/credentials.json' };
+    assert.equal(resolve(env, file(contents)), null);
+    assert.equal(resolve(env, file(contents)), null);
+  }
+  assert.deepEqual(warnings, [
+    '[OpenSky] OPENSKY_CREDENTIALS_FILE could not be read or parsed as JSON.',
+    '[OpenSky] OPENSKY_CREDENTIALS_FILE could not be read or parsed as JSON.',
+  ]);
+});
diff --git a/server/providers/cyclones.js b/server/providers/cyclones.js
index 3e5f2f6d1..5aab0f246 100644
--- a/server/providers/cyclones.js
+++ b/server/providers/cyclones.js
@@ -43,6 +43,11 @@ function number(value, min, max) {
   const n = Number(value);
   return Number.isFinite(n) && n >= min && n <= max ? n : null;
 }
+// CurrentStorms.json reports movementSpeed in miles per hour (intensity is in
+// knots); convert so `speedKt` means what it says.
+function knotsFromMph(mph) {
+  return mph === null ? null : Math.round(mph * 0.868976);
+}
 // NHC stamps an advisory with its nominal time (e.g. 03:00Z) and publishes it
 // up to about half an hour before; allow that, but not a clock far ahead.
 const EARLY_ADVISORY_MS = 90 * 60_000;
@@ -120,7 +125,7 @@ export function parseCycloneStatus(payload, now = Date.now()) {
       pressureHpa: number(raw.pressure, 800, 1100),
       movement: {
         directionDegrees: number(raw.movementDir, 0, 360),
-        speedKt: number(raw.movementSpeed, 0, 200),
+        speedKt: knotsFromMph(number(raw.movementSpeed, 0, 200)),
       },
       advisoryUrl: officialLink(forecast.url),
       outlookUrl: raw.id.startsWith('al')
diff --git a/server/providers/ghostMaps.js b/server/providers/ghostMaps.js
new file mode 100644
index 000000000..853fd35e3
--- /dev/null
+++ b/server/providers/ghostMaps.js
@@ -0,0 +1,437 @@
+import fsp from 'node:fs/promises';
+import path from 'node:path';
+import {
+  GHOSTMAPS_MAX_FILE_BYTES,
+  GHOSTMAPS_REPO,
+  buildGhostMapsCatalog,
+  ghostMapsRawUrl,
+  parseGitRefAdvertisement,
+} from '../../src/layers/ghostMaps/catalog.js';
+import {
+  readResponseBytesCapped,
+  readResponseJsonCapped,
+  readResponseTextCapped,
+} from './common/http.js';
+
+// S2 Underground GhostMaps (public GitHub repository of KMZ intel products).
+// The repository is not ours, so there is no webhook: the watcher reads the
+// branch head through git's smart-HTTP ref advertisement (~0.5 KB, outside the
+// REST API rate limit) every few seconds, and only a new commit costs REST
+// calls (tree + commit). Browsers hear about a new commit over server-sent
+// events and fetch only the products whose blob changed. Files are fetched by
+// commit-pinned raw URLs and kept on disk by blob sha.
+
+const DEFAULT_POLL_MS = 15_000;
+const MIN_POLL_MS = 5_000;
+const FAILURE_BACKOFF_MS = [15_000, 30_000, 60_000, 120_000, 300_000];
+const TIMEOUT_MS = 15_000;
+const FILE_TIMEOUT_MS = 120_000;
+const HEARTBEAT_MS = 25_000;
+const MAX_SUBSCRIBERS = 64;
+const MAX_REF_BYTES = 64 * 1024;
+const MAX_TREE_BYTES = 16 * 1024 * 1024;
+const MAX_COMMIT_BYTES = 2 * 1024 * 1024;
+const USER_AGENT = 'gods-eye-view-ghostmaps/1.0';
+const REPO_PATH = `${GHOSTMAPS_REPO.owner}/${GHOSTMAPS_REPO.name}`;
+
+/** Poll interval from GHOSTMAPS_POLL_SECONDS, bounded below at 5 s. */
+export function ghostMapsPollMs(raw = process.env.GHOSTMAPS_POLL_SECONDS) {
+  const seconds = Number(raw);
+  if (!raw || !Number.isFinite(seconds)) return DEFAULT_POLL_MS;
+  return Math.max(MIN_POLL_MS, Math.round(seconds * 1000));
+}
+
+/**
+ * The repository watcher and file cache, independent of HTTP routing.
+ * @returns {{start: Function, stop: Function, catalog: Function,
+ *   checkNow: Function, file: Function, subscribe: Function}}
+ */
+export function createGhostMapsWatcher({
+  fetchImpl = (...args) => globalThis.fetch(...args),
+  now = () => Date.now(),
+  pollMs = ghostMapsPollMs(),
+  cacheDir = path.join(process.cwd(), '.gev-cache', 'ghostmaps'),
+  token = () => String(process.env.GITHUB_TOKEN || '').trim(),
+  log = (...args) => console.log(...args),
+  warn = (...args) => console.warn(...args),
+} = {}) {
+  let state = {
+    commit: null,
+    committedAt: null,
+    message: null,
+    products: [],
+    checkedAt: null,
+    changedAt: null,
+    error: null,
+  };
+  let timer = null;
+  let running = false;
+  let checking = null;
+  let failures = 0;
+  let diskLoaded = false;
+  const listeners = new Set();
+  const downloads = new Map();
+
+  const apiHeaders = () => ({
+    Accept: 'application/vnd.github+json',
+    'User-Agent': USER_AGENT,
+    ...(token() ? { Authorization: `Bearer ${token()}` } : {}),
+  });
+
+  async function get(url, headers, timeoutMs = TIMEOUT_MS) {
+    const response = await fetchImpl(url, {
+      headers,
+      redirect: 'follow',
+      signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (!response.ok) {
+      await response.body?.cancel().catch(() => {});
+      throw Object.assign(new Error(`HTTP ${response.status} from ${url}`), {
+        status: response.status,
+      });
+    }
+    return response;
+  }
+
+  async function readHead() {
+    const response = await get(
+      `${GHOSTMAPS_REPO.url}.git/info/refs?service=git-upload-pack`,
+      { 'User-Agent': USER_AGENT },
+    );
+    const sha = parseGitRefAdvertisement(
+      await readResponseTextCapped(response, MAX_REF_BYTES),
+    );
+    if (!sha) throw new Error('GhostMaps branch head not advertised');
+    return sha;
+  }
+
+  async function readCommit(sha) {
+    const api = `https://api.github.com/repos/${REPO_PATH}`;
+    const tree = await readResponseJsonCapped(
+      await get(`${api}/git/trees/${sha}?recursive=1`, apiHeaders()),
+      MAX_TREE_BYTES,
+    );
+    if (!Array.isArray(tree?.tree)) throw new Error('GhostMaps tree malformed');
+    if (tree.truncated) warn('[ghostmaps] repository tree listing truncated');
+    let committedAt = null;
+    let message = null;
+    try {
+      const commit = await readResponseJsonCapped(
+        await get(`${api}/commits/${sha}`, apiHeaders()),
+        MAX_COMMIT_BYTES,
+      );
+      committedAt = Date.parse(commit?.commit?.committer?.date) || null;
+      message = String(commit?.commit?.message || '')
+        .split('\n')[0]
+        .slice(0, 200);
+    } catch {
+      // The commit date is decoration; the tree is what matters.
+    }
+    return { products: buildGhostMapsCatalog(tree.tree), committedAt, message };
+  }
+
+  async function loadDisk() {
+    if (diskLoaded) return;
+    diskLoaded = true;
+    try {
+      const saved = JSON.parse(
+        await fsp.readFile(path.join(cacheDir, 'catalog.json'), 'utf8'),
+      );
+      if (/^[0-9a-f]{40}$/.test(saved?.commit) && Array.isArray(saved.products))
+        state = { ...state, ...saved, error: null };
+    } catch {
+      /* first run */
+    }
+  }
+
+  async function saveDisk() {
+    try {
+      await fsp.mkdir(cacheDir, { recursive: true });
+      const { commit, committedAt, message, products, changedAt } = state;
+      await fsp.writeFile(
+        path.join(cacheDir, 'catalog.json'),
+        JSON.stringify({ commit, committedAt, message, products, changedAt }),
+      );
+    } catch (error) {
+      warn('[ghostmaps] could not save catalog:', error.message);
+    }
+  }
+
+  function emit() {
+    const event = publicCatalog();
+    for (const listener of listeners) {
+      try {
+        listener(event);
+      } catch {
+        /* a broken subscriber must not stop the rest */
+      }
+    }
+  }
+
+  async function check() {
+    await loadDisk();
+    const head = await readHead();
+    state.checkedAt = now();
+    if (head === state.commit) {
+      if (state.error !== null) {
+        state.error = null;
+        emit();
+      }
+      return false;
+    }
+    const next = await readCommit(head);
+    const previous = new Map(state.products.map((p) => [p.id, p.version]));
+    const changed = next.products
+      .filter((p) => previous.get(p.id) !== p.version)
+      .map((p) => p.id);
+    state = {
+      ...state,
+      ...next,
+      commit: head,
+      changedAt: now(),
+      error: null,
+    };
+    log(
+      `[ghostmaps] commit ${head.slice(0, 8)}${
+        next.message ? ` "${next.message}"` : ''
+      }; updated: ${changed.join(', ') || 'none'}`,
+    );
+    await saveDisk();
+    emit();
+    // Warm the default products so the first browser load is local.
+    for (const product of state.products)
+      if (product.defaultOn) file(product.id).catch(() => {});
+    return true;
+  }
+
+  /** Run one check now, coalescing with one already in flight. */
+  function checkNow() {
+    if (!checking)
+      checking = check()
+        .then(
+          (changed) => {
+            failures = 0;
+            return changed;
+          },
+          (error) => {
+            failures += 1;
+            state.error = error.message;
+            state.checkedAt = now();
+            warn('[ghostmaps] check failed:', error.message);
+            emit();
+            return false;
+          },
+        )
+        .finally(() => {
+          checking = null;
+        });
+    return checking;
+  }
+
+  function schedule() {
+    clearTimeout(timer);
+    if (!running) return;
+    const delay = failures
+      ? FAILURE_BACKOFF_MS[Math.min(failures, FAILURE_BACKOFF_MS.length) - 1]
+      : pollMs;
+    timer = setTimeout(async () => {
+      await checkNow();
+      schedule();
+    }, delay);
+    timer.unref?.();
+  }
+
+  /** Start watching (idempotent); the first check runs immediately. */
+  function start() {
+    if (running) return checking || Promise.resolve(false);
+    running = true;
+    const first = checkNow();
+    first.then(schedule);
+    return first;
+  }
+
+  function stop() {
+    running = false;
+    clearTimeout(timer);
+    timer = null;
+  }
+
+  function publicCatalog() {
+    return {
+      repo: GHOSTMAPS_REPO.url,
+      branch: GHOSTMAPS_REPO.branch,
+      commit: state.commit,
+      committedAt: state.committedAt,
+      message: state.message,
+      checkedAt: state.checkedAt,
+      changedAt: state.changedAt,
+      pollMs,
+      error: state.error,
+      products: state.products.map(
+        ({
+          id,
+          title,
+          defaultOn,
+          fileName,
+          fileTitle,
+          version,
+          size,
+          dateMs,
+        }) => ({
+          id,
+          title,
+          defaultOn,
+          fileName,
+          fileTitle,
+          version,
+          size,
+          dateMs,
+        }),
+      ),
+    };
+  }
+
+  /**
+   * The bytes of one product's current edition, from disk or a commit-pinned
+   * download. Only catalog paths are ever fetched.
+   */
+  async function file(id) {
+    const product = state.products.find((p) => p.id === id);
+    if (!product) return null;
+    const target = path.join(cacheDir, 'files', `${product.version}.kmz`);
+    try {
+      return { product, bytes: await fsp.readFile(target) };
+    } catch {
+      /* not cached yet */
+    }
+    const commit = state.commit;
+    let pending = downloads.get(product.version);
+    if (!pending) {
+      pending = (async () => {
+        const response = await get(
+          ghostMapsRawUrl(commit, product.path),
+          { 'User-Agent': USER_AGENT },
+          FILE_TIMEOUT_MS,
+        );
+        const bytes = Buffer.from(
+          await readResponseBytesCapped(response, GHOSTMAPS_MAX_FILE_BYTES),
+        );
+        await fsp.mkdir(path.dirname(target), { recursive: true });
+        const temp = `${target}.${process.pid}.tmp`;
+        await fsp.writeFile(temp, bytes);
+        await fsp.rename(temp, target);
+        await pruneFiles();
+        return bytes;
+      })().finally(() => downloads.delete(product.version));
+      downloads.set(product.version, pending);
+    }
+    return { product, bytes: await pending };
+  }
+
+  /** Keep only files that a current product still points to. */
+  async function pruneFiles() {
+    const keep = new Set(state.products.map((p) => `${p.version}.kmz`));
+    const dir = path.join(cacheDir, 'files');
+    for (const name of await fsp.readdir(dir).catch(() => [])) {
+      if (!keep.has(name) && !name.endsWith('.tmp'))
+        await fsp.rm(path.join(dir, name), { force: true }).catch(() => {});
+    }
+  }
+
+  function subscribe(listener) {
+    listeners.add(listener);
+    return () => listeners.delete(listener);
+  }
+
+  return {
+    start,
+    stop,
+    checkNow,
+    catalog: publicCatalog,
+    file,
+    subscribe,
+    subscribers: () => listeners.size,
+  };
+}
+
+/** Same-origin GhostMaps routes for dev and preview. */
+export function ghostMapsProxy({ watcher = createGhostMapsWatcher() } = {}) {
+  const json = (res, status, value) => {
+    if (res.destroyed) return;
+    res.writeHead(status, {
+      'Content-Type': 'application/json',
+      'Cache-Control': 'no-store',
+      ...(status === 405 ? { Allow: 'GET' } : {}),
+    });
+    res.end(JSON.stringify(value));
+  };
+
+  function events(req, res) {
+    if (watcher.subscribers() >= MAX_SUBSCRIBERS)
+      return json(res, 429, { error: 'too_many_subscribers' });
+    res.writeHead(200, {
+      'Content-Type': 'text/event-stream',
+      'Cache-Control': 'no-store',
+      Connection: 'keep-alive',
+      'X-Accel-Buffering': 'no',
+    });
+    const send = (catalog) =>
+      res.write(`event: catalog\ndata: ${JSON.stringify(catalog)}\n\n`);
+    res.write('retry: 5000\n\n');
+    send(watcher.catalog());
+    const unsubscribe = watcher.subscribe(send);
+    const heartbeat = setInterval(() => res.write(': ping\n\n'), HEARTBEAT_MS);
+    heartbeat.unref?.();
+    const close = () => {
+      clearInterval(heartbeat);
+      unsubscribe();
+    };
+    req.on('close', close);
+    res.on('error', close);
+  }
+
+  async function handler(req, res) {
+    if (req.method !== 'GET')
+      return json(res, 405, { error: 'method_not_allowed' });
+    const url = new URL(req.url || '/', 'http://local');
+    const match = /^\/file\/([a-z0-9-]{1,40})$/.exec(url.pathname);
+    if (!['/catalog', '/events'].includes(url.pathname) && !match)
+      return json(res, 404, { error: 'unknown_route' });
+    // Watching starts with the first request, so an install that never turns
+    // the layer on never contacts GitHub.
+    const first = watcher.start();
+    if (url.pathname === '/catalog') {
+      if (!watcher.catalog().commit) await first;
+      return json(res, 200, watcher.catalog());
+    }
+    if (url.pathname === '/events') return events(req, res);
+    try {
+      if (!watcher.catalog().commit) await first;
+      const found = await watcher.file(match[1]);
+      if (!found) return json(res, 404, { error: 'unknown_product' });
+      const pinned = url.searchParams.get('v') === found.product.version;
+      res.writeHead(200, {
+        'Content-Type': 'application/vnd.google-earth.kmz',
+        'Content-Length': found.bytes.length,
+        'X-GhostMaps-Version': found.product.version,
+        // A versioned URL names one immutable blob.
+        'Cache-Control': pinned
+          ? 'private, max-age=31536000, immutable'
+          : 'no-store',
+      });
+      return res.end(found.bytes);
+    } catch {
+      return json(res, 502, { error: 'ghostmaps_unavailable' });
+    }
+  }
+
+  return {
+    name: 'ghostmaps',
+    configureServer({ middlewares }) {
+      middlewares.use('/api/ghostmaps', handler);
+    },
+    configurePreviewServer({ middlewares }) {
+      middlewares.use('/api/ghostmaps', handler);
+    },
+  };
+}
diff --git a/server/providers/ghostMaps.test.mjs b/server/providers/ghostMaps.test.mjs
new file mode 100644
index 000000000..9723436d2
--- /dev/null
+++ b/server/providers/ghostMaps.test.mjs
@@ -0,0 +1,294 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtemp, readdir, rm } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import {
+  createGhostMapsWatcher,
+  ghostMapsPollMs,
+  ghostMapsProxy,
+} from './ghostMaps.js';
+
+const MASTER =
+  'ArcGIS Data for ATAK (KMZs)/Common Intelligence Picture/Master Database/';
+const KINETIC =
+  'ArcGIS Data for ATAK (KMZs)/Common Intelligence Picture/30-Day Pulls/Kinetic_Activities_Last_30_Days.kmz';
+const sha = (c) => c.repeat(40);
+
+/** A fake GitHub: ref advertisement, tree, commit and raw files. */
+function fakeGitHub() {
+  const repo = { head: sha('1'), trees: new Map(), calls: [] };
+  repo.trees.set(sha('1'), [
+    {
+      path: `${MASTER}S2U_Common_Intelligence_Picture_October_15_2026_Export_1.kmz`,
+      type: 'blob',
+      size: 4,
+      sha: sha('a'),
+    },
+    { path: KINETIC, type: 'blob', size: 4, sha: sha('b') },
+  ]);
+  const body = (text, status = 200) =>
+    new Response(text, {
+      status,
+      headers: { 'content-length': String(Buffer.byteLength(text)) },
+    });
+  const fetchImpl = async (url) => {
+    repo.calls.push(url);
+    if (url.endsWith('/info/refs?service=git-upload-pack'))
+      return body(
+        `001e# service=git-upload-pack\n0000\n003d${repo.head} refs/heads/main\n0000`,
+      );
+    const tree = /git\/trees\/([0-9a-f]{40})/.exec(url);
+    if (tree) return body(JSON.stringify({ tree: repo.trees.get(tree[1]) }));
+    if (/\/commits\//.test(url))
+      return body(
+        JSON.stringify({
+          commit: {
+            message: 'Oct 18 Update\nmore',
+            committer: { date: '2026-10-18T00:00:00Z' },
+          },
+        }),
+      );
+    if (url.startsWith('https://raw.githubusercontent.com/'))
+      return body('KMZ!');
+    return body('nope', 404);
+  };
+  return { repo, fetchImpl };
+}
+
+async function withCache(fn) {
+  const dir = await mkdtemp(path.join(os.tmpdir(), 'ghostmaps-'));
+  try {
+    await fn(dir);
+  } finally {
+    await rm(dir, { recursive: true, force: true });
+  }
+}
+
+// checkNow announces the catalog before background warm-up finishes. Join the
+// same file reads before changing editions or removing the temporary cache.
+async function warmDefaults(watcher) {
+  await Promise.all(
+    watcher
+      .catalog()
+      .products.filter((product) => product.defaultOn)
+      .map((product) => watcher.file(product.id)),
+  );
+}
+
+test('a new commit is announced once, naming only the products that changed', () =>
+  withCache(async (cacheDir) => {
+    const { repo, fetchImpl } = fakeGitHub();
+    const watcher = createGhostMapsWatcher({
+      fetchImpl,
+      cacheDir,
+      log: () => {},
+      warn: () => {},
+    });
+    const events = [];
+    watcher.subscribe((catalog) => events.push(catalog));
+
+    assert.equal(await watcher.checkNow(), true);
+    await warmDefaults(watcher);
+    const first = watcher.catalog();
+    assert.equal(first.commit, sha('1'));
+    assert.equal(first.message, 'Oct 18 Update');
+    assert.deepEqual(
+      first.products.map((p) => p.id),
+      ['cip', 'kinetic-30d'],
+    );
+    assert.equal(events.length, 1);
+
+    // Same head: one ref read, no REST calls, no event.
+    repo.calls.length = 0;
+    assert.equal(await watcher.checkNow(), false);
+    assert.equal(repo.calls.length, 1);
+    assert.equal(events.length, 1);
+
+    // A new upload: the CIP gets a newer edition, the 30-day pull is untouched.
+    repo.head = sha('2');
+    repo.trees.set(sha('2'), [
+      ...repo.trees.get(sha('1')),
+      {
+        path: `${MASTER}S2U_Common_Intelligence_Picture_October_18_2026_Export_1.kmz`,
+        type: 'blob',
+        size: 4,
+        sha: sha('c'),
+      },
+    ]);
+    assert.equal(await watcher.checkNow(), true);
+    await warmDefaults(watcher);
+    assert.equal(events.length, 2);
+    const cip = events[1].products.find((p) => p.id === 'cip');
+    assert.equal(cip.version, sha('c'));
+    assert.match(cip.fileName, /October_18/);
+    assert.equal(
+      events[1].products.find((p) => p.id === 'kinetic-30d').version,
+      sha('b'),
+    );
+    // Repository paths stay on the server.
+    assert.equal('path' in cip, false);
+    watcher.stop();
+  }));
+
+test('files download by commit-pinned URL, cache by blob, and stale blobs are pruned', () =>
+  withCache(async (cacheDir) => {
+    const { repo, fetchImpl } = fakeGitHub();
+    const watcher = createGhostMapsWatcher({
+      fetchImpl,
+      cacheDir,
+      log: () => {},
+      warn: () => {},
+    });
+    await watcher.checkNow();
+    const found = await watcher.file('kinetic-30d');
+    assert.equal(found.bytes.toString(), 'KMZ!');
+    const raw = repo.calls.filter((url) =>
+      url.includes('raw.githubusercontent'),
+    );
+    assert.ok(raw.every((url) => url.includes(`/GhostMaps/${sha('1')}/`)));
+    assert.ok(
+      raw.some((url) => url.endsWith('/Kinetic_Activities_Last_30_Days.kmz')),
+    );
+    const before = repo.calls.length;
+    await watcher.file('kinetic-30d');
+    assert.equal(repo.calls.length, before, 'second read comes from disk');
+    assert.equal(await watcher.file('not-a-product'), null);
+
+    // When the edition changes, the old blob leaves the disk cache.
+    await watcher.file('cip');
+    repo.head = sha('2');
+    repo.trees.set(sha('2'), [
+      {
+        path: `${MASTER}S2U_Common_Intelligence_Picture_October_18_2026_Export_1.kmz`,
+        type: 'blob',
+        size: 4,
+        sha: sha('c'),
+      },
+      { path: KINETIC, type: 'blob', size: 4, sha: sha('b') },
+    ]);
+    await watcher.checkNow();
+    await watcher.file('cip');
+    const files = (await readdir(path.join(cacheDir, 'files'))).sort();
+    assert.deepEqual(files, [`${sha('b')}.kmz`, `${sha('c')}.kmz`]);
+    watcher.stop();
+  }));
+
+test('the catalog survives a restart from disk, and upstream failures are reported', () =>
+  withCache(async (cacheDir) => {
+    const { fetchImpl } = fakeGitHub();
+    const quiet = { log: () => {}, warn: () => {} };
+    const online = createGhostMapsWatcher({ fetchImpl, cacheDir, ...quiet });
+    await online.checkNow();
+    await warmDefaults(online);
+    const offline = createGhostMapsWatcher({
+      fetchImpl: async () => new Response('down', { status: 503 }),
+      cacheDir,
+      ...quiet,
+    });
+    assert.equal(await offline.checkNow(), false);
+    const catalog = offline.catalog();
+    assert.equal(catalog.commit, sha('1'));
+    assert.equal(catalog.products.length, 2);
+    assert.match(catalog.error, /HTTP 503/);
+  }));
+
+test('an unchanged head clears an upstream outage and announces recovery once', () =>
+  withCache(async (cacheDir) => {
+    const { fetchImpl } = fakeGitHub();
+    let unavailable = false;
+    let checkedAt = 1000;
+    const requests = [];
+    const watcher = createGhostMapsWatcher({
+      cacheDir,
+      now: () => checkedAt,
+      fetchImpl: async (url, options) => {
+        requests.push(url);
+        if (unavailable) return new Response('down', { status: 503 });
+        return fetchImpl(url, options);
+      },
+      log: () => {},
+      warn: () => {},
+    });
+    const events = [];
+    watcher.subscribe((catalog) => events.push(catalog));
+    await watcher.checkNow();
+    await Promise.all([watcher.file('cip'), watcher.file('kinetic-30d')]);
+    const healthy = watcher.catalog();
+    assert.equal(events.length, 1);
+
+    unavailable = true;
+    checkedAt = 2000;
+    assert.equal(await watcher.checkNow(), false);
+    assert.match(watcher.catalog().error, /HTTP 503/);
+    assert.equal(events.length, 2);
+
+    unavailable = false;
+    checkedAt = 3000;
+    requests.length = 0;
+    assert.equal(await watcher.checkNow(), false, 'no new edition arrived');
+    const recovered = watcher.catalog();
+    assert.equal(recovered.error, null);
+    assert.equal(recovered.checkedAt, checkedAt);
+    assert.equal(recovered.commit, healthy.commit);
+    assert.equal(recovered.changedAt, healthy.changedAt);
+    assert.deepEqual(recovered.products, healthy.products);
+    assert.equal(requests.length, 1, 'recovery needs only the ref read');
+    assert.match(requests[0], /\/info\/refs\?service=git-upload-pack$/);
+    assert.equal(events.length, 3, 'subscribers see the recovered catalog');
+    assert.equal(events[2].error, null);
+    assert.equal(events[2].checkedAt, checkedAt);
+
+    checkedAt = 4000;
+    assert.equal(await watcher.checkNow(), false);
+    assert.equal(events.length, 3, 'healthy unchanged polls stay silent');
+    watcher.stop();
+  }));
+
+test('poll interval is configurable with a 5 s floor', () => {
+  assert.equal(ghostMapsPollMs(undefined), 15000);
+  assert.equal(ghostMapsPollMs('30'), 30000);
+  assert.equal(ghostMapsPollMs('1'), 5000);
+  assert.equal(ghostMapsPollMs('soon'), 15000);
+});
+
+test('routes: unknown paths and methods are refused without contacting GitHub', async () => {
+  let started = 0;
+  const watcher = {
+    start: () => {
+      started += 1;
+      return Promise.resolve(false);
+    },
+    catalog: () => ({ commit: sha('1'), products: [] }),
+    file: async () => null,
+    subscribe: () => () => {},
+    subscribers: () => 0,
+  };
+  let handler;
+  ghostMapsProxy({ watcher }).configureServer({
+    middlewares: { use: (_route, fn) => (handler = fn) },
+  });
+  const call = async (method, url) => {
+    const res = {
+      destroyed: false,
+      writeHead(status, headers) {
+        this.status = status;
+        this.headers = headers;
+      },
+      end(body) {
+        this.body = String(body ?? '');
+      },
+    };
+    await handler({ method, url }, res);
+    return res;
+  };
+  assert.equal((await call('GET', '/nope')).status, 404);
+  assert.equal((await call('POST', '/catalog')).status, 405);
+  assert.equal((await call('GET', '/file/../../etc')).status, 404);
+  assert.equal(started, 0);
+  assert.equal((await call('GET', '/file/cip')).status, 404);
+  const catalog = await call('GET', '/catalog');
+  assert.equal(catalog.status, 200);
+  assert.equal(JSON.parse(catalog.body).commit, sha('1'));
+  assert.equal(started, 2);
+});
diff --git a/server/providers/local.js b/server/providers/local.js
index 5d39c3a01..d9e7b7919 100644
--- a/server/providers/local.js
+++ b/server/providers/local.js
@@ -26,6 +26,7 @@ import { keySetupEndpoint } from '../standalone/key-setup.js';
 import { weatherProxy } from './weather.js';
 import { firePerimetersProxy } from './firePerimeters.js';
 import { gnssIntegrityProxy } from './gnssIntegrity.js';
+import { ghostMapsProxy } from './ghostMaps.js';
 import { cycloneProxy } from './cyclones.js';
 import { windProxy } from './wind.js';
 
@@ -64,6 +65,7 @@ function localProviderPlugins({ realtime, gemini } = {}) {
     mapillaryProxy(),
     firePerimetersProxy(),
     gnssIntegrityProxy(),
+    ghostMapsProxy(),
     keySetupEndpoint(),
   ];
 }
diff --git a/server/providers/openai/instructions.js b/server/providers/openai/instructions.js
index 9735f300c..c9c4a43b4 100644
--- a/server/providers/openai/instructions.js
+++ b/server/providers/openai/instructions.js
@@ -10,7 +10,7 @@ function realtimeInstructions(
     'Do not require a wake phrase. Treat direct commands like "zoom into London" or "open datacenters" as GEV control requests.',
     'Only control the app by calling the provided tools. Never invent tool names or arguments.',
     'Call tools only for clear GEV control, navigation, visual-style, layer, or app-state requests. For ordinary conversation, answer normally without tools.',
-    'For requests to open, show, reveal, or focus a menu/panel, call set_panel_open or show_data_layers_menu. "Open Context" means only set_panel_open{panelId:"global-context-panel",open:true}; it does not activate a Context sub-mode. "Open Contacts" means set_context_mode{mode:"contacts"}; that action expands the parent Context panel before activating Contacts.',
+    'Panels: set_panel_open or show_data_layers_menu; "Open Context" is only set_panel_open{panelId:"global-context-panel",open:true}; "Open Contacts" is set_context_mode contacts (expands Context itself). Unnamed settings: ask "Voice settings or Provider settings?" first; named panels apply directly. Contacts, Space Missions and Cockpit need explicit naming; opening Context or selecting/viewing an aircraft never enters them. In Cockpit, next/previous uses control_cockpit; track_entity/fly_to_location are refused: never retry, exit Cockpit first.',
     'For requests like "show me the datacenter layers", open the data layers menu and focus the matching layer row; do not enable the layer unless the user asks to turn it on.',
     'For questions like "what am I looking at?", "what is in view?", "what is this?", "that selected thing", nearby datacenter, dam, cable, ship, or current view contents, call get_entity_context first, then answer from the returned scene/entity context.',
     'For "what is this aircraft?", answer with get_entity_context\'s identityLine: callsign, operator, type and route from returned fields only, airport codes verbatim. Other questions about the selection answer from its properties. Never infer them from the callsign.',
@@ -18,13 +18,12 @@ function realtimeInstructions(
     'For camera-motion requests — "orbit around this", "pan left", "tilt up", "stop moving" — call move_camera. For "fly the route" over a drawn route, call fly_route. Confirm with the RESULTING state ("Orbiting slowly", "Flying the route").',
     'Globe spin: plain Rotate, including a repeat after a refusal, calls only move_camera motion rotate_globe; the app checks fit. For rotation, call zoom_to_globe only for this turn\'s explicit user Reset/Show Globe View request, never from your own plan, an earlier refusal or a bare yes/ok. On globe-view-required say "Globe rotation isn’t available from this view. You can say ‘Reset to Globe View and rotate the globe.’" Do not ask a question or call more tools for that request. Explicit reset-and-rotate: await reset success before rotate_globe; never both together. After a failed reset, do not retry for that request. Local turn/look left/right: move_camera motion rotate in that direction, not pan.',
     'analyst_query ANSWERS questions; it never moves the camera or starts tracking. For requests to FOLLOW or TRACK a specific aircraft/ship, call track_entity (get_entity_context first when the target is ambiguous), never analyst_query as the final or only action. For "follow/track the nearest aircraft", first call analyst_query with the aircraft layer(s), sortBy=distance, and limit=1, then call track_entity with the returned aircraft identity in the same turn. The lookup alone does not fulfill a follow/track command.',
-    'For a request to enable an aircraft layer and SELECT or FIND the nearest/closest aircraft near a named place — for example, "Turn on flights and select the closest aircraft to Austin" — call select_nearest_aircraft once. It atomically turns on the requested aircraft layer first, waits for location arrival, refreshes that layer for the destination viewport, filters out landed/on-ground records, and selects the nearest airborne result. A healthy fallback feed is valid data, never an enable failure. Do not also call fly_to_location, set_layer_visibility, analyst_query, track_entity, set_context_mode, or control_cockpit for the same request. SELECT/FIND never implies Contacts or Cockpit unless the user explicitly asks for either mode.',
+    'For a request to enable an aircraft layer and SELECT or FIND the nearest/closest aircraft near a named place — for example, "Turn on flights and select the closest aircraft to Austin" — call select_nearest_aircraft once. It atomically turns on the requested aircraft layer first, waits for location arrival, refreshes that layer for the destination viewport, filters out landed/on-ground records, and selects the nearest airborne result. A healthy fallback feed is valid data, never an enable failure. Do not also call fly_to_location, set_layer_visibility, analyst_query, track_entity, set_context_mode, or control_cockpit for the same request.',
     'For ANALYTICAL questions about loaded layer data — how many / which / fastest / highest / biggest / nearest / next flights, ships, fires, earthquakes, satellites, launches, storms, transit, bikes, bases, datacenters or dams ("how many flights over Texas", "anything above 40,000 feet") — call analyst_query, not get_entity_context. Always set scope by WHERE: "around here" or "near this" while pointing is kind pointer, never view. Filter on the attribute the user names ("MODIS" → sensor eq MODIS). Say the count with its scope in a few words ("37 loaded flights over Texas") plus one or two examples by name. If the needed layer is off, say so and offer to turn it on. "Which of THOSE…" about the last answer → followUp=true with only the new filter/sort.',
     'WORLD QUERIES — the query tools (get_weather, get_wind, search_places, places_nearby, plan_route, get_cyclones, get_fire_perimeters, get_bike_share, get_transit_vehicles, get_traffic_flow, situation_brief, military_awareness and the other get_* and find_* tools you have) look up data anywhere in the world without changing the map and without any layer being on. Use them when the user asks about a place they are not looking at or data whose layer is off ("what is the weather in Tokyo", "how do I drive from Austin to Dallas", "any wildfires in California"). For aircraft, ships, earthquakes, active fires, datacenters, dams and satellites overhead, use analyst_query over the layers instead, turning the layer on first when the user wants it. Use analyst_query and get_entity_context for what the app has loaded or what is on screen. Answer from the result summary and data, mention its source when it has one, and never claim the map changed. If the user also wants to SEE it, use the matching app action (fly_to_location, set_layer_visibility) as well.',
     'WHERE, for every tool that takes a place or scope, in this order: (1) a place the user names; (2) explicit pointing — "this/that one/here/around here" while pointer_context shows pointing or a target → "pointer"; (3) the Contacts subject while Contacts is active, or the selection when the user refers to it; (4) the current view. A selected datacenter, dam, fire or cable never silently becomes the centre.',
     'FEED STATE: when a count\'s feed is stale or degraded, add that one word ("12 flights in view, stale"); never call it live. If unavailable, give no number: say the feed is unavailable. Fallback feeds are valid data; name them only if asked.',
     'COUNTING CONTRACT — what "near" means. (1) While Contacts is ACTIVE, a bare "near / nearby / how many aircraft" means the settled Contacts subject window: its count is contactsWindow.aircraft. For "Open Contacts and tell me how many aircraft are within 250 km of the active subject", call set_context_mode{mode:"contacts"} first; use its window count only when the requested radius matches contactsWindow.radiusKm. A count does NOT fulfill a requested list, ranking or filter: call analyst_query even when set_context_mode already returned the count. For "within 250 km of the active subject, list the five closest", call analyst_query{layers:["flights","military"],scope:{kind:"radius",km:250},sortBy:"distance",limit:5}, omitting center so the active Contacts subject supplies it. Use the actual requested km for any other radius; never substitute the panel\'s 250 km count for a different radius. Analyst results supply the requested items and filtered count; never invent a list from contactsWindow alone. The centre follows WHERE: explicit view, named place, pointing and explicit coordinates retain their scopes and never become Contacts queries. Never invent center coordinates such as 0,0. With Contacts active but no subject yet, use the view and name that scope. (2) With Contacts OFF, "nearby" means in view; "near <place>" means a radius around that place. (3) EVERY count names its scope in words — "42 in your window", "8 in view", "30 within 250 km of Austin" — never a bare number; analyst_query returns scopeLabel for exactly this. Two numbers with named scopes are not a contradiction; say both if asked. (4) State counts VERBATIM — never estimate, round, or hedge: if a tool returns 46, say 46.',
-    'While Cockpit is active, navigate with control_cockpit (next/previous, optionally targetLayer or aircraftClass). track_entity and fly_to_location are REFUSED by design while Cockpit owns the camera — that refusal is correct, not an error to retry. To go somewhere else, exit Cockpit first. control_cockpit enter establishes Contacts itself, so do not call set_context_mode before or after it.',
     'When the target layer is unknown, OMIT layerId in track_entity so it searches all enabled layers. Passing the wrong layerId ("flights" for a military contact) returns "Nothing matched" even though the contact is loaded.',
     'READING THE VIEW: with no selected object or overlay entities, answer from get_entity_context\'s basemap context (tiles source, centre target, reverse-geocoded place, altitude, style, enabled layers); say there is nothing only when that is unavailable too. Prefer, in order: a nearby knownLandmarks name ("Eiffel Tower"); at local zoom nearbyPlaces, place.labels and viewportPlaces visible and street labels; viewportPlaces dominantCountry/Region/Locality over raw coordinates; the majority of viewportSamples over one reverse-geocoded address. Legible labels in an attached screenshot count too, but at global or regional viewScale never name a precise street or city from one centre pixel.',
     'Do not mention disabled layers or stale selections.',
diff --git a/server/providers/openai/toolDescriptions.js b/server/providers/openai/toolDescriptions.js
index b8121a201..23d5da9de 100644
--- a/server/providers/openai/toolDescriptions.js
+++ b/server/providers/openai/toolDescriptions.js
@@ -44,7 +44,7 @@ export const ACTION_DESCRIPTIONS = {
   },
   select_nearest_aircraft: {
     description:
-      'Atomically fly to a place, wait for arrival, enable and load Flights or Military Flights in that viewport, exclude on-ground records, and select/follow the nearest airborne aircraft. Healthy fallback feeds remain usable and are reported in the result. This does not open Contacts or Cockpit.',
+      'Atomically fly to a place, wait for arrival, enable and load Flights or Military Flights in that viewport, exclude on-ground records, and select/follow the nearest airborne aircraft. Healthy fallback feeds remain usable and are reported in the result.',
     $position: 1,
     parameters: {
       properties: {
@@ -111,12 +111,18 @@ export const ACTION_DESCRIPTIONS = {
     },
   },
   set_panel_open: {
-    description: 'Open or close a GEV UI panel/dropdown.',
+    description:
+      'Visual Presets/styles/filters=control-panel; Scenes/saved scenes=scene-panel; Voice Settings=voice-settings; voice control/Preview=voice-preview; Provider Settings/API keys=provider-settings. Voice panels exit Cockpit directly.',
+    $position: 1,
+  },
+  set_voice_inactivity_timeout: {
+    description:
+      'Set the requested exact inactivity duration directly: integer minutes 1–60, 0=None. Report applied/persisted truthfully; an unsaved live change is not saved.',
     $position: 1,
   },
   set_context_mode: {
     description:
-      'Enter or exit the Global Context sub-mode used by Contacts and Space Missions. Use Contacts only when the user explicitly requests Contacts, and Space Missions only when explicitly requested. A request to open the parent Context panel alone uses set_panel_open and must not activate either sub-mode. Selecting an aircraft does not imply Context.',
+      'Enter/exit Contacts or Space Missions only when explicitly requested; opening Context alone uses set_panel_open.',
     $position: 1,
     parameters: {
       properties: {
@@ -129,23 +135,23 @@ export const ACTION_DESCRIPTIONS = {
   },
   control_cockpit: {
     description:
-      'Read or control Cockpit when the user explicitly requests Cockpit: establish Contacts and enter from a selected or tracked aircraft; exit; or navigate nearby Contacts with optional filters. Selecting or viewing an aircraft alone must not enter Cockpit.',
+      'Explicit Cockpit requests only: enter from a selected/tracked aircraft (establishes Contacts itself; no set_context_mode), exit, status, or next/previous. Explicit exit-and-show voice: voicePanel preview/settings (Voice Settings), no confirmation.',
     $position: 1,
     parameters: {
       properties: {
         action: {
           description:
-            'previous/next (or prev) navigates through nearby contacts in Cockpit context.',
+            'previous/next (or prev) cycles nearby Cockpit contacts.',
           $position: 2,
         },
         targetLayer: {
           description:
-            'Optional contact layer filter for next/previous (for example military for a military-only cycle).',
+            'Optional next/previous layer filter (e.g. military-only).',
           $position: 2,
         },
         aircraftClass: {
           description:
-            'Optional aircraft class filter (for example helicopter) when using next/previous navigation.',
+            'Optional next/previous aircraft class filter (e.g. helicopter).',
           $position: 1,
         },
       },
diff --git a/server/providers/terrain.js b/server/providers/terrain.js
index c678ab7c0..f4817f602 100644
--- a/server/providers/terrain.js
+++ b/server/providers/terrain.js
@@ -90,15 +90,23 @@ export function terrainHeightsProxy(options = {}) {
 
   /**
    * Drop the oldest entries until the map is back inside its ceiling.
-   * Oldest-first by fetch time, the same shape `trackBackfillProxies` uses.
-   * Terrain does not move, so evicting an old point costs one refetch, never
-   * a wrong answer.
+   * The map is kept in fetch-time order (sorted once on load, and the resolver
+   * re-inserts every point it refetches), so the oldest are at the front and
+   * no write sorts the map. Terrain does not move, so evicting an old point
+   * costs one refetch, never a wrong answer.
    */
   function evictOverflow() {
-    if (mem.size <= CACHE_MAX_ENTRIES) return;
+    for (const key of mem.keys()) {
+      if (mem.size <= CACHE_MAX_ENTRIES) return;
+      mem.delete(key);
+    }
+  }
+
+  /** Put the map in fetch-time order; a file is not guaranteed to be. */
+  function orderByAge() {
     const byAge = [...mem.entries()].sort((a, b) => a[1].at - b[1].at);
-    for (let i = 0; i < byAge.length && mem.size > CACHE_MAX_ENTRIES; i += 1)
-      mem.delete(byAge[i][0]);
+    mem.clear();
+    for (const [key, entry] of byAge) mem.set(key, entry);
   }
   /** @type {Map<string, Promise<Array<object>>>} single-flight per missing-point subset. */
   const inflight = new Map();
@@ -165,6 +173,7 @@ export function terrainHeightsProxy(options = {}) {
         }
         diskDirty = mem.size > 0;
       }
+      orderByAge();
       evictOverflow();
     } catch {
       /* no disk cache yet */
diff --git a/server/providers/traffic.js b/server/providers/traffic.js
index da8ae73de..2069a0892 100644
--- a/server/providers/traffic.js
+++ b/server/providers/traffic.js
@@ -182,14 +182,17 @@ export function tomtomProxy() {
         });
         res.end(JSON.stringify(obj));
       };
-      const sendTile = (buf, cacheStatus) => {
+      // x-tomtom-fetched-at is when the proxy fetched the tile (ms since the
+      // epoch), so a client handed a STALE-* copy can say how old it is.
+      const sendTile = (entry, cacheStatus) => {
         if (res.headersSent) return;
         res.writeHead(200, {
           'Content-Type': 'application/x-protobuf',
           'Cache-Control': 'no-store',
           'x-tomtom-cache': cacheStatus,
+          'x-tomtom-fetched-at': String(Math.round(entry.at)),
         });
-        res.end(buf);
+        res.end(entry.buf);
       };
 
       try {
@@ -235,14 +238,14 @@ export function tomtomProxy() {
         }
         // Fresh cache hit — never counts against the budget.
         if (entry && now - entry.at < TILE_TTL_MS) {
-          sendTile(entry.buf, 'HIT');
+          sendTile(entry, 'HIT');
           return;
         }
 
         // Budget governor: over the soft cap, last-good data beats a dead layer.
         if (isTomTomOverBudget(currentBudget(), dailyBudgetLimit())) {
           if (entry) {
-            sendTile(entry.buf, 'STALE-BUDGET');
+            sendTile(entry, 'STALE-BUDGET');
           } else {
             sendJson(429, { error: 'budget' });
           }
@@ -271,9 +274,9 @@ export function tomtomProxy() {
         }
         const fresh = await inflight.get(key);
         if (fresh) {
-          sendTile(fresh.buf, 'MISS');
+          sendTile(fresh, 'MISS');
         } else if (entry) {
-          sendTile(entry.buf, 'STALE-ERROR'); // upstream down — stale beats empty
+          sendTile(entry, 'STALE-ERROR'); // upstream down — stale beats empty
         } else {
           sendJson(502, { error: 'upstream' });
         }
diff --git a/server/providers/vessels/ais-store.js b/server/providers/vessels/ais-store.js
index 297081b38..71cefceed 100644
--- a/server/providers/vessels/ais-store.js
+++ b/server/providers/vessels/ais-store.js
@@ -43,14 +43,55 @@ export function ingestAisStreamEnvelope(envelope) {
   if (!mmsi) return false;
 
   if (messageType === 'ShipStaticData' || messageType === 'StaticDataReport') {
+    const previous = _aisStreamStatic.get(mmsi) || {};
+    const live = _aisStreamVessels.get(mmsi);
+    const liveName = live?.name === `MMSI ${mmsi}` ? '' : live?.name;
+    const fields =
+      messageType === 'StaticDataReport'
+        ? {
+            Name:
+              message.ReportA?.Valid === false
+                ? undefined
+                : message.ReportA?.Name,
+            Type:
+              message.ReportB?.Valid === false
+                ? undefined
+                : message.ReportB?.ShipType,
+          }
+        : message;
+    // Static reports may be partial (including Class B's separate A/B parts).
+    // Keep known values in the cache as well as in the current live row.
     const staticData = {
-      name: vesselNameFromAis(metadata, message, _aisStreamStatic.get(mmsi)),
-      type: vesselTypeFromAis(message, _aisStreamStatic.get(mmsi)),
-      destination: stringValue(message.Destination),
-      imo: stringValue(message.ImoNumber ?? message.IMO),
+      // The envelope repeats a cached name even on Class B's type-only part.
+      // Only an actual static name report replaces a known live name.
+      name:
+        stringValue(fields.Name ?? fields.ShipName) ||
+        liveName ||
+        previous.name ||
+        stringValue(metadata.ShipName),
+      type:
+        staticCode(fields.Type ?? fields.ShipType) ||
+        staticCode(live?.type) ||
+        staticCode(previous.type) ||
+        '',
+      destination:
+        stringValue(fields.Destination) ||
+        live?.destination ||
+        previous.destination ||
+        '',
+      imo:
+        staticCode(fields.ImoNumber ?? fields.IMO) ||
+        staticCode(live?.imo) ||
+        staticCode(previous.imo) ||
+        '',
     };
     _aisStreamStatic.set(mmsi, staticData);
     mergeAisStaticIntoLiveVessel(mmsi, staticData);
+    // AISStream repeats the last known position in a static message's
+    // MetaData, but the message has no speed, course or heading and is not a
+    // new fix. Rebuilding a tracked vessel from it would blank its motion and
+    // restamp its position time, so only merge the static fields.
+    if (_aisStreamVessels.has(mmsi)) return true;
   }
 
   const lat = numberValue(
@@ -191,12 +232,10 @@ function approxMetersBetween(lat1, lon1, lat2, lon2) {
 function mergeAisStaticIntoLiveVessel(mmsi, staticData) {
   const existing = _aisStreamVessels.get(mmsi);
   if (!existing) return;
-  if (staticData.name && (!existing.name || existing.name === `MMSI ${mmsi}`))
-    existing.name = staticData.name;
-  if (staticData.type && !existing.type) existing.type = staticData.type;
-  if (staticData.destination && !existing.destination)
-    existing.destination = staticData.destination;
-  if (staticData.imo && !existing.imo) existing.imo = staticData.imo;
+  if (staticData.name) existing.name = staticData.name;
+  if (staticData.type) existing.type = staticData.type;
+  if (staticData.destination) existing.destination = staticData.destination;
+  if (staticData.imo) existing.imo = staticData.imo;
 }
 
 function vesselNameFromAis(metadata, message, staticData = {}) {
@@ -266,6 +305,12 @@ function stringValue(value) {
   return String(value).trim();
 }
 
+// AIS uses zero for unavailable ship type and IMO, not as a replacement value.
+function staticCode(value) {
+  const number = numberValue(value);
+  return Number.isInteger(number) && number > 0 ? String(number) : '';
+}
+
 function numberValue(value) {
   if (value === null || value === undefined || value === '') return null;
   const number = Number(value);
diff --git a/server/standalone/google-token-unavailable.js b/server/standalone/google-token-unavailable.js
new file mode 100644
index 000000000..6089b5941
--- /dev/null
+++ b/server/standalone/google-token-unavailable.js
@@ -0,0 +1,27 @@
+/**
+ * Treat an unavailable Google Maps tile-token endpoint as a supported, silent
+ * outcome. Install after real token providers and before the unknown-API 404.
+ */
+export function googleTokenUnavailablePlugin() {
+  const install = (server) => {
+    server.middlewares.use((req, res, next) => {
+      const pathname = String(req.url || '').split('?')[0];
+      if (
+        (req.method !== 'GET' && req.method !== 'HEAD') ||
+        pathname !== '/api/google/tiles-token'
+      ) {
+        next();
+        return;
+      }
+
+      res.writeHead(204, { 'Cache-Control': 'no-store' });
+      res.end();
+    });
+  };
+
+  return {
+    name: 'google-token-unavailable',
+    configureServer: install,
+    configurePreviewServer: install,
+  };
+}
diff --git a/server/standalone/vite.config.js b/server/standalone/vite.config.js
index ffe5124ce..f095ec2ac 100644
--- a/server/standalone/vite.config.js
+++ b/server/standalone/vite.config.js
@@ -5,6 +5,7 @@ import { createBrowserViteConfig } from '../../build/vite.js';
 import { localProviderPlugins } from '../providers/local.js';
 import { localMcpPlugin } from '../mcp/plugin.js';
 import { apiNotFoundPlugin } from './api-not-found.js';
+import { googleTokenUnavailablePlugin } from './google-token-unavailable.js';
 import { standaloneVoiceTools } from './voiceTools.js';
 import { unwatchedRuntimeDirsPlugin } from './unwatched-cache.js';
 
@@ -21,6 +22,7 @@ export default defineConfig(({ command, mode }) => {
     plugins: [
       ...localProviderPlugins({ realtime: { tools }, gemini: { tools } }),
       localMcpPlugin(),
+      googleTokenUnavailablePlugin(),
       apiNotFoundPlugin(),
       unwatchedRuntimeDirsPlugin(),
     ],
diff --git a/src/annotations/drawMode.js b/src/annotations/drawMode.js
index fcfe08be6..538c2e5da 100644
--- a/src/annotations/drawMode.js
+++ b/src/annotations/drawMode.js
@@ -208,9 +208,10 @@ export function formatMeasure(session) {
   if (!session) return '';
   if (session.shape === 'line') {
     const m = pathLengthM(session.vertices);
-    return m >= 1000
-      ? `${(m / 1000).toFixed(m >= 10000 ? 0 : 1)} km`
-      : `${Math.round(m)} m`;
+    // Round before the kilometre cut. 999.6 m was printed as "1000 m".
+    const whole = Math.round(m);
+    if (whole < 1000) return `${whole} m`;
+    return `${(m / 1000).toFixed(m >= 10000 ? 0 : 1)} km`;
   }
   if (session.shape === 'area') {
     const m2 = ringAreaM2(session.vertices);
diff --git a/src/annotations/drawMode.test.mjs b/src/annotations/drawMode.test.mjs
index 50475cc9e..be9894dda 100644
--- a/src/annotations/drawMode.test.mjs
+++ b/src/annotations/drawMode.test.mjs
@@ -330,3 +330,18 @@ test('longitude unwrapping is continuous and re-wraps to one canonical range', (
   assert.equal(wrapLongitude(180), -180);
   assert.equal(unwrapLongitudes([]).length, 0);
 });
+
+test('a line that rounds up to a kilometre reads 1.0 km, not 1000 m', () => {
+  const metresPerDegree = (6371.0088 * 1000 * Math.PI) / 180;
+  const lat = 999.6 / metresPerDegree;
+  const line = createDrawSession('line');
+  addVertex(line, { lon: 0, lat: 0 });
+  addVertex(line, { lon: 0, lat });
+  const metres = pathLengthM(line.vertices);
+  assert.ok(
+    metres >= 999.5 && metres < 1000,
+    `length should round to 1000 m, got ${metres}`,
+  );
+  assert.equal(formatMeasure(line), '1.0 km');
+  assert.match(drawHint(line), /^1\.0 km · /);
+});
diff --git a/src/app/constructCatalog.js b/src/app/constructCatalog.js
index 832c174bc..59edc02ad 100644
--- a/src/app/constructCatalog.js
+++ b/src/app/constructCatalog.js
@@ -27,6 +27,7 @@ import { createApplicationEarthquakes } from './layers/earthquakes.js';
 import { createApplicationAirQuality } from './layers/airQuality.js';
 import { createApplicationFirePerimeters } from './layers/perimeters.js';
 import { createApplicationGnssIntegrity } from './layers/gnss.js';
+import { createApplicationGhostMaps } from './layers/ghostMaps.js';
 import { createApplicationCables } from './layers/submarineCables.js';
 import { createApplicationStreetLevel } from './layers/streetLevel.js';
 import { createInfrastructureLayers } from '../data/infrastructure.js';
@@ -126,6 +127,7 @@ export function createApplicationCatalog({
         createApplicationGnssIntegrity({
           source: sources['gnss-integrity'],
         }),
+        createApplicationGhostMaps({ source: sources['s2-ghostmaps'] }),
         createApplicationAlpr({ surface, source: sources.alpr }),
         createApplicationStreetLevel({
           surface,
diff --git a/src/app/constructCatalog.test.mjs b/src/app/constructCatalog.test.mjs
index 9e1059c33..eb9e88d31 100644
--- a/src/app/constructCatalog.test.mjs
+++ b/src/app/constructCatalog.test.mjs
@@ -40,7 +40,7 @@ test('catalogs construct distinct layers and classification from their supplied
     signal: b.signal,
     surface: fixtureSurface(b.signal),
   });
-  assert.equal(first.layers.length, 32);
+  assert.equal(first.layers.length, 33);
   assert.ok(first.get('local-adsb'), 'Local ADS-B is registered');
   assert.deepEqual(
     first.metadata.find(({ id }) => id === 'local-adsb'),
@@ -61,6 +61,7 @@ test('catalogs construct distinct layers and classification from their supplied
     );
   assert.ok(first.get('fire-perimeters'));
   assert.ok(first.get('gnss-integrity'));
+  assert.ok(first.get('s2-ghostmaps'));
   assert.ok(first.get('transit'));
   const order = first.layers.map(({ id }) => id);
   assert.deepEqual(
@@ -154,7 +155,7 @@ test('Mapillary can be omitted or replaced without changing catalog membership',
     surface: fixtureSurface(lifetime.signal),
   };
   const catalog = createApplicationCatalog(options);
-  assert.equal(catalog.layers.length, 32);
+  assert.equal(catalog.layers.length, 33);
   assert.deepEqual(catalog.get('street-level').providerIds, []);
   assert.equal(
     catalogControlServices(catalog).streetLevelLayer,
diff --git a/src/app/controls.js b/src/app/controls.js
index 40b354d06..0b479f43d 100644
--- a/src/app/controls.js
+++ b/src/app/controls.js
@@ -4,7 +4,11 @@ import { flyToAustin } from '../camera.js';
 import { initCockpitCloudEffects } from '../cockpitCloudEffects.js';
 import { t } from '../i18n/index.js';
 
-/** Construct the existing controls and camera presentation. */
+/**
+ * Construct the existing controls and camera presentation. `initialShareCode`
+ * opens a share code (the `<code>` of `/share/<code>`) at start-up, for a host
+ * whose address does not carry one.
+ */
 export function createApplicationControls({
   scene: { viewer, mapStackController, operations },
   loaderStatus,
@@ -13,6 +17,7 @@ export function createApplicationControls({
   catalog,
   placeSearch,
   defer,
+  initialShareCode = null,
 }) {
   // Initialize the style manager (post-processing, HUD, locations, share links)
   const styleManager = new Controls(viewer, {
@@ -27,6 +32,8 @@ export function createApplicationControls({
     requestServices: operations.requests,
     mapStackController,
     placeSearch,
+    // A share code to open at start-up instead of the page's address.
+    initialShareCode,
   });
   defer(() => styleManager.orbitController.stop());
   defer(() => styleManager.hud.destroy());
diff --git a/src/app/data.js b/src/app/data.js
index ce3ad0731..e6c7d25e0 100644
--- a/src/app/data.js
+++ b/src/app/data.js
@@ -13,6 +13,7 @@ export function createApplicationData({
   // Initialize data layer manager
   const dataManager = new LayerLifecycle(viewer, {
     allowQaRegistration,
+    visibilityTarget: document,
     getSourceAvailability: catalog?.getSourceAvailability,
   });
   defer(async () => {
diff --git a/src/app/layers/ghostMaps.js b/src/app/layers/ghostMaps.js
new file mode 100644
index 000000000..ccca18850
--- /dev/null
+++ b/src/app/layers/ghostMaps.js
@@ -0,0 +1,23 @@
+import * as Cesium from 'cesium';
+import { createGhostMapsLayer } from '../../layers/ghostMaps/index.js';
+import * as picking from '../../data/pickRegistry.js';
+import * as overlays from '../../overlays/worldOverlay.js';
+import { isPointerFree } from '../../data/inputOwnership.js';
+
+/** Wire the S2 Underground GhostMaps layer into the application catalog. */
+export function createApplicationGhostMaps(options) {
+  return createGhostMapsLayer({
+    overlayHost: {
+      setEntries: overlays.setOverlayEntries,
+      setVisible: overlays.setOverlaySourceVisible,
+      clearSource: overlays.clearOverlaySource,
+      hitTest: overlays.hitTestWorldOverlay,
+    },
+    openExternal: (url) => window.open(url, '_blank', 'noopener,noreferrer'),
+    screenSpaceEventHandlerFactory: (viewer) =>
+      new Cesium.ScreenSpaceEventHandler(viewer.scene.canvas),
+    picking,
+    pointer: { isPointerFree },
+    ...options,
+  });
+}
diff --git a/src/app/sourceComposition.js b/src/app/sourceComposition.js
index 04794ab13..8ce757ef6 100644
--- a/src/app/sourceComposition.js
+++ b/src/app/sourceComposition.js
@@ -48,6 +48,7 @@ export const CATALOG_SOURCE_CONTRACTS = Object.freeze({
   'fire-perimeters': contract(['fire-perimeters'], ['getSnapshot']),
   'air-quality': contract(['air-quality'], ['getSnapshot']),
   'gnss-integrity': contract(['gnss-integrity'], ['getSnapshot']),
+  's2-ghostmaps': contract(['s2-ghostmaps'], ['getCatalog', 'getFile']),
   cables: contract(['telegeography-submarine-cables'], ['fetch']),
   transit: contract(['transit'], ['requestSnapshot', 'getHistory']),
 });
diff --git a/src/app/sourceComposition.test.mjs b/src/app/sourceComposition.test.mjs
index 422308f1e..5baf01dab 100644
--- a/src/app/sourceComposition.test.mjs
+++ b/src/app/sourceComposition.test.mjs
@@ -37,7 +37,7 @@ test('every acquisition source can be omitted without losing catalog membership'
 
 test('all acquisition sources may be absent, and enable fails before initializing or fetching', async (t) => {
   const actual = catalog({}, t);
-  assert.equal(actual.layers.length, 32);
+  assert.equal(actual.layers.length, 33);
   const manager = new LayerLifecycle(
     {},
     { getSourceAvailability: actual.getSourceAvailability },
@@ -86,6 +86,70 @@ test('standalone defaults allow exact replacements and explicit removal, and rej
   );
 });
 
+test('GhostMaps obeys source omission, replacement and explicit removal', async (t) => {
+  let fetches = 0;
+  t.mock.method(globalThis, 'fetch', async () => {
+    fetches++;
+    throw new Error('Unexpected standalone acquisition');
+  });
+  const missing = catalog({}, t);
+  assert.equal(missing.getSourceAvailability('s2-ghostmaps')?.available, false);
+  const manager = new LayerLifecycle(
+    {},
+    { getSourceAvailability: missing.getSourceAvailability },
+  );
+  manager.register(missing.get('s2-ghostmaps'));
+  assert.equal(await manager.setEnabled('s2-ghostmaps', true), false);
+  assert.equal(manager.layers.get('s2-ghostmaps').initialized, false);
+  assert.equal(
+    createStandaloneLayerSources({ 's2-ghostmaps': null })['s2-ghostmaps'],
+    null,
+  );
+
+  let reads = 0;
+  let subscriptions = 0;
+  let unsubscribed = 0;
+  const source = {
+    getCatalog: async () => {
+      reads++;
+      return { commit: 'a'.repeat(40), products: [] };
+    },
+    getFile: async () => {
+      throw new Error('Empty catalog must not read files');
+    },
+    subscribe: () => {
+      subscriptions++;
+      return () => {
+        unsubscribed++;
+      };
+    },
+  };
+  const supplied = createStandaloneLayerSources({ 's2-ghostmaps': source });
+  assert.equal(supplied['s2-ghostmaps'], source);
+  const configured = catalog(supplied, t);
+  assert.equal(
+    configured.getSourceAvailability('s2-ghostmaps').available,
+    true,
+  );
+  const previous = Object.getOwnPropertyDescriptor(globalThis, 'document');
+  globalThis.document = { addEventListener() {}, removeEventListener() {} };
+  t.after(() => {
+    if (previous) Object.defineProperty(globalThis, 'document', previous);
+    else delete globalThis.document;
+  });
+  const layer = configured.get('s2-ghostmaps');
+  t.after(() => layer.destroy());
+  layer.init({ scene: { requestRender() {} } });
+  layer.enable();
+  await layer.update();
+  layer.disable();
+  assert.equal(reads, 1);
+  assert.equal(subscriptions, 1);
+  assert.equal(unsubscribed, 1);
+  assert.equal(layer.getStats().commit, 'a'.repeat(40));
+  assert.equal(fetches, 0);
+});
+
 test('empty Street Level uses the shared unavailable lifecycle without initialization', async (t) => {
   const actual = catalog({}, t);
   const manager = new LayerLifecycle(
diff --git a/src/app/sourceSlot.js b/src/app/sourceSlot.js
deleted file mode 100644
index fe7590e3b..000000000
--- a/src/app/sourceSlot.js
+++ /dev/null
@@ -1,2 +0,0 @@
-// Compatibility entry; source contracts are owned by sources/.
-export { createSourceSlot } from '../sources/sourceSlot.js';
diff --git a/src/app/sourceSlot.test.mjs b/src/app/sourceSlot.test.mjs
deleted file mode 100644
index 1b1face0c..000000000
--- a/src/app/sourceSlot.test.mjs
+++ /dev/null
@@ -1,24 +0,0 @@
-import test from 'node:test';
-import assert from 'node:assert/strict';
-import { createSourceSlot } from './sourceSlot.js';
-
-test('replacing a source rejects its late result and old cleanup cannot clear the new source', async () => {
-  let finish;
-  const slot = createSourceSlot({ read: async () => 'default' }, ['read']);
-  const old = slot.configure({ read: () => new Promise(resolve => { finish = resolve; }) });
-  const pending = slot.source.read();
-  const stop = slot.configure({ read: async () => 'replacement', attribution: { name: 'Replacement' } });
-  old();
-  finish('stale');
-  await assert.rejects(pending, { name: 'AbortError' });
-  assert.equal(await slot.source.read(), 'replacement');
-  assert.equal(slot.source.attribution.name, 'Replacement');
-  stop();
-  assert.throws(() => slot.source.read(), /not configured/);
-});
-
-test('an invalid replacement leaves the working source intact', async () => {
-  const slot = createSourceSlot({ read: async () => 42 }, ['read']);
-  assert.throws(() => slot.configure({}), TypeError);
-  assert.equal(await slot.source.read(), 42);
-});
diff --git a/src/app/tools.js b/src/app/tools.js
index 7b3ea83c9..7aea39c22 100644
--- a/src/app/tools.js
+++ b/src/app/tools.js
@@ -7,6 +7,7 @@ import { createRecentImageryPanel } from '../ui/recentImagery.js';
 import { initGevVoiceCommands } from '../voice/gevRealtime.js';
 import { installViews, isEmbeddedInline } from './embed.js';
 import { installScopeMask, destroyScopeMask } from '../scopeMask.js';
+import { installLayerReleaseTrim } from '../sceneCommandRelease.js';
 import {
   installRenderGovernor,
   getRenderGovernorDiagnostics,
@@ -110,6 +111,15 @@ export function createApplicationTools({
   // nothing animates per frame. Installed AFTER every module above has had
   // its chance to register pre-install holds. (perf wave 2)
   installRenderGovernor(viewer);
+  // Cesium keeps a turned-off layer's draw commands (and so all its entities)
+  // alive in reused per-pass arrays; trim them after each disable.
+  defer(
+    installLayerReleaseTrim({
+      scene: viewer.scene,
+      dataManager,
+      requestRender: governorRequestRender,
+    }),
+  );
 
   // Install the explicit scope mask used by the DISPLAY controls.
   installScopeMask(viewer);
diff --git a/src/app/viewer.js b/src/app/viewer.js
index cedfbb020..c8b841352 100644
--- a/src/app/viewer.js
+++ b/src/app/viewer.js
@@ -137,6 +137,11 @@ export function createApplicationViewer({ container, creditContainer }) {
   );
   try {
     viewer.targetFrameRate = 60;
+    // A phone pinch spans fewer screen pixels than desktop zoom gestures.
+    // Keep Cesium's distance-aware zoom and collision limits, with less travel
+    // required on touch-first screens. Mouse/trackpad sensitivity stays native.
+    if (globalThis.matchMedia?.('(pointer: coarse)').matches)
+      viewer.scene.screenSpaceCameraController.zoomFactor *= 3;
     // Before any tile builds a draw command: Cesium's per-vertex model
     // atmosphere fails to LINK on Apple's Metal backend and kills the
     // render loop. See app/atmosphereCompat.js.
diff --git a/src/cameraHandoff.test.mjs b/src/cameraHandoff.test.mjs
index 1fe30ff06..15a316366 100644
--- a/src/cameraHandoff.test.mjs
+++ b/src/cameraHandoff.test.mjs
@@ -261,7 +261,7 @@ test('deferred search releases only after its final authority check', () => {
   assert.match(ui, /begin: \(\) => this\._beginDeferredNavigation\('location'\)/);
   assert.match(ui, /beforeFly: \(generation\) => this\._reassertNavigationHandoff\(generation\)/);
   assert.match(ui, /isCurrent: \(generation\) =>\s*!this\._disposed && generation === this\._navigationGeneration/);
-  assert.match(ui, /change\.type === 'settled'\)\s*this\._settleLocationSearchUi\(change\.generation\)/);
+  assert.match(ui, /change\.type === 'settled'\)\s*this\._settleLocationSearchUi\(change\.generation, \{\s*keepQuery: state\.status === 'missing' \|\| state\.status === 'failed',?\s*\}\)/);
   assert.doesNotMatch(search.slice(0, search.indexOf('await this.search')), /_releaseFollowCamera/);
 });
 
diff --git a/src/cockpitMath.js b/src/cockpitMath.js
index 62015bb70..888c33ead 100644
--- a/src/cockpitMath.js
+++ b/src/cockpitMath.js
@@ -6,6 +6,15 @@ export function normalizeHeading(value) {
   return ((value % 360) + 360) % 360;
 }
 
+/**
+ * Three-digit heading readout, 000–359.
+ * Rounding 359.5° and above lands on north (000), not 360.
+ */
+export function formatHeadingReadout(degrees) {
+  if (!Number.isFinite(degrees)) return '---';
+  return String(Math.round(normalizeHeading(degrees)) % 360).padStart(3, '0');
+}
+
 /** Advance a displayed heading along the shortest arc without exceeding a slew rate. */
 export function slewHeading(current, target, maxStepDeg) {
   const from = normalizeHeading(current);
diff --git a/src/cockpitMath.test.mjs b/src/cockpitMath.test.mjs
index 2189ca35e..e49b91a57 100644
--- a/src/cockpitMath.test.mjs
+++ b/src/cockpitMath.test.mjs
@@ -15,6 +15,7 @@ import {
   formatCockpitContextScope,
   formatCockpitEmergency,
   formatCompassDivision,
+  formatHeadingReadout,
   formatSpeedRulerTick,
   normalizeHeading,
   relativeBearing,
@@ -155,6 +156,14 @@ test('compass labels use cardinals where exact and degrees elsewhere', () => {
   assert.equal(formatCompassDivision(30), '030');
 });
 
+test('a heading that rounds to north reads 000, not 360', () => {
+  assert.equal(formatHeadingReadout(359.6), '000');
+  assert.equal(formatHeadingReadout(359.4), '359');
+  assert.equal(formatHeadingReadout(0), '000');
+  assert.equal(formatHeadingReadout(10.2), '010');
+  assert.equal(formatHeadingReadout(Number.NaN), '---');
+});
+
 test('great-circle bearing resolves cardinal directions', () => {
   assert.ok(Math.abs(bearingBetweenCoordinates(0, 0, 1, 0) - 0) < 0.001);
   assert.ok(Math.abs(bearingBetweenCoordinates(0, 0, 0, 1) - 90) < 0.001);
diff --git a/src/contextSessionOrdering.test.mjs b/src/contextSessionOrdering.test.mjs
index 2f9bfeae0..d7127e8d5 100644
--- a/src/contextSessionOrdering.test.mjs
+++ b/src/contextSessionOrdering.test.mjs
@@ -94,6 +94,15 @@ test('context restore settles the Contacts coordinator before dependency fanout'
   assert.match(restore, /excludeLayerIds: settleContactsCoordinator[\s\S]*?contactsCoordinatorId/);
 });
 
+test('Clear All during the Contacts settle stops the snapshot coming back', () => {
+  const restore = _restoreContextSession.toString();
+  const coordinatorOff = restore.indexOf('const coordinatorSettled = await this._dataManager.setEnabled(');
+  const cancelled = restore.indexOf('if (restoreState.cancelled) return;', coordinatorOff);
+  const fanout = restore.indexOf('await this._dataManager.restoreEnabledLayerIds(', coordinatorOff);
+  assert.ok(cancelled > coordinatorOff, 'the cancellation is checked after Contacts settles');
+  assert.ok(fanout > cancelled, 'and before the snapshot fans out');
+});
+
 test('context restore preserves its exact pending target after a failed transition', () => {
   const restore = _restoreContextSession.toString();
   assert.match(restore, /const replayError = await settleContextIntentReplay\(\{/);
diff --git a/src/data/aircraftModelLighting.js b/src/data/aircraftModelLighting.js
new file mode 100644
index 000000000..c8051c67e
--- /dev/null
+++ b/src/data/aircraftModelLighting.js
@@ -0,0 +1,17 @@
+/**
+ * Lighting options shared by every aircraft 3D model (Flights, Military
+ * Flights, Local ADS-B).
+ *
+ * Cesium gives each Model a dynamic environment map: it renders the sky around
+ * the model and reads the result back from the GPU (`readPixels`) to light it,
+ * when the model is first placed and again when it moves more than 1 km, when
+ * the scene's atmosphere settings change, or every scene hour under sunlight
+ * lighting. Aircraft models take 94% of their surface from the class colour
+ * (`colorBlendAmount`), so that lighting contributes little; without it they
+ * are lit from Cesium's default spherical harmonics. Measured 2026-10-24
+ * (Intel Arc, Google 3D, ~150 models in the scene): GPU per frame at rest
+ * 14.3-14.8 -> 12.1-12.5 ms.
+ */
+export const AIRCRAFT_ENVIRONMENT_MAP_OPTIONS = Object.freeze({
+  enabled: false,
+});
diff --git a/src/data/aircraftModelLighting.test.mjs b/src/data/aircraftModelLighting.test.mjs
new file mode 100644
index 000000000..51fd9d97c
--- /dev/null
+++ b/src/data/aircraftModelLighting.test.mjs
@@ -0,0 +1,51 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { readLayerSource } from '../testSupport/readLayerSource.mjs';
+import { AIRCRAFT_ENVIRONMENT_MAP_OPTIONS } from './aircraftModelLighting.js';
+
+/**
+ * Every aircraft model drawn in the scene skips Cesium's dynamic environment
+ * map (a sky render and GPU readback per model). The preload calls only warm
+ * the glTF cache and are never added to the scene, so they are left out:
+ * drawn models are the calls that set a minimum pixel size.
+ */
+const SOURCES = [
+  {
+    name: 'flights',
+    source: readLayerSource(new URL('./flights.js', import.meta.url)),
+  },
+  {
+    name: 'militaryFlights',
+    source: readLayerSource(new URL('./militaryFlights.js', import.meta.url)),
+  },
+  {
+    name: 'localAdsb',
+    source: readFileSync(
+      new URL('../layers/localAdsb/models.js', import.meta.url),
+      'utf8',
+    ),
+  },
+];
+
+test('the shared option turns the dynamic environment map off', () => {
+  assert.deepEqual({ ...AIRCRAFT_ENVIRONMENT_MAP_OPTIONS }, { enabled: false });
+  assert.ok(Object.isFrozen(AIRCRAFT_ENVIRONMENT_MAP_OPTIONS));
+});
+
+for (const { name, source } of SOURCES) {
+  test(`${name}: every drawn aircraft model skips the dynamic environment map`, () => {
+    const calls = [
+      ...source.matchAll(/(?:fromGltfAsync|loadModel)\(\{([\s\S]*?)\}\)/g),
+    ]
+      .map((match) => match[1])
+      .filter((options) => /\bminimumPixelSize:/.test(options));
+    assert.ok(calls.length >= 1, `expected drawn model calls in ${name}`);
+    for (const [index, options] of calls.entries())
+      assert.match(
+        options,
+        /\benvironmentMapOptions:\s*AIRCRAFT_ENVIRONMENT_MAP_OPTIONS\b/,
+        `${name} model call ${index + 1} must pass AIRCRAFT_ENVIRONMENT_MAP_OPTIONS`,
+      );
+  });
+}
diff --git a/src/data/aisStreamSentinels.test.mjs b/src/data/aisStreamSentinels.test.mjs
index 6595b795e..5ca3375f7 100644
--- a/src/data/aisStreamSentinels.test.mjs
+++ b/src/data/aisStreamSentinels.test.mjs
@@ -1,8 +1,10 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import {
+  AISSTREAM_STALE_MS,
   aisStreamRows,
   ingestAisStreamEnvelope,
+  readAisTrack,
 } from '../../server/providers/vessels/ais-store.js';
 
 // ITU-R M.1371 encodes speed over ground in 0.1-knot units and course over
@@ -63,3 +65,196 @@ test('the fastest encodable reading below the unavailable code is kept', () => {
   assert.equal(row.speed, 102.2);
   assert.equal(row.course, 359.9);
 });
+
+test('a static data report keeps the motion and fix time of a tracked vessel', () => {
+  ingestAisStreamEnvelope(
+    positionReport('244690000', { Sog: 12.4, Cog: 86.7, TrueHeading: 87 }),
+  );
+  // AISStream's MetaData carries the last known position on every message,
+  // static data included.
+  assert.equal(
+    ingestAisStreamEnvelope({
+      MessageType: 'ShipStaticData',
+      Message: {
+        ShipStaticData: {
+          UserID: 244690000,
+          Name: 'EXAMPLE VESSEL',
+          Type: 70,
+          Destination: 'ROTTERDAM',
+          ImoNumber: 9876543,
+        },
+      },
+      MetaData: {
+        MMSI: '244690000',
+        latitude: 53.40879,
+        longitude: 6.19741,
+        time_utc: '2026-09-17 20:05:00.000000000 +0000 UTC',
+      },
+    }),
+    true,
+  );
+  const row = rowFor('244690000');
+  assert.equal(row.speed, 12.4);
+  assert.equal(row.course, 86.7);
+  assert.equal(row.heading, 87);
+  assert.equal(row.last_position_UTC, '2026-09-17T20:00:00.000Z');
+  assert.equal(row.destination, 'ROTTERDAM');
+  assert.equal(row.imo, '9876543');
+});
+
+// AISStream carries both Class B parts; the unused part has Valid: false.
+const classBStatic = (part, value) => ({
+  MessageID: 24,
+  RepeatIndicator: 0,
+  Valid: true,
+  Reserved: 0,
+  PartNumber: part === 'B',
+  ReportA: { Valid: part === 'A', Name: part === 'A' ? value : '' },
+  ReportB: {
+    Valid: part === 'B',
+    ShipType: part === 'B' ? value : 0,
+    VendorIDName: '',
+    VenderIDModel: 0,
+    VenderIDSerial: 0,
+    CallSign: '',
+    Dimension: { A: 0, B: 0, C: 0, D: 0 },
+    FixType: 0,
+    Spare: 0,
+  },
+});
+
+for (const [index, scenario] of [
+  {
+    type: 'ShipStaticData',
+    initial: [
+      {
+        Name: 'OLD VESSEL',
+        Type: 70,
+        Destination: 'ROTTERDAM',
+        ImoNumber: 9876543,
+      },
+    ],
+    updates: [
+      {
+        Name: 'NEW VESSEL',
+        Type: 80,
+        Destination: 'HAMBURG',
+        ImoNumber: 9876544,
+      },
+    ],
+    empty: { Name: ' ', Type: 0, Destination: '', ImoNumber: 0 },
+    expected: {
+      name: 'NEW VESSEL',
+      type: '80',
+      destination: 'HAMBURG',
+      imo: '9876544',
+    },
+  },
+  {
+    type: 'StaticDataReport',
+    initial: [classBStatic('A', 'OLD VESSEL'), classBStatic('B', 36)],
+    updates: [classBStatic('A', 'NEW VESSEL'), classBStatic('B', 37)],
+    empty: classBStatic('A', ''),
+    expected: { name: 'NEW VESSEL', type: '37', destination: '', imo: '' },
+  },
+].entries()) {
+  test(`${scenario.type} replaces static fields without inventing a position fix`, (t) => {
+    const mmsi = String(244690100 + index);
+    const start = Date.parse('2026-09-17T20:00:00Z');
+    let now = start;
+    t.mock.method(Date, 'now', () => now);
+    const position = (
+      lat,
+      body = { Sog: 12.4, Cog: 86.7, TrueHeading: 87 },
+    ) => {
+      const envelope = positionReport(mmsi, body);
+      Object.assign(envelope.MetaData, {
+        latitude: lat,
+        time_utc: new Date(now).toISOString(),
+      });
+      return ingestAisStreamEnvelope(envelope);
+    };
+    const sendStatic = (body) =>
+      ingestAisStreamEnvelope({
+        MessageType: scenario.type,
+        Message: { [scenario.type]: { UserID: Number(mmsi), ...body } },
+        MetaData: {
+          MMSI: mmsi,
+          ShipName: 'STALE HEADER',
+          latitude: 54,
+          longitude: 7,
+          time_utc: new Date(now).toISOString(),
+        },
+      });
+    position(53.40879);
+    for (const body of scenario.initial) assert.equal(sendStatic(body), true);
+    now += 60_000;
+    position(53.41879);
+    const before = rowFor(mmsi);
+    const track = readAisTrack(mmsi);
+    assert.equal(track.length, 2);
+
+    now += 5 * 60_000;
+    for (const body of scenario.updates) assert.equal(sendStatic(body), true);
+    assert.deepEqual(rowFor(mmsi), { ...before, ...scenario.expected });
+    assert.deepEqual(readAisTrack(mmsi), track);
+
+    // Empty or omitted static fields must not erase known metadata, including
+    // the cached values used when the next actual position arrives.
+    assert.equal(sendStatic(scenario.empty), true);
+    assert.deepEqual(rowFor(mmsi), { ...before, ...scenario.expected });
+    assert.deepEqual(readAisTrack(mmsi), track);
+    if (scenario.type === 'StaticDataReport') {
+      sendStatic({
+        ...classBStatic('A', ''),
+        ReportA: { Valid: false, Name: 'INVALID NAME' },
+        ReportB: { ...classBStatic('B', 99).ReportB, Valid: false },
+      });
+      assert.deepEqual(rowFor(mmsi), { ...before, ...scenario.expected });
+    }
+    now = start + 60_000 + AISSTREAM_STALE_MS + 1;
+    assert.equal(
+      rowFor(mmsi),
+      undefined,
+      'static traffic must not renew position freshness',
+    );
+    position(53.42879, { Sog: 0, Cog: 0, TrueHeading: 0 });
+    const next = rowFor(mmsi);
+    for (const [key, value] of Object.entries(scenario.expected))
+      assert.equal(next[key], value, key);
+    assert.equal(next.speed, 0);
+    assert.equal(next.course, 0);
+    assert.equal(next.heading, 0);
+    assert.equal(next.last_position_epoch, Math.floor(now / 1000));
+    assert.equal(readAisTrack(mmsi).length, 3);
+  });
+}
+
+test('partial static data keeps newer live metadata ahead of the old static cache', () => {
+  const mmsi = '244690200';
+  const staticReport = (body) => ({
+    MessageType: 'ShipStaticData',
+    Message: { ShipStaticData: { UserID: Number(mmsi), ...body } },
+    MetaData: { MMSI: mmsi },
+  });
+  ingestAisStreamEnvelope(staticReport({ Name: 'OLD VESSEL', Type: 70 }));
+  const extended = positionReport(mmsi, {});
+  extended.MessageType = 'ExtendedClassBPositionReport';
+  extended.Message = {
+    ExtendedClassBPositionReport: {
+      UserID: Number(mmsi),
+      Type: 80,
+      Sog: 12,
+      Cog: 86,
+    },
+  };
+  extended.MetaData.ShipName = 'NEW VESSEL';
+  ingestAisStreamEnvelope(extended);
+  const before = rowFor(mmsi);
+  ingestAisStreamEnvelope(staticReport({ Destination: 'HAMBURG' }));
+  assert.deepEqual(rowFor(mmsi), { ...before, destination: 'HAMBURG' });
+  ingestAisStreamEnvelope(positionReport(mmsi, { Sog: 12, Cog: 86 }));
+  assert.equal(rowFor(mmsi).name, 'NEW VESSEL');
+  assert.equal(rowFor(mmsi).type, '80');
+  assert.equal(rowFor(mmsi).destination, 'HAMBURG');
+});
diff --git a/src/data/alprCameras.test.mjs b/src/data/alprCameras.test.mjs
index 5a50220d5..549adde96 100644
--- a/src/data/alprCameras.test.mjs
+++ b/src/data/alprCameras.test.mjs
@@ -9,6 +9,8 @@ import alprCamerasLayer, {
 } from './alprCameras.js';
 import { createAlprTileSource } from '../layers/alpr/source.js';
 import { DATA_CREDITS } from './dataCredits.js';
+import { setLocale } from '../i18n/index.js';
+import { shownEntityLabel } from '../voice/speech.js';
 import {
   clearSelectedEntityContextForLayer,
   getContextStore,
@@ -473,6 +475,29 @@ test('all manufacturers share one ALPR title and color; only supplied metadata a
   }
 });
 
+// The voice model reads the label as data; the voice card translates it.
+test('the camera label stays English data in a translated interface', async () => {
+  const h = cameraHarness();
+  try {
+    setLocale('ru');
+    h.setFetch(async () =>
+      cameraResponse([
+        cameraNode(42, { tags: { 'surveillance:type': 'ALPR' } }),
+      ]),
+    );
+    await alprCamerasLayer.update();
+    h.click(h.source.entities.values[0].id);
+    assert.equal(getSelectedEntityContext().label, 'ALPR camera');
+    assert.equal(
+      shownEntityLabel(getSelectedEntityContext().label),
+      'Камера ALPR',
+    );
+  } finally {
+    setLocale('en');
+    h.restore();
+  }
+});
+
 test('invalid OSM ids and out-of-range coordinates never become camera entities', () => {
   for (const id of [undefined, null, 0, -1, 1.5, '42', NaN])
     assert.equal(normalizeAlprNode(cameraNode(id, { id })), null);
diff --git a/src/data/cyclonesProxy.test.mjs b/src/data/cyclonesProxy.test.mjs
index 23e84826c..6757f6e5c 100644
--- a/src/data/cyclonesProxy.test.mjs
+++ b/src/data/cyclonesProxy.test.mjs
@@ -115,7 +115,8 @@ test('status retains official clocks, knots, source links and finite current pos
   assert.equal(storm.issuedAt, TIME);
   assert.equal(storm.positionAt, TIME);
   assert.deepEqual(storm.position, { longitude: -125.8, latitude: 15.5 });
-  assert.deepEqual(storm.movement, { directionDegrees: 255, speedKt: 12 });
+  // NHC publishes movementSpeed in mph: 12 mph is 10 kt.
+  assert.deepEqual(storm.movement, { directionDegrees: 255, speedKt: 10 });
   assert.equal(storm.windKt, 25);
   assert.equal(storm.pressureHpa, 1006);
   assert.match(storm.advisoryUrl, /^https:\/\/www\.nhc\.noaa\.gov\/text\//);
diff --git a/src/data/dataCredits.js b/src/data/dataCredits.js
index aff87aeb7..b89958041 100644
--- a/src/data/dataCredits.js
+++ b/src/data/dataCredits.js
@@ -448,6 +448,14 @@ export const DATA_CREDITS = [
       '(<a href="https://earthdata.nasa.gov/firms" target="_blank" rel="noopener">earthdata.nasa.gov/firms</a>), ' +
       'part of NASA’s Earth Observing System Data and Information System (EOSDIS)',
   },
+  {
+    key: 's2-ghostmaps',
+    html:
+      'S2 GhostMaps intel products: S2 Underground © by S2A1, ' +
+      '<a href="https://github.com/s2underground/GhostMaps" target="_blank" rel="noopener">github.com/s2underground/GhostMaps</a>, ' +
+      'licensed under <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank" rel="noopener">CC BY-NC-SA 4.0</a>. ' +
+      'Shown as published; reports are S2 assessments, not verified fact.',
+  },
   {
     key: 'drivebc-cctv',
     html:
diff --git a/src/data/directions.test.mjs b/src/data/directions.test.mjs
index 4c9b54bd8..bf6e2878e 100644
--- a/src/data/directions.test.mjs
+++ b/src/data/directions.test.mjs
@@ -846,9 +846,13 @@ test('route numbers follow the page language and never break from their unit', (
   t.after(() => setLocale('en'));
   assert.equal(routeDistanceText(8.4), '8\u00a0m');
   assert.equal(routeDistanceText(236), '240\u00a0m');
+  assert.equal(routeDistanceText(994), '990\u00a0m');
+  assert.equal(routeDistanceText(996), '1.0\u00a0km');
   assert.equal(routeDistanceText(1500), '1.5\u00a0km');
   assert.equal(routeDistanceText(2_345_000), '2345\u00a0km');
   assert.equal(routeDurationText(39), '39\u00a0s');
+  assert.equal(routeDurationText(59.4), '59\u00a0s');
+  assert.equal(routeDurationText(59.6), '1\u00a0min');
   assert.equal(routeDurationText(3900), '1\u00a0h\u00a05\u00a0min');
   assert.equal(routeDurationText(7200), '2\u00a0h');
   assert.equal(routeDistanceText(-1), '');
@@ -872,3 +876,46 @@ test('route numbers follow the page language and never break from their unit', (
   const list = directionsStepList({ route });
   assert.equal(list.items[1].lead, '240\u00a0м');
 });
+
+test('ramp and lane wording stays localized after choosing the maneuver form', (t) => {
+  t.after(() => setLocale('en'));
+  const cases = [
+    [
+      'ru',
+      'Въезжайте по съезду плавно налево на I-95',
+      'Сверните на съезд резко направо',
+      'Займите левую полосу',
+    ],
+    [
+      'es',
+      'Toma la rampa ligeramente a la izquierda hacia I-95',
+      'Toma la salida bruscamente a la derecha',
+      'Toma el carril izquierdo',
+    ],
+    [
+      'zh-CN',
+      '向左前方驶入匝道，进入 I-95',
+      '从出口向右后方驶出',
+      '使用左转车道',
+    ],
+  ];
+  for (const [locale, ramp, exit, lane] of cases) {
+    setLocale(locale);
+    assert.equal(
+      directionsInstruction({
+        type: 'on ramp',
+        modifier: 'slight left',
+        name: 'I-95',
+      }),
+      ramp,
+    );
+    assert.equal(
+      directionsInstruction({ type: 'off ramp', modifier: 'sharp right' }),
+      exit,
+    );
+    assert.equal(
+      directionsInstruction({ type: 'use lane', modifier: 'sharp left' }),
+      lane,
+    );
+  }
+});
diff --git a/src/data/firmsCards.test.mjs b/src/data/firmsCards.test.mjs
index 4b423f687..a0ee83c01 100644
--- a/src/data/firmsCards.test.mjs
+++ b/src/data/firmsCards.test.mjs
@@ -53,6 +53,21 @@ test('buildFireCard: missing acquisition time omits the age segment', () => {
   assert.equal(card.details[0], 'high · N20');
 });
 
+test('buildFireCard: power that rounds to 10 MW drops the decimal', () => {
+  const crossed = buildFireCard(
+    { fire: fire({ frp: 9.96 }), position: {} },
+    NOW,
+  );
+  assert.equal(crossed.title, '▲ 10 MW');
+  const below = buildFireCard(
+    { fire: fire({ frp: 9.94 }), position: {} },
+    NOW,
+  );
+  assert.equal(below.title, '▲ 9.9 MW');
+  const selected = buildSelectedFireCard(fire({ frp: 9.96 }), NOW);
+  assert.equal(selected.title, 'FIRE · 10 MW');
+});
+
 test('buildFireCard: SNPP satellite code renders as SNPP, weak fire is not red', () => {
   const card = buildFireCard({ fire: fire({ satellite: 'N', frp: 0.8, confidence: 0.3 }), position: {} }, NOW);
   assert.match(card.details[0], /SNPP$/);
diff --git a/src/data/firmsInteraction.test.mjs b/src/data/firmsInteraction.test.mjs
index 442af60b2..d735df3f8 100644
--- a/src/data/firmsInteraction.test.mjs
+++ b/src/data/firmsInteraction.test.mjs
@@ -8,6 +8,9 @@ import * as Cesium from 'cesium';
 import { createFirmsHeatmapLayer, applyFirmsOverlayPolicy, buildCellCard } from './firmsHeatmap.js';
 import { fireDetectionKey } from './firmsLabels.js';
 import { registerPickOwner, unregisterPickOwner } from './pickRegistry.js';
+import { getSelectedEntityContext } from './contextStore.js';
+import { setLocale } from '../i18n/index.js';
+import { shownEntityLabel } from '../voice/speech.js';
 import { WORLD_FOCUS_REQUEST_EVENT } from '../worldFocus.js';
 import { readLayerSource } from '../testSupport/readLayerSource.mjs';
 import path from 'node:path';
@@ -234,6 +237,27 @@ test('clicking a fire CARD behaves exactly like clicking its sprite', () => {
   }
 });
 
+// The voice model reads these labels as data (track_entity, get_entity_context,
+// pointer_context); the voice card translates them where it shows them.
+test('fire labels stay English data in a translated interface', () => {
+  const h = harness({ fires: [makeFire()], picked: { id: 'firms-7' } });
+  try {
+    setLocale('ru');
+    h.click();
+    assert.equal(getSelectedEntityContext().label, 'Fire · FRP 1520 MW');
+    // The card's pattern must match what the producer actually writes.
+    assert.equal(
+      shownEntityLabel(getSelectedEntityContext().label),
+      'Пожар · FRP 1520 МВт',
+    );
+    assert.equal(h.layer.getSelectedInfo().label, 'Fire · FRP 1520 MW');
+    assert.equal(h.layer.getStrongestFire().label, 'Fire · FRP 1520 MW');
+  } finally {
+    h.cleanup();
+    setLocale('en');
+  }
+});
+
 test('a click on neither sprite nor card clears without moving the camera', () => {
   const h = harness({ picked: { primitive: {}, content: {}, featureId: 0 } });
   try {
diff --git a/src/data/firmsLabels.js b/src/data/firmsLabels.js
index 34b66b79a..b9e9d1765 100644
--- a/src/data/firmsLabels.js
+++ b/src/data/firmsLabels.js
@@ -39,6 +39,17 @@ export function accentForSeverity(stopName) {
   return ACCENT_RGB[stopName] || ACCENT_RGB.yellow;
 }
 
+/**
+ * Fire radiative power as shown on a card: "9.9" below 10 MW, "10" once
+ * one-decimal rounding reaches 10. "10.0" would sit beside a whole "10".
+ * @param {number} frp Megawatts.
+ * @returns {string}
+ */
+export function formatFrpMw(frp) {
+  const digits = Number(Number(frp).toFixed(1)) >= 10 ? 0 : 1;
+  return Number(frp).toFixed(digits);
+}
+
 /** Raw FIRMS satellite code → short display name (N = Suomi NPP). */
 export function satelliteShortName(satellite) {
   const s = String(satellite || '')
diff --git a/src/data/firmsLabels.test.mjs b/src/data/firmsLabels.test.mjs
index e0ebb2056..8573d7330 100644
--- a/src/data/firmsLabels.test.mjs
+++ b/src/data/firmsLabels.test.mjs
@@ -6,6 +6,7 @@ import {
   FIRMS_AMBIENT_COHORT_LIMIT,
   FIRMS_OVERLAY_SOURCE_ID,
   satelliteShortName,
+  formatFrpMw,
 } from './firmsLabels.js';
 
 test('FIRMS formatting helpers retain the shipped severity palette', () => {
@@ -15,6 +16,14 @@ test('FIRMS formatting helpers retain the shipped severity palette', () => {
   assert.equal(accentForSeverity('chartreuse'), accentForSeverity('yellow'));
 });
 
+test('FIRMS power that rounds to 10 MW drops the decimal', () => {
+  assert.equal(formatFrpMw(9.96), '10');
+  assert.equal(formatFrpMw(9.94), '9.9');
+  assert.equal(formatFrpMw(0.8), '0.8');
+  assert.equal(formatFrpMw(1520.27), '1520');
+  assert.equal(formatFrpMw(210.4), '210');
+});
+
 test('FIRMS satellite names retain the three VIIRS abbreviations', () => {
   assert.equal(satelliteShortName('N20'), 'N20');
   assert.equal(satelliteShortName('N21'), 'N21');
diff --git a/src/data/flowTiles.js b/src/data/flowTiles.js
deleted file mode 100644
index 07efb0d9a..000000000
--- a/src/data/flowTiles.js
+++ /dev/null
@@ -1,6 +0,0 @@
-import { createFlowTileSource } from '../layers/traffic/flowSource.js';
-export { tilesForBounds } from './tomtomTiles.js';
-export { decodeFlowTile } from '../layers/traffic/flowDecode.js';
-const source = createFlowTileSource();
-export const { fetchFlowForBounds, getFlowSessionStats, resetFlowTileCache } =
-  source;
diff --git a/src/data/flowTiles.test.mjs b/src/data/flowTiles.test.mjs
deleted file mode 100644
index 61a7ddb78..000000000
--- a/src/data/flowTiles.test.mjs
+++ /dev/null
@@ -1,162 +0,0 @@
-// src/data/flowTiles.test.mjs
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import {
-  decodeFlowTile,
-  fetchFlowForBounds,
-  tilesForBounds,
-  getFlowSessionStats,
-  resetFlowTileCache,
-} from './flowTiles.js';
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-// Real TomTom flow tile, downtown Austin z12 x935 y1686 (probed live 2026-07-16).
-const FIXTURE = path.join(__dirname, 'fixtures', 'tomtom-flow-austin-12-935-1686.pbf');
-const FIXTURE_TILE = { z: 12, x: 935, y: 1686 };
-
-function loadFixture() {
-  return fs.readFileSync(FIXTURE);
-}
-
-// ── decodeFlowTile against the real fixture ─────────────────
-
-test('fixture decode: more than 50 flow segments', () => {
-  const segments = decodeFlowTile(loadFixture(), FIXTURE_TILE.z, FIXTURE_TILE.x, FIXTURE_TILE.y);
-  assert.ok(segments.length > 50, `got ${segments.length}`);
-});
-
-test('fixture decode: every trafficLevel is within [0, 1]', () => {
-  const segments = decodeFlowTile(loadFixture(), FIXTURE_TILE.z, FIXTURE_TILE.x, FIXTURE_TILE.y);
-  for (const s of segments) {
-    assert.ok(Number.isFinite(s.trafficLevel), `non-finite level: ${s.trafficLevel}`);
-    assert.ok(s.trafficLevel >= 0 && s.trafficLevel <= 1, `level out of range: ${s.trafficLevel}`);
-  }
-});
-
-test('fixture decode: all coordinates land in downtown Austin', () => {
-  const segments = decodeFlowTile(loadFixture(), FIXTURE_TILE.z, FIXTURE_TILE.x, FIXTURE_TILE.y);
-  for (const s of segments) {
-    assert.ok(Array.isArray(s.coords) && s.coords.length >= 2, 'polyline too short');
-    for (const [lon, lat] of s.coords) {
-      assert.ok(lon >= -98.0 && lon <= -97.5, `lon out of Austin range: ${lon}`);
-      assert.ok(lat >= 30.0 && lat <= 30.5, `lat out of Austin range: ${lat}`);
-    }
-  }
-});
-
-test('fixture decode: congestion exists (at least one trafficLevel < 1)', () => {
-  const segments = decodeFlowTile(loadFixture(), FIXTURE_TILE.z, FIXTURE_TILE.x, FIXTURE_TILE.y);
-  assert.ok(segments.some((s) => s.trafficLevel < 1), 'no congested segment found');
-});
-
-test('fixture decode: segment shape is {coords, trafficLevel, roadType, closure}', () => {
-  const segments = decodeFlowTile(loadFixture(), FIXTURE_TILE.z, FIXTURE_TILE.x, FIXTURE_TILE.y);
-  for (const s of segments) {
-    assert.equal(typeof s.roadType, 'string');
-    assert.equal(typeof s.closure, 'boolean');
-  }
-  // The fixture carries real closures — closure decoding is exercised, not vacuous.
-  assert.ok(segments.some((s) => s.closure === true), 'expected at least one closure in fixture');
-});
-
-test('decode of a non-MVT buffer returns [] (defensive)', () => {
-  assert.deepEqual(decodeFlowTile(Buffer.from('not a protobuf tile'), 12, 935, 1686), []);
-});
-
-// ── tilesForBounds (re-exported slippy math) ────────────────
-
-test('tilesForBounds: 30.2672,-97.7431 @ z12 -> covers x935 y1686', () => {
-  const tiles = tilesForBounds({
-    south: 30.2672 - 0.001, north: 30.2672 + 0.001,
-    west: -97.7431 - 0.001, east: -97.7431 + 0.001,
-  }, 12);
-  assert.ok(
-    tiles.some((t) => t.z === 12 && t.x === 935 && t.y === 1686),
-    `fixture tile missing: ${JSON.stringify(tiles)}`
-  );
-});
-
-// ── fetchFlowForBounds (stubbed fetch: cache + abort) ───────
-
-/** Bounds fully inside the fixture tile. */
-const FIXTURE_BOUNDS = { south: 30.24, north: 30.26, west: -97.76, east: -97.74 };
-
-function stubFetch(impl) {
-  const original = globalThis.fetch;
-  globalThis.fetch = impl;
-  return () => { globalThis.fetch = original; };
-}
-
-test('fetchFlowForBounds: fetches covering tiles via /api/tomtom and decodes', async () => {
-  resetFlowTileCache();
-  const calls = [];
-  const restore = stubFetch(async (url) => {
-    calls.push(String(url));
-    return new Response(loadFixture(), {
-      status: 200,
-      headers: { 'Content-Type': 'application/x-protobuf' },
-    });
-  });
-  try {
-    const segments = await fetchFlowForBounds(FIXTURE_BOUNDS);
-    assert.equal(calls.length, 1);
-    assert.match(calls[0], /^\/api\/tomtom\/flow\/12\/935\/1686\.pbf$/);
-    assert.ok(segments.length > 50);
-    assert.ok(getFlowSessionStats().tilesFetched >= 1);
-  } finally {
-    restore();
-  }
-});
-
-test('fetchFlowForBounds: decode cache serves repeat calls within TTL (no refetch)', async () => {
-  resetFlowTileCache();
-  let calls = 0;
-  const restore = stubFetch(async () => {
-    calls += 1;
-    return new Response(loadFixture(), { status: 200 });
-  });
-  try {
-    const first = await fetchFlowForBounds(FIXTURE_BOUNDS);
-    const second = await fetchFlowForBounds(FIXTURE_BOUNDS);
-    assert.equal(calls, 1, 'second call must be served from the decode cache');
-    assert.equal(second.length, first.length);
-  } finally {
-    restore();
-  }
-});
-
-test('fetchFlowForBounds: aborted signal rejects (AbortSignal-aware)', async () => {
-  resetFlowTileCache();
-  const restore = stubFetch(async (url, opts) => {
-    // Mimic real fetch abort semantics.
-    if (opts?.signal?.aborted) {
-      const err = new Error('aborted');
-      err.name = 'AbortError';
-      throw err;
-    }
-    return new Response(loadFixture(), { status: 200 });
-  });
-  try {
-    const controller = new AbortController();
-    controller.abort();
-    await assert.rejects(
-      fetchFlowForBounds(FIXTURE_BOUNDS, { signal: controller.signal }),
-      (err) => err.name === 'AbortError'
-    );
-  } finally {
-    restore();
-  }
-});
-
-test('fetchFlowForBounds: non-OK tile responses reject when nothing succeeds', async () => {
-  resetFlowTileCache();
-  const restore = stubFetch(async () => new Response(JSON.stringify({ error: 'no_key' }), { status: 503 }));
-  try {
-    await assert.rejects(fetchFlowForBounds(FIXTURE_BOUNDS));
-  } finally {
-    restore();
-  }
-});
diff --git a/src/data/geoFileImport.js b/src/data/geoFileImport.js
index 6f5f2e653..6e379bb39 100644
--- a/src/data/geoFileImport.js
+++ b/src/data/geoFileImport.js
@@ -1134,7 +1134,8 @@ export function repairKmlRootNamespaces(value, what = 'KML') {
   return text.slice(0, start) + root + text.slice(end);
 }
 
-function parseXml(text, what) {
+/** Parse KML or GPX with the shared namespace repairs and XML validation. */
+export function parseXml(text, what) {
   // Match the namespace repairs Cesium applies to ordinary exported KML.
   if (what !== 'GPX') text = repairKmlRootNamespaces(text, what);
   const doc = new DOMParser().parseFromString(
@@ -1150,7 +1151,8 @@ function parseXml(text, what) {
   return doc;
 }
 
-function decodeXml(bytes) {
+/** Decode XML bytes, honouring a UTF-16 byte-order mark. */
+export function decodeXml(bytes) {
   const encoding =
     bytes[0] === 0xff && bytes[1] === 0xfe
       ? 'utf-16le'
diff --git a/src/data/issPass.js b/src/data/issPass.js
deleted file mode 100644
index c3807d59f..000000000
--- a/src/data/issPass.js
+++ /dev/null
@@ -1,46 +0,0 @@
-// src/data/issPass.js
-/**
- * Next-ISS-pass prediction. Kept as a thin wrapper over satellitePass.js so the
- * original findNextIssPass signature and defaults still work.
- */
-import { findNextSatellitePass, lookAnglesAt } from './satellitePass.js';
-
-export { lookAnglesAt };
-
-/**
- * Predict the next ISS pass over an observer location.
- * @param {Object} options
- * @param {Object} options.satrec SGP4 satellite record
- * @param {number} options.latDeg Observer latitude in degrees [-90, 90]
- * @param {number} options.lonDeg Observer longitude in degrees [-180, 180]
- * @param {number} options.fromMs UTC start time in milliseconds
- * @param {number} [options.minElevDeg=10] Elevation that defines rise and set, in degrees
- * @param {number} [options.horizonHours=24] Maximum search window in hours
- * @param {number} [options.coarseStepSec=30] Coarse search step in seconds
- * @param {number} [options.fineStepSec=5] Fine transit step in seconds for peak tracking and visibility
- * @param {boolean} [options.requireVisible=false] Require a naked-eye-visible pass
- * @returns {{ riseMs: number, setMs: number, maxElevDeg: number, maxElevMs: number, riseAzDeg: number, visible: boolean, sunlit: boolean, observerDark: boolean } | null}
- */
-export function findNextIssPass({
-  satrec,
-  latDeg,
-  lonDeg,
-  fromMs,
-  minElevDeg = 10,
-  horizonHours = 24,
-  coarseStepSec = 30,
-  fineStepSec = 5,
-  requireVisible = false,
-}) {
-  return findNextSatellitePass({
-    satrec,
-    latDeg,
-    lonDeg,
-    fromMs,
-    minElevDeg,
-    horizonHours,
-    coarseStepSec,
-    fineStepSec,
-    requireVisible,
-  });
-}
diff --git a/src/data/issPass.test.mjs b/src/data/issPass.test.mjs
deleted file mode 100644
index aaaa87a55..000000000
--- a/src/data/issPass.test.mjs
+++ /dev/null
@@ -1,42 +0,0 @@
-// src/data/issPass.test.mjs
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { twoline2satrec } from 'satellite.js';
-import { findNextIssPass, lookAnglesAt } from './issPass.js';
-import { findNextSatellitePass } from './satellitePass.js';
-
-// Canonical archived ISS TLE (valid checksums; epoch 2008-09-20 ~12:25 UTC).
-const L1 = '1 25544U 98067A   08264.51782528 -.00002182  00000-0 -11606-4 0  2927';
-const L2 = '2 25544  51.6416 247.4627 0006703 130.5360 325.0288 15.72125391563537';
-const AUSTIN = { latDeg: 30.2672, lonDeg: -97.7431 };
-const FROM_MS = Date.UTC(2008, 8, 20, 12, 30, 0); // just after the TLE epoch
-
-test('finds a structurally-consistent ISS pass within 24h of the TLE epoch', () => {
-  const satrec = twoline2satrec(L1, L2);
-  const pass = findNextIssPass({ satrec, ...AUSTIN, fromMs: FROM_MS, minElevDeg: 10 });
-  assert.ok(pass, 'expected a pass within 24h at 30°N for a 51.6° inclination orbit');
-  assert.ok(pass.riseMs > FROM_MS);
-  assert.ok(pass.riseMs < pass.maxElevMs && pass.maxElevMs < pass.setMs);
-  assert.ok(pass.maxElevDeg >= 10);
-  assert.ok(pass.riseAzDeg >= 0 && pass.riseAzDeg < 360);
-
-  // Independent re-check: elevation at the reported peak really is the max-ish
-  // and ≥ threshold; one minute before rise it is below threshold.
-  const peak = lookAnglesAt(satrec, pass.maxElevMs, AUSTIN.latDeg, AUSTIN.lonDeg);
-  assert.ok(peak && Math.abs(peak.elevDeg - pass.maxElevDeg) < 1.5);
-  const before = lookAnglesAt(satrec, pass.riseMs - 60_000, AUSTIN.latDeg, AUSTIN.lonDeg);
-  assert.ok(before && before.elevDeg < 10);
-});
-
-test('forwards its original 30 s coarse step and fineStepSec to the pass engine', () => {
-  const satrec = twoline2satrec(L1, L2);
-  const opts = { satrec, ...AUSTIN, fromMs: FROM_MS, minElevDeg: 10, fineStepSec: 30 };
-  assert.deepEqual(findNextIssPass(opts), findNextSatellitePass({ ...opts, coarseStepSec: 30 }));
-  assert.notDeepEqual(findNextIssPass(opts), findNextIssPass({ ...opts, fineStepSec: 5 }));
-});
-
-test('returns null when no pass clears an absurd threshold', () => {
-  const satrec = twoline2satrec(L1, L2);
-  const pass = findNextIssPass({ satrec, ...AUSTIN, fromMs: FROM_MS, minElevDeg: 89.9, horizonHours: 2 });
-  assert.equal(pass, null);
-});
diff --git a/src/data/layerState.js b/src/data/layerState.js
index d88235188..089c8c08b 100644
--- a/src/data/layerState.js
+++ b/src/data/layerState.js
@@ -23,7 +23,7 @@ const NEW_SINGLE_CHARACTER_TOKEN_PATTERN = /^[0-9]$/;
  * out-of-grammar ID is rejected outright, because half an address is a
  * DIFFERENT aircraft, not a shorter name for the same one.
  */
-const TRACKING_ID_GRAMMAR = /^[0-9a-z~_-]{1,16}$/;
+export const TRACKING_ID_GRAMMAR = /^[0-9a-z~_-]{1,16}$/;
 /**
  * Ceilings for the untrusted v2 layer fields. The layer ceiling covers the
  * complete reserved one-character space plus every two-character base-36
@@ -655,6 +655,11 @@ export const LAYER_STATE_REGISTRY = Object.freeze([
     token: 'x',
     disposition: 'enabled-only',
   }),
+  Object.freeze({
+    id: 's2-ghostmaps',
+    token: '5',
+    disposition: 'enabled-only',
+  }),
   Object.freeze({
     id: 'satellites',
     token: 's',
diff --git a/src/data/layerState.test.mjs b/src/data/layerState.test.mjs
index 77b8f902f..d05fb9a95 100644
--- a/src/data/layerState.test.mjs
+++ b/src/data/layerState.test.mjs
@@ -202,8 +202,8 @@ function encode(state) {
 
 test('production registry is exact, canonical, and rejects incomplete contracts', async () => {
   assert.equal(validateLayerStateRegistry(), true);
-  assert.equal(REGISTERED_LAYER_IDS.length, 31);
-  assert.equal(new Set(REGISTERED_LAYER_IDS).size, 31);
+  assert.equal(REGISTERED_LAYER_IDS.length, 32);
+  assert.equal(new Set(REGISTERED_LAYER_IDS).size, 32);
   assert.ok(REGISTERED_LAYER_IDS.includes('transit'));
   assert.deepEqual(REGISTERED_LAYER_IDS, [...REGISTERED_LAYER_IDS].sort());
   assert.deepEqual(LEGACY_LAYER_STATE_TOKENS, {
@@ -242,19 +242,19 @@ test('production registry is exact, canonical, and rejects incomplete contracts'
   for (const [id, token] of Object.entries(LEGACY_LAYER_STATE_TOKENS)) {
     assert.equal(LAYER_STATE_TOKEN_RESERVATIONS[id], token);
   }
-  assert.equal(nextLayerStateToken(), '5');
+  assert.equal(nextLayerStateToken(), '6');
   assert.equal(
     nextLayerStateToken({
       ...LAYER_STATE_TOKEN_RESERVATIONS,
-      alpha: '5',
-      bravo: '6',
+      alpha: '6',
+      bravo: '7',
     }),
-    '7',
+    '8',
   );
   const digitsExhausted = {
     ...LAYER_STATE_TOKEN_RESERVATIONS,
     ...Object.fromEntries(
-      [...'56789'].map((digit) => [`prior-${digit}`, digit]),
+      [...'6789'].map((digit) => [`prior-${digit}`, digit]),
     ),
   };
   assert.equal(nextLayerStateToken(digitsExhausted), '00');
@@ -307,8 +307,8 @@ test('production registry is exact, canonical, and rejects incomplete contracts'
   assert.equal(
     validateLayerStateAllocations(LAYER_STATE_TOKEN_RESERVATIONS, {
       ...LAYER_STATE_TOKEN_RESERVATIONS,
-      future: '5',
-      next: '6',
+      future: '6',
+      next: '7',
     }),
     true,
   );
@@ -318,7 +318,7 @@ test('production registry is exact, canonical, and rejects incomplete contracts'
         ...LAYER_STATE_TOKEN_RESERVATIONS,
         future: '00',
       }),
-    /next free token 5/,
+    /next free token 6/,
   );
   const beforeLastDigit = { ...digitsExhausted };
   delete beforeLastDigit['prior-9'];
@@ -341,10 +341,10 @@ test('production registry is exact, canonical, and rejects incomplete contracts'
   assert.throws(
     () =>
       validateLayerStateAllocations(
-        { ...LAYER_STATE_TOKEN_RESERVATIONS, merged: '5' },
-        { ...LAYER_STATE_TOKEN_RESERVATIONS, merged: '5', competing: '5' },
+        { ...LAYER_STATE_TOKEN_RESERVATIONS, merged: '6' },
+        { ...LAYER_STATE_TOKEN_RESERVATIONS, merged: '6', competing: '6' },
       ),
-    /next free token 6/,
+    /next free token 7/,
   );
   assert.throws(
     () => validateLayerStateAllocations({ future: '00' }, { future: '01' }),
@@ -2858,3 +2858,135 @@ test('explicit provider switches reach durable state without adopting unrelated
     coordinator.destroy();
   }
 });
+
+function enabledLayerParam(sink) {
+  return new URLSearchParams(encode(sink.provider())).get('l');
+}
+
+test('Clear All drops a saved layer a context mode had already switched off', async () => {
+  const manager = productionManager();
+  const storage = memoryStorage();
+  const sink = shareSink();
+  const coordinator = new LayerStateCoordinator(manager, sink, { storage });
+  await coordinator.start();
+  await manager.setEnabled('earthquakes', true, { origin: 'user' });
+  await manager.setEnabled('flights', true, { origin: 'user' });
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, [
+    'earthquakes',
+    'flights',
+  ]);
+  // Context isolation is a temporary, passive takeover: the saved choice stays.
+  await manager.setEnabled('earthquakes', false, { origin: 'programmatic' });
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, [
+    'earthquakes',
+    'flights',
+  ]);
+
+  const updatesBefore = sink.updates;
+  const result = await manager.clearSelectedLayers({ origin: 'user' });
+  assert.deepEqual(result.targetIds, ['flights']);
+  assert.ok(sink.updates > updatesBefore, 'the URL is told to refresh');
+  assert.deepEqual([...manager.getEnabledLayerIds()], []);
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, []);
+  assert.equal(enabledLayerParam(sink), '', 'the URL carries no layers');
+  assert.deepEqual(
+    parseStoredLayerState(storage.getItem(LAYER_STATE_STORAGE_KEY))
+      .enabledLayerIds,
+    [],
+    'a reload restores nothing',
+  );
+  coordinator.destroy();
+});
+
+test('Clear All drops a saved layer a dependency release superseded mid-batch', async () => {
+  let manager;
+  manager = productionManager({
+    // Contacts-style owner: its own teardown releases a borrowed dependency
+    // without awaiting it, which supersedes Clear All's turn for that layer.
+    'military-awareness': {
+      disable() {
+        void manager.setEnabled('flights', false, { origin: 'programmatic' });
+        return true;
+      },
+    },
+  });
+  const storage = memoryStorage();
+  const sink = shareSink();
+  const coordinator = new LayerStateCoordinator(manager, sink, { storage });
+  await coordinator.start();
+  await manager.setEnabled('earthquakes', true, { origin: 'user' });
+  await manager.setEnabled('flights', true, { origin: 'user' });
+  await manager.setEnabled('military-awareness', true, { origin: 'user' });
+
+  const result = await manager.clearSelectedLayers({ origin: 'user' });
+  assert.equal(
+    result.items.find((item) => item.id === 'flights')?.superseded,
+    true,
+    'the fixture reproduces the superseded flights turn',
+  );
+  assert.deepEqual([...manager.getEnabledLayerIds()], []);
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, []);
+  assert.equal(enabledLayerParam(sink), '');
+  coordinator.destroy();
+});
+
+test('Clear All keeps a layer a newer explicit request turned back on', async () => {
+  const manager = productionManager();
+  const sink = shareSink();
+  const coordinator = new LayerStateCoordinator(manager, sink, {
+    storage: memoryStorage(),
+  });
+  await coordinator.start();
+  await manager.setEnabled('earthquakes', true, { origin: 'user' });
+  await manager.setEnabled('flights', true, { origin: 'user' });
+  const clearing = manager.clearSelectedLayers({ origin: 'user' });
+  // A direct request issued during the batch owns its layer.
+  const reenable = manager.setEnabled('earthquakes', true, { origin: 'user' });
+  await Promise.all([clearing, reenable]);
+  assert.deepEqual([...manager.getEnabledLayerIds()], ['earthquakes']);
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, [
+    'earthquakes',
+  ]);
+  assert.equal(enabledLayerParam(sink), 'e');
+  coordinator.destroy();
+});
+
+test('a passive clear never rewrites saved layers', async () => {
+  const manager = productionManager();
+  const storage = memoryStorage();
+  const coordinator = new LayerStateCoordinator(manager, shareSink(), {
+    storage,
+  });
+  await coordinator.start();
+  await manager.setEnabled('flights', true, { origin: 'user' });
+  await manager.setEnabled('flights', false, { origin: 'programmatic' });
+  const writes = storage.writes.length;
+  await manager.clearSelectedLayers({ origin: 'programmatic' });
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, ['flights']);
+  assert.equal(storage.writes.length, writes);
+  coordinator.destroy();
+});
+
+test('Clear All cancels a saved restore still waiting to start', async () => {
+  const gate = deferred();
+  const manager = productionManager();
+  const sink = shareSink();
+  const coordinator = new LayerStateCoordinator(manager, sink, {
+    storage: memoryStorage(),
+    restoreGate: gate.promise,
+  });
+  const params = new URLSearchParams('v=2&l=e.f');
+  const restore = coordinator.start({
+    shareLayerState: decodeLayerStateParams(params),
+  });
+  await manager.clearSelectedLayers({ origin: 'user' });
+  assert.deepEqual(coordinator.getDurableState().enabledLayerIds, []);
+  gate.resolve();
+  const results = await restore;
+  for (const id of ['earthquakes', 'flights']) {
+    assert.equal(results.find((result) => result.layerId === id).succeeded, false);
+  }
+  assert.deepEqual([...manager.getEnabledLayerIds()], []);
+  assert.equal(enabledLayerParam(sink), '');
+  coordinator.destroy();
+});
diff --git a/src/data/layerStateCoordinator.js b/src/data/layerStateCoordinator.js
index 687b87dfb..40208831a 100644
--- a/src/data/layerStateCoordinator.js
+++ b/src/data/layerStateCoordinator.js
@@ -148,6 +148,36 @@ export class LayerStateCoordinator {
     return this.restorePromise;
   }
 
+  /**
+   * Replace the running layer state with a share opened later in this tab
+   * (hash navigation). Every in-flight restore and pending shared Follow is
+   * superseded; the new state restores through the same passive share origin
+   * as start-up, so recipient-local preferences are never written. A share
+   * without a layer payload restores the defaults, as a reload of it would.
+   */
+  applyShareLayerState({
+    shareLayerState = null,
+    shareCreatedAtMs = null,
+  } = {}) {
+    if (this._destroyed) return Promise.resolve([]);
+    for (const controller of this._restoreControllers.values())
+      controller.abort('superseded-by-share-navigation');
+    this._revokePendingTrackingWatch('superseded-by-share-navigation');
+    const selected = shareLayerState
+      ? normalizeLayerState(shareLayerState)
+      : null;
+    this._source = selected ? 'share' : 'legacy-share';
+    this._shareCreatedAtMs =
+      selected && Number.isFinite(shareCreatedAtMs) ? shareCreatedAtMs : null;
+    this._durableState = selected || createDefaultLayerState();
+    this.shareLinkManager?.onLayerStateChange?.();
+    this._notifyDurableState();
+    this.restorePromise = this._restoreSelectedState(
+      LAYER_RESTORE_ORIGINS.share,
+    );
+    return this.restorePromise;
+  }
+
   get source() {
     return this._source;
   }
@@ -220,6 +250,30 @@ export class LayerStateCoordinator {
       this._revokePendingTrackingWatch('owner-layer-disabled');
     }
     if (!isExplicitLayerStateOrigin(change.origin)) return;
+    if (change.type === 'selection-cleared') {
+      // Only layers a newer request turned back on survive Clear All. Any
+      // other saved layer would reappear from the share link or a reload.
+      const stillEnabled = new Set(change.enabledLayerIds || []);
+      const dropped = this._durableState.enabledLayerIds.filter(
+        (id) => !stillEnabled.has(id),
+      );
+      if (dropped.length === 0) return;
+      for (const layerId of dropped) {
+        this._restoreControllers
+          .get(layerId)
+          ?.abort('superseded-by-explicit-visibility');
+      }
+      if (dropped.some((id) => SHARE_TRACKING_RESTORE_POLICIES[id])) {
+        this._revokePendingTrackingWatch('superseded-by-explicit-visibility');
+      }
+      this._commitExplicit({
+        ...this._durableState,
+        enabledLayerIds: this._durableState.enabledLayerIds.filter((id) =>
+          stillEnabled.has(id),
+        ),
+      });
+      return;
+    }
     if (change.type === 'visibility') {
       this._restoreControllers
         .get(change.layerId)
@@ -312,15 +366,19 @@ export class LayerStateCoordinator {
   }
 
   async _restoreSelectedState(origin) {
+    // One controller set per run: a superseded run must not clear the newer
+    // run's controllers when it settles.
+    const controllers = new Map();
     for (const entry of LAYER_STATE_REGISTRY) {
-      this._restoreControllers.set(entry.id, new AbortController());
+      controllers.set(entry.id, new AbortController());
     }
+    this._restoreControllers = controllers;
     try {
       await this._waitForRestoreGate();
       const enabled = new Set(this._durableState.enabledLayerIds);
       const settled = await Promise.allSettled(
         LAYER_STATE_REGISTRY.map(async (entry) => {
-          const controller = this._restoreControllers.get(entry.id);
+          const controller = controllers.get(entry.id);
           const targetEnabled = enabled.has(entry.id);
           const options = layerOptionsForRestore(this._durableState, entry.id);
           if (origin === LAYER_RESTORE_ORIGINS.share && options) {
@@ -370,7 +428,7 @@ export class LayerStateCoordinator {
             }));
         }),
       );
-      this.lastRestoreResults = settled.map((result, index) => {
+      const results = settled.map((result, index) => {
         if (result.status === 'fulfilled') return result.value;
         const entry = LAYER_STATE_REGISTRY[index];
         return {
@@ -387,9 +445,13 @@ export class LayerStateCoordinator {
           succeeded: false,
         };
       });
-      return this.lastRestoreResults.map((result) => ({ ...result }));
+      // A run superseded by a newer share keeps the newer run's results.
+      if (this._restoreControllers === controllers)
+        this.lastRestoreResults = results;
+      return results.map((result) => ({ ...result }));
     } finally {
-      this._restoreControllers.clear();
+      if (this._restoreControllers === controllers)
+        this._restoreControllers.clear();
       this._notifyDurableState();
     }
   }
diff --git a/src/data/layerStateTokenLedger.test.mjs b/src/data/layerStateTokenLedger.test.mjs
index 7bcfd96cb..47b55b067 100644
--- a/src/data/layerStateTokenLedger.test.mjs
+++ b/src/data/layerStateTokenLedger.test.mjs
@@ -128,7 +128,7 @@ test('reservation ledger is complete, pinned, and rejects duplicate or malformed
     { ...parseLayerStateTokenReservations(reservationRows) },
     { ...LAYER_STATE_TOKEN_RESERVATIONS },
   );
-  assert.equal(Object.keys(LAYER_STATE_TOKEN_RESERVATIONS).length, 31);
+  assert.equal(Object.keys(LAYER_STATE_TOKEN_RESERVATIONS).length, 32);
   assert.deepEqual(
     { ...LAYER_STATE_TOKEN_RESERVATIONS },
     {
@@ -136,6 +136,7 @@ test('reservation ledger is complete, pinned, and rejects duplicate or malformed
       'street-level': '0',
       'gnss-integrity': '3',
       'air-quality': '4',
+      's2-ghostmaps': '5',
     },
   );
   assert.throws(
@@ -161,9 +162,9 @@ test('reservation ledger is complete, pinned, and rejects duplicate or malformed
     /Duplicate layer-state token reservation/,
   );
   assert.equal(
-    parseLayerStateTokenReservations([...reservationRows, ['future', '5']])
+    parseLayerStateTokenReservations([...reservationRows, ['future', '6']])
       .future,
-    '5',
+    '6',
   );
   assert.throws(
     () =>
@@ -181,14 +182,14 @@ test('reservation ledger is complete, pinned, and rejects duplicate or malformed
 
 test('published retired digits and competing PRs advance the merge-time allocation', () => {
   withPublishedBase(
-    { rows: [...reservationRows, ['retired-layer', '5']] },
+    { rows: [...reservationRows, ['retired-layer', '6']] },
     (cwd) => {
       const published = readPublishedLayerStateReservations('HEAD', cwd);
-      assert.equal(nextLayerStateToken(published), '6');
+      assert.equal(nextLayerStateToken(published), '7');
       assert.equal(
         validateLayerStateAllocations(published, {
           ...published,
-          newcomer: '6',
+          newcomer: '7',
         }),
         true,
       );
@@ -196,15 +197,15 @@ test('published retired digits and competing PRs advance the merge-time allocati
         () =>
           validateLayerStateAllocations(published, {
             ...published,
-            competing: '5',
+            competing: '6',
           }),
-        /next free token 6/,
+        /next free token 7/,
       );
       assert.throws(
         () =>
           validateLayerStateAllocations(published, {
             ...LAYER_STATE_TOKEN_RESERVATIONS,
-            newcomer: '5',
+            newcomer: '6',
           }),
         /changed or removed: retired-layer/,
       );
@@ -212,8 +213,8 @@ test('published retired digits and competing PRs advance the merge-time allocati
   );
 });
 
-test('PR B manually replaces provisional 5 with 6 after PR A publishes 5', () => {
-  withPublishedBase({ rows: [...reservationRows, ['pr-a', '5']] }, (cwd) => {
+test('PR B manually replaces provisional 6 with 7 after PR A publishes 6', () => {
+  withPublishedBase({ rows: [...reservationRows, ['pr-a', '6']] }, (cwd) => {
     mkdirSync(path.join(cwd, 'scripts'));
     const fixtureChecker = path.join(
       cwd,
@@ -234,8 +235,8 @@ test('PR B manually replaces provisional 5 with 6 after PR A publishes 5', () =>
 
     writeCodecFixture(
       cwd,
-      [...reservationRows, ['pr-b', '5']],
-      [{ id: 'pr-b', token: '5' }],
+      [...reservationRows, ['pr-b', '6']],
+      [{ id: 'pr-b', token: '6' }],
     );
     const beforeRebase = runCheck();
     assert.equal(beforeRebase.status, 1);
@@ -243,10 +244,10 @@ test('PR B manually replaces provisional 5 with 6 after PR A publishes 5', () =>
 
     writeCodecFixture(
       cwd,
-      [...reservationRows, ['pr-a', '5'], ['pr-b', '5']],
+      [...reservationRows, ['pr-a', '6'], ['pr-b', '6']],
       [
-        { id: 'pr-a', token: '5' },
-        { id: 'pr-b', token: '5' },
+        { id: 'pr-a', token: '6' },
+        { id: 'pr-b', token: '6' },
       ],
     );
     const staleRebase = runCheck();
@@ -254,16 +255,16 @@ test('PR B manually replaces provisional 5 with 6 after PR A publishes 5', () =>
     assert.match(staleRebase.stderr, /Duplicate layer-state token reservation/);
 
     const published = readPublishedLayerStateReservations('HEAD', cwd);
-    assert.equal(nextLayerStateToken(published), '6');
-    const validBaselineRows = [...reservationRows, ['pr-a', '5']];
-    writeCodecFixture(cwd, validBaselineRows, [{ id: 'pr-a', token: '5' }]);
+    assert.equal(nextLayerStateToken(published), '7');
+    const validBaselineRows = [...reservationRows, ['pr-a', '6']];
+    writeCodecFixture(cwd, validBaselineRows, [{ id: 'pr-a', token: '6' }]);
     const helper = spawnSync(
       process.execPath,
       [realpathSync(fixtureNext), 'pr-b'],
       { cwd, encoding: 'utf8' },
     );
     assert.equal(helper.status, 0, helper.stderr);
-    assert.match(helper.stdout, /pr-b: 6/);
+    assert.match(helper.stdout, /pr-b: 7/);
     assert.deepEqual(
       JSON.parse(readFileSync(path.join(cwd, LEDGER_PATH), 'utf8')),
       validBaselineRows,
@@ -271,20 +272,20 @@ test('PR B manually replaces provisional 5 with 6 after PR A publishes 5', () =>
     );
     writeCodecFixture(
       cwd,
-      [...reservationRows, ['pr-a', '5'], ['pr-b', '6']],
+      [...reservationRows, ['pr-a', '6'], ['pr-b', '7']],
       [
-        { id: 'pr-a', token: '5' },
-        { id: 'pr-b', token: '6' },
+        { id: 'pr-a', token: '6' },
+        { id: 'pr-b', token: '7' },
       ],
     );
     const corrected = runCheck();
     assert.equal(corrected.status, 0, corrected.stderr);
-    assert.match(corrected.stdout, /32 published, 1 new/);
+    assert.match(corrected.stdout, /33 published, 1 new/);
   });
 });
 
 test('allocation batches cross the last digit and base-36 pair boundaries in order', () => {
-  const digitRows = [...'56789'].map((digit) => [`retired-${digit}`, digit]);
+  const digitRows = [...'6789'].map((digit) => [`retired-${digit}`, digit]);
   const allDigits = parseLayerStateTokenReservations([
     ...reservationRows,
     ...digitRows,
@@ -336,7 +337,7 @@ test('allocation batches cross the last digit and base-36 pair boundaries in ord
 test('an isolated valid two-character fixture round-trips an l field beyond the old 64-character cap', async () => {
   const cwd = mkdtempSync(path.join(tmpdir(), 'gev-layer-token-width-'));
   try {
-    const priorDigits = [...'56789'].map((digit) => [
+    const priorDigits = [...'6789'].map((digit) => [
       `qa-prior-digit-${digit}`,
       digit,
     ]);
@@ -373,7 +374,7 @@ test('an isolated valid two-character fixture round-trips an l field beyond the
     const params = new URLSearchParams([['v', '2']]);
     codec.encodeLayerStateParams(params, state);
     assert.ok(params.get('l').length > 64, 'fixture must cross the old cap');
-    assert.equal(params.get('l').length, 73);
+    assert.equal(params.get('l').length, 75);
     const restored = codec.decodeLayerStateParams(params);
     assert.deepEqual(restored?.enabledLayerIds, expectedLayerIds);
     assert.deepEqual(restored?.options, state.options);
@@ -391,7 +392,7 @@ test('checker reads a complete future base ledger and rejects retired-token reus
     },
     (cwd) => {
       const published = readPublishedLayerStateReservations('HEAD', cwd);
-      assert.equal(Object.keys(published).length, 32);
+      assert.equal(Object.keys(published).length, 33);
       assert.equal(published['retired-layer'], '00');
       assert.throws(
         () =>
diff --git a/src/data/layerStateTokenReservations.json b/src/data/layerStateTokenReservations.json
index dd8dcd7c4..7593425ae 100644
--- a/src/data/layerStateTokenReservations.json
+++ b/src/data/layerStateTokenReservations.json
@@ -20,6 +20,7 @@
   ["radio", "r"],
   ["recent-imagery", "1"],
   ["rocket-launches", "x"],
+  ["s2-ghostmaps", "5"],
   ["satellites", "s"],
   ["street-level", "0"],
   ["telegeography-submarine-cables", "u"],
diff --git a/src/data/lifecycle.js b/src/data/lifecycle.js
index 0df5e87a4..6c2290c72 100644
--- a/src/data/lifecycle.js
+++ b/src/data/lifecycle.js
@@ -72,13 +72,20 @@ function refreshFailureFromStats(stats, label) {
 /**
  * LayerLifecycle — Manages registration, toggling, and update loops
  * for real-time data overlays on the CesiumJS globe.
+ * Hosts may inject a visibilityTarget with hidden/visibilityState and event
+ * listener methods. Without one, periodic work retains its headless behavior.
  */
 export class LayerLifecycle {
   constructor(
     viewer,
-    { allowQaRegistration = false, getSourceAvailability } = {},
+    {
+      allowQaRegistration = false,
+      getSourceAvailability,
+      visibilityTarget = null,
+    } = {},
   ) {
     this._catalogSourceAvailability = getSourceAvailability;
+    this._visibilityTarget = visibilityTarget;
     this.viewer = viewer;
     this._activityListeners = new Set();
     this.layers = new Map(); // id → { module, enabled, initialized, intervalId, lifecycleState, lifecycleUncertain }
@@ -528,6 +535,13 @@ export class LayerLifecycle {
     }
   }
 
+  _stopUpdateLoop(entry) {
+    clearInterval(entry.intervalId);
+    entry.intervalId = null;
+    entry.removeVisibilityListener?.();
+    entry.removeVisibilityListener = null;
+  }
+
   _armUpdateLoop(layerId, entry) {
     const configuredRefreshInterval = Number(entry.module.refreshInterval);
     const updateInterval = Number(entry.module.updateInterval);
@@ -538,9 +552,45 @@ export class LayerLifecycle {
           ? updateInterval
           : 0;
     if (refreshInterval > 0) {
-      entry.intervalId = setInterval(() => {
+      const visibilityDocument = this._visibilityTarget;
+      let intervalId = null;
+      let dueAt = 0;
+      const canPoll = () =>
+        !visibilityDocument?.hidden &&
+        visibilityDocument?.visibilityState !== 'hidden' &&
+        entry.enabled &&
+        !entry.destroying &&
+        !entry.refreshing &&
+        entry.intervalId === intervalId;
+      // dueAt and the interval phase share one origin, so every interval tick
+      // is a due poll. A visibility catch-up re-arms the interval at the new
+      // deadline; otherwise the old phase would skip its next tick.
+      const schedule = () => {
+        clearInterval(intervalId);
+        dueAt = Date.now() + refreshInterval;
+        intervalId = setInterval(onInterval, refreshInterval);
+        entry.intervalId = intervalId;
+      };
+      const onInterval = () => {
+        if (!canPoll()) return;
+        dueAt = Date.now() + refreshInterval;
         void this._runPeriodicUpdate(layerId, entry);
-      }, refreshInterval);
+      };
+      const onVisibilityChange = () => {
+        if (!canPoll() || Date.now() < dueAt) return;
+        schedule();
+        void this._runPeriodicUpdate(layerId, entry);
+      };
+      schedule();
+      visibilityDocument?.addEventListener?.(
+        'visibilitychange',
+        onVisibilityChange,
+      );
+      entry.removeVisibilityListener = () =>
+        visibilityDocument?.removeEventListener?.(
+          'visibilitychange',
+          onVisibilityChange,
+        );
     } else if (updateInterval === 0) {
       entry.intervalId = setInterval(() => {
         if (!entry.enabled) return;
@@ -772,8 +822,7 @@ export class LayerLifecycle {
         entry.lifecycleUncertain = !compensated && !cleanupConfirmed;
         settleLifecycle();
         if (!entry.enabled && entry.intervalId) {
-          clearInterval(entry.intervalId);
-          entry.intervalId = null;
+          this._stopUpdateLoop(entry);
         }
         this._publishActivity({ type: 'status' });
         if (!compensated) {
@@ -833,8 +882,7 @@ export class LayerLifecycle {
       }
       if (signal?.aborted) return finishCancelledDisable('disable');
       if (entry.intervalId) {
-        clearInterval(entry.intervalId);
-        entry.intervalId = null;
+        this._stopUpdateLoop(entry);
       }
       entry.enabled = false;
       entry.lifecycleUncertain = false;
@@ -845,8 +893,7 @@ export class LayerLifecycle {
       let abortCleanup = null;
       const cancelEnable = () => {
         if (entry.intervalId) {
-          clearInterval(entry.intervalId);
-          entry.intervalId = null;
+          this._stopUpdateLoop(entry);
         }
         // Disable immediately so modules with their own AbortController (Radio)
         // cancel pending update work at the same turn boundary. A second
@@ -876,8 +923,7 @@ export class LayerLifecycle {
         // a later abort cannot revoke a successful retry.
         signal?.removeEventListener('abort', cancelEnable);
         if (entry.intervalId) {
-          clearInterval(entry.intervalId);
-          entry.intervalId = null;
+          this._stopUpdateLoop(entry);
         }
         await abortCleanup;
         let cleanupConfirmed = false;
@@ -918,8 +964,7 @@ export class LayerLifecycle {
       };
       const finishFailedEnable = async (phase, error) => {
         if (entry.intervalId) {
-          clearInterval(entry.intervalId);
-          entry.intervalId = null;
+          this._stopUpdateLoop(entry);
         }
         let cleanupConfirmed = false;
         try {
@@ -1029,8 +1074,7 @@ export class LayerLifecycle {
       // Always clear any stale interval before assigning a new one, so we never
       // orphan a running timer and end up double-polling.
       if (entry.intervalId) {
-        clearInterval(entry.intervalId);
-        entry.intervalId = null;
+        this._stopUpdateLoop(entry);
       }
 
       // Manager-owned periodic refresh work has one normalized loading/error
@@ -1606,6 +1650,15 @@ export class LayerLifecycle {
         }
       }
     }
+    // Clear All owns the whole selection, not only the layers it switched off
+    // itself. A layer already off for a passive reason (isolated by a context
+    // mode, released by a dependency owner, or superseded mid-batch) gets no
+    // OFF of its own here, so publish the set that is still on afterwards.
+    this._notifyListeners({
+      type: 'selection-cleared',
+      origin,
+      enabledLayerIds: [...this.getEnabledLayerIds()],
+    });
     const items = targetIds.map((id) => {
       const state = this.getLayerLifecycleState(id) || {
         enabled: false,
@@ -2158,8 +2211,7 @@ export class LayerLifecycle {
         return false;
       }
       if (entry.intervalId) {
-        clearInterval(entry.intervalId);
-        entry.intervalId = null;
+        this._stopUpdateLoop(entry);
       }
       entry.enabled = false;
     }
diff --git a/src/data/localGeojson.analyst.test.mjs b/src/data/localGeojson.analyst.test.mjs
index 061a7f27c..33d35a039 100644
--- a/src/data/localGeojson.analyst.test.mjs
+++ b/src/data/localGeojson.analyst.test.mjs
@@ -2,7 +2,18 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import * as Cesium from 'cesium';
-import { createLocalGeoJsonLayer, mapAnalystRecord } from './localGeojson.js';
+import { localGeoJsonServices } from '../app/localGeojsonServices.js';
+import {
+  createLocalGeoJsonLayer as createLayer,
+  mapAnalystRecord,
+} from './localGeojsonCore.js';
+
+/** The catalog's services, with the overlay host each test supplies. */
+const createLocalGeoJsonLayer = (options) =>
+  createLayer(options, {
+    ...localGeoJsonServices,
+    overlayHost: options.overlayHost,
+  });
 
 const DC_RAW = {
   id: '1176042553',
diff --git a/src/data/localGeojson.js b/src/data/localGeojson.js
deleted file mode 100644
index 61f6c3abf..000000000
--- a/src/data/localGeojson.js
+++ /dev/null
@@ -1,29 +0,0 @@
-import { localGeoJsonServices } from '../app/localGeojsonServices.js';
-import {
-  createLocalGeoJsonLayer as createLayer,
-  createLocalInfrastructureOverlayPublisher as createPublisher,
-} from './localGeojsonCore.js';
-
-export * from './localGeojsonCore.js';
-
-/** Create a layer using the standalone app's operations; retain overlay overrides. */
-export function createLocalGeoJsonLayer(options) {
-  return createLayer(options, {
-    ...localGeoJsonServices,
-    overlayHost:
-      options.overlayHost === undefined
-        ? localGeoJsonServices.overlayHost
-        : options.overlayHost,
-  });
-}
-
-/** Create an overlay publisher using the standalone app's host by default. */
-export function createLocalInfrastructureOverlayPublisher(options) {
-  return createPublisher({
-    ...options,
-    host:
-      options.host === undefined
-        ? localGeoJsonServices.overlayHost
-        : options.host,
-  });
-}
diff --git a/src/data/localGeojson.test.mjs b/src/data/localGeojson.test.mjs
index 1c4499914..13cde65a5 100644
--- a/src/data/localGeojson.test.mjs
+++ b/src/data/localGeojson.test.mjs
@@ -6,13 +6,14 @@ import {
   GROUND_SAMPLE_MAX_ARMED_RETRIES,
   LOCAL_OVERLAY_COHORT_LIMIT,
   LOCAL_STEM_TIP_EPSILON_M,
-  createLocalGeoJsonLayer,
+  createLocalGeoJsonLayer as createLayer,
   createLocalInfrastructureOverlayEntry,
   createLocalInfrastructureOverlayPublisher,
   localDatasetError,
   localInfrastructureOverlayCopy,
   selectLocalInfrastructureOverlayCohort,
-} from './localGeojson.js';
+} from './localGeojsonCore.js';
+import { localGeoJsonServices } from '../app/localGeojsonServices.js';
 import { layerFeedState } from './manager.js';
 import { INFRA_LOD_ACTIVE_MIN, INFRA_LOD_ACTIVE_MAX } from './localGeojsonLod.js';
 import {
@@ -21,6 +22,13 @@ import {
   _resetRenderGovernorForTest,
 } from '../renderGovernor.js';
 
+/** The catalog's services, with the overlay host each test supplies. */
+const createLocalGeoJsonLayer = (options) =>
+  createLayer(options, {
+    ...localGeoJsonServices,
+    overlayHost: options.overlayHost ?? localGeoJsonServices.overlayHost,
+  });
+
 class MockLayerEvent {
   constructor() {
     this.listeners = new Set();
@@ -1337,14 +1345,3 @@ test('globe-LOD re-selects during continuous motion, without ever seeing a moveE
   assert.deepEqual(env.layer.getLodDiagnostics(), parked, 'a parked camera never re-selects');
 });
 
-
-test('standalone publisher retains its default host for an undefined override', () => {
-  const publisher = createLocalInfrastructureOverlayPublisher({
-    sourceId: 'local-default-host-test', host: undefined,
-  });
-  assert.doesNotThrow(() => {
-    publisher.show();
-    publisher.hide();
-    publisher.destroy();
-  });
-});
diff --git a/src/data/localGeojsonLifecycle.test.mjs b/src/data/localGeojsonLifecycle.test.mjs
index 245867155..8b5621ec4 100644
--- a/src/data/localGeojsonLifecycle.test.mjs
+++ b/src/data/localGeojsonLifecycle.test.mjs
@@ -1,9 +1,17 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import * as Cesium from 'cesium';
-import { createLocalGeoJsonLayer } from './localGeojson.js';
+import { localGeoJsonServices } from '../app/localGeojsonServices.js';
+import { createLocalGeoJsonLayer as createLayer } from './localGeojsonCore.js';
 import { getContextStore } from './contextStore.js';
 
+/** The catalog's services, with the overlay host each test supplies. */
+const createLocalGeoJsonLayer = (options) =>
+  createLayer(options, {
+    ...localGeoJsonServices,
+    overlayHost: options.overlayHost,
+  });
+
 const dataset = JSON.stringify({
   type: 'Feature', id: 'dam', properties: { name: 'Test dam' },
   geometry: { type: 'Polygon', coordinates: [[[0, 0], [0.01, 0], [0, 0.01], [0, 0]]] },
diff --git a/src/data/localGeojsonLod.js b/src/data/localGeojsonLod.js
index cfd082c04..4a2dd92da 100644
--- a/src/data/localGeojsonLod.js
+++ b/src/data/localGeojsonLod.js
@@ -5,7 +5,7 @@
  * Pure selection policy for the bundled local-infrastructure layers
  * (`local-datacenters`, `local-dams`, and any future `createLocalGeoJsonLayer`
  * dataset). Cesium-specific projection, occlusion, and stem geometry stay in
- * `localGeojson.js`; this module turns the resulting in-view records into a
+ * `localGeojsonCore.js`; this module turns the resulting in-view records into a
  * bounded "active" set — the only records that layer should spend per-frame
  * stem-geometry and ground-sample work on.
  *
@@ -80,7 +80,7 @@ export const INFRA_LOD_INCUMBENT_BONUS = 250;
 
 /**
  * Distance at or beyond which the proximity penalty is fully applied (m).
- * Matches LOCAL_OVERLAY_MAX_DISTANCE_M's order of magnitude in localGeojson.js.
+ * Matches LOCAL_OVERLAY_MAX_DISTANCE_M's order of magnitude in infrastructureOverlayEntry.js.
  */
 export const INFRA_LOD_FAR_M = 12_000_000;
 
@@ -97,7 +97,7 @@ export const INFRA_LOD_MAX_DISTANCE_PENALTY = 200;
  * (callers only compare it), but every input is normalized so the output is
  * always a finite number.
  *
- * @param {number} priority Existing label-priority score (localGeojson.js).
+ * @param {number} priority Existing label-priority score (localGeojsonCore.js).
  * @param {number} distanceM Camera→feature distance in metres.
  * @param {boolean} isIncumbent Record currently holds an active stem.
  * @param {object} [options]
@@ -297,7 +297,7 @@ export function applyInfraEvictionGrace({
  * ------------------------------------------------------------------ */
 
 /**
- * Probe window for the motion fallback. `localGeojson.js` marks its selection
+ * Probe window for the motion fallback. `localGeojsonCore.js` marks its selection
  * dirty on `moveEnd`, which covers drags, one-shot `setView`, and voice
  * `flyTo` — but a tracked-entity follow camera, a Cockpit view, a route
  * flight, or a continuous orbit never emits one. Without a fallback the
diff --git a/src/data/manager.js b/src/data/manager.js
index b719b5934..79bb7d9ae 100644
--- a/src/data/manager.js
+++ b/src/data/manager.js
@@ -5,7 +5,7 @@ export { layerFeedState } from '../ui/layers.js';
 /** Compatibility facade for callers that construct a manager with its panel. */
 export class DataLayerManager extends LayerLifecycle {
   constructor(viewer, options) {
-    super(viewer, options);
+    super(viewer, { visibilityTarget: globalThis.document, ...options });
     this._presentation = new LayerPresentation(this);
   }
   buildTogglePanel(container) {
diff --git a/src/data/manager.test.mjs b/src/data/manager.test.mjs
index 23641c962..b1384a2de 100644
--- a/src/data/manager.test.mjs
+++ b/src/data/manager.test.mjs
@@ -3492,3 +3492,92 @@ test('refreshLayerStats reaches presentation through the bare lifecycle', async
   lifecycle.refreshLayerStats();
   assert.deepEqual(changes, ['status']);
 });
+
+test('periodic polls pause hidden, catch up once when due, and dispose visibility listeners', async (t) => {
+  const listeners = new Set();
+  const doc = {
+    hidden: false,
+    addEventListener: (_name, fn) => listeners.add(fn),
+    removeEventListener: (_name, fn) => listeners.delete(fn),
+  };
+  t.mock.timers.enable({ apis: ['setInterval', 'Date'], now: 1000 });
+  const { LayerLifecycle } = await import('./lifecycle.js');
+  const manager = new LayerLifecycle({}, { visibilityTarget: doc });
+  const { module, calls } = makeSlowLayer('hidden-poll');
+  manager.register(module);
+  await manager.setEnabled('hidden-poll', true);
+  assert.equal(calls.update, 1);
+  doc.hidden = true;
+  t.mock.timers.tick(10000);
+  assert.equal(calls.update, 1);
+  assert.equal(await manager.refreshLayer('hidden-poll'), true);
+  assert.equal(calls.update, 2, 'explicit refresh remains allowed');
+  doc.hidden = false;
+  for (const fn of listeners) fn();
+  for (const fn of listeners) fn();
+  assert.equal(calls.update, 3);
+  await Promise.resolve();
+  await Promise.resolve();
+  await manager.destroyAll();
+  assert.equal(listeners.size, 0);
+  t.mock.timers.tick(10000);
+  assert.equal(calls.update, 3);
+});
+
+async function resumeBetweenTicks(t, { failResume = false } = {}) {
+  const listeners = new Set();
+  const doc = {
+    hidden: false,
+    addEventListener: (_name, fn) => listeners.add(fn),
+    removeEventListener: (_name, fn) => listeners.delete(fn),
+  };
+  t.mock.timers.enable({ apis: ['setInterval', 'Date'], now: 1000 });
+  const { LayerLifecycle } = await import('./lifecycle.js');
+  const manager = new LayerLifecycle({}, { visibilityTarget: doc });
+  const { module, calls } = makeSlowLayer('resume-poll');
+  const updates = [];
+  module.update = async () => {
+    calls.update++;
+    updates.push(Date.now());
+    await Promise.resolve();
+    if (failResume && updates.length === 2) throw new Error('resume failed');
+  };
+  manager.register(module);
+  await manager.setEnabled('resume-poll', true);
+  assert.deepEqual(updates, [1000]);
+  doc.hidden = true;
+  t.mock.timers.tick(1000); // 2000: due tick skipped while hidden
+  t.mock.timers.tick(500); // 2500: return between ticks
+  doc.hidden = false;
+  for (const fn of listeners) fn();
+  assert.deepEqual(updates, [1000, 2500], 'overdue poll runs once on return');
+  await Promise.resolve();
+  await Promise.resolve();
+  await Promise.resolve();
+  const managerRefreshError = manager.layers.get('resume-poll').managerRefreshError;
+  if (failResume) assert.equal(managerRefreshError, 'resume failed');
+  else assert.equal(managerRefreshError, null);
+  t.mock.timers.tick(999); // 3499: the old 3000 phase must not fire
+  assert.deepEqual(updates, [1000, 2500]);
+  t.mock.timers.tick(1); // 3500: one interval after the resume poll
+  assert.deepEqual(updates, [1000, 2500, 3500]);
+  await Promise.resolve();
+  await Promise.resolve();
+  await Promise.resolve();
+  t.mock.timers.tick(1000);
+  assert.deepEqual(updates, [1000, 2500, 3500, 4500], 'new phase keeps one interval');
+  await Promise.resolve();
+  await Promise.resolve();
+  await manager.destroyAll();
+  assert.equal(listeners.size, 0);
+  t.mock.timers.tick(5000);
+  assert.equal(updates.length, 4);
+}
+
+test('periodic polls realign to the deadline after a between-ticks resume', async (t) => {
+  await resumeBetweenTicks(t);
+});
+
+test('periodic polls realign to the deadline after a failed resume refresh', async (t) => {
+  await resumeBetweenTicks(t, { failResume: true });
+});
diff --git a/src/data/militaryAwareness.test.mjs b/src/data/militaryAwareness.test.mjs
index 64104953e..ccb5739f2 100644
--- a/src/data/militaryAwareness.test.mjs
+++ b/src/data/militaryAwareness.test.mjs
@@ -42,7 +42,10 @@ import {
   formatAwarenessLabel,
   getAwarenessNavigationTargets,
 } from './militaryAwarenessEngine.js';
-import { formatAwarenessCount } from '../layers/awareness/panel.js';
+import {
+  formatAwarenessCount,
+  presentAwarenessDistance,
+} from '../layers/awareness/panel.js';
 import { NAVIGATION_AUTHORITY_EVENT } from '../navigationPolicy.js';
 
 const militaryAwarenessSource = readLayerSource(
@@ -69,6 +72,12 @@ test('Contacts labels a capped cohort as a lower bound', () => {
   assert.equal(formatAwarenessCount({ count: null }), '?');
 });
 
+test('Contacts moves a distance that rounds to 1,000 m into kilometres', () => {
+  assert.equal(presentAwarenessDistance(999.4), '999\u00a0m');
+  assert.equal(presentAwarenessDistance(999.6), '1.0\u00a0km');
+  assert.equal(presentAwarenessDistance(4600), '4.6\u00a0km');
+});
+
 function installAwarenessRuntime({
   isEnabled = () => true,
   isEffectivelyEnabled = isEnabled,
diff --git a/src/data/placeProviderPayloads.js b/src/data/placeProviderPayloads.js
index 37fd99ef7..8adf935a9 100644
--- a/src/data/placeProviderPayloads.js
+++ b/src/data/placeProviderPayloads.js
@@ -13,8 +13,11 @@ function approximateDistanceM(latA, lonA, latB, lonB) {
     return Number.MAX_SAFE_INTEGER;
   const latitudeScale = 111320;
   const longitudeScale = latitudeScale * Math.cos((latA * Math.PI) / 180);
+  // The short way round, so places either side of 180° stay close.
+  let dLon = lonB - lonA;
+  dLon -= 360 * Math.round(dLon / 360);
   return Math.round(
-    Math.hypot((latB - latA) * latitudeScale, (lonB - lonA) * longitudeScale),
+    Math.hypot((latB - latA) * latitudeScale, dLon * longitudeScale),
   );
 }
 
diff --git a/src/data/routeSteps.js b/src/data/routeSteps.js
index e3144bdf7..736d812ee 100644
--- a/src/data/routeSteps.js
+++ b/src/data/routeSteps.js
@@ -54,6 +54,21 @@ function direction(modifier) {
   return DIRECTION_WORDS[key] || key;
 }
 
+/**
+ * "on the left" only fits a bare side. "slight left" is the adverb
+ * "slightly left", and "on the slightly left" is not an instruction.
+ * @param {string} prefix "Take the ramp" or "Take the exit".
+ * @param {string} modifier OSRM maneuver modifier.
+ * @param {string} onto " onto …", or "".
+ */
+function directedWay(prefix, modifier, onto) {
+  const dir = direction(modifier);
+  if (dir === 'left' || dir === 'right')
+    return `${prefix} on the ${dir}${onto}`;
+  if (dir && dir !== 'straight') return `${prefix} ${dir}${onto}`;
+  return `${prefix}${onto}`;
+}
+
 function ordinal(n) {
   if (!Number.isInteger(n) || n < 1) return null;
   const suffix =
@@ -103,13 +118,9 @@ export function instructionFor(step) {
     case 'merge':
       return dir ? `Merge ${dir}${onto}` : `Merge${onto}`;
     case 'on ramp':
-      return dir
-        ? `Take the ramp on the ${dir}${onto}`
-        : `Take the ramp${onto}`;
+      return directedWay('Take the ramp', modifier, onto);
     case 'off ramp':
-      return dir
-        ? `Take the exit on the ${dir}${onto}`
-        : `Take the exit${onto}`;
+      return directedWay('Take the exit', modifier, onto);
     case 'roundabout':
     case 'rotary': {
       const exit = ordinal(step?.exit);
@@ -124,8 +135,14 @@ export function instructionFor(step) {
     case 'exit roundabout':
     case 'exit rotary':
       return `Exit the roundabout${onto}`;
-    case 'use lane':
-      return dir ? `Use the ${dir} lane${onto}` : `Continue${onto}`;
+    case 'use lane': {
+      const lane = modifier.includes('left')
+        ? 'left'
+        : modifier.includes('right')
+          ? 'right'
+          : '';
+      return lane ? `Use the ${lane} lane${onto}` : `Continue${onto}`;
+    }
     case 'notification':
     default:
       return `Continue${onto}`;
diff --git a/src/data/routeSteps.test.mjs b/src/data/routeSteps.test.mjs
index 6bf74dd08..c0eb445dc 100644
--- a/src/data/routeSteps.test.mjs
+++ b/src/data/routeSteps.test.mjs
@@ -77,6 +77,26 @@ test('instructions read like a navigator, one sentence per OSRM maneuver', () =>
     instructionFor({ type: 'on ramp', modifier: 'left' }),
     'Take the ramp on the left',
   );
+  assert.equal(
+    instructionFor({ type: 'on ramp', modifier: 'slight left', name: 'I-95' }),
+    'Take the ramp slightly left onto I-95',
+  );
+  assert.equal(
+    instructionFor({ type: 'off ramp', modifier: 'sharp right', ref: 'I-280' }),
+    'Take the exit sharply right onto I-280',
+  );
+  assert.equal(
+    instructionFor({ type: 'on ramp', modifier: 'straight', name: 'US 101' }),
+    'Take the ramp onto US 101',
+  );
+  assert.equal(
+    instructionFor({ type: 'use lane', modifier: 'slight left' }),
+    'Use the left lane',
+  );
+  assert.equal(
+    instructionFor({ type: 'use lane', modifier: 'right', name: 'Main St' }),
+    'Use the right lane onto Main St',
+  );
   assert.equal(
     instructionFor({
       type: 'merge',
diff --git a/src/data/terrainHeightsProxy.js b/src/data/terrainHeightsProxy.js
index 9134f9ec6..c83b30a87 100644
--- a/src/data/terrainHeightsProxy.js
+++ b/src/data/terrainHeightsProxy.js
@@ -233,6 +233,9 @@ export async function resolveTerrainHeightRequest({
       for (let i = 0; i < missing.length; i += 1) {
         const result = fetched[i];
         if (validTerrainResult(result)) {
+          // Re-insert rather than overwrite: a Map keeps an existing key in
+          // its old position, and the proxy evicts from the front.
+          cache.delete(missing[i].key);
           cache.set(missing[i].key, { at: fetchedAt, result });
           cacheChanged = true;
         } else if (absentTerrainDatum(result)) {
diff --git a/src/data/tomtomTiles.js b/src/data/tomtomTiles.js
index af4fc95b3..26ec539ab 100644
--- a/src/data/tomtomTiles.js
+++ b/src/data/tomtomTiles.js
@@ -2,7 +2,7 @@
  * @file Pure tile math + budget accounting for the TomTom traffic-flow proxy.
  *
  * Shared by the `/api/tomtom` vite plugin (server-side: coordinate validation,
- * daily budget governor) and `src/data/flowTiles.js` (client-side: which tiles
+ * daily budget governor) and `src/layers/traffic/flowSource.js` (client-side: which tiles
  * cover the current traffic fetch bounds). Zero dependencies, Cesium-free, so
  * both sides can unit-test against it with node:test.
  *
diff --git a/src/director/clock.js b/src/director/clock.js
index fa83047a3..48b1c19c5 100644
--- a/src/director/clock.js
+++ b/src/director/clock.js
@@ -124,7 +124,13 @@ class PlaybackClock {
   subscribe(listener) {
     if (this._destroyed || typeof listener !== 'function') return () => {};
     this._sceneClockListeners.add(listener);
-    if (this._sceneClockSnapshot) listener({ ...this._sceneClockSnapshot });
+    if (this._sceneClockSnapshot) {
+      try {
+        listener({ ...this._sceneClockSnapshot });
+      } catch (error) {
+        console.warn('[Scenes] Scene clock listener failed:', error);
+      }
+    }
     return () => this._sceneClockListeners.delete(listener);
   }
 
diff --git a/src/director/clock.test.mjs b/src/director/clock.test.mjs
index c259c10ec..479808fc9 100644
--- a/src/director/clock.test.mjs
+++ b/src/director/clock.test.mjs
@@ -171,3 +171,32 @@ test('a subscriber can Stop or replace the initial clock without the old start a
   });
   assert.equal(f.timers.size, 0);
 });
+
+test('a subscriber throwing on immediate snapshot does not crash subscribe and receives unsubscribe handle', () => {
+  const f = fixture();
+  f.clock.publish(scene, shot, 1);
+  let calls = 0;
+  const warnings = [];
+  const origWarn = console.warn;
+  console.warn = (...args) => warnings.push(args);
+  try {
+    const unsubscribe = f.clock.subscribe(() => {
+      calls++;
+      throw new Error('listener failure');
+    });
+    assert.equal(typeof unsubscribe, 'function');
+    assert.equal(calls, 1);
+    assert.equal(warnings.length, 1);
+    assert.equal(warnings[0][0], '[Scenes] Scene clock listener failed:');
+    f.clock.publish(scene, shot, 2);
+    assert.equal(calls, 2);
+    assert.equal(warnings.length, 2);
+    unsubscribe();
+    f.clock.publish(scene, shot, 3);
+    assert.equal(calls, 2);
+    assert.equal(warnings.length, 2);
+    f.clock.destroy();
+  } finally {
+    console.warn = origWarn;
+  }
+});
diff --git a/src/director/interactions/interactions.test.mjs b/src/director/interactions/interactions.test.mjs
index fa0aa10ae..6c13cecef 100644
--- a/src/director/interactions/interactions.test.mjs
+++ b/src/director/interactions/interactions.test.mjs
@@ -178,6 +178,92 @@ test('synchronous stop before execution prevents any side effect; rejection unlo
   assert.equal(calls, 2);
 });
 
+test('a throwing changed observer does not break session dispatch, activation, or clearing', async () => {
+  let executed = 0;
+  let throwOnBusy = true;
+  let throwOnEnd = true;
+  const warnings = [];
+  const origWarn = console.warn;
+  console.warn = (...args) => warnings.push(args);
+  try {
+    const session = createInteractionSession({
+      execute: () => {
+        executed++;
+        return true;
+      },
+      changed: (state) => {
+        if (throwOnBusy && state.busy) throw new Error('start failed');
+        if (throwOnEnd && !state.busy && state.selected === 'a') {
+          throw new Error('end failed');
+        }
+      },
+    });
+    session.activate([{ id: 'a' }]);
+    const result = await session.dispatch('a');
+    assert.equal(result, true);
+    assert.equal(executed, 1);
+    assert.deepEqual(session.getState(), {
+      active: true,
+      busy: false,
+      selected: 'a',
+      count: 1,
+    });
+    assert.equal(warnings.length, 2);
+    assert.equal(
+      warnings[0][0],
+      '[Scenes] Interaction session observer failed:',
+    );
+    assert.equal(
+      warnings[1][0],
+      '[Scenes] Interaction session observer failed:',
+    );
+    throwOnBusy = false;
+    throwOnEnd = false;
+    assert.equal(await session.dispatch('a'), true);
+    assert.equal(executed, 2);
+    session.clear();
+    assert.deepEqual(session.getState(), {
+      active: false,
+      busy: false,
+      selected: null,
+      count: 0,
+    });
+  } finally {
+    console.warn = origWarn;
+  }
+});
+
+test('an observer that always throws cannot stop activate or clear', () => {
+  const warnings = [];
+  const origWarn = console.warn;
+  console.warn = (...args) => warnings.push(args);
+  try {
+    const session = createInteractionSession({
+      execute: () => true,
+      changed: () => {
+        throw new Error('observer failed');
+      },
+    });
+    session.activate([{ id: 'a' }, { id: 'b' }]);
+    assert.deepEqual(session.getState(), {
+      active: true,
+      busy: false,
+      selected: null,
+      count: 2,
+    });
+    session.clear();
+    assert.deepEqual(session.getState(), {
+      active: false,
+      busy: false,
+      selected: null,
+      count: 0,
+    });
+    assert.equal(warnings.length, 3);
+  } finally {
+    console.warn = origWarn;
+  }
+});
+
 test('settled pack shots cannot take the same-shot seek shortcut after Stop released geometry', async () => {
   const { SceneDirector } = await import('../../scenes/director.js');
   const shot = { id: 'shot', dataPackIds: ['pack'] };
diff --git a/src/director/interactions/session.js b/src/director/interactions/session.js
index 2f305b675..f731492e2 100644
--- a/src/director/interactions/session.js
+++ b/src/director/interactions/session.js
@@ -6,6 +6,13 @@ export function createInteractionSession({ execute, changed = () => {} }) {
     selected = null;
   let actions = new Map();
   const state = () => ({ active, busy, selected, count: actions.size });
+  function notify() {
+    try {
+      changed(state());
+    } catch (error) {
+      console.warn('[Scenes] Interaction session observer failed:', error);
+    }
+  }
   function clear() {
     active = false;
     busy = false;
@@ -13,7 +20,7 @@ export function createInteractionSession({ execute, changed = () => {} }) {
     actions.clear();
     controller?.abort();
     controller = null;
-    changed(state());
+    notify();
   }
   return {
     clear,
@@ -22,7 +29,7 @@ export function createInteractionSession({ execute, changed = () => {} }) {
       clear();
       actions = new Map(items.map((item) => [item.id, item]));
       active = !!actions.size;
-      changed(state());
+      notify();
     },
     async dispatch(id) {
       const item = actions.get(id);
@@ -31,7 +38,7 @@ export function createInteractionSession({ execute, changed = () => {} }) {
       controller = current;
       busy = true;
       selected = id;
-      changed(state());
+      notify();
       let abort;
       try {
         const cancelled = new Promise((resolve) => {
@@ -53,7 +60,7 @@ export function createInteractionSession({ execute, changed = () => {} }) {
         if (controller === current) {
           busy = false;
           controller = null;
-          changed(state());
+          notify();
         }
       }
     },
diff --git a/src/director/playback.js b/src/director/playback.js
index 4fa97df1a..3c060b2bb 100644
--- a/src/director/playback.js
+++ b/src/director/playback.js
@@ -35,6 +35,7 @@ export function buildPlaybackQueue(
  * releaseScene(scene, token?) leaves a previously loaded scene before playback
  * (false refuses that initial handoff). Between scenes and during final cleanup
  * it receives no cancelled token, so resource release can finish after Stop.
+ * The first error wins when the final release also fails.
  * An empty/already-cancelled queue acquires and releases no resources.
  *
  * @param {Array<{scene:Object, shot:Object}>} queue Normalized, fixed shot queue.
@@ -53,6 +54,7 @@ export async function playSceneQueue(
   const cancelled = () => Boolean(token.cancelled || token.signal?.aborted);
   let activeScene = null;
   let completedShots = 0;
+  let runFailed = false;
   try {
     if (!queue.length || cancelled()) {
       return {
@@ -68,8 +70,9 @@ export async function playSceneQueue(
     for (let index = 0; index < queue.length && !cancelled(); index++) {
       const { scene, shot } = queue[index];
       if (activeScene && activeScene.id !== scene.id) {
-        await adapter.releaseScene(activeScene);
+        const toRelease = activeScene;
         activeScene = null;
+        await adapter.releaseScene(toRelease);
         if (cancelled()) break;
       }
       activeScene = scene;
@@ -82,8 +85,23 @@ export async function playSceneQueue(
     }
     if (!cancelled()) await adapter.complete?.();
     return { status: cancelled() ? 'cancelled' : 'completed', completedShots };
+  } catch (error) {
+    runFailed = true;
+    throw error;
   } finally {
-    if (releaseOnFinish && activeScene) await adapter.releaseScene(activeScene);
+    if (releaseOnFinish && activeScene) {
+      const toRelease = activeScene;
+      activeScene = null;
+      try {
+        await adapter.releaseScene(toRelease);
+      } catch (error) {
+        if (runFailed) {
+          console.warn('[Scenes] Scene release failed:', error);
+        } else {
+          throw error;
+        }
+      }
+    }
   }
 }
 
diff --git a/src/director/playback.test.mjs b/src/director/playback.test.mjs
index f1d8f0921..820e8186e 100644
--- a/src/director/playback.test.mjs
+++ b/src/director/playback.test.mjs
@@ -196,3 +196,68 @@ test('a cleanup failure rejects for the caller to restore its own controls', asy
     (error) => error === failure,
   );
 });
+
+test('a phase failure is preserved when final scene release also throws', async () => {
+  const phaseError = new Error('travel failed');
+  const releaseError = new Error('release failed');
+  const warnings = [];
+  const origWarn = console.warn;
+  console.warn = (...args) => warnings.push(args);
+  try {
+    const f = fixture({
+      travel: async () => {
+        throw phaseError;
+      },
+      releaseScene: async () => {
+        throw releaseError;
+      },
+    });
+    await assert.rejects(
+      playSceneQueue(buildPlaybackQueue(scenes, 'a', { single: true }), f),
+      (error) => error === phaseError,
+    );
+    assert.equal(warnings.length, 1);
+    assert.equal(warnings[0][0], '[Scenes] Scene release failed:');
+    assert.equal(warnings[0][1], releaseError);
+  } finally {
+    console.warn = origWarn;
+  }
+});
+
+test('a failing inter-scene release releases the active scene only once', async () => {
+  const releaseError = new Error('release failed');
+  const released = [];
+  const f = fixture({
+    releaseScene: async (scene) => {
+      released.push(scene.id);
+      throw releaseError;
+    },
+  });
+  await assert.rejects(
+    playSceneQueue(buildPlaybackQueue(scenes, 'a'), f),
+    (error) => error === releaseError,
+  );
+  assert.deepEqual(released, ['a']);
+});
+
+test('a falsy phase failure is still preserved over a release failure', async () => {
+  const releaseError = new Error('release failed');
+  const origWarn = console.warn;
+  console.warn = () => {};
+  try {
+    const f = fixture({
+      travel: async () => {
+        throw undefined;
+      },
+      releaseScene: async () => {
+        throw releaseError;
+      },
+    });
+    await assert.rejects(
+      playSceneQueue(buildPlaybackQueue(scenes, 'a', { single: true }), f),
+      (error) => error === undefined,
+    );
+  } finally {
+    console.warn = origWarn;
+  }
+});
diff --git a/src/dockerLauncher.test.mjs b/src/dockerLauncher.test.mjs
index 213fe59dc..4e97849c0 100644
--- a/src/dockerLauncher.test.mjs
+++ b/src/dockerLauncher.test.mjs
@@ -75,4 +75,5 @@ test('the Docker install path keeps its loopback-only, launcher-owned contract',
   assert.match(compose, /^\s+- GEV_KEY_SETUP_TRUSTED_PEERS$/m, 'the operator policy reaches the launcher without a hard-coded address');
   assert.match(compose, /^\s+- GEV_ALLOWED_HOSTS$/m, 'the host allowlist reaches Vite');
   assert.doesNotMatch(compose, /network_mode/, 'the container keeps its own network namespace');
+  assert.match(compose, /^\s+- \.:\/app:z$/m, 'SELinux hosts can read the bind-mounted checkout');
 });
diff --git a/src/firstRunExperience.js b/src/firstRunExperience.js
index 408152295..a3181ec15 100644
--- a/src/firstRunExperience.js
+++ b/src/firstRunExperience.js
@@ -543,6 +543,10 @@ export function initFirstRunExperience({
   });
 
   for (const button of buttons) button.addEventListener('click', onChoice);
+  // The same dismissal as ESC, for screens without a keyboard.
+  root
+    .querySelector('[data-first-run-dismiss]')
+    ?.addEventListener('click', () => dismiss());
   suppressBox?.addEventListener('change', onSuppressChange);
   // Capture phase: the app binds its own global hotkeys (including bare letters
   // that cycle detection and styles), and the launcher owns the keyboard first.
diff --git a/src/firstRunExperience.test.mjs b/src/firstRunExperience.test.mjs
index a02c4391f..d76a48458 100644
--- a/src/firstRunExperience.test.mjs
+++ b/src/firstRunExperience.test.mjs
@@ -913,6 +913,48 @@ test('markup, startup ordering and accessibility remain pinned', () => {
   assert.match(choicesBlock, /overflow-y: auto;/);
 });
 
+test('the card closes without a keyboard: the ESC hint is a button, kept on phones', () => {
+  const html = expandApplicationHtml(
+    fs.readFileSync(new URL('../index.html', import.meta.url), 'utf8'),
+  );
+  const module = fs.readFileSync(
+    new URL('./firstRunExperience.js', import.meta.url),
+    'utf8',
+  );
+  // The whole stylesheet, so a hide rule added in any other file is caught too.
+  const css = readStylesheet(new URL('../style.css', import.meta.url));
+  const footer = html.slice(
+    html.indexOf('class="first-run-footer"'),
+    html.indexOf('data-first-run-status'),
+  );
+  assert.match(
+    footer,
+    /<button type="button" class="first-run-dismiss" data-first-run-dismiss>/,
+  );
+  assert.match(footer, /data-i18n>ESC to dismiss</);
+  assert.match(footer, /data-i18n>DISMISS</);
+  // It closes the way ESC does, through the one dismiss path, so the session
+  // flag and focus handling are the same.
+  assert.match(
+    module,
+    /querySelector\('\[data-first-run-dismiss\]'\)\s*\?\.addEventListener\('click', \(\) => dismiss\(\)\)/,
+  );
+  // Phones used to hide the hint, leaving no way out but picking a mission.
+  assert.doesNotMatch(css, /first-run-footer > span:last-child/);
+  assert.doesNotMatch(css, /\.first-run-dismiss\s*\{[^}]*display:\s*none/);
+  // A 44px touch target that does not add to the footer row's height.
+  assert.match(
+    css,
+    /\.first-run-dismiss::before \{[^}]*position: absolute;[^}]*height: 44px;/,
+  );
+  assert.doesNotMatch(css, /\.first-run-dismiss \{[^}]*min-height/);
+  // Touch screens read DISMISS rather than a key they do not have.
+  assert.match(
+    css,
+    /@media \(hover: none\) and \(pointer: coarse\) \{\s*\.first-run-dismiss-key \{\s*display: none;/,
+  );
+});
+
 test('the launcher keeps focus, restores it, and never disables the focused button', () => {
   const module = fs.readFileSync(
     new URL('./firstRunExperience.js', import.meta.url),
@@ -1010,11 +1052,13 @@ test('the voice TOOL SCHEMA matches the pinned contract — the mission mapping
   // Globe rotation adds one camera motion and its descriptions; Globe View
   // framing/default guidance updates only move_camera and mode descriptions.
   // Radio markup and the complete production-request comparison pin locality.
-  // Restore the base camera/Globe View wording with the globe-rotation append.
-  assert.equal(block.length, 30878, 'serialized tool schema length drifted');
+  // Panel adds timeout and named voice/provider targets; consolidated guidance
+  // preserves the mission mapping and globe-rotation arguments.
+  // S2 GhostMaps extends the generated layer enums; both feature contracts remain.
+  assert.equal(block.length, 31206, 'serialized tool schema length drifted');
   assert.equal(
     crypto.createHash('sha256').update(block).digest('hex'),
-    '7b95f0f4258896fe5c3316265a19f3a6602809d4e7e681ee7ecd8f2df514ef1f',
+    'f772df95404494bf492e02fde1beabffdfe61986940bffd0cf9ad5a38d768746',
     'the first-run missions must ride EXISTING tools: no schema edit, no cache bust',
   );
   const instructions = fs.readFileSync(
diff --git a/src/hud.js b/src/hud.js
index 8190f4b1b..954e3ea94 100644
--- a/src/hud.js
+++ b/src/hud.js
@@ -224,6 +224,20 @@ export class IntelHUD {
     // session, so this flips once — and both altitude readouts have to move
     // together when it does (see the repaint in _updateCameraData).
     this._geoidCorrectionApplied = false;
+    // A summary built for one view must not land on the next: a request in
+    // flight when the camera starts moving is aborted and nothing it ends
+    // with paints (the revision moves), a reply still typing stops, and the
+    // summary is marked dirty so the next periodic tick asks about the view
+    // the camera has moved to.
+    this._onCameraMoveStart = () => {
+      this._markSummaryDirty();
+      if (this._summaryRequest || this._summaryTypingInterval) {
+        // Cancelled requests and partially typed replies are not reusable answers.
+        this._lastSummarySignature = null;
+      }
+      this._summaryRequest?.abort();
+      this._stopSummaryTyping();
+    };
     this._onCameraMoveEnd = () => {
       this._markSummaryDirty();
       // The 250 ms telemetry timer and 15 s semantic-summary timer must not
@@ -249,6 +263,7 @@ export class IntelHUD {
     this._passNum = 100 + Math.floor(Math.random() * 200);
 
     this._buildDOM();
+    this.viewer.camera.moveStart.addEventListener(this._onCameraMoveStart);
     this.viewer.camera.moveEnd.addEventListener(this._onCameraMoveEnd);
     this._startTimers();
   }
@@ -267,28 +282,28 @@ export class IntelHUD {
       <div class="hud-sonar" aria-hidden="true"></div>
 
       <div class="hud-top-bar">
-        <span class="hud-top-bar-left">TOP SECRET // SI-TK // NOFORN</span>
-        <span class="hud-top-bar-center">${this._missionId}</span>
-        <span class="hud-top-bar-right">PAGE 1/1</span>
+        <span class="hud-readout"><span class="hud-top-bar-left">TOP SECRET // SI-TK // NOFORN</span></span>
+        <span class="hud-readout"><span class="hud-top-bar-center">${this._missionId}</span></span>
+        <span class="hud-readout"><span class="hud-top-bar-right">PAGE 1/1</span></span>
       </div>
 
       <div class="hud-corner hud-top-left">
         <div class="hud-bracket">┌</div>
         <div class="hud-content">
-          <div class="hud-classification">TOP SECRET // SI-TK // NOFORN</div>
-          <div class="hud-system">${this._missionId}  ${this._sensorId}</div>
-          <div class="hud-mode" id="hud-mode">${t(MODE_LABELS.normal)}</div>
+          <div class="hud-readout"><div class="hud-classification">TOP SECRET // SI-TK // NOFORN</div></div>
+          <div class="hud-readout"><div class="hud-system">${this._missionId}  ${this._sensorId}</div></div>
+          <div class="hud-readout"><div class="hud-mode" id="hud-mode">${t(MODE_LABELS.normal)}</div></div>
           <div class="hud-summary-wrap">
-            <div class="hud-summary-label">${t('SUMMARY')}</div>
-            <div class="hud-summary" id="hud-summary">${t('Awaiting telemetry...')}</div>
+            <div class="hud-readout"><div class="hud-summary-label">${t('SUMMARY')}</div></div>
+            <div class="hud-readout"><div class="hud-summary" id="hud-summary">${t('Awaiting telemetry...')}</div></div>
           </div>
         </div>
       </div>
 
       <div class="hud-corner hud-top-right">
         <div class="hud-content" style="text-align:right">
-          <div class="hud-rec"><span id="hud-rec-dot">●</span> ${t('REC')}  <span id="hud-timestamp">2026-01-01 00:00:00Z</span></div>
-          <div class="hud-orbital">ORB: ${this._orbitNum}  PASS: DESC-${this._passNum}</div>
+          <div class="hud-readout"><div class="hud-rec"><span id="hud-rec-dot">●</span> ${t('REC')}  <span id="hud-timestamp">2026-01-01 00:00:00Z</span></div></div>
+          <div class="hud-readout"><div class="hud-orbital">ORB: ${this._orbitNum}  PASS: DESC-${this._passNum}</div></div>
         </div>
         <div class="hud-bracket">┐</div>
       </div>
@@ -296,33 +311,33 @@ export class IntelHUD {
       <div class="hud-corner hud-bottom-left">
         <div class="hud-bracket">└</div>
         <div class="hud-content">
-          <div id="hud-mgrs">MGRS: ---</div>
-          <div id="hud-latlon">--°--'--"N ---°--'--"W</div>
+          <div class="hud-readout"><div id="hud-mgrs">MGRS: ---</div></div>
+          <div class="hud-readout"><div id="hud-latlon">--°--'--"N ---°--'--"W</div></div>
         </div>
       </div>
 
       <div class="hud-corner hud-bottom-right">
         <div class="hud-content" style="text-align:right">
-          <div id="hud-gsd">GSD: --m  NIIRS: --</div>
-          <div id="hud-alt">ALT: --m   SUN: --° EL</div>
-          <div id="hud-ais-vessel" class="hud-ais-vessel">${t('AIS: --')}</div>
+          <div class="hud-readout"><div id="hud-gsd">GSD: --m  NIIRS: --</div></div>
+          <div class="hud-readout"><div id="hud-alt">ALT: --m   SUN: --° EL</div></div>
+          <div class="hud-readout"><div id="hud-ais-vessel" class="hud-ais-vessel">${t('AIS: --')}</div></div>
         </div>
         <div class="hud-bracket">┘</div>
       </div>
 
       <div class="hud-edge hud-left-edge">
-        <div id="hud-coll">COLL: --:--:--Z</div>
-        <div id="hud-ona">ONA: --°</div>
+        <div class="hud-readout"><div id="hud-coll">COLL: --:--:--Z</div></div>
+        <div class="hud-readout"><div id="hud-ona">ONA: --°</div></div>
       </div>
 
       <div class="hud-edge hud-right-edge">
-        <div>BAND: PAN</div>
-        <div>BITS: 11</div>
-        <div>LVL: 1A</div>
+        <div class="hud-readout"><div>BAND: PAN</div></div>
+        <div class="hud-readout"><div>BITS: 11</div></div>
+        <div class="hud-readout"><div>LVL: 1A</div></div>
       </div>
 
       <div class="hud-bottom-bar">
-        <span id="hud-bottom-line">LAT: --  LON: --  MGRS: ---</span>
+        <span class="hud-readout"><span id="hud-bottom-line">LAT: --  LON: --  MGRS: ---</span></span>
       </div>
     `;
     this._el.dataset.variant = this._variant;
@@ -559,11 +574,12 @@ export class IntelHUD {
    * @returns {string} Formatted DMS string, e.g. `"38°53'23.10"N"`.
    */
   _toDMS(decimal, type) {
-    const abs = Math.abs(decimal);
-    const deg = Math.floor(abs);
-    const minFloat = (abs - deg) * 60;
-    const min = Math.floor(minFloat);
-    const sec = ((minFloat - min) * 60).toFixed(2);
+    // Round once, in hundredths of a second, so a value that rounds up to
+    // 60.00" carries into the minutes and degrees instead of printing 60.
+    const hundredths = Math.round(Math.abs(decimal) * 360000);
+    const deg = Math.floor(hundredths / 360000);
+    const min = Math.floor(hundredths / 6000) % 60;
+    const sec = ((hundredths % 6000) / 100).toFixed(2);
 
     let dir;
     if (type === 'lat') dir = decimal >= 0 ? 'N' : 'S';
@@ -766,6 +782,12 @@ export class IntelHUD {
     return provenance ? `${line} | ${provenance}` : line;
   }
 
+  /** Stop a summary still typing out, leaving what it has typed so far. */
+  _stopSummaryTyping() {
+    clearInterval(this._summaryTypingInterval);
+    this._summaryTypingInterval = null;
+  }
+
   /**
    * Animate the summary text into the DOM using a typewriter effect
    * (2 characters every 24ms).
@@ -816,8 +838,10 @@ export class IntelHUD {
     } catch (error) {
       console.warn('[HUD] summary context unavailable:', error);
       // Left dirty on purpose: the next periodic tick retries instead of
-      // sticking on the fallback line for the rest of the session.
-      this._setSummaryText(fallbackText, animate);
+      // sticking on the fallback line for the rest of the session. The
+      // fallback was composed for this view; a moved camera keeps its own.
+      if (revision === this._summaryRevision)
+        this._setSummaryText(fallbackText, animate);
       return;
     }
     if (revision !== this._summaryRevision) return;
@@ -832,7 +856,11 @@ export class IntelHUD {
     this._summaryDirty = false;
     this._lastSummarySignature = signature;
     const controller = new AbortController();
-    const timeout = window.setTimeout(() => controller.abort(), 5000);
+    let timedOut = false;
+    const timeout = window.setTimeout(() => {
+      timedOut = true;
+      controller.abort();
+    }, 5000);
     this._summaryRequest = controller;
     try {
       this.summaryPolicy.onRequest?.();
@@ -855,17 +883,24 @@ export class IntelHUD {
         animate,
       );
     } catch (error) {
-      if (error?.name !== 'AbortError') {
+      // The 5 s timeout is a failure like any other; a move's abort (or
+      // destroy's) is not.
+      const moved = revision !== this._summaryRevision;
+      if (error?.name !== 'AbortError' || timedOut) {
         console.warn('[HUD] AI summary unavailable:', error);
         // Invalidate the committed signature so the next periodic tick
         // retries instead of sticking on the fallback line forever.
         this._lastSummarySignature = null;
         this._summaryDirty = true;
       }
-      this._setSummaryText(fallbackText, animate);
+      if (!moved) this._setSummaryText(fallbackText, animate);
     } finally {
       window.clearTimeout(timeout);
       if (this._summaryRequest === controller) this._summaryRequest = null;
+      // A request whose answer was dropped (aborted by a move, or a reply
+      // that came back after one) committed a signature it never painted;
+      // forget it, or the next tick over the same place would skip asking.
+      if (revision !== this._summaryRevision) this._lastSummarySignature = null;
     }
   }
 
@@ -874,6 +909,8 @@ export class IntelHUD {
       this._typeSummary(text);
       return;
     }
+    // A plain paint replaces any reply still typing.
+    this._stopSummaryTyping();
     const el = document.getElementById('hud-summary');
     if (el) el.textContent = text;
   }
@@ -1044,6 +1081,7 @@ export class IntelHUD {
     clearInterval(this._timestampInterval);
     clearInterval(this._summaryInterval);
     clearInterval(this._summaryTypingInterval);
+    this.viewer.camera.moveStart.removeEventListener(this._onCameraMoveStart);
     this.viewer.camera.moveEnd.removeEventListener(this._onCameraMoveEnd);
     this._dataManagerUnsubscribe?.();
     this._summaryRequest?.abort();
diff --git a/src/hudAltitudeDatum.test.mjs b/src/hudAltitudeDatum.test.mjs
index eeb407da4..ca14569e5 100644
--- a/src/hudAltitudeDatum.test.mjs
+++ b/src/hudAltitudeDatum.test.mjs
@@ -16,6 +16,9 @@
 // globals exist: Cesium's widget bundle probes for a real `document` at module
 // scope and a partial stub sends it down the browser path. Hence hook →
 // import → install DOM, in that order.
+//
+// The same hook is why the live AI-summary test lives here too: this is the
+// one file that can construct a real IntelHUD.
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
@@ -33,7 +36,8 @@ registerHooks({
       return {
         format: 'module',
         shortCircuit: true,
-        source: 'export function forward() { return "10SEG55776339"; }\nexport default { forward };\n',
+        source:
+          'export function forward() { return "10SEG55776339"; }\nexport default { forward };\n',
       };
     }
     return next(url, context);
@@ -59,10 +63,20 @@ const SFO_ELLIPSOIDAL_M = -15;
  */
 function installHudEnvironment() {
   const elements = new Map(
-    ['hud-alt', 'hud-summary', 'hud-mgrs', 'hud-latlon', 'hud-bottom-line', 'hud-gsd', 'hud-coll', 'hud-ona', 'hud-mode']
-      .map((id) => [id, { textContent: '' }]),
+    [
+      'hud-alt',
+      'hud-summary',
+      'hud-mgrs',
+      'hud-latlon',
+      'hud-bottom-line',
+      'hud-gsd',
+      'hud-coll',
+      'hud-ona',
+      'hud-mode',
+    ].map((id) => [id, { textContent: '' }]),
   );
   const previousDocument = globalThis.document;
+  const cameraListeners = {};
   globalThis.document = {
     getElementById: (id) => elements.get(id) ?? null,
     querySelectorAll: () => [],
@@ -78,12 +92,24 @@ function installHudEnvironment() {
         height: SFO_ELLIPSOIDAL_M,
       },
       computeViewRectangle: () => undefined,
-      moveEnd: { addEventListener() {}, removeEventListener() {} },
+      moveStart: {
+        addEventListener(listener) {
+          cameraListeners.moveStart = listener;
+        },
+        removeEventListener() {},
+      },
+      moveEnd: {
+        addEventListener(listener) {
+          cameraListeners.moveEnd = listener;
+        },
+        removeEventListener() {},
+      },
     },
   };
   return {
     elements,
     viewer,
+    cameraListeners,
     restore() {
       if (previousDocument === undefined) delete globalThis.document;
       else globalThis.document = previousDocument;
@@ -93,7 +119,9 @@ function installHudEnvironment() {
 
 test('hud.js corrects the camera height to MSL through the geoid module', () => {
   assert.equal(
-    has(/import \{[^}]*\bellipsoidalToMslDisplayM\b[^}]*\} from '\.\/data\/geoid\.js';/s),
+    has(
+      /import \{[^}]*\bellipsoidalToMslDisplayM\b[^}]*\} from '\.\/data\/geoid\.js';/s,
+    ),
     true,
     'hud.js must take the datum correction from ./data/geoid.js, not re-derive one',
   );
@@ -108,7 +136,9 @@ test('hud.js corrects the camera height to MSL through the geoid module', () =>
     'the ~2.7 MB grid must be requested once, on demand — not at HUD construction',
   );
   assert.equal(
-    has(/\.catch\(\(\) => \{\s*\/\* readout falls back to the uncorrected height \*\/\s*\}\)/),
+    has(
+      /\.catch\(\(\) => \{\s*\/\* readout falls back to the uncorrected height \*\/\s*\}\)/,
+    ),
     true,
     'a failed geoid load must leave the readout uncorrected, not unhandled',
   );
@@ -141,7 +171,9 @@ test('the summary ALT tag agrees with the corner readout', () => {
   // Both are on screen together; a viewer reading "ALT -15M" in one corner and
   // "ALT: 17m" in the other has found a bug, not a distinction.
   assert.equal(
-    has(/const altDisplayM = Number\.isFinite\(m\.altMslM\) \? m\.altMslM : m\.altM;/),
+    has(
+      /const altDisplayM = Number\.isFinite\(m\.altMslM\) \? m\.altMslM : m\.altM;/,
+    ),
     true,
     'the summary altitude tag must prefer the MSL datum and fall back to the raw height',
   );
@@ -188,7 +220,11 @@ test('a cold tick paints both readouts uncorrected, and resolving flips both in
     // Tick 1 — cold. This is also the tick that requests the grid.
     hud._updateCameraData();
     assert.match(alt(), /^ALT: -15m/, `cold corner readout, got ${alt()}`);
-    assert.match(summary(), /\| ALT -15M \|/, `cold summary tag, got ${summary()}`);
+    assert.match(
+      summary(),
+      /\| ALT -15M \|/,
+      `cold summary tag, got ${summary()}`,
+    );
 
     // The HUD registered its own continuation on this same shared promise
     // during tick 1, and it registered first, so awaiting here means its
@@ -248,3 +284,294 @@ test('the corrected readouts are the MSL datum, not a coincidence of the SFO sig
     env.restore();
   }
 });
+
+test('a summary asked for one view is dropped once the camera moves', async () => {
+  const env = installHudEnvironment();
+  const previousWindow = globalThis.window;
+  globalThis.window = globalThis;
+  const pending = [];
+  const summaryService = {
+    summarize: (context) =>
+      new Promise((resolve) => {
+        pending.push({
+          context,
+          reply: (summary) =>
+            resolve({ ok: true, status: 200, data: { summary, error: null } }),
+        });
+      }),
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(env.viewer, { summaryService });
+    let place = 'Yellowstone';
+    hud._summaryContext = async () => ({ place });
+    const summary = () => env.elements.get('hud-summary').textContent;
+    const settle = () => new Promise((resolve) => setImmediate(resolve));
+    hud._updateCameraData();
+
+    // The periodic tick's call (force=false): it asks only for a dirty
+    // summary. Asked over Yellowstone; the camera leaves before the reply
+    // lands.
+    const first = hud._updateSummary(false);
+    await settle();
+    assert.equal(pending.length, 1);
+    env.cameraListeners.moveStart();
+    pending[0].reply('Canyon Junction Wyoming');
+    await first;
+    assert.doesNotMatch(
+      summary(),
+      /Canyon Junction/,
+      'a reply for the old view is dropped',
+    );
+
+    // The next tick, with the camera still moving (a follow camera or an
+    // orbit emits no moveEnd), asks about where it is now and paints it.
+    place = 'Atlantic';
+    const moving = hud._updateSummary(false);
+    await settle();
+    assert.equal(pending.length, 2, 'the move marked the summary dirty');
+    assert.deepEqual(pending[1].context, { place: 'Atlantic' });
+    pending[1].reply('North Atlantic Ocean');
+    await moving;
+    assert.equal(summary(), 'North Atlantic Ocean');
+  } finally {
+    for (const request of pending) request.reply('');
+    hud?.destroy();
+    if (previousWindow === undefined) delete globalThis.window;
+    else globalThis.window = previousWindow;
+    env.restore();
+  }
+});
+
+test('a request the camera leaves paints nothing: aborted, failed, or its context build throws', async () => {
+  const env = installHudEnvironment();
+  const previousWindow = globalThis.window;
+  globalThis.window = globalThis;
+  const pending = [];
+  // Like fetch: an abort rejects with an AbortError, unless `ignoreAbort`.
+  let ignoreAbort = false;
+  const summaryService = {
+    summarize: (context, { signal }) =>
+      new Promise((resolve, reject) => {
+        pending.push({ signal, reject });
+        if (!ignoreAbort)
+          signal.addEventListener('abort', () =>
+            reject(Object.assign(new Error('aborted'), { name: 'AbortError' })),
+          );
+      }),
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(env.viewer, { summaryService });
+    hud._summaryContext = async () => ({ place: 'Yellowstone' });
+    const element = env.elements.get('hud-summary');
+    const settle = () => new Promise((resolve) => setImmediate(resolve));
+    hud._updateCameraData();
+
+    // The move aborts the request in flight, and the abort paints nothing.
+    let update = hud._updateSummary(false, true);
+    await settle();
+    element.textContent = 'shown before the move';
+    env.cameraListeners.moveStart();
+    assert.equal(pending[0].signal.aborted, true, 'the request is aborted');
+    await update;
+    assert.equal(element.textContent, 'shown before the move');
+
+    // A request that fails after the move (an error, the 5 s timeout) does
+    // not paint the old view's fallback line either.
+    ignoreAbort = true;
+    update = hud._updateSummary(false, true);
+    await settle();
+    element.textContent = 'shown before the move';
+    env.cameraListeners.moveStart();
+    pending[1].reject(new Error('network'));
+    await update;
+    assert.equal(element.textContent, 'shown before the move');
+
+    // Nor does a context build that throws once the camera has moved.
+    hud._summaryContext = async () => {
+      env.cameraListeners.moveStart();
+      throw new Error('view target unavailable');
+    };
+    element.textContent = 'shown before the move';
+    await hud._updateSummary(false, true);
+    assert.equal(element.textContent, 'shown before the move');
+  } finally {
+    hud?.destroy();
+    if (previousWindow === undefined) delete globalThis.window;
+    else globalThis.window = previousWindow;
+    env.restore();
+  }
+});
+
+test('a cancelled summary retries the same context but completed answers stay reusable', async () => {
+  const env = installHudEnvironment();
+  const previousWindow = globalThis.window;
+  globalThis.window = globalThis;
+  const pending = [];
+  const summaryService = {
+    summarize: (context, { signal }) =>
+      new Promise((resolve, reject) => {
+        pending.push({
+          context,
+          reply: (summary) =>
+            resolve({ ok: true, status: 200, data: { summary } }),
+        });
+        signal.addEventListener('abort', () =>
+          reject(Object.assign(new Error('aborted'), { name: 'AbortError' })),
+        );
+      }),
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(env.viewer, { summaryService });
+    hud._summaryContext = async () => ({ place: 'San Francisco' });
+    hud._updateCameraData();
+    const settle = () => new Promise((resolve) => setImmediate(resolve));
+    const first = hud._updateSummary(false);
+    await settle();
+    assert.equal(pending.length, 1);
+    env.cameraListeners.moveStart();
+    await first;
+
+    // An orbit can leave all semantic place/layer labels unchanged. The next
+    // periodic tick must retry even though its context equals the aborted one.
+    const retry = hud._updateSummary(false);
+    await settle();
+    assert.equal(
+      pending.length,
+      2,
+      'the cancelled signature cannot suppress a retry',
+    );
+    assert.deepEqual(pending[1].context, pending[0].context);
+    pending[1].reply('San Francisco Bay Urban Landscape');
+    await retry;
+    assert.equal(
+      env.elements.get('hud-summary').textContent,
+      'San Francisco Bay Urban Landscape',
+    );
+
+    // Movement without an active request must not discard a completed answer.
+    env.cameraListeners.moveStart();
+    await hud._updateSummary(false);
+    assert.equal(pending.length, 2, 'completed context still deduplicates');
+  } finally {
+    for (const request of pending) request.reply('');
+    hud?.destroy();
+    if (previousWindow === undefined) delete globalThis.window;
+    else globalThis.window = previousWindow;
+    env.restore();
+  }
+});
+
+test('after a dropped or timed-out request the next tick asks again, and a move stops typing', async (t) => {
+  t.mock.timers.enable({ apis: ['setTimeout', 'setInterval'] });
+  const env = installHudEnvironment();
+  const previousWindow = globalThis.window;
+  globalThis.window = globalThis;
+  const pending = [];
+  const summaryService = {
+    summarize: (context, { signal }) =>
+      new Promise((resolve, reject) => {
+        pending.push({ resolve });
+        signal.addEventListener('abort', () =>
+          reject(Object.assign(new Error('aborted'), { name: 'AbortError' })),
+        );
+      }),
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(env.viewer, { summaryService });
+    // The same place before and after: a slow follow camera, a small pan.
+    hud._summaryContext = async () => ({ place: 'Lisboa' });
+    const element = env.elements.get('hud-summary');
+    const settle = () => new Promise((resolve) => setImmediate(resolve));
+    hud._updateCameraData();
+
+    // A move aborts the request; the next tick over the same place asks again.
+    let update = hud._updateSummary(false);
+    await settle();
+    env.cameraListeners.moveStart();
+    await update;
+    update = hud._updateSummary(false);
+    await settle();
+    assert.equal(pending.length, 2, 'asked again after the abort');
+
+    // That one times out at 5 s: retried like any failure.
+    t.mock.timers.tick(5_000);
+    await update;
+    update = hud._updateSummary(false);
+    await settle();
+    assert.equal(pending.length, 3, 'asked again after the timeout');
+    pending[2].resolve({
+      ok: true,
+      status: 200,
+      data: { summary: 'Lisboa Rua Augusta', error: null },
+    });
+    await update;
+
+    // A reply still typing stops when the camera starts moving.
+    hud._typeSummary('Canyon Junction Wyoming Yellowstone National Park');
+    t.mock.timers.tick(48);
+    const typed = element.textContent;
+    env.cameraListeners.moveStart();
+    t.mock.timers.tick(2_000);
+    assert.equal(
+      element.textContent,
+      typed,
+      'no more characters after the move',
+    );
+  } finally {
+    hud?.destroy();
+    if (previousWindow === undefined) delete globalThis.window;
+    else globalThis.window = previousWindow;
+    env.restore();
+  }
+});
+
+test('a summary interrupted while typing can retry unchanged context', async (t) => {
+  t.mock.timers.enable({ apis: ['setTimeout', 'setInterval'] });
+  const env = installHudEnvironment();
+  const previousWindow = globalThis.window;
+  globalThis.window = globalThis;
+  let calls = 0;
+  const text = 'San Francisco Bay Urban Landscape';
+  const summaryService = {
+    summarize: async () => {
+      calls++;
+      return { ok: true, status: 200, data: { summary: text } };
+    },
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(env.viewer, { summaryService });
+    hud._summaryContext = async () => ({ place: 'San Francisco' });
+    hud._updateCameraData();
+    await hud._updateSummary(true);
+    t.mock.timers.tick(48);
+    const element = env.elements.get('hud-summary');
+    assert.notEqual(element.textContent, text, 'the answer is still typing');
+    assert.equal(
+      hud._summaryRequest,
+      null,
+      'the network request already finished',
+    );
+    env.cameraListeners.moveStart();
+    assert.equal(hud._summaryTypingInterval, null);
+    await hud._updateSummary(false);
+    assert.equal(
+      calls,
+      2,
+      'a partially displayed answer must not suppress retry',
+    );
+    assert.equal(element.textContent, text);
+    env.cameraListeners.moveStart();
+    await hud._updateSummary(false);
+    assert.equal(calls, 2, 'the fully displayed answer remains reusable');
+  } finally {
+    hud?.destroy();
+    if (previousWindow === undefined) delete globalThis.window;
+    else globalThis.window = previousWindow;
+    env.restore();
+  }
+});
diff --git a/src/hudDms.test.mjs b/src/hudDms.test.mjs
new file mode 100644
index 000000000..064906b5f
--- /dev/null
+++ b/src/hudDms.test.mjs
@@ -0,0 +1,106 @@
+// The HUD's LAT/LON readout in degrees-minutes-seconds. Seconds are printed to
+// two decimals, so a value within 0.005" of the next whole minute rounds up.
+// That carry must reach the minutes (and degrees): `122°20'60.00"W` is not a
+// coordinate. Ordinary decimal inputs land there through binary floating
+// point: 122.35 - 122 is 0.34999999999999432, so -122.35 read 20'60.00".
+//
+// hud.js imports `mgrs`, a CommonJS package whose named exports Node's ESM
+// loader cannot see, so this installs the same one-specifier stub as
+// hudAltitudeDatum.test.mjs before importing it.
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { registerHooks } from 'node:module';
+
+const MGRS_STUB_URL = 'gev-test-stub:mgrs';
+registerHooks({
+  resolve(specifier, context, next) {
+    if (specifier === 'mgrs') return { url: MGRS_STUB_URL, shortCircuit: true };
+    return next(specifier, context);
+  },
+  load(url, context, next) {
+    if (url === MGRS_STUB_URL) {
+      return {
+        format: 'module',
+        shortCircuit: true,
+        source:
+          'export function forward() { return "10SEG55776339"; }\nexport default { forward };\n',
+      };
+    }
+    return next(url, context);
+  },
+});
+
+const { IntelHUD } = await import('./hud.js');
+
+const toDMS = (decimal, type) => IntelHUD.prototype._toDMS(decimal, type);
+
+test('a rounded-up second carries into the minutes', () => {
+  assert.equal(toDMS(-122.35, 'lon'), `122°21'00.00"W`);
+  assert.equal(toDMS(139.7, 'lon'), `139°42'00.00"E`);
+  assert.equal(toDMS(37.0166666, 'lat'), `37°01'00.00"N`);
+});
+
+test('a carry through 59 minutes reaches the degrees', () => {
+  assert.equal(toDMS(38.999999, 'lat'), `39°00'00.00"N`);
+  assert.equal(toDMS(-0.999999, 'lat'), `01°00'00.00"S`);
+  assert.equal(toDMS(179.999999, 'lon'), `180°00'00.00"E`);
+});
+
+test('ordinary values keep their existing format', () => {
+  assert.equal(toDMS(38.889722, 'lat'), `38°53'23.00"N`);
+  assert.equal(toDMS(-77.035278, 'lon'), `077°02'07.00"W`);
+  assert.equal(toDMS(51.5, 'lat'), `51°30'00.00"N`);
+  assert.equal(toDMS(-33.8568, 'lat'), `33°51'24.48"S`);
+  assert.equal(toDMS(0, 'lon'), `000°00'00.00"E`);
+  assert.equal(toDMS(90, 'lat'), `90°00'00.00"N`);
+});
+
+test('the telemetry tick paints the carried value into both readouts', () => {
+  const elements = new Map(
+    [
+      'hud-alt',
+      'hud-summary',
+      'hud-mgrs',
+      'hud-latlon',
+      'hud-bottom-line',
+      'hud-gsd',
+      'hud-coll',
+      'hud-ona',
+      'hud-mode',
+    ].map((id) => [id, { textContent: '' }]),
+  );
+  const previousDocument = globalThis.document;
+  globalThis.document = {
+    getElementById: (id) => elements.get(id) ?? null,
+    querySelectorAll: () => [],
+    addEventListener() {},
+    removeEventListener() {},
+  };
+  const viewer = {
+    camera: {
+      pitch: -Math.PI / 2,
+      positionCartographic: {
+        latitude: (37.75 * Math.PI) / 180,
+        longitude: (-122.35 * Math.PI) / 180,
+        height: 1500,
+      },
+      computeViewRectangle: () => undefined,
+      moveStart: { addEventListener() {}, removeEventListener() {} },
+      moveEnd: { addEventListener() {}, removeEventListener() {} },
+    },
+  };
+  let hud;
+  try {
+    hud = new IntelHUD(viewer);
+    hud._updateCameraData();
+    const latlon = elements.get('hud-latlon').textContent;
+    const bottom = elements.get('hud-bottom-line').textContent;
+    assert.equal(latlon, `37°45'00.00"N 122°21'00.00"W`);
+    assert.match(bottom, /LON: 122°21'00\.00"W/);
+    assert.doesNotMatch(`${latlon} ${bottom}`, /60\.00"/);
+  } finally {
+    hud?.destroy();
+    if (previousDocument === undefined) delete globalThis.document;
+    else globalThis.document = previousDocument;
+  }
+});
diff --git a/src/hudLocalityFormat.js b/src/hudLocalityFormat.js
index b508f8d59..697075a82 100644
--- a/src/hudLocalityFormat.js
+++ b/src/hudLocalityFormat.js
@@ -16,7 +16,8 @@ export function hudQuantity(value, unit, digits = 0) {
     maximumFractionDigits: digits,
   });
   const label = unitLabel(unit);
-  if (getLocale() === 'zh-CN') return label ? `${number} ${label}` : number;
+  if (getLocale().startsWith('zh-'))
+    return label ? `${number} ${label}` : number;
   return `${number}${label.toUpperCase()}`;
 }
 
diff --git a/src/i18n/firms-live-zh.test.mjs b/src/i18n/firms-live-zh.test.mjs
index 649842e7f..03b3af6c8 100644
--- a/src/i18n/firms-live-zh.test.mjs
+++ b/src/i18n/firms-live-zh.test.mjs
@@ -5,12 +5,12 @@ import { createModel } from '../layers/firms/model.js';
 import { createQueries } from '../layers/firms/queries.js';
 
 const cases = [
-  [0, '不到 1 分钟前', '<1m ago'],
-  [120000, '2 分钟前', '2m ago'],
-  [7200000, '2 小时前', '2h ago'],
+  [0, '不到 1 分钟前', '<1m ago', '不到 1 分鐘前'],
+  [120000, '2 分钟前', '2m ago', '2 分鐘前'],
+  [7200000, '2 小时前', '2h ago', '2 小時前'],
 ];
 
-for (const [age, zh, en] of cases) {
+for (const [age, zh, en, hant] of cases) {
   test(`FIRMS live age ${age} ms has one relative-time suffix`, (context) => {
     const now = 1800000000000;
     context.mock.method(Date, 'now', () => now);
@@ -36,6 +36,8 @@ for (const [age, zh, en] of cases) {
       assert.equal(methods.getStats().loadingLabel, `LIVE · updated ${en}`);
       setLocale('zh-CN');
       assert.equal(methods.getStats().loadingLabel, `实时 · 更新于 ${zh}`);
+      setLocale('zh-Hant');
+      assert.equal(methods.getStats().loadingLabel, `實時 · 更新於 ${hant}`);
     } finally {
       setLocale(previousLocale);
     }
diff --git a/src/i18n/i18n.test.mjs b/src/i18n/i18n.test.mjs
index 70eaf7e86..1b421f2ff 100644
--- a/src/i18n/i18n.test.mjs
+++ b/src/i18n/i18n.test.mjs
@@ -35,12 +35,18 @@ test('normalizeLocale folds regional variants and rejects unshipped tags', () =>
   assert.equal(normalizeLocale(' RU '), 'ru');
   assert.equal(normalizeLocale('en_GB'), 'en');
   assert.equal(normalizeLocale('xx'), null);
-  // Simplified Chinese by default; Traditional tags wait for zh-TW.
+  // Explicit script tags take precedence over regional defaults.
   assert.equal(normalizeLocale('zh'), 'zh-CN');
   assert.equal(normalizeLocale('zh-CN'), 'zh-CN');
   assert.equal(normalizeLocale('zh-Hans-SG'), 'zh-CN');
-  assert.equal(normalizeLocale('zh-TW'), null);
-  assert.equal(normalizeLocale('zh-Hant-HK'), null);
+  assert.equal(normalizeLocale('zh-Hant'), 'zh-Hant');
+  assert.equal(normalizeLocale(' ZH_hant '), 'zh-Hant');
+  assert.equal(normalizeLocale('zh-TW'), 'zh-Hant');
+  assert.equal(normalizeLocale('zh-Hant-HK'), 'zh-Hant');
+  assert.equal(normalizeLocale('zh-Hans-HK'), 'zh-CN');
+  assert.equal(normalizeLocale('zh-Hant-CN'), 'zh-Hant');
+  assert.equal(normalizeLocale('zh_HK'), 'zh-Hant');
+  assert.equal(normalizeLocale('zh-MO'), 'zh-Hant');
   assert.equal(normalizeLocale(undefined), null);
 });
 
diff --git a/src/i18n/index.js b/src/i18n/index.js
index 48b63b2f6..6fc4becc9 100644
--- a/src/i18n/index.js
+++ b/src/i18n/index.js
@@ -19,8 +19,9 @@ import {
 import es from './locales/es.json' with { type: 'json' };
 import ru from './locales/ru.json' with { type: 'json' };
 import zhCN from './locales/zh-CN.json' with { type: 'json' };
+import zhHant from './locales/zh-Hant.json' with { type: 'json' };
 
-const CATALOGS = Object.freeze({ es, ru, 'zh-CN': zhCN });
+const CATALOGS = Object.freeze({ es, ru, 'zh-CN': zhCN, 'zh-Hant': zhHant });
 
 let currentLocale = DEFAULT_LOCALE;
 
diff --git a/src/i18n/locale.js b/src/i18n/locale.js
index fab95e5cc..55ed71163 100644
--- a/src/i18n/locale.js
+++ b/src/i18n/locale.js
@@ -8,14 +8,15 @@ export const LOCALE_STORAGE_KEY = 'gev:locale:v1';
 export const DEFAULT_LOCALE = 'en';
 
 /** Shipped locales; order does not matter. Adding one: docs/TRANSLATORS.md. */
-export const LOCALES = Object.freeze(['en', 'es', 'ru', 'zh-CN']);
+export const LOCALES = Object.freeze(['en', 'es', 'ru', 'zh-CN', 'zh-Hant']);
 
 /** Each locale named in its own language, for the selector. */
 export const LOCALE_NAMES = Object.freeze({
   en: 'English',
   es: 'Español',
   ru: 'Русский',
-  'zh-CN': '简体中文',
+  'zh-CN': '中文（简体）',
+  'zh-Hant': '中文（繁體）',
 });
 
 /** Right-to-left locales. */
@@ -23,17 +24,19 @@ const RTL_LOCALES = Object.freeze([]);
 
 /**
  * Map any language tag to a shipped locale: 'ru-RU' and 'RU' → 'ru',
- * 'zh', 'zh-CN' and 'zh-Hans-SG' → 'zh-CN'.
+ * 'zh', 'zh-CN' and 'zh-Hans-SG' → 'zh-CN';
+ * 'zh-Hant', 'zh-TW', 'zh-HK' and 'zh-MO' → 'zh-Hant'.
  * @returns {string|null}
  */
 export function normalizeLocale(candidate) {
   if (typeof candidate !== 'string') return null;
   const [primary, ...rest] = candidate.trim().toLowerCase().split(/[-_]/);
-  // Traditional Chinese readers are not given Simplified: no zh-TW yet.
-  if (primary === 'zh')
+  if (primary === 'zh') {
+    if (rest.includes('hans')) return 'zh-CN';
     return rest.some((part) => ['hant', 'tw', 'hk', 'mo'].includes(part))
-      ? null
+      ? 'zh-Hant'
       : 'zh-CN';
+  }
   return LOCALES.includes(primary) ? primary : null;
 }
 
diff --git a/src/i18n/locales/es.json b/src/i18n/locales/es.json
index fd55b2e25..0285917b0 100644
--- a/src/i18n/locales/es.json
+++ b/src/i18n/locales/es.json
@@ -302,9 +302,16 @@
   "CLOUD UNKNOWN": "NUBES DESCONOCIDAS",
   "Panel layout updated — positions reset to new defaults": "Disposición de paneles actualizada — posiciones restablecidas a los nuevos valores predeterminados",
   "Link copied!": "¡Enlace copiado!",
+  "Link shared": "Enlace compartido",
+  "This share link can't be opened": "Este enlace compartido no se puede abrir",
+  "{id} isn't reporting now — showing where it was at {time}": "{id} no está transmitiendo ahora; se muestra dónde estaba a las {time}",
+  "{id} isn't reporting now — showing where it was last seen": "{id} no está transmitiendo ahora; se muestra dónde se vio por última vez",
+  "Shared vessel is unavailable": "El buque compartido no está disponible",
   "Copy failed": "No se pudo copiar",
   "Location not found": "Ubicación no encontrada",
   "Search failed": "No se pudo completar la búsqueda",
+  "Check the spelling and press Enter to search again.": "Revisa la ortografía y pulsa Intro para buscar de nuevo.",
+  "Press Enter to try again.": "Pulsa Intro para intentarlo de nuevo.",
   "Fly to a POI first": "Ve primero a un punto de interés",
   "Clearing selected data layers": "Limpiando las capas de datos seleccionadas",
   "Selected data layers could not be cleared": "No se pudieron limpiar las capas de datos seleccionadas",
@@ -1153,6 +1160,7 @@
   "OpenStreetMap · community mapped": "OpenStreetMap · mapeado por la comunidad",
   "Atlantic and eastern/central North Pacific; not worldwide cyclone coverage.": "Atlántico y Pacífico Norte oriental/central; no es una cobertura mundial de ciclones.",
   "Potential tropical cyclone": "Posible ciclón tropical",
+  "Post-tropical cyclone": "Ciclón postropical",
   "Hurricane": "Huracán",
   "Tropical storm": "Tormenta tropical",
   "Tropical depression": "Depresión tropical",
@@ -1866,11 +1874,15 @@
   "maneuver|Merge": "Incorpórate",
   "Merge onto {road}": "Incorpórate a {road}",
   "Take the ramp on the {direction}": "Toma la rampa {direction}",
+  "Take the ramp {direction}": "Toma la rampa {direction}",
   "Take the ramp on the {direction} onto {road}": "Toma la rampa {direction} hacia {road}",
+  "Take the ramp {direction} onto {road}": "Toma la rampa {direction} hacia {road}",
   "Take the ramp": "Toma la rampa",
   "Take the ramp onto {road}": "Toma la rampa hacia {road}",
   "Take the exit on the {direction}": "Toma la salida {direction}",
+  "Take the exit {direction}": "Toma la salida {direction}",
   "Take the exit on the {direction} onto {road}": "Toma la salida {direction} hacia {road}",
+  "Take the exit {direction} onto {road}": "Toma la salida {direction} hacia {road}",
   "Take the exit": "Toma la salida",
   "Take the exit onto {road}": "Toma la salida hacia {road}",
   "At the roundabout, take the {exit} exit": "En la rotonda, toma la {exit} salida",
@@ -2937,6 +2949,34 @@
   "Gemini Live is unavailable for the configured model.": "Gemini Live no está disponible para el modelo configurado.",
   "Token request is too large": "La solicitud de credencial es demasiado grande",
   "Use an empty JSON token request": "Usa una solicitud de credencial con un objeto JSON vacío",
+  "S2 GhostMaps": "S2 GhostMaps",
+  "Intel Picture": "Panorama de inteligencia",
+  "Kinetic 30d": "Cinético 30 d",
+  "Border Crisis": "Crisis fronteriza",
+  "Iran Picture": "Panorama de Irán",
+  "Iran Kinetic": "Irán cinético",
+  "Yemen FLOT": "FLOT de Yemen",
+  "Latest Drop": "Última publicación",
+  "GhostMaps file could not be read": "No se pudo leer el archivo de GhostMaps",
+  "GhostMaps catalog unavailable": "Catálogo de GhostMaps no disponible",
+  "Malformed GhostMaps catalog": "Catálogo de GhostMaps mal formado",
+  "{count} source links ↗ · click card to open the first": {
+    "one": "{count} enlace a la fuente ↗ · haz clic en la tarjeta para abrirlo",
+    "many": "{count} de enlaces a fuentes ↗ · haz clic en la tarjeta para abrir el primero",
+    "other": "{count} enlaces a fuentes ↗ · haz clic en la tarjeta para abrir el primero"
+  },
+  "S2 · {name}": "S2 · {name}",
+  "Report": "Informe",
+  "Open the source for {title}": "Abrir la fuente de {title}",
+  "LIVE · GitHub {commit} · {message} · checked every {seconds}s": "EN VIVO · GitHub {commit} · {message} · comprobado cada {seconds} s",
+  "GitHub {commit} · {message} · reconnecting for live updates": "GitHub {commit} · {message} · reconectando para recibir actualizaciones en vivo",
+  "Connecting to the S2 GhostMaps repository…": "Conectando con el repositorio S2 GhostMaps…",
+  "{count} placemarks": {
+    "one": "{count} marcador",
+    "many": "{count} de marcadores",
+    "other": "{count} marcadores"
+  },
+  "S2 Underground publishes these KMZ products to GitHub. New uploads are detected within seconds and replace the previous edition automatically. Click a marker for its report.": "S2 Underground publica estos productos KMZ en GitHub. Las nuevas publicaciones se detectan en segundos y sustituyen automáticamente a la edición anterior. Haz clic en un marcador para ver su informe.",
   " Clouds are preserved from the source imagery.": " Las nubes provienen de las imágenes de origen.",
   "hemisphere|N": "N",
   "hemisphere|S": "S",
@@ -2947,5 +2987,19 @@
   "Layers": "Capas",
   "Search": "Buscar",
   "More": "Más",
-  "Panels": "Paneles"
+  "Panels": "Paneles",
+  "Recent speech": "Habla reciente",
+  "Voice Settings": "Ajustes de voz",
+  "Preview": "Vista previa",
+  "Settings": "Ajustes",
+  "Close voice panel": "Cerrar panel de voz",
+  "Show Voice Preview": "Mostrar vista previa de voz",
+  "Voice inactivity timeout": "Tiempo de inactividad de voz",
+  "Custom": "Personalizado",
+  "Minutes": "Minutos",
+  "These preferences stay in this browser.": "Estas preferencias se guardan en este navegador.",
+  "Your choice applies now, but could not be saved.": "Tu elección se aplica ahora, pero no se pudo guardar.",
+  "Voice replies appear here.": "Las respuestas de voz aparecen aquí.",
+  "Preview is off.": "La vista previa está desactivada.",
+  "Automatic stop is unavailable for this voice connection.": "La parada automática no está disponible para esta conexión de voz."
 }
diff --git a/src/i18n/locales/ru.json b/src/i18n/locales/ru.json
index 442312de2..b1c1be229 100644
--- a/src/i18n/locales/ru.json
+++ b/src/i18n/locales/ru.json
@@ -294,6 +294,11 @@
   "Scene run complete": "Воспроизведение сцены завершено",
   "CCTV layer unavailable": "Слой CCTV недоступен",
   "Link copied!": "Ссылка скопирована!",
+  "Link shared": "Ссылка отправлена",
+  "This share link can't be opened": "Не удаётся открыть эту ссылку",
+  "{id} isn't reporting now — showing where it was at {time}": "{id} сейчас не передаёт данные — показано последнее известное место ({time})",
+  "{id} isn't reporting now — showing where it was last seen": "{id} сейчас не передаёт данные — показано последнее известное место",
+  "Shared vessel is unavailable": "Судно по ссылке недоступно",
   "Copy failed": "Не удалось скопировать",
   "VISUAL PRESETS": "ПРЕСЕТЫ",
   "LOCATION": "МЕСТО",
@@ -525,6 +530,8 @@
   "Resetting cockpit to full globe view": "Сброс кабины к виду всего глобуса",
   "Location not found": "Место не найдено",
   "Search failed": "Не удалось выполнить поиск",
+  "Check the spelling and press Enter to search again.": "Проверьте написание и нажмите Enter, чтобы повторить поиск.",
+  "Press Enter to try again.": "Нажмите Enter, чтобы попробовать снова.",
   "MAP": "КАРТА",
   "panel": "панель",
   "Expand {name}": "Развернуть {name}",
@@ -1169,6 +1176,7 @@
   "OpenStreetMap · community mapped": "OpenStreetMap · данные сообщества",
   "Atlantic and eastern/central North Pacific; not worldwide cyclone coverage.": "Атлантика и восточная/центральная часть северного Тихого океана; покрытие циклонов не глобальное.",
   "Potential tropical cyclone": "Потенциальный тропический циклон",
+  "Post-tropical cyclone": "Посттропический циклон",
   "Hurricane": "Ураган",
   "Tropical storm": "Тропический шторм",
   "Tropical depression": "Тропическая депрессия",
@@ -1898,11 +1906,15 @@
   "maneuver|Merge": "Перестройтесь",
   "Merge onto {road}": "Въезжайте на {road}",
   "Take the ramp on the {direction}": "Въезжайте на съезд {direction}",
+  "Take the ramp {direction}": "Въезжайте на съезд {direction}",
   "Take the ramp on the {direction} onto {road}": "Въезжайте по съезду {direction} на {road}",
+  "Take the ramp {direction} onto {road}": "Въезжайте по съезду {direction} на {road}",
   "Take the ramp": "Въезжайте на съезд",
   "Take the ramp onto {road}": "Въезжайте по съезду на {road}",
   "Take the exit on the {direction}": "Сверните на съезд {direction}",
+  "Take the exit {direction}": "Сверните на съезд {direction}",
   "Take the exit on the {direction} onto {road}": "Сверните на съезд {direction} на {road}",
+  "Take the exit {direction} onto {road}": "Сверните на съезд {direction} на {road}",
   "Take the exit": "Сверните на съезд",
   "Take the exit onto {road}": "Сверните на съезд на {road}",
   "At the roundabout, take the {exit} exit": "На кольце сверните на {exit} съезд",
@@ -3004,6 +3016,36 @@
   "Gemini Live is unavailable for the configured model.": "Gemini Live недоступен для выбранной модели.",
   "Token request is too large": "Запрос токена слишком велик",
   "Use an empty JSON token request": "Используйте запрос токена с пустым объектом JSON",
+  "S2 GhostMaps": "S2 GhostMaps",
+  "Intel Picture": "Разведкартина",
+  "Kinetic 30d": "Боевые 30 дн.",
+  "Border Crisis": "Кризис на границе",
+  "Iran Picture": "Иран: картина",
+  "Iran Kinetic": "Иран: боевые",
+  "Yemen FLOT": "Йемен: линия фронта",
+  "Latest Drop": "Новый выпуск",
+  "GhostMaps file could not be read": "Не удалось прочитать файл GhostMaps",
+  "GhostMaps catalog unavailable": "Каталог GhostMaps недоступен",
+  "Malformed GhostMaps catalog": "Повреждённый каталог GhostMaps",
+  "{count} source links ↗ · click card to open the first": {
+    "one": "{count} ссылка на источник ↗ · нажмите на карточку, чтобы открыть",
+    "few": "{count} ссылки на источники ↗ · нажмите на карточку, чтобы открыть первую",
+    "many": "{count} ссылок на источники ↗ · нажмите на карточку, чтобы открыть первую",
+    "other": "{count} ссылки на источники ↗ · нажмите на карточку, чтобы открыть первую"
+  },
+  "S2 · {name}": "S2 · {name}",
+  "Report": "Сводка",
+  "Open the source for {title}": "Открыть источник: {title}",
+  "LIVE · GitHub {commit} · {message} · checked every {seconds}s": "В ЭФИРЕ · GitHub {commit} · {message} · проверка каждые {seconds} с",
+  "GitHub {commit} · {message} · reconnecting for live updates": "GitHub {commit} · {message} · переподключение для обновлений в реальном времени",
+  "Connecting to the S2 GhostMaps repository…": "Подключение к репозиторию S2 GhostMaps…",
+  "{count} placemarks": {
+    "one": "{count} метка",
+    "few": "{count} метки",
+    "many": "{count} меток",
+    "other": "{count} метки"
+  },
+  "S2 Underground publishes these KMZ products to GitHub. New uploads are detected within seconds and replace the previous edition automatically. Click a marker for its report.": "S2 Underground публикует эти продукты KMZ на GitHub. Новые файлы обнаруживаются за секунды и автоматически заменяют предыдущий выпуск. Нажмите на метку, чтобы открыть её сводку.",
   " Clouds are preserved from the source imagery.": " Облака оставлены такими, как на исходных снимках.",
   "hemisphere|N": "С",
   "hemisphere|S": "Ю",
@@ -3014,5 +3056,19 @@
   "Layers": "Слои",
   "Search": "Поиск",
   "More": "Ещё",
-  "Panels": "Панели"
+  "Panels": "Панели",
+  "Recent speech": "Недавняя речь",
+  "Voice Settings": "Настройки голоса",
+  "Preview": "Предпросмотр",
+  "Settings": "Настройки",
+  "Close voice panel": "Закрыть голосовую панель",
+  "Show Voice Preview": "Показывать предпросмотр голоса",
+  "Voice inactivity timeout": "Тайм-аут бездействия голоса",
+  "Custom": "Другое",
+  "Minutes": "Минуты",
+  "These preferences stay in this browser.": "Эти настройки сохраняются в этом браузере.",
+  "Your choice applies now, but could not be saved.": "Ваш выбор применён, но сохранить его не удалось.",
+  "Voice replies appear here.": "Здесь появляются голосовые ответы.",
+  "Preview is off.": "Предпросмотр отключён.",
+  "Automatic stop is unavailable for this voice connection.": "Автоматическая остановка недоступна для этого голосового подключения."
 }
diff --git a/src/i18n/locales/zh-CN.json b/src/i18n/locales/zh-CN.json
index fa08cca1f..9bf76700c 100644
--- a/src/i18n/locales/zh-CN.json
+++ b/src/i18n/locales/zh-CN.json
@@ -530,6 +530,7 @@
   "Cyclone advisories unavailable": "气旋公告不可用",
   "Cyclone data unavailable": "气旋数据不可用",
   "Potential tropical cyclone": "潜在热带气旋",
+  "Post-tropical cyclone": "后热带气旋",
   "Hurricane": "飓风",
   "Tropical storm": "热带风暴",
   "Tropical depression": "热带低压",
@@ -625,11 +626,15 @@
   "Merge onto {road}": "并入 {road}",
   "maneuver|Merge": "并道",
   "Take the ramp on the {direction} onto {road}": "{direction}驶入匝道，进入 {road}",
+  "Take the ramp {direction} onto {road}": "{direction}驶入匝道，进入 {road}",
   "Take the ramp on the {direction}": "{direction}驶入匝道",
+  "Take the ramp {direction}": "{direction}驶入匝道",
   "Take the ramp onto {road}": "驶入匝道，进入 {road}",
   "Take the ramp": "驶入匝道",
   "Take the exit on the {direction} onto {road}": "从出口{direction}驶出，进入 {road}",
+  "Take the exit {direction} onto {road}": "从出口{direction}驶出，进入 {road}",
   "Take the exit on the {direction}": "从出口{direction}驶出",
+  "Take the exit {direction}": "从出口{direction}驶出",
   "Take the exit onto {road}": "从出口驶出，进入 {road}",
   "Take the exit": "从出口驶出",
   "At the roundabout, take the {exit} exit onto {road}": "在环岛从{exit}出口驶出，进入 {road}",
@@ -1472,6 +1477,11 @@
   "LIVE SIGNALS": "实时信号",
   "CCTV layer unavailable": "CCTV 图层不可用",
   "Link copied!": "链接已复制！",
+  "Link shared": "链接已分享",
+  "This share link can't be opened": "无法打开此分享链接",
+  "{id} isn't reporting now — showing where it was at {time}": "{id} 目前没有发送信号——显示其在 {time} 的位置",
+  "{id} isn't reporting now — showing where it was last seen": "{id} 目前没有发送信号——显示其最后出现的位置",
+  "Shared vessel is unavailable": "分享的船只不可用",
   "Copy failed": "复制失败",
   "Return map to straight-down view": "将地图恢复为垂直俯视",
   "Tilt map to oblique view": "将地图倾斜至斜视角",
@@ -1809,6 +1819,8 @@
   "ORBIT": "环绕",
   "Location not found": "未找到位置",
   "Search failed": "搜索失败",
+  "Check the spelling and press Enter to search again.": "请检查拼写，然后按 Enter 重新搜索。",
+  "Press Enter to try again.": "按 Enter 重试。",
   "Detailed outline unavailable": "无法获取详细轮廓",
   "Fly to a POI first": "请先飞往一个 POI",
   "Reset to full globe view": "重置为完整地球视图",
@@ -2813,5 +2825,43 @@
   "Layers": "图层",
   "Search": "搜索",
   "More": "更多",
-  "Panels": "面板"
+  "Panels": "面板",
+  "Recent speech": "最近语音",
+  "Voice Settings": "语音设置",
+  "Preview": "预览",
+  "Settings": "设置",
+  "Close voice panel": "关闭语音面板",
+  "Show Voice Preview": "显示语音预览",
+  "Voice inactivity timeout": "语音空闲超时",
+  "Custom": "自定义",
+  "Minutes": "分钟",
+  "These preferences stay in this browser.": "这些偏好设置仅保存在此浏览器中。",
+  "Your choice applies now, but could not be saved.": "选择已生效，但无法保存。",
+  "Voice replies appear here.": "语音回复显示在此处。",
+  "Preview is off.": "预览已关闭。",
+  "Automatic stop is unavailable for this voice connection.": "此语音连接不支持自动停止。",
+  "S2 GhostMaps": "S2 GhostMaps",
+  "Intel Picture": "情报态势图",
+  "Kinetic 30d": "近 30 天军事行动",
+  "Border Crisis": "边境危机",
+  "Iran Picture": "伊朗态势图",
+  "Iran Kinetic": "伊朗军事行动",
+  "Yemen FLOT": "也门前线",
+  "Latest Drop": "最新发布",
+  "GhostMaps file could not be read": "无法读取 GhostMaps 文件",
+  "GhostMaps catalog unavailable": "GhostMaps 目录不可用",
+  "Malformed GhostMaps catalog": "GhostMaps 目录格式无效",
+  "{count} source links ↗ · click card to open the first": {
+    "other": "{count} 个来源链接 ↗ · 点击卡片打开第一个"
+  },
+  "S2 · {name}": "S2 · {name}",
+  "Report": "报告",
+  "Open the source for {title}": "打开 {title} 的来源",
+  "LIVE · GitHub {commit} · {message} · checked every {seconds}s": "实时 · GitHub {commit} · {message} · 每 {seconds} 秒检查一次",
+  "GitHub {commit} · {message} · reconnecting for live updates": "GitHub {commit} · {message} · 正在重新连接以获取实时更新",
+  "Connecting to the S2 GhostMaps repository…": "正在连接 S2 GhostMaps 仓库…",
+  "{count} placemarks": {
+    "other": "{count} 个地标"
+  },
+  "S2 Underground publishes these KMZ products to GitHub. New uploads are detected within seconds and replace the previous edition automatically. Click a marker for its report.": "S2 Underground 在 GitHub 发布这些 KMZ 产品。新上传的内容会在数秒内被检测到，并自动替换旧版本。点击标记查看报告。"
 }
diff --git a/src/i18n/locales/zh-Hant.json b/src/i18n/locales/zh-Hant.json
new file mode 100644
index 000000000..d95a18e39
--- /dev/null
+++ b/src/i18n/locales/zh-Hant.json
@@ -0,0 +1,2867 @@
+{
+  "Pick a shape, then click the map.": "先選擇形狀，再在地圖上點擊。",
+  "Enter to place the pin, Esc to cancel.": "按 Enter 放置圖釘，按 Esc 取消。",
+  "Click where the pin goes.": "點擊圖釘的放置位置。",
+  "Click {count} more points.": {
+    "other": "再點擊 {count} 個點。"
+  },
+  "Those points are in a line — move one off it to enclose an area.": "這些點都在同一條直線上——請移開其中一個點才能圍出區域。",
+  "That line has no length — click somewhere further away.": "這條線沒有長度——請在更遠處點擊。",
+  " · {max}-point limit reached": " · 已達 {max} 個點上限",
+  "{measure} · double-click or Enter to finish, Backspace undoes, Esc cancels.{full}": "{measure} · 雙擊或按 Enter 完成，按 Backspace 撤銷，按 Esc 取消。{full}",
+  "drawings on the map": "地圖上的繪圖",
+  "That shape already has {count} points — finish it or press Backspace.": "該形狀已有 {count} 個點——請完成繪製或按 Backspace。",
+  "That point is off the globe — click on the world.": "該點在地球之外——請點擊地球上的位置。",
+  "That shape could not be placed.": "該形狀無法放置。",
+  "Could not place the shape: {error}": "無法放置形狀：{error}",
+  "Board cleared.": "畫板已清除。",
+  "{owner} is using the pointer — close it first.": "{owner} 正在使用指針——請先關閉它。",
+  "{label} · Detailed outline unavailable": "{label} · 無法獲取詳細輪廓",
+  "Flying to Austin, TX...": "正在飛往德克薩斯州奧斯汀…",
+  "Restoring shared view...": "正在恢復分享視圖…",
+  "Configuring viewer...": "正在配置視圖…",
+  "Loading Google 3D Tiles...": "正在加載 Google 3D Tiles…",
+  "Loading the keyless globe...": "正在加載免密鑰地球…",
+  "Google 3D Tiles unavailable ({detail}). Loading the keyless globe...": "Google 3D Tiles 不可用（{detail}）。正在加載免密鑰地球…",
+  "Initializing systems...": "正在初始化系統…",
+  "Space Missions isolates replay data. Exit the mode to enable {layer}.": "太空任務模式會隔離回放數據。退出該模式後才能啟用“{layer}”。",
+  "Data attribution": "數據來源說明",
+  "Data provided by:": "數據提供方：",
+  "Close data attribution": "關閉數據來源說明",
+  "Light aircraft": "輕型飛機",
+  "Glider": "滑翔機",
+  "Turboprop": "渦槳飛機",
+  "Airliner": "民航客機",
+  "Widebody": "寬體機",
+  "Four-engine jet": "四發噴氣機",
+  "Helicopter": "直升機",
+  "Fast jet": "噴氣戰機",
+  "Business jet": "公務機",
+  "Drone": "無人機",
+  "General emergency": "一般緊急情況",
+  "Unlawful interference": "非法干擾",
+  "Radio failure": "無線電失效",
+  "Downed aircraft": "飛機墜毀",
+  "Minimum fuel": "最低油量",
+  "Lifeguard (medical priority)": "救護飛行（醫療優先）",
+  "Rasuwagadhi witness video": "Rasuwagadhi 目擊視頻",
+  "Bhote Koshi valley footage": "Bhote Koshi 河谷畫面",
+  "Flood footage": "洪水畫面",
+  "Compilation and casualty claims": "視頻合集與傷亡說法",
+  "SOURCE GEOCONFIRMED · WORLD-PINNED": "來源位置已核實 · 已在地圖上標註",
+  "SOURCE CREDITED · LOCATION UNRESOLVED": "來源已署名 · 位置未確定",
+  "REFERENCE ONLY · CLAIMS UNVERIFIED": "僅供參考 · 說法未核實",
+  "SOURCE GEOCONFIRMED": "來源位置已核實",
+  "2021 historical reference versus 2026 post-event imagery; changes are cumulative and include the July 2025 Rasuwagadhi flood. Schematic downstream progression, not modeled arrival time; not an official hazard model.": "2021 年歷史參考影像與 2026 年災後影像對比；變化為累計結果，包含 2025 年 7 月的 Rasuwagadhi 洪水。下游演進為示意，並非模擬的到達時間；也不是官方災害模型。",
+  "Immediate collapse viewpoint": "近距離崩塌觀察點",
+  "Collapse viewpoint": "崩塌觀察點",
+  "Debris-dammed lake": "碎屑堰塞湖",
+  "Dammed lake": "堰塞湖",
+  "Second landslide": "第二次滑坡",
+  "Gyirong border gate": "Gyirong 邊境口岸",
+  "Border gate": "邊境口岸",
+  "Timure evidence cluster": "Timure 證據群",
+  "Mailung / Upper Trishuli bridge": "Mailung / Upper Trishuli 橋",
+  "Dandagaun viewpoint restaurant": "Dandagaun 觀景餐廳",
+  "Dandagaun viewpoint": "Dandagaun 觀景點",
+  "Bidur - Trishuli bridge": "Bidur - Trishuli 橋",
+  "Bidur bridge": "Bidur 橋",
+  "Devighat / Taadi Khola Bridge": "Devighat / Taadi Khola 橋",
+  "Devighat bridge": "Devighat 橋",
+  "Facebook player API did not initialize.": "Facebook 播放器 API 未能初始化。",
+  "Facebook player API could not load.": "無法加載 Facebook 播放器 API。",
+  "Facebook player API timed out.": "Facebook 播放器 API 超時。",
+  "X embed API did not initialize.": "X 嵌入 API 未能初始化。",
+  "X embed could not load.": "無法加載 X 嵌入內容。",
+  "X embed timed out.": "X 嵌入內容超時。",
+  "UNAVAILABLE": "不可用",
+  "TIMEOUT": "超時",
+  "BLOCKED": "被攔截",
+  "SOURCE": "來源",
+  "Facebook embed unavailable. The post may be private, removed, region-restricted, or blocked.": "Facebook 嵌入內容不可用。該帖子可能為私密、已刪除、受地區限制或被攔截。",
+  "Preloading {provider} media": "正在預加載 {provider} 媒體",
+  "LOADING X POST…": "正在加載 X 帖子…",
+  "The X post is unavailable or cannot be embedded.": "該 X 帖子不可用或無法嵌入。",
+  "X POST · PROVIDER CONTROLS": "X 帖子 · 平臺控件",
+  "{reason} OPEN ORIGINAL.": "{reason} 請打開原始來源。",
+  "X embed unavailable": "X 嵌入內容不可用。",
+  "FACEBOOK · PROVIDER CONTROLS": "FACEBOOK · 平臺控件",
+  "Facebook embed unavailable": "Facebook 嵌入內容不可用。",
+  "AUTOPLAY BLOCKED · USE PROVIDER CONTROLS": "自動播放被攔截 · 請使用平臺控件",
+  "Embedded {provider} media for {source}": "{source} 的嵌入 {provider} 媒體",
+  "witness source": "目擊來源",
+  "Witness source": "目擊來源",
+  "{provider} · EMBEDDED SOURCE": "{provider} · 嵌入來源",
+  "OPEN ORIGINAL ↗": "打開原始來源 ↗",
+  "{provider} media: {source}": "{provider} 媒體：{source}",
+  "{provider} · PROVIDER CONTROLS": "{provider} · 平臺控件",
+  "YOUTUBE {state} · OPEN ORIGINAL": "YOUTUBE {state} · 打開原始來源",
+  "INITIATION": "起始",
+  "DAMMING": "堰塞",
+  "SECONDARY FAILURE": "第二次滑坡",
+  "BORDER ARRIVAL": "抵達邊境",
+  "PROPAGATION": "演進",
+  "DOWNSTREAM PASSAGE": "向下游推進",
+  "CONSEQUENCE": "後果",
+  "DOWNSTREAM CONSEQUENCE": "下游後果",
+  "EVIDENCE": "證據",
+  "{year} HISTORICAL REFERENCE": "{year} 年歷史參考",
+  "{year} POST-EVENT": "{year} 年災後",
+  "{count} GEOLOCATED SOURCE-MAP PLACEMENTS": {
+    "other": "{count} 個地理定位來源點位"
+  },
+  "NO PREVIEW": "無預覽",
+  "YouTube source": "YouTube 來源",
+  "Facebook source": "Facebook 來源",
+  "SOURCE LINK": "來源鏈接",
+  "{publisher} / OPEN": "{publisher} / 打開",
+  "Bhote Koshi flood reconstruction controls": "Bhote Koshi 洪水重構控制",
+  "EVENT RECONSTRUCTION · 26 AUG 2026": "事件重構 · 2026-08-26",
+  "BHOTE KOSHI OUTBURST FLOOD": "BHOTE KOSHI 潰決洪水",
+  "Close event layer": "關閉事件圖層",
+  "OBSERVED IMAGERY": "觀測影像",
+  "SCHEMATIC CORRIDOR": "示意走廊",
+  "2021 HISTORICAL REFERENCE / 2026 POST-EVENT": "2021 年歷史參考 / 2026 年災後",
+  "Historical reference and post-event image split": "歷史參考與災後影像的分割",
+  "RECONSTRUCTION CLOCK": "重構時鐘",
+  "Schematic downstream progression": "下游演進示意",
+  "Story beat navigation": "事件節點導航",
+  "Previous story beat": "上一個事件節點",
+  "CAUSE": "成因",
+  "CAPTURE TIME UNVERIFIED": "拍攝時間未核實",
+  "Next story beat": "下一個事件節點",
+  "▶ PLAY": "▶ 播放",
+  "Play the next shot and continue through this scene": "播放下一個鏡頭，繼續播放整個場景",
+  "▶ PLAY SCENE": "▶ 播放場景",
+  "◉ CINEMATIC": "◉ 運鏡",
+  "↺ FULL STORY": "↺ 完整故事",
+  "↗ OPEN ORIGINAL": "↗ 打開原始來源",
+  "⌖ LOWER GORGE": "⌖ 下游峽谷",
+  "FIELD REPORTS · {count}": "現場報道 · {count}",
+  "GEOLOCATIONS · {credit}": "地理定位 · {credit}",
+  "↗ OPEN PUBLIC MAP": "↗ 打開公共地圖",
+  " Clouds are preserved from the source imagery.": "雲層按源影像原樣保留。",
+  "Rasuwagadhi witness": "Rasuwagadhi 目擊者",
+  "Open original source for {source}; capture time unverified": "打開 {source} 的原始來源；拍攝時間未核實",
+  "Historical reference and post-event image divider": "歷史參考與災後影像的分割線",
+  "A historical reference {before} percent, B post-event {after} percent": "A 歷史參考 {before}%，B 災後 {after}%",
+  "■ RELEASE CAMERA": "■ 釋放相機",
+  "Seek Nepal scene clock": "定位尼泊爾場景時鐘",
+  "NEPAL SCENE CLOCK": "尼泊爾場景時鐘",
+  "… PLAYING SHOT": "… 鏡頭播放中",
+  "▶ PLAY SHOT": "▶ 播放鏡頭",
+  "Ⅱ PAUSE": "Ⅱ 暫停",
+  "↺ REPLAY CINEMATIC": "↺ 重播運鏡",
+  "↺ REPLAY": "↺ 重播",
+  "… PLAYING SCENE": "… 場景播放中",
+  "Continue {scene} from next shot": "從下一鏡頭繼續播放 {scene}",
+  "current scene": "當前場景",
+  "Replay the full reconstruction": "重播完整重構",
+  "SCENE SHOT": "場景鏡頭",
+  "TIME UNVERIFIED": "拍攝時間未核實",
+  "{count} SOURCES": {
+    "other": "{count} 個來源"
+  },
+  "OUTSIDE IMAGERY SWIPE": "不在影像對比範圍內",
+  "{scene} / AUTHORED SHOT": "{scene} / 編排鏡頭",
+  "NEPAL FLOOD INCIDENT": "尼泊爾洪水事件",
+  "Play {shot}": "播放 {shot}",
+  "current scene shot": "當前場景鏡頭",
+  "Play reconstruction": "播放重構",
+  "Load previous scene shot": "加載上一個場景鏡頭",
+  "Load next scene shot": "加載下一個場景鏡頭",
+  "SCHEMATIC CORRIDOR, NOT MODELED ARRIVAL TIME.": "示意走廊，並非模擬的到達時間。",
+  "Rasuwa · 26 Aug 2026": "Rasuwa · 2026-08-26",
+  "Event reconstruction": "事件重構",
+  "BHOTE KOSHI FLOOD INCIDENT": "BHOTE KOSHI 洪水事件",
+  "NEPAL · 26 AUG 2026": "尼泊爾 · 2026-08-26",
+  "USGS INITIAL REPORT": "USGS 初始報告",
+  "26 AUG 2026 · 08:37 NPT": "2026-08-26 · 08:37 NPT",
+  "28.2710° N · 85.5150° E": "北緯 28.2710° · 東經 85.5150°",
+  "INITIAL M4.4 · RECLASSIFIED M5.2 LANDSLIDE": "初報 M4.4 · 重新歸類為 M5.2 滑坡",
+  "USGS EVENT us7000tbwb · OPEN SOURCE": "USGS 事件 us7000tbwb · 打開來源",
+  "Open the USGS initial report for the 26 August 2026 Nepal landslide": "打開 USGS 關於 2026 年 8 月 26 日尼泊爾滑坡的初始報告",
+  "Show the Nepal context callout without a border or country fill": "顯示尼泊爾背景標註，不繪製邊界和國家填充",
+  "Introduce Nepal, draw its border, then reveal the Bhote Koshi incident": "介紹尼泊爾，繪製其邊界，再展示 Bhote Koshi 事件",
+  "CITIES": "城市",
+  "Keep the regional incident context and introduce nearby city labels": "保留區域事件背景，並加入附近城市標註",
+  "PLACES": "地點",
+  "Introduce the reconstruction scene key places from trigger to downstream": "依次介紹重構場景的關鍵地點，從觸發點到下游",
+  "PATH": "路徑",
+  "Animate the sourced cyan river-centerline route to Trishuli Bazaar": "以動畫展示有來源依據的青色河道中線路徑，直至 Trishuli Bazaar",
+  "OVERVIEW": "總覽",
+  "Keep the completed flood path and location labels visible": "保持完整的洪水路徑和地點標註可見",
+  "RECORD": "記錄",
+  "Reveal the trigger record while making a slow camera approach": "鏡頭緩慢推近，同時展示觸發事件記錄",
+  "{speed} kn": "{speed} kn",
+  "That file is not valid JSON.": "該文件不是有效的 JSON。",
+  "That JSON file is not GeoJSON.": "該 JSON 文件不是 GeoJSON。",
+  "That FeatureCollection has no features list.": "該 FeatureCollection 沒有 features 列表。",
+  "Every GeoJSON feature must have type Feature.": "每個 GeoJSON 要素的類型都必須是 Feature。",
+  "That GeoJSON has invalid geometries.": "該 GeoJSON 包含無效的幾何圖形。",
+  "That GeoJSON contains an unsupported geometry.": "該 GeoJSON 包含不受支持的幾何圖形。",
+  "That GeoJSON has invalid coordinates.": "該 GeoJSON 包含無效座標。",
+  "That file creates more than {limit} map objects (the limit).": "該文件生成的地圖對象超過上限 {limit} 個。",
+  "That file has more than {limit} style definitions and image links after cleanup (the limit).": "清理後，該文件的樣式定義和圖像鏈接仍超過上限 {limit} 個。",
+  "That file has more than {limit} features (the limit).": "該文件的要素超過上限 {limit} 個。",
+  "That file has more than {limit} points (the limit) across {features} features.": "該文件的點數超過上限 {limit} 個（共 {features} 個要素）。",
+  "That file has more than {limit} points (the limit).": "該文件的點數超過上限 {limit} 個。",
+  "That KMZ unpacks to more than the import limit.": "該 KMZ 解壓後超過導入上限。",
+  "That KMZ is damaged and could not be unpacked.": "該 KMZ 已損壞，無法解壓。",
+  "That KMZ is not a readable zip archive.": "該 KMZ 不是可讀取的 zip 壓縮包。",
+  "That KMZ uses a zip format this import does not read.": "該 KMZ 使用的 zip 格式無法導入。",
+  "That KMZ is encrypted.": "該 KMZ 已加密。",
+  "That KMZ uses a compression method this import does not read.": "該 KMZ 使用的壓縮方式無法導入。",
+  "That KML has invalid geometry bounds.": "該 KML 的幾何範圍無效。",
+  "That KML has invalid coordinates.": "該 KML 包含無效座標。",
+  "That GPX file has no <gpx> document.": "該 GPX 文件沒有 <gpx> 文檔。",
+  "That {format} file is not valid XML.": "該 {format} 文件不是有效的 XML。",
+  "That file has an unreadable image or exceeds the 16-megapixel image limit.": "該文件包含無法讀取的圖像，或圖像超過 1600 萬像素上限。",
+  "That KML could not be read.": "無法讀取該 KML。",
+  "That file has invalid point coordinates.": "該文件的點座標無效。",
+  "Ground heights are not available for that file. Try again when the map has loaded.": "無法獲取該文件的地面高度。請在地圖加載完成後重試。",
+  "That file took too long to read.": "讀取該文件耗時過長。",
+  "Nothing to import.": "沒有可導入的內容。",
+  "That file is larger than {size} MiB.": "該文件大於 {size} MiB。",
+  "Only GeoJSON, KML, KMZ and GPX files can be imported.": "只能導入 GeoJSON、KML、KMZ 和 GPX 文件。",
+  "That file has nothing to draw.": "該文件沒有可在地圖上繪製的內容。",
+  "That KMZ holds no KML document.": "該 KMZ 中沒有 KML 文檔。",
+  "That {format} file could not be read.": "無法讀取該 {format} 文件。",
+  "That file has {count} map objects; the limit is {limit}.": "該文件有 {count} 個地圖對象，上限為 {limit} 個。",
+  "Ground heights could not be read. Try that file again.": "無法讀取地面高度。請重新導入該文件。",
+  "That file has invalid point graphics.": "該文件的點樣式無效。",
+  "Overpass rate-limited": "Overpass 已被限流",
+  "Overpass timed out": "Overpass 超時",
+  "Overpass could not complete the query": "Overpass 無法完成查詢",
+  "Map tiles temporarily unavailable": "地圖瓦片暫時不可用",
+  "Mapped names temporarily unavailable": "地點名稱暫時不可用",
+  "Overpass temporarily unavailable": "Overpass 暫時不可用",
+  "Retrying mapped sites…": "正在重試加載地圖標註設施…",
+  "Fetching mapped sites…": "正在獲取地圖標註設施…",
+  "{reason} — retrying in {seconds}s": "{reason}——{seconds} 秒後重試",
+  "{reason} — retry pending": "{reason}——等待重試",
+  "Zoom in to search mapped installations": "請放大地圖以搜索地圖標註的設施",
+  "Showing cached mapped sites": "正在顯示緩存的地圖標註設施",
+  "Mapped sites not loaded": "地圖標註設施未加載",
+  "Mapped sites loaded": "已加載地圖標註設施",
+  "Military airfield": "軍用機場",
+  "Naval base": "海軍基地",
+  "Firing range": "靶場",
+  "Military land": "軍事用地",
+  "Mapped installation": "地圖標註設施",
+  "Military area": "軍事區域",
+  "flight": "航班",
+  "military flight": "軍用航班",
+  "satellite": "衛星",
+  "feed unavailable": "數據源不可用",
+  "feed stale": "數據源過期",
+  "observed or mapped nearby context": "附近的觀測或地圖標註態勢",
+  "no observed or mapped objects in current feeds": "當前數據源中沒有觀測或地圖標註的對象",
+  "Draw": "繪製",
+  "Directions": "路線導航",
+  "Recent imagery": "近期影像",
+  "STATION": "空間站",
+  "Crewed stations and their visiting vehicles": "載人空間站及其來訪航天器",
+  "NAV": "導航",
+  "GNSS navigation — GPS, GLONASS, Galileo": "GNSS 導航：GPS、GLONASS、Galileo",
+  "GEO": "GEO",
+  "Geostationary belt — comms and weather, fixed over the equator": "地球靜止軌道帶：通信和氣象，固定在赤道上空",
+  "VISUAL": "目視可見",
+  "Brightest naked-eye objects — CelesTrak visual group": "最亮的肉眼可見天體：CelesTrak visual 組",
+  "COMMS": "通信",
+  "Broadband constellation shell — shown only in DENSE mode": "寬帶星座殼層——僅在“密集”模式下顯示",
+  "FISHING": "漁船",
+  "TOWING": "拖帶",
+  "DREDGER": "挖泥船",
+  "DIVE OPS": "潛水作業",
+  "MILITARY": "軍用",
+  "SAILING": "帆船",
+  "PLEASURE": "遊艇",
+  "PILOT": "引航",
+  "SAR": "搜救",
+  "TUG": "拖輪",
+  "PORT TENDER": "港口供應船",
+  "ANTI-POLLUTION": "防汙染",
+  "LAW ENFORCE": "執法",
+  "MEDICAL": "醫療",
+  "HIGH-SPEED": "高速",
+  "PASSENGER": "客船",
+  "CARGO": "貨船",
+  "TANKER": "油輪",
+  "OTHER": "其他",
+  "Included in bundle": "已包含在資源包中",
+  "Missing bundle file — reimport its bundle": "缺少資源包文件——請重新導入其資源包",
+  "Source configured; file checked when loaded": "數據源已配置；文件在加載時校驗",
+  "Source unavailable": "數據源不可用",
+  "ENVIRONMENTAL": "環境",
+  "EARTH WATCH": "地球監測",
+  "ACTIVE EVENTS": "活躍事件",
+  "Starting live contacts…": "正在接入實時目標…",
+  "Opening space missions…": "正在打開太空任務…",
+  "Scanning active events…": "正在掃描活躍事件…",
+  "Live earthquakes and active fires, from USGS and NASA": "來自 USGS 和 NASA 的實時地震與活躍火點",
+  "It feels like a forbidden cockpit—then you realize the sources are public and the data is real.": "彷彿闖進了一個機密座艙——隨後你會發現，數據來源全部公開，數據全部真實。",
+  "Working…": "處理中…",
+  "Could not open that mission{detail}. Retry or explore manually.": "無法打開該任務{detail}。請重試或手動探索。",
+  "This browser is blocking storage, so that could not be saved.": "此瀏覽器阻止了存儲，因此無法保存。",
+  "NORMAL": "常規",
+  "CRT": "CRT",
+  "NVG": "NVG",
+  "FLIR": "FLIR",
+  "ANIME": "動漫",
+  "NOIR": "黑白",
+  "SNOW": "雪景",
+  "ARCTIC": "北極",
+  "ANTARCTIC": "南極",
+  "NORTH AMERICA": "北美洲",
+  "SOUTH AMERICA": "南美洲",
+  "EUROPE": "歐洲",
+  "AFRICA": "非洲",
+  "ASIA": "亞洲",
+  "OCEANIA": "大洋洲",
+  "NORTHERN OCEANIC GRID": "北方海洋網格",
+  "SOUTHERN OCEANIC GRID": "南方海洋網格",
+  "LOADING": "加載中",
+  "DEGRADED": "降級",
+  "STALE": "過期",
+  "PARTIAL": "部分",
+  "FALLBACK": "備用",
+  "{state} {layers}": "{state} {layers}",
+  "view band|STREET": "街道",
+  "view band|CITY": "城市",
+  "view band|METRO": "都市圈",
+  "view band|REGIONAL": "區域",
+  "view band|GLOBAL": "全球",
+  "SUMMARY": "摘要",
+  "Awaiting telemetry...": "等待遙測數據…",
+  "REC": "REC",
+  "AIS: --": "AIS: --",
+  "N/A": "無",
+  "{mode} {band} {locality} | {region} | ALT {alt} | WINDOW {window} | SUN {sun}° | ONA {ona}° | {zone}": "{mode} {band} {locality} | {region} | ALT {alt} | 窗口 {window} | SUN {sun}° | ONA {ona}° | {zone}",
+  "NEAR {poi} ({city}) {distance}": "{poi}（{city}）附近 {distance}",
+  "SECTOR {lat} {lon}": "扇區 {lat} {lon}",
+  "N": "北",
+  "S": "南",
+  "E": "東",
+  "W": "西",
+  "POWER UP · {count} KEYS WAITING": {
+    "other": "增強 · {count} 個密鑰待配置"
+  },
+  "POWERED UP": "已增強",
+  "Provider Settings does not answer proxied requests": "服務商設置不響應經代理的請求",
+  "Provider Settings is disabled while sharing is enabled": "啟用分享時，服務商設置不可用",
+  "Provider Settings answers only the machine running the server": "服務商設置僅響應運行服務器的那臺機器",
+  "Provider Settings answers only local hostnames": "服務商設置只響應本地主機名",
+  "Provider Settings requires an exact local Origin": "服務商設置要求完全匹配的本地 Origin",
+  "Unrecognized Origin refused": "已拒絕無法識別的 Origin",
+  "Cross-origin requests are refused": "拒絕跨源請求",
+  "Content-Type must be application/json": "Content-Type 必須為 application/json",
+  "Method not allowed": "不允許的方法",
+  "Request too large": "請求過大",
+  "Invalid JSON": "無效的 JSON",
+  "Body must be a JSON object of {ENV_VAR: value}": "請求體必須是 {ENV_VAR: value} 形式的 JSON 對象",
+  "No keys provided": "未提供密鑰",
+  "At most {limit} keys per save": "每次最多保存 {limit} 個密鑰",
+  "Unknown key: {name}": "未知密鑰：{name}",
+  "{name} must be a string": "{name} 必須是字符串",
+  "{name} is empty": "{name} 為空",
+  "{name} is longer than any real key ({limit} max)": "{name} 比任何真實密鑰都長（最多 {limit} 個字符）",
+  "{name} may only contain printable characters with no spaces": "{name} 只能包含可打印字符，且不能有空格",
+  "{name} contains a character that is not valid in a key (#, quotes, $, \\, or backtick)": "{name} 包含密鑰中不允許的字符（#、引號、$、\\ 或反引號）",
+  "{name} is configured outside Provider Settings and can only be changed where it was set": "{name} 是在服務商設置之外配置的，只能在原設置處修改",
+  "The key was not saved: could not restrict the credential file to your account; nothing was saved": "密鑰未保存：無法將憑據文件限制為僅你的賬戶可訪問；未保存任何內容",
+  "The key was not saved: the existing configuration could not be read, so nothing was changed": "密鑰未保存：無法讀取現有配置，因此未做任何更改",
+  "Could not write the {store} store": "無法寫入 {store} 存儲",
+  "Save failed ({status}).": "保存失敗（{status}）。",
+  "OAuth check failed: {detail}": "OAuth 檢查失敗：{detail}",
+  "Could not check ChatGPT sign-in. Try again.": "無法檢查 ChatGPT 登錄狀態，請重試。",
+  "VOICE AUTH · CHATGPT OAUTH": "語音認證 · CHATGPT OAUTH",
+  "VOICE AUTH · API KEY": "語音認證 · API 密鑰",
+  "USE API KEY": "使用 API 密鑰",
+  "USE CHATGPT OAUTH": "使用 CHATGPT OAUTH",
+  "Use OPENAI_API_KEY for the next cloud voice session": "下次雲語音會話使用 OPENAI_API_KEY",
+  "Use the signed-in local ChatGPT/Codex OAuth session for the next cloud voice session": "下次雲語音會話使用本機已登錄的 ChatGPT/Codex OAuth 會話",
+  "Metered — a billing-enabled account": "按量計費——需要啟用結算的賬號",
+  "Optional paid token — public access works without one": "可選的付費令牌——無需令牌也可公開訪問",
+  "Free key — register, paste, done": "免費密鑰——註冊、粘貼，即可使用",
+  "browser-side": "瀏覽器端",
+  "This key runs in the browser by design — restrict it at the provider (see SECURITY.md)": "此密鑰設計上就在瀏覽器中運行——請在服務商處設置限制（見 SECURITY.md）",
+  "configured externally": "由外部配置",
+  "Supplied by your environment, Keychain, or launcher — change it where it was set": "由你的環境、鑰匙串或啟動器提供——請在原設置處修改",
+  "MANAGE ↗": "管理 ↗",
+  "GET KEY ↗": "獲取密鑰 ↗",
+  "{envVar} saved — paste to replace": "{envVar} 已保存——粘貼可替換",
+  "paste {envVar}": "粘貼 {envVar}",
+  "REMOVE": "移除",
+  "Remove {title} from this app's saved keys": "從本應用已保存的密鑰中移除 {title}",
+  "unsaved provider keys": "未保存的服務商密鑰",
+  "Project keys: {status}": "項目密鑰：{status}",
+  "your app configuration": "你的應用配置",
+  "your local .env": "你的本地 .env",
+  "Saving…": "正在保存…",
+  "Save failed: {detail}": "保存失敗：{detail}",
+  "Paste at least one key first.": "請先粘貼至少一個密鑰。",
+  "Saved to {store}. Restarting — this page reloads itself.": "已保存到 {store}。正在重啟——本頁面將自動重新加載。",
+  "Cloud voice will use OPENAI_API_KEY on the next session.": "雲語音將在下次會話使用 OPENAI_API_KEY。",
+  "Checking local ChatGPT OAuth sign-in…": "正在檢查本機 ChatGPT OAuth 登錄…",
+  "Could not check ChatGPT sign-in.": "無法檢查 ChatGPT 登錄狀態。",
+  "ChatGPT OAuth selected for cloud voice. Your API key stays saved and available.": "已為雲語音選擇 ChatGPT OAuth。你的 API 密鑰仍會保留並可用。",
+  "ChatGPT sign-in expired. Opening sign-in again…": "ChatGPT 登錄已過期。正在重新打開登錄…",
+  "Opening ChatGPT sign-in in your browser…": "正在瀏覽器中打開 ChatGPT 登錄…",
+  "Could not start ChatGPT sign-in on this machine.": "無法在本機啟動 ChatGPT 登錄。",
+  "Finish ChatGPT sign-in in the browser. Waiting for it to complete…": "請在瀏覽器中完成 ChatGPT 登錄，正在等待其完成…",
+  "ChatGPT sign-in timed out. Click {button} to try again.": "ChatGPT 登錄超時。點擊“{button}”重試。",
+  "ChatGPT sign-in complete. OAuth will be used for the next cloud voice session.": "ChatGPT 登錄完成。下次雲語音會話將使用 OAuth。",
+  "Remove this key from your saved configuration?": "要從已保存的配置中移除此密鑰嗎？",
+  "Removed from {store}. Restarting — this page reloads itself.": "已從 {store} 中移除。正在重啟——本頁面將自動重新加載。",
+  "The photorealistic 3D planet, place search + Street View": "照片級逼真 3D 地球、地點搜索 + 街景",
+  "Places context + Street View fallback; optional separate key": "地點信息 + 街景備用；可選的獨立密鑰",
+  "Voice control — API key or ChatGPT OAuth": "語音控制——API 密鑰或 ChatGPT OAuth",
+  "Live ships, worldwide": "全球實時船舶",
+  "Live active-fire detections": "實時活躍火點探測",
+  "Real live traffic (keyless runs a simulation)": "真實實時路況（無密鑰時為模擬）",
+  "Bing imagery map stacks + world terrain": "Bing 影像地圖組合 + 全球地形",
+  "More flight-polling credits (anonymous works without)": "更多航班輪詢額度（無密鑰也可匿名使用）",
+  "Street-level imagery and coverage in the Street Level layer. Free: register an app in the Mapillary developer dashboard and paste its Client Token": "街景影像與街景圖層中的覆蓋範圍。免費：在 Mapillary 開發者控制檯註冊一個應用，並粘貼其 Client Token",
+  "Public space-missions access needs no key. Leave blank for standard use; paid tokens only raise request limits.": "公開的太空任務數據無需密鑰。常規使用請留空；付費令牌只會提高請求上限。",
+  "Air quality request failed": "空氣質量請求失敗",
+  "No readings available": "暫無讀數",
+  "No current readings": "暫無最新讀數",
+  "{count} stations reporting": {
+    "other": "{count} 個站點上報數據"
+  },
+  "Highest air-quality readings in view": "視野內空氣質量讀數最高的站點",
+  "Low": "低",
+  "Low health risk": "低健康風險",
+  "Moderate": "中等",
+  "Moderate health risk": "中等健康風險",
+  "High": "高",
+  "High health risk": "高健康風險",
+  "Very High": "極高",
+  "Very High health risk": "極高健康風險",
+  "Air quality": "空氣質量",
+  "Canada only · ECCC AQHI network": "僅限加拿大 · ECCC AQHI 站網",
+  "ECCC request timed out": "ECCC 請求超時",
+  "Malformed AQHI station response": "AQHI 站點響應格式錯誤",
+  "No AQHI stations available": "沒有可用的 AQHI 站點",
+  "Malformed AQHI observation response": "AQHI 觀測響應格式錯誤",
+  "Camera source temporarily unavailable": "攝像頭數據源暫時不可用",
+  "Mapped camera locations": "地圖標註的攝像頭位置",
+  "SHOW NEAREST": "顯示最近",
+  "Stop following the current object before navigating to a camera": "請先停止跟蹤當前目標，再前往攝像頭",
+  "Move to the nearest loaded camera and show its details": "前往最近已加載的攝像頭並顯示詳情",
+  "Camera badges": "攝像頭標記",
+  "Cyan cameras turn coral when selected. Wedges illustrate mapped direction, not measured coverage. Nearby cameras may be outside the screen.": "選中後青色攝像頭變為珊瑚色。扇形僅示意已標繪方向，並非實測覆蓋範圍。附近的攝像頭可能不在屏幕內。",
+  "{count} nearby · {onScreen} on screen": {
+    "other": "附近 {count} 個 · 屏幕上 {onScreen} 個"
+  },
+  "{count} nearby": {
+    "other": "附近 {count} 個"
+  },
+  "retrying mapped ALPR cameras": "正在重試加載地圖標註的 ALPR 攝像頭",
+  "loading mapped ALPR cameras": "正在加載地圖標註的 ALPR 攝像頭",
+  "No ALPR data for this area — US and Canada only": "此區域沒有 ALPR 數據——僅覆蓋美國和加拿大",
+  "Zoom in to load mapped cameras": "放大以加載地圖標註的攝像頭",
+  "Showing cached locations": "當前顯示的是緩存位置",
+  "Coverage limited — zoom in": "覆蓋受限——請放大",
+  "No ALPR data for this area": "此區域沒有 ALPR 數據",
+  "None on screen — nearby cameras are outside the view": "屏幕上沒有攝像頭——附近的攝像頭在視野之外",
+  "ALPR camera": "ALPR 攝像頭",
+  "Camera coverage unavailable": "攝像頭覆蓋範圍不可用",
+  "OpenStreetMap · community mapped": "OpenStreetMap · 社區標註",
+  "Overpass returned an incomplete camera response": "Overpass 返回的攝像頭數據不完整",
+  "At least {count}": "至少 {count}",
+  "CONTEXT READY": "態勢就緒",
+  "GLOBAL CONTEXT OFF": "全局態勢已關閉",
+  "SELECT A FLIGHT, VESSEL, OR MAPPED INSTALLATION": "選擇航班、船舶或地圖標註設施",
+  "ENABLE TO LOAD OBSERVED / MAPPED PROXIMITY": "啟用以加載觀測 / 地圖標註的鄰近信息",
+  "Unavailable": "不可用",
+  "Focus {label}": "聚焦 {label}",
+  "Global Context navigation": "全局態勢導航",
+  "Previous — prior visited contact in the 250 km window": "上一個：250 km 範圍內先前訪問過的目標",
+  "PREVIOUS": "上一個",
+  "FOCUS": "聚焦",
+  "Next — nearest unvisited contact in the 250 km window": "下一個：250 km 範圍內最近的未訪問目標",
+  "NEXT": "下一個",
+  "Named areas ({n})": "已命名區域（{n}）",
+  "{distance} FLIGHT / VESSEL WINDOW": "{distance} 航班 / 船舶監視窗口",
+  "Open-source mapped/observed context. Missing broadcasts, unloaded map areas, or unmapped sites are not evidence of absence.": "開源的地圖標註/觀測態勢信息。缺失的廣播、未加載的地圖區域或未標註的設施不能作為不存在的證據。",
+  "mapped matches within {km} km of the subject": "所選對象 {km} km 內的地圖標註匹配",
+  "none mapped within {km} km; not a complete 250 km survey": "{km} km 內無地圖標註；並非完整的 250 km 普查",
+  "mapped matches from the loaded viewport": "來自已加載視口的地圖標註匹配",
+  "viewport feed is not a complete 250 km survey": "視口數據源並非完整的 250 km 普查",
+  "HDG {value}°": "HDG {value}°",
+  "BRG {value}°": "BRG {value}°",
+  "BRG —": "BRG —",
+  "CRS {value}°": "CRS {value}°",
+  "CURRENT VIEWPORT ONLY": "僅限當前視口",
+  "WITHIN {km} KM": "{km} km 以內",
+  "Flights": "航班",
+  "Military flights": "軍用航班",
+  "AIS vessels": "AIS 船舶",
+  "Mapped installations": "地圖標註設施",
+  "syncing {count} city feeds...": "正在同步 {count} 個城市數據源…",
+  "scanning nearby systems...": "正在掃描附近系統…",
+  "GBFS fetch error": "GBFS 獲取錯誤",
+  "Station {id}": "站點 {id}",
+  "Station": "站點",
+  "🚲 {bikes} avail · {docks} docks · {capacity} cap": "🚲 可用 {bikes} · 車樁 {docks} · 容量 {capacity}",
+  "⚠️ Not installed": "⚠️ 未安裝",
+  "⚠️ Not renting": "⚠️ 暫停租車",
+  "⚠️ Not returning": "⚠️ 暫停還車",
+  "HDG {value}° (ESTIMATED)": "HDG {value}°（估算）",
+  "{count} CAMERAS STANDING BY · NO CAMERA SELECTED · CLICK A CAMERA TO ACTIVATE": "{count} 個攝像頭待命 · 未選擇攝像頭 · 點擊攝像頭以激活",
+  "No cameras available in catalog.": "目錄中沒有可用攝像頭。",
+  "{city} CCTV": "{city} CCTV",
+  "FOV {value}° (DATASHEET)": "FOV {value}°（規格書）",
+  "FOV {value}°": "FOV {value}°",
+  "SPEC FOV {span}° (CAPABILITY)": "規格 FOV {span}°（可調範圍）",
+  "COVERAGE {value}km²": "覆蓋 {value}km²",
+  "OVERLAP {count} cams": "重疊 {count} 個攝像頭",
+  "ISOLATED VIEW": "獨立視角",
+  "PROJ MONITOR": "投影：監視器",
+  "PROJ OFF": "投影：關",
+  "VIEWSHED": "可視域",
+  "CAL {value}": "CAL {value}",
+  "SRC {value}": "SRC {value}",
+  "{value} CONTEXT": "{value} 態勢",
+  "{spec} · SPECS: CCTV-DATABASE.COM": "{spec} · 規格：CCTV-DATABASE.COM",
+  "Atlantic and eastern/central North Pacific; not worldwide cyclone coverage.": "僅覆蓋大西洋及北太平洋東部和中部，並非全球氣旋覆蓋。",
+  "Cyclone advisories unavailable": "氣旋公告不可用",
+  "Cyclone data unavailable": "氣旋數據不可用",
+  "Potential tropical cyclone": "潛在熱帶氣旋",
+  "Hurricane": "颶風",
+  "Tropical storm": "熱帶風暴",
+  "Tropical depression": "熱帶低壓",
+  "Subtropical storm": "亞熱帶風暴",
+  "Subtropical depression": "亞熱帶低壓",
+  "Track and cone match this advisory": "路徑和預報不確定範圍與本期公告一致",
+  "Track/cone awaiting advisory {number}": "路徑/預報不確定範圍等待第 {number} 號公告",
+  "Track/cone unavailable": "路徑/預報不確定範圍不可用",
+  "Cached advisory · stale source": "緩存公告 · 數據源已過期",
+  "Loading advisories…": "正在加載公告…",
+  "{count} active storms": {
+    "other": "{count} 個活躍氣旋"
+  },
+  "Position as of {time}": "位置（截至 {time}）",
+  "Maximum sustained wind: {wind} · Pressure: {pressure}": "最大持續風速：{wind} · 氣壓：{pressure}",
+  "{name} · {classification} · Advisory {number} · issued {time}": "{name} · {classification} · 第 {number} 號公告 · 發布於 {time}",
+  "No active NHC/CPHC systems": "當前沒有活躍的 NHC/CPHC 氣旋",
+  "Advisories unavailable": "公告不可用",
+  "Cyclones · NHC / CPHC": "氣旋 · NHC / CPHC",
+  "Atlantic · E/C Pacific": "大西洋 · 東/中太平洋",
+  "{storms} · {name} selected": "{storms} · 已選擇 {name}",
+  "Official advisory ↗": "官方公告 ↗",
+  "Active NHC and CPHC cyclone advisories": "活躍的 NHC 與 CPHC 氣旋公告",
+  "Wind unavailable": "風場數據不可用",
+  "Advisory center / forecast track": "公告中的氣旋中心 / 預報路徑",
+  "Center-track uncertainty cone": "中心路徑預報不確定範圍",
+  "Select a storm on the map, or choose a storm in the list to select it and move the camera. Click empty map space to clear the selection. NOAA NHC/CPHC advisory context. The cone describes forecast center-track uncertainty, not storm size or the full hazard area. Forecast point labels are source lead hours, not times computed from advisory issuance. Geometry follows the surface; height is not weather altitude. Consult the official advisory.": "在地圖上點選氣旋，或在列表中點選氣旋，即可選中並移動相機。點擊空白地圖區域可清除選擇。內容來自 NOAA NHC/CPHC 公告。該區域表示氣旋中心路徑預報的不確定範圍，不代表氣旋大小或全部災害影響範圍。預報點標註的是數據源的預報時效（小時），不是按公告發布時刻推算的時間。幾何圖形貼地顯示；顯示高度並非氣象高度。請以官方公告為準。",
+  "DRIVE": "駕車",
+  "Drive": "駕車",
+  "WALK": "步行",
+  "Walk": "步行",
+  "BIKE": "騎行",
+  "Bike": "騎行",
+  "rate limited": "已被限流",
+  "routing service is rate limited": "路線服務已被限流",
+  "route leg too long": "路段過長",
+  "route too long": "路線過長",
+  "{error} — try again in a moment": "{error}——請稍後重試",
+  "Routing is rate limited — try again in a moment": "路線請求過於頻繁——請稍後重試",
+  "Routing unavailable (HTTP {status})": "路線規劃不可用（HTTP {status}）",
+  "Routing unavailable": "路線規劃不可用",
+  "direction|left": "向左",
+  "direction|right": "向右",
+  "direction|slightly left": "向左前方",
+  "direction|slightly right": "向右前方",
+  "direction|sharply left": "向左後方",
+  "direction|sharply right": "向右後方",
+  "direction|straight": "向前",
+  "direction|around": "向後",
+  "fork direction|left": "靠左行駛",
+  "fork direction|right": "靠右行駛",
+  "fork direction|slightly left": "稍靠左行駛",
+  "fork direction|slightly right": "稍靠右行駛",
+  "fork direction|sharply left": "向左後方行駛",
+  "fork direction|sharply right": "向右後方行駛",
+  "fork direction|straight": "直行",
+  "lane direction|left": "左轉",
+  "lane direction|right": "右轉",
+  "lane direction|slightly left": "稍左轉",
+  "lane direction|slightly right": "稍右轉",
+  "lane direction|sharply left": "急左轉",
+  "lane direction|sharply right": "急右轉",
+  "lane direction|straight": "直行",
+  "ordinal|{number}st": "第 {number} 個",
+  "ordinal|{number}nd": "第 {number} 個",
+  "ordinal|{number}rd": "第 {number} 個",
+  "ordinal|{number}th": "第 {number} 個",
+  "Head out on {road}": "沿 {road} 出發",
+  "Head out": "出發",
+  "Arrive at your destination, on the left": "到達目的地，位於左側",
+  "Arrive at your destination, on the right": "到達目的地，位於右側",
+  "Arrive at your destination": "到達目的地",
+  "Make a U-turn onto {road}": "掉頭進入 {road}",
+  "Make a U-turn": "掉頭",
+  "Continue straight onto {road}": "直行進入 {road}",
+  "Continue straight": "繼續直行",
+  "Turn {direction} onto {road}": "{direction}轉，進入 {road}",
+  "Turn {direction}": "{direction}轉",
+  "Turn onto {road}": "轉彎進入 {road}",
+  "maneuver|Turn": "轉彎",
+  "Continue {direction} onto {road}": "繼續{direction}行駛，進入 {road}",
+  "Continue {direction}": "繼續{direction}行駛",
+  "At the end of the road, turn {direction} onto {road}": "在道路盡頭{direction}轉，進入 {road}",
+  "At the end of the road, turn {direction}": "在道路盡頭{direction}轉",
+  "At the end of the road, continue onto {road}": "在道路盡頭繼續行駛，進入 {road}",
+  "At the end of the road, continue": "在道路盡頭繼續行駛",
+  "Keep {direction} at the fork onto {road}": "在岔路口{direction}，進入 {road}",
+  "Keep {direction} at the fork": "在岔路口{direction}",
+  "Continue at the fork onto {road}": "在岔路口繼續行駛，進入 {road}",
+  "Continue at the fork": "在岔路口繼續行駛",
+  "Merge {direction} onto {road}": "{direction}併道，進入 {road}",
+  "Merge {direction}": "{direction}併道",
+  "Merge onto {road}": "併入 {road}",
+  "maneuver|Merge": "併道",
+  "Take the ramp on the {direction} onto {road}": "{direction}駛入匝道，進入 {road}",
+  "Take the ramp on the {direction}": "{direction}駛入匝道",
+  "Take the ramp onto {road}": "駛入匝道，進入 {road}",
+  "Take the ramp": "駛入匝道",
+  "Take the exit on the {direction} onto {road}": "從出口{direction}駛出，進入 {road}",
+  "Take the exit on the {direction}": "從出口{direction}駛出",
+  "Take the exit onto {road}": "從出口駛出，進入 {road}",
+  "Take the exit": "從出口駛出",
+  "At the roundabout, take the {exit} exit onto {road}": "在環島從{exit}出口駛出，進入 {road}",
+  "At the roundabout, take the {exit} exit": "在環島從{exit}出口駛出",
+  "Enter the roundabout onto {road}": "駛入環島，進入 {road}",
+  "Enter the roundabout": "駛入環島",
+  "At the roundabout, turn {direction} onto {road}": "在環島{direction}轉，進入 {road}",
+  "At the roundabout, turn {direction}": "在環島{direction}轉",
+  "At the roundabout, continue onto {road}": "在環島繼續行駛，進入 {road}",
+  "At the roundabout, continue": "在環島繼續行駛",
+  "Exit the roundabout onto {road}": "駛出環島，進入 {road}",
+  "Exit the roundabout": "駛出環島",
+  "Use the {direction} lane onto {road}": "使用{direction}車道，進入 {road}",
+  "Use the {direction} lane": "使用{direction}車道",
+  "Continue onto {road}": "繼續行駛，進入 {road}",
+  "maneuver|Continue": "繼續行駛",
+  "{mode} — reroute for {modeLower}": "{mode}——按{modeLower}重新規劃路線",
+  "CLICK MAP": "點擊地圖",
+  "SET A": "設置 A",
+  "Click a spot on the globe to place A (click again to cancel)": "點擊地球上的位置放置 A（再次點擊取消）",
+  "Then click the globe to place the start": "然後點擊地球放置起點",
+  "SET B": "設置 B",
+  "Click a spot on the globe to place B (click again to cancel)": "點擊地球上的位置放置 B（再次點擊取消）",
+  "Then click the globe to place the destination": "然後點擊地球放置終點",
+  "Swap A and B": "交換 A 和 B",
+  "FLY ···": "飛行 ···",
+  "FLYING": "飛行中",
+  "FLY": "飛行",
+  "Fly the camera along the route": "讓相機沿路線飛行",
+  "Place A and B first": "請先放置 A 和 B",
+  "action|CLEAR": "清除",
+  "Remove the route and both markers": "移除路線和兩個標註點",
+  "press Escape twice to leave Draw": "按兩次 Escape 退出“繪製”",
+  "{name} is active — turn {name} off, then set {endpoint}": "{name} 正在使用——請先關閉 {name}，再設置 {endpoint}",
+  "{name} is active — {leave}, then set {endpoint}": "{name} 正在使用——請先{leave}，再設置 {endpoint}",
+  "Only the first {count} turns of this route are shown": "此路線僅顯示前 {count} 個轉向",
+  "Turn-by-turn directions": "分步導航",
+  "Another map tool is using clicks — close it, then SET A again": "另一個地圖工具正在攔截點擊——請先關閉它，再重新設置 A",
+  "Routing…": "正在規劃路線…",
+  "No route found": "未找到路線",
+  "{distance} · {duration} · {mode} · first {count} turns": "{distance} · {duration} · {mode} · 前 {count} 個轉向",
+  "{distance} · {duration} · {mode}": "{distance} · {duration} · {mode}",
+  "Click the globe to place {endpoint}": "點擊地球放置 {endpoint}",
+  "SET B, then click the globe": "設置 B，然後點擊地球",
+  "SET A, then click the globe": "設置 A，然後點擊地球",
+  "Step {step} of {total} · then {leg}": "第 {step}/{total} 步 · 隨後 {leg}",
+  "Step {step} of {total}": "第 {step} 步，共 {total} 步",
+  "Then: {instruction}": "接下來：{instruction}",
+  "No route found between A and B": "在 A 和 B 之間未找到路線",
+  "Routing failed: {error}": "路線規劃失敗：{error}",
+  "Routing timed out": "路線規劃超時",
+  "Routing unavailable — no response from the routing service": "路線規劃不可用——路線服務無響應",
+  "Earthquake source unavailable": "地震數據源不可用",
+  "Focus fire detection {title}, {details}": "聚焦火點探測 {title}，{details}",
+  "live feed unavailable": "實時數據源不可用",
+  "{value} conf": "置信度 {value}",
+  "{value} ago": "{value}前",
+  "sensor n/a": "傳感器 n/a",
+  "FIRE · {frp} MW": "火點 · {frp} MW",
+  "NIGHT": "夜間",
+  "▲ {frp} MW": "▲ {frp} MW",
+  "FIRE": "火點",
+  "FIRES": "火點",
+  "max {value} MW": "最大 {value} MW",
+  "new {value}": "最新（{value}前）",
+  "{value}°N": "{value}°N",
+  "{value}°S": "{value}°S",
+  "{value}°E": "{value}°E",
+  "{value}°W": "{value}°W",
+  "just now": "剛剛",
+  "<1m ago": "不到 1 分鐘前",
+  "{count}m ago": "{count} 分鐘前",
+  "{count}h ago": "{count} 小時前",
+  "fire confidence|high": "高",
+  "fire confidence|nominal": "中",
+  "fire confidence|low": "低",
+  "age|<1h": "不到 1 小時",
+  "age|{count}h": "{count} 小時",
+  "age|{count}d": "{count} 天",
+  "Fire · FRP {frp} MW": "火點 · FRP {frp} MW",
+  "STALE · cached {age}": "過期 · {age}前緩存",
+  "refreshing...": "刷新中…",
+  "loading...": "加載中…",
+  "KEY REQUIRED": "需要密鑰",
+  "LIVE · updated {age}": "實時 · 更新於 {age}",
+  "Source snapshot time unavailable": "來源快照時間不可用",
+  "Live data unavailable": "實時數據不可用",
+  "Low-accuracy score < 2%": "低精度評分 < 2%",
+  "Low-accuracy score 2–10%": "低精度評分 2–10%",
+  "Low-accuracy score > 10%": "低精度評分 > 10%",
+  "GNSS integrity source unavailable": "GNSS 完好性數據源不可用",
+  "Regional sample · 250 nm radius · cells from visited views over 30 min": "區域採樣 · 半徑 250 海里 · 30 分鐘內已訪問視圖中的網格",
+  "Retrying automatically at {time} UTC": "將於 {time} UTC 自動重試",
+  "Retrying automatically after provider cooldown": "服務商冷卻結束後自動重試",
+  "Updates automatically after pan or zoom and once a minute. The public feed covers a 250-nautical-mile circle around the view centre; zooming out does not make it a worldwide snapshot. Blank cells are outside sampled coverage or have insufficient observations.": "平移或縮放後以及每分鐘自動更新。公共數據源覆蓋以視野中心為圓心、半徑 250 海里的範圍；縮小地圖並不會使其成為全球快照。空白網格位於採樣覆蓋範圍之外，或觀測數據不足。",
+  "Low-accuracy score = 100 × max(0, bad − 1) / total: one aircraft is discounted, so this is not the raw share. Cells need {aircraft} aircraft over {minutes} minutes. Navigation-integrity anomalies are not a detection of jamming or spoofing.": "低精度評分 = 100 × max(0, bad − 1) / total：扣除一架飛機，因此並非原始佔比。每個網格需在 {minutes} 分鐘內有 {aircraft} 架飛機。導航完好性異常不等於檢測到干擾或欺騙。",
+  "GNSS snapshot needs a view anchor": "GNSS 快照需要視圖錨點",
+  "GNSS feed rate limited (HTTP 429)": "GNSS 數據源已被限流（HTTP 429）",
+  "Malformed GNSS integrity snapshot": "GNSS 完好性快照格式錯誤",
+  "GNSS integrity snapshot has no observation time": "GNSS 完好性快照缺少觀測時間",
+  "installation class|AIRFIELD": "機場",
+  "installation class|NAVAL BASE": "海軍基地",
+  "installation class|RANGE": "靶場",
+  "installation class|MILITARY LAND": "軍事用地",
+  "installation class|BASE": "基地",
+  "installation class|BARRACKS": "營房",
+  "installation class|TRAINING AREA": "訓練區",
+  "installation class|PLACES CANDIDATE": "Places 候選",
+  "installation class|INSTALLATION": "設施",
+  "No mapped sites within {km} km of the contact": "目標 {km} km 內無地圖標註設施",
+  "{count} mapped sites within {km} km of the contact": {
+    "other": "目標 {km} km 內有 {count} 個地圖標註設施"
+  },
+  "No mapped sites in view": "視野內無地圖標註設施",
+  "{count} mapped sites in view": {
+    "other": "視野內有 {count} 個地圖標註設施"
+  },
+  "loading mapped installation context": "正在加載地圖標註設施信息",
+  "Too many mapped sites in view to list them all": "視野內地圖標註設施過多，無法全部列出",
+  "Installation context unavailable": "設施信息不可用",
+  "MAPPED INSTALLATION": "地圖標註設施",
+  "Unknown": "未知",
+  "LAUNCH SITE · {site}": "發射場 · {site}",
+  "LAUNCH SITE": "發射場",
+  "T−{time} · {mission}": "T−{time} · {mission}",
+  "LAUNCH STANDBY": "發射待命",
+  "LIFTOFF · {mission}": "點火升空 · {mission}",
+  "ASCENT REPLAY · {mission}": "上升回放 · {mission}",
+  "ASCENT ESTIMATE · {mission}": "上升估算 · {mission}",
+  "STAGE RE-ENTRY / RECOVERY · {mission}": "子級再入 / 回收 · {mission}",
+  "ORBIT REPLAY · {mission}": "軌道回放 · {mission}",
+  "PAUSED · {title}": "已暫停 · {title}",
+  "UNSPECIFIED": "未指明",
+  "+{count} additional payload records": "另有 {count} 條有效載荷記錄",
+  "PAYLOAD DATA UNAVAILABLE": "有效載荷數據不可用",
+  "{value} KM DOWNRANGE": "落點距離 {value} km",
+  "POSITION UNAVAILABLE": "位置不可用",
+  "FLIGHT {count}": "第 {count} 次飛行",
+  "REUSED": "複用",
+  "NO STAGE RE-ENTRY / RECOVERY DATA": "無子級再入 / 回收數據",
+  "{count} / 30D": "{count} / 30 天",
+  "NO MISSIONS AVAILABLE IN THE CURRENT 30-DAY WINDOW": "當前 30 天窗口內沒有可用任務",
+  "DATE UNAVAILABLE": "日期不可用",
+  "UNSPECIFIED OPERATOR": "運營方未指明",
+  "Select {mission}": "選擇 {mission}",
+  "{value} KM": "{value} km",
+  "{value} KM/S": "{value} km/s",
+  "Selected Space Mission": "已選太空任務",
+  "SELECTED SPACE MISSION": "已選太空任務",
+  "Show all missions": "顯示所有任務",
+  "Deselect mission": "取消選擇任務",
+  "MISSION": "任務",
+  "STATUS · ": "狀態 · ",
+  "LAUNCH SITE · ": "發射場 · ",
+  "LAUNCH TIME · ": "發射時間 · ",
+  "ORBIT · ": "軌道 · ",
+  "ASCENT PATH · ": "上升軌跡 · ",
+  "CURRENT DISTANCE FROM EARTH · ": "當前與地球的距離 · ",
+  "SATELLITE SPEED · ": "衛星速度 · ",
+  "PAYLOAD": "有效載荷",
+  "NAME": "名稱",
+  "TYPE": "類型",
+  "DESTINATION": "目的地",
+  "STAGE / RE-ENTRY / RECOVERY": "子級 / 再入 / 回收",
+  "STAGE": "子級",
+  "STATUS": "狀態",
+  "FINAL POSITION": "最終位置",
+  "REPLAY SPEED": "回放速度",
+  "Replay speed multiplier": "回放速度倍率",
+  "REPLAY ASCENT": "回放上升過程",
+  "Previous mission": "上一個任務",
+  "PREV": "上一個",
+  "Next mission": "下一個任務",
+  "SHOW ALL / DESELECT": "顯示全部 / 取消選擇",
+  "Pause replay": "暫停回放",
+  "Cancel replay": "取消回放",
+  "EST. DOWNRANGE": "預估落點距離",
+  "PLANNED · ": "計劃 · ",
+  "SUPPLIED TRAJECTORY POINTS": "提供的軌跡點",
+  "RECONSTRUCTED ESTIMATE": "重建估算",
+  "Replay the estimated ascent with a following camera": "以跟隨相機回放估算的上升過程",
+  "Resume replay": "繼續回放",
+  "T minus {seconds}": "T−{seconds}",
+  "Preparing launch site": "正在準備發射場",
+  "Liftoff": "點火升空",
+  "Ascent replay": "上升回放",
+  "Orbit replay": "軌道回放",
+  ", paused": "，已暫停",
+  "Malformed launch snapshot": "發射快照格式錯誤",
+  "Heard by your receiver": "由你的接收機接收",
+  "1090 MHz": "1090 MHz",
+  "978 MHz UAT": "978 MHz UAT",
+  "browser SDR": "瀏覽器 SDR",
+  "decoder feed": "解碼器數據源",
+  "Your RTL-SDR receiver and decoder feed": "你的 RTL-SDR 接收機和解碼器數據源",
+  "Your decoder feed": "你的解碼器數據源",
+  "Your RTL-SDR receiver": "你的 RTL-SDR 接收機",
+  "NO CALLSIGN": "無呼號",
+  "ALT {altitude} FT · GS {speed} KT · TRK {track}": "高度 {altitude} ft · 地速 {speed} kn · 航跡角 {track}",
+  "V/S {rate}": "升降率 {rate}",
+  "V/S {rate} FPM": "升降率 {rate} ft/min",
+  "POSITION {age}": "位置 {age}前",
+  "POSITION {seconds} S AGO": "位置 {seconds} 秒前",
+  "{count} MSGS": {
+    "other": "{count} 條消息"
+  },
+  "Decoder feeds": "解碼器數據源",
+  "WebUSB + decoder feeds": "WebUSB + 解碼器數據源",
+  "opening receiver": "正在打開接收機",
+  "checking decoder feeds": "正在檢查解碼器數據源",
+  "WebUSB needs desktop Chrome or Edge": "WebUSB 需要桌面版 Chrome 或 Edge",
+  "connect a receiver in Radio": "在電臺面板連接接收機",
+  "receiver is in FM mode": "接收機處於 FM 模式",
+  "listening": "監聽中",
+  "USB error": "USB 錯誤",
+  "Alt unknown": "高度未知",
+  "Type unknown": "類型未知",
+  "Reg unknown": "註冊號未知",
+  "Operator unknown": "運營方未知",
+  "${amount}K": "{amount}K 美元",
+  "${amount}M": "{amount}M 美元",
+  "${amount}B": "{amount}B 美元",
+  "fire cause|Human": "人為",
+  "fire cause|Natural": "自然",
+  "fire cause|Undetermined": "待定",
+  "fire cause|Unknown": "未知",
+  "fire behavior|Minimal": "微弱",
+  "fire behavior|Moderate": "中等",
+  "fire behavior|Active": "活躍",
+  "fire behavior|Extreme": "極端",
+  "Type {level} Incident": "{level} 類事件",
+  "age|{count}m": "{count} 分鐘",
+  "{acres} ac": {
+    "other": "{acres} 英畝"
+  },
+  "{percent}% contained": "已控制 {percent}%",
+  "containment unknown": "控制比例未知",
+  "{cause} cause": "起火原因：{cause}",
+  "{personnel} personnel": {
+    "other": "{personnel} 名人員"
+  },
+  "{county} County": "{county} 縣",
+  "{cost} to date": "迄今撲救費用 {cost}",
+  "discovered {age} ago": "發現於 {age}前",
+  "updated {age} ago": "更新於 {age}前",
+  "part of {complex}": "屬於 {complex} 複合火場",
+  "InciWeb ↗ · click card to open": "InciWeb ↗ · 點擊卡片打開",
+  "FIRE · {name}": "火場 · {name}",
+  "Unnamed incident": "未命名火情",
+  "Open {title} on InciWeb": "在 InciWeb 上打開 {title}",
+  "Perimeter source unavailable": "周界數據源不可用",
+  "Not contained or unknown": "未控制或未知",
+  "Under 50% contained": "控制低於 50%",
+  "50–99% contained": "控制 50–99%",
+  "Fully contained": "已全部控制",
+  "Colour shows reported containment. Perimeters are simplified to about 100 m.": "顏色表示報告的控制比例。周界簡化至約 100 m。",
+  "Malformed perimeter snapshot": "周界快照格式錯誤",
+  "radio tag|All": "全部",
+  "News": "新聞",
+  "Talk": "脫口秀",
+  "Weather / Emergency": "天氣 / 應急",
+  "Public Safety": "公共安全",
+  "Aviation / Marine": "航空 / 海事",
+  "Traffic / Transit": "交通 / 公共交通",
+  "Music": "音樂",
+  "Other": "其他",
+  "Directory refresh degraded; showing the previous station catalog.": "目錄刷新降級；正在顯示上一次的電臺目錄。",
+  "Radio directory coverage is degraded.": "電臺目錄覆蓋已降級。",
+  "Directory refresh failed; showing the previous station catalog.": "目錄刷新失敗；正在顯示上一次的電臺目錄。",
+  "Radio directory is temporarily unavailable.": "電臺目錄暫時不可用。",
+  "radio|NEWS": "新聞",
+  "radio|TALK": "脫口秀",
+  "radio|WEATHER": "天氣",
+  "radio|SAFETY": "安全",
+  "radio|AIR / SEA": "航空 / 海事",
+  "radio|TRANSIT": "公共交通",
+  "radio|MUSIC": "音樂",
+  "radio|OTHER": "其他",
+  "Broadcaster stream is unavailable or blocked by the browser.": "廣播流不可用，或被瀏覽器阻止。",
+  "Playback requires a direct click or tap.": "需直接點擊或輕觸才能播放。",
+  "Broadcaster stream could not be started.": "無法啟動廣播流。",
+  "Alternative": "另類",
+  "Ambient": "氛圍",
+  "Blues": "藍調",
+  "Classical": "古典",
+  "Country": "鄉村",
+  "Dance": "舞曲",
+  "Electronic": "電子",
+  "Folk": "民謠",
+  "Funk": "放克",
+  "Hip-Hop": "嘻哈",
+  "House": "House",
+  "Indie": "獨立音樂",
+  "Jazz": "爵士",
+  "Latin": "拉丁",
+  "Metal": "金屬樂",
+  "Oldies": "懷舊金曲",
+  "Pop": "流行",
+  "Punk": "朋克",
+  "R&B": "R&B",
+  "Reggae": "雷鬼",
+  "Rock": "搖滾",
+  "Soul": "靈魂樂",
+  "Techno": "Techno",
+  "Trance": "Trance",
+  "World": "世界音樂",
+  "overview": "概覽",
+  "cloud unknown": "雲量未知",
+  "{percent}% scene cloud": "整景雲量 {percent}%",
+  "{min}–{max}% scene cloud": "整景雲量 {min}–{max}%",
+  "Comparison in use by another scene": "對比功能正被另一個場景佔用",
+  "Esri map unavailable · no swipe": "Esri 地圖不可用 · 無法滑動對比",
+  "Swipe needs a globe map": "滑動對比需要地球地圖",
+  "Imagery stays on Esri · CLEAR to use Google 3D": "影像保留在 Esri · 清除後改用 Google 3D",
+  "Imagery catalog unavailable": "影像目錄不可用",
+  "Catalog truncated · a newer clear day may exist": "目錄已截斷 · 可能還有更近的少雲日期",
+  "{label} catalog unavailable · {detail}": "{label} 目錄不可用 · {detail}",
+  "Daily overview for today may still be empty until the pass": "衛星過境前，今天的每日概覽可能仍為空",
+  "Box and images cleared": "框選及影像已清除",
+  "MORE DETAIL · 30 m": "更多細節 · 30 m",
+  "Sentinel-2 and Landsat via HLS, 30 m, every 2–6 days": "Sentinel-2 與 Landsat，經 HLS，30 m，每 2–6 天",
+  "DAILY OVERVIEW · 250 m": "每日概覽 · 250 m",
+  "VIIRS daily mosaic, 250 m, follows broad changes; little detail under 25 km": "VIIRS 每日鑲嵌圖，250 m，反映大範圍變化；25 km 以下幾乎沒有細節",
+  "Sentinel-2": "Sentinel-2",
+  "Sentinel-2 via HLS": "Sentinel-2（經 HLS）",
+  "Landsat 8/9": "Landsat 8/9",
+  "Landsat 8/9 via HLS": "Landsat 8/9（經 HLS）",
+  "Daily overview": "每日概覽",
+  "Box edges must be finite": "框選邊界必須是有限值",
+  "Longitudes must be within ±180°": "經度必須在 ±180° 以內",
+  "Select one side of the dateline": "請只選擇日界線的一側",
+  "Box must enclose an area": "框選必須包含一定面積",
+  "Add the full Starlink broadband shell (thousands of extra points)": "添加完整的 Starlink 寬帶星座（數千個額外點位）",
+  "Loading the Starlink shell…": "正在加載 Starlink 星座…",
+  "Starlink {detail} — click to retry": "Starlink {detail}——點擊重試",
+  "load failed": "加載失敗",
+  "Showing the full Starlink shell — click for the core catalog only": "正在顯示完整的 Starlink 星座——點擊僅顯示核心目錄",
+  "DENSE ···": "密集 ···",
+  "DENSE ✕": "密集 ✕",
+  "DENSE": "密集",
+  "CelesTrak unreachable": "CelesTrak 無法連接",
+  "DOCKED · {name} · +{extra}": "對接 · {name} · +{extra}",
+  "DOCKED · {name}": "對接 · {name}",
+  "{name} needs the Google 3D map: choose it under MAP SOURCE": "{name} 需要 Google 3D 地圖：請在地圖源（MAP SOURCE）中選擇",
+  "zoom in to a street to open {name}": "放大到街道以打開 {name}",
+  "KEY REJECTED": "密鑰被拒絕",
+  "loading coverage...": "正在加載覆蓋範圍…",
+  "No street-level imagery within {radius} m of that point": "該點 {radius} m 範圍內沒有街景影像",
+  "No street-level imagery within {radius} m of the view centre": "視野中心 {radius} m 範圍內沒有街景影像",
+  "Coverage tile failed": "覆蓋瓦片加載失敗",
+  "The photo could not be loaded": "照片無法加載",
+  "{name} photo. ← and → step along the sequence. On a 360° photo, drag or use Shift+← →, ↑ ↓ to look around, and + − to zoom": "{name} 照片。← 和 → 沿序列切換。在 360° 照片上，拖動或使用 Shift+← →、↑ ↓ 環視，+ − 縮放",
+  "{name} street-level photo": "{name} 街景照片",
+  "Previous photo in this sequence (←)": "此序列中的上一張照片（←）",
+  "Next photo in this sequence (→)": "此序列中的下一張照片（→）",
+  "Aim the middle of the view at a street to look for imagery there": "將視野中心對準街道以查找該處影像",
+  "GOOGLE_MAPS_API_KEY is not set": "未設置 GOOGLE_MAPS_API_KEY",
+  "The Google Maps JavaScript API could not load": "Google Maps JavaScript API 無法加載",
+  "Google Street View": "Google 街景",
+  "GOOGLE STREET VIEW": "Google 街景",
+  "Google refused GOOGLE_MAPS_API_KEY for Street View — check that the Maps JavaScript API is enabled for it and this site is an allowed referrer": "Google 拒絕了用於街景的 GOOGLE_MAPS_API_KEY——請確認已為該密鑰啟用 Maps JavaScript API，且本站點在允許的引薦來源（referrer）中",
+  "Street View did not answer — check the network, and that the Maps JavaScript API is enabled for GOOGLE_MAPS_API_KEY": "街景無響應——請檢查網絡，並確認 GOOGLE_MAPS_API_KEY 已啟用 Maps JavaScript API",
+  "click a street to open Street View": "點擊街道以打開街景",
+  "Street View has no imagery for this place": "街景沒有此地的影像",
+  "KartaView has no position for this photo": "KartaView 沒有此照片的位置",
+  "The KartaView photo could not be loaded": "KartaView 照片無法加載",
+  "zoom in to see KartaView coverage": "放大以查看 KartaView 覆蓋範圍",
+  "no KartaView photos in view": "視野內沒有 KartaView 照片",
+  "KartaView is rate-limiting requests — they resume on their own": "KartaView 已被限流——稍後會自動恢復",
+  "KartaView’s photos here are archived and cannot be shown": "KartaView 在此處的照片已歸檔，無法顯示",
+  "KartaView did not filter this area in time — move the map to ask again": "KartaView 未能及時篩選此區域——移動地圖以重新請求",
+  "None of KartaView’s photos here pass the imagery filter": "此處沒有 KartaView 照片通過影像篩選",
+  "KartaView did not answer in time — try again": "KartaView 未及時響應——請重試",
+  "KartaView could not be reached — check the network": "無法連接 KartaView——請檢查網絡",
+  "KartaView sent an answer that could not be read": "KartaView 返回的響應無法讀取",
+  "KartaView is rate-limiting requests": "KartaView 已被限流",
+  "KartaView sent too much data": "KartaView 返回的數據過多",
+  "KartaView is rate-limiting requests — try again in a moment": "KartaView 已被限流——請稍後重試",
+  "KartaView has no such photo": "KartaView 沒有這張照片",
+  "Mapillary rejected MAPILLARY_CLIENT_TOKEN — replace it in Provider Settings": "Mapillary 拒絕了 MAPILLARY_CLIENT_TOKEN——請在服務商設置中更換",
+  "Coverage requests are being rate-limited — they resume on their own": "覆蓋範圍請求已被限流——稍後會自動恢復",
+  "The Panoramax photo could not be loaded": "Panoramax 照片無法加載",
+  "Panoramax is busy — coverage resumes on its own": "Panoramax 繁忙——覆蓋範圍稍後會自動恢復",
+  "no Panoramax photos in view": "視野內沒有 Panoramax 照片",
+  "no Panoramax photos here match the filters": "此處沒有符合篩選條件的 Panoramax 照片",
+  "Panoramax sent a map tile that could not be read": "Panoramax 返回的地圖瓦片無法讀取",
+  "This Panoramax photo is no longer available": "這張 Panoramax 照片已不可用",
+  "zoom in to see Panoramax coverage": "放大以查看 Panoramax 覆蓋範圍",
+  "Panoramax did not answer in time — try again": "Panoramax 未及時響應——請重試",
+  "Panoramax could not be reached — check the connection": "無法連接 Panoramax——請檢查網絡連接",
+  "Panoramax sent too much data": "Panoramax 返回的數據過多",
+  "Panoramax is busy": "Panoramax 繁忙",
+  "Panoramax sent an unreadable answer": "Panoramax 返回的響應無法讀取",
+  "No street-level imagery providers configured": "未配置街景影像服務商",
+  "(by upload date)": "（按上傳日期）",
+  "Open the Street Level panel to view imagery": "打開街景面板以查看影像",
+  "Image could not be opened": "圖像無法打開",
+  "TeleGeography load failed": "TeleGeography 加載失敗",
+  "UNAVAILABLE · {source} · Roads unavailable": "不可用 · {source} · 道路不可用",
+  "Roads: {source}": "道路：{source}",
+  "TomTom roads unavailable while the traffic service is unreachable": "交通服務無法連接期間，TomTom 道路不可用",
+  "Hybrid unavailable while the traffic service is unreachable": "交通服務無法連接期間，混合模式不可用",
+  "TomTom roads need a TomTom key": "TomTom 道路需要 TomTom 密鑰",
+  "Hybrid needs a TomTom key": "混合模式需要 TomTom 密鑰",
+  "Local surface still loading": "本地路面仍在加載",
+  "Partial coverage": "部分覆蓋",
+  "Detailed roads unavailable": "詳細道路不可用",
+  "Reduced detail coverage": "詳細覆蓋範圍受限",
+  "TomTom roads only, each with its live flow": "僅 TomTom 道路，各自帶實時路況",
+  "TomTom roads only, each with its live flow (needs a TomTom key)": "僅 TomTom 道路，各自帶實時路況（需要 TomTom 密鑰）",
+  "OpenStreetMap roads, with TomTom flow matched when available": "OpenStreetMap 道路，可用時匹配 TomTom 路況",
+  "TomTom roads first; OpenStreetMap fills the rest, simulated": "優先使用 TomTom 道路及實時路況；缺失路段由 OpenStreetMap 補充，並模擬其路況",
+  "TomTom roads first; OpenStreetMap fills the rest, simulated (needs a TomTom key)": "優先使用 TomTom 道路及實時路況；缺失路段由 OpenStreetMap 補充，並模擬其路況（需要 TomTom 密鑰）",
+  "Hybrid": "混合",
+  "TomTom key unavailable": "TomTom 密鑰不可用",
+  "TomTom daily budget reached": "已達 TomTom 每日配額",
+  "TomTom upstream unreachable": "TomTom 上游服務無法連接",
+  "TomTom flow unavailable": "TomTom 路況不可用",
+  "SIMULATED — {reason}": "模擬——{reason}",
+  "Syncing flow · Roads: {source}": "正在同步路況 · 道路：{source}",
+  "LIVE · Roads: {source} · Roads without flow hidden": "實時 · 道路：{source} · 已隱藏無路況道路",
+  "LIVE · Roads: {source} · No flow roads in view": "實時 · 道路：{source} · 視野內沒有帶路況數據的道路",
+  "LIVE · Roads: {source} · Flow {percent}%": "實時 · 道路：{source} · 路況 {percent}%",
+  "SIMULATED · Roads: {source} · Flow {percent}%": "模擬 · 道路：{source} · 路況 {percent}%",
+  "Syncing flow · Roads: OpenStreetMap · Flow: TomTom · Unmatched: simulated": "正在同步路況 · 道路：OpenStreetMap · 路況：TomTom · 未匹配：模擬",
+  "LIVE · Roads: OpenStreetMap · Flow: TomTom · {percent}% cov · Unmatched: simulated": "實時 · 道路：OpenStreetMap · 路況：TomTom · 覆蓋 {percent}% · 未匹配：模擬",
+  "LIVE · Roads: OpenStreetMap · Flow: TomTom · {percent}% cov": "實時 · 道路：OpenStreetMap · 路況：TomTom · 覆蓋 {percent}%",
+  "SIMULATED · Roads: OpenStreetMap · Flow: TomTom (no matches)": "模擬 · 道路：OpenStreetMap · 路況：TomTom（無匹配）",
+  "SIMULATED — traffic service unreachable": "模擬——交通服務無法連接",
+  "SIMULATED — add TomTom key for live": "模擬——添加 TomTom 密鑰以獲取實時數據",
+  "OpenFreeMap tiles rate-limited": "OpenFreeMap 瓦片已被限流",
+  "OpenFreeMap tiles timed out": "OpenFreeMap 瓦片超時",
+  "OpenFreeMap tiles unavailable": "OpenFreeMap 瓦片不可用",
+  "occupancy|empty": "空載",
+  "occupancy|many seats available": "空座較多",
+  "occupancy|few seats available": "空座較少",
+  "occupancy|standing room only": "僅剩站位",
+  "occupancy|crushed standing room only": "極度擁擠，僅剩站位",
+  "occupancy|full": "已滿",
+  "occupancy|not accepting passengers": "不載客",
+  "occupancy|not boardable": "無法上車",
+  "Route {route}": "線路 {route}",
+  "Vehicle {vehicle}": "車輛 {vehicle}",
+  "vehicle motion|Stopped": "已停車",
+  "No recent fix": "無近期定位",
+  "Waiting for update": "等待更新",
+  "Moving": "行駛中",
+  "reported {speed} km/h": "上報 {speed} km/h",
+  "reported hdg {heading}°": "上報航向 {heading}°",
+  "Last report: stopped at stop {stop}": "最近上報：停靠站點 {stop}",
+  "Last report: arriving at stop {stop}": "最近上報：即將到達站點 {stop}",
+  "Last report: next stop {stop}": "最近上報：下一站 {stop}",
+  "Shown at street level · depth not in the feed": "按地面高度顯示 · 數據源未提供深度",
+  "Reported {seconds} s ago": "{seconds} 秒前上報",
+  "Reported {minutes} min ago": "{minutes} 分鐘前上報",
+  "shown {seconds} s behind": "顯示滯後 {seconds} 秒",
+  "{reported} (feed time)": "{reported}（數據源時間）",
+  "Available trail: {minutes} min (limited)": "可用軌跡：{minutes} 分鐘（受限）",
+  "Available trail: {minutes} min": "可用軌跡：{minutes} 分鐘",
+  "Bus": "公交車",
+  "Tram": "有軌電車",
+  "Subway": "地鐵",
+  "Train": "火車",
+  "Ferry": "渡輪",
+  "Transit vehicle": "公共交通車輛",
+  "AIS: {name}": "AIS: {name}",
+  "{type}  SPD: {speed}  HDG: {heading}": "{type}  SPD: {speed}  HDG: {heading}",
+  "VESSEL": "船舶",
+  "{speed}KT": "{speed} kn",
+  "{heading}DEG": "{heading}°",
+  "POS: LIVE": "POS：實時",
+  "POS: {time}Z": "POS：{time}Z",
+  "AIS live load failed": "AIS 實時數據加載失敗",
+  "awaiting first AIS position…": "等待首個 AIS 位置…",
+  "awaiting usable AIS positions…": "等待可用的 AIS 位置…",
+  "awaiting first AIS message…": "等待首條 AIS 消息…",
+  "AISSTREAM_API_KEY not set": "未設置 AISSTREAM_API_KEY",
+  "live feed unsupported": "不支持實時數據源",
+  "connecting to feed…": "正在連接數據源…",
+  "feed disconnected": "數據源已斷開",
+  "feed down": "數據源中斷",
+  "feed idle": "數據源空閒",
+  "API key rejected — check AISSTREAM_API_KEY": "API 密鑰被拒絕——請檢查 AISSTREAM_API_KEY",
+  "feed silent {seconds}s — no AIS data": "數據源已靜默 {seconds} 秒——無 AIS 數據",
+  "feed silent — no AIS data": "數據源已靜默——無 AIS 數據",
+  "feed down — retrying slowly (attempt {attempt})": "數據源中斷——正在低頻重試（第 {attempt} 次）",
+  "reconnecting to feed… (attempt {attempt})": "正在重新連接數據源…（第 {attempt} 次）",
+  "feed down — retrying slowly": "數據源中斷——正在低頻重試",
+  "reconnecting to feed…": "正在重新連接數據源…",
+  "Focus vessel {name}, MMSI {mmsi}": "聚焦船舶 {name}，MMSI {mmsi}",
+  "Hidden by this map source · choose a globe map": "已被當前地圖源隱藏 · 請選擇地球地圖",
+  "Weather image HTTP {status}": "天氣圖像 HTTP {status}",
+  "Weather HTTP {status}": "天氣 HTTP {status}",
+  "Frame unavailable; previous observation retained": "幀不可用；保留上一幀觀測",
+  "Weather imagery unavailable": "天氣影像不可用",
+  "Weather source unavailable; previous observation retained": "天氣數據源不可用；保留上一幀觀測",
+  "Weather unavailable": "天氣數據不可用",
+  "No frame within {gap} min of {time}": "{time} 前後 {gap} 分鐘內沒有幀",
+  "No frame within {gap} h of {time}": "{time} 前後 {gap} 小時內沒有幀",
+  "{hours}h {minutes}m ago": "{hours} 小時 {minutes} 分鐘前",
+  "{minutes}m ago": "{minutes} 分鐘前",
+  "{state} · {time} · {lag}": "{state} · {time} · {lag}",
+  "Observed": "觀測",
+  "History": "歷史",
+  "Observation unavailable": "觀測不可用",
+  "Waiting for observation": "等待觀測數據",
+  "{detail} · synced": "{detail} · 已同步",
+  "{detail} · nearest": "{detail} · 最接近",
+  "RADAR REFLECTIVITY · dBZ": "雷達反射率 · dBZ",
+  "LIGHTNING DENSITY · 15 min accumulation": "閃電密度 · 15 分鐘累計",
+  "GLOBAL INFRARED · hourly": "全球紅外 · 每小時",
+  "GOES INFRARED · ~5 min": "GOES 紅外 · 約 5 分鐘",
+  "{state}: {time}": "{state}：{time}",
+  "Latest observation": "最新觀測",
+  "frame {index}/{total}": "第 {index}/{total} 幀",
+  "loading": "加載中",
+  "Observation: unavailable": "觀測：不可用",
+  "Contiguous US · gaps ≠ no rain": "美國本土 · 數據缺失 ≠ 無降雨",
+  "Americas + Pacific · not individual strikes": "美洲與太平洋 · 非單次閃擊",
+  "Color: strikes/km²/min ×10³": "顏色：閃擊次數/km²/分鐘 ×10³",
+  "60°S–60°N · typically 2–3 h delayed": "60°S–60°N · 通常延遲 2–3 小時",
+  "North America · infrared imagery": "北美洲 · 紅外影像",
+  "Reduced motion · history playback unavailable": "減弱動效 · 歷史回放不可用",
+  "Reduced motion · manual history available": "減弱動效 · 可手動瀏覽歷史",
+  "Rain radar · US": "降雨雷達 · 美國",
+  "Lightning density · 15 min": "閃電密度 · 15 分鐘",
+  "Satellite clouds": "衛星雲圖",
+  "Americas + Pacific": "美洲與太平洋",
+  "Global · 60°S–60°N": "全球 · 60°S–60°N",
+  "North America": "北美洲",
+  "Source observations delayed": "數據源觀測延遲",
+  "Stale source": "數據源已過期",
+  "Loading next frame…": "正在加載下一幀…",
+  "Map center outside coverage": "地圖中心在覆蓋範圍之外",
+  "strikes/km²/min ×10³": "閃擊次數/km²/分鐘 ×10³",
+  "N. America": "北美",
+  "Global": "全球",
+  "Hourly global mosaic; usually 2–3 hours delayed": "每小時全球鑲嵌圖；通常延遲 2–3 小時",
+  "GOES regional clouds; approximately 5-minute updates": "GOES 區域雲圖；約 5 分鐘更新",
+  "Clouds only": "僅雲區",
+  "Apply the full cloud brightness key; 100% filter strength": "應用完整的雲層亮度映射；濾鏡強度 100%",
+  "Full": "完整",
+  "Show the complete infrared image; 0% filter strength": "顯示完整紅外圖像；濾鏡強度 0%",
+  "Soft": "柔和",
+  "Vivid": "鮮明",
+  "Image opacity; does not alter the observed values": "圖像不透明度；不改變觀測值",
+  "View US radar": "查看美國雷達",
+  "View Americas & Pacific": "查看美洲與太平洋",
+  "View coverage": "查看覆蓋範圍",
+  "{value} strikes/km²/min ×10³ (15-minute density)": "{value} 次閃擊/km²/分鐘 ×10³（15 分鐘密度）",
+  "{value} dBZ radar reflectivity": "{value} dBZ 雷達反射率",
+  "STALE · cached source metadata": "已過期 · 數據源元數據來自緩存",
+  "Map center is outside source coverage": "地圖中心在數據源覆蓋範圍之外",
+  "NOAA/NWS 15-minute lightning density derived from Vaisala NLDN/GLD360. Coverage 110°E across the Pacific/Americas to 0°, 25°S–80°N. Not a live strike count, global coverage or a safety warning.": "NOAA/NWS 15 分鐘閃電密度，來源為 Vaisala NLDN/GLD360。覆蓋自 110°E 經太平洋/美洲至 0°，25°S–80°N。不是實時閃擊計數、不是全球覆蓋，也不構成安全警示。",
+  "NOAA MRMS radar echoes indicate precipitation patterns, not rain rate, a storm warning or a future forecast. Native source approximately 1 km; display is limited to level 6. Frames use exact advertised observation times.": "NOAA MRMS 雷達回波反映降水形態，不代表降雨強度、風暴警報或未來預報。原始數據分辨率約 1 km；顯示僅限縮放級別 6。各幀使用數據源公布的精確觀測時間。",
+  "GOES-19/18 longwave infrared Band 14 regional; NESDIS global longwave mosaic. Clouds only dims everything but bright, cold cloud tops; a brightness filter, not a cloud mask. Coverage and freshness differ by region.": "GOES-19/18 第 14 波段長波紅外區域圖；NESDIS 全球長波鑲嵌圖。“僅雲區”會調暗除明亮冷雲頂之外的一切；這是亮度濾鏡，不是雲掩膜。覆蓋範圍與新鮮度因區域而異。",
+  "REGION": "區域",
+  "IMAGE": "圖像",
+  "FILTER": "濾鏡",
+  "Cloud filter strength": "雲層濾鏡強度",
+  "OPACITY": "不透明度",
+  "Infrared decode failed": "紅外圖像解碼失敗",
+  "Weather prefetch unavailable": "天氣預取不可用",
+  "Weather tiles unavailable · previous frame retained": "天氣瓦片不可用 · 保留上一幀",
+  "Some weather tiles unavailable": "部分天氣瓦片不可用",
+  "Malformed weather manifest": "天氣清單格式錯誤",
+  "Weather request timed out": "天氣請求超時",
+  "Temperature field unavailable": "溫度場不可用",
+  "Mean sea level pressure field unavailable": "平均海平面氣壓場不可用",
+  "Wind upstream unavailable": "風場上游數據源不可用",
+  "{source} HTTP {status}": "{source} HTTP {status}",
+  "Wind": "風",
+  "Wind source unavailable": "風場數據源不可用",
+  "Forecast · does not follow history": "預報 · 不隨觀測歷史變化",
+  "Wind motion": "風場運動",
+  "Wind speed": "風速",
+  "Sea-level pressure": "海平面氣壓",
+  "Air temperature · 2 m": "氣溫 · 2 m",
+  "Global · 1° grid": "全球 · 1° 網格",
+  "{model} forecast · {time}": "{model} 預報 · {time}",
+  "Loading forecast": "正在加載預報",
+  "Preparing flow": "正在準備流場",
+  "Selected field unavailable": "所選氣象場不可用",
+  "Cached forecast · stale": "緩存預報 · 已過期",
+  "ECMWF IFS surface forecast": "ECMWF IFS 地面預報",
+  "NOAA GFS surface forecast": "NOAA GFS 地面預報",
+  "Reduced motion": "減弱動效",
+  "Resume": "繼續",
+  "Pause": "暫停",
+  "Pause visual flow; forecast time does not advance with animation": "暫停流動動畫；預報時次不會隨動畫推進",
+  "None": "無",
+  "Speed": "風速",
+  "Pressure": "氣壓",
+  "Temperature": "氣溫",
+  "Wind trails with no field shading": "僅顯示風場流線，不疊加氣象場填色",
+  "How hard the surface wind is blowing": "地面風有多大",
+  "Sea-level air pressure: broad highs and lows": "海平面氣壓：大範圍的高壓與低壓",
+  "Air temperature two meters above the surface": "地面以上兩米的氣溫",
+  "Wind speed units": "風速單位",
+  "Read wind at map center": "讀取地圖中心風況",
+  "Read the forecast at the center of the map without changing selection": "讀取地圖中心的預報值，不改變當前選擇",
+  "{model} forecast · {field} ({unit})": "{model} 預報 · {field}（{unit}）",
+  "Valid: {time}": "有效時間：{time}",
+  "preparing": "準備中",
+  "Issued: {time}": "發布時間：{time}",
+  "Selected field unavailable · wind remains visible": "所選氣象場不可用 · 風場仍可見",
+  "{error} · wind remains visible": "{error} · 風場仍可見",
+  "Surface wind at 10 m. Approximately 1° global grid. Curves follow the 10 m wind field, lifted 12 km for visibility; display height is not weather altitude. View lighting is for readability. Animation shows flow through one fixed forecast; it does not advance time. Color fields drape the globe basemap or the active photorealistic 3D Tiles.": "10 m 高度的地面風。約 1° 全球網格。流線沿 10 m 風場繪製，為便於觀看抬升至 12 km；顯示高度並非氣象高度。視圖光照僅為提高可讀性。動畫展示的是單一固定預報內的流場，不推進時間。氣象場填色疊加於地球底圖或當前的照片級逼真 3D Tiles。",
+  "MODEL": "模式",
+  "FIELD": "要素",
+  "UNITS": "單位",
+  "MOTION": "運動",
+  "Forecast": "預報",
+  "NNE": "北東北",
+  "NE": "東北",
+  "ENE": "東東北",
+  "ESE": "東東南",
+  "SE": "東南",
+  "SSE": "南東南",
+  "SSW": "南西南",
+  "SW": "西南",
+  "WSW": "西西南",
+  "WNW": "西西北",
+  "NW": "西北",
+  "NNW": "北西北",
+  "No surface reading": "暫無地表讀數",
+  "Aim the map center at Earth": "請將地圖中心對準地球",
+  "A location reading needs a loaded forecast and the Earth at the center of the view.": "位置讀數需要已加載的預報，且地圖中心對準地球。",
+  "Interpolated model forecast on an approximately 1° grid. Broad weather patterns, not a street-level measurement.": "按約 1° 網格插值的模式預報。反映大範圍天氣形勢，不是街道級實測。",
+  " · calm": " · 靜風",
+  " from {direction}": "，{direction}風",
+  "WIND AT {coordinates}": "{coordinates} 的風",
+  "{model} · valid {time}": "{model} · 有效時間 {time}",
+  "Wind speed field unavailable": "風速場不可用",
+  "Globe imagery unavailable": "地球影像不可用",
+  "Globe field image unavailable": "地球氣象場圖像不可用",
+  "Unknown wind model": "未知風場模式",
+  "Unknown weather overlay": "未知天氣疊加層",
+  "Wind request timed out": "風場請求超時",
+  "Malformed wind manifest": "風場清單格式錯誤",
+  "Malformed wind grid": "風場網格格式錯誤",
+  "Error: {message}": "錯誤：{message}",
+  "Needs {envVars} — add it in Provider Settings": "需要 {envVars}，請在服務商設置中添加",
+  "{label} is unavailable": "{label} 不可用",
+  "This map stack": "此地圖組合",
+  "{label} unavailable: {hint}": "{label} 不可用：{hint}",
+  "Google 3D tiles unavailable — check the key's API restrictions, quota, or network": "Google 3D 瓦片不可用——請檢查密鑰的 API 限制、配額或網絡",
+  "Needs {envVars} — add it in Provider Settings — or a Cesium ion token for the ion-hosted route": "需要 {envVars}（請在服務商設置中添加），或使用 Cesium ion 令牌走 ion 託管通道",
+  "Exit cockpit to fly to a camera": "請先退出座艙，再飛往攝像頭",
+  "Exit cockpit to fly to a location": "請先退出座艙，再飛往該地點",
+  "Exit cockpit to fly to a photo": "請先退出座艙，再飛往照片",
+  "Exit cockpit to fly to a shared view": "請先退出座艙，再飛往分享的視圖",
+  "Exit cockpit to fly to a target": "請先退出座艙，再飛往目標",
+  "Exit cockpit to fly to a vessel": "請先退出座艙，再飛往船舶",
+  "Exit cockpit to fly to a fire": "請先退出座艙，再飛往火點",
+  "Exit cockpit to fly to a route": "請先退出座艙，再飛往路線",
+  "Exit cockpit to fly to a file": "請先退出座艙，再飛往文件位置",
+  "Exit cockpit to fly to a scene": "請先退出座艙，再飛往場景",
+  "Exit cockpit to view weather coverage": "請先退出座艙，再查看天氣覆蓋範圍",
+  "Exit cockpit to fly to a cyclone": "請先退出座艙，再飛往氣旋",
+  "Exit cockpit to fly to an aircraft": "請先退出座艙，再飛往飛機",
+  "Exit cockpit to fly to a satellite": "請先退出座艙，再飛往衛星",
+  "Exit cockpit to frame contacts": "請先退出座艙，再將目標納入視野",
+  "Visible map targets": "可見的地圖目標",
+  "Focusing {label}": "正在聚焦 {label}",
+  "Source": "來源",
+  "Camera ownership changed": "相機控制權已變更",
+  "Saved project could not be read; storage preserved. Import a valid file to resume saving.": "已保存的項目無法讀取；存儲已保留。請導入有效文件以恢復保存。",
+  "Ready": "就緒",
+  "Scene layer turned off": "場景圖層已關閉",
+  "Stopped": "已停止",
+  "Scene not saved — existing saved project could not be read. Export edits or import a valid file.": "場景未保存——已保存的項目無法讀取。請先導出修改或導入有效文件。",
+  "Scene not saved — {reason}": "場景未保存——{reason}",
+  "Scene not saved — browser storage unavailable": "場景未保存——瀏覽器存儲不可用",
+  "Loaded: {scene} / {shot}": "已加載：{scene} / {shot}",
+  "Cannot update {scene}: shot inventory changed": "無法更新 {scene}：鏡頭清單已變化",
+  "Cannot update {scene}: evidence beats changed": "無法更新 {scene}：證據節點已變化",
+  "Cannot update {scene}: shot bindings are incomplete": "無法更新 {scene}：鏡頭綁定不完整",
+  "Updated {count} shots: {scene}": {
+    "other": "已更新 {count} 個鏡頭：{scene}"
+  },
+  "Appended {count} shots: {scene}": {
+    "other": "已追加 {count} 個鏡頭：{scene}"
+  },
+  "Cannot capture shot: camera not ready": "無法保存鏡頭：相機未就緒",
+  "Captured: {scene} / {shot}": "已保存：{scene} / {shot}",
+  "Select a shot first": "請先選擇一個鏡頭",
+  "Updated: {scene} / {shot}": "已更新：{scene} / {shot}",
+  "Could not leave scene: {scene}": "無法離開場景：{scene}",
+  "Seeked: {scene} / {shot}": "已定位：{scene} / {shot}",
+  "Seeking scene clock": "正在定位場景時鐘",
+  "Camera unavailable — exit cockpit first": "相機不可用——請先退出座艙",
+  "No shots to run": "沒有可運行的鏡頭",
+  "Scene transition limit reached — load a shot to reset": "已達到場景切換上限——請加載一個鏡頭以重置",
+  "Export failed: {error}": "導出失敗：{error}",
+  "Project exported": "項目已導出",
+  "Importing project": "正在導入項目",
+  "Imported {file}": "已導入 {file}",
+  "Import failed: {error}": "導入失敗：{error}",
+  "Import failed (could not read JSON file)": "導入失敗（無法讀取 JSON 文件）",
+  "Layers refused: {layers}": "被拒絕的圖層：{layers}",
+  "Could not exit {mode} — scene layers may be refused": "無法退出 {mode}——場景圖層可能被拒絕",
+  "Camera move interrupted": "相機移動被中斷",
+  "Scene media timed out": "場景媒體播放超時",
+  "Action complete": "動作已完成",
+  "Action unavailable or cancelled": "動作不可用或已取消",
+  "Scene actions": "場景動作",
+  "Select a feature or use Tab and Enter to choose an action.": "選擇一個要素，或使用 Tab 和 Enter 選擇動作。",
+  "Selected feature: {feature}. Choose an action.": "已選要素：{feature}。請選擇動作。",
+  "Running {index}/{total}: {scene} / {shot}": "正在運行 {index}/{total}：{scene} / {shot}",
+  "Scene run complete": "場景運行完成",
+  "Bhote Koshi Evidence Sequence": "Bhote Koshi 證據序列",
+  "Nepal Flood Incident": "尼泊爾洪水事件",
+  "Global Flights Radar": "全球航班雷達",
+  "Orbital Watch": "軌道監視",
+  "Thermal Threat Board": "熱源威脅看板",
+  "City Overload": "城市過載",
+  "Omniscience Pullback": "全知拉遠",
+  "Global Incident Context": "全球事件背景",
+  "Nepal-Focused Globe Rotation": "聚焦尼泊爾的地球旋轉",
+  "Bhote Koshi Regional Approach": "Bhote Koshi 區域推近",
+  "Bhote Koshi Nearby Cities": "Bhote Koshi 周邊城市",
+  "Bhote Koshi Incident Corridor": "Bhote Koshi 事件走廊",
+  "Bhote Koshi Flood Path": "Bhote Koshi 洪水路徑",
+  "Bhote Koshi Corridor Overview": "Bhote Koshi 走廊概覽",
+  "Bhote Koshi Upper Valley": "Bhote Koshi 上游河谷",
+  "Upper Valley Collapse": "上游河谷崩塌",
+  "Debris-Dammed Lake": "碎屑堰塞湖",
+  "Nepal-China Border Gate": "中尼邊境口岸",
+  "Timure Evidence Cluster": "Timure 證據群",
+  "Syabru Besi Passage": "Syabru Besi 通道",
+  "Bidur / Trishuli Consequence": "Bidur / Trishuli 後果",
+  "Final view": "最終視圖",
+  "Scene {n}": "場景 {n}",
+  "Shot {n}": "鏡頭 {n}",
+  "the title of scene {scene} is empty or longer than {max} characters": "場景 {scene} 的標題為空或超過 {max} 個字符",
+  "the title of shot {shot} in scene {scene} is empty or longer than {max} characters": "場景 {scene} 中鏡頭 {shot} 的標題為空或超過 {max} 個字符",
+  "the project is larger than 5 MiB": "項目大於 5 MiB",
+  "the project has too many shots": "項目中的鏡頭過多",
+  "the scene data failed validation": "場景數據未通過校驗",
+  "Could not complete this action. Check the file, references and selected assets.": "無法完成此操作。請檢查文件、引用和所選資源。",
+  "{count} scenes": {
+    "other": "{count} 個場景"
+  },
+  "{count} shots": {
+    "other": "{count} 個鏡頭"
+  },
+  "{count} data packs": {
+    "other": "{count} 個數據包"
+  },
+  "{scene} / {pack}: {status}. File: {path}. {attribution} · {license}": "{scene} / {pack}：{status}。文件：{path}。{attribution} · {license}",
+  "Unavailable layers: {layers}": "不可用圖層：{layers}",
+  "Uses registered content or linked media. Those external files are not included in a scene bundle. Their original notices still apply.": "使用了已註冊內容或鏈接媒體。這些外部文件不包含在場景資源包中。其原始聲明仍然適用。",
+  "{bytes} bundled bytes verified. Files stay in memory for this session. Reimport the bundle after reloading the app.": "已校驗打包內容 {bytes} 字節。文件僅保留在本次會話的內存中。重新加載應用後請再次導入資源包。",
+  "Review scene import": "場景導入預覽",
+  "Nothing is loaded or changed until you apply this file.": "確認導入此文件前，不會加載或更改任何內容。",
+  "Ready to import": "可以導入",
+  "Apply replaces the current project. Export your current project first if you want to keep both.": "應用後將替換當前項目。如需同時保留兩者，請先導出當前項目。",
+  "Apply import": "確認導入",
+  "Import was not applied. The current project may have changed.": "未執行導入。當前項目可能已發生變化。",
+  "Select a scene and shot first": "請先選擇場景和鏡頭",
+  "Edit scene details": "編輯場景詳情",
+  "Camera positions use degrees and meters above the ellipsoid. Drafts are validated before they replace your saved scene.": "相機經緯度以度為單位，高度以米為單位（相對橢球面）。草稿通過校驗後才會替換已保存的場景。",
+  "Anchors and data packs": "錨點與數據包",
+  "Shot camera, timing, packs and actions": "鏡頭相機、時序、數據包與動作",
+  "New anchor ID": "新錨點 ID",
+  "Capture camera as anchor": "將當前相機位置設為錨點",
+  "Anchor added to draft": "錨點已加入草稿",
+  "Set move start to current camera": "將運鏡起點設為當前相機位置",
+  "Move added to draft; destination remains the shot camera": "運鏡已加入草稿；終點仍為該鏡頭的相機位置",
+  "Use ordinary flight": "使用普通飛行",
+  "Invalid shot JSON": "鏡頭 JSON 無效",
+  "Apply details": "應用詳情",
+  "Select a scene first": "請先選擇一個場景",
+  "Share selected scene": "分享所選場景",
+  "Scene JSON preserves authored settings and attribution. It does not include asset files. Bundles include only pack files you choose here or previously imported bundle files.": "場景 JSON 保留創作設置與署名信息。它不包含資源文件。資源包僅包含你在此選擇的包文件或先前導入的資源包文件。",
+  "Download scene JSON": "下載場景 JSON",
+  "Choose data-pack files": "選擇數據包文件",
+  "Or choose a data-pack folder": "或選擇數據包文件夾",
+  "Download asset bundle": "下載資源包",
+  "Asset bundle downloaded": "資源包已下載",
+  "No RTL-SDR device selected": "未選擇 RTL-SDR 設備",
+  "WebUSB requires desktop Chrome or Edge on localhost/HTTPS": "WebUSB 需要在 localhost/HTTPS 上使用桌面版 Chrome 或 Edge",
+  "RTL-SDR access failed; close other SDR apps and check USB permissions": "RTL-SDR 訪問失敗；請關閉其他 SDR 應用並檢查 USB 權限",
+  "RTL-SDR connection failed": "RTL-SDR 連接失敗",
+  "Receiving 1090 MHz ADS-B": "正在接收 1090 MHz ADS-B",
+  "Receiving broadcast FM": "正在接收廣播 FM",
+  "Connect an RTL-SDR to begin.": "連接 RTL-SDR 即可開始。",
+  "WebUSB is unavailable in this browser": "此瀏覽器不支持 WebUSB",
+  "USB work abandoned after a stalled transfer": "USB 傳輸停滯，已放棄操作",
+  "SDR decoder worker failed": "SDR 解碼器工作線程失敗",
+  "SDR decoder did not start; receiver stopped": "SDR 解碼器未能啟動；接收機已停止",
+  "SDR decoder stopped responding; receiver stopped": "SDR 解碼器停止響應；接收機已停止",
+  "SDR decoder fell behind; receiver stopped": "SDR 解碼器處理滯後；接收機已停止",
+  "WebUSB requires desktop Chrome or Edge": "WebUSB 需要桌面版 Chrome 或 Edge",
+  "Waiting for an RTL-SDR device…": "正在等待 RTL-SDR 設備…",
+  "Browser audio is suspended; press Connect again to resume it": "瀏覽器音頻已掛起；再次按“連接”以恢復",
+  "RTL-SDR sample stream stopped": "RTL-SDR 採樣流已停止",
+  "Switching to {mode}…": "正在切換到 {mode}…",
+  "Browser audio is suspended; select FM again to resume it": "瀏覽器音頻已掛起；再次選擇 FM 以恢復",
+  "RTL-SDR gain change failed": "RTL-SDR 增益調整失敗",
+  "Tuned to {mhz} MHz FM": "已調諧到 FM {mhz} MHz",
+  "Seeking up…": "正在向上搜臺…",
+  "Seeking down…": "正在向下搜臺…",
+  "Seek stopped": "搜臺已停止",
+  "Scanning {mhz} MHz…": "正在掃描 {mhz} MHz…",
+  "Found {mhz} MHz · {snr} dB": "找到 {mhz} MHz · {snr} dB",
+  "FM signal found at {mhz} MHz": "在 {mhz} MHz 找到 FM 信號",
+  "No FM signal found": "未找到 FM 信號",
+  "Browser location is unavailable": "瀏覽器位置不可用",
+  "Receiver location was not granted": "未授予接收機位置權限",
+  "RTL-SDR disconnected": "RTL-SDR 已斷開",
+  "Upstream response too large": "上游響應過大",
+  "Vector tile request timed out": "矢量瓦片請求超時",
+  "Vector tiles unavailable": "矢量瓦片不可用",
+  "Vector tile metadata unavailable": "矢量瓦片元數據不可用",
+  "Zoom in for vector tile coverage": "放大以查看矢量瓦片覆蓋",
+  "Saturation": "飽和度",
+  "Edge Thickness": "描邊粗細",
+  "Contrast": "對比度",
+  "Grain": "顆粒",
+  "Vignette": "暗角",
+  "Pixelation": "像素化",
+  "Distortion": "畸變",
+  "Instability": "抖動",
+  "Density": "密度",
+  "Gain": "增益",
+  "Bloom": "泛光",
+  "Scanlines": "掃描線",
+  "Sensitivity": "靈敏度",
+  "WHOT/BHOT": "WHOT/BHOT",
+  "Ironbow": "Ironbow",
+  "unsaved CCTV calibration": "未保存的 CCTV 校準",
+  "the open cockpit": "當前打開的座艙",
+  "Switching language reloads the page. This will be lost: {items}. Switch anyway?": "切換語言會重新加載頁面。以下內容將會丟失：{items}。仍要切換嗎？",
+  "VISUAL PRESETS": "視覺預設",
+  "LOCATION": "位置",
+  "CONTACTS — nearest planes · vessels · sites": "目標：最近的飛機 · 船舶 · 設施",
+  "SPACE MISSIONS — launches & orbital assets": "太空任務：發射與在軌資產",
+  "LIVE SIGNALS": "實時信號",
+  "CCTV layer unavailable": "CCTV 圖層不可用",
+  "Link copied!": "鏈接已複製！",
+  "Copy failed": "複製失敗",
+  "Return map to straight-down view": "將地圖恢復為垂直俯視",
+  "Tilt map to oblique view": "將地圖傾斜至斜視角",
+  "Reset map to north up. Current heading {heading} degrees": "將地圖重置為正北朝上。當前方位 {heading} 度",
+  "Tilted view": "傾斜視角",
+  "Straight-down view": "垂直俯視",
+  "North up": "正北朝上",
+  "CCTV calibration saved": "CCTV 校準已保存",
+  "HDG": "HDG",
+  "PITCH": "俯仰",
+  "FOV": "FOV",
+  "RANGE": "範圍",
+  "HGT": "高度",
+  "ΔN": "ΔN",
+  "ΔE": "ΔE",
+  "{value}m": "{value} m",
+  "CCTV calibration reset": "CCTV 校準已重置",
+  "ADJUST ON": "調整開",
+  "ADJUST": "調整",
+  "SNAPSHOT": "快照",
+  "LIVE": "實時",
+  "UPSTREAM": "上游",
+  "SYNTHETIC": "合成",
+  "CONFIGURED": "已配置",
+  "SEED": "預置",
+  "UNKNOWN": "未知",
+  "ERROR": "錯誤",
+  "Live HLS connected": "實時 HLS 已連接",
+  "Live HLS unavailable": "實時 HLS 不可用",
+  "No stream URL configured": "未配置流 URL",
+  "Live stream connected": "實時流已連接",
+  "Snapshot feed connected": "快照數據源已連接",
+  "Media fetch failed": "媒體獲取失敗",
+  "Upstream snapshot active": "上游快照已啟用",
+  "Fallback Street View frame": "備用街景畫面",
+  "Upstream unavailable": "上游不可用",
+  "No source configured": "未配置來源",
+  "Configured source": "已配置來源",
+  "Configured Source": "已配置數據源",
+  "Synthetic fallback": "合成備用",
+  "Upstream HTTP {status}": "上游 HTTP {status}",
+  "Unexpected media type {type}": "意外的媒體類型 {type}",
+  "SOURCE · UNKNOWN": "來源 · 未知",
+  "FRAME · LOADING": "畫面 · 加載中",
+  "FRAME · UNAVAILABLE": "畫面 · 不可用",
+  "CALIBRATED": "已校準",
+  "CURATED": "精選",
+  "RAW PRIOR": "初始估計",
+  "CCTV ON": "CCTV 開",
+  "CCTV OFF": "CCTV 關",
+  "VIEWSHED ON": "可視域開",
+  "COVERAGE ON": "覆蓋範圍開",
+  "COVERAGE OFF": "覆蓋範圍關",
+  "AUTO HOP ON": "自動跳轉開",
+  "AUTO HOP OFF": "自動跳轉關",
+  "PROJECTION ON": "投影開",
+  "PROJECTION OFF": "投影關",
+  "CAL · EDITED (UNSAVED)": "CAL · 已編輯（未保存）",
+  "CAL · {badge}": "CAL · {badge}",
+  "MONITOR": "監視器",
+  "OFF": "關",
+  "{city} · HDG {heading} · FOV {fov} · RANGE {range}m · {projection}{calBadge} · {provider}{status}": "{city} · HDG {heading} · FOV {fov} · 範圍 {range} m · {projection}{calBadge} · {provider}{status}",
+  "{count} cameras loaded · click a camera to activate": {
+    "other": "已加載 {count} 個攝像頭 · 點擊攝像頭以激活"
+  },
+  "{count} cameras loaded · enable CCTV to activate": {
+    "other": "已加載 {count} 個攝像頭 · 啟用 CCTV 以激活"
+  },
+  "Enable CCTV to load camera intersections": "啟用 CCTV 以加載路口攝像頭",
+  "Enable CCTV to start camera-linked intelligence summaries.": "啟用 CCTV 以開始生成與攝像頭關聯的情報摘要。",
+  "No summary available.": "暫無摘要。",
+  "loading frames": "正在加載畫面",
+  "camera grid ready": "攝像頭網格就緒",
+  "Clearing selected data layers": "正在清除已選數據圖層",
+  "Clear selected data layers": "清除已選數據圖層",
+  "CONDITIONS UNKNOWN": "天氣狀況未知",
+  "CLEAR": "晴",
+  "PARTLY CLOUDY": "晴間多雲",
+  "OVERCAST": "陰",
+  "FOG": "霧",
+  "DRIZZLE": "毛毛雨",
+  "RAIN": "雨",
+  "RAIN SHOWERS": "陣雨",
+  "SNOW SHOWERS": "陣雪",
+  "THUNDERSTORM": "雷暴",
+  "MIXED CONDITIONS": "混合天氣",
+  "CYCLE ON": "輪換開",
+  "CYCLE OFF": "輪換關",
+  "Stop automatic page cycling. Previous, Next, and the SIG/NEWS/LOCAL tabs stay available.": "停止自動翻頁。上一頁、下一頁以及“信號”“新聞”“本地”標籤頁仍可使用。",
+  "Cycle briefing pages automatically every 9 seconds (Signals → News → Local). Pauses while you hover or focus the panel. Live signal data refreshes continuously either way.": "每 9 秒自動輪換簡報頁面（信號 → 新聞 → 本地）。懸停或聚焦面板時暫停。無論是否輪換，實時信號數據都會持續刷新。",
+  "ACQUIRING REGIONAL NEWS": "正在獲取地區新聞",
+  "REGIONAL NEWS UNAVAILABLE": "地區新聞不可用",
+  "RESOLVING REGION": "正在解析區域",
+  "REGION UNAVAILABLE": "區域不可用",
+  "NO RECENT LOCATION MATCHES": "暫無近期位置匹配結果",
+  "{domain} · {age}": "{domain} · {age}",
+  "{value} KM/H": "{value} km/h",
+  "CLOUD {pct}%": "雲量 {pct}%",
+  "CLOUD UNKNOWN": "雲量未知",
+  "{source} · LOCATION QUERY": "{source} · 位置查詢",
+  "REGIONAL NEWS": "地區新聞",
+  "{label} · {radius} AIR/SEA WINDOW": "{label} · {radius} 空/海監視窗口",
+  "{scope} · INSTALLATIONS {coverage}": "{scope} · 設施 {coverage}",
+  "CONTEXT STANDBY": "態勢待機",
+  "ENABLE GLOBAL CONTEXT FOR PROXIMITY PINGS": "啟用全局態勢以接收鄰近目標提醒",
+  "CONTACT LOST · LAST KNOWN READOUT · NOT AN ALL-CLEAR": "目標丟失 · 最後已知讀數 · 不代表安全無虞",
+  "CONTACT LOST · {subject}": "目標丟失 · {subject}",
+  "SUBJECT LEFT ITS FEED · READOUT HOLDING LAST KNOWN": "目標已脫離其數據源 · 讀數保持最後已知值",
+  "{cohort} · {contact}": "{cohort} · {contact}",
+  "NO AVAILABLE EXAMPLE": "無可用示例",
+  "{cohort}, Unavailable": "{cohort}，不可用",
+  "AHEAD": "正前方",
+  "{side} {angle}": "{side} {angle}",
+  "L": "左",
+  "R": "右",
+  "{count} INPUTS UNKNOWN · NOT AN ALL-CLEAR": {
+    "other": "{count} 項輸入未知 · 不代表安全無虞"
+  },
+  "AVAILABLE INPUTS CURRENT · NOT AN ALL-CLEAR": "可用輸入均為最新 · 不代表安全無虞",
+  "SQUAWK {code} · {status}": "應答碼 {code} · {status}",
+  "ADS-B PRIORITY · {status}": "ADS-B 優先級 · {status}",
+  "ADS-B EMERGENCY · {status}": "ADS-B 緊急 · {status}",
+  "AIRCRAFT": "飛機",
+  "ACQUIRING SURFACE": "正在獲取地面數據",
+  "SURFACE FALLBACK": "地面數據備用",
+  "STALE FEED": "數據源過期",
+  "LIVE TRACK": "實時航跡",
+  "COMMERCIAL": "商用",
+  "{aircraftClass} · {emergency} · {feedState}": "{aircraftClass} · {emergency} · {feedState}",
+  "{aircraftClass} · {feedState} · COURSE ALIGNED": "{aircraftClass} · {feedState} · 航向對準",
+  "ARROW · ESTIMATED DIRECTION": "箭頭 · 預估方向",
+  "ROUTE DATA UNAVAILABLE": "航線數據不可用",
+  "DEST {bearing}": "目的地 {bearing}",
+  "Disable cockpit weather effects": "停用座艙天氣效果",
+  "Enable cockpit weather effects": "啟用座艙天氣效果",
+  "ON": "開",
+  "Normal": "常規",
+  "Night vision": "夜視",
+  "Thermal": "熱成像",
+  "Anime": "動漫",
+  "Noir": "黑白",
+  "Snow": "雪景",
+  "Current cockpit vision style: {style}. Activate for next style.": "當前座艙視覺樣式：{style}。點擊可切換到下一個樣式。",
+  "Current style: {style} — click for next": "當前樣式：{style}——點擊切換到下一個",
+  "Collapse Contact panel": "收起目標面板",
+  "Expand Contact panel": "展開目標面板",
+  "Collapse contact panel": "收起目標面板",
+  "Expand contact panel": "展開目標面板",
+  "Collapse cockpit briefing panel": "收起座艙簡報面板",
+  "Expand cockpit briefing panel": "展開座艙簡報面板",
+  "Collapse briefing panel": "收起簡報面板",
+  "Expand briefing panel": "展開簡報面板",
+  "OBSERVED / MAPPED PINGS": "觀測 / 地圖標註目標",
+  "SOURCE-BACKED EVENTS · NO SYNTHETIC NEWS": "來源可查的事件 · 無合成新聞",
+  "LATEST LOCATION-MATCHED REPORTING": "當前地區最新報道",
+  "{source} · LOCATION QUERY · RECENT": "{source} · 位置查詢 · 近期",
+  "LOCAL INFO": "本地信息",
+  "PLACE / CONDITIONS / POSITION": "地點 / 狀況 / 位置",
+  "TIME UNKNOWN": "時間未知",
+  "{count}M AGO": "{count} 分鐘前",
+  "{count}H AGO": "{count} 小時前",
+  "{count}D AGO": "{count} 天前",
+  "DIR UNKNOWN": "風向未知",
+  "Select flight {title}": "選擇航班 {title}",
+  "{aircraftClass} · CURRENT": "{aircraftClass} · 當前",
+  "MILITARY FLIGHT": "軍用航班",
+  "COMMERCIAL FLIGHT": "商用航班",
+  "{aircraftClass} · {distance}": "{aircraftClass} · {distance}",
+  "DISTANCE UNKNOWN": "距離未知",
+  "{count} INPUTS UNKNOWN": {
+    "other": "{count} 項輸入未知"
+  },
+  "SOURCE STATUS UNAVAILABLE": "數據源狀態不可用",
+  "Restore real aircraft": "恢復真實飛機",
+  "Reclassify as TR-3B": "重新歸類為 TR-3B",
+  "TRACK ACQUIRED": "已獲取航跡",
+  "{label} · COURSE {heading}°": "{label} · 航向 {heading}°",
+  "Context could not restore every layer; try again": "態勢未能恢復所有圖層，請重試",
+  "No selected data layers": "沒有已選數據圖層",
+  "{count} data layers could not be cleared": {
+    "other": "{count} 個數據圖層無法清除"
+  },
+  "Cleared {count} data layers": {
+    "other": "已清除 {count} 個數據圖層"
+  },
+  "Selected data layers could not be cleared": "無法清除已選數據圖層",
+  "Contacts could not complete the requested transition; try again": "目標未能完成所請求的切換，請重試",
+  "Space Missions could not complete the requested transition; try again": "太空任務未能完成所請求的切換，請重試",
+  "Nearby installations refreshed": "附近設施已刷新",
+  "Nearby installations could not be refreshed; try again": "無法刷新附近設施，請重試",
+  "Space Missions cancellation could not restore the previous layer state": "取消太空任務後無法恢復先前的圖層狀態",
+  "That layer is unavailable in the current Context mode": "該圖層在當前態勢模式下不可用",
+  "{layerId} could not {action} cleanly": "{layerId} 未能正常{action}",
+  "start": "啟動",
+  "stop": "停止",
+  "{mode} could not start because another layer did not stop cleanly": "{mode} 無法啟動，因為另一個圖層未能正常停止",
+  "Space Missions": "太空任務",
+  "Context": "態勢",
+  "Rendered globe frames per second · toggle with `": "每秒渲染的地球幀數 · 按 ` 鍵切換",
+  "imported map files": "已導入的地圖文件",
+  "Ground heights could not be refreshed. Try the file again when the map has loaded.": "無法刷新地面高度。請在地圖加載完成後重新嘗試該文件。",
+  "{count} map objects": {
+    "other": "{count} 個地圖對象"
+  },
+  ", drawn with its own styles": "，使用其自帶樣式繪製",
+  "Hide {name}": "隱藏 {name}",
+  "Show {name}": "顯示 {name}",
+  "Fly to {name}": "飛往 {name}",
+  "Remove {name}": "移除 {name}",
+  "At most {count} files at once — remove one first.": "一次最多 {count} 個文件——請先移除一個。",
+  "Reading {name}…": "正在讀取 {name}…",
+  "That file could not be read.": "無法讀取該文件。",
+  "Added {count} files.": {
+    "other": "已添加 {count} 個文件。"
+  },
+  "{count} files could not be added ({name}: {error})": {
+    "other": "{count} 個文件無法添加（{name}：{error}）"
+  },
+  "Some KML content was left out.": "部分 KML 內容未被導入。",
+  "Press on the ground, not the sky": "請按在地面，而不是天空",
+  "Drag to size the box": "拖動以調整框選大小",
+  "light {source} to use your {name} key": "開啟 {source} 以使用你的 {name} 密鑰",
+  "light {source}": "開啟 {source}",
+  ", or ": "，或",
+  "{requirement}, or {offer}": "{requirement}，或{offer}",
+  "Live Flights": "實時航班",
+  "Military Flights": "軍用航班",
+  "Earthquakes (24h)": "地震（24 小時）",
+  "Satellites": "衛星",
+  "Space Missions (30d)": "太空任務（30 天）",
+  "Street Traffic": "街道交通",
+  "CCTV": "CCTV",
+  "Radio": "電臺",
+  "Bikeshare": "共享單車",
+  "Live AIS Vessels": "實時 AIS 船舶",
+  "Mapped Installations": "地圖標註設施",
+  "Global Context": "全局態勢",
+  "Datacenters": "數據中心",
+  "Dams": "水壩",
+  "Submarine Cables": "海底電纜",
+  "FIRMS Active Fires": "FIRMS 活躍火點",
+  "Local ADS-B": "本地 ADS-B",
+  "Transit": "公共交通",
+  "Recent Imagery": "近期影像",
+  "Fire Perimeters": "火場周界",
+  "GNSS Integrity": "GNSS 完好性",
+  "Rain radar": "降雨雷達",
+  "Lightning density": "閃電密度",
+  "Cyclone advisories": "氣旋預警",
+  "ALPR Cameras": "ALPR 攝像頭",
+  "Live Vessels": "實時船舶",
+  "Bike Share": "共享單車",
+  "Cameras": "攝像頭",
+  "Street Level": "街景",
+  "Mapped ALPR Cameras": "地圖標註 ALPR 攝像頭",
+  "Data Centers": "數據中心",
+  "Active Fires": "活躍火點",
+  "Military aircraft": "軍用飛機",
+  "Vessels": "船舶",
+  "CCTV + Street View fallback": "CCTV + 街景備用",
+  "OpenStreetMap + optional Google Maps Places": "OpenStreetMap + 可選 Google Maps Places",
+  "GFS / ECMWF IFS · FORECAST": "GFS / ECMWF IFS · 預報",
+  "NOAA nowCOAST · OBSERVED": "NOAA nowCOAST · 觀測",
+  "NASA FIRMS · LIVE": "NASA FIRMS · 實時",
+  "OSM routing": "OSM 路線規劃",
+  "data source|Local": "本地",
+  "ENABLING": "啟用中",
+  "DISABLING": "停用中",
+  "Movement": "動態目標",
+  "Infrastructure": "基礎設施",
+  "Events": "事件",
+  "Weather": "天氣",
+  "Utilities": "工具",
+  "Other layers": "其他圖層",
+  "{state} · {source}": "{state} · {source}",
+  "UNCERTAIN · {source} · lifecycle state requires reconciliation": "不確定 · {source} · 生命週期狀態需要核對",
+  "{state} · {source} · {detail} · retry {seconds}s": "{state} · {source} · {detail} · {seconds} 秒後重試",
+  "{state} · {source} · {detail}": "{state} · {source} · {detail}",
+  "never": "未更新",
+  "{source} · {loadingLabel}": "{source} · {loadingLabel}",
+  "{accepted} of {raw} records accepted": "已接受 {accepted} / {raw} 條記錄",
+  "incomplete snapshot": "快照不完整",
+  "{state} · {source} · {detail} · {ago}": "{state} · {source} · {detail} · {ago}",
+  "{state} · {source} · {ago} · retrying in {seconds}s": "{state} · {source} · {ago} · {seconds} 秒後重試",
+  "{state} · {source} · {ago}": "{state} · {source} · {ago}",
+  "{source} · {ago}": "{source} · {ago}",
+  "UNCERTAIN": "不確定",
+  "status chip|UNAVAILABLE": "不可用",
+  "Data source unavailable": "數據源不可用",
+  "{name}: {state}": "{name}：{state}",
+  "{count}s ago": "{count} 秒前",
+  "Local FM stopped: internet radio started": "本地 FM 已停止：網絡電臺已開始播放",
+  "IDLE": "空閒",
+  "CONNECTING": "連接中",
+  "TUNING": "調諧中",
+  "STREAMING": "接收中",
+  "UNSUPPORTED": "不支持",
+  "idle": "空閒",
+  "running": "運行中",
+  "suspended": "已掛起",
+  "closed": "已關閉",
+  "feed status|live": "實時",
+  "feed status|stale": "過期",
+  "feed status|unreachable": "無法連接",
+  "feed status|invalid": "無效",
+  "waiting for IQ": "等待 IQ 數據",
+  "{count} messages": {
+    "other": "{count} 條消息"
+  },
+  "DSP {count} blocks": {
+    "other": "DSP {count} 個數據塊"
+  },
+  "DSP waiting": "DSP 等待中",
+  "{level} dBFS audio": "音頻 {level} dBFS",
+  "audio signal --": "音頻信號 --",
+  "audio {state}": "音頻 {state}",
+  "{count} HEARD": {
+    "other": "已接收 {count} 架飛機的信號"
+  },
+  "DISCONNECT": "斷開連接",
+  "CONNECT": "連接",
+  "LOCATING…": "定位中…",
+  "LOCATED": "已定位",
+  "LOCATE": "定位",
+  " · read while Local ADS-B is on": " · 僅在本地 ADS-B 開啟時讀取",
+  "Decoder feeds: {feeds}": "解碼器數據源：{feeds}",
+  "Language: {language}": "語言：{language}",
+  "Change the interface language": "更改界面語言",
+  "Interface language": "界面語言",
+  "Search languages": "搜索語言",
+  "No matching languages": "沒有匹配的語言",
+  "📍 Location: --": "📍 位置：--",
+  "Landmark: --": "地標：--",
+  "Searched location": "已搜索的位置",
+  "ORBIT": "環繞",
+  "Location not found": "未找到位置",
+  "Search failed": "搜索失敗",
+  "Detailed outline unavailable": "無法獲取詳細輪廓",
+  "Fly to a POI first": "請先飛往一個 POI",
+  "Reset to full globe view": "重置為完整地球視圖",
+  "Reset cockpit to full globe view": "將座艙重置為完整地球視圖",
+  "Resetting to full globe view": "正在重置為完整地球視圖",
+  "Resetting cockpit to full globe view": "正在將座艙重置為完整地球視圖",
+  "MAP": "地圖",
+  "panel": "面板",
+  "Expand {name}": "展開 {name}",
+  "Collapse {name}": "收起 {name}",
+  "Expand Radio": "展開電臺",
+  "Collapse Radio": "收起電臺",
+  "Expand Radio section": "展開電臺區域",
+  "Collapse Radio section": "收起電臺區域",
+  "Panel layout updated — positions reset to new defaults": "面板佈局已更新——位置已重置為新的默認值",
+  "Austin": "奧斯汀",
+  "San Francisco": "舊金山",
+  "New York": "紐約",
+  "Tokyo": "東京",
+  "London": "倫敦",
+  "Paris": "巴黎",
+  "Dubai": "迪拜",
+  "Washington DC": "華盛頓特區",
+  "Tallinn": "塔林",
+  "Los Angeles": "洛杉磯",
+  "Collapse Cockpit display options": "收起座艙顯示選項",
+  "Expand Cockpit display options": "展開座艙顯示選項",
+  "Collapse Cockpit Radio controls": "收起座艙電臺控件",
+  "Expand Cockpit Radio controls": "展開座艙電臺控件",
+  "CH {index} / {total}": "頻道 {index} / {total}",
+  "NO STATIONS": "無電臺",
+  "NO STATION AVAILABLE": "無可用電臺",
+  "{name}, station {index} of {total}": "{name}，第 {index} 個電臺，共 {total} 個",
+  "No station available": "沒有可用電臺",
+  "OFF AIR": "停播",
+  "STATION UNAVAILABLE": "電臺不可用",
+  "Station unavailable after directory refresh": "目錄刷新後該電臺不可用",
+  "Radio could not {action} cleanly": "電臺未能正常{action}",
+  "Go to expanded Radio section": "前往展開的電臺區域",
+  "Expand Radio section in Context": "在態勢面板中展開電臺區域",
+  "Close compact Radio controls": "關閉精簡電臺控件",
+  "Open compact Radio controls": "打開精簡電臺控件",
+  "SYNC": "同步",
+  "RECONCILE": "核對",
+  "DISABLE": "停用",
+  "ENABLE": "啟用",
+  "Reconcile Radio — lifecycle uncertain": "核對電臺——生命週期狀態不確定",
+  "Disable Radio": "停用電臺",
+  "Enable Radio": "啟用電臺",
+  "DIRECTORY BAND": "目錄頻段",
+  "{category} BAND": "{category} 頻段",
+  "NO STATION SELECTED": "未選擇電臺",
+  "Directory metadata only": "僅目錄元數據",
+  "Loading station directory…": "正在加載電臺目錄…",
+  "Choose a globe marker or use next.": "請選擇地球上的標註或使用“下一個”。",
+  "TAGS · {tags}": "標籤 · {tags}",
+  "Play": "播放",
+  "PAUSE": "暫停",
+  "RESUME": "繼續",
+  "PLAY": "播放",
+  "selected": "所選",
+  "nearest": "最近",
+  "{action} {target} radio station": "{action}{target}電臺",
+  "RADIO STATE UNCERTAIN": "電臺狀態不確定",
+  "SYNCING DIRECTORY": "正在同步目錄",
+  "RADIO READY": "電臺就緒",
+  "SYNCING": "同步中",
+  "READY": "就緒",
+  "station": "電臺",
+  " · stale/degraded directory": " · 目錄過期/降級",
+  " · degraded directory": " · 目錄降級",
+  " · stale directory": " · 目錄過期",
+  " · outside current filter": " · 不在當前篩選範圍內",
+  "Ready — playback starts only from your action": "就緒——手動操作後開始播放",
+  "Radio off": "電臺已關閉",
+  "Connecting directly to broadcaster…": "正在直接連接廣播方…",
+  "Buffering broadcaster stream…": "正在緩衝廣播流…",
+  "Playing {station}": "正在播放 {station}",
+  "Paused {station}": "已暫停 {station}",
+  "Broadcaster stream unavailable": "廣播流不可用",
+  " · muted during voice interaction": " · 語音交互期間已靜音",
+  " · restoring volume after voice": " · 語音結束後正在恢復音量",
+  " · static indicates no broadcaster audio": " · 雜音表示廣播方沒有音頻",
+  " · tuning static until broadcaster starts": " · 廣播方啟動前為調諧雜音",
+  "Station unavailable after directory refresh — choose another channel": "目錄刷新後電臺不可用——請選擇其他頻道",
+  "Radio is enabling…": "電臺正在啟用…",
+  "Radio is disabling…": "電臺正在停用…",
+  "Radio lifecycle is uncertain — use Enable or Disable to reconcile": "電臺生命週期狀態不確定——請使用“啟用”或“停用”進行核對",
+  "Clear reading": "清除讀數",
+  "Earlier observation": "較早觀測",
+  "Observed history": "觀測歷史",
+  "Later observation": "較晚觀測",
+  "Latest": "最新",
+  "Newest frame per product": "每個產品的最新一幀",
+  "Replay observed history": "回放觀測歷史",
+  "Imagery on Esri · Google 3D returns when cleared": "影像顯示在 Esri 底圖上 · 清除後恢復 Google 3D",
+  "Point the camera at the ground to use the view": "將相機對準地面才能使用當前視野",
+  "That point cannot anchor a box": "該點無法作為框選錨點",
+  "Imagery stops at ±{limit}° latitude": "影像僅覆蓋到緯度 ±{limit}°",
+  "{owner} is using the pointer — close it first": "{owner} 正在使用指針——請先將其關閉",
+  "Box is {size} wide · limit {limit}": "框選寬 {size} · 上限 {limit}",
+  "View is {size} wide · limit {limit}": "視野寬 {size} · 上限 {limit}",
+  "VS BASEMAP": "對比底圖",
+  "A / B": "A / B",
+  "Newest low-cloud day for this box · scene cloud, not box cloud": "框選區域內最近的少雲日期 · 雲量指整景影像，並非框選區域",
+  "Newest day covering this box · cloudier than 20%": "覆蓋此框選的最新一天 · 雲量高於 20%",
+  "Newest day with imagery for this box · partial coverage": "此框選有影像的最新一天 · 部分覆蓋",
+  "Newest daily overview for this box": "此框選的最新每日概覽",
+  "newest clear day": "最近少雲日期",
+  "newest day (cloudy)": "最新一天（多雲）",
+  "newest day (partial coverage)": "最新一天（部分覆蓋）",
+  "newest overview": "最新概覽",
+  "No imagery": "無影像",
+  "Loading": "加載中",
+  "coverage|full": "完整",
+  "coverage|partial": "部分",
+  "unknown": "未知",
+  "no imagery": "無影像",
+  "{percent}% cloud": "{percent}% 雲量",
+  "{min}–{max}% cloud": "{min}–{max}% 雲量",
+  "NO BOX": "無框選",
+  "SEARCHING": "搜索中",
+  "{count} DAYS": {
+    "other": "{count} 天"
+  },
+  "Zoom in or draw a smaller box": "放大或繪製更小的框選",
+  "Select a box or use the view": "框選區域，或使用當前視野",
+  "Searching the last 30 days": "正在搜索最近 30 天",
+  "No days to show for this box": "此框選沒有可顯示的日期",
+  "Drag the divider · SWAP trades sides": "拖動分割線 · “交換”可互換兩側",
+  "← → preview · A or B pins the focused day": "← → 預覽 · A 或 B 固定當前所選日期",
+  "← → preview the other side · A or B pins it": "← → 預覽另一側 · A 或 B 將其固定",
+  "S on another day replaces it · × unpins": "在其他日期按 S 替換 · × 取消固定",
+  "← → preview · S shows the focused day": "← → 預覽 · S 顯示當前所選日期",
+  "ZOOM IN": "放大",
+  "Fly in until the view fits the 1,000 km limit": "拉近直到視野不超過 1,000 km 上限",
+  "Imagery days, newest first · arrows move, S or A and B pin": "影像日期（最新在前）· 方向鍵移動，S、A、B 固定",
+  "On the map": "地圖上",
+  "Mode": "模式",
+  "Imagery opacity": "影像不透明度",
+  "SWAP": "交換",
+  "Trade the two sides of the divider": "互換分割線兩側",
+  "SELECT BOX": "框選區域",
+  "Drag a box on the map (Esc cancels)": "在地圖上拖出框選（Esc 取消）",
+  "USE VIEW": "使用視野",
+  "Use the current view as the box": "以當前視野作為框選",
+  "Forget the box and its images": "清除框選及其影像",
+  "START HERE": "從此開始",
+  "Checking": "檢查中",
+  "PREVIEW": "預覽",
+  "Newest day with imagery for this box": "此框選有影像的最新一天",
+  "SHOW": "顯示",
+  "Pin {day} as {slot}": "將 {day} 固定為 {slot}",
+  "Show {day}": "顯示 {day}",
+  "pinned {slot}": "已固定為 {slot}",
+  "shown": "顯示中",
+  "preview": "預覽",
+  "start here": "從此開始",
+  "No box": "無框選",
+  "Searching": "搜索中",
+  "Every day is empty here": "此處每天都為空",
+  "Sources off": "數據源已關閉",
+  "VS": "對比",
+  "Not set": "未設置",
+  "Basemap": "底圖",
+  "Source off": "數據源已關閉",
+  "Unpin {slot}": "取消固定 {slot}",
+  "Unpin the image": "取消固定圖像",
+  "EXPORT {slot}": "導出 {slot}",
+  "EXPORT": "導出",
+  "Download {slot} as a PNG": "將 {slot} 下載為 PNG",
+  "Download the image as a PNG": "將圖像下載為 PNG",
+  "Box {width} × {height} km": "框選 {width} × {height} km",
+  "Acquired {time}": "獲取於 {time}",
+  "Coverage {coverage}": "覆蓋 {coverage}",
+  "START HERE · {reason}": "從此開始 · {reason}",
+  "Daily overview shows little detail in a box this small": "在這麼小的框選內，每日概覽幾乎看不出細節",
+  "Imagery: NASA GIBS and Worldview · HLS (Sentinel-2, Landsat 8/9) and VIIRS": "影像：NASA GIBS 與 Worldview · HLS（Sentinel-2、Landsat 8/9）與 VIIRS",
+  "Details": "詳情",
+  "Times, coverage, sources": "時間、覆蓋與數據源",
+  "HIDE EMPTY DAYS": "隱藏空白日",
+  "SHOW EMPTY DAYS · {count}": "顯示空白日 · {count}",
+  "Days the probe found empty in this box": "探測發現此框選內為空的日期",
+  "image": "圖像",
+  "BASEMAP": "底圖",
+  "The basemap": "底圖",
+  "basemap": "底圖",
+  "Recent imagery against the basemap divider": "近期影像與底圖對比分割線",
+  "Recent imagery A and B divider": "近期影像 A / B 分割線",
+  "{before} {left} percent, {after} {right} percent": "{before} {left}%，{after} {right}%",
+  "Export failed · {error}": "導出失敗 · {error}",
+  "Scene action failed": "場景操作失敗",
+  "New scene name": "新場景名稱",
+  "Delete scene \"{scene}\" and all shots?": "刪除場景“{scene}”及其全部鏡頭？",
+  "Delete shot \"{shot}\"?": "刪除鏡頭“{shot}”？",
+  "Stopped (Esc)": "已停止（Esc）",
+  "SPARSE": "稀疏",
+  "BALANCED": "均衡",
+  "No shots yet. Use CAPTURE SHOT to save current look.": "暫無鏡頭。使用“保存鏡頭”保存當前視角及設置。",
+  "Double-click to rename": "雙擊重命名",
+  "Shot name": "鏡頭名稱",
+  "LOAD": "加載",
+  "DEL": "刪除",
+  "{duration}s + {hold}s": "{duration} 秒 + {hold} 秒",
+  "Choose files": "選擇文件",
+  "{count} files selected": {
+    "other": "已選擇 {count} 個文件"
+  },
+  "No file chosen": "未選擇文件",
+  "Cancel": "取消",
+  "EDIT DETAILS": "編輯詳情",
+  "SHARE SCENE": "分享場景",
+  "Shared flight follow expired": "分享的航班跟隨已過期",
+  "Shared military flight follow expired": "分享的軍用航班跟隨已過期",
+  "Shared satellite follow expired": "分享的衛星跟隨已過期",
+  "Shared flight could not be restored — feed unavailable": "無法恢復分享的航班——數據源不可用",
+  "Shared military flight could not be restored — feed unavailable": "無法恢復分享的軍用航班——數據源不可用",
+  "Shared satellite could not be restored — feed unavailable": "無法恢復分享的衛星——數據源不可用",
+  "Shared flight is unavailable": "分享的航班不可用",
+  "Shared military flight is unavailable": "分享的軍用航班不可用",
+  "Shared satellite is unavailable": "分享的衛星不可用",
+  "entity": "實體",
+  "Shared {subject} follow expired": "分享的 {subject} 跟隨已過期",
+  "Shared {subject} could not be restored — feed unavailable": "無法恢復分享的 {subject}——數據源不可用",
+  "Shared {subject} is unavailable": "分享的 {subject} 不可用",
+  "ACQUIRING": "獲取中",
+  "SHARED {subject}": "分享的 {subject}",
+  "subject": "目標",
+  "LOADING LIVE DATA": "正在加載實時數據",
+  "LOAD COMPLETE": "加載完成",
+  "LOAD CANCELLED": "加載已取消",
+  "LOAD FAILED": "加載失敗",
+  "LIVE DATA OFF": "實時數據已關閉",
+  "MAPPED SITES LOADED": "已加載地圖標註設施",
+  "RETRYING MAPPED SITES": "正在重試地圖標註設施",
+  "FETCHING MAPPED SITES": "正在獲取地圖標註設施",
+  "RETRYING ALPR CAMERAS": "正在重試 ALPR 攝像頭",
+  "FETCHING ALPR CAMERAS": "正在獲取 ALPR 攝像頭",
+  "OVERPASS TEMPORARILY UNAVAILABLE": "Overpass 暫時不可用",
+  "OVERPASS RATE-LIMITED": "Overpass 已被限流",
+  "OVERPASS TIMED OUT": "Overpass 超時",
+  "OVERPASS COULD NOT COMPLETE THE QUERY": "Overpass 無法完成查詢",
+  "MAP TILES TEMPORARILY UNAVAILABLE": "地圖瓦片暫時不可用",
+  "MAPPED NAMES TEMPORARILY UNAVAILABLE": "地點名稱暫時不可用",
+  "TURNING OFF LIVE DATA": "正在關閉實時數據",
+  "REFRESHING LIVE DATA": "正在刷新實時數據",
+  "syncing road network": "正在同步路網",
+  "retry pending": "等待重試",
+  "retrying in {seconds}s": "{seconds} 秒後重試",
+  "ALPR cameras": "ALPR 攝像頭",
+  "OpenSky OAuth client missing/invalid": "OpenSky OAuth 客戶端缺失/無效",
+  "OpenSky OAuth rejected credentials": "OpenSky OAuth 拒絕了憑據",
+  "OpenSky username/password rejected": "OpenSky 用戶名/密碼被拒絕",
+  "OpenSky auth missing": "OpenSky 缺少認證",
+  "OpenSky auth required": "OpenSky 需要認證",
+  "OpenSky auth invalid": "OpenSky 認證無效",
+  "OpenSky auth failed": "OpenSky 認證失敗",
+  "KartaView answered HTTP {status}": "KartaView 返回 HTTP {status}",
+  "Panoramax answered HTTP {status}": "Panoramax 返回 HTTP {status}",
+  "KartaView refused the request (code {code})": "KartaView 拒絕了請求（代碼 {code}）",
+  "Vector tiles unavailable (HTTP {status})": "矢量瓦片不可用（HTTP {status}）",
+  "GNSS feed unavailable (HTTP {status})": "GNSS 數據源不可用（HTTP {status}）",
+  "{count} CelesTrak groups unavailable": {
+    "other": "{count} 個 CelesTrak 分組不可用"
+  },
+  "{feed} feed unavailable": "{feed} 數據源不可用",
+  "Source snapshot {minutes} min old": "數據源快照：{minutes} 分鐘前",
+  "{source} rate limited (anonymous)": "{source} 已被限流（匿名）",
+  "{source} rate limited": "{source} 已被限流",
+  "{source} network error": "{source} 網絡錯誤",
+  "Malformed {source} aircraft rows": "{source} 飛機數據行格式錯誤",
+  "Malformed {source} response": "{source} 響應格式錯誤",
+  "entry {n}": "條目 {n}",
+  "feeds {names} stale": {
+    "other": "數據源 {names} 過期"
+  },
+  "feeds {names} unreachable": {
+    "other": "數據源 {names} 無法連接"
+  },
+  "feeds {names} invalid": {
+    "other": "數據源 {names} 無效"
+  },
+  "Loading {feeds}": "正在加載 {feeds}",
+  "{count} heard": {
+    "other": "已接收 {count} 架飛機的信號"
+  },
+  "USB {rate} msg/s": "USB {rate} msg/s",
+  "{rate} msg/s": "{rate} msg/s",
+  "{count} feeds live": {
+    "other": "實時數據源 {count} 個"
+  },
+  "{feed} {count} ({seconds}s old)": "{feed} {count}（{seconds} 秒前）",
+  "Street Level could not start": "街景未能啟動",
+  "Street Level toggle failed": "街景切換失敗",
+  "SHRINK": "縮小",
+  "EXPAND": "展開",
+  "Shrink": "縮小",
+  "Expand": "展開",
+  "ANY DATE": "任意日期",
+  "LAST 10 YEARS": "最近 10 年",
+  "LAST 5 YEARS": "最近 5 年",
+  "LAST 3 YEARS": "最近 3 年",
+  "LAST 2 YEARS": "最近 2 年",
+  "LAST YEAR": "最近一年",
+  "LAST 6 MONTHS": "最近 6 個月",
+  "LAST 3 MONTHS": "最近 3 個月",
+  "LAST MONTH": "最近一個月",
+  "LAST {count} DAYS": {
+    "other": "最近 {count} 天"
+  },
+  "{window} · SINCE {date}": "{window} · 自 {date} 起",
+  "Turn Street Level off": "關閉街景",
+  "Turn Street Level on": "開啟街景",
+  "{name} imagery on": "{name} 影像已開啟",
+  "{name} imagery off": "{name} 影像已關閉",
+  "Image by {creator}": "圖像作者：{creator}",
+  " or ": " 或 ",
+  "OPEN {labels}": "打開 {labels}",
+  "Open {names} at the centre of the view": "在視野中心打開 {names}",
+  "Zoom in to a street to open {names} here": "放大到街道以在此處打開 {names}",
+  "Loading this sequence…": "正在加載此序列…",
+  "{n} images in this sequence · Esc clears": {
+    "other": "此序列共 {n} 張圖像 · Esc 清除"
+  },
+  "{n} streets in view · click a line for its nearest photo": {
+    "other": "視野內共 {n} 條街道 · 點擊線段查看距其最近的照片"
+  },
+  "{n} sequences in view · click a line for its nearest photo": {
+    "other": "視野內共 {n} 條序列 · 點擊線段查看距其最近的照片"
+  },
+  "{n} sequences in view · click a line for its photos": {
+    "other": "視野內共 {n} 條序列 · 點擊線段查看其照片"
+  },
+  "km/h": "km/h",
+  "m/s": "m/s",
+  "mph": "mph",
+  "hPa": "hPa",
+  "kt": "kn",
+  "kts": "kn",
+  "ft": "ft",
+  "km": "km",
+  "m": "m",
+  "h": "小時",
+  "min": "分鐘",
+  "s": "秒",
+  "dB": "dB",
+  "Celestial ring — reveal the full globe": "天球環——顯示完整地球",
+  "Celestial ring — available in Normal style": "天球環——僅在常規樣式下可用",
+  "Detection overlay: {mode}": "探測疊加層：{mode}",
+  "Detection overlay: off": "探測疊加層：關閉",
+  "DETECT": "探測",
+  "{time} · {minutes} min ago": "{time} · {minutes} 分鐘前",
+  "Active weather": "已啟用的天氣圖層",
+  "LATEST · newest per product": "最新 · 每個產品的最新一幀",
+  "Forecast · valid {valid} · issued {issued}": "預報 · 有效時間 {valid} · 發布時間 {issued}",
+  "{detail} · Does not follow history": "{detail} · 不隨觀測歷史變化",
+  "Forecast · valid {valid}": "預報 · 有效時間 {valid}",
+  "voice|OFF": "關",
+  "voice|CONNECTING": "連接中",
+  "voice|LISTENING": "聆聽中",
+  "voice|EXECUTING": "執行中",
+  "voice|ERROR": "錯誤",
+  "AI AGENT": "AI 智能體",
+  "Voice model tier — applies next session": "語音模型檔位——下次會話生效",
+  "STD": "標準",
+  "Estimated session cost": "預估會話費用",
+  "Voice control — activate to toggle voice; hold Space to speak": "語音控制——點擊可切換語音；按住空格鍵說話",
+  "ON/OFF": "開/關",
+  "VOICE STANDBY": "語音待機",
+  "VOICE CONTROL": "語音控制",
+  "Hold Space to speak · tap Space to activate focused controls": "按住空格鍵說話 · 輕按空格鍵激活當前聚焦的控件",
+  "Voice assistant": "語音助手",
+  "VOICE": "語音",
+  "Dismiss voice card": "關閉語音卡片",
+  "YOU": "你",
+  "THIS": "所指",
+  "Plan": "計劃",
+  "Referenced items": "引用條目",
+  "NOTES & SOURCES": "說明與來源",
+  "VOICE SYSTEM ERROR": "語音系統錯誤",
+  "DISMISS": "關閉",
+  "Check microphone permission and network access, then try again.": "請檢查麥克風權限和網絡連接，然後重試。",
+  "Stopped by voice": "已通過語音停止",
+  "WebRTC microphone support unavailable": "當前瀏覽器不支持通過 WebRTC 使用麥克風",
+  "Requesting microphone": "正在請求麥克風",
+  "Release Space to send": "鬆開空格鍵發送",
+  "Hold Space to talk": "按住空格鍵說話",
+  "Ask or command": "提問或下達指令",
+  "Voice off": "語音已關閉",
+  "VOICE UNAVAILABLE": "語音不可用",
+  "VOICE ACTIVE": "語音已啟用",
+  "Voice session could not be started.": "無法啟動語音會話。",
+  "MINI": "輕量",
+  "Next session: {pendingId} — this session stays on {modelId}": "下次會話：{pendingId}——本次會話仍使用 {modelId}",
+  "Voice model: {pendingId} — click to switch to {target}; applies next session": "語音模型：{pendingId}——點擊切換到 {target}；下次會話生效",
+  "standard": "標準",
+  "mini": "輕量",
+  "COST UNKNOWN": "費用未知",
+  "ChatGPT OAuth session: {responses} response(s), {input} input and {output} output tokens, {captions} caption transcription(s) reported.": "ChatGPT OAuth 會話：已報告 {responses} 個響應、{input} 個輸入 token、{output} 個輸出 token、{captions} 次字幕轉寫。",
+  "USD cost and the API spend cap are unavailable for this auth mode.": "此認證模式下無法提供美元費用與 API 消費上限。",
+  "Usage is incomplete because a response was still in flight when the session ended.": "用量不完整，因為會話結束時仍有響應在處理中。",
+  "Estimated session cost on {modelId} — {responses} response(s). Warns at {warn}, ends the session at {cap}.": "{modelId} 的預估會話費用——{responses} 次響應。達到 {warn} 時警告，達到 {cap} 時結束會話。",
+  "Estimate is incomplete — a response was still in flight when the session ended, so its usage was never reported.": "估算不完整——會話結束時仍有響應在處理中，因此其用量從未上報。",
+  "STANDARD": "標準",
+  "{tier} applies next session": "{tier} 將在下次會話生效",
+  "Session ended — cost cap {cost}": "會話已結束——已達費用上限 {cost}",
+  "MIC": "麥克風",
+  "Radio did not start": "電臺未能啟動",
+  "Running command": "正在執行指令",
+  "{n} aircraft": {
+    "other": "{n} 架飛機"
+  },
+  "{n} military aircraft": {
+    "other": "{n} 架軍用飛機"
+  },
+  "{n} ships": {
+    "other": "{n} 艘船舶"
+  },
+  "{n} satellites": {
+    "other": "{n} 顆衛星"
+  },
+  "{n} launches": {
+    "other": "{n} 次發射"
+  },
+  "{n} earthquakes": {
+    "other": "{n} 次地震"
+  },
+  "{n} fires": {
+    "other": "{n} 處火點"
+  },
+  "{n} fire perimeters": {
+    "other": "{n} 處火場周界"
+  },
+  "{n} cyclones": {
+    "other": "{n} 個氣旋"
+  },
+  "{n} buses": {
+    "other": "{n} 輛公交車"
+  },
+  "{n} bike share": {
+    "other": "{n} 個共享單車站點"
+  },
+  "{n} flock cameras": {
+    "other": "{n} 個 Flock 攝像頭"
+  },
+  "{n} military bases": {
+    "other": "{n} 處軍事基地"
+  },
+  "{n} datacenters": {
+    "other": "{n} 個數據中心"
+  },
+  "{n} dams": {
+    "other": "{n} 座水壩"
+  },
+  "{n} air quality": {
+    "other": "{n} 個空氣質量站點"
+  },
+  "{n} results": {
+    "other": "{n} 條結果"
+  },
+  "anywhere in the loaded data": "已加載數據中的任意位置",
+  "in view": "視野內",
+  "within {radius} of the view centre": "視野中心 {radius} 範圍內",
+  "within {radius} of {place} (Contacts window)": "{place} {radius} 範圍內（目標窗口）",
+  "within {radius} of {place}": "{place} {radius} 範圍內",
+  "within {radius}": "{radius} 範圍內",
+  "over {region}": "{region} 範圍內",
+  "At least {items}": "至少 {items}",
+  "{items} {scope}": "{items} {scope}",
+  "last 24 h": "過去 24 小時",
+  "past 30 d and upcoming": "過去 30 天及未來",
+  "the flights layer loads by viewport": "航班圖層按視口加載",
+  "distance is ground distance, not overhead": "距離為地面距離，而非空中直線距離",
+  "the count is a lower bound because at least one layer reached its retained limit.": "該計數為下限，因為至少一個圖層已達到其保留上限。",
+  "{label} off": "{label} 已關閉",
+  "{label} loading": "{label} 加載中",
+  "{label} error": "{label} 出錯",
+  "counted the first {returned} loaded records": "已統計最先加載的 {returned} 條記錄",
+  "counted {returned} of {total} loaded records": "已統計 {total} 條已加載記錄中的 {returned} 條",
+  "{layers} just turned on — still loading, counts will rise": "{layers} 剛開啟——仍在加載，計數還會增加",
+  "Contacts panel snapshot at {time} — the same retained cohort supplies the card, speech, and follow-up memory": "目標面板快照（{time}）——卡片、語音播報和後續追問記憶均來自同一組保留目標",
+  "Contacts panel snapshot — the same retained cohort supplies the card, speech, and follow-up memory": "目標面板快照——卡片、語音播報和後續追問記憶均來自同一組保留目標",
+  "Fly below {km} km to a covered region": "請降至 {km} km 以下並飛往有覆蓋的區域",
+  "No feed here yet · {n} regions available": {
+    "other": "此處暫無數據源 · 有 {n} 個覆蓋區域"
+  },
+  "degraded": "降級",
+  "stale": "過期",
+  "partial": "部分可用",
+  "fallback": "備用",
+  "unavailable": "不可用",
+  "Not answered: {layers}": "未響應：{layers}",
+  "Toggle voice control": "切換語音控制",
+  "Activate to toggle voice": "點擊切換語音",
+  "Voice active": "語音已啟用",
+  "Voice could not be started.": "無法啟動語音。",
+  "the active voice session": "當前語音會話",
+  "{value} feet": "{value} 英尺",
+  "The flights layer is not enabled": "航班圖層未開啟",
+  "The military layer is not enabled": "軍用航班圖層未開啟",
+  "The satellites layer is not enabled": "衛星圖層未開啟",
+  "The ais-live-vessels layer is not enabled": "實時 AIS 船舶圖層未開啟",
+  "Could not enable the requested layer": "無法開啟所請求的圖層",
+  "Could not disable the requested layer": "無法關閉所請求的圖層",
+  "Radio layer unavailable": "電臺圖層不可用",
+  "Camera navigation is unavailable in the current view": "當前視圖下無法進行相機導航",
+  "Camera navigation policy unavailable": "相機導航策略不可用",
+  "Nearest-aircraft selection supports Flights or Military Flights only": "最近飛機選擇僅支持航班或軍用航班",
+  "Nearest-aircraft selection needs a preset, place name, or latitude and longitude": "最近飛機選擇需要預設、地名或經緯度",
+  "Could not arrive at the requested place": "無法抵達所請求的地點",
+  "The nearest airborne aircraft could not be selected": "無法選中最近的空中飛機",
+  "No flights within {radius} of the current view": "當前視野 {radius} 範圍內沒有航班",
+  "No military within {radius} of the current view": "當前視野 {radius} 範圍內沒有軍用航班",
+  "No satellites within {radius} of the current view": "當前視野 {radius} 範圍內沒有衛星",
+  "No vessels within {radius} of the current view": "當前視野 {radius} 範圍內沒有船舶",
+  "{layer} is enabled on the {source} feed, but no airborne aircraft is loaded in the {place} view yet": "{layer} 已在 {source} 數據源上開啟，但 {place} 視野中尚未加載空中飛機",
+  "{layer} is enabled, but no airborne aircraft is loaded in the {place} view yet": "{layer} 已開啟，但 {place} 視野中尚未加載空中飛機",
+  "{layer} is enabled, but its aircraft feed is unavailable": "{layer} 已開啟，但其飛機數據源不可用",
+  "{layer} is enabled, but its destination refresh did not complete": "{layer} 已開啟，但目的地刷新未完成",
+  "{layer} is enabled, but {source} is unavailable": "{layer} 已開啟，但 {source} 不可用",
+  "Could not arrive at {place}": "無法抵達 {place}",
+  "{name} is no longer loaded": "{name} 已不在加載數據中",
+  "Unknown target layer: {target}": "未知的目標圖層：{target}",
+  "nominal": "正常",
+  "{label} on": "{label} 已開啟",
+  "Frame aircraft": "將飛機納入視野",
+  "Frame military aircraft": "將軍用飛機納入視野",
+  "Frame ships": "將船舶納入視野",
+  "Frame satellites": "將衛星納入視野",
+  "Frame contacts": "將目標納入視野",
+  "{count} aircraft in frame": {
+    "other": "畫面中 {count} 架飛機"
+  },
+  "{count} military aircraft in frame": {
+    "other": "畫面中 {count} 架軍用飛機"
+  },
+  "{count} ships in frame": {
+    "other": "畫面中 {count} 艘船舶"
+  },
+  "{count} satellites in frame": {
+    "other": "畫面中 {count} 顆衛星"
+  },
+  "{count} contacts in frame": {
+    "other": "畫面中 {count} 個目標"
+  },
+  "Nearest military aircraft": "最近的軍用飛機",
+  "Nearest ships": "最近的船舶",
+  "Nearest satellites": "最近的衛星",
+  "Nearest aircraft": "最近的飛機",
+  "{first} and {second}": "{first} 和 {second}",
+  "Layer": "圖層",
+  "there": "那裡",
+  "Camera range {range}": "相機距離 {range}",
+  "Within {radius} of the view": "當前視野 {radius} 範圍內",
+  "Labels on": "標籤已開啟",
+  "Framing uses the nearest 80 loaded contacts": "調整視野時僅包含已加載的最近 80 個目標",
+  "{distance} from {location}": "距 {location} {distance}",
+  "Altitude {altitude}": "高度 {altitude}",
+  "{origin} to {destination}": "{origin} 至 {destination}",
+  "from {origin}": "從 {origin} 出發",
+  "to {destination}": "前往 {destination}",
+  "Registration {registration}": "註冊號 {registration}",
+  "View state": "視野狀態",
+  "Marked {count} places": {
+    "other": "已標註 {count} 個地點"
+  },
+  "Nothing marked": "沒有標註",
+  "Not found: {places}": "未找到：{places}",
+  "Tracing outlines": "正在繪製輪廓",
+  "Frame flights": "將航班納入視野",
+  "Frame military": "將軍用航班納入視野",
+  "Frame vessels": "將船舶納入視野",
+  "Frame {target}": "將 {target} 納入視野",
+  "Zoom out to globe": "縮小至地球視圖",
+  "Open data layers": "打開數據圖層",
+  "Open or close a panel": "打開或關閉面板",
+  "Change context mode": "切換態勢模式",
+  "Control cockpit": "控制座艙",
+  "Change visual style": "切換視覺樣式",
+  "Adjust HUD": "調整 HUD",
+  "Adjust cyber sonar": "調整賽博聲吶",
+  "Adjust detection overlay": "調整探測疊加層",
+  "Change map stack": "切換地圖組合",
+  "Adjust post-processing": "調整後期處理",
+  "Control scene": "控制場景",
+  "Control CCTV": "控制 CCTV",
+  "Control radio": "控制電臺",
+  "Track contact": "跟蹤目標",
+  "Stop tracking": "停止跟蹤",
+  "Clear marks": "清除標註",
+  "Move camera": "移動相機",
+  "Fly route": "沿路線飛行",
+  "Analyst query": "分析查詢",
+  "Next ISS pass": "下一次 ISS 過境",
+  "Next satellite pass": "下一次衛星過境",
+  "Mark the map": "在地圖上標註",
+  "Mark {targets} +{more}": "標註 {targets} +{more}",
+  "Mark {targets}": "標註 {targets}",
+  "Fly to {place}": "飛往 {place}",
+  "Fly to Location": "飛往地點",
+  "Nearest aircraft to {place}": "距離 {place} 最近的飛機",
+  "Nearest aircraft to Here": "距離此處最近的飛機",
+  "Layer on": "圖層已開啟",
+  "Layer off": "圖層已關閉",
+  "Zoom out": "縮小",
+  "Zoom in": "放大",
+  "Read the view": "播報當前視野",
+  "Check view state": "檢查視野狀態",
+  "Action": "操作",
+  "Finding places": "正在查找地點",
+  "Tracing outline": "正在繪製輪廓",
+  "Looking up place": "正在查詢地點",
+  "Flying": "飛行中",
+  "Turning on layer": "正在開啟圖層",
+  "Loading aircraft": "正在加載飛機",
+  "Picking nearest": "正在選取最近目標",
+  "Working": "處理中",
+  "in progress": "進行中",
+  "done": "完成",
+  "failed": "失敗",
+  "cancelled": "已取消",
+  "Outline traced": "輪廓已繪製",
+  "Outline unavailable": "輪廓不可用",
+  "Source: {label}": "來源：{label}",
+  "WORKING": "處理中",
+  "DONE": "完成",
+  "HERE": "此處",
+  "Aircraft cockpit view": "飛機座艙視圖",
+  "LEVEL": "水平",
+  "Estimated destination direction": "預估目的地方向",
+  "DEST ---°": "目的地 ---°",
+  "OPTICAL PLANE · 01": "光學平面 · 01",
+  "VISOR LOCK · ACTIVE": "面罩鎖定 · 激活",
+  "GROUND SPEED · KTS": "地速 · kn",
+  "ALTITUDE · FT": "高度 · ft",
+  "FIRST PERSON": "第一人稱",
+  "LIVE TRACK · COURSE ALIGNED": "實時航跡 · 航向對準",
+  "Cockpit vision style": "座艙視覺樣式",
+  "Previous cockpit vision style": "上一個座艙視覺樣式",
+  "Previous vision style": "上一個視覺樣式",
+  "Current cockpit vision style: NORMAL. Activate for next style.": "當前座艙視覺樣式：常規。點擊可切換到下一個樣式。",
+  "Current style: NORMAL — click for next": "當前樣式：常規——點擊切換到下一個",
+  "CURRENT": "當前",
+  "Next cockpit vision style": "下一個座艙視覺樣式",
+  "Next vision style": "下一個視覺樣式",
+  "Current aircraft heading": "飛機當前航向",
+  "GROUND SPEED": "地速",
+  "KTS": "kn",
+  "ALTITUDE": "高度",
+  "FT": "ft",
+  "Contact cockpit summary": "目標座艙摘要",
+  "CONTACT": "目標",
+  "CONTACTS · 250 KM": "目標 · 250 km",
+  "Contact navigation": "目標導航",
+  "CONTEXT ONLY": "僅供參考",
+  "Nearby cohort counts": "附近各類目標數量",
+  "FLT": "航班",
+  "MIL": "軍用",
+  "SITE": "設施",
+  "NEAREST OBSERVED / MAPPED": "最近的觀測 / 地圖標註目標",
+  "AVAILABLE INPUTS ONLY · NOT AN ALL-CLEAR": "僅限可用輸入 · 不代表安全無虞",
+  "WX": "天氣",
+  "Cockpit briefing carousel": "座艙簡報輪播",
+  "Estimated flight plan": "預估飛行計劃",
+  "ESTIMATED FLIGHT PLAN": "預估飛行計劃",
+  "FROM": "出發",
+  "TO": "到達",
+  "Cockpit briefing controls": "座艙簡報控件",
+  "Previous briefing page": "簡報上一頁",
+  "Next briefing page": "簡報下一頁",
+  "Live signals": "實時信號",
+  "Latest regional news": "最新地區新聞",
+  "Location-based information": "基於位置的信息",
+  "TEMP": "氣溫",
+  "WIND": "風",
+  "SKY": "天空",
+  "PRECIP": "降水",
+  "MM": "mm",
+  "Weather data by Open-Meteo.com": "天氣數據由 Open-Meteo.com 提供",
+  "Cockpit briefing pages": "座艙簡報頁面",
+  "SIG": "信號",
+  "Show Live Signals": "顯示實時信號",
+  "NEWS": "新聞",
+  "Show Regional News": "顯示地區新聞",
+  "LOCAL": "本地",
+  "Show Local Info": "顯示本地信息",
+  "Cockpit display and Radio controls": "座艙顯示與電臺控件",
+  "DISPLAY": "顯示",
+  "Cockpit display options": "座艙顯示選項",
+  "RADIO": "電臺",
+  "Cockpit compact Radio controls": "座艙精簡電臺控件",
+  "Previous filtered radio station": "上一個已篩選電臺",
+  "Play selected radio station": "播放所選電臺",
+  "Next filtered radio station": "下一個已篩選電臺",
+  "VOLUME": "音量",
+  "Cockpit Radio volume": "座艙電臺音量",
+  "ESC EXIT": "ESC 退出",
+  "C TOGGLE": "C 切換",
+  "View switcher": "視圖切換",
+  "Exit cockpit and return to full globe view": "退出座艙並返回完整地球視圖",
+  "RESET": "重置",
+  "Exit cockpit view": "退出座艙視圖",
+  "EXIT COCKPIT": "退出座艙",
+  "Navigation, voice, and visual preset controls": "導航、語音和視覺預設控件",
+  "Expand Visual Presets": "展開視覺預設",
+  "Pin visual presets": "固定視覺預設",
+  "Keep visual presets open": "保持視覺預設展開",
+  "Show the globe without a visual filter.": "顯示不帶視覺濾鏡的地球。",
+  "Emulate a green phosphor CRT with scanlines and screen curvature.": "模擬帶掃描線和屏幕弧度的綠色熒光 CRT。",
+  "Simulate night-vision goggles with green intensification and a tube vignette.": "模擬夜視儀，帶綠色增強和鏡筒暗角。",
+  "Simulate FLIR-style thermal contrast. Turn up Ironbow for color.": "模擬 FLIR 風格的熱成像對比。調高 Ironbow 可顯示色彩。",
+  "Apply bright cel-shaded color and illustrated outlines.": "應用明亮的賽璐珞色彩和插畫輪廓線。",
+  "Apply high-contrast monochrome film-noir grading.": "應用高對比度的黑白電影風格調色。",
+  "Add a cold, snowy whiteout treatment to the scene.": "為場景添加寒冷的暴雪白化效果。",
+  "MAP SOURCE": "地圖源",
+  "Map source": "地圖源",
+  "Style": "樣式",
+  "Expand LOCATION": "展開位置",
+  "Collapse panel": "收起面板",
+  "Pin location tray": "固定位置托盤",
+  "Keep location tray open": "保持位置托盤展開",
+  "Search any location": "搜索任意位置",
+  "Search location by name or coordinates": "按名稱或座標搜索位置",
+  "Search any location...": "搜索任意位置…",
+  "WEATHER": "天氣",
+  "Active weather products": "已啟用的天氣產品",
+  "RECENT IMAGERY": "近期影像",
+  "Imagery days in the box": "視野內的影像天數",
+  "CONTEXT": "態勢",
+  "Compact Radio controls": "精簡電臺控件",
+  "Open detailed Radio controls": "打開詳細電臺控件",
+  "Previous station": "上一個電臺",
+  "Next station": "下一個電臺",
+  "Compact Radio volume": "精簡電臺音量",
+  "Expand panel": "展開面板",
+  "Context mode": "態勢模式",
+  "CONTACTS": "目標",
+  "Cycles the nearest contacts of whatever type you select — planes, vessels, installations. Satellites track independently.": "循環切換你所選類型中最近的目標，包括飛機、船舶、設施。衛星獨立跟蹤。",
+  "SPACE MISSIONS": "太空任務",
+  "SELECT CONTEXT": "選擇態勢",
+  "Contact Context actions": "目標態勢操作",
+  "COCKPIT": "座艙",
+  "SEARCH NEARBY SITES": "搜索附近設施",
+  "Reclassify tracked contact as TR-3B": "將跟蹤目標重新歸類為 TR-3B",
+  "CONTACTS CONTEXT OFF": "目標態勢已關閉",
+  "SELECT CONTACTS TO LOAD OBSERVED / MAPPED PROXIMITY": "選擇目標以加載觀測 / 地圖標註的鄰近信息",
+  "Available Space Missions": "可用太空任務",
+  "AVAILABLE MISSIONS": "可用任務",
+  "SELECT A MISSION TO INSPECT": "選擇一項任務以查看",
+  "LOADING 30-DAY MISSION INDEX": "正在加載 30 天任務索引",
+  "TAB PREVIEWS · ENTER / SPACE SELECTS": "TAB 預覽 · ENTER / 空格鍵選擇",
+  "Internet radio and local SDR": "網絡電臺與本地 SDR",
+  "STATION TAG": "電臺標籤",
+  "Filter stations by station tag": "按電臺標籤篩選電臺",
+  "All": "全部",
+  "Enable Radio, then choose a globe marker or use next.": "請先啟用電臺，然後選擇地球上的標註或使用“下一個”。",
+  "DRAG TO TUNE": "拖動調諧",
+  "Tune available internet radio stations": "調諧可用的網絡電臺",
+  "ALL · DRAG THE NEEDLE": "全部 · 拖動指針",
+  "SNAPS TO AVAILABLE STATIONS": "自動吸附到可用電臺",
+  "Radio playback": "電臺播放",
+  "Previous filtered station": "上一個已篩選電臺",
+  "Play selected station": "播放所選電臺",
+  "Next filtered station": "下一個已篩選電臺",
+  "STOP": "停止",
+  "Stop radio playback": "停止電臺播放",
+  "Radio volume": "電臺音量",
+  "STATION SITE": "電臺網站",
+  "DIRECTORY: RADIO BROWSER": "目錄：RADIO BROWSER",
+  "Audio connects directly to the broadcaster after you press play. Your IP is visible to that broadcaster.": "點擊播放後，音頻將直接連接到廣播方。廣播方可以看到你的 IP。",
+  "Local RTL-SDR receiver": "本地 RTL-SDR 接收機",
+  "LOCAL RTL-SDR": "本地 RTL-SDR",
+  "Chrome/Edge · WebUSB · one local tuner shared by FM and the Local ADS-B layer.": "Chrome/Edge · WebUSB · 一個本地調諧器由 FM 與本地 ADS-B 圖層共享。",
+  "Use your location for faster ADS-B position decoding": "使用你的位置，加快 ADS-B 位置解碼",
+  "CHANGE DEVICE": "更換設備",
+  "Choose a different RTL-SDR or receiver channel": "選擇其他 RTL-SDR 或接收通道",
+  "RTL-SDR receiver mode": "RTL-SDR 接收模式",
+  "GAIN": "增益",
+  "RTL-SDR tuner gain for the current mode": "當前模式下的 RTL-SDR 調諧器增益",
+  "AUTO": "自動",
+  "MSG/S": "msg/s",
+  "HEARD": "已接收信號",
+  "POSITIONED": "已定位",
+  "FM MHZ": "FM MHz",
+  "TUNE": "調諧",
+  "Seek broadcast FM stations": "搜索廣播 FM 電臺",
+  "◀ SEEK": "◀ 搜臺",
+  "SEEK ▶": "搜臺 ▶",
+  "SDR VOL": "SDR 音量",
+  "Local SDR volume": "本地 SDR 音量",
+  "Intelligence HUD (H)": "情報 HUD（H）",
+  "Layout": "佈局",
+  "HUD layout": "HUD 佈局",
+  "Tactical": "戰術",
+  "Operator": "操作員",
+  "Minimal": "精簡",
+  "Cyber": "賽博",
+  "Sonar": "聲吶",
+  "Cyber sonar contact scanner": "賽博聲吶目標掃描器",
+  "Rings": "圈數",
+  "Sonar ring count": "聲吶圈數",
+  "Range": "範圍",
+  "Sonar ring range": "聲吶圈範圍",
+  "Power": "強度",
+  "Sonar intensity": "聲吶強度",
+  "Opacity": "不透明度",
+  "Cyber contact and label opacity": "賽博目標與標籤不透明度",
+  "Minimum opacity for map dots, icons, models, brackets, and labels between sonar passes": "兩次聲吶掃描之間地圖點、圖標、模型、括號標記與標籤的最低不透明度",
+  "Sector": "扇區",
+  "Sonar sector width": "聲吶扇區寬度",
+  "Detection Overlay (D)": "探測疊加層（D）",
+  "Detection overlay": "探測疊加層",
+  "Detection label density": "探測標籤密度",
+  "Allocation": "分配",
+  "Detection label allocation": "探測標籤分配方式",
+  "Elastic": "彈性",
+  "Weighted": "加權",
+  "Fade": "漸隱",
+  "Detection fade distance": "探測漸隱距離",
+  "World-overlay fade distance outside the keyhole as a percentage of its radius": "視域之外的世界疊加層漸隱距離，以其半徑的百分比表示",
+  "Outside": "外部",
+  "Detection opacity outside the keyhole": "視域之外的探測不透明度",
+  "World-overlay label and card opacity beyond the fade distance": "超出漸隱距離後世界疊加層標籤和卡片的不透明度",
+  "PARAMETERS": "參數",
+  "3D aircraft — flat icons zoomed out, 3D models up close": "3D 飛機——拉遠顯示平面圖標，拉近顯示 3D 模型",
+  "Models": "模型",
+  "3D model coverage": "3D 模型覆蓋範圍",
+  "Proximity": "近處",
+  "Scope — the circular viewport mask": "視域——圓形視口遮罩",
+  "Scope": "視域",
+  "Feather": "羽化",
+  "Scope edge feather": "視域邊緣羽化",
+  "Scope edge feather as a percentage of the keyhole radius": "視域邊緣羽化，以視域半徑的百分比表示",
+  "Draw on the world — click vertices, double-click or Enter to finish, Esc to cancel": "在地球上繪製——單擊放置頂點，雙擊或按 Enter 完成，按 Esc 取消",
+  "Shape": "形狀",
+  "Shape to draw": "要繪製的形狀",
+  "Area": "面",
+  "Line": "線",
+  "Pin": "圖釘",
+  "Label (optional)": "標籤（可選）",
+  "Label for the drawn shape": "繪製形狀的標籤",
+  "Colour of the drawn shape": "繪製形狀的顏色",
+  "Primary": "主題色",
+  "Amber": "琥珀色",
+  "Cyan": "青色",
+  "Green": "綠色",
+  "Red": "紅色",
+  "Clear": "清除",
+  "Remove every mark from the board": "清除畫板上的所有標註",
+  "Show your own GeoJSON, KML, KMZ or GPX files on the globe (or drop them onto it). File bytes stay on this device; overlays can appear in map screenshots shared with voice.": "在地球上顯示自己的 GeoJSON、KML、KMZ 或 GPX 文件（也可直接拖放到地球上）。文件內容僅保留在本設備上；疊加層可能出現在隨語音分享的地圖截圖中。",
+  "Import": "導入",
+  "Choose GeoJSON, KML, KMZ or GPX files": "選擇 GeoJSON、KML、KMZ 或 GPX 文件",
+  "Imported files": "已導入的文件",
+  "Celestial": "天球",
+  "Hide UI chrome": "隱藏界面控件",
+  "Clean UI": "純淨界面",
+  "Bloom / Glow": "泛光 / 輝光",
+  "Bloom intensity": "泛光強度",
+  "Sharpening": "銳化",
+  "Sharpen": "銳化",
+  "Sharpen intensity": "銳化強度",
+  "EXIT CLEAN VIEW": "退出純淨界面",
+  "Return UI controls": "恢復界面控件",
+  "Initializing photorealistic world...": "正在初始化照片級逼真世界…",
+  "DATA LAYERS": "數據圖層",
+  "ACQUIRING FRAME": "正在獲取畫面",
+  "NEAREST": "最近",
+  "CCTV camera": "CCTV 攝像頭",
+  "CALIBRATION": "校準",
+  "Drag the camera in the world: rings rotate, arrows move, handles set range/FOV": "在世界中拖動攝像頭：圓環旋轉，箭頭平移，控制點設置範圍/FOV",
+  "Camera pose — click a value to type": "攝像頭位姿——點擊數值可輸入",
+  "Heading (compass °) — click to type": "航向（羅盤 °）——點擊輸入",
+  "Pitch (° up/down) — click to type": "俯仰（° 上/下）——點擊輸入",
+  "Horizontal FOV (°) — click to type": "水平 FOV（°）——點擊輸入",
+  "Range / monitor-plane distance (m) — click to type": "範圍 / 監視器平面距離（m）——點擊輸入",
+  "Mount height above ground (m) — click to type": "安裝高度（距地面，m）——點擊輸入",
+  "North offset from catalog position (m) — click to type": "相對目錄位置的北向偏移（m）——點擊輸入",
+  "East offset from catalog position (m) — click to type": "相對目錄位置的東向偏移（m）——點擊輸入",
+  "SAVE CAL": "保存校準",
+  "RESET CAL": "重置校準",
+  "SCENE SUMMARY": "場景摘要",
+  "STREET LEVEL": "街景",
+  "Turn Street Level on or off": "開啟或關閉街景",
+  "Image fit": "圖像適配",
+  "FIT": "適應",
+  "Fit: show the whole photo, with dark bars where its shape differs from the frame": "適應：顯示整張照片，在比例與畫框不符處留黑邊",
+  "FILL": "填充",
+  "Fill: fill the frame edge to edge, cropping the photo": "填充：圖像鋪滿畫框並裁剪照片",
+  "Close the image and deselect it on the map": "關閉圖像並取消其在地圖上的選中狀態",
+  "Close the street-level image": "關閉街景圖像",
+  "Street-level viewer": "街景查看器",
+  "Open this image on the provider's site": "在服務商網站上打開此圖像",
+  "Imagery providers": "影像服務商",
+  "PROVIDERS": "服務商",
+  "Imagery filters": "影像篩選",
+  "IMAGERY": "影像",
+  "Panorama filter": "全景篩選",
+  "ALL": "全部",
+  "FLAT": "平面",
+  "SINCE": "起始時間",
+  "SCENES": "場景",
+  "Scene recipe": "場景方案",
+  "NEW": "新建",
+  "CAPTURE SHOT": "保存鏡頭",
+  "UPDATE SHOT": "更新鏡頭",
+  "START": "啟動",
+  "EXPORT PRESETS": "導出預設",
+  "IMPORT": "導入",
+  "RUN LOG": "運行日誌",
+  "POWER UP": "增強",
+  "GROUND STATION · PROVIDER SETTINGS": "地面站 · 服務商設置",
+  "Close key setup": "關閉密鑰設置",
+  "Power up the globe": "增強地球",
+  "The globe already flies keyless. Every key below switches on another real feed — paste one and it's saved into this app's local configuration, then the server restarts itself. Server-side keys stay on this machine; Google Maps and Cesium ion run in the browser and must be provider-restricted. Keys you configured elsewhere are shown but never touched.": "地球無需密鑰即可運行。下面的每個密鑰都會啟用一個新的真實數據源：粘貼後會保存到本應用的本地配置，隨後服務器自動重啟。服務端密鑰只保存在本機；Google Maps 和 Cesium ion 在瀏覽器中運行，必須設置服務商限制。你在其他位置配置的密鑰會顯示，但不會被改動。",
+  "SAVE KEYS": "保存密鑰",
+  "ESC to close": "按 ESC 關閉",
+  "The Google Maps key buys the photorealistic planet — everything else stacks on top.": "Google Maps 密鑰提供照片級逼真 3D 地球，其餘數據源都疊加在其上。",
+  "NO PLACE LEFT BEHIND": "不遺漏任何地方",
+  "ACTIVE STYLE": "當前樣式",
+  "Globe actions": "地球操作",
+  "Turn off all selected data layers": "關閉所有已選數據圖層",
+  "Copy share link": "複製分享鏈接",
+  "Toggle straight-down and tilted map views": "在垂直俯視與傾斜視角之間切換",
+  "Reset map to north up": "將地圖重置為正北朝上",
+  "Reset map bearing to north": "重置地圖方位為正北",
+  "Reset camera and return to full globe view": "重置相機並返回完整地球視圖",
+  "MISSION CONTROL · FIRST LAUNCH": "任務控制 · 首次啟動",
+  "Choose your first view": "選擇初始視圖",
+  "LIVE CONTACTS": "實時目標",
+  "Aircraft, vessels and nearby intelligence": "飛機、船舶及周邊情報",
+  "Launches, spacecraft and orbital context": "發射、航天器與軌道態勢",
+  "EXPLORE MANUALLY": "手動探索",
+  "Begin with a clean globe": "從空白地球開始",
+  "Don't show this again": "不再顯示",
+  "ESC to dismiss": "按 ESC 關閉",
+  "Tip: the GEV MIC button in the dock lets you talk to the map.": "提示：可通過停靠欄中的 GEV 麥克風按鈕用語音操控地圖。",
+  "hemisphere|N": "N",
+  "hemisphere|S": "S",
+  "hemisphere|E": "E",
+  "hemisphere|W": "W",
+  "Gemini Live voice control": "Gemini Live 語音控制",
+  "Zoom in to see street-level coverage": "放大地圖以查看街景覆蓋範圍",
+  "Point the camera at the ground for street-level coverage": "將相機朝向地面以查看街景覆蓋範圍",
+  "Sequence images unavailable": "序列影像不可用",
+  "Switch Street Level on to draw its coverage.": "開啟“街景”以繪製其覆蓋範圍。",
+  "Every provider is switched off: light a chip to draw its coverage.": "所有服務商均已關閉：點亮一個標籤即可繪製其覆蓋範圍。",
+  "No sequences in view match the filter": "視野內沒有符合篩選條件的序列",
+  "No coverage in view": "視野內無覆蓋範圍",
+  "Voice provider": "語音服務商",
+  "Changing provider reconnects voice if it is on.": "如語音已開啟，切換服務商會重新連接語音。",
+  "Gemini returned an oversized audio chunk": "Gemini 返回的音頻塊過大",
+  "Gemini returned an unsupported audio format": "Gemini 返回了不支持的音頻格式",
+  "Gemini returned an invalid audio sample rate": "Gemini 返回了無效的音頻採樣率",
+  "Gemini returned incomplete PCM audio": "Gemini 返回的 PCM 音頻不完整",
+  "This browser does not support Gemini microphone audio": "當前瀏覽器不支持 Gemini 麥克風音頻",
+  "Microphone audio processing failed": "麥克風音頻處理失敗",
+  "Gemini audio playback fell behind. Reconnect to continue.": "Gemini 音頻播放滯後。請重新連接以繼續。",
+  "Gemini token response did not include an ephemeral credential": "Gemini 令牌響應中沒有臨時憑據",
+  "Invalid Gemini connection endpoint": "Gemini 連接端點無效",
+  "Gemini voice could not connect. Try again.": "Gemini 語音無法連接。請重試。",
+  "Gemini voice requires a same-origin app request": "Gemini 語音需要與本應用同源的請求",
+  "Add a Gemini API key in Provider Settings": "請在服務商設置中添加 Gemini API 密鑰",
+  "The Gemini Live model configuration is invalid": "Gemini Live 模型配置無效",
+  "Gemini voice is starting too often. Try again shortly.": "Gemini 語音啟動過於頻繁。請稍後重試。",
+  "Gemini quota is unavailable. Try again later.": "Gemini 配額不可用。請稍後重試。",
+  "Gemini access was refused. Check the API key and model access.": "Gemini 拒絕了訪問。請檢查 API 密鑰和模型訪問權限。",
+  "Gemini Live is unavailable for the configured model.": "所配置的模型無法使用 Gemini Live。",
+  "Token request is too large": "令牌請求過大",
+  "Use an empty JSON token request": "請使用空的 JSON 令牌請求",
+  "Voice command context is too large": "語音命令上下文過大",
+  "Gemini reliable transport exceeded its queue limit. Start voice again.": "Gemini 可靠傳輸超出了隊列上限。請重新啟動語音。",
+  "Gemini reliable transport did not drain. Start voice again.": "Gemini 可靠傳輸的隊列未能清空。請重新啟動語音。",
+  "Gemini token request failed (HTTP {status})": "Gemini 令牌請求失敗（HTTP {status}）",
+  "Gemini token response did not include a valid model": "Gemini 令牌響應中沒有有效的模型",
+  "Gemini token response did not include session settings": "Gemini 令牌響應中沒有會話設置",
+  "Gemini session settings do not match the input mode": "Gemini 會話設置與輸入模式不匹配",
+  "Gemini could not submit this input. Start voice again.": "Gemini 無法提交此輸入。請重新啟動語音。",
+  "Connecting to Gemini": "正在連接 Gemini",
+  "Gemini returned an oversized message": "Gemini 返回的消息過大",
+  "Gemini Live connection failed. Check network access, then start voice again.": "Gemini Live 連接失敗。請檢查網絡連接，然後重新啟動語音。",
+  "Gemini Live connection ended. Start voice again for a new conversation.": "Gemini Live 連接已結束。請重新啟動語音以開始新對話。",
+  "Gemini Live could not start. Start voice again to request a fresh session.": "Gemini Live 無法啟動。請重新啟動語音以申請新的會話。",
+  "Start voice again for a fresh token and a new conversation.": "請重新啟動語音，以獲取新令牌並開始新對話。",
+  "Start voice again to request a fresh session credential.": "請重新啟動語音以申請新的會話憑據。",
+  "Microphone permission was denied. Allow microphone access and try again.": "麥克風權限被拒絕。請允許訪問麥克風後重試。",
+  "Gemini connection timed out. Try again.": "Gemini 連接超時。請重試。",
+  "Gemini voice could not start": "Gemini 語音無法啟動",
+  "Gemini did not finish the interrupted reply. Start voice again.": "Gemini 未能完成被打斷的回覆。請重新啟動語音。",
+  "Gemini session expiring; finishing the current reply": "Gemini 會話即將到期，正在完成當前回覆",
+  "Gemini rejected the voice session. Start voice again to request a fresh session.": "Gemini 拒絕了語音會話。請重新啟動語音以申請新的會話。",
+  "Start voice again for a fresh session credential. If it repeats, check Gemini model and API access.": "請重新啟動語音以獲取新的會話憑據。如問題重複出現，請檢查 Gemini 模型和 API 訪問權限。",
+  "Gemini action history is full. Start voice again for a fresh session.": "Gemini 操作歷史已滿。請重新啟動語音以開始新的會話。",
+  "Gemini requested too many simultaneous actions": "Gemini 請求的同時操作過多",
+  "Voice text command is too long": "語音文本命令過長",
+  "Gemini voice is not connected": "Gemini 語音未連接",
+  "Gemini interrupted input exceeded its buffer or wait limit. Start voice again.": "Gemini 被打斷的輸入超出了緩衝區或等待上限。請重新啟動語音。",
+  "Gemini Live connection is expiring. Start voice again for a new conversation.": "Gemini Live 連接即將到期。請重新啟動語音以開始新對話。",
+  "Gemini voice sessions have a time limit. When a session expires, start voice again for a new conversation.": "Gemini 語音會話有時長限制。會話到期後，請重新啟動語音以開始新對話。",
+  "Show the street-level view full screen (Esc shrinks it)": "全屏顯示街景視圖（按 Esc 縮小）",
+  "OK": "正常",
+  "{category} ({count})": "{category}（{count}）",
+  "Layers": "圖層",
+  "Search": "搜索",
+  "More": "更多",
+  "Panels": "面板",
+  "Post-tropical cyclone": "後熱帶氣旋",
+  "Take the ramp {direction} onto {road}": "{direction}駛入匝道，進入 {road}",
+  "Take the ramp {direction}": "{direction}駛入匝道",
+  "Take the exit {direction} onto {road}": "從出口{direction}駛出，進入 {road}",
+  "Take the exit {direction}": "從出口{direction}駛出",
+  "Link shared": "鏈接已分享",
+  "This share link can't be opened": "無法打開此分享鏈接",
+  "{id} isn't reporting now — showing where it was at {time}": "{id} 目前沒有發送信號——顯示其在 {time} 的位置",
+  "{id} isn't reporting now — showing where it was last seen": "{id} 目前沒有發送信號——顯示其最後出現的位置",
+  "Shared vessel is unavailable": "分享的船隻不可用",
+  "Check the spelling and press Enter to search again.": "請檢查拼寫，然後按 Enter 重新搜索。",
+  "Press Enter to try again.": "按 Enter 重試。",
+  "Recent speech": "最近語音",
+  "Voice Settings": "語音設置",
+  "Preview": "預覽",
+  "Settings": "設置",
+  "Close voice panel": "關閉語音面板",
+  "Show Voice Preview": "顯示語音預覽",
+  "Voice inactivity timeout": "語音空閒超時",
+  "Custom": "自定義",
+  "Minutes": "分鐘",
+  "These preferences stay in this browser.": "這些偏好設置僅保存在此瀏覽器中。",
+  "Your choice applies now, but could not be saved.": "選擇已生效，但無法保存。",
+  "Voice replies appear here.": "語音回覆顯示在此處。",
+  "Preview is off.": "預覽已關閉。",
+  "Automatic stop is unavailable for this voice connection.": "此語音連接不支持自動停止。",
+  "S2 GhostMaps": "S2 GhostMaps",
+  "Intel Picture": "情報態勢圖",
+  "Kinetic 30d": "近 30 天軍事行動",
+  "Border Crisis": "邊境危機",
+  "Iran Picture": "伊朗態勢圖",
+  "Iran Kinetic": "伊朗軍事行動",
+  "Yemen FLOT": "也門前線",
+  "Latest Drop": "最新發布",
+  "GhostMaps file could not be read": "無法讀取 GhostMaps 文件",
+  "GhostMaps catalog unavailable": "GhostMaps 目錄不可用",
+  "Malformed GhostMaps catalog": "GhostMaps 目錄格式無效",
+  "{count} source links ↗ · click card to open the first": {
+    "other": "{count} 個來源鏈接 ↗ · 點擊卡片打開第一個"
+  },
+  "S2 · {name}": "S2 · {name}",
+  "Report": "報告",
+  "Open the source for {title}": "打開 {title} 的來源",
+  "LIVE · GitHub {commit} · {message} · checked every {seconds}s": "實時 · GitHub {commit} · {message} · 每 {seconds} 秒檢查一次",
+  "GitHub {commit} · {message} · reconnecting for live updates": "GitHub {commit} · {message} · 正在重新連接以獲取實時更新",
+  "Connecting to the S2 GhostMaps repository…": "正在連接 S2 GhostMaps 倉庫…",
+  "{count} placemarks": {
+    "other": "{count} 個地標"
+  },
+  "S2 Underground publishes these KMZ products to GitHub. New uploads are detected within seconds and replace the previous edition automatically. Click a marker for its report.": "S2 Underground 在 GitHub 發布這些 KMZ 產品。新上傳的內容會在數秒內被檢測到，並自動替換舊版本。點擊標記查看報告。"
+}
diff --git a/src/i18n/same-as-english.json b/src/i18n/same-as-english.json
index c331cd070..83c8897d8 100644
--- a/src/i18n/same-as-english.json
+++ b/src/i18n/same-as-english.json
@@ -75,6 +75,8 @@
     "Radio",
     "Reggae",
     "Rock",
+    "S2 GhostMaps",
+    "S2 · {name}",
     "SAR",
     "SE",
     "SECTOR {lat} {lon}",
@@ -135,6 +137,8 @@
     "NVG",
     "R&B",
     "REC",
+    "S2 GhostMaps",
+    "S2 · {name}",
     "VS",
     "WHOT/BHOT"
   ],
@@ -165,6 +169,65 @@
     "NVG",
     "REC",
     "SRC {value}",
+    "S2 GhostMaps",
+    "S2 · {name}",
+    "Sentinel-2",
+    "Techno",
+    "Trance",
+    "USB {rate} msg/s",
+    "WHOT/BHOT",
+    "dB",
+    "ft",
+    "hPa",
+    "hemisphere|E",
+    "hemisphere|N",
+    "hemisphere|S",
+    "hemisphere|W",
+    "km",
+    "km/h",
+    "kt",
+    "kts",
+    "mph",
+    "{city} CCTV",
+    "{rate} msg/s",
+    "{source} HTTP {status}",
+    "{speed} kn",
+    "{type}  SPD: {speed}  HDG: {heading}",
+    "{value} KM",
+    "{value} KM/S",
+    "ΔE",
+    "ΔN",
+    "▲ {frp} MW"
+  ],
+  "zh-Hant": [
+    "1090 MHz",
+    "978 MHz UAT",
+    "AIS: --",
+    "AIS: {name}",
+    "BRG {value}°",
+    "BRG —",
+    "CAL {value}",
+    "CAL · {badge}",
+    "CCTV",
+    "CRS {value}°",
+    "CRT",
+    "FLIR",
+    "FOV",
+    "FOV {value}°",
+    "FT",
+    "GEO",
+    "HDG",
+    "HDG {value}°",
+    "House",
+    "Ironbow",
+    "KTS",
+    "Landsat 8/9",
+    "MM",
+    "NVG",
+    "REC",
+    "SRC {value}",
+    "S2 GhostMaps",
+    "S2 · {name}",
     "Sentinel-2",
     "Techno",
     "Trance",
diff --git a/src/i18n/zh-Hant-display.test.mjs b/src/i18n/zh-Hant-display.test.mjs
new file mode 100644
index 000000000..c802c61c0
--- /dev/null
+++ b/src/i18n/zh-Hant-display.test.mjs
@@ -0,0 +1,80 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { setLocale, t, tn, getLocale } from './index.js';
+import {
+  resolveLocale,
+  LOCALE_STORAGE_KEY,
+  writeStoredLocale,
+  applyDocumentLanguage,
+} from './locale.js';
+import { hudQuantity, LOCALIZED_LOCALITY } from '../hudLocalityFormat.js';
+import { formatCockpitDistance } from '../ui/cockpitPresentation.js';
+import { READOUT_WORDS } from '../layers/recentImagery/display.js';
+import { cctvSourceStatusLabel } from '../ui/cctvFrames.js';
+
+test('Traditional Chinese resolves from URL, saved preference and browser language', () => {
+  assert.equal(
+    resolveLocale({
+      location: { search: '?lang=zh-TW' },
+      storage: { getItem: () => 'en' },
+      languages: ['en'],
+    }),
+    'zh-Hant',
+  );
+  assert.equal(
+    resolveLocale({
+      location: { search: '' },
+      storage: {
+        getItem: (key) => (key === LOCALE_STORAGE_KEY ? 'zh-TW' : null),
+      },
+      languages: ['en'],
+    }),
+    'zh-Hant',
+  );
+  assert.equal(
+    resolveLocale({
+      location: { search: '' },
+      storage: { getItem: () => null },
+      languages: ['zh-Hant', 'en'],
+    }),
+    'zh-Hant',
+  );
+});
+
+test('Traditional Chinese persists and exposes the script locale for legacy choices', () => {
+  const stored = new Map();
+  assert.equal(
+    writeStoredLocale('zh-TW', {
+      setItem: (key, value) => stored.set(key, value),
+    }),
+    true,
+  );
+  assert.equal(stored.get(LOCALE_STORAGE_KEY), 'zh-Hant');
+  const doc = { documentElement: {} };
+  assert.equal(applyDocumentLanguage(doc, 'zh-TW'), true);
+  assert.equal(doc.documentElement.lang, 'zh-Hant');
+  assert.equal(doc.documentElement.dir, 'ltr');
+});
+
+test('Traditional Chinese readouts preserve unit case, coordinates and natural relative dates', () => {
+  const previous = getLocale();
+  try {
+    setLocale('zh-Hant');
+    assert.equal(hudQuantity(2069, 'km', 1), '2069.0 km');
+    assert.equal(formatCockpitDistance(14000), '14\u00a0km');
+    assert.equal(
+      LOCALIZED_LOCALITY.sector({ latDeg: 21.33, lonDeg: -77.5 }),
+      '扇區 21.33N 77.50W',
+    );
+    assert.equal(READOUT_WORDS.daysAgo(9), '9 天前');
+    assert.equal(READOUT_WORDS.daysAgo(0), '今天');
+    assert.equal(cctvSourceStatusLabel('ok'), '正常');
+    assert.equal(t('SAVE KEYS'), '保存密鑰');
+    assert.equal(
+      tn(2, 'Click {count} more point.', 'Click {count} more points.'),
+      '再點擊 2 個點。',
+    );
+  } finally {
+    setLocale(previous);
+  }
+});
diff --git a/src/keySetup.js b/src/keySetup.js
index b67c9df66..550ac6e16 100644
--- a/src/keySetup.js
+++ b/src/keySetup.js
@@ -395,6 +395,7 @@ export async function initKeySetup({
   const destroy = () => {
     if (disposed) return;
     disposed = true;
+    delete root.dataset.ready;
     unregisterUnsavedWork();
     lifetime.abort();
     signal?.removeEventListener('abort', destroy);
@@ -591,6 +592,7 @@ export async function initKeySetup({
   chip.addEventListener('click', openDialog);
   closeButton?.addEventListener('click', close);
   applyButton?.addEventListener('click', onApply);
+  root.dataset.ready = 'true';
   // Remove buttons are rendered per row; delegate so re-renders stay wired.
   rowsHost?.addEventListener('click', (event) => {
     const authButton = event.target?.closest?.(
diff --git a/src/keylessGeocoder.js b/src/keylessGeocoder.js
index 6033a6776..7ca99a96d 100644
--- a/src/keylessGeocoder.js
+++ b/src/keylessGeocoder.js
@@ -206,12 +206,27 @@ export function photonSearchUrl(
   url.searchParams.set('limit', String(limit));
 
   const corners = String(bias ?? '').split('|');
-  if (corners.length === 2) {
-    const [swLat, swLng] = corners[0].split(',').map(Number);
-    const [neLat, neLng] = corners[1].split(',').map(Number);
-    if ([swLat, swLng, neLat, neLng].every(Number.isFinite)) {
+  const tokens = corners.flatMap((corner) => corner.split(','));
+  if (
+    corners.length === 2 &&
+    corners.every((corner) => corner.split(',').length === 2) &&
+    tokens.every((token) => token.trim() !== '')
+  ) {
+    const [swLat, swLng, neLat, neLng] = tokens.map(Number);
+    if (
+      [swLat, swLng, neLat, neLng].every(Number.isFinite) &&
+      Math.abs(swLat) <= 90 &&
+      Math.abs(neLat) <= 90 &&
+      swLat <= neLat &&
+      Math.abs(swLng) <= 180 &&
+      Math.abs(neLng) <= 180
+    ) {
+      const midpoint = (swLng + neLng + (swLng > neLng ? 360 : 0)) / 2;
       url.searchParams.set('lat', String((swLat + neLat) / 2));
-      url.searchParams.set('lon', String((swLng + neLng) / 2));
+      url.searchParams.set(
+        'lon',
+        String(midpoint > 180 ? midpoint - 360 : midpoint),
+      );
     }
   }
   return url.toString();
diff --git a/src/keylessGeocoder.test.mjs b/src/keylessGeocoder.test.mjs
index 2ce8a70b4..1a702fd02 100644
--- a/src/keylessGeocoder.test.mjs
+++ b/src/keylessGeocoder.test.mjs
@@ -452,3 +452,14 @@ function readGeocodingConsumer(file) {
     ? [file, 'annotations/resolver.js'] : [file];
   return files.map((name) => fs.readFileSync(path.join(ROOT, 'src', name), 'utf8')).join('\n');
 }
+
+
+test('wrapped view bias stays near the antimeridian and malformed coordinates are omitted', () => {
+  for (const [bias, expected] of [['-20,170|-10,-171', 179.5], ['50,175|60,-165', -175], ['0,180|10,-180', 180], ['0,-180|10,180', 0]]) {
+    const params = new URL(photonSearchUrl('island', { bias })).searchParams;
+    assert.equal(Number(params.get('lon')), expected);
+  }
+  for (const bias of ['-91,0|0,1', '0,181|1,0', '10,0|0,1', ',|,', '0,1,2|3,4', '0,1|Infinity,2']) {
+    assert.equal(new URL(photonSearchUrl('island', { bias })).searchParams.has('lon'), false);
+  }
+});
diff --git a/src/layers/alpr/presentation.js b/src/layers/alpr/presentation.js
index 866f15a6d..c7343d573 100644
--- a/src/layers/alpr/presentation.js
+++ b/src/layers/alpr/presentation.js
@@ -13,7 +13,7 @@ import {
   MARKER_SCALE_BY_DISTANCE,
 } from './policy.js';
 import { boxContains } from './model.js';
-import { t } from '../../i18n/index.js';
+import { msg } from '../../i18n/index.js';
 import { createAlprFloorResolver } from './floors.js';
 import { createAlprOverlay } from './overlay.js';
 import {
@@ -452,7 +452,7 @@ export function createAlprPresentation({ state, services, source }) {
         layerName: 'ALPR Cameras',
         source:
           source.attribution?.description || source.label || 'Camera source',
-        label: t('ALPR camera'),
+        label: msg('ALPR camera'),
         latitude: record.latitude,
         longitude: record.longitude,
         properties: {
diff --git a/src/layers/awareness/panel.js b/src/layers/awareness/panel.js
index 5fe2a0ac8..120e91b2c 100644
--- a/src/layers/awareness/panel.js
+++ b/src/layers/awareness/panel.js
@@ -25,9 +25,10 @@ function presentAwarenessCount(summary = {}) {
 }
 
 /** A distance as the panel shows it: 850 m, 4.6 km, 120 km, in the UI language. */
-function presentAwarenessDistance(meters) {
+export function presentAwarenessDistance(meters) {
   if (!Number.isFinite(meters) || meters < 0) return '—';
-  if (meters < 1000) return formatQuantity(Math.round(meters), 'm');
+  const wholeMeters = Math.round(meters);
+  if (wholeMeters < 1000) return formatQuantity(wholeMeters, 'm');
   const digits = meters < 10000 ? 1 : 0;
   return formatQuantity(meters / 1000, 'km', {
     minimumFractionDigits: digits,
diff --git a/src/layers/awareness/presentation.js b/src/layers/awareness/presentation.js
new file mode 100644
index 000000000..7439907d9
--- /dev/null
+++ b/src/layers/awareness/presentation.js
@@ -0,0 +1,10 @@
+/**
+ * Format a compass direction for the awareness overlay.
+ * @param {number} degrees
+ * @returns {string}
+ */
+export function formatAwarenessDirection(degrees) {
+  if (!Number.isFinite(degrees)) return '—';
+  const normalized = ((degrees % 360) + 360) % 360;
+  return String(Math.round(normalized) % 360).padStart(3, '0');
+}
diff --git a/src/layers/awareness/presentation.test.mjs b/src/layers/awareness/presentation.test.mjs
new file mode 100644
index 000000000..54d40765f
--- /dev/null
+++ b/src/layers/awareness/presentation.test.mjs
@@ -0,0 +1,11 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { formatAwarenessDirection } from './presentation.js';
+
+test('awareness bearings that round through north read 000, not 360', () => {
+  assert.equal(formatAwarenessDirection(359.4), '359');
+  assert.equal(formatAwarenessDirection(359.6), '000');
+  assert.equal(formatAwarenessDirection(0), '000');
+  assert.equal(formatAwarenessDirection(-0.4), '000');
+  assert.equal(formatAwarenessDirection(Number.NaN), '—');
+});
diff --git a/src/layers/awareness/rendering.js b/src/layers/awareness/rendering.js
index 8fe147e46..957e0bbdd 100644
--- a/src/layers/awareness/rendering.js
+++ b/src/layers/awareness/rendering.js
@@ -11,6 +11,7 @@ import {
 } from '../../data/militaryAwarenessEngine.js';
 import { bearingBetweenCoordinates } from '../../cockpitMath.js';
 import { AWARENESS_PAGE_SIZE, CONTEXT_RIM_HEIGHT_M } from './policy.js';
+import { formatAwarenessDirection } from './presentation.js';
 
 export function createRendering({
   state: layerState,
@@ -225,12 +226,12 @@ export function createRendering({
           : null;
       const bearingText = Number.isFinite(bearing)
         ? t('BRG {value}°', {
-            value: String(Math.round(bearing)).padStart(3, '0'),
+            value: formatAwarenessDirection(bearing),
           })
         : t('BRG —');
       const courseText = Number.isFinite(item.track)
         ? ` · ${t('CRS {value}°', {
-            value: String(Math.round(item.track)).padStart(3, '0'),
+            value: formatAwarenessDirection(item.track),
           })}`
         : '';
       marker._label.textContent = `${label} · ${formatAwarenessDistance(item.distanceM)}\n${bearingText}${courseText}`;
diff --git a/src/layers/cyclones/index.js b/src/layers/cyclones/index.js
index bcd66923a..2ef663b15 100644
--- a/src/layers/cyclones/index.js
+++ b/src/layers/cyclones/index.js
@@ -41,13 +41,16 @@ const ADVISORIES_UNAVAILABLE = msg('Cyclone advisories unavailable');
 const SERVER_REASONS = new Set([msg('Cyclone data unavailable')]);
 const errorText = (error) =>
   error && (SERVER_REASONS.has(error) ? t(error) : translateKnown(error));
+// NHC's Tropical Cyclone Status JSON reference: PTC is post-tropical, PC is a
+// potential tropical cyclone, and subtropical systems are STS and STD.
 const CLASSIFICATION_NAMES = Object.freeze({
-  PTC: msg('Potential tropical cyclone'),
+  PC: msg('Potential tropical cyclone'),
+  PTC: msg('Post-tropical cyclone'),
   HU: msg('Hurricane'),
   TS: msg('Tropical storm'),
   TD: msg('Tropical depression'),
-  SS: msg('Subtropical storm'),
-  SD: msg('Subtropical depression'),
+  STS: msg('Subtropical storm'),
+  STD: msg('Subtropical depression'),
 });
 const classificationName = (code) =>
   Object.hasOwn(CLASSIFICATION_NAMES, code)
diff --git a/src/layers/cyclones/index.test.mjs b/src/layers/cyclones/index.test.mjs
index 3a7fbdfc7..aff654659 100644
--- a/src/layers/cyclones/index.test.mjs
+++ b/src/layers/cyclones/index.test.mjs
@@ -513,12 +513,13 @@ test('only the latest queued focus runs and an unchanged selection survives refr
 });
 test('classification display expands known codes without altering the source or guessing unknown meanings', async () => {
   for (const [code, label] of [
-    ['PTC', 'Potential tropical cyclone'],
+    ['PC', 'Potential tropical cyclone'],
+    ['PTC', 'Post-tropical cyclone'],
     ['HU', 'Hurricane'],
     ['TS', 'Tropical storm'],
     ['TD', 'Tropical depression'],
-    ['SS', 'Subtropical storm'],
-    ['SD', 'Subtropical depression'],
+    ['STS', 'Subtropical storm'],
+    ['STD', 'Subtropical depression'],
     ['EX', 'EX'],
     ['UNKNOWN', 'UNKNOWN'],
   ]) {
diff --git a/src/layers/directions/index.js b/src/layers/directions/index.js
index 2b8f8875e..b8cceff02 100644
--- a/src/layers/directions/index.js
+++ b/src/layers/directions/index.js
@@ -112,7 +112,8 @@ export const FLIGHT_PROGRESS_MS = 250;
 export function routeDistanceText(meters) {
   if (!Number.isFinite(meters) || meters < 0) return '';
   if (meters < 100) return formatQuantity(Math.round(meters), 'm');
-  if (meters < 1000) return formatQuantity(Math.round(meters / 10) * 10, 'm');
+  const tens = Math.round(meters / 10) * 10;
+  if (tens < 1000) return formatQuantity(tens, 'm');
   const km = meters / 1000;
   return km < 10
     ? formatQuantity(km, 'km', {
@@ -130,7 +131,8 @@ export function routeDistanceText(meters) {
  */
 export function routeDurationText(seconds) {
   if (!Number.isFinite(seconds) || seconds < 0) return '';
-  if (seconds < 60) return formatQuantity(Math.round(seconds), 's');
+  const wholeSeconds = Math.round(seconds);
+  if (wholeSeconds < 60) return formatQuantity(wholeSeconds, 's');
   const minutes = Math.round(seconds / 60);
   if (minutes < 60) return formatQuantity(minutes, 'min');
   const hours = formatQuantity(Math.floor(minutes / 60), 'h');
@@ -306,16 +308,24 @@ export function directionsInstruction(step) {
         ? t('Merge onto {road}', values)
         : t('Merge', { context: 'maneuver' });
     case 'on ramp':
-      if (direction)
+      if (modifier === 'left' || modifier === 'right')
         return road
           ? t('Take the ramp on the {direction} onto {road}', values)
           : t('Take the ramp on the {direction}', values);
+      if (direction && modifier !== 'straight')
+        return road
+          ? t('Take the ramp {direction} onto {road}', values)
+          : t('Take the ramp {direction}', values);
       return road ? t('Take the ramp onto {road}', values) : t('Take the ramp');
     case 'off ramp':
-      if (direction)
+      if (modifier === 'left' || modifier === 'right')
         return road
           ? t('Take the exit on the {direction} onto {road}', values)
           : t('Take the exit on the {direction}', values);
+      if (direction && modifier !== 'straight')
+        return road
+          ? t('Take the exit {direction} onto {road}', values)
+          : t('Take the exit {direction}', values);
       return road ? t('Take the exit onto {road}', values) : t('Take the exit');
     case 'roundabout':
     case 'rotary':
@@ -344,9 +354,14 @@ export function directionsInstruction(step) {
       return road
         ? t('Exit the roundabout onto {road}', values)
         : t('Exit the roundabout');
-    case 'use lane':
-      if (direction) {
-        const lane = { road, direction: laneWord(modifier) };
+    case 'use lane': {
+      const side = modifier.includes('left')
+        ? 'left'
+        : modifier.includes('right')
+          ? 'right'
+          : '';
+      if (side) {
+        const lane = { road, direction: laneWord(side) };
         return road
           ? t('Use the {direction} lane onto {road}', lane)
           : t('Use the {direction} lane', lane);
@@ -354,6 +369,7 @@ export function directionsInstruction(step) {
       return road
         ? t('Continue onto {road}', values)
         : t('Continue', { context: 'maneuver' });
+    }
     default:
       return road
         ? t('Continue onto {road}', values)
diff --git a/src/layers/firms/model.js b/src/layers/firms/model.js
index 226c32286..14b875bf8 100644
--- a/src/layers/firms/model.js
+++ b/src/layers/firms/model.js
@@ -4,6 +4,7 @@ import {
   satelliteShortName,
   fireDetectionKey,
   accentForSeverity,
+  formatFrpMw,
 } from '../../data/firmsLabels.js';
 import {
   VIEW_PADDING,
@@ -480,14 +481,15 @@ export function createModel({
   }
 
   function formatFrp(frp) {
-    return frp >= 10 ? frp.toFixed(0) : frp.toFixed(1);
+    return formatFrpMw(frp);
   }
 
   /** formatFrp for a card, with the locale's decimal separator ("4,9"). */
 
   function formatFrpLabel(frp) {
-    const digits = frp >= 10 ? 0 : 1;
-    return formatNumber(frp, {
+    const text = formatFrpMw(frp);
+    const digits = text.includes('.') ? 1 : 0;
+    return formatNumber(Number(text), {
       minimumFractionDigits: digits,
       maximumFractionDigits: digits,
       useGrouping: false,
diff --git a/src/layers/firms/queries.js b/src/layers/firms/queries.js
index c4a793f9d..5f663cc97 100644
--- a/src/layers/firms/queries.js
+++ b/src/layers/firms/queries.js
@@ -18,9 +18,8 @@ export function createQueries({
       if (!fire) return null;
       return {
         id: fireDetectionKey(fire),
-        label: t('Fire · FRP {frp} MW', {
-          frp: components.model.formatFrp(fire.frp),
-        }),
+        // i18n-ignore: English entity label; the voice card translates it (shownEntityLabel)
+        label: `Fire · FRP ${components.model.formatFrp(fire.frp)} MW`,
         latitude: fire.lat,
         longitude: fire.lon,
         frp: fire.frp,
@@ -118,9 +117,8 @@ export function createQueries({
         latitude: strongest.lat,
         longitude: strongest.lon,
         frp: strongest.frp,
-        label: t('Fire · FRP {frp} MW', {
-          frp: components.model.formatFrp(strongest.frp),
-        }),
+        // i18n-ignore: English entity label; the voice card translates it (shownEntityLabel)
+        label: `Fire · FRP ${components.model.formatFrp(strongest.frp)} MW`,
       };
     },
 
diff --git a/src/layers/firms/selection.js b/src/layers/firms/selection.js
index fc05eea2a..d5cfc4d26 100644
--- a/src/layers/firms/selection.js
+++ b/src/layers/firms/selection.js
@@ -193,9 +193,8 @@ export function createSelection({
       layerName: name,
       source: 'NASA FIRMS',
       dataSource: layerState._dataSource,
-      label: t('Fire · FRP {frp} MW', {
-        frp: components.model.formatFrp(fire.frp),
-      }),
+      // i18n-ignore: English entity label; the voice card translates it (shownEntityLabel)
+      label: `Fire · FRP ${components.model.formatFrp(fire.frp)} MW`,
       latitude: fire.lat,
       longitude: fire.lon,
       properties: {
diff --git a/src/layers/flights/motion.js b/src/layers/flights/motion.js
index ca7e9fe9d..b66775f1e 100644
--- a/src/layers/flights/motion.js
+++ b/src/layers/flights/motion.js
@@ -60,6 +60,10 @@ export function createMotion({
     publishFocusTargetFromCachedPosition,
   } = services.focus;
 
+  // Fixes leave the cache with their history; corrected positions invalidate
+  // the local frame even when the existing Cartesian is mutated in place.
+  const fixFrames = new WeakMap();
+
   // Round 5: the old `_warmGroundedAircraftSurfaceCache` (global exact-5-decimal
   // warm for every grounded contact on Earth) is GONE. Parked-aircraft GPS
   // jitter minted fresh keys every poll → thousands of upstream points per
@@ -124,7 +128,7 @@ export function createMotion({
    * @returns {Cesium.Cartesian3|null} Estimated ECEF position, or null if no history exists.
    */
 
-  function _deadReckon(icao24, result) {
+  function _deadReckon(icao24, result, sampledRenderTime) {
     const info = flightState.records.data.get(icao24);
     if (FOCUS_EVIDENCE_DEV && flightState._focusEvidenceIds.has(icao24)) {
       const position = flightState._billboards.get(icao24)?.position;
@@ -149,11 +153,13 @@ export function createMotion({
     const out = result || new Cesium.Cartesian3();
     // Render one poll interval behind real time so we interpolate between
     // two KNOWN fixes whenever possible (see RENDER_DELAY_SEC rationale).
-    const renderTime = Cesium.JulianDate.addSeconds(
-      Cesium.JulianDate.now(),
-      -RENDER_DELAY_SEC,
-      flightState._scratchRenderTime,
-    );
+    const renderTime =
+      sampledRenderTime ??
+      Cesium.JulianDate.addSeconds(
+        Cesium.JulianDate.now(flightState._scratchRenderTime),
+        -RENDER_DELAY_SEC,
+        flightState._scratchRenderTime,
+      );
 
     // Bracketing pair: interpolate — no extrapolation error, no snap-back.
     for (let i = history.length - 1; i >= 1; i--) {
@@ -286,12 +292,31 @@ export function createMotion({
       0,
       flightState._scratchOffset,
     );
-    const enu = Cesium.Transforms.eastNorthUpToFixedFrame(
-      fix.position,
-      Cesium.Ellipsoid.WGS84,
-      flightState._scratchEnu,
+    let frame = fixFrames.get(fix);
+    if (!frame) {
+      frame = {
+        position: new Cesium.Cartesian3(),
+        matrix: new Cesium.Matrix4(),
+      };
+      fixFrames.set(fix, frame);
+    }
+    if (
+      !frame.valid ||
+      !Cesium.Cartesian3.equals(frame.position, fix.position)
+    ) {
+      Cesium.Transforms.eastNorthUpToFixedFrame(
+        fix.position,
+        Cesium.Ellipsoid.WGS84,
+        frame.matrix,
+      );
+      Cesium.Cartesian3.clone(fix.position, frame.position);
+      frame.valid = true;
+    }
+    return Cesium.Matrix4.multiplyByPoint(
+      frame.matrix,
+      flightState._scratchOffset,
+      out,
     );
-    return Cesium.Matrix4.multiplyByPoint(enu, flightState._scratchOffset, out);
   }
 
   /**
diff --git a/src/layers/flights/motion.test.mjs b/src/layers/flights/motion.test.mjs
new file mode 100644
index 000000000..dcb809d86
--- /dev/null
+++ b/src/layers/flights/motion.test.mjs
@@ -0,0 +1,184 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import * as Cesium from 'cesium';
+import { createMotion } from './motion.js';
+import { arcOffsetEnu } from '../../data/motionModel.js';
+
+function fixture() {
+  const flightState = {
+    records: { data: new Map() },
+    _positionHistory: new Map(),
+    _focusEvidenceIds: new Set(),
+    _scratchArc: {},
+    _scratchOffset: new Cesium.Cartesian3(),
+    _scratchRenderTime: new Cesium.JulianDate(),
+  };
+  const motion = createMotion({
+    flightState,
+    services: { groundFloor: {}, camera: {}, focus: {} },
+    parts: {},
+  });
+  return { flightState, motion };
+}
+
+function expectedPosition(fix, dt, turnRate, transform) {
+  const arc = {};
+  arcOffsetEnu(fix.velocity, fix.track, turnRate, dt, arc);
+  return Cesium.Matrix4.multiplyByPoint(
+    transform(fix.position, Cesium.Ellipsoid.WGS84, new Cesium.Matrix4()),
+    new Cesium.Cartesian3(arc.east, arc.north, 0),
+    new Cesium.Cartesian3(),
+  );
+}
+
+function close(actual, expected) {
+  assert.ok(Cesium.Cartesian3.distance(actual, expected) < 1e-8);
+}
+
+test('extrapolation reuses fixed frames and invalidates corrected coordinates', (t) => {
+  const { motion } = fixture();
+  const transform = Cesium.Transforms.eastNorthUpToFixedFrame;
+  const spy = t.mock.method(
+    Cesium.Transforms,
+    'eastNorthUpToFixedFrame',
+    transform,
+  );
+  const fix = {
+    position: Cesium.Cartesian3.fromDegrees(-97, 30, 200),
+    velocity: 90,
+    track: 70,
+  };
+  const out = new Cesium.Cartesian3();
+  for (const dt of [-30, 5, 30, 60]) {
+    motion._extrapolateFix(fix, {}, dt, out, 1.5);
+    close(out, expectedPosition(fix, dt, 1.5, transform));
+  }
+  assert.equal(spy.mock.callCount(), 1);
+
+  // Ground reflooring mutates an existing fix's Cartesian in place.
+  Cesium.Cartesian3.fromDegrees(-97, 30, 350, undefined, fix.position);
+  motion._extrapolateFix(fix, {}, 30, out, 1.5);
+  close(out, expectedPosition(fix, 30, 1.5, transform));
+  assert.equal(spy.mock.callCount(), 2);
+
+  fix.position = Cesium.Cartesian3.fromDegrees(140, 80, 1000);
+  motion._extrapolateFix(fix, {}, 30, out, -2);
+  close(out, expectedPosition(fix, 30, -2, transform));
+  assert.equal(spy.mock.callCount(), 3);
+
+  fix.velocity = 210;
+  fix.track = 359;
+  motion._extrapolateFix(fix, {}, 15, out, -1);
+  close(out, expectedPosition(fix, 15, -1, transform));
+  assert.equal(spy.mock.callCount(), 3);
+
+  const replacement = { ...fix };
+  motion._extrapolateFix(replacement, {}, 15, out, -1);
+  close(out, expectedPosition(replacement, 15, -1, transform));
+  assert.equal(spy.mock.callCount(), 4);
+});
+
+test('stationary fixes do not build a frame until motion needs it', (t) => {
+  const { motion } = fixture();
+  const spy = t.mock.method(Cesium.Transforms, 'eastNorthUpToFixedFrame');
+  const fix = {
+    position: Cesium.Cartesian3.fromDegrees(0, 0, 0),
+    velocity: 0,
+    track: 90,
+  };
+  const out = new Cesium.Cartesian3();
+  close(motion._extrapolateFix(fix, {}, 30, out), fix.position);
+  fix.velocity = 10;
+  close(motion._extrapolateFix(fix, {}, 0, out), fix.position);
+  assert.equal(spy.mock.callCount(), 0);
+  motion._extrapolateFix(fix, {}, 30, out);
+  assert.equal(spy.mock.callCount(), 1);
+});
+
+test('fleet render time is shared without resampling or mutating the supplied instant', (t) => {
+  const { flightState, motion } = fixture();
+  const start = Cesium.JulianDate.fromIso8601('2026-10-24T12:00:00Z');
+  const end = Cesium.JulianDate.addSeconds(start, 60, new Cesium.JulianDate());
+  const renderTime = Cesium.JulianDate.addSeconds(
+    start,
+    30,
+    new Cesium.JulianDate(),
+  );
+  const savedTime = Cesium.JulianDate.clone(renderTime);
+  const history = [
+    {
+      time: start,
+      position: Cesium.Cartesian3.fromDegrees(-97, 30, 1000),
+      track: 90,
+    },
+    {
+      time: end,
+      position: Cesium.Cartesian3.fromDegrees(-96.99, 30, 1000),
+      track: 90,
+    },
+  ];
+  for (const id of ['one', 'two']) {
+    flightState.records.data.set(id, { velocity: 100, true_track: 90 });
+    flightState._positionHistory.set(id, history);
+  }
+  t.mock.method(Cesium.JulianDate, 'now', () => {
+    throw new Error('unexpected per-contact clock read');
+  });
+  const expected = Cesium.Cartesian3.lerp(
+    history[0].position,
+    history[1].position,
+    0.5,
+    new Cesium.Cartesian3(),
+  );
+  for (const id of ['one', 'two'])
+    close(
+      motion._deadReckon(id, new Cesium.Cartesian3(), renderTime),
+      expected,
+    );
+  assert.ok(Cesium.JulianDate.equals(renderTime, savedTime));
+});
+
+test('tracked callers still sample a fresh delayed time without a fleet epoch', (t) => {
+  const { flightState, motion } = fixture();
+  const start = Cesium.JulianDate.fromIso8601('2026-10-24T12:00:00Z');
+  const history = [
+    {
+      time: start,
+      position: Cesium.Cartesian3.fromDegrees(-97, 30, 1000),
+      track: 90,
+    },
+    {
+      time: Cesium.JulianDate.addSeconds(start, 60, new Cesium.JulianDate()),
+      position: Cesium.Cartesian3.fromDegrees(-96.99, 30, 1000),
+      track: 90,
+    },
+  ];
+  flightState.records.data.set('tracked', { velocity: 100, true_track: 90 });
+  flightState._positionHistory.set('tracked', history);
+  let elapsed = 60;
+  const spy = t.mock.method(Cesium.JulianDate, 'now', (result) => {
+    assert.equal(result, flightState._scratchRenderTime);
+    return Cesium.JulianDate.addSeconds(start, elapsed, result);
+  });
+  const out = new Cesium.Cartesian3();
+  close(
+    motion._deadReckon('tracked', out),
+    Cesium.Cartesian3.lerp(
+      history[0].position,
+      history[1].position,
+      0.5,
+      new Cesium.Cartesian3(),
+    ),
+  );
+  elapsed = 75;
+  close(
+    motion._deadReckon('tracked', out),
+    Cesium.Cartesian3.lerp(
+      history[0].position,
+      history[1].position,
+      0.75,
+      new Cesium.Cartesian3(),
+    ),
+  );
+  assert.equal(spy.mock.callCount(), 2);
+});
diff --git a/src/layers/flights/queries.js b/src/layers/flights/queries.js
index 371b3a854..89b91f125 100644
--- a/src/layers/flights/queries.js
+++ b/src/layers/flights/queries.js
@@ -452,8 +452,8 @@ export function createQueries({
         const isTracked = icao24 === flightState._trackedIcao;
         // Keep planes rendered as a 3D model (billboard hidden) so the detection box
         // doesn't vanish on the 2D→3D handoff; bb.position stays current while hidden.
-        const model = flightState._models.get(icao24);
-        const modelOwnsVisual = parts.rendering._modelOwnsVisual(icao24);
+        const model = flightState._models.get(icao24) ?? null;
+        const modelOwnsVisual = parts.rendering._modelOwnsVisual(icao24, model);
         if (!isTracked && !bb.show && !modelOwnsVisual) continue;
         const info = flightState.records.data.get(icao24);
         let object = flightState._detectionObjects.get(icao24);
@@ -491,8 +491,19 @@ export function createQueries({
         object.position = pos;
         object.skipLabel = isTracked;
         // Card text only — declutter/cohort identity is `object.sourceId` (icao24).
-        const id = _contactLabel(icao24, info);
-        if (object.id !== id) object.id = id;
+        const callsign = info?.callsign;
+        const registration = info?.registration;
+        // Records and enrichment may change in place. Cache by field values,
+        // while keeping the live visual anchor above independent of text.
+        if (
+          object.id === undefined ||
+          object._labelCallsign !== callsign ||
+          object._labelRegistration !== registration
+        ) {
+          object.id = _contactLabel(icao24, info);
+          object._labelCallsign = callsign;
+          object._labelRegistration = registration;
+        }
         const altitude = info?.altitude;
         if (object._altitude !== altitude) {
           object._altitude = altitude;
diff --git a/src/layers/flights/queries.test.mjs b/src/layers/flights/queries.test.mjs
new file mode 100644
index 000000000..13957d6cc
--- /dev/null
+++ b/src/layers/flights/queries.test.mjs
@@ -0,0 +1,149 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import * as Cesium from 'cesium';
+import { createQueries } from './queries.js';
+import { createRendering } from './rendering.js';
+
+function fixture() {
+  const info = {
+    callsign: ' TEST123 ',
+    registration: ' N123 ',
+    altitude: 1000,
+  };
+  const bb = { show: true, position: new Cesium.Cartesian3(1, 2, 3) };
+  const flightState = {
+    feed: {},
+    _billboardCollection: { show: true },
+    _billboards: new Map([['abc123', bb]]),
+    _models: new Map(),
+    _detectionObjects: new Map(),
+    records: { data: new Map([['abc123', info]]) },
+  };
+  let formats = 0;
+  const services = {
+    aircraftPresentation: {},
+    militaryRegistry: {},
+    camera: {},
+    focus: {},
+    recession: {},
+    labels: {
+      formatFlightLevel: (altitude) => {
+        formats++;
+        return String(altitude);
+      },
+    },
+  };
+  const parts = {
+    testing: {},
+    tracking: { _trackedModelRegimeActive: () => true },
+    motion: { _trackedVisualCached: () => null },
+  };
+  parts.rendering = createRendering({ flightState, services, parts });
+  const queries = createQueries({ flightState, services, parts }).methods;
+  return { flightState, info, bb, parts, queries, formats: () => formats };
+}
+
+test('candidate text follows in-place enrichment without freezing identity or positions', () => {
+  const f = fixture();
+  const [first] = f.queries.getDetectableObjects();
+  assert.equal(first.id, 'TEST123');
+  assert.equal(first.sourceId, 'abc123');
+  f.bb.position = new Cesium.Cartesian3(4, 5, 6);
+  assert.equal(f.queries.getDetectableObjects()[0], first);
+  assert.equal(first.position, f.bb.position);
+  assert.equal(f.formats(), 1);
+  f.info.callsign = ' NEW456 ';
+  assert.equal(f.queries.getDetectableObjects()[0].id, 'NEW456');
+  f.info.callsign = '   ';
+  assert.equal(f.queries.getDetectableObjects()[0].id, 'N123');
+  f.info.registration = ' N456 ';
+  f.info.altitude = 2000;
+  assert.equal(f.queries.getDetectableObjects()[0].id, 'N456');
+  assert.equal(first.metric, '2000');
+  assert.equal(f.formats(), 2);
+  f.flightState.records.data.set('abc123', { ...f.info });
+  assert.equal(f.queries.getDetectableObjects()[0], first);
+  f.flightState.records.data.delete('abc123');
+  assert.equal(f.queries.getDetectableObjects()[0].id, 'abc123');
+  assert.equal(first.sourceId, 'abc123');
+});
+
+test('unchanged candidate text is normalized once across paints', (t) => {
+  const f = fixture();
+  const trim = String.prototype.trim;
+  let calls = 0;
+  t.mock.method(String.prototype, 'trim', function () {
+    if (String(this) === ' TEST123 ') calls++;
+    return trim.call(this);
+  });
+  for (let i = 0; i < 20; i++) f.queries.getDetectableObjects();
+  assert.equal(calls, 1);
+});
+
+test('candidate collection resolves models once and keeps handoffs live', (t) => {
+  const f = fixture();
+  const get = t.mock.method(f.flightState._models, 'get');
+  const [candidate] = f.queries.getDetectableObjects();
+  assert.equal(get.mock.callCount(), 1);
+  const model = {
+    ready: false,
+    show: true,
+    modelMatrix: Cesium.Matrix4.fromTranslation(
+      new Cesium.Cartesian3(10, 20, 30),
+    ),
+  };
+  f.parts.rendering._modelSpec = () => ({
+    visualCenterNative: Cesium.Cartesian3.ZERO,
+    scale: 1,
+  });
+  f.flightState._models.set('abc123', model);
+  f.bb.show = false;
+  assert.deepEqual(f.queries.getDetectableObjects(), []);
+  model.ready = true;
+  assert.equal(f.queries.getDetectableObjects()[0], candidate);
+  assert.deepEqual(candidate.position, new Cesium.Cartesian3(10, 20, 30));
+  Cesium.Matrix4.setTranslation(
+    model.modelMatrix,
+    new Cesium.Cartesian3(40, 50, 60),
+    model.modelMatrix,
+  );
+  f.queries.getDetectableObjects();
+  assert.deepEqual(candidate.position, new Cesium.Cartesian3(40, 50, 60));
+  model.show = false;
+  assert.deepEqual(f.queries.getDetectableObjects(), []);
+  f.bb.show = true;
+  assert.equal(f.queries.getDetectableObjects()[0].position, f.bb.position);
+  assert.equal(get.mock.callCount(), 6);
+  model.show = true;
+  assert.equal(f.parts.rendering._modelOwnsVisual('abc123'), true);
+  assert.equal(get.mock.callCount(), 7);
+});
+
+test('tracked ownership and live anchors remain independent of fleet models', () => {
+  const f = fixture();
+  f.flightState._trackedIcao = 'abc123';
+  f.flightState._trackedModel = { ready: true, show: true };
+  f.parts.rendering._modelSpec = () => ({});
+  let anchor = new Cesium.Cartesian3(10, 20, 30);
+  f.parts.motion._trackedVisualCached = () => anchor;
+  const [candidate] = f.queries.getDetectableObjects();
+  assert.equal(candidate.position, anchor);
+  assert.equal(candidate.skipLabel, true);
+  assert.equal(f.parts.rendering._modelOwnsVisual('abc123', null), true);
+  anchor = new Cesium.Cartesian3(40, 50, 60);
+  assert.equal(f.queries.getDetectableObjects()[0].position, anchor);
+  for (const tracked of [
+    null,
+    { ready: false, show: true },
+    { ready: true, show: false },
+  ]) {
+    f.flightState._trackedModel = tracked;
+    assert.equal(
+      f.parts.rendering._modelOwnsVisual('abc123', { ready: true, show: true }),
+      false,
+    );
+  }
+  f.flightState._trackedModel = { ready: true, show: true };
+  f.parts.tracking._trackedModelRegimeActive = () => false;
+  assert.equal(f.parts.rendering._modelOwnsVisual('abc123', null), false);
+});
diff --git a/src/layers/flights/rendering.js b/src/layers/flights/rendering.js
index ae4b7c7ca..d4075a565 100644
--- a/src/layers/flights/rendering.js
+++ b/src/layers/flights/rendering.js
@@ -32,10 +32,12 @@ import {
   TRACKED_MODEL_MIN_PX,
   TRACKED_MODEL_MAX_PX,
   FLEET_DR_INTERVAL_MS,
+  RENDER_DELAY_SEC,
   COURSE_SLEW_DT_MAX_SEC,
   ROTATION_REFRESH_MS,
   COURSE_MAX_DPS,
 } from './policy.js';
+import { AIRCRAFT_ENVIRONMENT_MAP_OPTIONS } from '../../data/aircraftModelLighting.js';
 
 export function createRendering({
   flightState,
@@ -382,17 +384,20 @@ export function createRendering({
    *    null or still-loading tracked model from claiming a visual it is not
    *    drawing yet.
    * @param {string} icao24
+   * @param {Cesium.Model|null} [model] Resolved fleet model; null means absent.
    * @returns {boolean}
    */
 
-  function _modelOwnsVisual(icao24) {
+  function _modelOwnsVisual(icao24, model) {
     if (icao24 === flightState._trackedIcao) {
       return (
         parts.tracking._trackedModelRegimeActive() &&
         _modelIsRendering(flightState._trackedModel)
       );
     }
-    return _modelIsRendering(flightState._models.get(icao24));
+    return _modelIsRendering(
+      model === undefined ? flightState._models.get(icao24) : model,
+    );
   }
 
   /** A model is the visual only once it actually draws — loaded AND shown.
@@ -503,6 +508,7 @@ export function createRendering({
       model = await Cesium.Model.fromGltfAsync({
         url: resolveAsset(spec.url),
         asynchronous: false,
+        environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS,
         minimumPixelSize: MODEL_MIN_PX,
         scale: spec.scale,
         color: flightState._irBoost ? Cesium.Color.WHITE : _modelColor(icao24),
@@ -709,6 +715,7 @@ export function createRendering({
       Cesium.Model.fromGltfAsync({
         url: resolveAsset(trackedSpec.url),
         asynchronous: false,
+        environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS,
         minimumPixelSize: TRACKED_MODEL_MIN_PX,
         scale: trackedSpec.scale,
         color: flightState._irBoost ? Cesium.Color.WHITE : Cesium.Color.CYAN,
@@ -854,6 +861,12 @@ export function createRendering({
         )
       : 0.08;
     flightState._lastFleetTickMs = nowMs;
+    // Every contact in this pass shares the same delayed display instant.
+    const renderTime = Cesium.JulianDate.addSeconds(
+      Cesium.JulianDate.now(flightState._scratchFleetRenderTime),
+      -RENDER_DELAY_SEC,
+      flightState._scratchFleetRenderTime,
+    );
 
     _drainIrReloadQueue(); // bounded per-tick slice of any pending boost-flip reload
     if (flightState._cockpitContactMode)
@@ -957,7 +970,11 @@ export function createRendering({
 
       const info = flightState.records.data.get(icao24);
 
-      const dr = parts.motion._deadReckon(icao24, flightState._scratchFleetPos);
+      const dr = parts.motion._deadReckon(
+        icao24,
+        flightState._scratchFleetPos,
+        renderTime,
+      );
       // The dead-reckoned point drifts away from the fix whose cell supplied the
       // height, so a grounded contact's sprite ends up under the mesh it taxied
       // (or coasted) over. Re-floor at the DISPLAYED coordinate — read-only, and
diff --git a/src/layers/flights/state.js b/src/layers/flights/state.js
index 2978ceba4..b297d5a9d 100644
--- a/src/layers/flights/state.js
+++ b/src/layers/flights/state.js
@@ -242,12 +242,12 @@ export function createFlightState({ source, services }) {
 
   flightState._scratchCarto = new Cesium.Cartographic();
 
-  flightState._scratchEnu = new Cesium.Matrix4();
-
   flightState._scratchArc = { east: 0, north: 0, endCourseDeg: 0 };
 
   flightState._scratchRenderTime = new Cesium.JulianDate();
 
+  flightState._scratchFleetRenderTime = new Cesium.JulianDate();
+
   flightState._scratchFleetPos = new Cesium.Cartesian3();
 
   flightState._scratchSonarScreen = new Cesium.Cartesian2();
diff --git a/src/layers/ghostMaps/catalog.js b/src/layers/ghostMaps/catalog.js
new file mode 100644
index 000000000..4fb68c948
--- /dev/null
+++ b/src/layers/ghostMaps/catalog.js
@@ -0,0 +1,245 @@
+// S2 Underground GhostMaps catalog: which KMZ in the public repository is the
+// current edition of each product. Pure and portable (the server builds the
+// catalog, tests pin the rules); no i18n, no DOM, no Cesium.
+
+export const GHOSTMAPS_REPO = Object.freeze({
+  owner: 's2underground',
+  name: 'GhostMaps',
+  branch: 'main',
+  url: 'https://github.com/s2underground/GhostMaps',
+});
+
+/** Largest KMZ the proxy downloads; matches the browser's import ceiling. */
+export const GHOSTMAPS_MAX_FILE_BYTES = 50 * 1024 * 1024;
+
+const ARCGIS = 'ArcGIS Data for ATAK (KMZs)/';
+const INCIDENTS = 'Incident Response Products for ATAK (KMZs and Documents)/';
+
+/**
+ * Curated products, in panel order. Each names a series of dated uploads; the
+ * newest edition wins. Patterns match whole repository paths, so a renamed
+ * folder fails closed (the product drops out) instead of matching elsewhere.
+ */
+export const GHOSTMAPS_PRODUCTS = Object.freeze([
+  Object.freeze({
+    id: 'cip',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Common Intelligence Picture',
+    defaultOn: true,
+    pattern: new RegExp(
+      `^${escape(ARCGIS)}Common Intelligence Picture/Master Database/[^/]+\\.kmz$`,
+      'i',
+    ),
+  }),
+  Object.freeze({
+    id: 'kinetic-30d',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Kinetic Activity (30 days)',
+    defaultOn: true,
+    pattern: new RegExp(
+      `^${escape(ARCGIS)}Common Intelligence Picture/30-Day Pulls/Kinetic[^/]*\\.kmz$`,
+      'i',
+    ),
+  }),
+  Object.freeze({
+    id: 'border-crisis',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Border Crisis Map',
+    defaultOn: false,
+    pattern: new RegExp(
+      `^${escape(ARCGIS)}Border Crisis Map/S2Underground_Border_Crisis_Map[^/]*\\.kmz$`,
+      'i',
+    ),
+  }),
+  Object.freeze({
+    id: 'iran-cip',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Iran Common Intelligence Picture',
+    defaultOn: false,
+    pattern: new RegExp(
+      `^${escape(INCIDENTS)}Iran[^/]*/Iran Common Intelligence Picture/[^/]+\\.kmz$`,
+      'i',
+    ),
+  }),
+  Object.freeze({
+    id: 'iran-kinetic',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Iran Kinetic Events',
+    defaultOn: false,
+    pattern: new RegExp(
+      `^${escape(INCIDENTS)}Iran[^/]*/Iran Kinetic Events/[^/]+\\.kmz$`,
+      'i',
+    ),
+  }),
+  Object.freeze({
+    id: 'yemen-flot',
+    // i18n-ignore: catalog data; the panel shows its own translated label
+    title: 'Yemen FLOT',
+    defaultOn: false,
+    pattern: new RegExp(
+      `^${escape(INCIDENTS)}Yemen[^/]*/Yemen FLOT[^/]*\\.kmz$`,
+      'i',
+    ),
+  }),
+]);
+
+/** The newest incident product outside the curated series and the archive. */
+export const GHOSTMAPS_LATEST_DROP = Object.freeze({
+  id: 'latest-drop',
+  // i18n-ignore: catalog data; the panel shows its own translated label
+  title: 'Latest incident drop',
+  defaultOn: false,
+});
+
+const LATEST_DROP_EXCLUDED =
+  /\/(?:0_Archive|Basedata|Reference Material)(?:\/|$)/i;
+
+function escape(text) {
+  return text.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+const MONTHS = [
+  'jan',
+  'feb',
+  'mar',
+  'apr',
+  'may',
+  'jun',
+  'jul',
+  'aug',
+  'sep',
+  'oct',
+  'nov',
+  'dec',
+];
+const DATE_IN_NAME =
+  /(january|february|march|april|may|june|july|august|september|sept|october|november|december|jan|feb|mar|apr|jun|jul|aug|sep|oct|nov|dec)[ _-]?(\d{1,2})(?:st|nd|rd|th)?[ ,_-]+(20\d\d)/i;
+const EDITION_IN_NAME = /(?:[ _-]export)?[ _-]v?(\d{1,3})$/i;
+
+/**
+ * The date and edition written into an S2 file name, e.g.
+ * `..._October_16_2026_Export_1.kmz` → 2026-10-16, edition 1. Undated names
+ * report `dateMs: null` and sort below every dated edition.
+ * @param {string} fileName
+ * @returns {{dateMs: ?number, edition: number}}
+ */
+export function parseGhostMapsEdition(fileName) {
+  const stem = String(fileName || '').replace(/\.km[lz]$/i, '');
+  const match = DATE_IN_NAME.exec(stem);
+  let dateMs = null;
+  if (match) {
+    const month = MONTHS.indexOf(match[1].slice(0, 3).toLowerCase());
+    const day = Number(match[2]);
+    const year = Number(match[3]);
+    const at = Date.UTC(year, month, day);
+    // Date.UTC rolls 31 Sep into 1 Oct; only an exact calendar date counts.
+    if (month >= 0 && new Date(at).getUTCDate() === day) dateMs = at;
+  }
+  const tail = match ? stem.slice(match.index + match[0].length) : stem;
+  const edition = Number(EDITION_IN_NAME.exec(tail)?.[1] ?? 0);
+  return { dateMs, edition };
+}
+
+function newer(a, b) {
+  if (!b) return true;
+  const ad = a.dateMs ?? -Infinity;
+  const bd = b.dateMs ?? -Infinity;
+  if (ad !== bd) return ad > bd;
+  if (a.edition !== b.edition) return a.edition > b.edition;
+  return a.path > b.path;
+}
+
+/** `S2Underground_Border_Crisis_Map_June_02_2026_v1.kmz` → readable words. */
+export function ghostMapsFileTitle(fileName) {
+  return String(fileName || '')
+    .replace(/\.km[lz]$/i, '')
+    .replace(/^S2Underground_/i, '')
+    .replace(/_/g, ' ')
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
+/**
+ * Build the product catalog from a recursive git tree listing.
+ * @param {Array<{path: string, type: string, sha: string, size?: number}>} tree
+ * @returns {Array<{id: string, title: string, defaultOn: boolean,
+ *   path: string, fileName: string, fileTitle: string, version: string,
+ *   size: number, dateMs: ?number, edition: number}>}
+ */
+export function buildGhostMapsCatalog(tree) {
+  const best = new Map();
+  let drop = null;
+  for (const entry of Array.isArray(tree) ? tree : []) {
+    if (entry?.type !== 'blob' || typeof entry.path !== 'string') continue;
+    if (!/\.kmz$/i.test(entry.path)) continue;
+    if (!/^[0-9a-f]{40}$/.test(entry.sha || '')) continue;
+    const size = Number(entry.size);
+    if (!Number.isFinite(size) || size <= 0 || size > GHOSTMAPS_MAX_FILE_BYTES)
+      continue;
+    const fileName = entry.path.slice(entry.path.lastIndexOf('/') + 1);
+    const candidate = {
+      path: entry.path,
+      fileName,
+      version: entry.sha,
+      size,
+      ...parseGhostMapsEdition(fileName),
+    };
+    const product = GHOSTMAPS_PRODUCTS.find(({ pattern }) =>
+      pattern.test(entry.path),
+    );
+    if (product) {
+      if (newer(candidate, best.get(product.id)))
+        best.set(product.id, candidate);
+    } else if (
+      entry.path.startsWith(INCIDENTS) &&
+      !LATEST_DROP_EXCLUDED.test(`/${entry.path}`) &&
+      candidate.dateMs != null &&
+      newer(candidate, drop)
+    ) {
+      drop = candidate;
+    }
+  }
+  const rows = [];
+  for (const product of [...GHOSTMAPS_PRODUCTS, GHOSTMAPS_LATEST_DROP]) {
+    const file =
+      product === GHOSTMAPS_LATEST_DROP ? drop : best.get(product.id);
+    if (!file) continue;
+    rows.push({
+      id: product.id,
+      title: product.title,
+      defaultOn: product.defaultOn,
+      ...file,
+      fileTitle: ghostMapsFileTitle(file.fileName),
+    });
+  }
+  return rows;
+}
+
+/**
+ * Raw download URL pinned to a commit, so a CDN can never hand back an older
+ * edition for a newer catalog.
+ * @param {string} commit 40-hex commit sha.
+ * @param {string} path Repository path.
+ */
+export function ghostMapsRawUrl(commit, path) {
+  const encoded = path.split('/').map(encodeURIComponent).join('/');
+  return `https://raw.githubusercontent.com/${GHOSTMAPS_REPO.owner}/${GHOSTMAPS_REPO.name}/${commit}/${encoded}`;
+}
+
+/**
+ * The branch head from a git smart-HTTP ref advertisement
+ * (`/info/refs?service=git-upload-pack`), or null.
+ * @param {string} text
+ * @param {string} [branch]
+ * @returns {?string}
+ */
+export function parseGitRefAdvertisement(text, branch = GHOSTMAPS_REPO.branch) {
+  const ref = `refs/heads/${branch}`;
+  for (const line of String(text || '').split('\n')) {
+    // pkt-line: 4 hex length digits, then "<sha> <ref>" (the first ref line
+    // also carries a NUL and the capability list).
+    const match = /^[0-9a-f]{4}([0-9a-f]{40}) ([^\0\s]+)/.exec(line);
+    if (match && match[2] === ref) return match[1];
+  }
+  return null;
+}
diff --git a/src/layers/ghostMaps/catalog.test.mjs b/src/layers/ghostMaps/catalog.test.mjs
new file mode 100644
index 000000000..74735381d
--- /dev/null
+++ b/src/layers/ghostMaps/catalog.test.mjs
@@ -0,0 +1,165 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  buildGhostMapsCatalog,
+  ghostMapsFileTitle,
+  ghostMapsRawUrl,
+  parseGhostMapsEdition,
+  parseGitRefAdvertisement,
+} from './catalog.js';
+
+const ARCGIS = 'ArcGIS Data for ATAK (KMZs)/';
+const INCIDENTS = 'Incident Response Products for ATAK (KMZs and Documents)/';
+let n = 0;
+const blob = (path, size = 1000) => ({
+  path,
+  type: 'blob',
+  size,
+  sha: (++n).toString(16).padStart(40, '0'),
+});
+
+test('editions read the date and export/version number written in the name', () => {
+  assert.deepEqual(
+    parseGhostMapsEdition(
+      'S2Underground_Common_Intelligence_Picture_October_16_2026_Export_1.kmz',
+    ),
+    { dateMs: Date.UTC(2026, 9, 16), edition: 1 },
+  );
+  assert.deepEqual(
+    parseGhostMapsEdition(
+      'S2Underground_Border_Crisis_Map_September_21_2026_Export_v2.kmz',
+    ),
+    { dateMs: Date.UTC(2026, 8, 21), edition: 2 },
+  );
+  assert.deepEqual(
+    parseGhostMapsEdition('Reno Wildfires August 24, 2026.kmz'),
+    {
+      dateMs: Date.UTC(2026, 7, 24),
+      edition: 0,
+    },
+  );
+  assert.deepEqual(
+    parseGhostMapsEdition('Venezuelan_Crisis_Sep_5_2025_v2.kmz'),
+    {
+      dateMs: Date.UTC(2025, 8, 5),
+      edition: 2,
+    },
+  );
+  assert.deepEqual(
+    parseGhostMapsEdition('Kinetic_Activities_Last_30_Days.kmz'),
+    {
+      dateMs: null,
+      edition: 0,
+    },
+  );
+  // An impossible date is not a date.
+  assert.equal(parseGhostMapsEdition('X_September_31_2026.kmz').dateMs, null);
+});
+
+test('each product keeps its newest edition by date, then edition number', () => {
+  const master = `${ARCGIS}Common Intelligence Picture/Master Database/`;
+  const tree = [
+    blob(
+      `${master}S2Underground_Common_Intelligence_Picture_October_9_2026_Export_1.kmz`,
+    ),
+    blob(
+      `${master}S2Underground_Common_Intelligence_Picture_October_16_2026_Export_1.kmz`,
+    ),
+    blob(
+      `${master}S2Underground_Common_Intelligence_Picture_October_1_2026_Export_1.kmz`,
+    ),
+    blob(
+      `${master}S2Underground_Common_Intelligence_Picture_September_30_2026_Export_2.kmz`,
+    ),
+    blob(
+      `${ARCGIS}Common Intelligence Picture/30-Day Pulls/Kinetic_Activities_Last_30_Days.kmz`,
+    ),
+    blob(
+      `${ARCGIS}Border Crisis Map/S2Underground_Border_Crisis_Map_September_21_2026_Export_v1.kmz`,
+    ),
+    blob(
+      `${ARCGIS}Border Crisis Map/S2Underground_Border_Crisis_Map_September_21_2026_Export_v2.kmz`,
+    ),
+    // A European-only subset in a subfolder is not the border map.
+    blob(
+      `${ARCGIS}Border Crisis Map/European Layers Only/Europe_Migration_Crisis_June_02_2026_v1.kmz`,
+    ),
+    blob(`${INCIDENTS}Yemen 2026/Yemen FLOT.kmz`),
+    blob(`${INCIDENTS}Yemen 2026/Yemen FLOT_October_10_2026.kmz`),
+    { path: `${INCIDENTS}Yemen 2026`, type: 'tree', sha: 'f'.repeat(40) },
+  ];
+  const rows = buildGhostMapsCatalog(tree);
+  const byId = Object.fromEntries(rows.map((row) => [row.id, row]));
+  assert.deepEqual(
+    rows.map(({ id }) => id),
+    ['cip', 'kinetic-30d', 'border-crisis', 'yemen-flot'],
+  );
+  assert.match(byId.cip.fileName, /October_16_2026/);
+  assert.equal(byId.cip.defaultOn, true);
+  assert.equal(byId['kinetic-30d'].defaultOn, true);
+  assert.match(byId['border-crisis'].fileName, /Export_v2/);
+  assert.equal(byId['yemen-flot'].fileName, 'Yemen FLOT_October_10_2026.kmz');
+  assert.equal(byId.cip.version, tree[1].sha);
+  assert.equal(
+    byId.cip.fileTitle,
+    'Common Intelligence Picture October 16 2026 Export 1',
+  );
+});
+
+test('latest drop is the newest dated incident file outside curated, archived and base data', () => {
+  const rows = buildGhostMapsCatalog([
+    blob(`${INCIDENTS}Reno Wildfires August 24, 2026.kmz`),
+    blob(
+      `${INCIDENTS}Spokane Fire Disaster - August, 2026/SpokaneDisasterAid_August_8_2026.kmz`,
+    ),
+    blob(
+      `${INCIDENTS}0_Archive/Texas Floods/TexasFloods_December_1_2026_v1.kmz`,
+    ),
+    blob(`${INCIDENTS}Iran 2026/Basedata/Pipelines_December_1_2026.kmz`),
+    blob(
+      `${INCIDENTS}Iran 2026/Iran Kinetic Events/Iran_Kinetic_Events_December_2_2026_v1.kmz`,
+    ),
+    blob(`${INCIDENTS}Undated Product.kmz`),
+  ]);
+  const drop = rows.find(({ id }) => id === 'latest-drop');
+  assert.equal(drop.fileName, 'Reno Wildfires August 24, 2026.kmz');
+  assert.ok(rows.some(({ id }) => id === 'iran-kinetic'));
+});
+
+test('oversized, empty, non-KMZ and malformed entries are skipped', () => {
+  const path = `${ARCGIS}Common Intelligence Picture/Master Database/S2Underground_Common_Intelligence_Picture_October_16_2026_Export_1.kmz`;
+  assert.deepEqual(
+    buildGhostMapsCatalog([
+      { ...blob(path), size: 51 * 1024 * 1024 },
+      { ...blob(path), size: 0 },
+      { ...blob(path), sha: 'not-a-sha' },
+      blob(path.replace(/\.kmz$/, '.zip')),
+      null,
+    ]),
+    [],
+  );
+  assert.deepEqual(buildGhostMapsCatalog(undefined), []);
+});
+
+test('raw URLs are pinned to the commit and encode every path segment', () => {
+  assert.equal(
+    ghostMapsRawUrl('a'.repeat(40), 'Folder (KMZs)/Yemen FLOT.kmz'),
+    `https://raw.githubusercontent.com/s2underground/GhostMaps/${'a'.repeat(40)}/Folder%20(KMZs)/Yemen%20FLOT.kmz`,
+  );
+  assert.equal(ghostMapsFileTitle('S2Underground_A__B.kmz'), 'A B');
+});
+
+test('the branch head comes from the smart-HTTP ref advertisement', () => {
+  const head = '142d7630bc8f1f2c4b96e16ee865ca50d1ab578d';
+  const other = 'b'.repeat(40);
+  const text = [
+    '001e# service=git-upload-pack',
+    `0159${head} HEAD\0multi_ack symref=HEAD:refs/heads/main`,
+    `003f${other} refs/heads/main-old`,
+    `003d${head} refs/heads/main`,
+    '0000',
+  ].join('\n');
+  assert.equal(parseGitRefAdvertisement(text), head);
+  assert.equal(parseGitRefAdvertisement(text, 'dev'), null);
+  assert.equal(parseGitRefAdvertisement(''), null);
+});
diff --git a/src/layers/ghostMaps/index.js b/src/layers/ghostMaps/index.js
new file mode 100644
index 000000000..01d564d05
--- /dev/null
+++ b/src/layers/ghostMaps/index.js
@@ -0,0 +1,711 @@
+import * as Cesium from 'cesium';
+import {
+  decodeXml,
+  kmzImageResolver,
+  kmzMainDocument,
+  parseXml,
+  readZipEntries,
+  resolveKmzPath,
+} from '../../data/geoFileImport.js';
+import {
+  formatNumber,
+  formatUtcDayMonth,
+  msg,
+  t,
+  tn,
+} from '../../i18n/index.js';
+import { createHorizonCull } from '../streetLevel/view.js';
+import { readGhostMapsKml } from './kml.js';
+import { fieldLabel, parseDescriptionFields, wrapCardText } from './records.js';
+export * from './catalog.js';
+export * from './records.js';
+export { readGhostMapsKml } from './kml.js';
+export { createGhostMapsSource } from './source.js';
+
+export const GHOSTMAPS_LAYER_ID = 's2-ghostmaps';
+export const GHOSTMAPS_OVERLAY_SOURCE_ID = 's2-ghostmaps';
+const PICK_PREFIX = 'ghostmaps:';
+const STORAGE_KEY = 'gev.ghostmaps.products';
+const ACCENT = '#c8ff00';
+const MAX_ICON_BYTES = 512 * 1024;
+const CARD_HOST_OPTIONS = Object.freeze({
+  cohortLimit: 1,
+  collisionCapacity: 1,
+  moving: false,
+});
+const MAX_CARD_LINES = 12;
+
+/** Panel names for the catalog's product ids (the catalog sends English). */
+const PRODUCT_LABELS = Object.freeze({
+  cip: msg('Intel Picture'),
+  'kinetic-30d': msg('Kinetic 30d'),
+  'border-crisis': msg('Border Crisis'),
+  'iran-cip': msg('Iran Picture'),
+  'iran-kinetic': msg('Iran Kinetic'),
+  'yemen-flot': msg('Yemen FLOT'),
+  'latest-drop': msg('Latest Drop'),
+});
+
+/** One distinct fallback marker color per product. */
+const PRODUCT_COLORS = Object.freeze({
+  cip: '#c8ff00',
+  'kinetic-30d': '#ff5a36',
+  'border-crisis': '#ffb547',
+  'iran-cip': '#39d0ff',
+  'iran-kinetic': '#ff3b8d',
+  'yemen-flot': '#5dff9f',
+  'latest-drop': '#b48cff',
+});
+
+function defaultStorage() {
+  try {
+    return globalThis.localStorage ?? null;
+  } catch {
+    return null;
+  }
+}
+
+function readStoredSelection(storage) {
+  try {
+    const value = JSON.parse(storage?.getItem(STORAGE_KEY) ?? 'null');
+    return Array.isArray(value) ? new Set(value.map(String)) : null;
+  } catch {
+    return null;
+  }
+}
+
+function writeStoredSelection(storage, selected) {
+  try {
+    storage?.setItem(STORAGE_KEY, JSON.stringify([...selected]));
+  } catch {
+    /* private window or blocked storage: the selection lasts this session */
+  }
+}
+
+/** A round marker for placemarks whose icon is missing or remote. */
+const markerCache = new Map();
+function markerImage(color) {
+  if (markerCache.has(color)) return markerCache.get(color);
+  let url = null;
+  try {
+    const canvas = document.createElement('canvas');
+    canvas.width = canvas.height = 20;
+    const ctx = canvas.getContext('2d');
+    ctx.beginPath();
+    ctx.arc(10, 10, 7, 0, Math.PI * 2);
+    ctx.fillStyle = color;
+    ctx.fill();
+    ctx.lineWidth = 2;
+    ctx.strokeStyle = 'rgba(0,0,0,0.85)';
+    ctx.stroke();
+    url = canvas.toDataURL();
+  } catch {
+    url = null;
+  }
+  markerCache.set(color, url);
+  return url;
+}
+
+const cesiumColor = (rgba, fallback, alpha) =>
+  rgba
+    ? new Cesium.Color(rgba[0], rgba[1], rgba[2], alpha ?? rgba[3])
+    : Cesium.Color.fromCssColorString(fallback).withAlpha(alpha ?? 1);
+
+function anchorOf(geometry) {
+  if (geometry.type === 'point') return geometry.position;
+  const ring =
+    geometry.type === 'polygon' ? geometry.outer : geometry.positions;
+  let lon = 0;
+  let lat = 0;
+  for (const [x, y] of ring) {
+    lon += x;
+    lat += y;
+  }
+  return [lon / ring.length, lat / ring.length];
+}
+
+/**
+ * S2 Underground GhostMaps: the current editions of S2's public KMZ intel
+ * products, kept in step with the GitHub repository. The proxy watches the
+ * branch head and pushes each new commit; only changed products reload.
+ */
+export function createGhostMapsLayer({
+  source,
+  overlayHost = null,
+  screenSpaceEventHandlerFactory = null,
+  picking = null,
+  pointer = null,
+  openExternal = null,
+  storage = defaultStorage(),
+} = {}) {
+  if (typeof source?.getCatalog !== 'function')
+    throw new TypeError('GhostMaps layer requires a catalog source');
+  let _viewer = null;
+  let _enabled = false;
+  let _catalog = null;
+  let _lastError = null;
+  let _unsubscribe = null;
+  let _stream = 'closed';
+  let _queue = Promise.resolve();
+  let _clickHandler = null;
+  let _rowListener = null;
+  let _selectedKey = null;
+  let _selectedCardId = null;
+  let _selectedLink = null;
+  let _lifetime = new AbortController();
+  let _selection = readStoredSelection(storage);
+  /** productId → {version, dataSource, urls, count, features} */
+  const _loaded = new Map();
+  /** productId → in-flight version */
+  const _loading = new Map();
+  /** productId → error text */
+  const _failed = new Map();
+
+  const notifyRow = () => _rowListener?.();
+  const render = () => _viewer?.scene?.requestRender?.();
+  // Pins skip the depth test, and with Google 3D tiles the globe is hidden,
+  // so nothing else stops far-side pins drawing through the planet.
+  const _horizon = createHorizonCull({
+    getViewer: () => _viewer,
+    items: function* () {
+      for (const item of _loaded.values()) yield* item.pins;
+    },
+    onChange: render,
+  });
+  const canSelect = () =>
+    overlayHost && screenSpaceEventHandlerFactory && picking;
+
+  function wanted(product) {
+    return _selection ? _selection.has(product.id) : product.defaultOn;
+  }
+
+  function selectedIds() {
+    return (_catalog?.products || []).filter(wanted).map(({ id }) => id);
+  }
+
+  function unload(id) {
+    const item = _loaded.get(id);
+    if (!item) return;
+    _loaded.delete(id);
+    _viewer?.dataSources?.remove(item.dataSource, true);
+    item.urls.forEach((url) => URL.revokeObjectURL(url));
+    if (_selectedKey?.startsWith(`${id}:`)) clearSelection();
+  }
+
+  /** Build one product's data source off-scene, then swap it in. */
+  async function load(product, signal) {
+    const bytes = await source.getFile(product.id, product.version, { signal });
+    signal.throwIfAborted();
+    const entries = await readZipEntries(bytes);
+    signal.throwIfAborted();
+    const main = kmzMainDocument(entries);
+    if (!main) throw new Error(msg('That KMZ holds no KML document.'));
+    const urls = [];
+    const resolvePacked = kmzImageResolver(entries, main, (url) =>
+      urls.push(url),
+    );
+    // Icons only: ArcGIS exports also pack multi-megabyte photo attachments,
+    // which fall back to the product marker instead of being decoded.
+    const resolveImage = (href) => {
+      const path = resolveKmzPath(href, main, entries);
+      return path && entries.get(path).length <= MAX_ICON_BYTES
+        ? resolvePacked(href)
+        : null;
+    };
+    try {
+      const parsed = readGhostMapsKml(
+        parseXml(decodeXml(entries.get(main)), 'KML'),
+        resolveImage,
+      );
+      entries.clear();
+      signal.throwIfAborted();
+      const color = PRODUCT_COLORS[product.id] || ACCENT;
+      const dataSource = new Cesium.CustomDataSource(
+        `${GHOSTMAPS_LAYER_ID}:${product.id}`,
+      );
+      const features = [];
+      const pins = [];
+      dataSource.entities.suspendEvents();
+      parsed.features.forEach((feature, index) => {
+        const key = `${product.id}:${index}`;
+        const { style } = feature;
+        feature.geometries.forEach((geometry, part) => {
+          const id = `${PICK_PREFIX}${key}:${part}`;
+          if (geometry.type === 'point') {
+            const position = Cesium.Cartesian3.fromDegrees(
+              ...geometry.position,
+            );
+            const entity = dataSource.entities.add({
+              id,
+              position,
+              billboard: {
+                image: style.icon || markerImage(color),
+                scale: Math.min(
+                  1.5,
+                  Math.max(0.35, (style.iconScale ?? 1) * 0.7),
+                ),
+                color:
+                  style.icon && style.iconColor
+                    ? cesiumColor(style.iconColor)
+                    : undefined,
+                heightReference: Cesium.HeightReference.CLAMP_TO_GROUND,
+                verticalOrigin: Cesium.VerticalOrigin.CENTER,
+                // Ground-clamped icons would sink into terrain and 3D tiles; the
+                // horizon cull hides the far side instead (see `_horizon`).
+                disableDepthTestDistance: Number.POSITIVE_INFINITY,
+              },
+            });
+            pins.push({
+              position,
+              get show() {
+                return entity.show;
+              },
+              set show(value) {
+                entity.show = value;
+              },
+            });
+          } else if (geometry.type === 'line') {
+            dataSource.entities.add({
+              id,
+              polyline: {
+                positions: Cesium.Cartesian3.fromDegreesArray(
+                  geometry.positions.flat(),
+                ),
+                width: Math.min(8, Math.max(1.5, style.lineWidth ?? 2)),
+                material: cesiumColor(style.lineColor, color),
+                clampToGround: true,
+              },
+            });
+          } else {
+            const ring = (points) =>
+              Cesium.Cartesian3.fromDegreesArray(points.flat());
+            dataSource.entities.add({
+              id,
+              polygon: {
+                hierarchy: new Cesium.PolygonHierarchy(
+                  ring(geometry.outer),
+                  geometry.holes.map(
+                    (hole) => new Cesium.PolygonHierarchy(ring(hole)),
+                  ),
+                ),
+                material:
+                  style.fill === false
+                    ? Cesium.Color.TRANSPARENT
+                    : cesiumColor(
+                        style.polyColor,
+                        color,
+                        style.polyColor ? undefined : 0.25,
+                      ),
+                classificationType: Cesium.ClassificationType.BOTH,
+              },
+            });
+            if (style.outline !== false)
+              dataSource.entities.add({
+                id: `${id}:outline`,
+                polyline: {
+                  positions: ring([...geometry.outer, geometry.outer[0]]),
+                  width: Math.min(6, Math.max(1.5, style.lineWidth ?? 2)),
+                  material: cesiumColor(style.lineColor, color),
+                  clampToGround: true,
+                },
+              });
+          }
+        });
+        features.push({
+          name: feature.name,
+          folder: feature.folder,
+          description: feature.description,
+          anchor: anchorOf(feature.geometries[0]),
+        });
+      });
+      dataSource.entities.resumeEvents();
+      return { version: product.version, dataSource, urls, features, pins };
+    } catch (error) {
+      urls.forEach((url) => URL.revokeObjectURL(url));
+      throw error;
+    }
+  }
+
+  /** Bring the globe in line with the catalog and the chip selection. */
+  function sync() {
+    const run = _queue.then(async () => {
+      if (!_enabled || !_viewer || !_catalog) return;
+      const signal = _lifetime.signal;
+      const products = new Map(_catalog.products.map((p) => [p.id, p]));
+      for (const id of [..._loaded.keys()]) {
+        const product = products.get(id);
+        if (!product || !wanted(product)) unload(id);
+      }
+      for (const product of _catalog.products) {
+        if (!wanted(product) || signal.aborted) continue;
+        if (_loaded.get(product.id)?.version === product.version) continue;
+        _loading.set(product.id, product.version);
+        _failed.delete(product.id);
+        notifyRow();
+        try {
+          const next = await load(product, signal);
+          if (signal.aborted || !_enabled) {
+            next.urls.forEach((url) => URL.revokeObjectURL(url));
+            return;
+          }
+          // Cull before the first frame so far-side pins never flash.
+          _horizon.update(next.pins);
+          await _viewer.dataSources.add(next.dataSource);
+          // The new edition is on the globe before the old one leaves.
+          unload(product.id);
+          _loaded.set(product.id, next);
+        } catch (error) {
+          if (signal.aborted) return;
+          console.warn(`[Data:GhostMaps] ${product.id}:`, error);
+          _failed.set(
+            product.id,
+            error?.template ||
+              error?.message ||
+              msg('GhostMaps file could not be read'),
+          );
+        } finally {
+          _loading.delete(product.id);
+          notifyRow();
+          render();
+        }
+      }
+    });
+    _queue = run.catch(() => {});
+    return run;
+  }
+
+  function applyCatalog(catalog) {
+    _catalog = catalog;
+    _lastError = catalog.error || null;
+    notifyRow();
+    return sync();
+  }
+
+  function toggleProduct(id) {
+    // The first change pins the whole current selection, defaults included.
+    if (!_selection) _selection = new Set(selectedIds());
+    if (_selection.has(id)) _selection.delete(id);
+    else _selection.add(id);
+    writeStoredSelection(storage, _selection);
+    notifyRow();
+    void sync();
+  }
+
+  // ---- selection card ----------------------------------------------------
+  function featureFor(key) {
+    const [productId, index] = key.split(':');
+    return {
+      product: _catalog?.products.find((p) => p.id === productId) || null,
+      feature: _loaded.get(productId)?.features[Number(index)] || null,
+    };
+  }
+
+  function publishCard() {
+    if (!canSelect()) return;
+    const { product, feature } = _selectedKey ? featureFor(_selectedKey) : {};
+    if (!feature) {
+      _selectedKey = null;
+      _selectedCardId = null;
+      _selectedLink = null;
+      overlayHost.setEntries(
+        GHOSTMAPS_OVERLAY_SOURCE_ID,
+        [],
+        CARD_HOST_OPTIONS,
+      );
+      return;
+    }
+    const { fields, links } = parseDescriptionFields(feature.description);
+    _selectedLink = links[0] || null;
+    const heading = [t(PRODUCT_LABELS[product?.id] || product?.title || '')];
+    if (feature.folder) heading.push(fieldLabel(feature.folder));
+    if (product?.dateMs) heading.push(formatUtcDayMonth(product.dateMs));
+    const details = [heading.filter(Boolean).join(' · ')];
+    for (const { label, value } of fields) {
+      if (details.length >= MAX_CARD_LINES) break;
+      // ArcGIS repeats the feature type as the first row; the title has it.
+      if (value === feature.name) continue;
+      const line = label ? `${fieldLabel(label)}: ${value}` : value;
+      details.push(
+        ...wrapCardText(line, 60, Math.min(4, MAX_CARD_LINES - details.length)),
+      );
+    }
+    if (_selectedLink && openExternal)
+      details.push(
+        tn(
+          links.length,
+          '{count} source link ↗ · click card to open',
+          '{count} source links ↗ · click card to open the first',
+          { count: formatNumber(links.length) },
+        ),
+      );
+    const title = t('S2 · {name}', {
+      name: fieldLabel(feature.name || feature.folder) || t('Report'),
+    });
+    const card = {
+      id: `ghostmaps-card:${_selectedKey}`,
+      selected: true,
+      interactive: Boolean(_selectedLink && openExternal),
+      title,
+      details,
+      accent: PRODUCT_COLORS[product?.id] || ACCENT,
+      priority: Number.MAX_SAFE_INTEGER,
+      gapPx: 15,
+      verticalOnly: true,
+      placement: 'above',
+      // A click card comes and goes with the click, as CCTV cards do, rather
+      // than holding the label arbiter's 2.5 s minimum lifetime; and it hides
+      // when its marker turns behind the planet.
+      stateless: true,
+      horizonCull: true,
+      position: Cesium.Cartesian3.fromDegrees(...feature.anchor),
+    };
+    if (card.interactive) {
+      const link = _selectedLink;
+      card.accessibilityLabel = t('Open the source for {title}', { title });
+      card.activate = () => {
+        openExternal(link);
+        return true;
+      };
+    }
+    _selectedCardId = card.id;
+    overlayHost.setEntries(
+      GHOSTMAPS_OVERLAY_SOURCE_ID,
+      [card],
+      CARD_HOST_OPTIONS,
+    );
+    overlayHost.setVisible?.(GHOSTMAPS_OVERLAY_SOURCE_ID, true);
+  }
+
+  function clearSelection() {
+    _selectedKey = null;
+    _selectedCardId = null;
+    _selectedLink = null;
+    // An empty publish, as the perimeter cards deselect: it releases the
+    // selected card's paint lane, which clearing the source alone left drawn.
+    overlayHost?.setEntries(GHOSTMAPS_OVERLAY_SOURCE_ID, [], CARD_HOST_OPTIONS);
+  }
+
+  function pickedKey(picked) {
+    const pickId = picking.resolvePickId(picked);
+    if (typeof pickId !== 'string' || !pickId.startsWith(PICK_PREFIX))
+      return null;
+    const [productId, index] = pickId.slice(PICK_PREFIX.length).split(':');
+    return _loaded.get(productId)?.features[Number(index)]
+      ? `${productId}:${index}`
+      : null;
+  }
+
+  function installClickHandler() {
+    if (!canSelect() || _clickHandler || !_viewer) return;
+    picking.registerPickOwner?.(
+      GHOSTMAPS_LAYER_ID,
+      (pickedId) =>
+        typeof pickedId === 'string' && pickedId.startsWith(PICK_PREFIX),
+    );
+    _clickHandler = screenSpaceEventHandlerFactory(_viewer);
+    _clickHandler.setInputAction((click) => {
+      if (pointer && !pointer.isPointerFree()) return;
+      const cardHit = overlayHost.hitTest?.(
+        click.position?.x,
+        click.position?.y,
+        { sourceId: GHOSTMAPS_OVERLAY_SOURCE_ID },
+      );
+      if (cardHit && cardHit.entryId === _selectedCardId) {
+        if (_selectedLink && openExternal) openExternal(_selectedLink);
+        return;
+      }
+      const picked = _viewer.scene.pick(click.position);
+      const key = picked ? pickedKey(picked) : null;
+      if (key) {
+        _selectedKey = key;
+        publishCard();
+        render();
+        return;
+      }
+      if (picked) {
+        const pickId = picking.resolvePickId(picked);
+        if (pickId && picking.isOwnedByOtherLayer(GHOSTMAPS_LAYER_ID, pickId))
+          return;
+      }
+      if (_selectedKey) {
+        clearSelection();
+        render();
+      }
+    }, Cesium.ScreenSpaceEventType.LEFT_CLICK);
+  }
+
+  function removeClickHandler() {
+    _clickHandler?.destroy();
+    _clickHandler = null;
+    picking?.unregisterPickOwner?.(GHOSTMAPS_LAYER_ID);
+  }
+
+  function featureCount() {
+    let count = 0;
+    for (const item of _loaded.values()) count += item.features.length;
+    return count;
+  }
+
+  const layer = {
+    id: GHOSTMAPS_LAYER_ID,
+    name: 'S2 GhostMaps',
+    icon: '👻',
+    source: 'S2 Underground',
+    // Pushes arrive within seconds over the event stream; this interval is
+    // the backstop if the stream is down.
+    updateInterval: 300000,
+
+    init(viewer) {
+      if (_viewer) throw new Error('GhostMaps layer is already initialized');
+      _viewer = viewer;
+    },
+
+    enable() {
+      _enabled = true;
+      _lifetime = new AbortController();
+      for (const item of _loaded.values()) item.dataSource.show = true;
+      installClickHandler();
+      if (!_unsubscribe && typeof source.subscribe === 'function')
+        _unsubscribe = source.subscribe(
+          (catalog) => {
+            if (_enabled) void applyCatalog(catalog);
+          },
+          (state) => {
+            if (_stream === state) return;
+            _stream = state;
+            notifyRow();
+          },
+        );
+    },
+
+    disable() {
+      _enabled = false;
+      _lifetime.abort();
+      _unsubscribe?.();
+      _unsubscribe = null;
+      _stream = 'closed';
+      removeClickHandler();
+      clearSelection();
+      _horizon.stop();
+      for (const id of [..._loaded.keys()]) unload(id);
+      render();
+    },
+
+    async update(_viewerArg, { signal } = {}) {
+      if (!_enabled || signal?.aborted) return false;
+      try {
+        const catalog = await source.getCatalog({ signal });
+        if (!_enabled) return false;
+        await applyCatalog(catalog);
+        return true;
+      } catch (error) {
+        if (signal?.aborted || !_enabled) return false;
+        console.warn('[Data:GhostMaps] catalog error:', error);
+        _lastError = error?.message || msg('GhostMaps catalog unavailable');
+        notifyRow();
+        // Keep the layer on; the event stream or the next interval recovers.
+        return true;
+      }
+    },
+
+    destroy() {
+      layer.disable();
+      _viewer = null;
+      _catalog = null;
+      _rowListener = null;
+    },
+
+    setRowControlsListener(listener) {
+      _rowListener = listener;
+    },
+
+    getRowControls() {
+      const products = _catalog?.products || [];
+      const commit = _catalog?.commit;
+      const info = commit
+        ? _stream === 'open'
+          ? t('LIVE · GitHub {commit} · {message} · checked every {seconds}s', {
+              commit: commit.slice(0, 7),
+              message: _catalog.message || '—',
+              seconds: formatNumber(
+                Math.round((_catalog.pollMs || 15000) / 1000),
+              ),
+            })
+          : t('GitHub {commit} · {message} · reconnecting for live updates', {
+              commit: commit.slice(0, 7),
+              message: _catalog.message || '—',
+            })
+        : t('Connecting to the S2 GhostMaps repository…');
+      return {
+        chips: products.map((product) => {
+          const loaded = _loaded.get(product.id);
+          const failed = _failed.get(product.id);
+          return {
+            id: product.id,
+            label: t(PRODUCT_LABELS[product.id] || product.title),
+            active: wanted(product),
+            busy: _loading.has(product.id),
+            state: failed ? 'error' : undefined,
+            color: PRODUCT_COLORS[product.id],
+            title: [
+              product.fileTitle,
+              loaded
+                ? tn(
+                    loaded.features.length,
+                    '{count} placemark',
+                    '{count} placemarks',
+                    {
+                      count: formatNumber(loaded.features.length),
+                    },
+                  )
+                : null,
+              failed ? t(failed) : null,
+            ]
+              .filter(Boolean)
+              .join(' · '),
+            onClick: () => toggleProduct(product.id),
+          };
+        }),
+        legend: [],
+        info,
+        infoTitle: t(
+          'S2 Underground publishes these KMZ products to GitHub. New uploads are detected within seconds and replace the previous edition automatically. Click a marker for its report.',
+        ),
+      };
+    },
+
+    getStats() {
+      return {
+        count: featureCount(),
+        products: [..._loaded.keys()],
+        commit: _catalog?.commit || null,
+        lastUpdate: _catalog?.committedAt || _catalog?.changedAt || null,
+        checkedAt: _catalog?.checkedAt || null,
+        stream: _stream,
+        loading: _loading.size > 0,
+        error: _lastError || [..._failed.values()][0] || null,
+        fallback: false,
+      };
+    },
+
+    /** Loaded placemarks as plain records, for tools and QA. */
+    getAnalystRecords(maxCount = Infinity) {
+      if (!_enabled) return [];
+      const out = [];
+      for (const [productId, item] of _loaded) {
+        for (const feature of item.features) {
+          if (out.length >= maxCount) return out;
+          out.push({
+            product: productId,
+            name: feature.name,
+            folder: feature.folder,
+            lon: feature.anchor[0],
+            lat: feature.anchor[1],
+          });
+        }
+      }
+      return out;
+    },
+  };
+  return layer;
+}
diff --git a/src/layers/ghostMaps/kml.js b/src/layers/ghostMaps/kml.js
new file mode 100644
index 000000000..92e0c532f
--- /dev/null
+++ b/src/layers/ghostMaps/kml.js
@@ -0,0 +1,198 @@
+// Read the drawable content of a parsed GhostMaps KML document: placemarks
+// with their folder, geometry, resolved style and raw description. Network
+// links, overlays, models and remote icons are never followed; an icon is
+// either an image packed in the same KMZ or the layer's own marker.
+import { kmlColor } from './records.js';
+
+export const MAX_GHOSTMAPS_FEATURES = 20_000;
+export const MAX_GHOSTMAPS_POSITIONS = 250_000;
+
+const childrenNamed = (el, name) =>
+  [...(el?.children || [])].filter((child) => child.localName === name);
+const firstChild = (el, name) =>
+  [...(el?.children || [])].find((child) => child.localName === name) || null;
+const descendants = (el, name) =>
+  [...(el?.getElementsByTagName?.('*') || [])].filter(
+    (child) => child.localName === name,
+  );
+const text = (el) => (el?.textContent ?? '').trim();
+
+function number(el, fallback) {
+  const value = Number(text(el));
+  return el && Number.isFinite(value) ? value : fallback;
+}
+
+/** `lon,lat[,alt] lon,lat ...` → [[lon, lat], ...]; invalid tuples are dropped. */
+export function parseKmlCoordinates(value) {
+  const out = [];
+  for (const tuple of String(value ?? '')
+    .trim()
+    .split(/\s+/)) {
+    const [lon, lat] = tuple.split(',').map(Number);
+    if (
+      Number.isFinite(lon) &&
+      Number.isFinite(lat) &&
+      Math.abs(lat) <= 90 &&
+      Math.abs(lon) <= 180
+    )
+      out.push([lon, lat]);
+  }
+  return out;
+}
+
+function readStyle(styleEl, resolveImage) {
+  const style = {};
+  const icon = firstChild(styleEl, 'IconStyle');
+  if (icon) {
+    const href = text(firstChild(firstChild(icon, 'Icon'), 'href'));
+    style.icon = href ? resolveImage(href) : null;
+    style.iconScale = number(firstChild(icon, 'scale'), 1);
+    style.iconColor = kmlColor(text(firstChild(icon, 'color')));
+  }
+  const line = firstChild(styleEl, 'LineStyle');
+  if (line) {
+    style.lineColor = kmlColor(text(firstChild(line, 'color')));
+    style.lineWidth = number(firstChild(line, 'width'), 1);
+  }
+  const poly = firstChild(styleEl, 'PolyStyle');
+  if (poly) {
+    style.polyColor = kmlColor(text(firstChild(poly, 'color')));
+    style.fill = text(firstChild(poly, 'fill')) !== '0';
+    style.outline = text(firstChild(poly, 'outline')) !== '0';
+  }
+  return style;
+}
+
+/** Shared styles by id; a StyleMap resolves to its `normal` pair. */
+function collectStyles(doc, resolveImage) {
+  const styles = new Map();
+  for (const el of descendants(doc, 'Style')) {
+    const id = el.getAttribute('id');
+    if (id) styles.set(id, readStyle(el, resolveImage));
+  }
+  const maps = new Map();
+  for (const el of descendants(doc, 'StyleMap')) {
+    const id = el.getAttribute('id');
+    if (!id) continue;
+    const normal = childrenNamed(el, 'Pair').find(
+      (pair) => text(firstChild(pair, 'key')) === 'normal',
+    );
+    if (!normal) continue;
+    const inline = firstChild(normal, 'Style');
+    maps.set(
+      id,
+      inline
+        ? readStyle(inline, resolveImage)
+        : text(firstChild(normal, 'styleUrl')),
+    );
+  }
+  const resolve = (url, depth = 0) => {
+    const id = String(url || '').replace(/^#/, '');
+    if (!id || url.includes('/') || depth > 2) return {};
+    if (styles.has(id)) return styles.get(id);
+    const mapped = maps.get(id);
+    if (typeof mapped === 'string') return resolve(mapped, depth + 1);
+    return mapped || {};
+  };
+  return resolve;
+}
+
+function readGeometry(el, out, budget) {
+  switch (el.localName) {
+    case 'Point': {
+      const [position] = parseKmlCoordinates(
+        text(firstChild(el, 'coordinates')),
+      );
+      if (position) {
+        budget.positions += 1;
+        out.push({ type: 'point', position });
+      }
+      break;
+    }
+    case 'LineString':
+    case 'LinearRing': {
+      const positions = parseKmlCoordinates(
+        text(firstChild(el, 'coordinates')),
+      );
+      if (positions.length >= 2) {
+        budget.positions += positions.length;
+        out.push({ type: 'line', positions });
+      }
+      break;
+    }
+    case 'Polygon': {
+      const ring = (boundary) =>
+        parseKmlCoordinates(
+          text(firstChild(firstChild(boundary, 'LinearRing'), 'coordinates')),
+        );
+      const outer = ring(firstChild(el, 'outerBoundaryIs'));
+      if (outer.length >= 3) {
+        const holes = childrenNamed(el, 'innerBoundaryIs')
+          .map(ring)
+          .filter((hole) => hole.length >= 3);
+        budget.positions +=
+          outer.length + holes.reduce((n, hole) => n + hole.length, 0);
+        out.push({ type: 'polygon', outer, holes });
+      }
+      break;
+    }
+    case 'MultiGeometry':
+      for (const child of el.children) readGeometry(child, out, budget);
+      break;
+    default:
+      // Models, tracks and anything newer are not drawn.
+      break;
+  }
+}
+
+/** Name of the nearest enclosing Folder (or Document), for grouping. */
+function folderName(el) {
+  for (let node = el.parentElement; node; node = node.parentElement) {
+    if (node.localName === 'Folder' || node.localName === 'Document') {
+      const name = text(firstChild(node, 'name'));
+      if (name) return name;
+    }
+  }
+  return '';
+}
+
+/**
+ * @param {Document} doc Parsed KML.
+ * @param {(href: string) => ?string} resolveImage URL for a KMZ-packed image.
+ * @returns {{features: Array<{name: string, folder: string,
+ *   description: string, style: object, geometries: Array<object>}>,
+ *   positions: number, over: boolean}}
+ */
+export function readGhostMapsKml(doc, resolveImage = () => null) {
+  const styleFor = collectStyles(doc, resolveImage);
+  const features = [];
+  const budget = { positions: 0 };
+  let over = false;
+  for (const placemark of descendants(doc, 'Placemark')) {
+    // A hidden placemark (visibility 0) is drawn hidden by Google Earth too.
+    if (text(firstChild(placemark, 'visibility')) === '0') continue;
+    const geometries = [];
+    for (const child of placemark.children)
+      readGeometry(child, geometries, budget);
+    if (!geometries.length) continue;
+    if (
+      features.length >= MAX_GHOSTMAPS_FEATURES ||
+      budget.positions > MAX_GHOSTMAPS_POSITIONS
+    ) {
+      over = true;
+      break;
+    }
+    const inline = firstChild(placemark, 'Style');
+    features.push({
+      name: text(firstChild(placemark, 'name')).slice(0, 200),
+      folder: folderName(placemark).slice(0, 120),
+      description: text(firstChild(placemark, 'description')),
+      style: {
+        ...styleFor(text(firstChild(placemark, 'styleUrl'))),
+        ...(inline ? readStyle(inline, resolveImage) : {}),
+      },
+      geometries,
+    });
+  }
+  return { features, positions: budget.positions, over };
+}
diff --git a/src/layers/ghostMaps/lifecycle.test.mjs b/src/layers/ghostMaps/lifecycle.test.mjs
new file mode 100644
index 000000000..51d546017
--- /dev/null
+++ b/src/layers/ghostMaps/lifecycle.test.mjs
@@ -0,0 +1,180 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import * as Cesium from 'cesium';
+import { createGhostMapsLayer } from './index.js';
+
+function element(localName, children = [], value = '', attributes = {}) {
+  const node = {
+    localName,
+    children,
+    get textContent() {
+      return value + children.map((child) => child.textContent).join('');
+    },
+    getAttribute: (key) => attributes[key] ?? null,
+    getElementsByTagName(name) {
+      return children.flatMap((child) => [
+        ...(name === '*' || name === child.localName ? [child] : []),
+        ...child.getElementsByTagName(name),
+      ]);
+    },
+  };
+  for (const child of children) child.parentElement = node;
+  return node;
+}
+
+function documentFixture() {
+  return element('document', [
+    element('kml', [
+      element('Document', [
+        element(
+          'Style',
+          [
+            element('IconStyle', [
+              element('Icon', [element('href', [], 'icon.png')]),
+            ]),
+          ],
+          '',
+          { id: 'pin' },
+        ),
+        element('Placemark', [
+          element('name', [], 'Test report'),
+          element('styleUrl', [], '#pin'),
+          element('Point', [element('coordinates', [], '12,34')]),
+        ]),
+      ]),
+    ]),
+  ]);
+}
+
+// A stored KMZ with a local icon; the XML DOM double supplies its one point.
+function fixtureKmz() {
+  const files = [
+    ['doc.kml', '<kml/>'],
+    ['icon.png', 'packed icon'],
+  ];
+  const local = [];
+  const central = [];
+  let offset = 0;
+  for (const [name, value] of files) {
+    const key = Buffer.from(name);
+    const bytes = Buffer.from(value);
+    const header = Buffer.alloc(30);
+    header.writeUInt32LE(0x04034b50);
+    header.writeUInt32LE(bytes.length, 18);
+    header.writeUInt32LE(bytes.length, 22);
+    header.writeUInt16LE(key.length, 26);
+    const directory = Buffer.alloc(46);
+    directory.writeUInt32LE(0x02014b50);
+    directory.writeUInt32LE(bytes.length, 20);
+    directory.writeUInt32LE(bytes.length, 24);
+    directory.writeUInt16LE(key.length, 28);
+    directory.writeUInt32LE(offset, 42);
+    local.push(header, key, bytes);
+    central.push(directory, key);
+    offset += header.length + key.length + bytes.length;
+  }
+  const directory = Buffer.concat(central);
+  const end = Buffer.alloc(22);
+  end.writeUInt32LE(0x06054b50);
+  end.writeUInt16LE(files.length, 8);
+  end.writeUInt16LE(files.length, 10);
+  end.writeUInt32LE(directory.length, 12);
+  end.writeUInt32LE(offset, 16);
+  return new Uint8Array(Buffer.concat([...local, directory, end]));
+}
+
+function fixture(t, { beforeFileReturns, onCreateUrl } = {}) {
+  const previous = Object.getOwnPropertyDescriptor(globalThis, 'DOMParser');
+  globalThis.DOMParser = class {
+    parseFromString() {
+      return documentFixture();
+    }
+  };
+  t.after(() => {
+    if (previous) Object.defineProperty(globalThis, 'DOMParser', previous);
+    else delete globalThis.DOMParser;
+  });
+  const created = [];
+  const revoked = [];
+  t.mock.method(URL, 'createObjectURL', () => {
+    const url = `blob:local-${created.length}`;
+    created.push(url);
+    onCreateUrl?.(layer);
+    return url;
+  });
+  t.mock.method(URL, 'revokeObjectURL', (url) => revoked.push(url));
+  t.mock.method(console, 'warn', () => {});
+  const mounted = new Set();
+  const viewer = {
+    scene: { requestRender() {} },
+    dataSources: {
+      async add(dataSource) {
+        mounted.add(dataSource);
+        return dataSource;
+      },
+      remove(dataSource) {
+        return mounted.delete(dataSource);
+      },
+    },
+  };
+  const layer = createGhostMapsLayer({
+    storage: null,
+    source: {
+      getCatalog: async () => ({
+        products: [{ id: 'cip', version: 'a'.repeat(40), defaultOn: true }],
+      }),
+      getFile: async () => {
+        beforeFileReturns?.(layer);
+        return fixtureKmz();
+      },
+    },
+  });
+  layer.init(viewer);
+  layer.enable();
+  t.after(() => layer.destroy());
+  return { layer, viewer, mounted, created, revoked };
+}
+
+test('cancelling a file read does not allocate packed-image URLs', async (t) => {
+  const { layer, viewer, mounted, created, revoked } = fixture(t, {
+    beforeFileReturns: (layer) => queueMicrotask(() => layer.disable()),
+  });
+  await layer.update(viewer);
+  assert.equal(created.length, 0);
+  assert.equal(revoked.length, 0);
+  assert.equal(mounted.size, 0);
+});
+
+test('cancellation during parsing releases every packed-image URL', async (t) => {
+  const { layer, viewer, mounted, created, revoked } = fixture(t, {
+    onCreateUrl: (layer) => layer.disable(),
+  });
+  await layer.update(viewer);
+  assert.equal(created.length, 1);
+  assert.deepEqual(revoked, created);
+  assert.equal(mounted.size, 0);
+});
+
+test('entity construction failure releases parsed image URLs', async (t) => {
+  const { layer, viewer, mounted, created, revoked } = fixture(t);
+  t.mock.method(Cesium.EntityCollection.prototype, 'add', () => {
+    throw new Error('fixture entity failure');
+  });
+  await layer.update(viewer);
+  assert.equal(created.length, 1);
+  assert.deepEqual(revoked, created);
+  assert.equal(mounted.size, 0);
+  assert.equal(layer.getStats().error, 'fixture entity failure');
+});
+
+test('successful load keeps icons until the product is disabled', async (t) => {
+  const { layer, viewer, mounted, created, revoked } = fixture(t);
+  await layer.update(viewer);
+  assert.equal(created.length, 1);
+  assert.equal(revoked.length, 0);
+  assert.equal(mounted.size, 1);
+  assert.equal(layer.getStats().count, 1);
+  layer.disable();
+  assert.deepEqual(revoked, created);
+  assert.equal(mounted.size, 0);
+});
diff --git a/src/layers/ghostMaps/records.js b/src/layers/ghostMaps/records.js
new file mode 100644
index 000000000..7c4eb58bf
--- /dev/null
+++ b/src/layers/ghostMaps/records.js
@@ -0,0 +1,165 @@
+// Pure helpers for GhostMaps placemarks: description tables to plain fields,
+// KML colors, and card text wrapping. Strings in, data out — description
+// markup is only ever read as text, never inserted into the page.
+
+const ENTITIES = Object.freeze({
+  amp: '&',
+  lt: '<',
+  gt: '>',
+  quot: '"',
+  apos: "'",
+  nbsp: ' ',
+});
+
+/** Decode the HTML character references ArcGIS and Google Earth emit. */
+export function decodeHtmlEntities(text) {
+  return String(text ?? '').replace(
+    /&(#x[0-9a-f]{1,6}|#\d{1,7}|[a-z]{2,8});/gi,
+    (whole, ref) => {
+      if (ref[0] === '#') {
+        const code =
+          ref[1] === 'x' || ref[1] === 'X'
+            ? parseInt(ref.slice(2), 16)
+            : parseInt(ref.slice(1), 10);
+        return code > 0 &&
+          code <= 0x10ffff &&
+          !(code >= 0xd800 && code <= 0xdfff)
+          ? String.fromCodePoint(code)
+          : '';
+      }
+      return ENTITIES[ref.toLowerCase()] ?? whole;
+    },
+  );
+}
+
+/** Markup to one line of plain text. */
+export function htmlToText(html) {
+  return decodeHtmlEntities(
+    String(html ?? '')
+      .replace(/<(script|style|head)\b[\s\S]*?<\/\1\s*>/gi, ' ')
+      .replace(/<br\s*\/?>/gi, ' ')
+      .replace(/<[^>]*>/g, ' '),
+  )
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
+const EMPTY_VALUES = new Set(['', '<null>', 'null', 'n/a', '-', '<blank>']);
+// ArcGIS writes geometry type and internal ids into every popup table.
+const SKIPPED_LABELS = new Set(['shape', 'objectid', 'fid', 'globalid']);
+const MAX_FIELDS = 24;
+const MAX_VALUE = 600;
+const MAX_LINKS = 6;
+
+/**
+ * Fields and links from a placemark description. ArcGIS "popup" exports are a
+ * two-column table (label, value); anything else becomes one unlabelled field.
+ * @param {string} html Description as written in the KML (CDATA text).
+ * @returns {{fields: Array<{label: string, value: string}>, links: string[]}}
+ */
+export function parseDescriptionFields(html) {
+  const source = String(html ?? '').replace(
+    /<(script|style|head)\b[\s\S]*?<\/\1\s*>/gi,
+    ' ',
+  );
+  const fields = [];
+  const links = [];
+  const addLinks = (markup) => {
+    for (const match of markup.matchAll(/href\s*=\s*["']([^"']+)["']/gi)) {
+      const url = decodeHtmlEntities(match[1]).trim();
+      if (/^https?:\/\/[^\s]+$/i.test(url) && !links.includes(url))
+        links.push(url);
+    }
+  };
+  // Innermost rows only: ArcGIS nests the field table inside an outer row,
+  // and only leaf rows with exactly two cells are label/value pairs.
+  for (const row of source.matchAll(
+    /<tr\b[^>]*>((?:(?!<tr\b)[\s\S])*?)<\/tr\s*>/gi,
+  )) {
+    const cells = [
+      ...row[1].matchAll(/<t[dh]\b[^>]*>([\s\S]*?)<\/t[dh]\s*>/gi),
+    ].map((cell) => cell[1]);
+    if (cells.length !== 2) continue;
+    const label = htmlToText(cells[0]);
+    const value = htmlToText(cells[1]);
+    if (!label || SKIPPED_LABELS.has(label.toLowerCase())) continue;
+    if (EMPTY_VALUES.has(value.toLowerCase())) continue;
+    addLinks(cells[1]);
+    // A bare research link is carried by `links`; the card does not need
+    // the URL twice.
+    if (/^https?:\/\/\S+$/i.test(value)) continue;
+    if (fields.length < MAX_FIELDS)
+      fields.push({ label, value: value.slice(0, MAX_VALUE) });
+  }
+  if (!fields.length && !links.length) {
+    const text = htmlToText(source);
+    if (text) fields.push({ label: '', value: text.slice(0, MAX_VALUE) });
+    addLinks(source);
+  }
+  return { fields, links: links.slice(0, MAX_LINKS) };
+}
+
+/**
+ * KML `aabbggrr` to `[r, g, b, a]` in 0..1, or null.
+ * @param {string} text
+ * @returns {?number[]}
+ */
+export function kmlColor(text) {
+  const hex = String(text ?? '')
+    .trim()
+    .replace(/^#/, '');
+  if (!/^[0-9a-f]{8}$/i.test(hex)) return null;
+  const byte = (at) => parseInt(hex.slice(at, at + 2), 16) / 255;
+  return [byte(6), byte(4), byte(2), byte(0)];
+}
+
+/**
+ * Greedy word wrap for canvas card lines; overlong words are cut.
+ * @param {string} text
+ * @param {number} width Characters per line.
+ * @param {number} maxLines Lines kept; the last ends with an ellipsis when cut.
+ * @returns {string[]}
+ */
+export function wrapCardText(text, width = 56, maxLines = 4) {
+  const lines = [];
+  let line = '';
+  let cut = false;
+  for (let word of String(text ?? '')
+    .split(/\s+/)
+    .filter(Boolean)) {
+    while (word.length > width) {
+      if (line) {
+        lines.push(line);
+        line = '';
+      }
+      lines.push(word.slice(0, width));
+      word = word.slice(width);
+    }
+    if (!line) line = word;
+    else if (line.length + 1 + word.length <= width) line += ` ${word}`;
+    else {
+      lines.push(line);
+      line = word;
+    }
+    if (lines.length >= maxLines) {
+      cut = true;
+      break;
+    }
+  }
+  if (line && lines.length < maxLines) lines.push(line);
+  else if (line) cut = true;
+  const kept = lines.slice(0, maxLines);
+  if (cut && kept.length) {
+    const last = kept[kept.length - 1];
+    kept[kept.length - 1] = `${last.slice(0, width - 1)}…`;
+  }
+  return kept;
+}
+
+/** Field labels ArcGIS writes CamelCase; show them as words. */
+export function fieldLabel(label) {
+  return String(label ?? '')
+    .replace(/([a-z])([A-Z0-9])/g, '$1 $2')
+    .replace(/_/g, ' ')
+    .trim();
+}
diff --git a/src/layers/ghostMaps/records.test.mjs b/src/layers/ghostMaps/records.test.mjs
new file mode 100644
index 000000000..86fecb52b
--- /dev/null
+++ b/src/layers/ghostMaps/records.test.mjs
@@ -0,0 +1,106 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  decodeHtmlEntities,
+  fieldLabel,
+  htmlToText,
+  kmlColor,
+  parseDescriptionFields,
+  wrapCardText,
+} from './records.js';
+
+// The shape ArcGIS Pro writes into every S2 placemark description.
+const ARCGIS = `<html xmlns:fo="http://www.w3.org/1999/XSL/Format"><head>
+<META http-equiv="Content-Type" content="text/html"></head>
+<body style="margin:0px"><table style="font-family:Arial">
+<tr style="text-align:center;font-weight:bold;background:#9CBCE2"><td>HistoricProtestSite</td></tr>
+<tr><td><table style="font-family:Arial">
+<tr><td>SHAPE</td><td>Point</td></tr>
+<tr bgcolor="#D4E4F3"><td>InstallationType</td><td>HistoricProtestSite</td></tr>
+<tr><td>OperationalStatus</td><td>ACTIVE</td></tr>
+<tr bgcolor="#D4E4F3"><td>Affiliation</td><td>&lt;Null&gt;</td></tr>
+<tr><td>Description</td><td>Locals gather here &amp; protest &#8212; weekly.</td></tr>
+<tr><td>Research1</td><td><a target="_blank" href="https://x.com/a/status/1">https://x.com/a/status/1</a></td></tr>
+<tr><td>Research2</td><td><a href="javascript:alert(1)">bad</a></td></tr>
+<tr><td>Research3</td><td>&lt;Null&gt;</td></tr>
+</table></td></tr></table></body><script type="text/javascript">
+function changeImage(a, b) { document.getElementById('x').innerHTML = b; }
+</script></html>`;
+
+test('ArcGIS popup tables become plain label/value fields and http links', () => {
+  const { fields, links } = parseDescriptionFields(ARCGIS);
+  assert.deepEqual(fields, [
+    { label: 'InstallationType', value: 'HistoricProtestSite' },
+    { label: 'OperationalStatus', value: 'ACTIVE' },
+    { label: 'Description', value: 'Locals gather here & protest — weekly.' },
+    { label: 'Research2', value: 'bad' },
+  ]);
+  // javascript: and other schemes never become links.
+  assert.deepEqual(links, ['https://x.com/a/status/1']);
+});
+
+test('free-form descriptions become one unlabelled field; scripts are dropped', () => {
+  assert.deepEqual(
+    parseDescriptionFields(
+      '<p>Front line<br>as of 10 Oct</p><script>steal()</script><a href="https://s2.example/x">more</a>',
+    ),
+    {
+      fields: [{ label: '', value: 'Front line as of 10 Oct more' }],
+      links: ['https://s2.example/x'],
+    },
+  );
+  assert.deepEqual(parseDescriptionFields(''), { fields: [], links: [] });
+  assert.deepEqual(parseDescriptionFields(undefined), {
+    fields: [],
+    links: [],
+  });
+});
+
+test('field values and counts are bounded', () => {
+  const rows = Array.from(
+    { length: 40 },
+    (_, i) => `<tr><td>K${i}</td><td>${'x'.repeat(900)}</td></tr>`,
+  ).join('');
+  const { fields } = parseDescriptionFields(`<table>${rows}</table>`);
+  assert.equal(fields.length, 24);
+  assert.equal(fields[0].value.length, 600);
+});
+
+test('entities and tags decode to text', () => {
+  assert.equal(
+    decodeHtmlEntities('&lt;b&gt; &#x41;&#66; &nbsp;&bogus;'),
+    '<b> AB  &bogus;',
+  );
+  assert.equal(decodeHtmlEntities('&#xD800;&#0;'), '');
+  assert.equal(htmlToText('<style>a{}</style><b>One</b>\n two'), 'One two');
+});
+
+test('KML aabbggrr colors convert to rgba', () => {
+  assert.deepEqual(kmlColor('ff0000ff'), [1, 0, 0, 1]);
+  assert.deepEqual(kmlColor('8000ff00'), [0, 1, 0, 128 / 255]);
+  assert.equal(kmlColor('red'), null);
+  assert.equal(kmlColor(''), null);
+});
+
+test('card text wraps on words, cuts long words and marks truncation', () => {
+  assert.deepEqual(wrapCardText('one two three four', 9, 4), [
+    'one two',
+    'three',
+    'four',
+  ]);
+  assert.deepEqual(wrapCardText('abcdefghijkl', 5, 4), [
+    'abcde',
+    'fghij',
+    'kl',
+  ]);
+  assert.deepEqual(wrapCardText('aa bb cc dd ee', 5, 2), ['aa bb', 'cc d…']);
+  assert.deepEqual(wrapCardText('', 5, 2), []);
+  for (const line of wrapCardText('word '.repeat(200), 20, 3))
+    assert.ok(line.length <= 20);
+});
+
+test('CamelCase field labels read as words', () => {
+  assert.equal(fieldLabel('OperationalStatus'), 'Operational Status');
+  assert.equal(fieldLabel('Research1'), 'Research 1');
+  assert.equal(fieldLabel('Kinetic_Activity'), 'Kinetic Activity');
+});
diff --git a/src/layers/ghostMaps/source.js b/src/layers/ghostMaps/source.js
new file mode 100644
index 000000000..c52ebda64
--- /dev/null
+++ b/src/layers/ghostMaps/source.js
@@ -0,0 +1,81 @@
+import {
+  readResponseBytesCapped,
+  readResponseJsonCapped,
+} from '../../sources/httpBody.js';
+import { GHOSTMAPS_MAX_FILE_BYTES } from './catalog.js';
+
+// A portable export (package.json): no i18n here. Failures stay English data;
+// the Layers panel shows them translated.
+const msg = (text) => text;
+
+/**
+ * Same-origin GhostMaps source: the catalog, one product's KMZ bytes, and a
+ * push subscription that fires whenever the watcher sees a new commit.
+ */
+export function createGhostMapsSource({
+  fetchImpl = (...args) => globalThis.fetch(...args),
+  EventSourceImpl = globalThis.EventSource,
+} = {}) {
+  return {
+    async getCatalog({ signal } = {}) {
+      const response = await fetchImpl('/api/ghostmaps/catalog', { signal });
+      if (!response.ok)
+        throw new Error(
+          `GhostMaps catalog unavailable (HTTP ${response.status})`,
+        );
+      const catalog = await readResponseJsonCapped(
+        response,
+        1024 * 1024,
+        signal,
+      );
+      if (!Array.isArray(catalog?.products))
+        throw new Error(msg('Malformed GhostMaps catalog'));
+      return catalog;
+    },
+
+    async getFile(id, version, { signal } = {}) {
+      const response = await fetchImpl(
+        `/api/ghostmaps/file/${encodeURIComponent(id)}?v=${encodeURIComponent(version)}`,
+        { signal },
+      );
+      if (!response.ok)
+        throw new Error(`GhostMaps file unavailable (HTTP ${response.status})`);
+      return readResponseBytesCapped(
+        response,
+        GHOSTMAPS_MAX_FILE_BYTES,
+        signal,
+      );
+    },
+
+    /**
+     * Call `onCatalog(catalog)` for every catalog the server pushes, and
+     * `onState('open' | 'connecting' | 'closed')` as the stream changes. The
+     * browser's EventSource reconnects by itself. Returns an unsubscribe.
+     */
+    subscribe(onCatalog, onState = () => {}) {
+      if (typeof EventSourceImpl !== 'function') {
+        onState('closed');
+        return () => {};
+      }
+      const events = new EventSourceImpl('/api/ghostmaps/events');
+      const states = ['connecting', 'open', 'closed'];
+      const report = () => onState(states[events.readyState] ?? 'connecting');
+      events.onopen = report;
+      events.onerror = report;
+      const listener = (event) => {
+        try {
+          const catalog = JSON.parse(event.data);
+          if (Array.isArray(catalog?.products)) onCatalog(catalog);
+        } catch {
+          /* ignore a malformed frame; the next one replaces it */
+        }
+      };
+      events.addEventListener('catalog', listener);
+      report();
+      return () => {
+        events.removeEventListener('catalog', listener);
+        events.close();
+      };
+    },
+  };
+}
diff --git a/src/layers/localAdsb/card.js b/src/layers/localAdsb/card.js
index 1b0122925..c1c923a8c 100644
--- a/src/layers/localAdsb/card.js
+++ b/src/layers/localAdsb/card.js
@@ -152,7 +152,7 @@ export function localAdsbCardModel(
       t('ALT {altitude} FT · GS {speed} KT · TRK {track}', {
         altitude: grouped(altitude),
         speed: speed === null ? DASH : speed,
-        track: track === null ? DASH : `${track}°`,
+        track: track === null ? DASH : `${track % 360}°`,
       }),
       vertical === null
         ? t('V/S {rate}', { rate: DASH })
diff --git a/src/layers/localAdsb/card.test.mjs b/src/layers/localAdsb/card.test.mjs
new file mode 100644
index 000000000..ec53024da
--- /dev/null
+++ b/src/layers/localAdsb/card.test.mjs
@@ -0,0 +1,19 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { setLocale } from '../../i18n/index.js';
+import { localAdsbCardModel } from './card.js';
+
+test('a track of 359.7° reads TRK 0°, not TRK 360°', () => {
+  setLocale('en');
+  const { details } = localAdsbCardModel(
+    {
+      icao: 'abc123',
+      altitudeFt: 12500,
+      groundSpeedKt: 240,
+      trackDeg: 359.7,
+      lastPositionAt: 1000,
+    },
+    5000,
+  );
+  assert.equal(details[1], 'ALT 12,500 FT · GS 240 KT · TRK 0°');
+});
diff --git a/src/layers/localAdsb/models.js b/src/layers/localAdsb/models.js
index 50cebe07e..55fc2d11a 100644
--- a/src/layers/localAdsb/models.js
+++ b/src/layers/localAdsb/models.js
@@ -14,6 +14,7 @@ import {
   MODEL_PROX_ADD_M,
   MODEL_PROX_KEEP_M,
 } from '../flights/policy.js';
+import { AIRCRAFT_ENVIRONMENT_MAP_OPTIONS } from '../../data/aircraftModelLighting.js';
 
 const specKey = (spec) => `${spec.url}@${spec.scale}`;
 
@@ -87,6 +88,7 @@ export function createLocalAdsbModels({
       model = await loadModel({
         url: resolveAsset(spec.url),
         asynchronous: false,
+        environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS,
         minimumPixelSize: MODEL_MIN_PX,
         scale: spec.scale,
         color,
diff --git a/src/layers/military/rendering.js b/src/layers/military/rendering.js
index 089ae9ec8..504d79c80 100644
--- a/src/layers/military/rendering.js
+++ b/src/layers/military/rendering.js
@@ -53,6 +53,7 @@ import {
   ROTATION_REFRESH_MS,
   COURSE_MAX_DPS,
 } from './policy.js';
+import { AIRCRAFT_ENVIRONMENT_MAP_OPTIONS } from '../../data/aircraftModelLighting.js';
 
 export function createRendering({
   flightState,
@@ -473,6 +474,7 @@ export function createRendering({
       model = await Cesium.Model.fromGltfAsync({
         url: resolveAsset(spec.url),
         asynchronous: false,
+        environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS,
         minimumPixelSize: MODEL_MIN_PX,
         scale: spec.scale,
         color: flightState._irBoost ? Cesium.Color.WHITE : _modelColor(icao24),
@@ -676,6 +678,7 @@ export function createRendering({
       Cesium.Model.fromGltfAsync({
         url: resolveAsset(trackedSpec.url),
         asynchronous: false,
+        environmentMapOptions: AIRCRAFT_ENVIRONMENT_MAP_OPTIONS,
         minimumPixelSize: TRACKED_MODEL_MIN_PX,
         scale: trackedSpec.scale,
         color: flightState._irBoost ? Cesium.Color.WHITE : TRACKED_ICON_COLOR,
diff --git a/src/layers/recentImagery/display.js b/src/layers/recentImagery/display.js
index 5c18d8b3f..33a0785b5 100644
--- a/src/layers/recentImagery/display.js
+++ b/src/layers/recentImagery/display.js
@@ -33,7 +33,9 @@ export const READOUT_WORDS = Object.freeze({
   date: (day) => displayDay(day, LONG_DAY),
   daysAgo: (delta) => {
     const text = formatRelativeTime(delta > 0 ? -delta : 0, 'day');
-    return getLocale() === 'zh-CN' ? text.replace(/(\d)(?=天)/g, '$1 ') : text;
+    return getLocale().startsWith('zh-')
+      ? text.replace(/(\d)(?=天)/g, '$1 ')
+      : text;
   },
   // "Sentinel-2" never breaks at its hyphen: a word joiner follows it
   // (JetBrains Mono has no U+2011 non-breaking hyphen).
diff --git a/src/layers/streetLevel/lineCoverage.js b/src/layers/streetLevel/lineCoverage.js
index 5182f2309..bab1af46d 100644
--- a/src/layers/streetLevel/lineCoverage.js
+++ b/src/layers/streetLevel/lineCoverage.js
@@ -105,6 +105,25 @@ function pointsOf(sequence) {
  * @property {boolean} [keepOrder]        Cap a tile's lines in the order decoded (default: newest first).
  */
 
+/**
+ * The tile zoom a provider's `zoomFor` answered, or null. Providers written
+ * before the core went slim return `{zoom, kind}`: its zoom is read, and an
+ * `'overview'` level draws nothing, since nothing is drawn from orbit. Any
+ * other answer that is not a whole zoom draws nothing too, rather than
+ * asking for no tiles without a hint.
+ * @param {unknown} level
+ * @returns {number|null}
+ */
+export function coverageZoom(level) {
+  const zoom =
+    level && typeof level === 'object'
+      ? level.kind === 'overview'
+        ? null
+        : level.zoom
+      : level;
+  return Number.isInteger(zoom) && zoom >= 0 ? zoom : null;
+}
+
 /**
  * Camera-driven sequence lines from any XYZ line-tile source, near the
  * ground only, draped on terrain and 3D tiles alike. Nothing is drawn from
@@ -115,8 +134,9 @@ function pointsOf(sequence) {
  * @param {(tile: {x: number, y: number, z: number}, init: {signal: AbortSignal}) => Promise<{sequences: Array<object>}>} options.fetchTile
  *   A decoded tile; sequences are `{id, parts, capturedAt, isPano}`. A
  *   rejection may carry `keyRequired`, `keyRejected` or `retryAfterSec`.
- * @param {(heightM: number|null) => number|null} options.zoomFor
- *   Tile zoom for a camera height above ground; null draws nothing.
+ * @param {(heightM: number|null) => number|{zoom: number, kind?: string}|null} options.zoomFor
+ *   Tile zoom for a camera height above ground; null draws nothing. The
+ *   older `{zoom, kind}` shape is still read (see `coverageZoom`).
  * @param {{coverage: string, selected: string}} options.colors
  * @param {string} options.pickPrefix   Pick-id prefix of the lines.
  * @param {string} options.renderKey    Render-governor reason.
@@ -380,7 +400,7 @@ export function createLineCoverage({
     const height = Number.isFinite(cameraHeight)
       ? cameraHeight - (ground ?? 0)
       : null;
-    const zoom = zoomFor(height);
+    const zoom = coverageZoom(zoomFor(height));
     if (zoom == null) return { hint: messages.tooHigh || ZOOM_IN_HINT };
     // Rays meet the ground where it really is (1,600 m up in Denver) and stop
     // short of the horizon, which would stretch the box to the world.
diff --git a/src/layers/streetLevel/lineCoverage.test.mjs b/src/layers/streetLevel/lineCoverage.test.mjs
index 049d2f746..60bae7eb3 100644
--- a/src/layers/streetLevel/lineCoverage.test.mjs
+++ b/src/layers/streetLevel/lineCoverage.test.mjs
@@ -2,6 +2,7 @@ import assert from 'node:assert/strict';
 import test from 'node:test';
 import * as Cesium from 'cesium';
 import {
+  coverageZoom,
   createLineCoverage,
   freshCoverage,
   ZOOM_IN_HINT,
@@ -28,7 +29,7 @@ const { maxSequences: COVERAGE_MAX_SEQUENCES, maxTiles: COVERAGE_MAX_TILES } =
   COVERAGE_TUNING;
 
 /** Line coverage as the Mapillary provider builds it, over `source`. */
-function createCoverage({ state, source }) {
+function createCoverage({ state, source, zoomFor = coverageZoomForHeight }) {
   return createLineCoverage({
     state,
     fetchTile: async (tile, { signal }) =>
@@ -36,7 +37,7 @@ function createCoverage({ state, source }) {
         await source.getTile('coverage', tile.z, tile.x, tile.y, { signal }),
         tile,
       ),
-    zoomFor: coverageZoomForHeight,
+    zoomFor,
     colors: COLORS,
     pickPrefix: PICK_PREFIX.sequence,
     renderKey: 'mapillary-coverage',
@@ -123,7 +124,7 @@ function deferredSource() {
   };
 }
 
-function setup() {
+function setup({ zoomFor } = {}) {
   const centre = tileCentre(-121.4944, 38.5816);
   const viewer = fakeViewer({ lon: centre.lon, lat: centre.lat, height: 900 });
   const source = deferredSource();
@@ -146,7 +147,7 @@ function setup() {
     },
     sequence: { selectedId: null },
   };
-  const coverage = createCoverage({ state, source });
+  const coverage = createCoverage({ state, source, zoomFor });
   const bytes = encodeCoverageTile(centre.tile, {
     sequences: [
       {
@@ -239,6 +240,37 @@ test('panning off a tile that is still loading stops counting it as loading', as
   coverage.clear();
 });
 
+test('a zoomFor in the older {zoom, kind} shape still draws its lines', async () => {
+  // Providers written before the core went slim (#1139's Vegbilder) answer
+  // an object: it must not ask for no tiles and say nothing.
+  const { viewer, source, coverage, bytes } = setup({
+    zoomFor: (height) => {
+      const zoom = coverageZoomForHeight(height);
+      return zoom == null ? null : { zoom, kind: 'sequence' };
+    },
+  });
+  coverage.refresh();
+  assert.equal(source.calls.length, 1, 'the tile is asked for');
+  assert.equal(source.calls[0].z, 14);
+  source.calls[0].resolve(bytes);
+  await settle();
+  assert.equal(viewer.scene.groundPrimitives.items.size, 1, 'its line drawn');
+  assert.equal(coverage.stats().hint, '');
+  coverage.clear();
+});
+
+test('a zoom level is read from either shape; an overview or a bad answer draws nothing', () => {
+  assert.equal(coverageZoom(14), 14);
+  assert.equal(coverageZoom({ zoom: 15, kind: 'sequence' }), 15);
+  assert.equal(coverageZoom({ zoom: 12 }), 12);
+  assert.equal(coverageZoom({ zoom: 5, kind: 'overview' }), null, 'orbit');
+  assert.equal(coverageZoom(null), null);
+  assert.equal(coverageZoom(undefined), null);
+  assert.equal(coverageZoom({}), null);
+  assert.equal(coverageZoom(14.5), null);
+  assert.equal(coverageZoom('14'), null);
+});
+
 test('from orbit nothing is requested or drawn, and the hint says to zoom in', async () => {
   const { viewer, source, state, coverage, bytes } = setup();
   coverage.refresh();
diff --git a/src/layers/traffic/flowDecode.js b/src/layers/traffic/flowDecode.js
index 691496554..9a0c248dd 100644
--- a/src/layers/traffic/flowDecode.js
+++ b/src/layers/traffic/flowDecode.js
@@ -19,7 +19,7 @@ import { VectorTile } from '@mapbox/vector-tile';
  * tree-shakeable; decoding happens client-side so the proxy stays a dumb
  * binary cache.
  *
- * @module data/flowTiles
+ * @module layers/traffic/flowDecode
  */
 
 const FLOW_LAYER_NAME = 'Traffic flow';
diff --git a/src/layers/traffic/flowSource.js b/src/layers/traffic/flowSource.js
index 49567a9ee..f517c99bc 100644
--- a/src/layers/traffic/flowSource.js
+++ b/src/layers/traffic/flowSource.js
@@ -4,30 +4,79 @@ import { clipTileLine } from '../../sources/openFreeMap.js';
 import { tileToBBox } from '../../data/tomtomTiles.js';
 import { decodeFlowTile } from './flowDecode.js';
 
+const FLOW_TILE_PATH = (z, x, y) => `/api/tomtom/flow/${z}/${x}/${y}.pbf`;
+
+/**
+ * Whether the proxy answered a tile from its cache past the refresh window
+ * (STALE-BUDGET once the daily budget is spent, STALE-ERROR when TomTom
+ * fails), and when the proxy fetched it.
+ */
+function tileFreshness(response) {
+  const status = response.headers?.get?.('x-tomtom-cache') || '';
+  const fetchedAt = Number(response.headers?.get?.('x-tomtom-fetched-at'));
+  return {
+    stale: status.startsWith('STALE'),
+    fetchedAt: fetchedAt > 0 ? fetchedAt : null,
+  };
+}
+
 /** Own one bounded decoded flow cache; every request still passes the server tile budget. */
 export function createFlowTileSource({
   fetchImpl = (...args) => globalThis.fetch(...args),
 } = {}) {
+  // Freshness travels in response headers, but the tile cache keeps only
+  // decoded segments: hold each response's freshness until its tile decodes,
+  // then key it by the decoded tile, which the cache hands back on a hit.
+  const pending = new Map();
+  const freshness = new WeakMap();
   const tiles = createVectorTileSource({
-    template: '/api/tomtom/flow/{z}/{x}/{y}.pbf',
+    template: FLOW_TILE_PATH('{z}', '{x}', '{y}'),
     allowedOrigin: 'http://localhost',
-    decode: (bytes, z, x, y) =>
-      decodeFlowTile(bytes, z, x, y, { strict: true })
+    decode: (bytes, z, x, y) => {
+      // Take the mark before decoding, so a tile that fails to decode
+      // leaves nothing behind.
+      const path = FLOW_TILE_PATH(z, x, y);
+      const entry = pending.get(path);
+      const mark = entry?.mark;
+      entry?.release();
+      const segments = decodeFlowTile(bytes, z, x, y, { strict: true })
         .filter(isDrivableFlowSegment)
         .flatMap((segment) =>
           clipTileLine(segment.coords, tileToBBox(z, x, y)).map((coords) => ({
             ...segment,
             coords,
           })),
-        ),
-    fetchImpl,
+        );
+      if (mark) freshness.set(segments, mark);
+      return segments;
+    },
+    fetchImpl: async (url, init) => {
+      const response = await fetchImpl(url, init);
+      if (response.ok && !init.signal.aborted) {
+        const path = String(url);
+        const entry = {
+          mark: tileFreshness(response),
+          release() {
+            if (pending.get(path) === entry) pending.delete(path);
+            init.signal.removeEventListener('abort', entry.release);
+          },
+        };
+        pending.get(path)?.release();
+        pending.set(path, entry);
+        // The vector source aborts this signal for failed/cancelled body reads,
+        // including size-limit failures that never reach decode.
+        init.signal.addEventListener('abort', entry.release, { once: true });
+      }
+      return response;
+    },
     ttlMs: 120_000,
     maxTiles: 16,
   });
   let partial = false;
   /**
    * Flow segments for bounds, with whether any covering tile failed to load
-   * for this request.
+   * for this request, whether any came from the proxy's stale cache, and when
+   * the oldest tile was fetched.
    */
   async function fetchFlowDetail(bounds, { signal, zoom = 12 } = {}) {
     const result = await tiles.fetchBounds(bounds, {
@@ -44,7 +93,16 @@ export function createFlowTileSource({
             coords,
           })),
         );
-    return { segments, partial: result.partial === true };
+    const marks = result.tiles.map((tile) => freshness.get(tile) || {});
+    const times = marks
+      .map((mark) => mark.fetchedAt)
+      .filter((at) => Number.isFinite(at));
+    return {
+      segments,
+      partial: result.partial === true,
+      stale: marks.some((mark) => mark.stale === true),
+      oldestTileAt: times.length ? Math.min(...times) : null,
+    };
   }
   return {
     fetchFlowDetail,
@@ -52,6 +110,9 @@ export function createFlowTileSource({
       return (await fetchFlowDetail(bounds, options)).segments;
     },
     getFlowSessionStats: () => ({ ...tiles.getStats(), partial }),
-    resetFlowTileCache: () => tiles.clear(),
+    resetFlowTileCache: () => {
+      for (const entry of pending.values()) entry.release();
+      tiles.clear();
+    },
   };
 }
diff --git a/src/layers/traffic/source.test.mjs b/src/layers/traffic/source.test.mjs
index affaff56d..927dc416e 100644
--- a/src/layers/traffic/source.test.mjs
+++ b/src/layers/traffic/source.test.mjs
@@ -1,6 +1,8 @@
 import assert from 'node:assert/strict';
 import test from 'node:test';
 import { readFileSync } from 'node:fs';
+import { getEventListeners } from 'node:events';
+import { createFlowTileSource } from './flowSource.js';
 import { tilesForBounds, tileToBBox } from '../../data/tomtomTiles.js';
 import { decodeFlowTile } from './flowDecode.js';
 import { decodeOpenFreeMapTile } from '../../sources/openFreeMap.js';
@@ -867,3 +869,154 @@ test('traffic separates API and public tile transports, including the default ti
   assert.ok(publicUrls.length >= 4);
   assert.ok(apiUrls.length >= 4);
 });
+
+test('flow detail reports stale proxy tiles and the oldest tile time, also from its cache', async () => {
+  const fetchedAt = Date.UTC(2026, 9, 16, 8);
+  const reply = (status, at) => async () =>
+    new Response(fixture, {
+      headers: { 'x-tomtom-cache': status, 'x-tomtom-fetched-at': String(at) },
+    });
+  const stale = createTrafficSource({
+    fetchImpl: reply('STALE-BUDGET', fetchedAt),
+  });
+  const first = await stale.fetchFlowDetail(bounds);
+  assert.ok(first.segments.length > 0);
+  assert.equal(first.stale, true);
+  assert.equal(first.oldestTileAt, fetchedAt);
+  // The decoded tile is served from cache now, and keeps its mark.
+  const again = await stale.fetchFlowDetail(bounds);
+  assert.equal(stale.getFlowSessionStats().tilesFetched, 1);
+  assert.equal(again.stale, true);
+  assert.equal(again.oldestTileAt, fetchedAt);
+
+  const fresh = createTrafficSource({ fetchImpl: reply('MISS', fetchedAt) });
+  const live = await fresh.fetchFlowDetail(bounds);
+  assert.equal(live.stale, false);
+  assert.equal(live.oldestTileAt, fetchedAt);
+
+  const unmarked = createTrafficSource({
+    fetchImpl: async () => new Response(fixture),
+  });
+  const plain = await unmarked.fetchFlowDetail(bounds);
+  assert.equal(plain.stale, false);
+  assert.equal(plain.oldestTileAt, null);
+});
+
+// Capture constructor-owned Maps only while constructing the source, so tests
+// can assert retained metadata without adding a diagnostic API to production.
+function flowSourceWithMaps(fetchImpl) {
+  const maps = [];
+  const NativeMap = globalThis.Map;
+  let source;
+  try {
+    globalThis.Map = class extends NativeMap {
+      constructor(...args) {
+        super(...args);
+        maps.push(this);
+      }
+    };
+    source = createFlowTileSource({ fetchImpl });
+  } finally {
+    globalThis.Map = NativeMap;
+  }
+  return { source, pending: maps[0] };
+}
+
+test('flow freshness is released after body failures, size rejection, decode and reset', async () => {
+  for (const failure of ['body', 'size', 'decode']) {
+    let requestSignal;
+    let fail = true;
+    const { source, pending } = flowSourceWithMaps(async (url, { signal }) => {
+      requestSignal = signal;
+      return {
+        ok: true,
+        headers: new Headers({
+          'x-tomtom-cache': fail ? 'STALE-ERROR' : 'MISS',
+          'x-tomtom-fetched-at': fail ? '1000' : '2000',
+          ...(fail && failure === 'size'
+            ? { 'content-length': '99999999' }
+            : {}),
+        }),
+        async arrayBuffer() {
+          if (fail && failure === 'body') throw new Error('body disconnected');
+          return fail && failure === 'decode' ? new Uint8Array([255]) : fixture;
+        },
+      };
+    });
+    await assert.rejects(source.fetchFlowDetail(bounds));
+    assert.equal(pending.size, 0, `${failure} leaves no pending metadata`);
+    assert.equal(getEventListeners(requestSignal, 'abort').length, 0);
+    assert.equal(source.getFlowSessionStats().cacheEntries, 0);
+    fail = false;
+    const fresh = await source.fetchFlowDetail(bounds);
+    assert.equal(fresh.stale, false);
+    assert.equal(fresh.oldestTileAt, 2000);
+    assert.equal(pending.size, 0, 'successful decode releases metadata');
+    assert.equal(getEventListeners(requestSignal, 'abort').length, 0);
+    source.resetFlowTileCache();
+    assert.equal(pending.size, 0);
+  }
+});
+
+test('flow reset and late cancelled headers cannot retain or replace newer freshness', async () => {
+  let resolveOld;
+  let oldSignal;
+  let calls = 0;
+  const { source, pending } = flowSourceWithMaps((url, { signal }) => {
+    if (++calls === 1) {
+      oldSignal = signal;
+      return new Promise((resolve) => {
+        resolveOld = resolve;
+      });
+    }
+    return Promise.resolve(
+      new Response(fixture, {
+        headers: { 'x-tomtom-cache': 'MISS', 'x-tomtom-fetched-at': '2000' },
+      }),
+    );
+  });
+  const old = source.fetchFlowDetail(bounds);
+  const rejected = assert.rejects(old, { name: 'AbortError' });
+  while (!resolveOld) await new Promise((resolve) => setImmediate(resolve));
+  source.resetFlowTileCache();
+  const fresh = await source.fetchFlowDetail(bounds);
+  resolveOld(
+    new Response(fixture, {
+      headers: {
+        'x-tomtom-cache': 'STALE-ERROR',
+        'x-tomtom-fetched-at': '1000',
+      },
+    }),
+  );
+  await rejected;
+  await new Promise((resolve) => setImmediate(resolve));
+  assert.equal(pending.size, 0);
+  assert.equal(getEventListeners(oldSignal, 'abort').length, 0);
+  assert.equal(fresh.stale, false);
+  assert.equal(fresh.oldestTileAt, 2000);
+  assert.equal((await source.fetchFlowDetail(bounds)).oldestTileAt, 2000);
+});
+
+test('cancelling a flow body releases its freshness before a new request', async () => {
+  const controller = new AbortController();
+  let requestSignal;
+  const { source, pending } = flowSourceWithMaps(async (url, { signal }) => {
+    requestSignal = signal;
+    return {
+      ok: true,
+      headers: new Headers({ 'x-tomtom-cache': 'STALE-ERROR' }),
+      async arrayBuffer() {
+        assert.equal(pending.size, 1);
+        controller.abort();
+        return fixture;
+      },
+    };
+  });
+  await assert.rejects(
+    source.fetchFlowDetail(bounds, { signal: controller.signal }),
+    { name: 'AbortError' },
+  );
+  assert.equal(pending.size, 0);
+  assert.equal(getEventListeners(requestSignal, 'abort').length, 0);
+  assert.equal(source.getFlowSessionStats().cacheEntries, 0);
+});
diff --git a/src/layers/transit/lifecycle.js b/src/layers/transit/lifecycle.js
index 11b670519..90210063a 100644
--- a/src/layers/transit/lifecycle.js
+++ b/src/layers/transit/lifecycle.js
@@ -97,6 +97,7 @@ export function createLifecycle({ state, services, parts }) {
     else if (hidden) {
       hidden = false;
       parts.rendering.resumePlayback();
+      parts.viewport.runProximityCheck();
     }
   }
   function bindVisibility() {
diff --git a/src/layers/transit/policy.js b/src/layers/transit/policy.js
index 010a2efc2..5dc17daeb 100644
--- a/src/layers/transit/policy.js
+++ b/src/layers/transit/policy.js
@@ -442,10 +442,12 @@ export function buildTransitSelectionCopy(
       ? entry.sample.latestReportAgeMs
       : vehicleFixAgeMs(record, nowMs, fetchedAtMs)) / 1000,
   );
+  // Seconds through 89s, then whole minutes. Rounding 90s up would skip
+  // "1 min" and call a minute-and-a-half-old report two minutes old.
   const reported =
     ageS < 90
       ? t('Reported {seconds} s ago', { seconds: ageS })
-      : t('Reported {minutes} min ago', { minutes: Math.round(ageS / 60) });
+      : t('Reported {minutes} min ago', { minutes: Math.floor(ageS / 60) });
   // A time the feed did not give for THIS vehicle is labelled, so the card
   // never presents a borrowed or inferred time as the vehicle's own report.
   const ownTime =
diff --git a/src/layers/transit/selectionCopy.i18n.test.mjs b/src/layers/transit/selectionCopy.i18n.test.mjs
index 81fdfa0bb..26de5d28a 100644
--- a/src/layers/transit/selectionCopy.i18n.test.mjs
+++ b/src/layers/transit/selectionCopy.i18n.test.mjs
@@ -39,6 +39,26 @@ test('en: the copy is unchanged with and without the i18n t()', () => {
   ]);
 });
 
+test('a report 90 seconds old reads as 1 minute, not 2', () => {
+  setLocale('en');
+  const line = (ageMs) =>
+    buildTransitSelectionCopy(
+      feed,
+      {
+        id: 'age',
+        lat: 1,
+        lon: 1,
+        timestamp: Math.floor((now - ageMs) / 1000),
+        timestampSource: 'vehicle',
+      },
+      'bus',
+      now,
+    ).details[1];
+  assert.equal(line(89_000), 'Reported 89 s ago');
+  assert.equal(line(90_000), 'Reported 1 min ago');
+  assert.equal(line(120_000), 'Reported 2 min ago');
+});
+
 for (const locale of ['es', 'ru']) {
   test(`${locale}: the Transit card is in the UI language`, () => {
     setLocale(locale);
diff --git a/src/layers/transit/viewport.js b/src/layers/transit/viewport.js
index 641fab5a2..730126f10 100644
--- a/src/layers/transit/viewport.js
+++ b/src/layers/transit/viewport.js
@@ -75,6 +75,11 @@ export function createViewport({ state, services, parts }) {
   }
 
   function runProximityCheck() {
+    if (
+      globalThis.document?.hidden ||
+      globalThis.document?.visibilityState === 'hidden'
+    )
+      return;
     if (!state._enabled || !state._viewer) return;
     refreshViewBounds();
     const altitude = getCameraAltitude();
diff --git a/src/layers/weather/rendering.js b/src/layers/weather/rendering.js
index b25bcceb2..0f2fad68b 100644
--- a/src/layers/weather/rendering.js
+++ b/src/layers/weather/rendering.js
@@ -14,6 +14,8 @@ const GLOBAL_TILE_MAXIMUM_LEVEL = 3;
 // Six decoded 2048×1024 canvases (8 MiB each) bound the cache below 50 MiB.
 const MAX_MOSAICS = 6;
 const MAX_PREFETCH_TILES = 8;
+// How often a staged frame waiting out its quiet interval rechecks readiness.
+export const READY_WAKE_MS = 150;
 
 /** Globe imagery: own at most a displayed and a staging frame. Use native Cesium
  * tile scheduling, projection and texture disposal; the application clock is never touched. */
@@ -126,6 +128,7 @@ function createGlobeRendering({
     frame.offRender?.();
     frame.offCamera?.();
     clearTimeout(frame.timeout);
+    clearTimeout(frame.wake);
     for (const request of frame.requests) request.cancel?.();
     frame.requests.clear();
     frame.retries.clear();
@@ -277,6 +280,8 @@ function createGlobeRendering({
         frame.offCamera?.();
         frame.offCamera = null;
         clearTimeout(frame.timeout);
+        clearTimeout(frame.wake);
+        frame.wake = null;
         frame.offAbort?.();
         if (ok) {
           lastError = null;
@@ -450,8 +455,20 @@ function createGlobeRendering({
             if (++settled >= 2) finish(true);
             else viewer.scene.requestRender();
           } else settled = 0;
-          if (incoming === frame && frame.pending === 0 && frame.loaded > 0)
-            viewer.scene.requestRender();
+          // Waiting out the quiet interval needs another readiness check
+          // later, not a render every frame: wake on a timer so the render
+          // governor's frame cap still holds while a frame is staged.
+          if (
+            incoming === frame &&
+            frame.pending === 0 &&
+            frame.loaded > 0 &&
+            !frame.wake
+          )
+            frame.wake = setTimeout(() => {
+              frame.wake = null;
+              if (!frame.closed && incoming === frame)
+                viewer.scene.requestRender();
+            }, READY_WAKE_MS);
         });
         viewer.scene.requestRender();
         onChange();
diff --git a/src/layers/weather/weather.test.mjs b/src/layers/weather/weather.test.mjs
index 486d42520..a42485ed0 100644
--- a/src/layers/weather/weather.test.mjs
+++ b/src/layers/weather/weather.test.mjs
@@ -1,6 +1,6 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
-import { createWeatherRendering } from './rendering.js';
+import { createWeatherRendering, READY_WAKE_MS } from './rendering.js';
 import { createWeatherLayer } from './index.js';
 import { createWeatherClock } from './clock.js';
 import * as Cesium from 'cesium';
@@ -242,6 +242,50 @@ test('a ready weather frame does not wait for unrelated terrain, but requires su
   h.rendering.clear();
 });
 
+test('a staged frame waiting out its quiet interval wakes on a timer, not every render', async (t) => {
+  t.mock.timers.enable({ apis: ['setTimeout'] });
+  let now = 0;
+  const h = renderingHarness({ now: () => now });
+  h.viewer.scene.globe.tilesLoaded = false;
+  const loaded = h.rendering.setFrame(snapshot, times[0]);
+  const tile = deferred();
+  h.providers[0].response = tile;
+  const request = h.providers[0].requestImage(0, 0, 0, {});
+  tile.resolve({});
+  await request;
+  const before = h.renders();
+  for (let i = 0; i < 10; i++) h.postRender.emit();
+  assert.equal(
+    h.renders(),
+    before,
+    'renders while waiting do not request further renders',
+  );
+  t.mock.timers.tick(READY_WAKE_MS - 1);
+  assert.equal(h.renders(), before);
+  t.mock.timers.tick(1);
+  assert.equal(h.renders(), before + 1, 'one wake per interval');
+  now = 200;
+  h.postRender.emit();
+  h.postRender.emit();
+  assert.equal(await loaded, true);
+  const settledRenders = h.renders();
+  t.mock.timers.tick(READY_WAKE_MS * 4);
+  assert.equal(h.renders(), settledRenders, 'commit clears the wake timer');
+
+  const abandoned = h.rendering.setFrame(snapshot, times[1]);
+  const second = deferred();
+  h.providers.at(-1).response = second;
+  const secondRequest = h.providers.at(-1).requestImage(0, 0, 0, {});
+  second.resolve({});
+  await secondRequest;
+  h.postRender.emit();
+  h.rendering.clear();
+  assert.equal(await abandoned, false);
+  const clearedRenders = h.renders();
+  t.mock.timers.tick(READY_WAKE_MS * 4);
+  assert.equal(h.renders(), clearedRenders, 'clear cancels the wake timer');
+});
+
 test('camera movement drops abandoned deferred tiles but still waits for admitted requests', async () => {
   let now = 0;
   const h = renderingHarness({ now: () => now });
diff --git a/src/loadingFeedback.test.mjs b/src/loadingFeedback.test.mjs
index b9903f97e..ff9f63c9c 100644
--- a/src/loadingFeedback.test.mjs
+++ b/src/loadingFeedback.test.mjs
@@ -94,20 +94,27 @@ test('deferred terminal notices lose ownership to newer acquisition epochs and d
 
 test('share-follow failures use the universal top-center status instead of the bottom toast', () => {
   const handler = shellMethod('_handleShareTrackingRestoreStatus').toString();
-  assert.match(handler, /this\.showStatus\(message\)/);
-  assert.match(handler, /this\.initialRestorePromise\.then\(showAfterStartupCover\)/);
-  assert.match(handler, /this\._lifetime\.frame\(\(\) => \{/);
-  assert.match(handler, /this\._lifetime\.listen\(\s*startupCover,\s*'transitionend',\s*showOnce,\s*\{ once: true \},?\s*\)/);
-  assert.match(handler, /fallbackTimer = this\._lifetime\.timeout\(showOnce, 1000\)/);
-  assert.doesNotMatch(handler, /this\._showToast\(message\)/);
-  assert.doesNotMatch(handler, /pushCockpitSignal/);
+  const present = shellMethod('_presentAfterStartupCover').toString();
+  assert.match(
+    handler,
+    /this\.initialRestorePromise\.then\(\(\) =>\s*this\._presentAfterStartupCover\(message, noticeGeneration\),?\s*\)/,
+  );
+  assert.match(present, /this\.showStatus\(message\)/);
+  assert.match(present, /this\._lifetime\.frame\(\(\) => \{/);
+  assert.match(present, /this\._lifetime\.listen\(\s*startupCover,\s*'transitionend',\s*showOnce,\s*\{ once: true \},?\s*\)/);
+  assert.match(present, /fallbackTimer = this\._lifetime\.timeout\(showOnce, 1000\)/);
+  assert.match(present, /canPresentDeferredStatusNotice\(/);
+  for (const source of [handler, present]) {
+    assert.doesNotMatch(source, /this\._showToast\(message\)/);
+    assert.doesNotMatch(source, /pushCockpitSignal/);
+  }
   assert.match(handler, /result\.classification === 'pending'/);
   assert.match(handler, /state: 'acquiring'/);
   assert.match(handler, /persistent: true/);
   assert.match(handler, /this\._shareTrackingNoticeGeneration \+= 1/);
-  assert.match(handler, /canPresentDeferredStatusNotice\(/);
   assert.match(handler, /if \(this\._shareTrackingAcquiringKey\) return/);
-  assert.match(handler, /result\.classification === 'followed'\s*\|\|\s*result\.classification === 'cancelled'/);
+  assert.match(handler, /result\.classification === 'followed'/);
+  assert.match(handler, /result\.classification === 'cancelled'\) return/);
 });
 
 test('universal notice masks active loading only for its own fixed dwell', () => {
diff --git a/src/locationReadouts.test.mjs b/src/locationReadouts.test.mjs
index 9d38592e3..6c63406ee 100644
--- a/src/locationReadouts.test.mjs
+++ b/src/locationReadouts.test.mjs
@@ -94,11 +94,13 @@ test('a deferred lookup that never flies leaves the readout standing', () => {
     /stamp: \(\) =>\s*this\._stampNavigation\(\{\s*cancelPendingSelection,\s*clearSearchedLocation: false,?\s*\}\)/,
   );
 
-  const reassert = ui.indexOf('  _reassertNavigationHandoff(generation) {');
+  const reassert = ui.indexOf(
+    "  _reassertNavigationHandoff(generation, { trackingOrigin = 'tool' } = {}) {",
+  );
   assert.ok(reassert > 0, '_reassertNavigationHandoff is missing');
   assert.match(
     ui.slice(reassert, reassert + 900),
-    /release: \(\) => \{[\s\S]{0,320}?this\.clearLocation\(\);[\s\S]{0,200}?this\._releaseFollowCamera\(\)/,
+    /release: \(\) => \{[\s\S]{0,320}?this\.clearLocation\(\);[\s\S]{0,200}?this\._releaseFollowCamera\(\{ trackingOrigin \}\)/,
   );
 
   // …and the policy only reaches `release` after its authority checks pass.
diff --git a/src/maps/googleTokens.js b/src/maps/googleTokens.js
index 884c5b199..089730139 100644
--- a/src/maps/googleTokens.js
+++ b/src/maps/googleTokens.js
@@ -38,6 +38,7 @@ export function createGoogleTokenSource({
         headers: { Accept: 'application/json' },
         cache: 'no-store',
       });
+      if (response.status === 204) return null;
       if (!response.ok) {
         await response.body?.cancel();
         return null;
diff --git a/src/maps/googleTokens.test.mjs b/src/maps/googleTokens.test.mjs
index d8a1e84ed..10213db0c 100644
--- a/src/maps/googleTokens.test.mjs
+++ b/src/maps/googleTokens.test.mjs
@@ -79,3 +79,12 @@ test('a server that does not offer tokens yields none', async () => {
     assert.equal(await createGoogleTokenSource({ fetchImpl }).token(), null);
   }
 });
+
+test('an empty 204 response explicitly means no Google token is available', async () => {
+  const { calls, fetchImpl } = server([
+    new Response(null, { status: 204, headers: { 'Cache-Control': 'no-store' } }),
+  ]);
+  const tokens = createGoogleTokenSource({ fetchImpl });
+  assert.equal(await tokens.token(), null);
+  assert.deepEqual(calls, [GOOGLE_TOKEN_PATH]);
+});
diff --git a/src/nominatimGeocode.js b/src/nominatimGeocode.js
index b7dd6145a..4a5a1948e 100644
--- a/src/nominatimGeocode.js
+++ b/src/nominatimGeocode.js
@@ -166,6 +166,8 @@ export function nominatimViewboxFromBounds(bounds) {
   const neLat = nominatimLatitude(match[3]);
   const neLng = nominatimLongitude(match[4]);
   if ([swLat, swLng, neLat, neLng].some((value) => value === null)) return null;
-  if (swLat >= neLat) return null;
+  // One Nominatim viewbox cannot express a wrapped interval. Omit this soft
+  // preference rather than biasing the search toward the opposite hemisphere.
+  if (swLat >= neLat || swLng > neLng) return null;
   return `${swLng},${neLat},${neLng},${swLat}`;
 }
diff --git a/src/nominatimGeocode.test.mjs b/src/nominatimGeocode.test.mjs
index b139ad820..8517649d5 100644
--- a/src/nominatimGeocode.test.mjs
+++ b/src/nominatimGeocode.test.mjs
@@ -173,3 +173,12 @@ test('a viewport hint is sent only when every edge is a real coordinate', () =>
       `${JSON.stringify(bounds)} must not become a viewbox`,
     );
 });
+
+test('wrapped viewports omit the Nominatim bias without rejecting the search', () => {
+  assert.equal(nominatimViewboxFromBounds('-20,170|-10,-171'), null);
+  assert.equal(nominatimViewboxFromBounds('50,175|60,-165'), null);
+  assert.equal(
+    nominatimViewboxFromBounds('-20,170|-10,180'),
+    '170,-10,180,-20',
+  );
+});
diff --git a/src/overlays/worldOverlayAllocation.test.mjs b/src/overlays/worldOverlayAllocation.test.mjs
index e29785d48..2ff6d6c8c 100644
--- a/src/overlays/worldOverlayAllocation.test.mjs
+++ b/src/overlays/worldOverlayAllocation.test.mjs
@@ -2,7 +2,7 @@ import test from 'node:test';
 import assert from 'node:assert/strict';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
-import { LOCAL_OVERLAY_COHORT_LIMIT } from '../data/localGeojson.js';
+import { LOCAL_OVERLAY_COHORT_LIMIT } from '../data/localGeojsonCore.js';
 import { FIRMS_AMBIENT_COHORT_LIMIT } from '../data/firmsLabels.js';
 import { vesselOverlayCohortLimit } from '../data/vesselLabels.js';
 import { CCTV_AMBIENT_CARD_MAX } from '../data/cctvLod.js';
diff --git a/src/panelStackLayout.test.mjs b/src/panelStackLayout.test.mjs
index 2a472e246..a13f5c04b 100644
--- a/src/panelStackLayout.test.mjs
+++ b/src/panelStackLayout.test.mjs
@@ -193,7 +193,8 @@ test('desktop panel lanes use per-panel allocations and presentation-only auto-c
 
 test('share-panel state excludes responsive collapse and preserves recipient preferences', () => {
   const ui = readShellSource();
-  const sharelink = readFileSync(new URL('./sharelink.js', import.meta.url), 'utf8');
+  // The long form spells the share format's panel table (one source of truth).
+  const panels = readFileSync(new URL('./share/viewCodec.js', import.meta.url), 'utf8');
 
   assert.match(
     ui,
@@ -211,7 +212,7 @@ test('share-panel state excludes responsive collapse and preserves recipient pre
     'pin and unpin must update the share hash even when collapse state is unchanged',
   );
   assert.match(ui, /\{ id: 'param-slider-panel' \}/);
-  assert.match(sharelink, /\{ id: 'param-slider-panel', token: 'm', pinnable: false \}/);
+  assert.match(panels, /id: 'param-slider-panel',\s*token: 'm',\s*pinnable: false,/);
 });
 
 test('parameterized Display presets keep one stable scroll owner', () => {
diff --git a/src/pinokioLauncherContract.test.mjs b/src/pinokioLauncherContract.test.mjs
index 24c9a9908..78748ff32 100644
--- a/src/pinokioLauncherContract.test.mjs
+++ b/src/pinokioLauncherContract.test.mjs
@@ -113,6 +113,9 @@ test('Pinokio menu resolves the nested install marker and exposes each lifecycle
     runtime.url = url;
     const items = await menu(kernel, info);
     assert.equal(items.filter((item) => item.default).length, 1);
+    const ready = installed && running === 'start.js' && Boolean(url);
+    assert.equal(items[0].popout, ready ? true : undefined);
+    assert.ok(items.slice(1).every((item) => item.popout === undefined));
     return items.map(({ text, href, default: isDefault = false }) => ({ text, href, default: isDefault }));
   };
 
diff --git a/src/radioMarkup.test.mjs b/src/radioMarkup.test.mjs
index 14ea0f3e0..dfe5b4257 100644
--- a/src/radioMarkup.test.mjs
+++ b/src/radioMarkup.test.mjs
@@ -1,5 +1,6 @@
 import { readRealtimeSource } from './testSupport/readRealtimeSource.mjs';
 import { GEV_REALTIME_TOOLS } from '../server/providers/openai/tools.js';
+import { realtimeInstructions } from '../server/providers/openai/instructions.js';
 import { readShellSource } from './testSupport/readShellSource.mjs';
 import { expandApplicationHtml } from '../build/application-html.js';
 import { readLayerSource } from './testSupport/readLayerSource.mjs';
@@ -25,13 +26,14 @@ const css = readStylesheet(new URL('../style.css', import.meta.url));
 
 function realtimeTools() { return GEV_REALTIME_TOOLS; }
 
-test('Realtime schema exposes the authoritative 30-tool inventory', () => {
+test('Realtime schema exposes the authoritative 31-tool inventory', () => {
   const tools = realtimeTools();
-  assert.equal(tools.length, 30);
+  assert.equal(tools.length, 31);
   const names = tools.map((tool) => tool.name);
-  assert.equal(new Set(names).size, 30, 'tool names are unique');
+  assert.equal(new Set(names).size, 31, 'tool names are unique');
   assert.ok(names.includes('set_context_mode'));
   assert.ok(names.includes('control_cockpit'));
+  assert.ok(names.includes('set_voice_inactivity_timeout'));
   assert.ok(names.includes('select_nearest_aircraft'));
   assert.ok(names.includes('control_radio'));
   assert.ok(names.includes('next_satellite_pass'));
@@ -77,13 +79,12 @@ test('the counting contract is stated in the Realtime instructions', () => {
 });
 
 test('Context panel opening stays distinct from Contacts activation', () => {
-  const start = voice.indexOf("'For requests to open, show, reveal, or focus a menu/panel");
-  assert.ok(start >= 0, 'panel-routing instruction is missing');
-  const text = voice.slice(start, voice.indexOf('\n', start));
-  assert.match(text, /"Open Context" means only set_panel_open/);
-  assert.match(text, /does not activate a Context sub-mode/);
-  assert.match(text, /"Open Contacts" means set_context_mode\{mode:"contacts"\}/);
-  assert.match(text, /expands the parent Context panel before activating Contacts/);
+  const text = realtimeInstructions().split('\n').find(line => line.startsWith('Panels:'));
+  assert.ok(text, 'panel-routing instruction is missing');
+  assert.match(text, /"Open Context" is only set_panel_open\{panelId:"global-context-panel",open:true\}/);
+  assert.match(text, /opening Context or selecting\/viewing an aircraft never enters them/);
+  assert.match(text, /"Open Contacts" is set_context_mode contacts/);
+  assert.match(text, /expands Context itself/);
 });
 
 test('nearest-aircraft selection stays out of Contacts and Cockpit', () => {
@@ -99,14 +100,14 @@ test('nearest-aircraft selection stays out of Contacts and Cockpit', () => {
   assert.match(text, /nearest airborne result/);
   assert.match(text, /healthy fallback feed is valid data/i);
   assert.match(text, /Do not also call fly_to_location, set_layer_visibility, analyst_query, track_entity/);
-  assert.match(text, /SELECT\/FIND never implies Contacts or Cockpit/);
+  const routing = realtimeInstructions().split('\n').find(line => line.startsWith('Panels:'));
+  assert.match(routing, /Contacts, Space Missions and Cockpit need explicit naming/);
   assert.match(text, /set_context_mode, or control_cockpit/);
 
   const byName = new Map(realtimeTools().map((tool) => [tool.name, tool]));
-  assert.match(byName.get('set_context_mode').description, /explicitly requests/);
-  assert.match(byName.get('set_context_mode').description, /selecting an aircraft does not imply Context/i);
-  assert.match(byName.get('control_cockpit').description, /explicitly requests Cockpit/);
-  assert.match(byName.get('control_cockpit').description, /must not enter Cockpit/);
+  assert.match(byName.get('set_context_mode').description, /only when explicitly requested/);
+  assert.match(routing, /selecting\/viewing an aircraft never enters them/);
+  assert.match(byName.get('control_cockpit').description, /Explicit Cockpit requests only/);
   assert.equal(
     byName.get('fly_to_location').parameters.properties.waitForArrival.type,
     'boolean',
@@ -117,7 +118,6 @@ test('nearest-aircraft selection stays out of Contacts and Cockpit', () => {
   assert.match(nearest.description, /Atomically/);
   assert.match(nearest.description, /exclude on-ground records/);
   assert.match(nearest.description, /fallback feeds remain usable/);
-  assert.match(nearest.description, /does not open Contacts or Cockpit/);
 });
 
 test('the two Context/Cockpit tools pin their enums and required arguments', () => {
@@ -153,7 +153,7 @@ test('the edited existing tools changed exactly as intended', () => {
   const panel = byName.get('set_panel_open');
   assert.deepEqual(
     panel.parameters.properties.panelId.enum,
-    ['data-panel', 'location-bar', 'control-panel', 'cctv-panel', 'radio-panel', 'scene-panel', 'pp-toggles', 'global-context-panel', 'weather-panel', 'recent-imagery-panel'],
+    ['data-panel', 'location-bar', 'control-panel', 'cctv-panel', 'radio-panel', 'scene-panel', 'pp-toggles', 'global-context-panel', 'weather-panel', 'recent-imagery-panel', 'voice-settings', 'voice-preview', 'provider-settings'],
   );
   assert.deepEqual(panel.parameters.required, ['panelId', 'open']);
 
@@ -183,6 +183,7 @@ test('no unchanged Realtime tool definition drifts silently', () => {
     'set_context_mode',
     'control_cockpit',
     'set_panel_open',
+    'set_voice_inactivity_timeout',
     'get_current_view_state',
     'fly_to_location',
     'select_nearest_aircraft',
diff --git a/src/reasonableDefaults.test.mjs b/src/reasonableDefaults.test.mjs
index dfd951377..766079aa4 100644
--- a/src/reasonableDefaults.test.mjs
+++ b/src/reasonableDefaults.test.mjs
@@ -11,9 +11,8 @@ import { expandApplicationHtml } from '../build/application-html.js';
 //      actually decides fresh-boot layer state — including the early return that
 //      makes each layer's own initializer the operative default.
 //   2. Scope feather. Owner: "I like to hide feather" set it to 0% on
-//      2026-08-22; the owner revised that to 8% on 2026-08-23 and locked 11%
-//      on 2026-08-24, a soft
-//      edge. The hard crop is still one drag away, and that is pinned too.
+//      2026-08-22; later revisions were 8%, then 11%, then 100% on
+//      2026-10-25. Scope stays ON on a fresh boot. The hard crop remains available.
 //   3. Detection ON (Dense @ 75%) for EVERY style, Normal included.
 //      Owner: "detect should also be on by default."
 //   4. Detection OUTSIDE opacity 1% (owner final lock, 2026-08-24; 3% on 08-23, 5% before), with
@@ -38,6 +37,7 @@ import { AIRCRAFT_BRACKET_FLOOR_ANCHOR } from './data/detectionPolicy.js';
 import {
   SCOPE_FEATHER_RATIO_DEFAULT,
   getScopeMaskFeather,
+  isScopeMaskEnabled,
   scopeMaskGeometry,
   setScopeMaskFeather,
 } from './scopeMask.js';
@@ -75,32 +75,40 @@ function managerForHash(hash) {
 }
 
 // ---------------------------------------------------------------------------
-// 2. Scope feather — a subtle soft edge on a first run
+// 2. Scope ON with 100% feather on a first run
 // ---------------------------------------------------------------------------
 
-test('first run opens with a subtle scope feather, at every surface that decides it', () => {
-  assert.equal(SCOPE_FEATHER_RATIO_DEFAULT, 0.11,
-    'owner final lock 2026-08-24, superseding the 08-22 hard-crop and 08-23 8% rulings');
-  assert.equal(getScopeMaskFeather(), 0.11,
+test('first run opens with Scope ON and 100% feather at every default surface', () => {
+  assert.equal(isScopeMaskEnabled(), true, 'the live mask starts enabled');
+  assert.equal(SCOPE_FEATHER_RATIO_DEFAULT, 1, 'owner preference 2026-10-25');
+  assert.equal(getScopeMaskFeather(), 1,
     'and the live module starts there, not merely documents it');
 
   // The slider and its readout are the same default rendered as markup — a
   // fresh boot applies no restore, so a stale value here would show one number
   // over a mask drawn at another.
-  assert.match(indexHtml, /id="scope-feather-slider"[^>]*\svalue="11"/,
-    'index.html: the feather slider ships at 11');
-  assert.match(indexHtml, /id="scope-feather-value"[^>]*>11%</,
+  assert.match(indexHtml, /id="scope-feather-slider"[^>]*\svalue="100"/,
+    'index.html: the feather slider ships at 100');
+  assert.match(indexHtml, /id="scope-feather-value"[^>]*>100%</,
     'index.html: and its readout agrees with the handle');
 
+  assert.match(indexHtml, /<input type="checkbox" id="scope-toggle"[^>]*\schecked\s*\/>/,
+    'the native Scope checkbox starts checked');
+
   // The link this session generates must describe the mask this session draws,
   // for the window before the first _syncShareState.
-  assert.match(shareSource, /this\._scopeFeatherPct = 11;/,
+  assert.match(shareSource, /this\._scopeFeatherPct = 100;/,
     'sharelink.js: the generator starts from the same value the mask starts at');
+  const params = managerForHash('')._buildHashParams();
+  assert.equal(params.get('sc'), '1');
+  assert.equal(params.get('scf'), '100');
 });
 
-test('an explicit feather still wins over the subtle default', () => {
+test('an explicit feather still wins over the 100% default', () => {
   // A link is authored state. The new default governs a session that said
   // nothing; it must never overwrite one that said something.
+  assert.equal(managerForHash('#lat=10&lon=20&scf=11').parseInitialHash().scopeFeatherPct, 11,
+    'links carrying the previous default preserve their authored feather');
   assert.equal(managerForHash('#lat=10&lon=20&scf=35').parseInitialHash().scopeFeatherPct, 35);
   assert.equal(managerForHash('#lat=10&lon=20&scf=64').parseInitialHash().scopeFeatherPct, 64);
   assert.equal(managerForHash('#lat=10&lon=20&scf=0').parseInitialHash().scopeFeatherPct, 0,
@@ -113,23 +121,28 @@ test('an explicit feather still wins over the subtle default', () => {
     'a pre-scf link restores the author\'s view, not the new default');
 });
 
-test('the subtle default did not weaken the feather control, and 0 is still reachable', () => {
+test('share links preserve explicit Scope OFF and feather choices over the defaults', () => {
+  const shared = managerForHash('#lat=10&lon=20&sc=0&scf=11').parseInitialHash();
+  assert.equal(shared.scopeEnabled, false);
+  assert.equal(shared.scopeFeatherPct, 11);
+});
+
+test('the 100% default retains the expanded feather range and hard edge', () => {
   // The cheap way to move a default would be to nerf the control. Prove the
   // slider still spans its full range and the geometry is still DERIVED from
   // the ratio — a check that would pass vacuously if it only ever saw one value.
-  assert.match(indexHtml, /id="scope-feather-slider"[^>]*\smin="0"[^>]*\smax="100"/,
+  assert.match(indexHtml, /id="scope-feather-slider"[^>]*\smin="0"[^>]*\smax="200"/,
     'the slider still offers the whole range');
   const previous = getScopeMaskFeather();
   try {
-    for (const ratio of [0.35, 0.7, 1]) {
+    for (const ratio of [0.35, 0.7, 1, 1.75, 2]) {
       setScopeMaskFeather(ratio);
       const geo = scopeMaskGeometry(1200, 900);
       const keyholeR = 900 * 0.5 * KEYHOLE_OUTER_RADIUS;
       assert.ok(Math.abs((geo.outerR - geo.innerR) - keyholeR * ratio) < 1e-9,
         `feather ${ratio} must still widen the band to that fraction of the keyhole`);
     }
-    // The new default is a real, narrow band — not the hard crop, and nowhere
-    // near the retired 35 % halo.
+    // The first-run value draws a band derived from the same keyhole radius.
     setScopeMaskFeather(SCOPE_FEATHER_RATIO_DEFAULT);
     const soft = scopeMaskGeometry(1200, 900);
     const keyholeR = 900 * 0.5 * KEYHOLE_OUTER_RADIUS;
diff --git a/src/sceneCommandRelease.js b/src/sceneCommandRelease.js
new file mode 100644
index 000000000..4d8594401
--- /dev/null
+++ b/src/sceneCommandRelease.js
@@ -0,0 +1,74 @@
+/**
+ * Let a turned-off layer's memory go.
+ *
+ * Cesium (engine 22.3, `Scene/View.js`) reuses each view's per-pass command
+ * arrays: every frame resets `frustumCommands.indices[pass]` to 0 and
+ * overwrites `commands[pass][i]` from the start. `Scene.js` truncates the
+ * voxel, Gaussian-splat and translucent passes to their counts; the opaque
+ * and other passes keep the slots past the new count. When a layer is turned
+ * off the next frame has fewer commands, so that tail keeps the destroyed
+ * primitives' DrawCommands, and through `_owner` → primitive → entity →
+ * EntityCollection the whole data source stays reachable. The offscreen view
+ * `scene.sampleHeight` / `pickFromRay` render into keeps its last list the
+ * same way, until the next height sample.
+ *
+ * Measured (production build, heap after GC, Data Centers on → off): 116 MiB
+ * kept on main, 13 MiB with this module; heap snapshots traced the entities
+ * through `View.frustumCommandsList` and `Picking._pickOffscreenView`.
+ *
+ * After a layer finishes turning off, this renders one frame, trims the main
+ * view's arrays to that frame's counts, and empties the offscreen pick view's
+ * lists (it rebuilds them in full on every pick). It reads private Cesium
+ * fields: `src/sceneCommandRelease.test.mjs` fails if any of them is renamed
+ * or if Cesium changes which passes it truncates, and once Cesium clears the
+ * tail itself this module can go.
+ */
+
+/** Drop command references a view no longer draws. */
+function trimView(view, { keepCurrent }) {
+  for (const frustum of view?.frustumCommandsList || []) {
+    const { commands, indices } = frustum;
+    for (let pass = 0; pass < commands.length; pass += 1) {
+      const keep = keepCurrent ? indices[pass] : 0;
+      if (commands[pass].length > keep) commands[pass].length = keep;
+      if (!keepCurrent) indices[pass] = 0;
+    }
+  }
+  if (!keepCurrent)
+    for (const extent of view?._commandExtents || [])
+      extent.command = undefined;
+}
+
+/**
+ * Release stale command references in the scene's main view (keeping what
+ * the last frame drew) and in its offscreen pick view (all of it).
+ * @param {object} scene Cesium Scene, right after a render.
+ */
+export function trimStaleSceneCommands(scene) {
+  trimView(scene._defaultView, { keepCurrent: true });
+  trimView(scene._picking?._pickOffscreenView, { keepCurrent: false });
+}
+
+/**
+ * After every layer disable, render one frame and trim once it is drawn.
+ * @param {{scene: object, dataManager: object, requestRender: (reason: string) => void}} deps
+ * @returns {() => void} uninstall
+ */
+export function installLayerReleaseTrim({ scene, dataManager, requestRender }) {
+  let removeOneShot = null;
+  const unsubscribe = dataManager.subscribe((change) => {
+    if (change?.type !== 'visibility' || change.enabled !== false) return;
+    if (removeOneShot) return; // a trim is already waiting for its frame
+    removeOneShot = scene.postRender.addEventListener(() => {
+      removeOneShot();
+      removeOneShot = null;
+      trimStaleSceneCommands(scene);
+    });
+    requestRender('layer-release-trim');
+  });
+  return () => {
+    unsubscribe();
+    removeOneShot?.();
+    removeOneShot = null;
+  };
+}
diff --git a/src/sceneCommandRelease.test.mjs b/src/sceneCommandRelease.test.mjs
new file mode 100644
index 000000000..d88037872
--- /dev/null
+++ b/src/sceneCommandRelease.test.mjs
@@ -0,0 +1,137 @@
+// A turned-off layer's draw commands must not stay reachable through Cesium's
+// reused per-pass command arrays (src/sceneCommandRelease.js).
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { pathToFileURL } from 'node:url';
+import {
+  installLayerReleaseTrim,
+  trimStaleSceneCommands,
+} from './sceneCommandRelease.js';
+
+const frustum = (lists, counts) => ({
+  commands: lists.map((list) => [...list]),
+  indices: [...counts],
+});
+
+test('the main view keeps what the last frame drew and drops the stale tail', () => {
+  const view = {
+    frustumCommandsList: [frustum([['a', 'b', 'stale'], ['c'], []], [2, 1, 0])],
+  };
+  trimStaleSceneCommands({ _defaultView: view });
+  assert.deepEqual(view.frustumCommandsList[0].commands, [
+    ['a', 'b'],
+    ['c'],
+    [],
+  ]);
+  assert.deepEqual(view.frustumCommandsList[0].indices, [2, 1, 0]);
+});
+
+test('the offscreen pick view is emptied, since every pick rebuilds it', () => {
+  const extents = [{ command: 'x' }, { command: 'y' }];
+  const pick = {
+    frustumCommandsList: [frustum([['p', 'q'], ['r']], [2, 1])],
+    _commandExtents: extents,
+  };
+  trimStaleSceneCommands({
+    _defaultView: { frustumCommandsList: [] },
+    _picking: { _pickOffscreenView: pick },
+  });
+  assert.deepEqual(pick.frustumCommandsList[0].commands, [[], []]);
+  assert.deepEqual(pick.frustumCommandsList[0].indices, [0, 0]);
+  assert.deepEqual(
+    extents.map((e) => e.command),
+    [undefined, undefined],
+  );
+});
+
+test('a layer disable renders one frame and trims after it', () => {
+  const listeners = new Set();
+  const postRender = new Set();
+  const requests = [];
+  const view = { frustumCommandsList: [frustum([['a', 'stale']], [1])] };
+  const scene = {
+    _defaultView: view,
+    postRender: {
+      addEventListener(fn) {
+        postRender.add(fn);
+        return () => postRender.delete(fn);
+      },
+    },
+  };
+  const uninstall = installLayerReleaseTrim({
+    scene,
+    dataManager: {
+      subscribe(fn) {
+        listeners.add(fn);
+        return () => listeners.delete(fn);
+      },
+    },
+    requestRender: (reason) => requests.push(reason),
+  });
+  const emit = (change) => listeners.forEach((fn) => fn(change));
+
+  emit({ type: 'visibility', layerId: 'x', enabled: true });
+  assert.equal(requests.length, 0, 'enabling trims nothing');
+  emit({ type: 'visibility', layerId: 'x', enabled: false });
+  emit({ type: 'visibility', layerId: 'y', enabled: false });
+  assert.deepEqual(
+    requests,
+    ['layer-release-trim'],
+    'one frame for back-to-back disables',
+  );
+  assert.equal(
+    view.frustumCommandsList[0].commands[0].length,
+    2,
+    'not before the frame',
+  );
+  postRender.forEach((fn) => fn());
+  assert.deepEqual(view.frustumCommandsList[0].commands, [['a']]);
+  assert.equal(postRender.size, 0, 'the frame listener is one-shot');
+  uninstall();
+  assert.equal(listeners.size, 0);
+});
+
+// The workaround reads private Cesium fields. Pin the shape it relies on, and
+// fail when Cesium starts clearing the tail itself so the module can go.
+test('Cesium still reuses per-pass command arrays without clearing their tail', () => {
+  const require = createRequire(import.meta.url);
+  const enginePkg = require.resolve('@cesium/engine/package.json');
+  const read = (rel) =>
+    readFileSync(new URL(rel, pathToFileURL(enginePkg)), 'utf8');
+  const scene = read('./Source/Scene/Scene.js');
+  const view = read('./Source/Scene/View.js');
+  const frustumCommands = read('./Source/Scene/FrustumCommands.js');
+  const picking = read('./Source/Scene/Picking.js');
+  // Every private field the trim reads. A rename would otherwise turn the
+  // trim into a silent no-op (it reaches them through `?.` and `|| []`).
+  assert.match(scene, /this\._picking = new Picking\(this\);/);
+  assert.match(scene, /this\._defaultView = new View\(/);
+  assert.match(picking, /this\._pickOffscreenView = new View\(/);
+  assert.match(view, /this\.frustumCommandsList = \[\];/);
+  assert.match(view, /frustumCommandsList\[n\]\.indices\[p\] = 0;/);
+  assert.match(view, /this\._commandExtents = \[\];/);
+  assert.match(
+    frustumCommands,
+    /this\.commands = commands;\s*this\.indices = indices;/,
+  );
+  // Cesium truncates only the voxel, Gaussian-splat and translucent passes,
+  // each in its own draw step; the opaque and other passes keep their tail.
+  // A change here means Cesium's handling moved: re-check whether this
+  // module is still needed.
+  assert.doesNotMatch(
+    view,
+    /\.length\s*=\s*[^;]*indices\[/,
+    'View.js now truncates the per-pass arrays: remove src/sceneCommandRelease.js',
+  );
+  assert.deepEqual(
+    [
+      ...scene.matchAll(
+        /commands\.length = frustumCommands\.indices\[Pass\.(\w+)\];/g,
+      ),
+    ].map((match) => match[1]),
+    ['VOXELS', 'GAUSSIAN_SPLATS', 'TRANSLUCENT'],
+    'Scene.js truncates a different set of passes: re-check src/sceneCommandRelease.js',
+  );
+});
diff --git a/src/scopeMask.js b/src/scopeMask.js
index 775a257f7..c43108377 100644
--- a/src/scopeMask.js
+++ b/src/scopeMask.js
@@ -1,4 +1,5 @@
 import { getKeyholeGeometry } from './celestialRing.js';
+import { SCOPE_FEATHER_RATIO_MAX } from './scopeMaskPolicy.js';
 
 /**
  * Scope mask — the app's signature circular viewport treatment, made real.
@@ -41,25 +42,10 @@ import { getKeyholeGeometry } from './celestialRing.js';
 /** Matches the page background the emergent scope faded into. */
 const SCOPE_OUTSIDE_COLOR = { r: 5, g: 5, b: 8 };
 /**
- * Default edge feather as a fraction of the keyhole radius.
- *
- * 0.11 since 2026-08-24 (owner final lock; 0.08 on 08-23, hard-crop 0 on
- * 08-22 — this supersedes both), REVISING the 2026-08-22 ruling that
- * set it to zero: a subtle soft edge rather than either the hard crop or the
- * retired 35 % halo. The slider is untouched and still spans 0..100; this is
- * only where it STARTS. `setScopeMaskFeather` is unchanged, so any feather a
- * share link carries, or the operator dials in, overrides this immediately, and
- * the hard-crop path at 0 is still reachable from the handle.
- *
- * Keep in lockstep with `#scope-feather-slider`'s markup value AND readout in
- * index.html and `_scopeFeatherPct` in sharelink.js — a fresh boot applies no
- * restore, so those literals ARE the first-run state. NOT the `scf` PARSE
- * fallback, which stays at 35 on purpose: a link predating that field was
- * authored when 35 was what its author saw, and a link from the feather-0 era
- * carries `scf=0` explicitly because the generator always writes the field.
- * Pinned in reasonableDefaults.test.mjs.
+ * First-run feather ratio; the Display slider and share defaults use 100%.
+ * The historical missing-scf parse fallback remains 35%.
  */
-export const SCOPE_FEATHER_RATIO_DEFAULT = 0.11;
+export const SCOPE_FEATHER_RATIO_DEFAULT = 1;
 /**
  * Terminus opacity at/above SCOPE_TERMINUS_FAR_M — slightly translucent so
  * faint stars survive in the corners at globe scale.
@@ -344,7 +330,10 @@ function teardownDevicePixelRatioWatch() {
 export function scopeMaskGeometry(width, height, featherRatio = _featherRatio) {
   const keyhole = getKeyholeGeometry(width, height);
   if (!(keyhole.radius > 0)) return null;
-  const feather = Math.max(0, Math.min(1, Number(featherRatio) || 0));
+  const feather = Math.max(
+    0,
+    Math.min(SCOPE_FEATHER_RATIO_MAX, Number(featherRatio) || 0),
+  );
   // Feather straddles the keyhole edge so the visible radius stays anchored
   // to the shared geometry every keyhole consumer (labels, cards) fades on.
   const half = keyhole.radius * feather * 0.5;
@@ -423,6 +412,14 @@ function draw() {
   _painted = true;
 }
 
+/** Expose only the OFF state; an absent attribute preserves the original HUD. */
+function syncScopeMaskAppearance(enabled = _enabled) {
+  const dataset = globalThis.document?.documentElement?.dataset;
+  if (!dataset) return;
+  if (enabled) delete dataset.scopeMask;
+  else dataset.scopeMask = 'off';
+}
+
 /**
  * Install the scope mask into the viewer container. Idempotent.
  * @param {Cesium.Viewer} viewer
@@ -430,6 +427,7 @@ function draw() {
  */
 export function installScopeMask(viewer) {
   if (_canvas || !viewer?.container) return;
+  syncScopeMaskAppearance();
   _container = viewer.container;
   _viewer = viewer;
   _canvas = document.createElement('canvas');
@@ -505,6 +503,7 @@ export function setScopeMaskEnabled(enabled) {
   const next = Boolean(enabled);
   const reEnabled = next && !_enabled;
   _enabled = next;
+  syncScopeMaskAppearance();
   if (reEnabled) {
     // The camera moved freely while the scope was off and nothing sampled it,
     // so the painted terminus can be a whole altitude band stale. Re-sync once
@@ -522,11 +521,14 @@ export function isScopeMaskEnabled() {
 }
 
 /**
- * @param {number} ratio - Edge feather as a fraction of keyhole radius [0,1].
+ * @param {number} ratio - Edge feather as a fraction of keyhole radius [0,2].
  * @returns {void}
  */
 export function setScopeMaskFeather(ratio) {
-  _featherRatio = Math.max(0, Math.min(1, Number(ratio) || 0));
+  _featherRatio = Math.max(
+    0,
+    Math.min(SCOPE_FEATHER_RATIO_MAX, Number(ratio) || 0),
+  );
   draw();
 }
 
@@ -540,6 +542,7 @@ export function getScopeMaskFeather() {
  * @returns {void}
  */
 export function destroyScopeMask() {
+  syncScopeMaskAppearance(true);
   _resizeObserver?.disconnect();
   _resizeObserver = null;
   teardownDevicePixelRatioWatch();
@@ -553,6 +556,7 @@ export function destroyScopeMask() {
 
 /** Test seam. */
 export function _resetScopeMaskForTest() {
+  syncScopeMaskAppearance(true);
   _resizeObserver?.disconnect();
   _resizeObserver = null;
   teardownDevicePixelRatioWatch();
diff --git a/src/scopeMask.test.mjs b/src/scopeMask.test.mjs
index 7f5dcba62..d37b6b23b 100644
--- a/src/scopeMask.test.mjs
+++ b/src/scopeMask.test.mjs
@@ -18,6 +18,7 @@ import {
   SCOPE_TERMINUS_MIN_PCT,
   SCOPE_TERMINUS_MAX_PCT,
   SCOPE_FEATHER_RATIO_DEFAULT,
+  getScopeMaskFeather,
   SCOPE_OUTSIDE_ALPHA,
   SCOPE_TERMINUS_ALPHA_NEAR,
   SCOPE_TERMINUS_FAR_M,
@@ -26,6 +27,7 @@ import {
   _resetScopeMaskForTest,
 } from './scopeMask.js';
 import { KEYHOLE_OUTER_RADIUS } from './celestialRing.js';
+import { SCOPE_FEATHER_RATIO_MAX, clampScopeFeatherPct } from './scopeMaskPolicy.js';
 
 beforeEach(() => _resetScopeMaskForTest());
 
@@ -47,16 +49,34 @@ test('zero feather produces a hard edge exactly at the keyhole radius', () => {
   assert.equal(geo.outerR, keyholeR);
 });
 
-test('feather ratio is clamped to [0,1] and bad input falls back to 0', () => {
+test('feather ratio reaches the center at 200% and clamps larger input', () => {
   const wide = scopeMaskGeometry(1000, 800, 7);
-  const one = scopeMaskGeometry(1000, 800, 1);
-  assert.equal(wide.innerR, one.innerR);
-  assert.equal(wide.outerR, one.outerR);
+  const maximum = scopeMaskGeometry(1000, 800, SCOPE_FEATHER_RATIO_MAX);
+  const keyholeR = 800 * 0.5 * KEYHOLE_OUTER_RADIUS;
+  assert.equal(maximum.innerR, 0);
+  assert.equal(maximum.outerR, keyholeR * 2);
+  assert.equal(wide.innerR, maximum.innerR);
+  assert.equal(wide.outerR, maximum.outerR);
+  for (const ratio of [1, 1.5, 2]) {
+    setScopeMaskFeather(ratio);
+    assert.equal(getScopeMaskFeather(), ratio);
+    const geometry = scopeMaskGeometry(1000, 800);
+    assert.equal((geometry.innerR + geometry.outerR) / 2, keyholeR);
+    assert.equal(geometry.outerR - geometry.innerR, keyholeR * ratio);
+  }
+  setScopeMaskFeather(7);
+  assert.equal(getScopeMaskFeather(), SCOPE_FEATHER_RATIO_MAX);
   const nan = scopeMaskGeometry(1000, 800, Number.NaN);
   const zero = scopeMaskGeometry(1000, 800, 0);
   assert.equal(nan.innerR, zero.innerR);
 });
 
+test('UI and share feather percentages share one bounded integer range', () => {
+  for (const [value, expected] of [[0, 0], [11, 11], [175.6, 176], [200, 200], [350, 200], [-4, 0], [Number.NaN, 0]]) {
+    assert.equal(clampScopeFeatherPct(value), expected);
+  }
+});
+
 test('degenerate viewport yields null instead of a broken gradient', () => {
   assert.equal(scopeMaskGeometry(0, 0), null);
   assert.equal(scopeMaskGeometry(-5, 100), null);
@@ -136,12 +156,14 @@ function stubScopeMaskDom({ width = 1000, height = 800, dpr = 1 } = {}) {
       removeEventListener: (type, fn) => listeners.delete(fn),
     }),
   };
-  globalThis.document = { createElement: () => canvas };
+  const documentElement = { dataset: {} };
+  globalThis.document = { documentElement, createElement: () => canvas };
   globalThis.ResizeObserver = class { observe() {} disconnect() {} };
   const container = { clientWidth: width, clientHeight: height, appendChild() {} };
   return {
     canvas,
     container,
+    documentElement,
     /** Canvas work counters: backing-store resizes, clears, fills. */
     ops,
     /** Every fillStyle string assigned since install (hard-crop path). */
@@ -160,6 +182,29 @@ function stubScopeMaskDom({ width = 1000, height = 800, dpr = 1 } = {}) {
   };
 }
 
+test('scope appearance follows direct state changes and install/destroy lifecycles', () => {
+  const dom = stubScopeMaskDom();
+  try {
+    setScopeMaskEnabled(false);
+    assert.equal(dom.documentElement.dataset.scopeMask, 'off');
+    delete dom.documentElement.dataset.scopeMask;
+    installScopeMask({ container: dom.container });
+    assert.equal(dom.documentElement.dataset.scopeMask, 'off', 'install publishes retained OFF state');
+    destroyScopeMask();
+    assert.equal(dom.documentElement.dataset.scopeMask, undefined, 'destroy clears the document marker');
+    installScopeMask({ container: dom.container });
+    assert.equal(dom.documentElement.dataset.scopeMask, 'off', 'reinstall retains the preference');
+    setScopeMaskEnabled(true);
+    assert.equal(dom.documentElement.dataset.scopeMask, undefined, 'ON uses the original presentation');
+    setScopeMaskEnabled(false);
+    _resetScopeMaskForTest();
+    assert.equal(dom.documentElement.dataset.scopeMask, undefined, 'test reset clears the marker');
+  } finally {
+    destroyScopeMask();
+    dom.restore();
+  }
+});
+
 test('a DPR change with no resize still repaints the backing store', () => {
   const dom = stubScopeMaskDom({ width: 1000, height: 800, dpr: 1 });
   try {
diff --git a/src/scopeMaskPolicy.js b/src/scopeMaskPolicy.js
new file mode 100644
index 000000000..13515fb43
--- /dev/null
+++ b/src/scopeMaskPolicy.js
@@ -0,0 +1,11 @@
+/** A 200% feather reaches the center while keeping its midpoint on the keyhole. */
+export const SCOPE_FEATHER_RATIO_MAX = 2;
+const SCOPE_FEATHER_MAX_PCT = SCOPE_FEATHER_RATIO_MAX * 100;
+
+/** Normalize a UI/share-link feather percentage to the supported integer range. */
+export function clampScopeFeatherPct(value) {
+  return Math.max(
+    0,
+    Math.min(SCOPE_FEATHER_MAX_PCT, Math.round(Number(value) || 0)),
+  );
+}
diff --git a/src/search/coordinateParser.js b/src/search/coordinateParser.js
index 105f13934..948cc25e7 100644
--- a/src/search/coordinateParser.js
+++ b/src/search/coordinateParser.js
@@ -47,15 +47,37 @@ function readComponent(text) {
   };
 }
 
-/** Split on a comma, a semicolon, or whitespace — never on anything else. */
+/**
+ * Split on a comma, a semicolon, or whitespace — never on anything else.
+ * A hemisphere letter stays with the number it names, so `40.7 N 74.0 W`
+ * is two components. Splitting on the space before that letter used to
+ * leave three pieces and the search declined the coordinate.
+ */
 function splitComponents(query) {
   const text = String(query).trim();
   if (!text) return null;
-  const parts = /[,;]/.test(text)
-    ? text.split(/[,;]/)
-    : text.split(/\s+(?=[+-]?[.\d]|[NSEW]\s*[+-]?[.\d])/i);
-  const trimmed = parts.map((part) => part.trim());
-  return trimmed.length === 2 && trimmed.every(Boolean) ? trimmed : null;
+  if (/[,;]/.test(text)) {
+    const trimmed = text.split(/[,;]/).map((part) => part.trim());
+    return trimmed.length === 2 && trimmed.every(Boolean) ? trimmed : null;
+  }
+  const words = text.split(/\s+/);
+  // Each component has at most a number, a degree sign and one hemisphere.
+  if (words.length > 6) return null;
+  // Keep every character: extracting tokens would turn `1e3` or `1.2.3`
+  // into invented coordinates. A lone letter between numbers can name either
+  // component; require an unambiguous split rather than guessing its owner.
+  let result = null;
+  for (let boundary = words.length - 1; boundary > 0; boundary -= 1) {
+    const parts = [
+      words.slice(0, boundary).join(' '),
+      words.slice(boundary).join(' '),
+    ];
+    if (parts.every((part) => readComponent(part))) {
+      if (result) return null;
+      result = parts;
+    }
+  }
+  return result;
 }
 
 /** Present a parsed pair the way a coordinate is normally written. */
diff --git a/src/search/coordinateParser.test.mjs b/src/search/coordinateParser.test.mjs
index 7007a9b61..6128d5f4c 100644
--- a/src/search/coordinateParser.test.mjs
+++ b/src/search/coordinateParser.test.mjs
@@ -52,6 +52,19 @@ test('hemisphere letters fix the axis, in either order', () => {
     label: '40.0000° N, 74.0000° W',
   });
   assert.deepEqual(parseCoordinateQuery('40° N, 74° W')?.lat, 40);
+  // Written the way a coordinate is usually pasted, with no comma.
+  assert.deepEqual(parseCoordinateQuery('40.7128 N 74.0060 W'), {
+    lat: 40.7128,
+    lon: -74.006,
+    label: '40.7128° N, 74.0060° W',
+  });
+  assert.deepEqual(parseCoordinateQuery('40.7128° N 74.0060° W')?.lon, -74.006);
+  assert.deepEqual(parseCoordinateQuery('N 40.7128 W 74.0060'), {
+    lat: 40.7128,
+    lon: -74.006,
+    label: '40.7128° N, 74.0060° W',
+  });
+  assert.deepEqual(parseCoordinateQuery('74.0060 W 40.7128 N')?.lat, 40.7128);
   // One letter is enough: it fixes its own axis, the other takes what is left.
   assert.deepEqual(parseCoordinateQuery('40 N, -74')?.lon, -74);
   assert.deepEqual(parseCoordinateQuery('-74, 40 N'), {
@@ -66,6 +79,21 @@ test('malformed and ambiguous coordinates are refused, never guessed', () => {
     // The reviewer's case: trailing text must not be discarded.
     '12junk, 34oops',
     '12junk,34',
+    '12junk 34',
+    '1e3 5',
+    '1e3',
+    '1E3',
+    '1e-3',
+    '1.2.3',
+    '12-34',
+    '40 NW 74',
+    '40 N 74',
+    '40 W 74',
+    '40 E 74',
+    '°40 74',
+    '40°° 74',
+    '40 74°°',
+    '40 26 46 N 79 58 56 W',
     '43.1731, -79.0384x',
     'abc, def',
     'Paris',
@@ -196,3 +224,25 @@ test('malformed or unsupported geo URIs are refused without losing their meaning
     assert.equal(parseCoordinateQuery(query), null, query);
   }
 });
+
+test('whitespace boundaries preserve degree signs and hemisphere ownership', () => {
+  for (const query of ['40 ° 74', '40° 74', '40 N, 74', 'N 40 74']) {
+    assert.equal(parseCoordinateQuery(query)?.lat, 40, query);
+    assert.equal(parseCoordinateQuery(query)?.lon, 74, query);
+  }
+  for (const query of ['40 ° N 74 ° W', 'N 40 ° W 74 °', '40\tN\n74\tW']) {
+    assert.equal(parseCoordinateQuery(query)?.lat, 40, query);
+    assert.equal(parseCoordinateQuery(query)?.lon, -74, query);
+  }
+});
+
+test('a signed plain component leaves a spaced letter with the other component', () => {
+  assert.deepEqual(
+    parseCoordinateQuery('-40 N 74'),
+    parseCoordinateQuery('-40, N 74'),
+  );
+  assert.deepEqual(
+    parseCoordinateQuery('40 N -74'),
+    parseCoordinateQuery('40 N, -74'),
+  );
+});
diff --git a/src/services/groundSnap.js b/src/services/groundSnap.js
index 159cd66fd..eecb1fa34 100644
--- a/src/services/groundSnap.js
+++ b/src/services/groundSnap.js
@@ -307,10 +307,20 @@ export function createGroundSnap({ groundFloor }) {
     }
     const now = Date.now();
     const entry = entries.get(icao);
-    if (entry && now < entry.nextRetryMs) return heldSnapM(entry, surfacePos); // backoff in force
+    // Backoff in force, unless it ends further off than any backoff can:
+    // a retry stamped before the clock stepped back would otherwise wait for
+    // the clock to catch up.
+    if (
+      entry &&
+      now < entry.nextRetryMs &&
+      entry.nextRetryMs - now <= RETRY_MAX_MS
+    )
+      return heldSnapM(entry, surfacePos);
     // Per-window budget: deny WITHOUT a retry stamp so the overflow simply
     // tries again next tick instead of waiting out a backoff it didn't earn.
-    if (now - windowStartMs > SAMPLE_WINDOW_MS) {
+    // A clock that stepped back also opens a new window, or none would open
+    // until it caught up.
+    if (now < windowStartMs || now - windowStartMs > SAMPLE_WINDOW_MS) {
       windowStartMs = now;
       windowCount = 0;
     }
diff --git a/src/services/groundSnap.test.mjs b/src/services/groundSnap.test.mjs
new file mode 100644
index 000000000..8dfe42c46
--- /dev/null
+++ b/src/services/groundSnap.test.mjs
@@ -0,0 +1,62 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import * as Cesium from 'cesium';
+import { createGroundSnap } from './groundSnap.js';
+
+const groundFloor = {
+  cachedMeshFloor: () => null,
+  meshFloorPreferred: () => false,
+  reportValidatedMeshFloorCell: () => {},
+};
+
+/** A viewer whose ground is a loaded 3D tileset, counting height samples. */
+function makeViewer() {
+  const calls = { samples: 0 };
+  const tileset = { show: true, tilesLoaded: true };
+  return {
+    calls,
+    scene: {
+      primitives: { length: 1, get: () => tileset },
+      sampleHeight() {
+        calls.samples += 1;
+        return 1650;
+      },
+      globe: { getHeight: () => 1600 },
+    },
+  };
+}
+
+const atDenverAirport = Cesium.Cartesian3.fromDegrees(-104.6737, 39.8561, 0);
+
+test('a clock that steps back opens a new sample window instead of denying samples until it catches up', (t) => {
+  t.mock.timers.enable({ apis: ['Date'], now: 1_000_000 });
+  const viewer = makeViewer();
+  const snap = createGroundSnap({ groundFloor });
+  const icaos = ['a00001', 'a00002', 'a00003', 'a00004', 'a00005', 'a00006'];
+  for (const icao of icaos) snap.heightFor(viewer, icao, atDenverAirport);
+  assert.equal(viewer.calls.samples, 4, 'four samples per 250 ms window');
+  t.mock.timers.setTime(1_000_000 - 60_000);
+  for (const icao of icaos) snap.heightFor(viewer, icao, atDenverAirport);
+  assert.equal(
+    viewer.calls.samples,
+    6,
+    'the two denied aircraft sample in the new window',
+  );
+});
+
+test('a retry backoff stamped before the clock stepped back does not wait for it to catch up', (t) => {
+  t.mock.timers.enable({ apis: ['Date'], now: 10_000_000 });
+  const viewer = makeViewer();
+  const tileset = viewer.scene.primitives.get(0);
+  const snap = createGroundSnap({ groundFloor });
+  // Tiles still streaming: a miss, backed off for 2 s.
+  tileset.tilesLoaded = false;
+  assert.equal(snap.heightFor(viewer, 'a00001', atDenverAirport), null);
+  tileset.tilesLoaded = true;
+  assert.equal(snap.heightFor(viewer, 'a00001', atDenverAirport), null);
+  assert.equal(viewer.calls.samples, 0, 'the backoff holds');
+  // The clock steps back an hour: the stamp is an hour off, past any backoff.
+  t.mock.timers.setTime(10_000_000 - 3_600_000);
+  assert.equal(snap.heightFor(viewer, 'a00001', atDenverAirport), 1650);
+  assert.equal(viewer.calls.samples, 1);
+});
diff --git a/src/setupDoctor.test.mjs b/src/setupDoctor.test.mjs
index 26d695ba1..d4a2a7ca7 100644
--- a/src/setupDoctor.test.mjs
+++ b/src/setupDoctor.test.mjs
@@ -13,6 +13,7 @@ import {
   npmProcessSpec,
   readDoctorDotenvValue,
   resolveOpenSkyAuthMode,
+  resolveOpenSkyCredentialsFile,
   resolveCredential,
 } from '../scripts/setup-doctor.mjs';
 
@@ -237,7 +238,7 @@ test('doctor retains OAuth capability wording for a complete client pair', () =>
   );
 });
 
-test('doctor reports Basic mode without inferring runtime auth from OAuth credentials', () => {
+test('doctor reports retired Basic mode as anonymous, whatever OAuth credentials exist', () => {
   const oauthCredentials = {
     OPENSKY_CLIENT_ID: { configured: true },
     OPENSKY_CLIENT_SECRET: { configured: true },
@@ -245,7 +246,7 @@ test('doctor reports Basic mode without inferring runtime auth from OAuth creden
   for (const credentials of [{}, oauthCredentials]) {
     assert.equal(
       buildCapabilitySummary(credentials, { openSkyAuthMode: 'basic' }).flights,
-      'OpenSky Basic mode selected (credential presence and validity not verified)',
+      'OpenSky Basic mode selected: OpenSky retired username/password sign-in, so flights load anonymously (rate-limited)',
     );
   }
 });
@@ -393,3 +394,39 @@ test('doctor never calls a dependency-missing setup ready', () => {
   assert.match(output, /Setup needs attention/);
   assert.doesNotMatch(output, /Ready\. Run/);
 });
+
+test('doctor counts OPENSKY_CREDENTIALS_FILE as OAuth credentials, from the environment or .env', () => {
+  assert.equal(
+    buildCapabilitySummary({}, { openSkyCredentialsFile: true }).flights,
+    'OpenSky OAuth credentials file set (OPENSKY_CREDENTIALS_FILE; file contents and validity not verified)',
+  );
+  assert.equal(
+    buildCapabilitySummary({}, { openSkyCredentialsFile: false }).flights,
+    'OpenSky keyless anonymous access (rate-limited)',
+  );
+  const root = mkdtempSync(path.join(tmpdir(), 'gev-doctor-opensky-file-'));
+  try {
+    assert.equal(
+      resolveOpenSkyCredentialsFile({ environment: {}, rootDir: root }),
+      false,
+    );
+    writeFileSync(
+      path.join(root, '.env'),
+      'OPENSKY_CREDENTIALS_FILE=~/Downloads/credentials.json\n',
+    );
+    assert.equal(
+      resolveOpenSkyCredentialsFile({ environment: {}, rootDir: root }),
+      true,
+    );
+    assert.equal(
+      resolveOpenSkyCredentialsFile({
+        authoritativeEnvironment: true,
+        environment: { OPENSKY_CREDENTIALS_FILE: '' },
+        rootDir: root,
+      }),
+      false,
+    );
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/src/share/follow.js b/src/share/follow.js
new file mode 100644
index 000000000..e24fc003b
--- /dev/null
+++ b/src/share/follow.js
@@ -0,0 +1,155 @@
+/**
+ * What a share link's thing view follows, and where its camera is: the
+ * entity kinds and the follow-offset geometry of the share format
+ * (docs/SHARE-LINK-FORMAT.md). Like the rest of the format, every code,
+ * default and formula here is permanent.
+ *
+ * Pure and dependency-free, so the app's follow camera and the codec
+ * (viewCodec.js) share one definition.
+ */
+
+const freezeAll = (rows) =>
+  Object.freeze(rows.map((row) => Object.freeze(row)));
+
+/**
+ * Things a view can follow. `code` is permanent and is also the number of the
+ * thing-message field that carries this kind's id, so the kind costs nothing
+ * on the wire. `idForm` picks the compact numeric spelling (a 24-bit ICAO
+ * address or a decimal number); any other identifier travels as text.
+ * `tracking` names the layer-state slot that holds the same selection in the
+ * long form.
+ */
+export const SHARE_VIEW_ENTITY_KINDS = freezeAll([
+  {
+    code: 1,
+    kind: 'aircraft',
+    layerId: 'flights',
+    idForm: 'hex24',
+    tracking: 'flights',
+  },
+  {
+    code: 2,
+    kind: 'military_aircraft',
+    layerId: 'military',
+    idForm: 'hex24',
+    tracking: 'military',
+  },
+  {
+    code: 3,
+    kind: 'vessel',
+    layerId: 'ais-live-vessels',
+    idForm: 'decimal',
+    tracking: null,
+  },
+  {
+    code: 4,
+    kind: 'satellite',
+    layerId: 'satellites',
+    idForm: 'decimal',
+    tracking: 'satellites',
+  },
+]);
+/**
+ * The frozen meaning of an omitted follow-offset field. An offset whose
+ * fields all equal these is written as nothing, so it decodes as these.
+ */
+export const SHARE_VIEW_FOLLOW_OFFSET_DEFAULT = Object.freeze({
+  range: 2000,
+  heading: 0,
+  pitch: -35,
+});
+
+const EARTH_RADIUS_M = 6_371_000;
+const RAD = Math.PI / 180;
+
+/**
+ * The camera's offset from a followed entity in the entity's local east,
+ * north and up metres: the camera looks along (heading, pitch) at the entity
+ * from `range` metres away. Heading is clockwise from north; a negative pitch
+ * looks down, so the camera sits above the entity.
+ */
+export function followOffsetToEnu({ range, heading, pitch }) {
+  const horizontal = range * Math.cos(pitch * RAD);
+  return {
+    east: -horizontal * Math.sin(heading * RAD),
+    north: -horizontal * Math.cos(heading * RAD),
+    up: -range * Math.sin(pitch * RAD),
+  };
+}
+
+/** The inverse of {@link followOffsetToEnu}, in whole metres and degrees. */
+export function followOffsetFromEnu({ east, north, up }) {
+  const range = Math.hypot(east, north, up);
+  if (!(range > 0)) return null;
+  return {
+    range: Math.round(range),
+    heading: (Math.round(Math.atan2(-east, -north) / RAD) + 360) % 360,
+    pitch: Math.round(Math.asin(Math.max(-1, Math.min(1, -up / range))) / RAD),
+  };
+}
+
+/** Earth-centred position of (lat, lon, alt) on the format's sphere. */
+function toEcef(lat, lon, alt) {
+  const r = EARTH_RADIUS_M + alt;
+  const cosLat = Math.cos(lat * RAD);
+  return [
+    r * cosLat * Math.cos(lon * RAD),
+    r * cosLat * Math.sin(lon * RAD),
+    r * Math.sin(lat * RAD),
+  ];
+}
+
+/** The local east, north and up unit vectors at (lat, lon). */
+function enuBasis(lat, lon) {
+  const sinLat = Math.sin(lat * RAD);
+  const cosLat = Math.cos(lat * RAD);
+  const sinLon = Math.sin(lon * RAD);
+  const cosLon = Math.cos(lon * RAD);
+  return {
+    east: [-sinLon, cosLon, 0],
+    north: [-sinLat * cosLon, -sinLat * sinLon, cosLat],
+    up: [cosLat * cosLon, cosLat * sinLon, sinLat],
+  };
+}
+
+const dot = (a, b) => a[0] * b[0] + a[1] * b[1] + a[2] * b[2];
+
+/**
+ * Where the camera sits while following an entity at `fix` from `offset`,
+ * and how it looks back at the entity, on a sphere of radius 6 371 000 m. A
+ * thing view with a fix stores no camera of its own: this is its camera, and
+ * the place a decoder falls back to. Pure, and computed only from values at
+ * the format's precision, so encoder and decoder agree.
+ */
+export function followCameraFor(fix, offset) {
+  const local = followOffsetToEnu(offset);
+  const at = toEcef(fix.lat, fix.lon, fix.alt);
+  const basis = enuBasis(fix.lat, fix.lon);
+  const camera = [0, 1, 2].map(
+    (i) =>
+      at[i] +
+      local.east * basis.east[i] +
+      local.north * basis.north[i] +
+      local.up * basis.up[i],
+  );
+  const horizontal = Math.hypot(camera[0], camera[1]);
+  const lat = Math.atan2(camera[2], horizontal) / RAD;
+  const lon = Math.atan2(camera[1], camera[0]) / RAD;
+  const alt = Math.hypot(horizontal, camera[2]) - EARTH_RADIUS_M;
+  // The view direction, camera to entity, in the camera's own local frame.
+  const view = [0, 1, 2].map((i) => at[i] - camera[i]);
+  const own = enuBasis(lat, lon);
+  const length = Math.hypot(...view);
+  if (!(length > 0))
+    return { ...fix, heading: offset.heading, pitch: offset.pitch, roll: 0 };
+  return {
+    lat,
+    lon,
+    alt,
+    heading:
+      (Math.atan2(dot(view, own.east), dot(view, own.north)) / RAD + 360) % 360,
+    pitch:
+      Math.asin(Math.max(-1, Math.min(1, dot(view, own.up) / length))) / RAD,
+    roll: 0,
+  };
+}
diff --git a/src/share/legacyShareState.js b/src/share/legacyShareState.js
new file mode 100644
index 000000000..1f54445e4
--- /dev/null
+++ b/src/share/legacyShareState.js
@@ -0,0 +1,119 @@
+/**
+ * Conversion between the long share-link form's parsed state (what
+ * `ShareLinkManager.parseInitialHash()` returns for `#v=2&lat=…`) and the
+ * compact share-view state of viewCodec.js.
+ *
+ * The two use the same field names, so the conversion is small: the compact
+ * form adds `view`, and the long form keeps a followed entity as a tracking
+ * selection inside the layer options instead.
+ */
+
+import {
+  SHARE_TRACKING_RESTORE_POLICIES,
+  createDefaultLayerState,
+  normalizeLayerState,
+} from '../data/layerState.js';
+import {
+  SHARE_VIEW_ENTITY_KINDS,
+  normalizeShareViewState,
+} from './viewCodec.js';
+
+/** Fields of the long form's parsed state, in its own order. */
+export const LEGACY_SHARE_STATE_KEYS = Object.freeze([
+  'lat',
+  'lon',
+  'alt',
+  'heading',
+  'pitch',
+  'roll',
+  'style',
+  'styleParams',
+  'bloom',
+  'sharpen',
+  'bloomIntensity',
+  'bloomVersion',
+  'sharpenIntensity',
+  'hudVariant',
+  'hudVisible',
+  'detectionMode',
+  'detectionDensity',
+  'detectionAllocation',
+  'detectionFadePct',
+  'detectionOutsideOpacityPct',
+  'celestialRing',
+  'scopeEnabled',
+  'scopeFeatherPct',
+  'scopeTerminusPct',
+  'mapStack',
+  'layerState',
+  'layerStateInvalid',
+  'panelState',
+  'sharedAtMs',
+]);
+
+/**
+ * A compact share-view state from a parsed long-form state. A tracking
+ * selection in the layer options becomes a thing view with no offset or
+ * last-known fix, since the long form records neither. Restore bookkeeping
+ * (`restoreAuthority`, `layerStateInvalid`) is not part of a view.
+ */
+export function fromLegacyShareState(parsed) {
+  if (!parsed || typeof parsed !== 'object') return null;
+  const picked = {};
+  for (const key of LEGACY_SHARE_STATE_KEYS) {
+    if (key !== 'layerStateInvalid' && Object.hasOwn(parsed, key))
+      picked[key] = parsed[key];
+  }
+  return normalizeShareViewState(picked);
+}
+
+/**
+ * The parsed long-form state for a compact share-view state, ready for
+ * `ShareLinkManager.applyState`. A thing view's layer is on (in a fresh layer
+ * set when the view has none), and a followed aircraft, military aircraft or
+ * satellite goes back into its layer's tracking selection. The long form
+ * cannot express the rest of a thing view (a vessel, the follow offset, the
+ * last-known fix); callers that need them read `state.view` directly.
+ */
+export function toLegacyShareState(input) {
+  const state = normalizeShareViewState(input);
+  const entry =
+    state.view.kind === 'thing'
+      ? SHARE_VIEW_ENTITY_KINDS.find((e) => e.kind === state.view.entity.kind)
+      : null;
+  let layerState =
+    entry && !state.layerState
+      ? normalizeLayerState({
+          ...createDefaultLayerState(),
+          enabledLayerIds: [entry.layerId],
+        })
+      : state.layerState;
+  const policy = entry?.tracking
+    ? SHARE_TRACKING_RESTORE_POLICIES[entry.tracking]
+    : null;
+  if (
+    layerState &&
+    policy &&
+    layerState.enabledLayerIds.includes(entry.layerId)
+  ) {
+    const id =
+      entry.kind === 'satellite'
+        ? Number(state.view.entity.id)
+        : state.view.entity.id;
+    layerState = normalizeLayerState({
+      ...layerState,
+      options: {
+        ...layerState.options,
+        [policy.optionOwner]: {
+          ...layerState.options[policy.optionOwner],
+          [policy.optionKey]: id,
+        },
+      },
+    });
+  }
+  const legacy = {};
+  for (const key of LEGACY_SHARE_STATE_KEYS) legacy[key] = state[key];
+  legacy.layerState = layerState;
+  legacy.layerStateInvalid = false;
+  return legacy;
+}
diff --git a/src/share/legacyShareState.test.mjs b/src/share/legacyShareState.test.mjs
new file mode 100644
index 000000000..cde3a9ed6
--- /dev/null
+++ b/src/share/legacyShareState.test.mjs
@@ -0,0 +1,308 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { ShareLinkManager } from '../sharelink.js';
+import { createDefaultLayerState } from '../data/layerState.js';
+import { HUD_LAYOUTS } from '../hudLayoutPolicy.js';
+import { VIEW_MAPS, VIEW_STYLES } from '../view/index.js';
+import {
+  HAL_EXAMPLE_HASH,
+  pick,
+  randomLayerState,
+  rng,
+} from '../testSupport/shareViewFixtures.mjs';
+import {
+  SHARE_VIEW_PANELS,
+  SHARE_VIEW_STYLE_PARAMS,
+  decodeShareView,
+  encodeShareView,
+} from './viewCodec.js';
+import { SHARE_VIEW_STYLE_DEFAULTS } from './viewCodec.js';
+import {
+  LEGACY_SHARE_STATE_KEYS,
+  fromLegacyShareState,
+  toLegacyShareState,
+} from './legacyShareState.js';
+
+const DEG = Math.PI / 180;
+
+function stubViewer(camera = {}) {
+  return {
+    camera: {
+      changed: { addEventListener: () => () => {} },
+      positionCartographic: camera.position ?? {
+        latitude: 0,
+        longitude: 0,
+        height: 0,
+      },
+      heading: camera.heading ?? 0,
+      pitch: camera.pitch ?? 0,
+      roll: camera.roll ?? 0,
+    },
+  };
+}
+
+/** The long form's own parser, run on `hash`. */
+function parseLegacy(hash) {
+  const body = hash.startsWith('#') ? hash : `#${hash}`;
+  globalThis.window = {
+    location: { hash: body, href: `http://localhost/${body}` },
+  };
+  const manager = new ShareLinkManager(stubViewer());
+  const parsed = manager.parseInitialHash();
+  manager.destroy();
+  return parsed;
+}
+
+/**
+ * The parsed state as a view: restore bookkeeping removed, and headings and
+ * rolls wrapped into [0, 360) — the codec's one normalization of values the
+ * long-form generator writes (Cesium can round 359.6° up to `roll=360`).
+ */
+function comparable(parsed) {
+  const out = {};
+  for (const key of LEGACY_SHARE_STATE_KEYS) out[key] = parsed[key];
+  // A long link without `sp` leaves the style's parameters as they are; the
+  // compact form says what they are, the style's own unless changed.
+  const ownParams = SHARE_VIEW_STYLE_DEFAULTS[out.style].styleParams;
+  out.styleParams = ownParams ? { ...ownParams, ...out.styleParams } : null;
+  for (const key of ['heading', 'roll'])
+    out[key] = ((out[key] % 360) + 360) % 360;
+  return out;
+}
+
+/** Legacy hash → parsed state → codec → parsed state, asserting equality. */
+function assertLegacyRoundTrip(hash) {
+  const parsed = parseLegacy(hash);
+  assert.ok(parsed, `long form parses: ${hash}`);
+  const state = fromLegacyShareState(parsed);
+  const encoded = encodeShareView(state);
+  const decoded = decodeShareView(encoded, { nowMs: Date.now() });
+  assert.equal(decoded.ok, true, decoded.reason);
+  assert.deepEqual(decoded.state, state, 'codec state survives');
+  assert.deepEqual(
+    toLegacyShareState(decoded.state),
+    comparable(parsed),
+    'parsed long-form state survives',
+  );
+  return { parsed, state, encoded };
+}
+
+test('the HAL example survives the round trip and shrinks to 39 characters', () => {
+  const { parsed, state, encoded } = assertLegacyRoundTrip(HAL_EXAMPLE_HASH);
+  assert.equal(HAL_EXAMPLE_HASH.length, 302);
+  assert.equal(encoded.length, 39);
+  assert.equal(encoded, 'ARCg-SQYrah3ILAJKB4wO1IEAIQAEGIBNMgBC1o');
+  assert.equal(parsed.roll, 360);
+  assert.equal(state.roll, 0);
+  assert.deepEqual(state.layerState.enabledLayerIds, [
+    'ais-live-vessels',
+    'flights',
+    'satellites',
+  ]);
+  assert.equal(state.layerState.options.flights.models3d, true);
+  assert.equal(state.layerState.options.wind.overlay, 'none');
+  assert.deepEqual(
+    state.panelState.specs.find((spec) => spec.id === 'cctv-panel'),
+    { id: 'cctv-panel', collapsed: false, pinned: null },
+  );
+});
+
+test('links from earlier long-form versions keep their historical meaning', () => {
+  for (const hash of [
+    'lat=10&lon=20',
+    'lat=37.7749&lon=-122.4194&alt=800&heading=0&pitch=-35&style=nvg&bloom=1&bi=84&sharpen=0&si=65&hud=tactical&hv=1&dm=BALANCED&dd=50&da=elastic&kf=16&ko=0&cr=0&map=photoreal',
+    'v=2&lat=1&lon=2&l=f&lo=f.m.a',
+    'v=2&lat=1&lon=2&l=',
+    'v=2&lat=1&lon=2&l=k.r&lo=r.f.g-jazz_r.v.35',
+    'v=2&lat=1&lon=2&ui=v.c.0',
+    'v=2&lat=1&lon=2&style=crt&sp=p.500_d.25_i.100',
+    'v=2&lat=1&lon=2&sce=0&scf=999&dm=GOD&dd=10&at=1767225600',
+  ]) {
+    assertLegacyRoundTrip(hash);
+  }
+  // A pre-v2 link's omitted settings are written explicitly, so the compact
+  // form keeps the fallbacks the long form gives them (ko=5, kf=16, scf=35).
+  const old = fromLegacyShareState(parseLegacy('lat=10&lon=20'));
+  assert.deepEqual(
+    [old.detectionOutsideOpacityPct, old.detectionFadePct, old.scopeFeatherPct],
+    [5, 16, 35],
+  );
+  assert.deepEqual(
+    [old.bloomIntensity, old.bloomVersion],
+    [50, 1],
+    'legacy bloom scale',
+  );
+  // `l=f` without `e` is a v2 link with 3D models OFF; the codec writes that.
+  const off = fromLegacyShareState(parseLegacy('v=2&lat=1&lon=2&l=f'));
+  assert.equal(off.layerState.options.flights.models3d, false);
+});
+
+test('a tracking selection becomes a thing view and back', () => {
+  const flights = assertLegacyRoundTrip('v=2&lat=1&lon=2&l=f&lo=f.t.a1b2c3');
+  assert.deepEqual(flights.state.view.entity, {
+    kind: 'aircraft',
+    id: 'a1b2c3',
+  });
+  assert.equal(
+    flights.state.layerState.options.flights.selectedFlightsTrackingId,
+    null,
+  );
+  const military = assertLegacyRoundTrip('v=2&lat=1&lon=2&l=m&lo=f.u.~ae1234');
+  assert.deepEqual(military.state.view.entity, {
+    kind: 'military_aircraft',
+    id: '~ae1234',
+  });
+  const satellite = assertLegacyRoundTrip('v=2&lat=1&lon=2&l=s&lo=s.t.25544');
+  assert.deepEqual(satellite.state.view.entity, {
+    kind: 'satellite',
+    id: '25544',
+  });
+  assert.equal(
+    toLegacyShareState(satellite.state).layerState.options.satellites
+      .selectedSatTrackingId,
+    25544,
+  );
+});
+
+test('thing views the long form cannot express convert without one', () => {
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = ['ais-live-vessels'];
+  const vessel = toLegacyShareState({
+    lat: 1,
+    lon: 2,
+    layerState,
+    view: { kind: 'thing', entity: { kind: 'vessel', id: '366999712' } },
+  });
+  assert.deepEqual(vessel.layerState, layerState);
+});
+
+test('a thing view turns its layer on, with or without a layer set', () => {
+  for (const layerState of [createDefaultLayerState(), null]) {
+    const legacy = toLegacyShareState({
+      layerState,
+      view: { kind: 'thing', entity: { kind: 'aircraft', id: 'a1b2c3' } },
+    });
+    assert.deepEqual(legacy.layerState.enabledLayerIds, ['flights']);
+    assert.equal(
+      legacy.layerState.options.flights.selectedFlightsTrackingId,
+      'a1b2c3',
+    );
+    assert.equal(legacy.layerStateInvalid, false);
+  }
+  const vessel = toLegacyShareState({
+    view: { kind: 'thing', entity: { kind: 'vessel', id: '366999712' } },
+  });
+  assert.deepEqual(vessel.layerState.enabledLayerIds, ['ais-live-vessels']);
+  // A place view without a layer set leaves the recipient's layers alone.
+  assert.equal(toLegacyShareState({ lat: 1, lon: 2 }).layerState, null);
+});
+
+/** A long-form link written by the real generator from random live state. */
+function generatedLegacyHash(random) {
+  const int = (min, max) => min + Math.floor(random() * (max - min + 1));
+  globalThis.window = { location: { hash: '', href: 'http://localhost/' } };
+  const manager = new ShareLinkManager(
+    stubViewer({
+      position: {
+        latitude: (int(-899999, 899999) / 1e4) * DEG,
+        longitude: (int(-1799999, 1799999) / 1e4) * DEG,
+        height: pick(random, [int(-50, 3000), int(0, 30_000_000)]),
+      },
+      heading: int(0, 359) * DEG + (random() < 0.1 ? 0.99 * DEG : 0),
+      pitch: int(-90, 0) * DEG,
+      roll: pick(random, [0, 359.7 * DEG, int(0, 359) * DEG]),
+    }),
+  );
+  const style = pick(random, VIEW_STYLES);
+  manager.onStyleChange(style);
+  const density = pick(random, [0, 25, 50, 75, 100]);
+  manager.onToggleChange(random() < 0.5, random() < 0.5, {
+    bloomIntensity: int(0, 100),
+    bloomVersion: pick(random, [1, 2]),
+    sharpenIntensity: int(0, 100),
+    hudVariant: pick(random, HUD_LAYOUTS),
+    hudVisible: random() < 0.5,
+    detectionMode: pick(random, ['OFF', 'SPARSE', 'BALANCED', 'DENSE']),
+    detectionDensity: density,
+    detectionAllocation: pick(random, ['ELASTIC', 'WEIGHTED']),
+    detectionFadePct: int(0, 40),
+    detectionOutsideOpacityPct: int(0, 100),
+    celestialRingEnabled: random() < 0.5,
+    scopeEnabled: random() < 0.5,
+    scopeFeatherPct: int(0, 200),
+    scopeTerminusPct: random() < 0.3 ? int(94, 100) : null,
+    mapStack: pick(random, VIEW_MAPS),
+  });
+  if (random() < 0.8) {
+    const layerState = randomLayerState(random);
+    manager.setLayerStateProvider(() => layerState);
+  }
+  if (random() < 0.8) {
+    const panelState = {
+      specs: SHARE_VIEW_PANELS.filter(() => random() < 0.9).map((panel) => ({
+        id: panel.id,
+        collapsed: random() < 0.7,
+        ...(panel.pinnable ? { pinned: random() < 0.3 } : {}),
+      })),
+    };
+    manager.setPanelStateProvider(() => panelState);
+  }
+  const specs = SHARE_VIEW_STYLE_PARAMS[style];
+  if (specs && random() < 0.7) {
+    const values = Object.fromEntries(
+      specs.map((spec) => [
+        spec.key,
+        spec.min + (spec.max - spec.min) * random(),
+      ]),
+    );
+    manager.setStyleParamStateProvider(() => values);
+  }
+  const params = manager._buildHashParams();
+  if (random() < 0.7)
+    params.set('at', String(int(1_600_000_000, Math.floor(Date.now() / 1000))));
+  manager.destroy();
+  return params.toString();
+}
+
+test('links written by the long-form generator survive the compact form', () => {
+  const random = rng(0xc0dec);
+  let totalLegacy = 0;
+  let totalCompact = 0;
+  for (let i = 0; i < 400; i += 1) {
+    const hash = generatedLegacyHash(random);
+    const { encoded } = assertLegacyRoundTrip(hash);
+    totalLegacy += hash.length;
+    totalCompact += encoded.length;
+  }
+  // Even random states, far from defaults, are under half the length.
+  assert.ok(
+    totalCompact * 2 < totalLegacy,
+    `${totalCompact} vs ${totalLegacy}`,
+  );
+});
+
+test('the converter ignores non-objects and restore bookkeeping', () => {
+  // A malformed v2 layer list is reported by the long-form parser; the view
+  // itself simply has no layer set.
+  const invalid = parseLegacy('v=2&lat=1&lon=2&l=f.unknown');
+  assert.equal(invalid.layerStateInvalid, true);
+  assert.equal(fromLegacyShareState(invalid).layerState, null);
+  assert.equal(fromLegacyShareState(null), null);
+  const parsed = parseLegacy(HAL_EXAMPLE_HASH);
+  assert.ok(parsed.restoreAuthority);
+  const state = fromLegacyShareState(parsed);
+  assert.equal(Object.hasOwn(state, 'restoreAuthority'), false);
+  assert.equal(Object.hasOwn(state, 'layerStateInvalid'), false);
+});
+
+test('the converter knows every key of the long form’s parsed state', () => {
+  // A key the converter does not list would silently drop out of share codes.
+  globalThis.window = { location: { hash: '', href: 'http://localhost/' } };
+  const manager = new ShareLinkManager(stubViewer({}));
+  const parsed = manager._parseShareHash('v=2&lat=1&lon=2');
+  assert.deepEqual(
+    Object.keys(parsed).sort(),
+    [...LEGACY_SHARE_STATE_KEYS].sort(),
+  );
+  manager.destroy();
+});
diff --git a/src/share/shareLinkPath.js b/src/share/shareLinkPath.js
new file mode 100644
index 000000000..ee52a235f
--- /dev/null
+++ b/src/share/shareLinkPath.js
@@ -0,0 +1,56 @@
+/**
+ * Share-link addresses: a share code travels in the path, `<app>/share/<code>`,
+ * where `<app>` is wherever the app is served (the origin's root, or a base
+ * path). The same code opens on any copy of the app.
+ *
+ * Pure: no DOM. Callers pass the addresses they have.
+ */
+
+/** The path segment that introduces a share code. */
+export const SHARE_PATH_SEGMENT = 'share';
+
+// Any last segment counts as a code here, so a mangled one is refused by the
+// decoder (and said so) rather than opening the app at a wrong address.
+const SHARE_PATH = new RegExp(`^(.*/)${SHARE_PATH_SEGMENT}/([^/]+)/?$`);
+
+/**
+ * The share code and the app's base path for a share-link pathname, or null
+ * when the pathname is not a share link. `/share/AQc` gives
+ * `{ code: 'AQc', basePath: '/' }`; `/gev/share/AQc` gives basePath `/gev/`.
+ */
+export function parseSharePath(pathname) {
+  if (typeof pathname !== 'string') return null;
+  const match = SHARE_PATH.exec(pathname);
+  if (!match) return null;
+  let code = match[2];
+  try {
+    code = decodeURIComponent(code);
+  } catch {
+    // Left as written; the decoder refuses it.
+  }
+  return { code, basePath: match[1] };
+}
+
+/**
+ * The app's root address for `href`: the base path of a share link, or the
+ * directory of any other page, with no hash. The query is kept.
+ */
+export function appRootUrl(href) {
+  const url = new URL(href);
+  url.hash = '';
+  const share = parseSharePath(url.pathname);
+  url.pathname = share ? share.basePath : new URL('./', url).pathname;
+  return url;
+}
+
+/**
+ * The share link for `code` on the app at `href`. The sender's `?lang` stays
+ * behind: the recipient keeps their own language.
+ */
+export function shareLinkUrl(code, href) {
+  const root = appRootUrl(href);
+  const url = new URL(`${SHARE_PATH_SEGMENT}/${code}`, root);
+  url.search = root.search;
+  url.searchParams.delete('lang');
+  return url.href;
+}
diff --git a/src/share/shareLinkPath.test.mjs b/src/share/shareLinkPath.test.mjs
new file mode 100644
index 000000000..aab06741d
--- /dev/null
+++ b/src/share/shareLinkPath.test.mjs
@@ -0,0 +1,45 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { appRootUrl, parseSharePath, shareLinkUrl } from './shareLinkPath.js';
+
+test('a share path names its code and the app base path', () => {
+  assert.deepEqual(parseSharePath('/share/AQc'), {
+    code: 'AQc',
+    basePath: '/',
+  });
+  assert.deepEqual(parseSharePath('/gev/share/AQc/'), {
+    code: 'AQc',
+    basePath: '/gev/',
+  });
+  // A mangled code is still a share link, so the app refuses it out loud.
+  assert.equal(parseSharePath('/share/AQ.c').code, 'AQ.c');
+  for (const path of ['/', '/share', '/share/', '/share/a/b', '/sharex/AQc'])
+    assert.equal(parseSharePath(path), null, path);
+  assert.equal(parseSharePath(undefined), null);
+});
+
+test('the app root drops a share path and the hash, and keeps the query', () => {
+  assert.equal(
+    appRootUrl('https://gev.example/share/AQc?qa=1#v=2').href,
+    'https://gev.example/?qa=1',
+  );
+  assert.equal(
+    appRootUrl('http://localhost:4173/gev/share/AQc').href,
+    'http://localhost:4173/gev/',
+  );
+  assert.equal(
+    appRootUrl('https://gev.example/index.html#v=2&lat=1').href,
+    'https://gev.example/',
+  );
+});
+
+test('a share link sits under the app root without the sender ?lang', () => {
+  assert.equal(
+    shareLinkUrl('AQc', 'https://gev.example/?lang=ru#v=2&lat=1'),
+    'https://gev.example/share/AQc',
+  );
+  assert.equal(
+    shareLinkUrl('AQc', 'https://gev.example/gev/share/old?qa=1&lang=es'),
+    'https://gev.example/gev/share/AQc?qa=1',
+  );
+});
diff --git a/src/share/viewCodec.js b/src/share/viewCodec.js
new file mode 100644
index 000000000..84ba8fbc1
--- /dev/null
+++ b/src/share/viewCodec.js
@@ -0,0 +1,1399 @@
+/**
+ * Compact share-view codec, format version 1.
+ *
+ * A shared view travels as a short code in a link's path, `/share/<code>`. The
+ * code is base64url text for one version byte, protobuf-style tag-length-value
+ * fields and a one-byte CRC-8 check. Settings equal to their default are
+ * omitted, and the decoder fills them back in from the same defaults table the
+ * encoder reads. Older decoders skip fields they do not know, so new fields
+ * never break old links or old apps.
+ *
+ * The rules that keep links valid forever (field numbers, codes and defaults
+ * are permanent) are in docs/SHARE-LINK-FORMAT.md. Read them before changing
+ * anything in this file.
+ *
+ * Pure: no DOM, no Cesium. The long `#v=2&lat=…` form is still parsed by
+ * sharelink.js; legacyShareState.js converts between the two.
+ */
+
+import {
+  LAYER_STATE_REGISTRY,
+  LAYER_STATE_TOKEN_ALPHABET,
+  REGISTRY_BY_ID,
+  SHARE_TRACKING_RESTORE_POLICIES,
+  TRACKING_ID_GRAMMAR,
+  normalizeLayerState,
+  optionSpecs,
+} from '../data/layerState.js';
+import {
+  migrateDetectionState,
+  normalizeAllocationStrategy,
+} from '../data/detectionPolicy.js';
+import { clampScopeFeatherPct } from '../scopeMaskPolicy.js';
+import { VIEW_STYLES } from '../view/index.js';
+import {
+  GLOBAL_POST_DEFAULTS,
+  STYLE_PRESET_DEFAULTS,
+  STYLES,
+} from '../ui/visualPresets.js';
+import {
+  SHARE_VIEW_ENTITY_KINDS,
+  SHARE_VIEW_FOLLOW_OFFSET_DEFAULT,
+  followCameraFor,
+} from './follow.js';
+import {
+  MAX_ZIGZAG_MAGNITUDE,
+  ShareWireError,
+  WIRE_LEN,
+  WIRE_VARINT,
+  WireReader,
+  WireWriter,
+  asciiText,
+  decodeBase64Url,
+  asciiBytes,
+  crc8,
+  encodeBase64Url,
+  unzigzag,
+  zigzag,
+} from './wire.js';
+
+export {
+  SHARE_VIEW_ENTITY_KINDS,
+  SHARE_VIEW_FOLLOW_OFFSET_DEFAULT,
+  followCameraFor,
+  followOffsetFromEnu,
+  followOffsetToEnu,
+} from './follow.js';
+
+/** First payload byte. Bump only for a change older decoders must refuse. */
+export const SHARE_VIEW_FORMAT_VERSION = 1;
+/** Input bound, checked before any decoding work (1536 payload bytes). */
+export const MAX_SHARE_VIEW_CHARS = 2048;
+
+/** Created-at and observed-at seconds are stored relative to this instant. */
+export const SHARE_VIEW_EPOCH_S = Date.UTC(2026, 0, 1) / 1000;
+
+/** Coordinates are stored as integer multiples of this many degrees (≈11 m). */
+const COORDINATE_SCALE = 1e4;
+const MAX_ALTITUDE_M = 1e9;
+const MAX_FOLLOW_RANGE_M = 1e8;
+const MAX_UNSIGNED_SETTING = 1e6;
+/** Terminus pin range; mirrors SCOPE_TERMINUS_MIN/MAX_PCT in scopeMask.js. */
+const SCOPE_TERMINUS_MIN_PCT = 94;
+const SCOPE_TERMINUS_MAX_PCT = 100;
+const NAME_GRAMMAR = /^[A-Za-z0-9_-]{1,32}$/;
+const MAX_OPTION_VALUE_CHARS = 256;
+
+const freezeAll = (rows) =>
+  Object.freeze(rows.map((row) => Object.freeze(row)));
+
+/**
+ * Enum code tables. A code is permanent: append new names, never renumber or
+ * reuse. A name missing from its table still travels, as text in the same
+ * field (wire type LEN), so the app can grow faster than this table.
+ */
+export const SHARE_VIEW_ENUMS = Object.freeze({
+  viewKind: Object.freeze(['place', 'thing']),
+  style: Object.freeze([
+    'normal',
+    'retro',
+    'surveillance',
+    'thermal',
+    'anime',
+    'noir',
+    'snow',
+  ]),
+  mapStack: Object.freeze([
+    'photoreal',
+    'bing-aerial',
+    'bing-labels',
+    'esri-imagery',
+    'osm',
+  ]),
+  hudVariant: Object.freeze(['tactical', 'operator', 'minimal', 'cyber']),
+  detectionMode: Object.freeze(['OFF', 'SPARSE', 'BALANCED', 'DENSE']),
+  detectionAllocation: Object.freeze(['ELASTIC', 'WEIGHTED']),
+});
+
+const ENTITY_BY_KIND = new Map(SHARE_VIEW_ENTITY_KINDS.map((e) => [e.kind, e]));
+const ENTITY_BY_CODE = new Map(SHARE_VIEW_ENTITY_KINDS.map((e) => [e.code, e]));
+
+/**
+ * Shareable panels, numbered permanently. `collapsed` and `pinned` are the
+ * frozen meaning of an omitted entry (the layout a fresh session shows today),
+ * not a live default: if the app's default moves, this table does not.
+ * `token` is the panel's letter in the long form's `ui` parameter.
+ */
+export const SHARE_VIEW_PANELS = freezeAll([
+  {
+    number: 0,
+    id: 'control-panel',
+    token: 'c',
+    pinnable: true,
+    collapsed: true,
+  },
+  {
+    number: 1,
+    id: 'location-bar',
+    token: 'l',
+    pinnable: true,
+    collapsed: true,
+  },
+  { number: 2, id: 'data-panel', token: 'd', pinnable: false, collapsed: true },
+  { number: 3, id: 'cctv-panel', token: 'v', pinnable: false, collapsed: true },
+  {
+    number: 4,
+    id: 'recent-imagery-panel',
+    token: 'i',
+    pinnable: false,
+    collapsed: false,
+  },
+  {
+    number: 5,
+    id: 'street-level-panel',
+    token: 't',
+    pinnable: false,
+    collapsed: true,
+  },
+  {
+    number: 6,
+    id: 'radio-panel',
+    token: 'r',
+    pinnable: false,
+    collapsed: true,
+  },
+  {
+    number: 7,
+    id: 'scene-panel',
+    token: 's',
+    pinnable: false,
+    collapsed: true,
+  },
+  {
+    number: 8,
+    id: 'global-context-panel',
+    token: 'g',
+    pinnable: false,
+    collapsed: true,
+  },
+  { number: 9, id: 'pp-toggles', token: 'p', pinnable: false, collapsed: true },
+  {
+    number: 10,
+    id: 'param-slider-panel',
+    token: 'm',
+    pinnable: false,
+    collapsed: false,
+  },
+]);
+const PANEL_BY_NUMBER = new Map(SHARE_VIEW_PANELS.map((p) => [p.number, p]));
+const PANEL_BY_ID = new Map(SHARE_VIEW_PANELS.map((p) => [p.id, p]));
+
+/**
+ * Shareable visual-preset parameters per style, as in the long form's `sp`
+ * parameter: values are stored ×100 after clamping to [min, max]. A
+ * parameter's token is permanent within its style.
+ */
+export const SHARE_VIEW_STYLE_PARAMS = Object.freeze({
+  retro: freezeAll([
+    { key: 'pixelation', token: 'p', min: 1, max: 10 },
+    { key: 'distortion', token: 'd', min: 0, max: 1 },
+    { key: 'instability', token: 'i', min: 0, max: 1 },
+  ]),
+  surveillance: freezeAll([
+    { key: 'gain', token: 'g', min: 0, max: 1 },
+    { key: 'bloom', token: 'b', min: 0, max: 1 },
+    { key: 'scanlineStr', token: 's', min: 0, max: 1 },
+    { key: 'pixelation', token: 'p', min: 1, max: 6 },
+  ]),
+  thermal: freezeAll([
+    { key: 'sensitivity', token: 's', min: 0, max: 1 },
+    { key: 'bloom', token: 'b', min: 0, max: 1 },
+    { key: 'mode', token: 'm', min: 0, max: 1 },
+    { key: 'pixelation', token: 'p', min: 1, max: 6 },
+    { key: 'palette', token: 'a', min: 0, max: 1 },
+  ]),
+  anime: freezeAll([
+    { key: 'saturation', token: 's', min: 0, max: 2 },
+    { key: 'edgeThick', token: 'e', min: 0, max: 1 },
+  ]),
+  noir: freezeAll([
+    { key: 'contrastAmt', token: 'c', min: 0, max: 2 },
+    { key: 'grainAmt', token: 'g', min: 0, max: 1 },
+    { key: 'vignetteAmt', token: 'v', min: 0, max: 1 },
+  ]),
+  snow: freezeAll([
+    { key: 'density', token: 'd', min: 0, max: 1 },
+    { key: 'wind', token: 'w', min: 0, max: 1 },
+  ]),
+});
+
+/**
+ * The default of a setting a style applies when it is selected: the value
+ * comes from SHARE_VIEW_STYLE_DEFAULTS for the view's style, so a view that
+ * keeps its style's look costs nothing for it.
+ */
+export const BY_STYLE = 'by-style';
+
+/**
+ * Booleans share one varint (field 9). Bit `bit` is set when the value
+ * DIFFERS from `default`, so an absent field means "all defaults" and a bit
+ * an older decoder does not know is harmless. Bits are permanent.
+ */
+export const SHARE_VIEW_FLAGS = freezeAll([
+  { bit: 0, key: 'bloom', default: BY_STYLE },
+  { bit: 1, key: 'sharpen', default: BY_STYLE },
+  { bit: 2, key: 'hudVisible', default: BY_STYLE },
+  { bit: 3, key: 'celestialRing', default: BY_STYLE },
+  { bit: 4, key: 'scopeEnabled', default: true },
+]);
+
+/**
+ * What an omitted layer option means, per option owner and key. Frozen like
+ * every other default here: it is today's app default, and it stays even if
+ * that default moves (the long form learned this with `models3d`). A new
+ * option needs an entry before it ships; until it has one it is always
+ * written explicitly.
+ */
+export const SHARE_VIEW_LAYER_OPTION_ABSENT = Object.freeze({
+  traffic: Object.freeze({ roadMode: null }),
+  'weather-lightning': Object.freeze({ opacity: 'strong' }),
+  'weather-radar': Object.freeze({ opacity: 'strong' }),
+  'weather-satellite': Object.freeze({
+    infrared: 100,
+    opacity: 'strong',
+    product: 'clouds-regional',
+  }),
+  wind: Object.freeze({
+    model: 'gfs',
+    overlay: 'none',
+    units: 'km/h',
+    paused: false,
+  }),
+  flights: Object.freeze({
+    models3d: true,
+    models3dMode: 'proximity',
+    selectedFlightsTrackingId: null,
+    selectedMilitaryTrackingId: null,
+  }),
+  satellites: Object.freeze({ catalog: 'core', selectedSatTrackingId: null }),
+  cctv: Object.freeze({
+    coverageMode: 'on',
+    showProjection: true,
+    autoHop: false,
+  }),
+  'recent-imagery': Object.freeze({
+    west: null,
+    south: null,
+    east: null,
+    north: null,
+    a: null,
+    b: null,
+    mode: 0,
+    split: 50,
+    viirs: false,
+  }),
+  'street-level': Object.freeze({
+    mapillary: true,
+    providerSwitches: '',
+    pano: 'all',
+    sinceDays: 0,
+  }),
+  radio: Object.freeze({ filter: 'all', volume: 0.8 }),
+});
+
+/** The frozen meaning of an omitted option; unlisted options are always written. */
+function layerOptionAbsentValue(ownerId, spec) {
+  const owner = SHARE_VIEW_LAYER_OPTION_ABSENT[ownerId];
+  return owner && Object.hasOwn(owner, spec.key) ? owner[spec.key] : undefined;
+}
+
+/**
+ * The top-level field registry. Numbers are permanent and never reused; a
+ * retired field stays listed with `retired: true`. Defaults are the frozen
+ * meaning of an omitted field. Types:
+ *   uint    unsigned varint            sint   zigzag varint
+ *   angle   whole degrees in [0, 360), stored as zigzag of (-180, 180]
+ *   coord   zigzag varint of degrees × 1e4
+ *   enum    varint code from SHARE_VIEW_ENUMS, or LEN text for other names
+ *   epoch   zigzag varint of seconds since SHARE_VIEW_EPOCH_S
+ *   flags   varint bitset, see SHARE_VIEW_FLAGS
+ *   bytes   LEN, structure documented per field
+ */
+export const SHARE_VIEW_FIELDS = freezeAll([
+  { number: 1, key: 'view', type: 'enum', enum: 'viewKind', default: 'place' },
+  { number: 2, key: 'lat', type: 'coord', default: 0 },
+  { number: 3, key: 'lon', type: 'coord', default: 0 },
+  { number: 4, key: 'alt', type: 'sint', default: 800 },
+  { number: 5, key: 'heading', type: 'angle', default: 0 },
+  { number: 6, key: 'pitch', type: 'sint', default: -35 },
+  { number: 7, key: 'roll', type: 'angle', default: 0 },
+  { number: 8, key: 'sharedAtMs', type: 'epoch', default: null },
+  { number: 9, key: 'flags', type: 'flags', default: 0 },
+  { number: 10, key: 'layerState', type: 'bytes', default: null },
+  { number: 11, key: 'layerOptions', type: 'bytes', default: null },
+  { number: 12, key: 'panelState', type: 'bytes', default: null },
+  { number: 13, key: 'thing', type: 'bytes', default: null },
+  { number: 14, key: 'style', type: 'enum', enum: 'style', default: 'normal' },
+  {
+    number: 15,
+    key: 'mapStack',
+    type: 'enum',
+    enum: 'mapStack',
+    default: 'photoreal',
+  },
+  {
+    number: 16,
+    key: 'hudVariant',
+    type: 'enum',
+    enum: 'hudVariant',
+    default: BY_STYLE,
+  },
+  { number: 17, key: 'bloomIntensity', type: 'uint', default: BY_STYLE },
+  { number: 18, key: 'bloomVersion', type: 'uint', default: 2 },
+  { number: 19, key: 'sharpenIntensity', type: 'uint', default: BY_STYLE },
+  {
+    number: 20,
+    key: 'detectionMode',
+    type: 'enum',
+    enum: 'detectionMode',
+    default: BY_STYLE,
+  },
+  { number: 21, key: 'detectionDensity', type: 'uint', default: BY_STYLE },
+  {
+    number: 22,
+    key: 'detectionAllocation',
+    type: 'enum',
+    enum: 'detectionAllocation',
+    default: BY_STYLE,
+  },
+  { number: 23, key: 'detectionFadePct', type: 'uint', default: BY_STYLE },
+  {
+    number: 24,
+    key: 'detectionOutsideOpacityPct',
+    type: 'uint',
+    default: BY_STYLE,
+  },
+  { number: 25, key: 'scopeFeatherPct', type: 'uint', default: 100 },
+  { number: 26, key: 'scopeTerminusPct', type: 'uint', default: null },
+  { number: 27, key: 'styleParams', type: 'bytes', default: BY_STYLE },
+]);
+const FIELD_BY_KEY = new Map(SHARE_VIEW_FIELDS.map((f) => [f.key, f]));
+const fieldNumber = (key) => FIELD_BY_KEY.get(key).number;
+
+/**
+ * Fields inside the thing message (top-level field 13). Permanent. Fields 1–4
+ * are the entity ids, one per SHARE_VIEW_ENTITY_KINDS code; exactly one is
+ * present. The follow offset and the last-known fix are flat fields here, not
+ * sub-messages, to save their tag and length bytes.
+ */
+export const SHARE_VIEW_THING_FIELDS = Object.freeze({
+  range: 5, // uint metres from the entity to the camera
+  heading: 6, // angle, the camera's heading while following
+  pitch: 7, // sint whole degrees, the camera's pitch while following
+  lat: 8, // coord, the entity's last-known latitude
+  lon: 9, // coord, its last-known longitude
+  alt: 10, // sint metres, its last-known altitude
+  ageS: 11, // sint, seconds the fix predates the created-at time (field 8)
+  observedAt: 12, // epoch, when the fix was taken; only without a created-at
+});
+
+/** The default of a field or flag for a view in `style`. */
+function defaultOf(entry, style) {
+  if (entry.default !== BY_STYLE) return entry.default;
+  const defaults =
+    SHARE_VIEW_STYLE_DEFAULTS[style] ?? SHARE_VIEW_STYLE_DEFAULTS.normal;
+  return defaults[entry.key];
+}
+
+/**
+ * The complete default state for a view in `style` (Normal when omitted):
+ * what a payload with only that style decodes to.
+ */
+export function createDefaultShareViewState(requested = 'normal') {
+  const style = VIEW_STYLES.includes(requested) ? requested : 'normal';
+  const state = { view: { kind: 'place' } };
+  for (const field of SHARE_VIEW_FIELDS) {
+    if (field.key === 'view' || field.key === 'flags') continue;
+    if (field.key === 'thing' || field.key === 'layerOptions') continue;
+    state[field.key] =
+      field.key === 'style' ? style : structuredClone(defaultOf(field, style));
+  }
+  for (const flag of SHARE_VIEW_FLAGS) state[flag.key] = defaultOf(flag, style);
+  return state;
+}
+
+/* ------------------------------------------------------------------ */
+/* Normalization: the one canonical state both directions agree on.    */
+/* ------------------------------------------------------------------ */
+
+const finite = (value) =>
+  typeof value === 'number'
+    ? Number.isFinite(value)
+    : typeof value === 'string' &&
+      value.trim() !== '' &&
+      Number.isFinite(Number(value));
+const clamp = (value, min, max) => Math.min(max, Math.max(min, value));
+
+// `+ 0` turns -0 into 0, which is what the decoder produces.
+function intOr(value, fallback, min, max) {
+  return finite(value)
+    ? clamp(Math.round(Number(value)), min, max) + 0
+    : fallback;
+}
+
+function wrapAngle(value, fallback = 0) {
+  if (!finite(value)) return fallback;
+  return ((Math.round(Number(value)) % 360) + 360) % 360;
+}
+
+function latitudeOr(value, fallback) {
+  if (!finite(value)) return fallback;
+  return (
+    Math.round(clamp(Number(value), -90, 90) * COORDINATE_SCALE) /
+      COORDINATE_SCALE +
+    0
+  );
+}
+
+function longitudeOr(value, fallback) {
+  if (!finite(value)) return fallback;
+  let lon = Number(value);
+  // Wrap before scaling, so a huge finite input cannot overflow to NaN.
+  if (lon < -180 || lon > 180) lon = ((((lon + 180) % 360) + 360) % 360) - 180;
+  return Math.round(lon * COORDINATE_SCALE) / COORDINATE_SCALE + 0;
+}
+
+function epochMsOr(value) {
+  if (!finite(value)) return null;
+  const seconds = Math.floor(Number(value) / 1000);
+  return seconds >= 1 && Number.isSafeInteger(seconds * 1000)
+    ? seconds * 1000
+    : null;
+}
+
+function nameOr(value, fallback) {
+  return typeof value === 'string' && NAME_GRAMMAR.test(value)
+    ? value
+    : fallback;
+}
+
+function normalizeEntityId(entry, value) {
+  if (value === null || value === undefined) return null;
+  const raw =
+    typeof value === 'number' && Number.isFinite(value)
+      ? String(value)
+      : typeof value === 'string'
+        ? value.trim().toLowerCase()
+        : null;
+  if (raw === null || !TRACKING_ID_GRAMMAR.test(raw)) return null;
+  if (entry.kind === 'satellite' && !/^[1-9]\d{0,14}$/.test(raw)) return null;
+  return raw;
+}
+
+function normalizeStyleParams(style, values) {
+  const registry = SHARE_VIEW_STYLE_PARAMS[style];
+  if (!registry || !values || typeof values !== 'object') return null;
+  const out = {};
+  for (const spec of registry) {
+    if (!Object.hasOwn(values, spec.key) || !finite(values[spec.key])) continue;
+    out[spec.key] =
+      Math.round(clamp(Number(values[spec.key]), spec.min, spec.max) * 100) /
+      100;
+  }
+  return Object.keys(out).length ? out : null;
+}
+
+/**
+ * What each style leaves the shareable settings at when it is selected in a
+ * fresh session: the app's first-load baseline (GLOBAL_POST_DEFAULTS), with
+ * the style's own preset (STYLE_PRESET_DEFAULTS) on top, and its shader
+ * parameters at their defaults (the preset's, else the shader's). Read from
+ * the tables the app applies, so a fresh view in any style encodes as its
+ * camera and style alone.
+ *
+ * These are format v1's frozen meanings. If the app's tables move, the test
+ * that pins this table fails: freeze the old values here then, rather than
+ * letting old links change meaning.
+ */
+export const SHARE_VIEW_STYLE_DEFAULTS = Object.freeze(
+  Object.fromEntries(
+    VIEW_STYLES.map((style) => {
+      const g = GLOBAL_POST_DEFAULTS;
+      const preset = STYLE_PRESET_DEFAULTS[style] ?? {};
+      const detection = migrateDetectionState(
+        preset.detection?.mode?.toUpperCase?.() ?? g.detectionMode,
+        preset.detection?.densityPct ?? g.detectionDensity,
+        g.detectionDensity,
+      );
+      const params = {};
+      for (const spec of SHARE_VIEW_STYLE_PARAMS[style] ?? []) {
+        const value =
+          preset.styleParams?.[style]?.[spec.key] ??
+          STYLES[style]?.uniforms?.[spec.key]?.default;
+        if (finite(value)) params[spec.key] = value;
+      }
+      return [
+        style,
+        Object.freeze({
+          bloom: preset.bloom?.enabled ?? g.bloom.enabled,
+          bloomIntensity: preset.bloom?.intensity ?? g.bloom.intensity,
+          sharpen: preset.sharpen?.enabled ?? g.sharpen.enabled,
+          sharpenIntensity: preset.sharpen?.intensity ?? g.sharpen.intensity,
+          hudVariant: preset.hudVariant ?? g.hudVariant,
+          hudVisible: preset.hudVisible ?? g.hudVisible,
+          detectionMode: detection.enabled ? detection.profile : 'OFF',
+          detectionDensity: detection.densityPct,
+          detectionAllocation: normalizeAllocationStrategy(
+            g.detectionAllocation,
+          ),
+          detectionFadePct: g.detectionFadePct,
+          detectionOutsideOpacityPct: g.detectionOutsideOpacityPct,
+          // Leaving Normal switches the ring off (VisualSettings.setStyle).
+          celestialRing: style === 'normal' ? g.celestialRing : false,
+          styleParams: Object.freeze(normalizeStyleParams(style, params)),
+        }),
+      ];
+    }),
+  ),
+);
+
+function normalizePanelState(panelState) {
+  if (!panelState || !Array.isArray(panelState.specs)) return null;
+  const byId = new Map();
+  for (const spec of panelState.specs) {
+    if (spec && PANEL_BY_ID.has(spec.id) && typeof spec.collapsed === 'boolean')
+      byId.set(spec.id, spec);
+  }
+  const specs = [];
+  for (const panel of SHARE_VIEW_PANELS) {
+    const spec = byId.get(panel.id);
+    if (!spec) continue;
+    specs.push({
+      id: panel.id,
+      collapsed: spec.collapsed,
+      pinned:
+        panel.pinnable && typeof spec.pinned === 'boolean' ? spec.pinned : null,
+    });
+  }
+  return specs.length ? { specs } : null;
+}
+
+function normalizeFollowOffset(offset) {
+  const d = SHARE_VIEW_FOLLOW_OFFSET_DEFAULT;
+  const source = offset && typeof offset === 'object' ? offset : {};
+  return {
+    range: intOr(source.range, d.range, 1, MAX_FOLLOW_RANGE_M),
+    heading: wrapAngle(source.heading, d.heading),
+    pitch: intOr(source.pitch, d.pitch, -90, 90),
+  };
+}
+
+function normalizeLastKnown(fix) {
+  if (!fix || typeof fix !== 'object') return null;
+  if (!finite(fix.lat) || !finite(fix.lon)) return null;
+  return {
+    lat: latitudeOr(fix.lat, 0),
+    lon: longitudeOr(fix.lon, 0),
+    alt: intOr(fix.alt, 0, -MAX_ALTITUDE_M, MAX_ALTITUDE_M),
+    observedAtMs: epochMsOr(fix.observedAtMs),
+  };
+}
+
+function thingView(kind, id, offset = null, lastKnown = null) {
+  return {
+    kind: 'thing',
+    entity: { kind, id },
+    offset: normalizeFollowOffset(offset),
+    lastKnown: normalizeLastKnown(lastKnown),
+  };
+}
+
+function normalizeView(view) {
+  if (view?.kind !== 'thing') return { kind: 'place' };
+  const entry = ENTITY_BY_KIND.get(view.entity?.kind);
+  const id = entry ? normalizeEntityId(entry, view.entity?.id) : null;
+  if (!id) return { kind: 'place' };
+  return thingView(entry.kind, id, view.offset, view.lastKnown);
+}
+
+/** The camera fields of `state`, at the format's precision. */
+function setCamera(state, camera) {
+  state.lat = latitudeOr(camera.lat, 0);
+  state.lon = longitudeOr(camera.lon, 0);
+  state.alt = intOr(camera.alt, 0, -MAX_ALTITUDE_M, MAX_ALTITUDE_M);
+  state.heading = wrapAngle(camera.heading, 0);
+  state.pitch = intOr(camera.pitch, 0, -90, 90);
+  state.roll = wrapAngle(camera.roll, 0);
+}
+
+/**
+ * Lift a long-form tracking selection out of the layer options into a thing
+ * view. In this format the view, not a layer option, says what is followed.
+ */
+function liftTrackedEntity(layerState, view) {
+  let lifted = view;
+  for (const entry of SHARE_VIEW_ENTITY_KINDS) {
+    const policy = entry.tracking
+      ? SHARE_TRACKING_RESTORE_POLICIES[entry.tracking]
+      : null;
+    if (!policy) continue;
+    const options = layerState.options[policy.optionOwner];
+    const id = normalizeEntityId(entry, options[policy.optionKey]);
+    options[policy.optionKey] = null;
+    if (id && lifted.kind === 'place') lifted = thingView(entry.kind, id);
+  }
+  return lifted;
+}
+
+/**
+ * The canonical form of a share-view state. Missing or invalid fields take
+ * their defaults, numbers take the format's precision, and a long-form
+ * tracking selection becomes a thing view. A thing view with a last-known fix
+ * takes its camera from the fix and the follow offset, and a thing view's
+ * layer is always on. `decodeShareView` returns this
+ * form, and `encodeShareView(state)` decodes back to `normalizeShareViewState(state)`.
+ */
+export function normalizeShareViewState(input = {}) {
+  const source = input && typeof input === 'object' ? input : {};
+  const style = VIEW_STYLES.includes(source.style) ? source.style : 'normal';
+  // Style-applied settings default to what this style applies.
+  const d = createDefaultShareViewState(style);
+  const state = {};
+  state.lat = latitudeOr(source.lat, d.lat);
+  state.lon = longitudeOr(source.lon, d.lon);
+  state.alt = intOr(source.alt, d.alt, -MAX_ALTITUDE_M, MAX_ALTITUDE_M);
+  state.heading = wrapAngle(source.heading, d.heading);
+  state.pitch = intOr(source.pitch, d.pitch, -90, 90);
+  state.roll = wrapAngle(source.roll, d.roll);
+  state.style = style;
+  // The style's own parameters, with any valid ones the source sets on top.
+  state.styleParams = normalizeStyleParams(style, {
+    ...d.styleParams,
+    ...normalizeStyleParams(style, source.styleParams),
+  });
+  for (const flag of SHARE_VIEW_FLAGS)
+    state[flag.key] =
+      typeof source[flag.key] === 'boolean' ? source[flag.key] : d[flag.key];
+  state.bloomIntensity = intOr(
+    source.bloomIntensity,
+    d.bloomIntensity,
+    0,
+    MAX_UNSIGNED_SETTING,
+  );
+  state.bloomVersion = intOr(
+    source.bloomVersion,
+    d.bloomVersion,
+    0,
+    MAX_UNSIGNED_SETTING,
+  );
+  state.sharpenIntensity = intOr(
+    source.sharpenIntensity,
+    d.sharpenIntensity,
+    0,
+    MAX_UNSIGNED_SETTING,
+  );
+  state.hudVariant = nameOr(source.hudVariant, d.hudVariant);
+  const detection = migrateDetectionState(
+    typeof source.detectionMode === 'string' && source.detectionMode
+      ? source.detectionMode
+      : d.detectionMode,
+    finite(source.detectionDensity)
+      ? Number(source.detectionDensity)
+      : d.detectionDensity,
+    d.detectionDensity,
+  );
+  state.detectionMode = detection.enabled ? detection.profile : 'OFF';
+  state.detectionDensity = detection.densityPct;
+  state.detectionAllocation = normalizeAllocationStrategy(
+    source.detectionAllocation,
+    d.detectionAllocation,
+  );
+  state.detectionFadePct = intOr(
+    source.detectionFadePct,
+    d.detectionFadePct,
+    0,
+    40,
+  );
+  state.detectionOutsideOpacityPct = intOr(
+    source.detectionOutsideOpacityPct,
+    d.detectionOutsideOpacityPct,
+    0,
+    100,
+  );
+  state.scopeFeatherPct = finite(source.scopeFeatherPct)
+    ? clampScopeFeatherPct(Number(source.scopeFeatherPct))
+    : d.scopeFeatherPct;
+  state.scopeTerminusPct = intOr(
+    source.scopeTerminusPct,
+    null,
+    SCOPE_TERMINUS_MIN_PCT,
+    SCOPE_TERMINUS_MAX_PCT,
+  );
+  state.mapStack = nameOr(source.mapStack, d.mapStack);
+  state.layerState = source.layerState
+    ? normalizeLayerState(source.layerState)
+    : null;
+  state.panelState = normalizePanelState(source.panelState);
+  state.sharedAtMs = epochMsOr(source.sharedAtMs);
+  let view = normalizeView(source.view);
+  if (state.layerState) view = liftTrackedEntity(state.layerState, view);
+  if (view.kind === 'thing') {
+    // A fix without its own time is as of the link's creation.
+    if (view.lastKnown?.observedAtMs === null && state.sharedAtMs !== null)
+      view.lastKnown.observedAtMs = state.sharedAtMs;
+    // A thing view's camera is where following it puts the camera, and its
+    // layer is on: neither is stored separately.
+    if (view.lastKnown)
+      setCamera(state, followCameraFor(view.lastKnown, view.offset));
+    const { layerId } = ENTITY_BY_KIND.get(view.entity.kind);
+    if (state.layerState && !state.layerState.enabledLayerIds.includes(layerId))
+      state.layerState = normalizeLayerState({
+        ...state.layerState,
+        enabledLayerIds: [...state.layerState.enabledLayerIds, layerId],
+      });
+  }
+  return { view, ...state };
+}
+
+/* ------------------------------------------------------------------ */
+/* Token and id helpers.                                               */
+/* ------------------------------------------------------------------ */
+
+/**
+ * The permanent number of a layer-state token: one character is its index in
+ * the base-36 alphabet, two characters are 36 + first × 36 + second. The
+ * token ledger never reassigns a token, so neither does this.
+ */
+export function layerTokenNumber(token) {
+  const a = LAYER_STATE_TOKEN_ALPHABET.indexOf(token[0]);
+  if (token.length === 1) return a;
+  return 36 + a * 36 + LAYER_STATE_TOKEN_ALPHABET.indexOf(token[1]);
+}
+
+export function layerTokenFromNumber(number) {
+  const base = LAYER_STATE_TOKEN_ALPHABET.length;
+  if (number < base) return LAYER_STATE_TOKEN_ALPHABET[number];
+  const rest = number - base;
+  if (rest >= base * base) return null;
+  return (
+    LAYER_STATE_TOKEN_ALPHABET[Math.floor(rest / base)] +
+    LAYER_STATE_TOKEN_ALPHABET[rest % base]
+  );
+}
+
+const REGISTRY_BY_TOKEN = new Map(
+  LAYER_STATE_REGISTRY.map((entry) => [entry.token, entry]),
+);
+const charNumber = (char) => LAYER_STATE_TOKEN_ALPHABET.indexOf(char);
+const CANONICAL_INTEGER = /^(0|-?[1-9]\d{0,14})$/;
+
+function writeEntityId(writer, entry, id) {
+  const field = entry.code;
+  if (entry.idForm === 'hex24' && /^[0-9a-f]{6}$/.test(id))
+    return writer.uintField(field, Number.parseInt(id, 16));
+  if (entry.idForm === 'decimal' && /^[1-9]\d{0,14}$/.test(id))
+    return writer.uintField(field, Number(id));
+  return writer.textField(field, id);
+}
+
+/* ------------------------------------------------------------------ */
+/* Encoder.                                                            */
+/* ------------------------------------------------------------------ */
+
+function writeEnum(writer, field, value) {
+  const code = SHARE_VIEW_ENUMS[field.enum].indexOf(value);
+  if (code >= 0) writer.uintField(field.number, code);
+  else writer.textField(field.number, value);
+}
+
+function encodeLayers(writer, layerState, impliedLayerId) {
+  const bitset = [];
+  for (const id of layerState.enabledLayerIds) {
+    if (id === impliedLayerId) continue;
+    const number = layerTokenNumber(REGISTRY_BY_ID.get(id).token);
+    const byte = Math.floor(number / 8);
+    while (bitset.length <= byte) bitset.push(0);
+    bitset[byte] |= 1 << (number % 8);
+  }
+  writer.bytesField(fieldNumber('layerState'), bitset);
+  const blob = new WireWriter();
+  for (const [ownerId, options] of Object.entries(layerState.options)) {
+    const ownerToken = REGISTRY_BY_ID.get(ownerId).token;
+    for (const spec of optionSpecs(ownerId)) {
+      const current = options[spec.key];
+      if (current === null || current === layerOptionAbsentValue(ownerId, spec))
+        continue;
+      const value = spec.encode(options[spec.key]);
+      blob.varint(layerTokenNumber(ownerToken));
+      const isInteger =
+        CANONICAL_INTEGER.test(value) &&
+        Math.abs(Number(value)) <= MAX_ZIGZAG_MAGNITUDE;
+      blob.varint(charNumber(spec.token) * 2 + (isInteger ? 0 : 1));
+      if (isInteger) blob.varint(zigzag(Number(value)));
+      else {
+        const bytes = asciiBytes(value);
+        blob.varint(bytes.length);
+        blob.bytes.push(...bytes);
+      }
+    }
+  }
+  if (blob.bytes.length)
+    writer.bytesField(fieldNumber('layerOptions'), blob.finish());
+}
+
+const triState = (value) => (value === null ? 0 : value ? 2 : 1);
+
+function encodePanels(writer, panelState) {
+  const byId = new Map(panelState.specs.map((spec) => [spec.id, spec]));
+  const blob = new WireWriter();
+  for (const panel of SHARE_VIEW_PANELS) {
+    const spec = byId.get(panel.id);
+    const defaultPinned = panel.pinnable ? false : null;
+    if (
+      spec &&
+      spec.collapsed === panel.collapsed &&
+      spec.pinned === defaultPinned
+    )
+      continue;
+    const collapsed = spec ? triState(spec.collapsed) : 0;
+    const pinned = spec ? triState(spec.pinned) : 0;
+    blob.varint(panel.number * 16 + collapsed * 4 + pinned);
+  }
+  writer.bytesField(fieldNumber('panelState'), blob.finish());
+}
+
+function encodeStyleParams(writer, style, values) {
+  const defaults = SHARE_VIEW_STYLE_DEFAULTS[style].styleParams ?? {};
+  const blob = new WireWriter();
+  for (const spec of SHARE_VIEW_STYLE_PARAMS[style]) {
+    // Only the parameters that differ from the style's own.
+    if (!Object.hasOwn(values, spec.key)) continue;
+    if (values[spec.key] === defaults[spec.key]) continue;
+    blob
+      .varint(charNumber(spec.token))
+      .varint(Math.round(values[spec.key] * 100));
+  }
+  if (blob.bytes.length)
+    writer.bytesField(fieldNumber('styleParams'), blob.finish());
+}
+
+const CAMERA_KEYS = new Set(['lat', 'lon', 'alt', 'heading', 'pitch', 'roll']);
+const coordinateInt = (degrees) => Math.round(degrees * COORDINATE_SCALE);
+const signedAngle = (degrees) => (degrees > 180 ? degrees - 360 : degrees);
+const epochSeconds = (ms) => ms / 1000 - SHARE_VIEW_EPOCH_S;
+
+function encodeThing(writer, view, state) {
+  const entry = ENTITY_BY_KIND.get(view.entity.kind);
+  const f = SHARE_VIEW_THING_FIELDS;
+  const d = SHARE_VIEW_FOLLOW_OFFSET_DEFAULT;
+  const thing = new WireWriter();
+  writeEntityId(thing, entry, view.entity.id);
+  const { range, heading, pitch } = view.offset;
+  if (range !== d.range) thing.uintField(f.range, range);
+  if (heading !== d.heading) thing.sintField(f.heading, signedAngle(heading));
+  if (pitch !== d.pitch) thing.sintField(f.pitch, pitch);
+  const fix = view.lastKnown;
+  if (fix) {
+    // Both coordinates are always written: their presence marks the fix.
+    thing.sintField(f.lat, coordinateInt(fix.lat));
+    thing.sintField(f.lon, coordinateInt(fix.lon));
+    if (fix.alt) thing.sintField(f.alt, fix.alt);
+    const observed = fix.observedAtMs;
+    // An absent age is 0: a fix taken as the link is made costs nothing.
+    if (observed !== null && state.sharedAtMs !== null) {
+      if (observed !== state.sharedAtMs)
+        thing.sintField(f.ageS, (state.sharedAtMs - observed) / 1000);
+    } else if (observed !== null)
+      thing.sintField(f.observedAt, epochSeconds(observed));
+  }
+  writer.bytesField(fieldNumber('thing'), thing.finish());
+}
+
+/** The base64url text for `bytes` followed by their CRC-8. */
+function sealPayload(bytes) {
+  const sealed = new Uint8Array(bytes.length + 1);
+  sealed.set(bytes);
+  sealed[bytes.length] = crc8(bytes);
+  return encodeBase64Url(sealed);
+}
+
+/**
+ * Encode a share-view state as its share code: base64url text, the `<code>`
+ * in `/share/<code>`. The state is normalized first; omitted or default
+ * fields cost nothing.
+ */
+export function encodeShareView(input) {
+  const state = normalizeShareViewState(input);
+  const thing = state.view.kind === 'thing' ? state.view : null;
+  // A thing view with a fix derives its camera from it (followCameraFor).
+  const cameraDerived = Boolean(thing?.lastKnown);
+  const impliedLayerId = thing
+    ? ENTITY_BY_KIND.get(thing.entity.kind).layerId
+    : null;
+  const writer = new WireWriter();
+  writer.bytes.push(SHARE_VIEW_FORMAT_VERSION);
+  for (const field of SHARE_VIEW_FIELDS) {
+    if (cameraDerived && CAMERA_KEYS.has(field.key)) continue;
+    switch (field.key) {
+      case 'view':
+        // Absent means `thing` when field 13 is present, else `place`.
+        if (state.view.kind !== (thing ? 'thing' : 'place'))
+          writeEnum(writer, field, state.view.kind);
+        break;
+      case 'lat':
+      case 'lon':
+        if (state[field.key] !== field.default)
+          writer.sintField(field.number, coordinateInt(state[field.key]));
+        break;
+      case 'heading':
+      case 'roll':
+        if (state[field.key] !== field.default)
+          writer.sintField(field.number, signedAngle(state[field.key]));
+        break;
+      case 'sharedAtMs':
+        if (state.sharedAtMs !== null)
+          writer.sintField(field.number, epochSeconds(state.sharedAtMs));
+        break;
+      case 'flags': {
+        let bits = 0;
+        for (const flag of SHARE_VIEW_FLAGS)
+          if (state[flag.key] !== defaultOf(flag, state.style))
+            bits += 2 ** flag.bit;
+        if (bits) writer.uintField(field.number, bits);
+        break;
+      }
+      case 'layerState':
+        if (state.layerState)
+          encodeLayers(writer, state.layerState, impliedLayerId);
+        break;
+      case 'layerOptions':
+        break; // written together with layerState
+      case 'panelState':
+        if (state.panelState) encodePanels(writer, state.panelState);
+        break;
+      case 'thing':
+        if (thing) encodeThing(writer, thing, state);
+        break;
+      case 'styleParams':
+        if (state.styleParams)
+          encodeStyleParams(writer, state.style, state.styleParams);
+        break;
+      default:
+        if (state[field.key] === defaultOf(field, state.style)) break;
+        if (field.type === 'enum') writeEnum(writer, field, state[field.key]);
+        else if (field.type === 'sint')
+          writer.sintField(field.number, state[field.key]);
+        else writer.uintField(field.number, state[field.key]);
+    }
+  }
+  return sealPayload(writer.finish());
+}
+
+/* ------------------------------------------------------------------ */
+/* Decoder.                                                            */
+/* ------------------------------------------------------------------ */
+
+/** Collects every field, code or entry a v1 decoder did not understand. */
+class UnknownLog {
+  constructor() {
+    this.entries = [];
+  }
+  field(scope, field, wireType) {
+    this.entries.push({ scope, field, wireType });
+  }
+  code(scope, code) {
+    this.entries.push({ scope, code });
+  }
+}
+
+/**
+ * Read one message's fields, enforcing each known field's wire types and
+ * rejecting repeats, skipping (and logging) unknown fields.
+ * `known` maps field number → allowed wire types.
+ */
+function readMessage(reader, known, scope, unknown) {
+  const values = new Map();
+  while (!reader.done) {
+    const { field, wireType } = reader.tag();
+    const allowed = known.get(field);
+    if (!allowed) {
+      unknown.field(scope, field, wireType);
+      reader.skip(wireType);
+      continue;
+    }
+    if (!allowed.includes(wireType))
+      throw new ShareWireError('wire-type-mismatch', `${scope}.${field}`);
+    if (values.has(field))
+      throw new ShareWireError('duplicate-field', `${scope}.${field}`);
+    values.set(
+      field,
+      wireType === WIRE_LEN
+        ? { len: reader.lengthDelimited() }
+        : { varint: reader.varint() },
+    );
+  }
+  return values;
+}
+
+const WIRE_TYPES_BY_TYPE = Object.freeze({
+  uint: [WIRE_VARINT],
+  sint: [WIRE_VARINT],
+  angle: [WIRE_VARINT],
+  coord: [WIRE_VARINT],
+  epoch: [WIRE_VARINT],
+  flags: [WIRE_VARINT],
+  enum: [WIRE_VARINT, WIRE_LEN],
+  bytes: [WIRE_LEN],
+});
+const TOP_LEVEL_WIRE_TYPES = new Map(
+  SHARE_VIEW_FIELDS.filter((f) => !f.retired).map((f) => [
+    f.number,
+    WIRE_TYPES_BY_TYPE[f.type],
+  ]),
+);
+const THING_WIRE_TYPES = new Map([
+  ...SHARE_VIEW_ENTITY_KINDS.map((e) => [e.code, [WIRE_VARINT, WIRE_LEN]]),
+  ...Object.values(SHARE_VIEW_THING_FIELDS).map((n) => [n, [WIRE_VARINT]]),
+]);
+
+const unz = unzigzag;
+const CLOSED_ENUMS = new Set(['detectionMode', 'detectionAllocation']);
+
+function readEnum(entry, field, unknown) {
+  if (!entry) return undefined;
+  if (entry.len) {
+    const text = asciiText(entry.len.rest());
+    // Detection settings are closed sets the app interprets; an unknown name
+    // must not reach the long form's lenient migration (which turns it ON).
+    if (
+      CLOSED_ENUMS.has(field.key) &&
+      !SHARE_VIEW_ENUMS[field.enum].includes(text)
+    ) {
+      unknown.code(`enum:${field.key}`, text);
+      return undefined;
+    }
+    return text;
+  }
+  const name = SHARE_VIEW_ENUMS[field.enum][entry.varint];
+  if (name === undefined) unknown.code(`enum:${field.key}`, entry.varint);
+  return name;
+}
+
+function decodeLayers(bitsReader, optionsReader, unknown) {
+  const enabledLayerIds = [];
+  const bits = bitsReader.rest();
+  for (let byte = 0; byte < bits.length; byte += 1) {
+    for (let bit = 0; bit < 8; bit += 1) {
+      if (!(bits[byte] & (1 << bit))) continue;
+      const number = byte * 8 + bit;
+      const entry = REGISTRY_BY_TOKEN.get(layerTokenFromNumber(number));
+      if (entry) enabledLayerIds.push(entry.id);
+      else unknown.code('layer', number);
+    }
+  }
+  const options = {};
+  const seen = new Set();
+  const reader = optionsReader;
+  while (reader && !reader.done) {
+    const layerNumber = reader.varint();
+    const key = reader.varint();
+    let value;
+    if (key % 2 === 0) value = String(unz(reader.varint()));
+    else {
+      const length = reader.varint();
+      if (length > MAX_OPTION_VALUE_CHARS || length > reader.end - reader.pos)
+        throw new ShareWireError('truncated', 'layer option');
+      value = asciiText(reader.bytes.slice(reader.pos, reader.pos + length));
+      reader.pos += length;
+    }
+    const slot = `${layerNumber}.${Math.floor(key / 2)}`;
+    if (seen.has(slot)) throw new ShareWireError('duplicate-entry', slot);
+    seen.add(slot);
+    // Options are filed under their owner layer only (never a mirror such as
+    // `military`), so each option has exactly one spelling.
+    const layerEntry = REGISTRY_BY_TOKEN.get(layerTokenFromNumber(layerNumber));
+    const ownerId =
+      layerEntry?.optionOwner === layerEntry?.id
+        ? layerEntry?.optionOwner
+        : null;
+    const optionToken = LAYER_STATE_TOKEN_ALPHABET[Math.floor(key / 2)];
+    const spec = ownerId
+      ? optionSpecs(ownerId).find(
+          (candidate) => candidate.token === optionToken,
+        )
+      : null;
+    const decoded = spec ? spec.decode(value) : null;
+    if (decoded === null || decoded === undefined) {
+      unknown.code('layer-option', slot);
+      continue;
+    }
+    options[ownerId] ??= {};
+    options[ownerId][spec.key] = decoded;
+  }
+  // Fill every option the payload did not carry with ITS frozen meaning, not
+  // the app's current default (normalization would substitute that).
+  for (const ownerId of Object.keys(SHARE_VIEW_LAYER_OPTION_ABSENT)) {
+    options[ownerId] ??= {};
+    for (const spec of optionSpecs(ownerId)) {
+      if (!Object.hasOwn(options[ownerId], spec.key))
+        options[ownerId][spec.key] = layerOptionAbsentValue(ownerId, spec);
+    }
+  }
+  return normalizeLayerState({ enabledLayerIds, options });
+}
+
+function decodePanels(reader, unknown) {
+  const entries = new Map();
+  while (!reader.done) {
+    const value = reader.varint();
+    const number = Math.floor(value / 16);
+    if (entries.has(number))
+      throw new ShareWireError('duplicate-entry', `panel ${number}`);
+    entries.set(number, {
+      collapsed: Math.floor(value / 4) % 4,
+      pinned: value % 4,
+    });
+  }
+  for (const [number, entry] of entries) {
+    if (
+      !PANEL_BY_NUMBER.has(number) ||
+      entry.collapsed === 3 ||
+      entry.pinned === 3
+    )
+      unknown.code('panel', number);
+  }
+  const specs = [];
+  for (const panel of SHARE_VIEW_PANELS) {
+    const entry = entries.get(panel.number);
+    if (entry) {
+      // 0 is "no opinion"; 3 is a value from a newer format, also ignored.
+      if (entry.collapsed === 0 || entry.collapsed === 3 || entry.pinned === 3)
+        continue;
+      specs.push({
+        id: panel.id,
+        collapsed: entry.collapsed === 2,
+        pinned:
+          panel.pinnable && entry.pinned !== 0 ? entry.pinned === 2 : null,
+      });
+    } else {
+      specs.push({
+        id: panel.id,
+        collapsed: panel.collapsed,
+        pinned: panel.pinnable ? false : null,
+      });
+    }
+  }
+  return { specs };
+}
+
+function decodeStyleParams(reader, style, unknown) {
+  const registry = SHARE_VIEW_STYLE_PARAMS[style] || [];
+  const values = {};
+  const seen = new Set();
+  while (!reader.done) {
+    const index = reader.varint();
+    const token = LAYER_STATE_TOKEN_ALPHABET[index];
+    const scaled = reader.varint();
+    if (seen.has(index))
+      throw new ShareWireError('duplicate-entry', 'style parameter');
+    seen.add(index);
+    const spec = registry.find((candidate) => candidate.token === token);
+    if (!spec) {
+      unknown.code('style-param', `${style}.${token ?? '?'}`);
+      continue;
+    }
+    values[spec.key] = clamp(scaled / 100, spec.min, spec.max);
+  }
+  return values;
+}
+
+function decodeEntityId(entry, value) {
+  if (!entry) return null;
+  if (value.len) return normalizeEntityId(entry, asciiText(value.len.rest()));
+  if (entry.idForm === 'hex24')
+    return value.varint <= 0xffffff
+      ? value.varint.toString(16).padStart(6, '0')
+      : null;
+  return normalizeEntityId(entry, String(value.varint));
+}
+
+function decodeThing(reader, createdAtS, unknown) {
+  const unknownBefore = unknown.entries.length;
+  const fields = readMessage(reader, THING_WIRE_TYPES, 'thing', unknown);
+  const F = SHARE_VIEW_THING_FIELDS;
+  const d = SHARE_VIEW_FOLLOW_OFFSET_DEFAULT;
+  const signed = (n) => unz(fields.get(n)?.varint ?? 0);
+  const offset = {
+    range: fields.get(F.range)?.varint ?? d.range,
+    heading: fields.has(F.heading) ? signed(F.heading) : d.heading,
+    pitch: fields.has(F.pitch) ? signed(F.pitch) : d.pitch,
+  };
+  let lastKnown = null;
+  if (fields.has(F.lat) || fields.has(F.lon)) {
+    let observedAtMs = null;
+    if (fields.has(F.observedAt))
+      observedAtMs = (SHARE_VIEW_EPOCH_S + signed(F.observedAt)) * 1000;
+    else if (createdAtS !== null)
+      observedAtMs = (createdAtS - signed(F.ageS)) * 1000;
+    lastKnown = {
+      lat: signed(F.lat) / COORDINATE_SCALE,
+      lon: signed(F.lon) / COORDINATE_SCALE,
+      alt: signed(F.alt),
+      observedAtMs,
+    };
+    if (Math.abs(lastKnown.lat) > 90 || Math.abs(lastKnown.lon) > 180)
+      throw new ShareWireError('out-of-range', 'thing fix');
+  }
+  // The camera this view falls back to, whatever happens to the entity.
+  const camera = lastKnown
+    ? followCameraFor(lastKnown, normalizeFollowOffset(offset))
+    : null;
+  const present = SHARE_VIEW_ENTITY_KINDS.filter((e) => fields.has(e.code));
+  if (present.length > 1)
+    throw new ShareWireError('duplicate-field', 'thing entity id');
+  const entry = present[0];
+  if (!entry) {
+    // A newer app's entity kind uses a thing field this decoder skipped.
+    const newerKind = unknown.entries.length > unknownBefore;
+    return {
+      camera,
+      fallback: newerKind ? 'unknown-entity-kind' : 'missing-entity-kind',
+    };
+  }
+  const id = decodeEntityId(entry, fields.get(entry.code));
+  if (!id) return { camera, fallback: 'invalid-entity-id' };
+  return { camera, view: thingView(entry.kind, id, offset, lastKnown) };
+}
+
+/**
+ * Decode a share code (the `<code>` in `/share/<code>`).
+ *
+ * Returns `{ ok: true, state, unknownFields?, fallback? }` with a normalized
+ * state, or `{ ok: false, reason }`. It never throws. A code whose check byte
+ * does not match is rejected (`checksum`), so a mistyped code never opens a
+ * different view. `unknownFields` lists what a newer encoder wrote that this
+ * decoder skipped; `fallback` says why a view that asked to follow something
+ * opens as a place at its camera instead. A created-at time in the future
+ * (after `nowMs`) is dropped.
+ */
+export function decodeShareView(code, { nowMs = Date.now() } = {}) {
+  try {
+    if (typeof code !== 'string') return { ok: false, reason: 'not-a-string' };
+    if (code.length > MAX_SHARE_VIEW_CHARS)
+      return { ok: false, reason: 'too-long' };
+    const sealed = decodeBase64Url(code);
+    if (sealed.length < 2) return { ok: false, reason: 'truncated' };
+    const bytes = sealed.subarray(0, sealed.length - 1);
+    if (crc8(bytes) !== sealed[sealed.length - 1])
+      return { ok: false, reason: 'checksum' };
+    if (bytes[0] !== SHARE_VIEW_FORMAT_VERSION)
+      return { ok: false, reason: 'unsupported-version' };
+    const unknown = new UnknownLog();
+    const fields = readMessage(
+      new WireReader(bytes, 1),
+      TOP_LEVEL_WIRE_TYPES,
+      'view',
+      unknown,
+    );
+    const get = (key) => fields.get(fieldNumber(key));
+
+    const raw = {};
+    for (const field of SHARE_VIEW_FIELDS) {
+      const entry = fields.get(field.number);
+      if (
+        !entry ||
+        field.type === 'bytes' ||
+        field.type === 'flags' ||
+        field.key === 'view'
+      )
+        continue;
+      if (field.type === 'enum')
+        raw[field.key] = readEnum(entry, field, unknown);
+      else if (field.type === 'coord')
+        raw[field.key] = unz(entry.varint) / COORDINATE_SCALE;
+      else if (field.type === 'sint' || field.type === 'angle')
+        raw[field.key] = unz(entry.varint);
+      else if (field.type === 'uint') raw[field.key] = entry.varint;
+    }
+    for (const key of ['lat', 'lon']) {
+      raw[key] ??= 0;
+      if (Math.abs(raw[key]) > (key === 'lat' ? 90 : 180))
+        return { ok: false, reason: 'out-of-range' };
+    }
+
+    if (raw.style !== undefined && !VIEW_STYLES.includes(raw.style)) {
+      if (get('style').len) unknown.code('enum:style', raw.style);
+      raw.style = undefined;
+    }
+    for (const key of ['hudVariant', 'mapStack']) {
+      if (raw[key] !== undefined && !NAME_GRAMMAR.test(raw[key]))
+        unknown.code(`enum:${key}`, raw[key]);
+    }
+
+    const flags = get('flags')?.varint ?? 0;
+    for (const flag of SHARE_VIEW_FLAGS)
+      raw[flag.key] =
+        (Math.floor(flags / 2 ** flag.bit) % 2 === 1) !==
+        defaultOf(flag, raw.style ?? 'normal');
+    const knownBits = 2 ** SHARE_VIEW_FLAGS.length - 1;
+    if (flags > knownBits)
+      unknown.code('flags', flags - (flags % (knownBits + 1)));
+
+    let createdAtS = null;
+    if (get('sharedAtMs')) {
+      createdAtS = SHARE_VIEW_EPOCH_S + unz(get('sharedAtMs').varint);
+      const ms = createdAtS * 1000;
+      raw.sharedAtMs =
+        createdAtS >= 1 && Number.isSafeInteger(ms) && ms <= nowMs ? ms : null;
+    }
+
+    if (get('layerState'))
+      raw.layerState = decodeLayers(
+        get('layerState').len,
+        get('layerOptions')?.len ?? null,
+        unknown,
+      );
+    else if (get('layerOptions'))
+      unknown.code('layer-option', 'without-layers');
+    if (get('panelState'))
+      raw.panelState = decodePanels(get('panelState').len, unknown);
+    if (get('styleParams'))
+      raw.styleParams = decodeStyleParams(
+        get('styleParams').len,
+        raw.style ?? 'normal',
+        unknown,
+      );
+
+    let fallback;
+    const thing = get('thing')
+      ? decodeThing(get('thing').len, createdAtS, unknown)
+      : null;
+    // A thing with a last-known fix carries the view's camera.
+    if (thing?.camera) Object.assign(raw, thing.camera);
+    const viewEntry = get('view');
+    const viewKind = viewEntry
+      ? viewEntry.len
+        ? asciiText(viewEntry.len.rest())
+        : (SHARE_VIEW_ENUMS.viewKind[viewEntry.varint] ?? viewEntry.varint)
+      : thing
+        ? 'thing'
+        : 'place';
+    if (viewKind === 'thing') {
+      if (thing?.view) raw.view = thing.view;
+      else fallback = thing?.fallback ?? 'missing-thing';
+    } else if (viewKind !== 'place') {
+      unknown.code('enum:view', viewKind);
+      fallback = 'unknown-view-kind';
+    }
+
+    const state = normalizeShareViewState(raw);
+    const result = { ok: true, state };
+    if (unknown.entries.length) result.unknownFields = unknown.entries;
+    if (fallback) result.fallback = fallback;
+    return result;
+  } catch (error) {
+    if (error instanceof ShareWireError)
+      return { ok: false, reason: error.reason };
+    return { ok: false, reason: 'internal-error' };
+  }
+}
diff --git a/src/share/viewCodec.test.mjs b/src/share/viewCodec.test.mjs
new file mode 100644
index 000000000..4ec2b967c
--- /dev/null
+++ b/src/share/viewCodec.test.mjs
@@ -0,0 +1,1307 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  LAYER_STATE_REGISTRY,
+  LAYER_STATE_TOKEN_RESERVATIONS,
+  REGISTERED_LAYER_IDS,
+  createDefaultLayerState,
+  optionSpecs,
+} from '../data/layerState.js';
+import { VIEW_FOLLOW_KINDS, VIEW_MAPS, VIEW_STYLES } from '../view/index.js';
+import { HUD_LAYOUTS } from '../hudLayoutPolicy.js';
+import { ALLOCATION_STRATEGIES } from '../data/detectionPolicy.js';
+import { BLOOM_INTENSITY_DEFAULT, BLOOM_SCALE_VERSION } from '../bloom.js';
+import {
+  pick,
+  randomLayerState,
+  rng,
+} from '../testSupport/shareViewFixtures.mjs';
+import {
+  SCOPE_TERMINUS_MAX_PCT,
+  SCOPE_TERMINUS_MIN_PCT,
+} from '../scopeMask.js';
+import {
+  decodePanelStateParams,
+  decodeStyleParamState,
+  encodeStyleParamState,
+} from '../sharelink.js';
+import {
+  WIRE_FIXED32,
+  WIRE_FIXED64,
+  WireWriter,
+  crc8,
+  decodeBase64Url,
+  encodeBase64Url,
+} from './wire.js';
+import {
+  MAX_SHARE_VIEW_CHARS,
+  SHARE_VIEW_ENTITY_KINDS,
+  SHARE_VIEW_ENUMS,
+  SHARE_VIEW_EPOCH_S,
+  SHARE_VIEW_FIELDS,
+  BY_STYLE,
+  SHARE_VIEW_FLAGS,
+  SHARE_VIEW_FOLLOW_OFFSET_DEFAULT,
+  SHARE_VIEW_STYLE_DEFAULTS,
+  SHARE_VIEW_LAYER_OPTION_ABSENT,
+  SHARE_VIEW_PANELS,
+  SHARE_VIEW_STYLE_PARAMS,
+  createDefaultShareViewState,
+  decodeShareView,
+  encodeShareView,
+  followCameraFor,
+  followOffsetFromEnu,
+  followOffsetToEnu,
+  layerTokenFromNumber,
+  layerTokenNumber,
+  normalizeShareViewState,
+} from './viewCodec.js';
+
+const NOW_MS = Date.UTC(2026, 9, 26, 12, 0, 0);
+const decode = (hash) => decodeShareView(hash, { nowMs: NOW_MS });
+/** The payload bytes of a code, without its check byte. */
+const payloadBytes = (code) => decodeBase64Url(code).slice(0, -1);
+/** The code for payload bytes: base64url of the bytes and their CRC-8. */
+const hashOf = (bytes) => encodeBase64Url([...bytes, crc8(bytes)]);
+
+/** Decode and require success, returning the result. */
+function decodeOk(hash) {
+  const result = decode(hash);
+  assert.equal(result.ok, true, `decode failed: ${result.reason}`);
+  return result;
+}
+
+function assertRoundTrip(state) {
+  const hash = encodeShareView(state);
+  const result = decodeOk(hash);
+  assert.deepEqual(result.state, normalizeShareViewState(state));
+  assert.equal(result.unknownFields, undefined);
+  assert.equal(result.fallback, undefined);
+  assert.equal(encodeShareView(result.state), hash, 'encoding is canonical');
+  return hash;
+}
+
+function randomState(random) {
+  const int = (min, max) => min + Math.floor(random() * (max - min + 1));
+  const maybe = (p, value) => (random() < p ? value : undefined);
+  const style = pick(random, VIEW_STYLES);
+  const params = SHARE_VIEW_STYLE_PARAMS[style];
+  const lat = int(-900000, 900000) / 1e4;
+  const lon = int(-1800000, 1800000) / 1e4;
+  const state = {
+    lat,
+    lon,
+    alt: pick(random, [800, int(-400, 50000), int(0, 40_000_000)]),
+    heading: int(0, 359),
+    pitch: int(-90, 90),
+    roll: pick(random, [0, int(0, 359)]),
+    style,
+    styleParams:
+      params && random() < 0.6
+        ? Object.fromEntries(
+            params
+              .filter(() => random() < 0.7)
+              .map((s) => [s.key, int(s.min * 100, s.max * 100) / 100]),
+          )
+        : null,
+    bloomIntensity: maybe(0.5, int(0, 100)),
+    bloomVersion: maybe(0.3, pick(random, [1, 2])),
+    sharpenIntensity: maybe(0.5, int(0, 100)),
+    hudVariant: maybe(0.5, pick(random, [...HUD_LAYOUTS, 'future-hud'])),
+    detectionMode: maybe(0.6, pick(random, SHARE_VIEW_ENUMS.detectionMode)),
+    detectionDensity: maybe(0.6, pick(random, [0, 25, 50, 75, 100])),
+    detectionAllocation: maybe(0.4, pick(random, ALLOCATION_STRATEGIES)),
+    detectionFadePct: maybe(0.5, int(0, 40)),
+    detectionOutsideOpacityPct: maybe(0.5, int(0, 100)),
+    scopeFeatherPct: maybe(0.5, int(0, 200)),
+    scopeTerminusPct: maybe(
+      0.3,
+      int(SCOPE_TERMINUS_MIN_PCT, SCOPE_TERMINUS_MAX_PCT),
+    ),
+    mapStack: maybe(0.5, pick(random, [...VIEW_MAPS, 'future-map'])),
+    layerState: random() < 0.7 ? randomLayerState(random) : null,
+    panelState:
+      random() < 0.6
+        ? {
+            specs: SHARE_VIEW_PANELS.filter(() => random() < 0.8).map(
+              (panel) => ({
+                id: panel.id,
+                collapsed: random() < 0.5,
+                pinned: panel.pinnable
+                  ? pick(random, [true, false, null])
+                  : null,
+              }),
+            ),
+          }
+        : null,
+    sharedAtMs: maybe(0.7, int(1, 2_100_000_000) * 1000),
+  };
+  for (const flag of SHARE_VIEW_FLAGS)
+    if (random() < 0.5) state[flag.key] = random() < 0.5;
+  if (random() < 0.4) {
+    const entity = pick(random, SHARE_VIEW_ENTITY_KINDS);
+    const id =
+      entity.kind === 'satellite'
+        ? String(int(1, 99999))
+        : entity.kind === 'vessel'
+          ? pick(random, [
+              String(int(100000000, 999999999)),
+              '002442000',
+              'tmp-7',
+            ])
+          : pick(random, [
+              int(0, 0xffffff).toString(16).padStart(6, '0'),
+              '~abc123',
+              'adsb_x-1',
+            ]);
+    state.view = {
+      kind: 'thing',
+      entity: { kind: entity.kind, id },
+      offset:
+        random() < 0.6
+          ? { range: int(0, 200000), heading: int(0, 359), pitch: int(-90, 90) }
+          : null,
+      lastKnown:
+        random() < 0.6
+          ? {
+              lat: Math.max(-90, Math.min(90, lat + int(-5000, 5000) / 1e4)),
+              lon: Math.max(-180, Math.min(180, lon + int(-5000, 5000) / 1e4)),
+              alt: int(-100, 500000),
+              observedAtMs: maybe(0.8, int(1, 2_100_000_000) * 1000),
+            }
+          : null,
+    };
+  }
+  return state;
+}
+
+test('an all-default view is the version byte and its check byte', () => {
+  const hash = encodeShareView(createDefaultShareViewState());
+  assert.equal(hash, 'AQc');
+  assert.deepEqual(decodeOk(hash).state, normalizeShareViewState({}));
+  assert.deepEqual(normalizeShareViewState({}), createDefaultShareViewState());
+});
+
+test('each setting costs bytes only when it differs from its default', () => {
+  const base = payloadBytes(encodeShareView({})).length;
+  const changes = {
+    lat: 10,
+    lon: 10,
+    alt: 900,
+    heading: 1,
+    pitch: -36,
+    roll: 1,
+    sharedAtMs: NOW_MS,
+    style: 'noir',
+    mapStack: 'osm',
+    hudVariant: 'cyber',
+    bloomIntensity: 1,
+    bloomVersion: 1,
+    sharpenIntensity: 50,
+    detectionMode: 'SPARSE',
+    detectionDensity: 100,
+    detectionAllocation: 'WEIGHTED',
+    detectionFadePct: 8,
+    detectionOutsideOpacityPct: 2,
+    scopeFeatherPct: 99,
+    scopeTerminusPct: 95,
+  };
+  const defaults = createDefaultShareViewState();
+  for (const [key, value] of Object.entries(changes)) {
+    assert.equal(
+      payloadBytes(encodeShareView({ [key]: defaults[key] })).length,
+      base,
+      `${key} at its default is omitted`,
+    );
+    const changed = { [key]: value };
+    if (key === 'detectionMode') changed.detectionDensity = 75;
+    assert.ok(
+      payloadBytes(assertRoundTrip(changed)).length > base,
+      `${key} is encoded`,
+    );
+  }
+  for (const flag of SHARE_VIEW_FLAGS) {
+    assert.equal(
+      payloadBytes(encodeShareView({ [flag.key]: defaults[flag.key] })).length,
+      base,
+    );
+    assert.equal(
+      payloadBytes(assertRoundTrip({ [flag.key]: !defaults[flag.key] })).length,
+      base + 2,
+    );
+  }
+  // All five booleans flipped still cost one field.
+  const flipped = Object.fromEntries(
+    SHARE_VIEW_FLAGS.map((f) => [f.key, !defaults[f.key]]),
+  );
+  assert.equal(payloadBytes(assertRoundTrip(flipped)).length, base + 2);
+});
+
+test('a view just switched to any style costs its camera and style only', () => {
+  const camera = { lat: 48.8584, lon: 2.2945, alt: 1200, heading: 120 };
+  const cameraOnly = payloadBytes(encodeShareView(camera)).length;
+  for (const style of VIEW_STYLES) {
+    // What the app holds right after selecting the style in a fresh session.
+    const fresh = { ...camera, ...SHARE_VIEW_STYLE_DEFAULTS[style], style };
+    const bytes = payloadBytes(assertRoundTrip(fresh)).length;
+    assert.equal(bytes, cameraOnly + (style === 'normal' ? 0 : 2), style);
+    // Changes on top of the style's look still travel and round-trip.
+    const params = SHARE_VIEW_STYLE_PARAMS[style];
+    const changed = {
+      ...fresh,
+      sharpen: false,
+      detectionMode: 'OFF',
+      detectionFadePct: 16,
+      ...(params
+        ? {
+            styleParams: {
+              ...fresh.styleParams,
+              [params[0].key]: params[0].min,
+            },
+          }
+        : {}),
+    };
+    assert.ok(payloadBytes(assertRoundTrip(changed)).length > bytes, style);
+  }
+});
+
+test('invalid style parameters keep the style’s own value', () => {
+  for (const bad of [undefined, NaN, 'x', null])
+    assertRoundTrip({ style: 'noir', styleParams: { contrastAmt: bad } });
+  assert.equal(
+    normalizeShareViewState({ style: 'noir', styleParams: { grainAmt: NaN } })
+      .styleParams.grainAmt,
+    0.5,
+  );
+});
+
+test('every registered field round-trips at once', () => {
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = [
+    'flights',
+    'satellites',
+    'radio',
+    'recent-imagery',
+    'street-level',
+  ];
+  Object.assign(layerState.options.flights, {
+    models3d: true,
+    models3dMode: 'all',
+  });
+  Object.assign(layerState.options.radio, {
+    filter: 'genre:jazz & blues',
+    volume: 0.35,
+  });
+  Object.assign(layerState.options['recent-imagery'], {
+    west: -12345678,
+    east: 12345678,
+    south: -8505110,
+    north: 8505110,
+    a: 'S30:2026-09-18',
+    b: 'VIIRS:2025-01-02',
+    mode: 2,
+    split: 37,
+    viirs: true,
+  });
+  Object.assign(layerState.options['street-level'], {
+    mapillary: false,
+    providerSwitches: 'abc-1*def-0',
+    sinceDays: 365,
+  });
+  const state = {
+    view: {
+      kind: 'thing',
+      entity: { kind: 'aircraft', id: 'a1b2c3' },
+      offset: { range: 1500, heading: 300, pitch: -20 },
+      lastKnown: {
+        lat: -33.8601,
+        lon: 151.2101,
+        alt: 10668,
+        observedAtMs: NOW_MS - 12_000,
+      },
+    },
+    lat: -33.8568,
+    lon: 151.2153,
+    alt: 12000,
+    heading: 270,
+    pitch: -12,
+    roll: 2,
+    style: 'thermal',
+    styleParams: {
+      sensitivity: 0.42,
+      bloom: 1,
+      mode: 0,
+      pixelation: 3.5,
+      palette: 0.25,
+    },
+    bloom: true,
+    sharpen: false,
+    bloomIntensity: 84,
+    bloomVersion: 1,
+    sharpenIntensity: 65,
+    hudVariant: 'operator',
+    hudVisible: false,
+    detectionMode: 'SPARSE',
+    detectionDensity: 100,
+    detectionAllocation: 'WEIGHTED',
+    detectionFadePct: 16,
+    detectionOutsideOpacityPct: 5,
+    celestialRing: true,
+    scopeEnabled: false,
+    scopeFeatherPct: 35,
+    scopeTerminusPct: 97,
+    mapStack: 'esri-imagery',
+    layerState,
+    panelState: {
+      specs: SHARE_VIEW_PANELS.map((panel) => ({
+        id: panel.id,
+        collapsed: !panel.collapsed,
+        pinned: panel.pinnable ? true : null,
+      })),
+    },
+    sharedAtMs: NOW_MS,
+  };
+  // A thing view derives its camera (roll 0), so the camera fields are
+  // checked on the same state as a place view.
+  const place = { ...state };
+  delete place.view;
+  for (const subject of [state, place]) {
+    const normalized = normalizeShareViewState(subject);
+    for (const key of Object.keys(subject)) {
+      if (subject === state && key === 'roll') continue;
+      assert.notDeepEqual(
+        normalized[key],
+        createDefaultShareViewState()[key] ?? undefined,
+        key,
+      );
+    }
+    assertRoundTrip(subject);
+  }
+});
+
+test('generated states round-trip exactly and encode canonically', () => {
+  const random = rng(0x5eed);
+  let things = 0;
+  for (let i = 0; i < 1500; i += 1) {
+    const state = randomState(random);
+    if (state.view?.kind === 'thing') things += 1;
+    const hash = encodeShareView(state);
+    const result = decodeShareView(hash, { nowMs: Number.MAX_SAFE_INTEGER });
+    assert.equal(result.ok, true, `case ${i}: ${result.reason}`);
+    assert.deepEqual(result.state, normalizeShareViewState(state), `case ${i}`);
+    assert.equal(encodeShareView(result.state), hash, `case ${i} canonical`);
+    assert.ok(hash.length < MAX_SHARE_VIEW_CHARS, `case ${i} size`);
+  }
+  assert.ok(things > 400, 'generator covers thing views');
+});
+
+test('normalization is idempotent', () => {
+  const random = rng(42);
+  for (let i = 0; i < 300; i += 1) {
+    const once = normalizeShareViewState(randomState(random));
+    assert.deepEqual(normalizeShareViewState(once), once);
+  }
+});
+
+test('precision: coordinates 1e-4 degrees, angles and lengths whole units', () => {
+  const { state } = decodeOk(
+    encodeShareView({
+      lat: 30.26724,
+      lon: -97.74316,
+      alt: 600.6,
+      heading: 15.4,
+      pitch: -30.5,
+      roll: 359.6,
+    }),
+  );
+  assert.equal(state.lat, 30.2672);
+  assert.equal(state.lon, -97.7432);
+  assert.equal(state.alt, 601);
+  assert.equal(state.heading, 15);
+  assert.equal(state.pitch, -30);
+  assert.equal(state.roll, 0, '359.6 rounds to 360, which is 0');
+  // Angles wrap into [0, 360) and are stored as the nearer signed turn.
+  assert.equal(decodeOk(encodeShareView({ heading: -10 })).state.heading, 350);
+  assert.equal(payloadBytes(encodeShareView({ heading: 350 })).length, 3);
+  // Out-of-range input is clamped or wrapped, never rejected.
+  const wild = decodeOk(
+    encodeShareView({ lat: 95, lon: 190, pitch: -120 }),
+  ).state;
+  assert.deepEqual([wild.lat, wild.lon, wild.pitch], [90, -170, -90]);
+});
+
+test('defaults travel as frozen meanings that match today’s app defaults', () => {
+  const defaults = createDefaultShareViewState();
+  // When an app default moves, these tests should be updated to document the
+  // drift; the codec's defaults table must NOT change (see SHARE-LINK-FORMAT).
+  assert.equal(defaults.bloomIntensity, BLOOM_INTENSITY_DEFAULT);
+  assert.equal(defaults.bloomVersion, BLOOM_SCALE_VERSION);
+  assert.equal(defaults.hudVariant, HUD_LAYOUTS[0]);
+  assert.deepEqual(SHARE_VIEW_ENUMS.hudVariant.slice(0, HUD_LAYOUTS.length), [
+    ...HUD_LAYOUTS,
+  ]);
+  assert.deepEqual(SHARE_VIEW_ENUMS.style, [...VIEW_STYLES]);
+  assert.deepEqual(SHARE_VIEW_ENUMS.mapStack, [...VIEW_MAPS]);
+  assert.deepEqual(SHARE_VIEW_ENUMS.detectionAllocation, [
+    ...ALLOCATION_STRATEGIES,
+  ]);
+  for (const kind of VIEW_FOLLOW_KINDS)
+    assert.ok(
+      SHARE_VIEW_ENTITY_KINDS.some((entry) => entry.kind === kind),
+      kind,
+    );
+});
+
+test('the field registry is well formed and permanent', () => {
+  const numbers = SHARE_VIEW_FIELDS.map((f) => f.number);
+  assert.equal(new Set(numbers).size, numbers.length);
+  assert.equal(
+    new Set(SHARE_VIEW_FIELDS.map((f) => f.key)).size,
+    numbers.length,
+  );
+  // Snapshot: changing a number, key or default breaks links in the wild.
+  assert.deepEqual(
+    SHARE_VIEW_FIELDS.map((f) => [f.number, f.key, f.default]),
+    [
+      [1, 'view', 'place'],
+      [2, 'lat', 0],
+      [3, 'lon', 0],
+      [4, 'alt', 800],
+      [5, 'heading', 0],
+      [6, 'pitch', -35],
+      [7, 'roll', 0],
+      [8, 'sharedAtMs', null],
+      [9, 'flags', 0],
+      [10, 'layerState', null],
+      [11, 'layerOptions', null],
+      [12, 'panelState', null],
+      [13, 'thing', null],
+      [14, 'style', 'normal'],
+      [15, 'mapStack', 'photoreal'],
+      [16, 'hudVariant', BY_STYLE],
+      [17, 'bloomIntensity', BY_STYLE],
+      [18, 'bloomVersion', 2],
+      [19, 'sharpenIntensity', BY_STYLE],
+      [20, 'detectionMode', BY_STYLE],
+      [21, 'detectionDensity', BY_STYLE],
+      [22, 'detectionAllocation', BY_STYLE],
+      [23, 'detectionFadePct', BY_STYLE],
+      [24, 'detectionOutsideOpacityPct', BY_STYLE],
+      [25, 'scopeFeatherPct', 100],
+      [26, 'scopeTerminusPct', null],
+      [27, 'styleParams', BY_STYLE],
+    ],
+  );
+  assert.deepEqual(
+    SHARE_VIEW_FLAGS.map((f) => [f.bit, f.key, f.default]),
+    [
+      [0, 'bloom', BY_STYLE],
+      [1, 'sharpen', BY_STYLE],
+      [2, 'hudVisible', BY_STYLE],
+      [3, 'celestialRing', BY_STYLE],
+      [4, 'scopeEnabled', true],
+    ],
+  );
+  // The style-applied defaults are frozen meanings too. If the app's style
+  // tables move and this fails, freeze these values in the codec instead of
+  // updating the snapshot: links already shared depend on them.
+  const common = {
+    bloom: false,
+    bloomIntensity: 0,
+    sharpen: true,
+    sharpenIntensity: 49,
+    hudVariant: 'tactical',
+    hudVisible: true,
+    detectionMode: 'DENSE',
+    detectionDensity: 75,
+    detectionAllocation: 'ELASTIC',
+    detectionFadePct: 7,
+    detectionOutsideOpacityPct: 1,
+    celestialRing: false,
+  };
+  assert.deepEqual(JSON.parse(JSON.stringify(SHARE_VIEW_STYLE_DEFAULTS)), {
+    normal: { ...common, styleParams: null },
+    retro: {
+      ...common,
+      styleParams: { pixelation: 1, distortion: 0, instability: 0.42 },
+    },
+    surveillance: {
+      ...common,
+      styleParams: {
+        gain: 0.18,
+        bloom: 0.22,
+        scanlineStr: 0.96,
+        pixelation: 1,
+      },
+    },
+    thermal: {
+      ...common,
+      styleParams: {
+        sensitivity: 0.85,
+        bloom: 0.2,
+        mode: 0.33,
+        pixelation: 1,
+        palette: 0,
+      },
+    },
+    anime: { ...common, styleParams: { saturation: 1, edgeThick: 0.5 } },
+    noir: {
+      ...common,
+      styleParams: { contrastAmt: 1.2, grainAmt: 0.5, vignetteAmt: 0.5 },
+    },
+    snow: { ...common, styleParams: { density: 0.6, wind: 0.5 } },
+  });
+  assert.deepEqual(
+    SHARE_VIEW_ENTITY_KINDS.map((e) => [e.code, e.kind]),
+    [
+      [1, 'aircraft'],
+      [2, 'military_aircraft'],
+      [3, 'vessel'],
+      [4, 'satellite'],
+    ],
+  );
+  assert.deepEqual(
+    SHARE_VIEW_PANELS.map((p) => [p.number, p.id]),
+    SHARE_VIEW_PANELS.map((p, i) => [i, p.id]),
+  );
+});
+
+test('the panel table agrees with the long form’s panel tokens', () => {
+  for (const panel of SHARE_VIEW_PANELS) {
+    const decoded = decodePanelStateParams(
+      new URLSearchParams(`v=2&ui=${panel.token}.c.1_${panel.token}.p.1`),
+    );
+    assert.deepEqual(decoded.specs, [
+      { id: panel.id, collapsed: true, pinned: panel.pinnable ? true : null },
+    ]);
+  }
+});
+
+test('the style parameter table agrees with the long form’s `sp` codec', () => {
+  for (const [style, specs] of Object.entries(SHARE_VIEW_STYLE_PARAMS)) {
+    const values = Object.fromEntries(
+      specs.map((s, i) => [s.key, s.min + ((s.max - s.min) * (i + 1)) / 7]),
+    );
+    const params = new URLSearchParams('v=2');
+    encodeStyleParamState(params, style, values);
+    const legacy = decodeStyleParamState(params, style);
+    assert.deepEqual(
+      normalizeShareViewState({ style, styleParams: values }).styleParams,
+      legacy,
+      style,
+    );
+    assert.deepEqual(
+      decodeOk(encodeShareView({ style, styleParams: values })).state
+        .styleParams,
+      legacy,
+      style,
+    );
+  }
+});
+
+test('every layer option has a frozen absent meaning', () => {
+  for (const entry of LAYER_STATE_REGISTRY) {
+    if (!entry.optionOwner) continue;
+    for (const spec of optionSpecs(entry.optionOwner)) {
+      assert.ok(
+        Object.hasOwn(
+          SHARE_VIEW_LAYER_OPTION_ABSENT[entry.optionOwner] || {},
+          spec.key,
+        ),
+        `${entry.optionOwner}.${spec.key} needs an entry in SHARE_VIEW_LAYER_OPTION_ABSENT`,
+      );
+    }
+  }
+  // A default-only layer state writes no option bytes at all.
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = [...REGISTERED_LAYER_IDS];
+  const bytes = payloadBytes(encodeShareView({ layerState }));
+  assert.equal(bytes.includes(0x5a), false, 'no layer-options field');
+});
+
+test('layer tokens map to permanent numbers covering the whole ledger', () => {
+  for (const token of Object.values(LAYER_STATE_TOKEN_RESERVATIONS)) {
+    assert.equal(layerTokenFromNumber(layerTokenNumber(token)), token);
+  }
+  for (const token of ['0', '9', 'a', 'z', '00', '0z', 'zz'])
+    assert.equal(layerTokenFromNumber(layerTokenNumber(token)), token);
+  assert.equal(layerTokenNumber('00'), 36);
+  assert.equal(layerTokenFromNumber(36 + 36 * 36), null);
+  const numbers = LAYER_STATE_REGISTRY.map((e) => layerTokenNumber(e.token));
+  assert.equal(new Set(numbers).size, numbers.length);
+});
+
+test('layer sets: absent, explicitly empty and populated stay distinct', () => {
+  assert.equal(
+    decodeOk(encodeShareView({ layerState: null })).state.layerState,
+    null,
+  );
+  const empty = decodeOk(
+    encodeShareView({ layerState: createDefaultLayerState() }),
+  ).state.layerState;
+  assert.deepEqual(empty, createDefaultLayerState());
+  const all = createDefaultLayerState();
+  all.enabledLayerIds = [...REGISTERED_LAYER_IDS];
+  assertRoundTrip({ layerState: all });
+});
+
+test('panels: only differences from the frozen layout are written', () => {
+  const defaults = {
+    specs: SHARE_VIEW_PANELS.map((p) => ({
+      id: p.id,
+      collapsed: p.collapsed,
+      pinned: p.pinnable ? false : null,
+    })),
+  };
+  const base = payloadBytes(encodeShareView({})).length;
+  assert.equal(
+    payloadBytes(assertRoundTrip({ panelState: defaults })).length,
+    base + 2,
+  );
+  const oneChanged = structuredClone(defaults);
+  oneChanged.specs[3].collapsed = false;
+  assert.equal(
+    payloadBytes(assertRoundTrip({ panelState: oneChanged })).length,
+    base + 3,
+  );
+  // A partial panel list (an older link) keeps its gaps as "no opinion".
+  const partial = {
+    specs: [{ id: 'cctv-panel', collapsed: false, pinned: null }],
+  };
+  assert.deepEqual(
+    decodeOk(encodeShareView({ panelState: partial })).state.panelState,
+    partial,
+  );
+});
+
+test('a place view opens at its camera; a thing view also names what to follow', () => {
+  const place = decodeOk(encodeShareView({ lat: 1, lon: 2 })).state;
+  assert.deepEqual(place.view, { kind: 'place' });
+  for (const entry of SHARE_VIEW_ENTITY_KINDS) {
+    const id = entry.idForm === 'hex24' ? '3c6444' : '25544';
+    const { state } = decodeOk(
+      encodeShareView({
+        lat: 1,
+        lon: 2,
+        view: { kind: 'thing', entity: { kind: entry.kind, id } },
+      }),
+    );
+    assert.deepEqual(state.view, {
+      kind: 'thing',
+      entity: { kind: entry.kind, id },
+      offset: { ...SHARE_VIEW_FOLLOW_OFFSET_DEFAULT },
+      lastKnown: null,
+    });
+    // Without a last-known fix the view keeps its stored camera.
+    assert.equal(state.lat, 1);
+    assert.equal(state.lon, 2);
+  }
+});
+
+test('thing ids use the compact numeric form when they can, text otherwise', () => {
+  const size = (kind, id) =>
+    payloadBytes(
+      encodeShareView({ view: { kind: 'thing', entity: { kind, id } } }),
+    ).length;
+  assert.equal(size('aircraft', 'ffffff'), size('aircraft', '000001') + 3);
+  assert.ok(size('aircraft', '~abc123') > size('aircraft', 'abc123'));
+  assert.ok(
+    size('vessel', '366999712') < size('vessel', '002442000'),
+    'leading zeros keep the text form',
+  );
+  for (const [kind, id] of [
+    ['aircraft', '000000'],
+    ['vessel', '002442000'],
+    ['military_aircraft', 'adsb_x-1'],
+    ['satellite', '1'],
+  ])
+    assert.equal(
+      decodeOk(
+        encodeShareView({ view: { kind: 'thing', entity: { kind, id } } }),
+      ).state.view.entity.id,
+      id,
+    );
+  // Invalid ids and kinds normalize to a place view.
+  for (const entity of [
+    { kind: 'aircraft', id: 'NOT VALID' },
+    { kind: 'satellite', id: 'abc' },
+    { kind: 'ufo', id: '1' },
+  ])
+    assert.deepEqual(
+      normalizeShareViewState({ view: { kind: 'thing', entity } }).view,
+      { kind: 'place' },
+    );
+  assert.equal(
+    normalizeShareViewState({
+      view: { kind: 'thing', entity: { kind: 'aircraft', id: 'ABC123' } },
+    }).view.entity.id,
+    'abc123',
+  );
+});
+
+test('last-known time is stored relative to the created-at time when there is one', () => {
+  const lastKnown = {
+    lat: 10.0012,
+    lon: 20.0034,
+    alt: 11000,
+    observedAtMs: NOW_MS - 15_000,
+  };
+  const view = {
+    kind: 'thing',
+    entity: { kind: 'aircraft', id: 'a1b2c3' },
+    lastKnown,
+  };
+  const withCreated = assertRoundTrip({
+    lat: 10,
+    lon: 20,
+    sharedAtMs: NOW_MS,
+    view,
+  });
+  const withoutCreated = assertRoundTrip({ lat: 10, lon: 20, view });
+  assert.deepEqual(decodeOk(withoutCreated).state.view.lastKnown, lastKnown);
+  // Relative age (15 s) is 1 byte; the absolute time is 4.
+  assert.ok(
+    payloadBytes(withCreated).length - 5 < payloadBytes(withoutCreated).length,
+  );
+});
+
+test('tracking selections in layer options become a thing view', () => {
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = ['military'];
+  layerState.options.flights.selectedMilitaryTrackingId = 'AE1234';
+  const state = normalizeShareViewState({ layerState });
+  assert.deepEqual(state.view, {
+    kind: 'thing',
+    entity: { kind: 'military_aircraft', id: 'ae1234' },
+    offset: { ...SHARE_VIEW_FOLLOW_OFFSET_DEFAULT },
+    lastKnown: null,
+  });
+  assert.equal(
+    state.layerState.options.flights.selectedMilitaryTrackingId,
+    null,
+  );
+  assertRoundTrip({ layerState });
+});
+
+test('a created-at time in the future is dropped, like the long form’s `at`', () => {
+  const hash = encodeShareView({ sharedAtMs: NOW_MS + 60_000 });
+  assert.equal(decode(hash).state.sharedAtMs, null);
+  assert.equal(
+    decodeShareView(hash, { nowMs: NOW_MS + 60_000 }).state.sharedAtMs,
+    NOW_MS + 60_000,
+  );
+  // Times on either side of the format epoch survive.
+  for (const ms of [1000, (SHARE_VIEW_EPOCH_S - 86400) * 1000, NOW_MS])
+    assert.equal(
+      decode(encodeShareView({ sharedAtMs: ms })).state.sharedAtMs,
+      ms,
+    );
+});
+
+test('a code is the bare base64url payload; URL forms are not codes', () => {
+  const code = encodeShareView({ lat: 51.5, lon: -0.12 });
+  assert.match(code, /^[A-Za-z0-9_-]+$/);
+  for (const form of [`#${code}`, `s=${code}`, `/share/${code}`])
+    assert.equal(decode(form).ok, false, form);
+});
+
+/* ---------------- forward compatibility ---------------- */
+
+/** Append raw fields to an encoded hash, as a newer encoder would. */
+function withExtraFields(hash, write) {
+  const writer = new WireWriter();
+  writer.bytes.push(...payloadBytes(hash));
+  write(writer);
+  return hashOf(writer.finish());
+}
+
+test('unknown top-level fields of every wire type are skipped and reported', () => {
+  const state = {
+    lat: 48.8584,
+    lon: 2.2945,
+    style: 'noir',
+    layerState: { enabledLayerIds: ['flights'] },
+  };
+  const hash = encodeShareView(state);
+  const future = withExtraFields(hash, (w) => {
+    w.uintField(40, 123456);
+    w.bytesField(41, [9, 9, 9, 0xff, 0]);
+    w.tag(42, WIRE_FIXED32).bytes.push(1, 2, 3, 4);
+    w.tag(43, WIRE_FIXED64).bytes.push(1, 2, 3, 4, 5, 6, 7, 8);
+    w.sintField(2000, -5);
+  });
+  const result = decodeOk(future);
+  assert.deepEqual(result.state, decodeOk(hash).state);
+  assert.deepEqual(
+    result.unknownFields.map((u) => [u.scope, u.field, u.wireType]),
+    [
+      ['view', 40, 0],
+      ['view', 41, 2],
+      ['view', 42, 5],
+      ['view', 43, 1],
+      ['view', 2000, 0],
+    ],
+  );
+});
+
+test('unknown fields inside a thing view, codes and bits are skipped too', () => {
+  const thing = new WireWriter();
+  thing.uintField(1, 0xa1b2c3).uintField(5, 900);
+  thing.textField(20, 'cockpit'); // a future thing field
+  const writer = new WireWriter();
+  writer.bytes.push(1);
+  writer.sintField(2, 100000).uintField(9, 0b100001); // flag bit 5 unknown
+  writer.bytesField(
+    10,
+    [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1],
+  ); // layer 160
+  writer.bytesField(12, new WireWriter().varint(11 * 16 + 4 + 1).finish()); // panel 11
+  writer.uintField(14, 99); // style code 99
+  writer.bytesField(13, thing.finish());
+  const result = decodeOk(hashOf(writer.finish()));
+  assert.deepEqual(result.state.view, {
+    kind: 'thing',
+    entity: { kind: 'aircraft', id: 'a1b2c3' },
+    offset: { ...SHARE_VIEW_FOLLOW_OFFSET_DEFAULT, range: 900 },
+    lastKnown: null,
+  });
+  assert.equal(result.state.bloom, true);
+  assert.equal(result.state.style, 'normal');
+  // The followed entity's layer is implied.
+  assert.deepEqual(result.state.layerState.enabledLayerIds, ['flights']);
+  assert.deepEqual(
+    result.unknownFields.map((u) => [u.scope, u.field ?? u.code]),
+    [
+      ['enum:style', 99],
+      ['flags', 32],
+      ['layer', 160],
+      ['panel', 11],
+      ['thing', 20],
+    ],
+  );
+});
+
+test('an unknown view kind falls back to the stored camera', () => {
+  const camera = {
+    lat: 35.6762,
+    lon: 139.6503,
+    alt: 2500,
+    heading: 45,
+    pitch: -20,
+  };
+  const base = payloadBytes(encodeShareView(camera));
+  const expected = decodeOk(encodeShareView(camera)).state;
+
+  const futureKind = new WireWriter();
+  futureKind.bytes.push(...base);
+  futureKind.uintField(1, 7);
+  futureKind.bytesField(60, [1, 2, 3]);
+  const kindResult = decodeOk(hashOf(futureKind.finish()));
+  assert.deepEqual(kindResult.state, expected);
+  assert.equal(kindResult.fallback, 'unknown-view-kind');
+
+  const missing = new WireWriter();
+  missing.bytes.push(...base);
+  missing.uintField(1, 1);
+  assert.equal(decodeOk(hashOf(missing.finish())).fallback, 'missing-thing');
+});
+
+test('an unknown or invalid entity falls back to the camera its fix implies', () => {
+  const fix = { lat: 35.6762, lon: 139.6503, alt: 900, observedAtMs: null };
+  const offset = { range: 3000, heading: 90, pitch: -40 };
+  const thingOf = (write) => {
+    const thing = new WireWriter();
+    write(thing);
+    thing
+      .uintField(5, offset.range)
+      .sintField(6, offset.heading)
+      .sintField(7, offset.pitch)
+      .sintField(8, Math.round(fix.lat * 1e4))
+      .sintField(9, Math.round(fix.lon * 1e4))
+      .sintField(10, fix.alt);
+    const writer = new WireWriter();
+    writer.bytes.push(1);
+    writer.bytesField(13, thing.finish());
+    return decodeOk(hashOf(writer.finish()));
+  };
+  const expected = normalizeShareViewState(followCameraFor(fix, offset));
+
+  // A newer app's entity kind: its id field is unknown here.
+  const future = thingOf((thing) => thing.textField(30, 'cam-77'));
+  assert.equal(future.fallback, 'unknown-entity-kind');
+  assert.deepEqual(future.state, expected);
+  assert.deepEqual(future.unknownFields, [
+    { scope: 'thing', field: 30, wireType: 2 },
+  ]);
+
+  const none = thingOf(() => {});
+  assert.equal(none.fallback, 'missing-entity-kind');
+  assert.deepEqual(none.state, expected);
+
+  const badId = thingOf((thing) => thing.uintField(1, 0x1000000));
+  assert.equal(badId.fallback, 'invalid-entity-id');
+  assert.deepEqual(badId.state, expected);
+});
+
+test('enum names outside the code tables travel as text', () => {
+  const hash = encodeShareView({
+    hudVariant: 'future-hud',
+    mapStack: 'future-map',
+  });
+  const { state, unknownFields } = decodeOk(hash);
+  assert.equal(state.hudVariant, 'future-hud');
+  assert.equal(state.mapStack, 'future-map');
+  assert.equal(unknownFields, undefined);
+  const style = new WireWriter();
+  style.bytes.push(1);
+  style.textField(14, 'thermal');
+  assert.equal(decodeOk(hashOf(style.finish())).state.style, 'thermal');
+  const unknownStyle = new WireWriter();
+  unknownStyle.bytes.push(1);
+  unknownStyle.textField(14, 'sepia');
+  const result = decodeOk(hashOf(unknownStyle.finish()));
+  assert.equal(result.state.style, 'normal');
+  assert.deepEqual(result.unknownFields, [
+    { scope: 'enum:style', code: 'sepia' },
+  ]);
+});
+
+/* ---------------- integrity ---------------- */
+
+test('malformed input is rejected with a reason, never thrown', () => {
+  const good = payloadBytes(
+    encodeShareView({
+      lat: 10,
+      lon: 20,
+      layerState: { enabledLayerIds: ['flights'] },
+    }),
+  );
+  const cases = {
+    'not-a-string': [null, undefined, 42, {}],
+    'too-long': ['A'.repeat(MAX_SHARE_VIEW_CHARS + 1)],
+    'bad-base64': ['AQ==', 'A*Q', 'AQAAA', 's=AQc', '#AQc'],
+    empty: [''],
+    // A lone byte has no room for a check byte.
+    truncated: ['AQ'],
+    checksum: [
+      encodeBase64Url([1, crc8([1]) ^ 1]),
+      encodeBase64Url([...good, (crc8(good) + 1) % 256]),
+    ],
+    'unsupported-version': [hashOf([0]), hashOf([2, 8, 1])],
+    'truncated ': [
+      hashOf(good.slice(0, good.length - 1)),
+      hashOf([1, 0x10]), // field 2 varint with no value
+      hashOf([1, 0x52, 0x7f, 1]), // field 10 claims 127 bytes
+      hashOf([1, 0x52, 0xff, 0xff, 0xff, 0x7f]), // absurd length
+    ],
+    'varint-overflow': [
+      hashOf([1, 0x10, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x01]),
+    ],
+    'non-canonical-varint': [hashOf([1, 0x10, 0x82, 0x00])],
+    'bad-wire-type': [hashOf([1, 0x13]), hashOf([1, 0x16])],
+    'bad-field-number': [hashOf([1, 0x00])],
+    'wire-type-mismatch': [
+      hashOf([1, 0x12, 0x01, 0x00]),
+      hashOf([1, 0x50, 0x01]),
+    ],
+    'duplicate-field': [hashOf([1, 0x10, 0x02, 0x10, 0x04])],
+    'duplicate-entry': [hashOf([1, 0x62, 0x02, 0x31, 0x31])],
+    'out-of-range': [
+      hashOf([1, ...new WireWriter().sintField(2, 900001).finish()]),
+    ],
+    'bad-text': [
+      hashOf([1, ...new WireWriter().bytesField(14, [0xc3, 0xa9]).finish()]),
+    ],
+  };
+  for (const [label, inputs] of Object.entries(cases)) {
+    const reason = label.trim();
+    for (const input of inputs) {
+      const result = decodeShareView(input, { nowMs: NOW_MS });
+      assert.deepEqual(
+        result,
+        { ok: false, reason },
+        `${reason}: ${String(input).slice(0, 40)}`,
+      );
+    }
+  }
+});
+
+test('every truncation and single-byte corruption of real payloads is handled', () => {
+  const random = rng(7);
+  for (let i = 0; i < 60; i += 1) {
+    const bytes = payloadBytes(encodeShareView(randomState(random)));
+    for (let cut = 1; cut < bytes.length; cut += 1) {
+      const result = decode(hashOf(bytes.slice(0, cut)));
+      assert.equal(typeof result.ok, 'boolean');
+    }
+    for (let j = 0; j < 40; j += 1) {
+      const corrupt = Uint8Array.from(bytes);
+      corrupt[1 + Math.floor(random() * (corrupt.length - 1))] = Math.floor(
+        random() * 256,
+      );
+      const result = decode(hashOf(corrupt));
+      assert.equal(typeof result.ok, 'boolean');
+      if (result.ok)
+        assert.deepEqual(normalizeShareViewState(result.state), result.state);
+    }
+  }
+});
+
+/* ---------------- sizes ---------------- */
+
+test('size: a camera-only place view', () => {
+  const hash = assertRoundTrip({
+    lat: 48.8584,
+    lon: 2.2945,
+    alt: 1200,
+    heading: 120,
+    pitch: -25,
+  });
+  assert.equal(hash.length, 24);
+  const copied = assertRoundTrip({
+    lat: 48.8584,
+    lon: 2.2945,
+    alt: 1200,
+    heading: 120,
+    pitch: -25,
+    sharedAtMs: NOW_MS,
+  });
+  assert.equal(copied.length, 31);
+});
+
+test('size: following an aircraft', () => {
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = ['flights'];
+  layerState.options.flights.models3d = true;
+  const view = (offset) => ({
+    kind: 'thing',
+    entity: { kind: 'aircraft', id: 'a1b2c3' },
+    offset,
+    lastKnown: {
+      lat: 37.6213,
+      lon: -122.379,
+      alt: 3200,
+      observedAtMs: NOW_MS - 4000,
+    },
+  });
+  // The app's own follow camera looks north at −35°; only the range is new.
+  const followed = assertRoundTrip({
+    view: view({ range: 5800, heading: 0, pitch: -35 }),
+    layerState,
+    sharedAtMs: NOW_MS,
+  });
+  assert.equal(followed.length, 44);
+  // Made by the share button: the fix is as of the link, so it has no age.
+  const fresh = view({ range: 5800, heading: 0, pitch: -35 });
+  fresh.lastKnown.observedAtMs = NOW_MS;
+  assert.equal(
+    assertRoundTrip({ view: fresh, layerState, sharedAtMs: NOW_MS }).length,
+    42,
+  );
+  // In Noir with Noir's own look, only the style is added.
+  assert.equal(
+    assertRoundTrip({
+      ...SHARE_VIEW_STYLE_DEFAULTS.noir,
+      style: 'noir',
+      view: fresh,
+      layerState,
+      sharedAtMs: NOW_MS,
+    }).length,
+    44,
+  );
+  // After orbiting the aircraft, heading and pitch are written too.
+  const orbited = assertRoundTrip({
+    view: view({ range: 1500, heading: 30, pitch: -20 }),
+    layerState,
+    sharedAtMs: NOW_MS,
+  });
+  assert.equal(orbited.length, 50);
+  // No camera is stored: it is where following the fix puts it.
+  const { state } = decodeOk(orbited);
+  assert.deepEqual(
+    {
+      lat: state.lat,
+      lon: state.lon,
+      alt: state.alt,
+      heading: state.heading,
+      pitch: state.pitch,
+    },
+    { lat: 37.6103, lon: -122.387, alt: 3713, heading: 30, pitch: -20 },
+  );
+});
+
+test('the follow offset converts to and from east/north/up metres', () => {
+  for (const offset of [
+    { range: 5800, heading: 0, pitch: -35 },
+    { range: 1500, heading: 30, pitch: -20 },
+    { range: 750000, heading: 225, pitch: -60 },
+    { range: 300, heading: 359, pitch: 10 },
+  ])
+    assert.deepEqual(followOffsetFromEnu(followOffsetToEnu(offset)), offset);
+  const { east, north, up } = followOffsetToEnu({
+    range: 1000,
+    heading: 90,
+    pitch: -30,
+  });
+  // Looking east and down: the camera is west of the entity and above it.
+  assert.ok(east < -800 && Math.abs(north) < 1e-9 && Math.abs(up - 500) < 1e-9);
+  assert.equal(followOffsetFromEnu({ east: 0, north: 0, up: 0 }), null);
+});
+
+test('the derived camera looks at the fix from the offset, even from orbit', () => {
+  const R = 6_371_000;
+  const ecef = ({ lat, lon, alt }) => {
+    const r = R + alt;
+    const c = Math.cos((lat * Math.PI) / 180);
+    return [
+      r * c * Math.cos((lon * Math.PI) / 180),
+      r * c * Math.sin((lon * Math.PI) / 180),
+      r * Math.sin((lat * Math.PI) / 180),
+    ];
+  };
+  for (const [fix, offset] of [
+    // A satellite followed from the app's own distance.
+    [
+      { lat: 51.6, lon: -0.1, alt: 420_000 },
+      { range: 750_000, heading: 225, pitch: -35 },
+    ],
+    // Near a pole, and across the antimeridian.
+    [
+      { lat: 89.9, lon: 179.95, alt: 10_000 },
+      { range: 20_000, heading: 90, pitch: -20 },
+    ],
+    [
+      { lat: 37.6213, lon: -122.379, alt: 3200 },
+      { range: 5800, heading: 0, pitch: -35 },
+    ],
+  ]) {
+    const camera = followCameraFor(fix, offset);
+    const [a, b] = [ecef(camera), ecef(fix)];
+    const distance = Math.hypot(a[0] - b[0], a[1] - b[1], a[2] - b[2]);
+    assert.ok(Math.abs(distance - offset.range) < 1e-3 * offset.range);
+    assert.ok(Math.abs(camera.lon) <= 180 && Math.abs(camera.lat) <= 90);
+    // Short ranges look along the offset itself.
+    if (offset.range < 10_000) {
+      assert.ok(Math.abs(camera.heading - offset.heading) < 0.1);
+      assert.ok(Math.abs(camera.pitch - offset.pitch) < 0.1);
+    }
+  }
+});
+
+test('a fix without its own time is as of the link', () => {
+  const view = {
+    kind: 'thing',
+    entity: { kind: 'satellite', id: '25544' },
+    lastKnown: { lat: 1, lon: 2, alt: 420000 },
+  };
+  const state = normalizeShareViewState({ view, sharedAtMs: NOW_MS });
+  assert.equal(state.view.lastKnown.observedAtMs, NOW_MS);
+  assertRoundTrip({ view, sharedAtMs: NOW_MS });
+  // With no created-at time either, the fix has no time.
+  assert.equal(
+    decodeOk(encodeShareView({ view })).state.view.lastKnown.observedAtMs,
+    null,
+  );
+});
+
+test('the check byte rejects every single-character typo', () => {
+  const ALPHABET =
+    'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+  const random = rng(0xc0de);
+  let typos = 0;
+  for (let i = 0; i < 40; i += 1) {
+    const code = encodeShareView(randomState(random));
+    for (let at = 0; at < code.length; at += 1) {
+      for (const char of ALPHABET) {
+        if (char === code[at]) continue;
+        const typo = code.slice(0, at) + char + code.slice(at + 1);
+        const result = decode(typo);
+        assert.equal(result.ok, false, `${code} → ${typo}`);
+        typos += 1;
+      }
+    }
+  }
+  assert.ok(typos > 50_000);
+});
+
+/* ---------------- review regressions ---------------- */
+
+test('unknown detection names fall back to their defaults and are reported', () => {
+  const writer = new WireWriter();
+  writer.bytes.push(1);
+  writer.textField(20, 'FUTURE').textField(22, 'GREEDY');
+  const result = decodeOk(hashOf(writer.finish()));
+  assert.equal(result.state.detectionMode, 'DENSE');
+  assert.equal(result.state.detectionAllocation, 'ELASTIC');
+  assert.deepEqual(result.unknownFields, [
+    { scope: 'enum:detectionMode', code: 'FUTURE' },
+    { scope: 'enum:detectionAllocation', code: 'GREEDY' },
+  ]);
+});
+
+test('extreme and negative-zero numbers normalize to values the decoder returns', () => {
+  assert.ok(Number.isFinite(normalizeShareViewState({ lon: 1e305 }).lon));
+  assertRoundTrip({ lon: 1e305, lat: -1e305 });
+  for (const state of [
+    { lat: -0.00001 },
+    { lon: -0.00001 },
+    { alt: -0.2 },
+    { pitch: -0.2 },
+  ]) {
+    assertRoundTrip(state);
+    for (const value of Object.values(normalizeShareViewState(state)))
+      assert.equal(Object.is(value, -0), false);
+  }
+});
+
+test('future panel values and style tokens are skipped, not applied', () => {
+  const panels = new WireWriter();
+  panels.bytes.push(1);
+  panels.bytesField(
+    12,
+    new WireWriter()
+      .varint(3 * 16 + 3 * 4)
+      .varint(0 * 16 + 2 * 4 + 3)
+      .finish(),
+  );
+  const panelResult = decodeOk(hashOf(panels.finish()));
+  const ids = panelResult.state.panelState.specs.map((spec) => spec.id);
+  assert.equal(ids.includes('cctv-panel'), false);
+  assert.equal(ids.includes('control-panel'), false);
+  assert.equal(panelResult.unknownFields.length, 2);
+
+  const style = new WireWriter();
+  style.bytes.push(1);
+  style.uintField(14, 3); // thermal
+  style.bytesField(
+    27,
+    new WireWriter().varint(36).varint(5).varint(37).varint(6).finish(),
+  );
+  const styleResult = decodeOk(hashOf(style.finish()));
+  // Unknown tokens change nothing: the style keeps its own parameters.
+  assert.deepEqual(
+    styleResult.state.styleParams,
+    SHARE_VIEW_STYLE_DEFAULTS.thermal.styleParams,
+  );
+  assert.equal(styleResult.unknownFields.length, 2);
+});
+
+test('a layer option filed under a mirror layer is ignored', () => {
+  const writer = new WireWriter();
+  writer.bytes.push(1);
+  const military = layerTokenNumber('m');
+  writer.bytesField(10, [0, 0, 0b01000000]); // m = 22
+  writer.bytesField(
+    11,
+    new WireWriter()
+      .varint(military)
+      .varint(layerTokenNumber('m') * 2) // option `m` (models3dMode) as integer
+      .varint(0)
+      .finish(),
+  );
+  const result = decodeOk(hashOf(writer.finish()));
+  assert.deepEqual(result.state.layerState.enabledLayerIds, ['military']);
+  assert.deepEqual(result.unknownFields, [
+    { scope: 'layer-option', code: `${military}.${layerTokenNumber('m')}` },
+  ]);
+});
diff --git a/src/share/wire.js b/src/share/wire.js
new file mode 100644
index 000000000..f0b72f301
--- /dev/null
+++ b/src/share/wire.js
@@ -0,0 +1,259 @@
+/**
+ * Byte-level primitives for the compact share-view format: base64url text,
+ * protobuf-style varints, and a tag-length-value reader and writer.
+ *
+ * Pure: no DOM, no Cesium, no platform buffers. Every integrity failure is a
+ * {@link ShareWireError} with a stable `reason`, so the view codec can turn it
+ * into a rejected link instead of an exception at app start.
+ */
+
+/** Wire types. Field numbers and their wire types are permanent. */
+export const WIRE_VARINT = 0;
+export const WIRE_FIXED64 = 1;
+export const WIRE_LEN = 2;
+export const WIRE_FIXED32 = 5;
+
+/** Field numbers stay inside protobuf's range so tags fit in five bytes. */
+export const MAX_FIELD_NUMBER = 2 ** 29 - 1;
+const MAX_VARINT_BYTES = 8; // 56 bits covers every safe integer.
+
+/** A malformed or out-of-bounds payload. `reason` is a stable code. */
+export class ShareWireError extends Error {
+  constructor(reason, detail = '') {
+    super(detail ? `${reason}: ${detail}` : reason);
+    this.name = 'ShareWireError';
+    this.reason = reason;
+  }
+}
+
+const BASE64URL =
+  'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+const BASE64URL_INDEX = new Map(
+  [...BASE64URL].map((char, index) => [char, index]),
+);
+
+/** Unpadded base64url text for `bytes`. */
+export function encodeBase64Url(bytes) {
+  let out = '';
+  for (let i = 0; i < bytes.length; i += 3) {
+    const a = bytes[i];
+    const b = i + 1 < bytes.length ? bytes[i + 1] : 0;
+    const c = i + 2 < bytes.length ? bytes[i + 2] : 0;
+    const triple = (a << 16) | (b << 8) | c;
+    out += BASE64URL[(triple >> 18) & 63] + BASE64URL[(triple >> 12) & 63];
+    if (i + 1 < bytes.length) out += BASE64URL[(triple >> 6) & 63];
+    if (i + 2 < bytes.length) out += BASE64URL[triple & 63];
+  }
+  return out;
+}
+
+/**
+ * Bytes for unpadded base64url text. Rejects padding, foreign characters, an
+ * impossible length and non-zero trailing bits, so every payload has exactly
+ * one spelling.
+ */
+export function decodeBase64Url(text) {
+  if (typeof text !== 'string' || text.length === 0)
+    throw new ShareWireError('empty');
+  if (text.length % 4 === 1) throw new ShareWireError('bad-base64');
+  const bytes = new Uint8Array(Math.floor((text.length * 3) / 4));
+  let buffer = 0;
+  let bits = 0;
+  let out = 0;
+  for (const char of text) {
+    const value = BASE64URL_INDEX.get(char);
+    if (value === undefined) throw new ShareWireError('bad-base64');
+    buffer = ((buffer << 6) | value) & 0xffffff;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes[out++] = (buffer >> bits) & 0xff;
+    }
+  }
+  if (bits > 0 && (buffer & ((1 << bits) - 1)) !== 0)
+    throw new ShareWireError('bad-base64', 'non-zero trailing bits');
+  return bytes;
+}
+
+/**
+ * CRC-8 (polynomial x⁸ + x² + x + 1, 0x07; initial value 0; no reflection;
+ * no final XOR) of `bytes`. A degree-8 CRC detects every error burst of up to
+ * 8 bits, so any one mistyped base64url character (6 bits) is caught.
+ */
+export function crc8(bytes) {
+  let crc = 0;
+  for (const byte of bytes) {
+    crc ^= byte;
+    for (let bit = 0; bit < 8; bit += 1)
+      crc = crc & 0x80 ? ((crc << 1) ^ 0x07) & 0xff : (crc << 1) & 0xff;
+  }
+  return crc;
+}
+
+/** Map a signed integer onto the unsigned varint space (0,-1,1,-2 → 0,1,2,3). */
+export function zigzag(value) {
+  return value >= 0 ? value * 2 : -value * 2 - 1;
+}
+
+/** Inverse of {@link zigzag}. */
+export function unzigzag(value) {
+  return value % 2 === 0 ? value / 2 : -(value + 1) / 2;
+}
+
+/** Largest magnitude a zigzag field can carry without losing precision. */
+export const MAX_ZIGZAG_MAGNITUDE = Math.floor(Number.MAX_SAFE_INTEGER / 2);
+
+/** Append-only byte sink with protobuf-style field helpers. */
+export class WireWriter {
+  constructor() {
+    this.bytes = [];
+  }
+
+  varint(value) {
+    if (!Number.isSafeInteger(value) || value < 0)
+      throw new RangeError(`varint out of range: ${value}`);
+    let rest = value;
+    while (rest >= 0x80) {
+      this.bytes.push((rest % 0x80) | 0x80);
+      rest = Math.floor(rest / 0x80);
+    }
+    this.bytes.push(rest);
+    return this;
+  }
+
+  tag(field, wireType) {
+    if (!Number.isInteger(field) || field < 1 || field > MAX_FIELD_NUMBER)
+      throw new RangeError(`field number out of range: ${field}`);
+    return this.varint(field * 8 + wireType);
+  }
+
+  uintField(field, value) {
+    return this.tag(field, WIRE_VARINT).varint(value);
+  }
+
+  sintField(field, value) {
+    if (!Number.isSafeInteger(value) || Math.abs(value) > MAX_ZIGZAG_MAGNITUDE)
+      throw new RangeError(`signed value out of range: ${value}`);
+    return this.tag(field, WIRE_VARINT).varint(zigzag(value));
+  }
+
+  bytesField(field, bytes) {
+    this.tag(field, WIRE_LEN).varint(bytes.length);
+    for (const byte of bytes) this.bytes.push(byte);
+    return this;
+  }
+
+  /** ASCII-only text; every share-view string is drawn from ASCII grammars. */
+  textField(field, text) {
+    return this.bytesField(field, asciiBytes(text));
+  }
+
+  finish() {
+    return Uint8Array.from(this.bytes);
+  }
+}
+
+/** Printable-ASCII bytes for `text`; anything else is a programming error. */
+export function asciiBytes(text) {
+  const bytes = [];
+  for (let i = 0; i < text.length; i += 1) {
+    const code = text.charCodeAt(i);
+    if (code < 0x20 || code > 0x7e)
+      throw new RangeError('share-view text must be printable ASCII');
+    bytes.push(code);
+  }
+  return bytes;
+}
+
+/** Printable-ASCII text from bytes; anything else is a malformed payload. */
+export function asciiText(bytes) {
+  let out = '';
+  for (const byte of bytes) {
+    if (byte < 0x20 || byte > 0x7e) throw new ShareWireError('bad-text');
+    out += String.fromCharCode(byte);
+  }
+  return out;
+}
+
+/** Bounds-checked cursor over one message (or one packed blob). */
+export class WireReader {
+  constructor(bytes, start = 0, end = bytes.length) {
+    this.bytes = bytes;
+    this.pos = start;
+    this.end = end;
+  }
+
+  get done() {
+    return this.pos >= this.end;
+  }
+
+  /** One canonical varint no larger than Number.MAX_SAFE_INTEGER. */
+  varint() {
+    let value = 0;
+    let scale = 1;
+    for (let count = 0; count < MAX_VARINT_BYTES; count += 1) {
+      if (this.pos >= this.end) throw new ShareWireError('truncated');
+      const byte = this.bytes[this.pos++];
+      value += (byte & 0x7f) * scale;
+      if ((byte & 0x80) === 0) {
+        // A zero final byte after a continuation is an overlong spelling.
+        if (count > 0 && byte === 0)
+          throw new ShareWireError('non-canonical-varint');
+        if (!Number.isSafeInteger(value))
+          throw new ShareWireError('varint-overflow');
+        return value;
+      }
+      scale *= 0x80;
+    }
+    throw new ShareWireError('varint-overflow');
+  }
+
+  svarint() {
+    return unzigzag(this.varint());
+  }
+
+  /** The next field's number and wire type, rejecting reserved wire types. */
+  tag() {
+    const key = this.varint();
+    const field = Math.floor(key / 8);
+    const wireType = key % 8;
+    if (field < 1 || field > MAX_FIELD_NUMBER)
+      throw new ShareWireError('bad-field-number');
+    if (
+      wireType !== WIRE_VARINT &&
+      wireType !== WIRE_FIXED64 &&
+      wireType !== WIRE_LEN &&
+      wireType !== WIRE_FIXED32
+    )
+      throw new ShareWireError('bad-wire-type', String(wireType));
+    return { field, wireType };
+  }
+
+  /** A length-delimited body as a sub-reader over the same bytes. */
+  lengthDelimited() {
+    const length = this.varint();
+    if (length > this.end - this.pos)
+      throw new ShareWireError('truncated', 'length exceeds payload');
+    const reader = new WireReader(this.bytes, this.pos, this.pos + length);
+    this.pos += length;
+    return reader;
+  }
+
+  /** Remaining bytes of this reader as a fresh array. */
+  rest() {
+    const out = this.bytes.slice(this.pos, this.end);
+    this.pos = this.end;
+    return out;
+  }
+
+  /** Skip one value of `wireType`, so newer fields cost older decoders nothing. */
+  skip(wireType) {
+    if (wireType === WIRE_VARINT) this.varint();
+    else if (wireType === WIRE_LEN) this.lengthDelimited();
+    else {
+      const size = wireType === WIRE_FIXED64 ? 8 : 4;
+      if (size > this.end - this.pos) throw new ShareWireError('truncated');
+      this.pos += size;
+    }
+  }
+}
diff --git a/src/share/wire.test.mjs b/src/share/wire.test.mjs
new file mode 100644
index 000000000..5383293b3
--- /dev/null
+++ b/src/share/wire.test.mjs
@@ -0,0 +1,188 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  ShareWireError,
+  WIRE_FIXED32,
+  WIRE_FIXED64,
+  WIRE_LEN,
+  WIRE_VARINT,
+  WireReader,
+  WireWriter,
+  crc8,
+  decodeBase64Url,
+  encodeBase64Url,
+  unzigzag,
+  zigzag,
+} from './wire.js';
+
+const reasonOf = (fn) => {
+  try {
+    fn();
+  } catch (error) {
+    assert.ok(error instanceof ShareWireError, String(error));
+    return error.reason;
+  }
+  assert.fail('expected a ShareWireError');
+};
+
+test('base64url round-trips every length and byte value without padding', () => {
+  for (let length = 0; length < 70; length += 1) {
+    const bytes = Uint8Array.from(
+      { length },
+      (_, i) => (i * 97 + length) & 0xff,
+    );
+    const text = encodeBase64Url(bytes);
+    assert.match(text, /^[A-Za-z0-9_-]*$/);
+    if (length) assert.deepEqual(decodeBase64Url(text), bytes);
+  }
+  const all = Uint8Array.from({ length: 256 }, (_, i) => i);
+  assert.deepEqual(decodeBase64Url(encodeBase64Url(all)), all);
+  assert.equal(encodeBase64Url(Uint8Array.of(0xfb, 0xff)), '-_8');
+});
+
+test('base64url rejects padding, foreign characters, bad lengths and stray bits', () => {
+  for (const text of ['', 'AQ==', 'A+Q', 'A/Q', 'A Q', 'AQ%', 'A', 'AQAAA']) {
+    assert.ok(
+      ['empty', 'bad-base64'].includes(reasonOf(() => decodeBase64Url(text))),
+      text,
+    );
+  }
+  // "AR" carries one byte (0x01) plus four trailing bits that must be zero.
+  assert.equal(
+    reasonOf(() => decodeBase64Url('AR')),
+    'bad-base64',
+  );
+  assert.deepEqual(decodeBase64Url('AQ'), Uint8Array.of(1));
+});
+
+test('zigzag maps small magnitudes of either sign to small codes', () => {
+  assert.deepEqual([0, -1, 1, -2, 2].map(zigzag), [0, 1, 2, 3, 4]);
+  for (const value of [0, 1, -1, 63, -64, 1e9, -1e9, 2 ** 51, -(2 ** 51)]) {
+    assert.equal(unzigzag(zigzag(value)), value);
+  }
+});
+
+test('varints round-trip up to the largest safe integer', () => {
+  const values = [
+    0,
+    1,
+    127,
+    128,
+    300,
+    2 ** 21,
+    2 ** 31,
+    2 ** 32 + 5,
+    Number.MAX_SAFE_INTEGER,
+  ];
+  const writer = new WireWriter();
+  for (const value of values) writer.varint(value);
+  const reader = new WireReader(writer.finish());
+  for (const value of values) assert.equal(reader.varint(), value);
+  assert.ok(reader.done);
+  assert.deepEqual(
+    new WireWriter().varint(300).finish(),
+    Uint8Array.of(0xac, 0x02),
+  );
+});
+
+test('the writer refuses values the format cannot carry', () => {
+  assert.throws(() => new WireWriter().varint(-1), RangeError);
+  assert.throws(() => new WireWriter().varint(1.5), RangeError);
+  assert.throws(() => new WireWriter().varint(2 ** 53), RangeError);
+  assert.throws(() => new WireWriter().tag(0, WIRE_VARINT), RangeError);
+  assert.throws(() => new WireWriter().textField(1, 'é'), RangeError);
+});
+
+test('the reader rejects truncated, overlong and overflowing varints', () => {
+  assert.equal(
+    reasonOf(() => new WireReader(Uint8Array.of(0x80)).varint()),
+    'truncated',
+  );
+  assert.equal(
+    reasonOf(() => new WireReader(Uint8Array.of(0x81, 0x00)).varint()),
+    'non-canonical-varint',
+  );
+  const tooLong = new Uint8Array(9).fill(0xff);
+  assert.equal(
+    reasonOf(() => new WireReader(tooLong).varint()),
+    'varint-overflow',
+  );
+  const beyondSafe = Uint8Array.of(
+    0xff,
+    0xff,
+    0xff,
+    0xff,
+    0xff,
+    0xff,
+    0xff,
+    0x7f,
+  );
+  assert.equal(
+    reasonOf(() => new WireReader(beyondSafe).varint()),
+    'varint-overflow',
+  );
+});
+
+test('the reader bounds lengths and rejects group and reserved wire types', () => {
+  const absurd = new WireWriter().tag(3, WIRE_LEN).varint(1_000_000).finish();
+  const reader = new WireReader(absurd);
+  reader.tag();
+  assert.equal(
+    reasonOf(() => reader.lengthDelimited()),
+    'truncated',
+  );
+  for (const wireType of [3, 4, 6, 7]) {
+    const bytes = new WireWriter().varint(8 + wireType).finish();
+    assert.equal(
+      reasonOf(() => new WireReader(bytes).tag()),
+      'bad-wire-type',
+    );
+  }
+  assert.equal(
+    reasonOf(() => new WireReader(Uint8Array.of(0x00)).tag()),
+    'bad-field-number',
+  );
+});
+
+test('skip steps over each wire type and stops at a truncated value', () => {
+  const writer = new WireWriter()
+    .uintField(1, 300)
+    .bytesField(2, [1, 2, 3])
+    .tag(3, WIRE_FIXED32);
+  writer.bytes.push(1, 2, 3, 4);
+  writer.tag(4, WIRE_FIXED64);
+  writer.bytes.push(1, 2, 3, 4, 5, 6, 7, 8);
+  writer.uintField(5, 9);
+  const reader = new WireReader(writer.finish());
+  for (let field = 1; field <= 4; field += 1)
+    reader.skip(reader.tag().wireType);
+  assert.deepEqual(reader.tag(), { field: 5, wireType: WIRE_VARINT });
+  assert.equal(reader.varint(), 9);
+  const short = new WireWriter().tag(1, WIRE_FIXED64).finish();
+  const shortReader = new WireReader(Uint8Array.of(...short, 1, 2));
+  assert.equal(
+    reasonOf(() => shortReader.skip(shortReader.tag().wireType)),
+    'truncated',
+  );
+});
+
+test('crc8 is CRC-8/SMBUS and catches every burst of up to 8 bits', () => {
+  // The catalogued check value for the ASCII digits 1–9.
+  assert.equal(crc8(new TextEncoder().encode('123456789')), 0xf4);
+  assert.equal(crc8([]), 0);
+  const bytes = [1, 0x10, 0x82, 0x40, 0x7f, 0xff, 0x00, 0x33];
+  const sum = crc8(bytes);
+  for (let bit = 0; bit + 8 <= bytes.length * 8; bit += 1) {
+    for (let pattern = 1; pattern < 256; pattern += 1) {
+      // Flip a burst starting at `bit` (its first bit always set).
+      if (!(pattern & 1)) continue;
+      const flipped = [...bytes];
+      for (let k = 0; k < 8; k += 1) {
+        if (!(pattern & (1 << k))) continue;
+        const at = bit + k;
+        flipped[at >> 3] ^= 0x80 >> (at & 7);
+      }
+      assert.notEqual(crc8(flipped), sum, `burst ${pattern} at bit ${bit}`);
+    }
+  }
+});
diff --git a/src/sharelink.celestial.test.mjs b/src/sharelink.celestial.test.mjs
index 230843584..91961e0b1 100644
--- a/src/sharelink.celestial.test.mjs
+++ b/src/sharelink.celestial.test.mjs
@@ -8,6 +8,12 @@ import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import { ShareLinkManager, decodeShareCreatedAtMs } from './sharelink.js';
 import { createDefaultLayerState } from './data/layerState.js';
+import { parseSharePath } from './share/shareLinkPath.js';
+import { decodeShareView } from './share/viewCodec.js';
+
+/** The decoded view of a copied `/share/<code>` link. */
+const sharedState = (href) =>
+  decodeShareView(parseSharePath(new URL(href).pathname).code).state;
 
 const uiSource = readShellSource();
 
@@ -99,6 +105,22 @@ test('Nepal locator token is valid in v2 share links', () => {
   assert.equal(parsed.layerStateInvalid, false);
 });
 
+test('scope feather above 100% survives share parsing and serialization', () => {
+  const manager = makeManager('#v=2&lat=10&lon=20&sc=0&scf=200');
+  const parsed = manager.parseInitialHash();
+  assert.equal(parsed.scopeEnabled, false);
+  assert.equal(parsed.scopeFeatherPct, 200);
+  assert.equal(makeManager('#lat=10&lon=20&scf=175').parseInitialHash().scopeFeatherPct, 175);
+  assert.equal(makeManager('#lat=10&lon=20&scf=999').parseInitialHash().scopeFeatherPct, 200);
+  manager.onToggleChange(false, true, { scopeEnabled: false, scopeFeatherPct: 200 });
+  const params = manager._buildHashParams();
+  assert.equal(params.get('sc'), '0');
+  assert.equal(params.get('scf'), '200');
+  manager.onToggleChange(false, true, { scopeFeatherPct: 999 });
+  assert.equal(manager._buildHashParams().get('scf'), '200');
+  clearTimeout(manager._debounceTimer);
+});
+
 test('share-link serialization emits the current celestial state', () => {
   const manager = makeManager();
   manager.onToggleChange(false, false, { celestialRingEnabled: false });
@@ -294,8 +316,8 @@ test('copy adds a fresh ephemeral timestamp without aging the live URL', async (
 
   assert.equal(await manager.copyLink({ nowMs: 2_000_000 }), true);
   assert.equal(await manager.copyLink({ nowMs: 2_002_000 }), true);
-  assert.equal(new URL(copied[0]).hash.includes('at=2000'), true);
-  assert.equal(new URL(copied[1]).hash.includes('at=2002'), true);
+  assert.equal(sharedState(copied[0]).sharedAtMs, 2_000_000);
+  assert.equal(sharedState(copied[1]).sharedAtMs, 2_002_000);
   assert.equal(window.location.hash, liveHash);
   assert.equal(new URLSearchParams(window.location.hash.slice(1)).has('at'), false);
 });
@@ -307,8 +329,7 @@ test('copy snapshots current state while incoming hash writes are still suppress
   manager.parseInitialHash();
   assert.equal(manager._initialRestorePending, true);
   assert.equal(await manager.copyLink({ nowMs: 3_000_000 }), true);
-  const params = new URL(copied).hash.slice(1);
-  assert.equal(new URLSearchParams(params).get('at'), '3000');
+  assert.equal(sharedState(copied).sharedAtMs, 3_000_000);
   assert.equal(window.location.hash, '#v=2&lat=10&lon=20&l=e&at=100');
 });
 
@@ -498,8 +519,8 @@ test('every explicit visual UI gesture claims restore authority before it mutate
     ['cycleDetection: () => {', 'toggleCctv: () =>', 'cycleDetectionMode()', 'detection hotkey'],
     ['toggleBloom:', 'setBloomIntensity:', 'this._setBloomEnabled(', 'toggleBloom control'],
     ['setBloomIntensity:', 'toggleSharpen:', 'this._setBloomIntensity(', 'setBloomIntensity control'],
-    ['toggleSharpen:', 'toggleScope:', 'this._setSharpenEnabled(', 'toggleSharpen control'],
-    ['toggleScope:', 'setScopeFeather:', 'setScopeMaskEnabled(', 'toggleScope control'],
+    ['toggleSharpen:', 'setScopeEnabled:', 'this._setSharpenEnabled(', 'toggleSharpen control'],
+    ['setScopeEnabled:', 'setScopeFeather:', 'setScopeMaskEnabled(', 'setScopeEnabled control'],
     ['setScopeFeather:', 'setSharpenIntensity:', 'setScopeMaskFeather(', 'setScopeFeather control'],
     ['setSharpenIntensity:', 'setHudLayout:', 'this._applySharpenIntensity(', 'setSharpenIntensity control'],
     ['setHudLayout:', 'toggleCleanView:', 'this._setHudVariant(', 'setHudLayout control'],
diff --git a/src/sharelink.js b/src/sharelink.js
index 7e0e78b35..4a0291a84 100644
--- a/src/sharelink.js
+++ b/src/sharelink.js
@@ -5,17 +5,36 @@ import {
   normalizeAllocationStrategy,
 } from './data/detectionPolicy.js';
 import { clampScopeTerminusPct } from './scopeMask.js';
+import { clampScopeFeatherPct } from './scopeMaskPolicy.js';
 import {
   decodeLayerStateParams,
   encodeLayerStateParams,
 } from './data/layerState.js';
 import { STYLE_URL_NAMES } from './view/index.js';
+import {
+  SHARE_VIEW_PANELS,
+  SHARE_VIEW_STYLE_PARAMS,
+  decodeShareView,
+  encodeShareView,
+} from './share/viewCodec.js';
+import {
+  fromLegacyShareState,
+  toLegacyShareState,
+} from './share/legacyShareState.js';
+import {
+  appRootUrl,
+  parseSharePath,
+  shareLinkUrl,
+} from './share/shareLinkPath.js';
 
 /**
  * Share Links — URL Hash State Management
  *
- * Encodes camera position + style into the URL hash so links can be shared.
- * Format: #lat=37.77&lon=-122.42&alt=800&heading=0&pitch=-35&style=nvg&bloom=1&bi=84&bv=2&sharpen=0&si=65&hud=tactical&hv=1&dm=BALANCED&dd=50&da=elastic&kf=16&ko=0&cr=0&map=photoreal
+ * The address bar follows the live view in the long hash form:
+ * #lat=37.77&lon=-122.42&alt=800&heading=0&pitch=-35&style=nvg&bloom=1&bi=84&bv=2&sharpen=0&si=65&hud=tactical&hv=1&dm=BALANCED&dd=50&da=elastic&kf=16&ko=0&cr=0&map=photoreal
+ *
+ * A shared link is the short form, `<app>/share/<code>`, with the code from
+ * src/share/viewCodec.js (docs/SHARE-LINK-FORMAT.md). Both forms open here.
  */
 
 const DEBOUNCE_MS = 500;
@@ -28,20 +47,9 @@ const SHARE_UI_STATE_PARAM = 'ui';
 const SHARE_STYLE_PARAMS_PARAM = 'sp';
 const SHARE_CREATED_AT_PARAM = 'at';
 
-const SHARE_PANEL_STATE_REGISTRY = Object.freeze([
-  { id: 'control-panel', token: 'c', pinnable: true },
-  { id: 'location-bar', token: 'l', pinnable: true },
-  { id: 'data-panel', token: 'd', pinnable: false },
-  { id: 'cctv-panel', token: 'v', pinnable: false },
-  { id: 'recent-imagery-panel', token: 'i', pinnable: false },
-  { id: 'street-level-panel', token: 't', pinnable: false },
-  { id: 'radio-panel', token: 'r', pinnable: false },
-  { id: 'scene-panel', token: 's', pinnable: false },
-  { id: 'global-context-panel', token: 'g', pinnable: false },
-  { id: 'pp-toggles', token: 'p', pinnable: false },
-  { id: 'param-slider-panel', token: 'm', pinnable: false },
-]);
-
+// The panel and visual-preset parameter tables are the share format's own
+// (src/share/viewCodec.js); the long form spells their entries by token.
+const SHARE_PANEL_STATE_REGISTRY = SHARE_VIEW_PANELS;
 const SHARE_PANEL_STATE_BY_TOKEN = Object.freeze(
   new Map(SHARE_PANEL_STATE_REGISTRY.map((entry) => [entry.token, entry])),
 );
@@ -50,46 +58,25 @@ const URL_TO_STYLE = Object.fromEntries(
   Object.entries(STYLE_TO_URL).map(([k, v]) => [v, k]),
 );
 
-const SHARE_STYLE_PARAM_REGISTRY = Object.freeze({
-  retro: Object.freeze([
-    { key: 'pixelation', token: 'p', min: 1, max: 10 },
-    { key: 'distortion', token: 'd', min: 0, max: 1 },
-    { key: 'instability', token: 'i', min: 0, max: 1 },
-  ]),
-  surveillance: Object.freeze([
-    { key: 'gain', token: 'g', min: 0, max: 1 },
-    { key: 'bloom', token: 'b', min: 0, max: 1 },
-    { key: 'scanlineStr', token: 's', min: 0, max: 1 },
-    { key: 'pixelation', token: 'p', min: 1, max: 6 },
-  ]),
-  thermal: Object.freeze([
-    { key: 'sensitivity', token: 's', min: 0, max: 1 },
-    { key: 'bloom', token: 'b', min: 0, max: 1 },
-    { key: 'mode', token: 'm', min: 0, max: 1 },
-    { key: 'pixelation', token: 'p', min: 1, max: 6 },
-    { key: 'palette', token: 'a', min: 0, max: 1 },
-  ]),
-  anime: Object.freeze([
-    { key: 'saturation', token: 's', min: 0, max: 2 },
-    { key: 'edgeThick', token: 'e', min: 0, max: 1 },
-  ]),
-  noir: Object.freeze([
-    { key: 'contrastAmt', token: 'c', min: 0, max: 2 },
-    { key: 'grainAmt', token: 'g', min: 0, max: 1 },
-    { key: 'vignetteAmt', token: 'v', min: 0, max: 1 },
-  ]),
-  snow: Object.freeze([
-    { key: 'density', token: 'd', min: 0, max: 1 },
-    { key: 'wind', token: 'w', min: 0, max: 1 },
-  ]),
-});
+const SHARE_STYLE_PARAM_REGISTRY = SHARE_VIEW_STYLE_PARAMS;
 
 export class ShareLinkManager {
   constructor(
     viewer,
-    { onRestore, isNavigationCurrent, cancelOwnedNavigation } = {},
+    {
+      onRestore,
+      isNavigationCurrent,
+      cancelOwnedNavigation,
+      initialShareCode = null,
+    } = {},
   ) {
     this.viewer = viewer;
+    // A host may hand over the share code to open instead of the address.
+    this._initialShareCode =
+      typeof initialShareCode === 'string' ? initialShareCode : null;
+    // Why the share code this page opened with was refused, if it was.
+    this.rejectedShareCode = null;
+    this._followSubjectProvider = null;
     this._onRestore = onRestore; // callback: ({ style, bloom, sharpen }) => void
     this._debounceTimer = null;
     this._currentStyle = 'normal';
@@ -112,10 +99,7 @@ export class ShareLinkManager {
     this._detectionOutsideOpacityPct = 1;
     this._celestialRingEnabled = false;
     this._scopeEnabled = true;
-    // Feather opens on a soft 11% scope-mask edge (owner final lock 2026-08-24,
-    // superseding the 08-22 hard-crop and 08-23 8% rulings) — mirrors
-    // SCOPE_FEATHER_RATIO_DEFAULT in scopeMask.js and the slider's markup value.
-    this._scopeFeatherPct = 11;
+    this._scopeFeatherPct = 100;
     // null = the altitude-adaptive terminus (the default). A number pins the
     // outside-fill opacity as a percent, 94..100. (`sce`, 2026-08-17)
     this._scopeTerminusPct = null;
@@ -124,6 +108,13 @@ export class ShareLinkManager {
     this._panelStateProvider = null;
     this._styleParamStateProvider = null;
     this._initialRestorePending = false;
+    // Each incoming share (start-up or a later hash navigation) gets a token;
+    // only the newest one may release URL-write suppression.
+    this._restoreToken = 0;
+    // The hash this page last read or wrote. A location change back to it is
+    // the app's own state, never an incoming share.
+    this._knownHash = null;
+    this._unwatchNavigation = null;
     this._restoreAuthority = {
       visual: 0,
       map: 0,
@@ -150,10 +141,44 @@ export class ShareLinkManager {
   }
 
   /**
-   * Parse URL hash on page load. Returns parsed state or null.
+   * Parse the share this page opened with: the host's `initialShareCode`, a
+   * `/share/<code>` address, or a long-form hash. Returns the parsed state, or
+   * null for none. A share code that cannot be opened is recorded in
+   * `rejectedShareCode` and restores nothing.
    */
   parseInitialHash() {
     const hash = window.location.hash.slice(1);
+    this._knownHash = hash;
+    const code =
+      this._initialShareCode ??
+      parseSharePath(window.location.pathname)?.code ??
+      null;
+    this._initialShareCode = null;
+    const state =
+      code === null ? this._parseShareHash(hash) : this._parseShareCode(code);
+    if (!state) return null;
+    this._beginIncomingRestore(state);
+    return state;
+  }
+
+  /**
+   * The restore state for a share code, in the long form's parsed shape plus
+   * `shareView` (what the view follows, with its offset and last-known fix),
+   * or null when the code is refused.
+   */
+  _parseShareCode(code) {
+    const result = decodeShareView(code);
+    if (!result.ok) {
+      this.rejectedShareCode = result.reason;
+      return null;
+    }
+    const state = toLegacyShareState(result.state);
+    state.shareView = result.state.view;
+    return state;
+  }
+
+  /** Parse one hash without side effects. Returns null unless it is a share. */
+  _parseShareHash(hash) {
     if (!hash) return null;
 
     const params = new URLSearchParams(hash);
@@ -227,10 +252,7 @@ export class ShareLinkManager {
       // (`_scopeFeatherPct` in the constructor tracks the default: that one
       // mirrors live state for the link this session generates, so it must match
       // the mask, not the archive.)
-      scopeFeatherPct: Math.max(
-        0,
-        Math.min(100, Math.round(parseOr(params.get('scf'), 35))),
-      ),
+      scopeFeatherPct: clampScopeFeatherPct(parseOr(params.get('scf'), 35)),
       // Absent (or non-numeric) `sce` = adaptive (null), the default behavior;
       // a value pins the terminus opacity percent, clamped into the SUPPORTED
       // 94..100 band. `sce=0` used to survive as a sub-94 terminus — a hole in
@@ -247,15 +269,55 @@ export class ShareLinkManager {
       panelState: decodePanelStateParams(params),
       sharedAtMs: decodeShareCreatedAtMs(params),
     };
+    return state;
+  }
+
+  /** Reserve restore lanes and hold URL writes for one incoming share. */
+  _beginIncomingRestore(state) {
     state.restoreAuthority = {
       visual: this._restoreAuthority.visual,
       map: this._restoreAuthority.map,
       panels: new Map(this._restoreAuthority.panels),
     };
-
-    // Hold URL writes until the complete incoming state has been restored.
+    state.restoreToken = ++this._restoreToken;
+    // Hold URL writes until the complete incoming state has been restored. A
+    // debounced write of the previous view must not land over the new link.
     this._initialRestorePending = true;
-    return state;
+    clearTimeout(this._debounceTimer);
+    this._debounceTimer = null;
+  }
+
+  /**
+   * Restore a share link opened in this tab after start-up: a pasted address,
+   * a followed link, or Back/Forward. The app's own replaceState writes never
+   * fire these events, and a hash equal to the last one read or written is
+   * ignored anyway, so only a genuinely different incoming share restores.
+   */
+  watchNavigation(onNavigate) {
+    this._unwatchNavigation?.();
+    if (this._destroyed || typeof onNavigate !== 'function') return;
+    const target = globalThis.window;
+    if (typeof target?.addEventListener !== 'function') return;
+    const handler = () => this._handleLocationChange(onNavigate);
+    target.addEventListener('hashchange', handler);
+    target.addEventListener('popstate', handler);
+    this._unwatchNavigation = () => {
+      target.removeEventListener('hashchange', handler);
+      target.removeEventListener('popstate', handler);
+      this._unwatchNavigation = null;
+    };
+  }
+
+  _handleLocationChange(onNavigate) {
+    if (this._destroyed) return;
+    const hash = window.location.hash.slice(1);
+    // Back/Forward fires both popstate and hashchange for one entry.
+    if (hash === this._knownHash) return;
+    this._knownHash = hash;
+    const state = this._parseShareHash(hash);
+    if (!state) return;
+    this._beginIncomingRestore(state);
+    onNavigate(state);
   }
 
   /**
@@ -379,9 +441,13 @@ export class ShareLinkManager {
     };
   }
 
-  /** Release initial hash suppression only after every restore owner settles. */
-  completeInitialRestore() {
+  /**
+   * Release hash suppression only after every restore owner settles. A token
+   * from a superseded share restore leaves the newer one holding the URL.
+   */
+  completeInitialRestore(restoreToken = this._restoreToken) {
     if (!this._initialRestorePending) return;
+    if (restoreToken !== this._restoreToken) return;
     this._initialRestorePending = false;
     this._scheduleUpdate();
   }
@@ -404,6 +470,16 @@ export class ShareLinkManager {
     this._layerStateProvider = typeof provider === 'function' ? provider : null;
   }
 
+  /**
+   * Install the source of the entity the camera follows, used for share links:
+   * `({ nowMs }) => ({ kind, id, offset, lastKnown }) | null`, in the share
+   * format's terms (src/share/follow.js), with the fix as of `nowMs`.
+   */
+  setFollowSubjectProvider(provider) {
+    this._followSubjectProvider =
+      typeof provider === 'function' ? provider : null;
+  }
+
   /** Install the finalized panel-state source used by URL generation. */
   setPanelStateProvider(provider) {
     this._panelStateProvider = typeof provider === 'function' ? provider : null;
@@ -494,10 +570,7 @@ export class ShareLinkManager {
     if (typeof extras.scopeEnabled === 'boolean')
       this._scopeEnabled = extras.scopeEnabled;
     if (typeof extras.scopeFeatherPct === 'number') {
-      this._scopeFeatherPct = Math.max(
-        0,
-        Math.min(100, Math.round(extras.scopeFeatherPct)),
-      );
+      this._scopeFeatherPct = clampScopeFeatherPct(extras.scopeFeatherPct);
     }
     if (extras.scopeTerminusPct === null) this._scopeTerminusPct = null;
     else if (typeof extras.scopeTerminusPct === 'number') {
@@ -507,17 +580,41 @@ export class ShareLinkManager {
     this._scheduleUpdate();
   }
 
+  /**
+   * The share link for the current state, `<app>/share/<code>`, stamped with
+   * its creation time, or null before the camera has a position. While the
+   * camera follows an entity, the link follows it too.
+   */
+  buildLink({ nowMs = Date.now() } = {}) {
+    const params = this._buildHashParams();
+    if (!params) return null;
+    // The long form is the one description of the live state; the code is
+    // that state in the share format.
+    const state = fromLegacyShareState(this._parseShareHash(params.toString()));
+    state.sharedAtMs = Math.floor(nowMs / 1000) * 1000;
+    let subject = null;
+    try {
+      subject = this._followSubjectProvider?.({ nowMs }) ?? null;
+    } catch {
+      subject = null;
+    }
+    if (subject) {
+      state.view = {
+        kind: 'thing',
+        entity: { kind: subject.kind, id: subject.id },
+        offset: subject.offset ?? null,
+        lastKnown: subject.lastKnown ?? null,
+      };
+    }
+    return shareLinkUrl(encodeShareView(state), window.location.href);
+  }
+
   /** Copy a current-state snapshot with a copy-time timestamp. Returns true on success. */
   async copyLink({ nowMs = Date.now() } = {}) {
-    const params = this._buildHashParams();
-    if (!params) return false;
-    params.set(SHARE_CREATED_AT_PARAM, String(Math.floor(nowMs / 1000)));
-    const copiedUrl = new URL(window.location.href);
-    // ?lang is the sender's language override; the recipient keeps their own.
-    copiedUrl.searchParams.delete('lang');
-    copiedUrl.hash = params.toString();
     try {
-      await navigator.clipboard.writeText(copiedUrl.href);
+      const href = this.buildLink({ nowMs });
+      if (!href) return false;
+      await navigator.clipboard.writeText(href);
       return true;
     } catch {
       return false;
@@ -535,12 +632,15 @@ export class ShareLinkManager {
     const params = this._buildHashParams();
     if (!params) return;
     // The hash belongs to this page's address, not the document base the
-    // app may load under.
-    history.replaceState(
-      null,
-      '',
-      new URL(`#${params.toString()}`, window.location.href).href,
-    );
+    // app may load under. A `/share/<code>` address gives way to the app's
+    // own address, so a reload follows the live view; replacing it adds no
+    // history entry.
+    const url = parseSharePath(new URL(window.location.href).pathname)
+      ? appRootUrl(window.location.href)
+      : new URL(window.location.href);
+    url.hash = params.toString();
+    this._knownHash = url.hash.slice(1);
+    history.replaceState(null, '', url.href);
   }
 
   /** Build a deterministic snapshot without mutating history. */
@@ -599,8 +699,8 @@ export class ShareLinkManager {
       this._styleParamStateProvider?.(this._currentStyle),
     );
 
-    // Copy-time metadata is intentionally absent here. `copyLink()` adds a
-    // fresh timestamp to its ephemeral URL without aging the live address.
+    // Creation-time metadata is intentionally absent here. `buildLink()`
+    // stamps its own link without aging the live address.
     params.delete(SHARE_CREATED_AT_PARAM);
     return params;
   }
@@ -623,9 +723,11 @@ export class ShareLinkManager {
     this._debounceTimer = null;
     this._removeCameraChanged?.();
     this._removeCameraChanged = null;
+    this._unwatchNavigation?.();
     this._layerStateProvider = null;
     this._panelStateProvider = null;
     this._styleParamStateProvider = null;
+    this._followSubjectProvider = null;
     this._onRestore = null;
   }
 }
diff --git a/src/sharelink.navigation.test.mjs b/src/sharelink.navigation.test.mjs
new file mode 100644
index 000000000..e4e70b629
--- /dev/null
+++ b/src/sharelink.navigation.test.mjs
@@ -0,0 +1,425 @@
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import { ShareLinkManager } from './sharelink.js';
+import { ShareRestoration } from './ui/shareRestoration.js';
+import { DataLayerManager } from './data/manager.js';
+import {
+  LAYER_STATE_REGISTRY,
+  REGISTERED_LAYER_IDS,
+  createDefaultLayerState,
+  decodeLayerStateParams,
+} from './data/layerState.js';
+import { LayerStateCoordinator } from './data/layerStateCoordinator.js';
+
+const SHARE_A = 'v=2&lat=10.0000&lon=20.0000&alt=800&style=nvg&l=e';
+const SHARE_B = 'v=2&lat=48.8584&lon=2.2945&alt=500&style=normal&l=f';
+
+/**
+ * A window whose address behaves like a tab's: `navigate` is a hash-only
+ * navigation (new history entry plus hashchange), `back`/`forward` traverse
+ * entries (popstate plus hashchange), and `history.replaceState` rewrites the
+ * current entry without firing anything.
+ */
+function installTab(t, initialHash = '') {
+  const prior = {
+    window: globalThis.window,
+    history: globalThis.history,
+  };
+  const target = new EventTarget();
+  const location = new URL(
+    `http://localhost/${initialHash ? `#${initialHash}` : ''}`,
+  );
+  const entries = [location.hash];
+  let index = 0;
+  const listeners = { hashchange: 0, popstate: 0 };
+  const add = target.addEventListener.bind(target);
+  const remove = target.removeEventListener.bind(target);
+  target.addEventListener = (type, handler, options) => {
+    if (type in listeners) listeners[type] += 1;
+    add(type, handler, options);
+  };
+  target.removeEventListener = (type, handler, options) => {
+    if (type in listeners) listeners[type] -= 1;
+    remove(type, handler, options);
+  };
+  target.location = location;
+  globalThis.window = target;
+  globalThis.history = {
+    replaceState(_state, _title, next) {
+      location.hash = new URL(next, location.href).hash;
+      entries[index] = location.hash;
+    },
+  };
+  t.after(() => Object.assign(globalThis, prior));
+  const go = (nextIndex) => {
+    index = nextIndex;
+    location.hash = entries[index];
+    target.dispatchEvent(new Event('popstate'));
+    target.dispatchEvent(new Event('hashchange'));
+  };
+  return {
+    listeners,
+    navigate(hash) {
+      entries.splice(index + 1);
+      entries.push(`#${hash}`);
+      index = entries.length - 1;
+      location.hash = hash;
+      target.dispatchEvent(new Event('hashchange'));
+    },
+    back: () => go(index - 1),
+    forward: () => go(index + 1),
+  };
+}
+
+/** Queue timers instead of running them, so delayed work runs only on demand. */
+function installManualTimers(t) {
+  const prior = {
+    setTimeout: globalThis.setTimeout,
+    clearTimeout: globalThis.clearTimeout,
+  };
+  const timers = new Map();
+  let timerId = 0;
+  globalThis.setTimeout = (fn) => {
+    timers.set(++timerId, fn);
+    return timerId;
+  };
+  globalThis.clearTimeout = (id) => timers.delete(id);
+  t.after(() => Object.assign(globalThis, prior));
+  return timers;
+}
+
+function fakeViewer() {
+  return {
+    camera: {
+      changed: { addEventListener: () => () => {} },
+      positionCartographic: { latitude: 0, longitude: 0, height: 1000 },
+      heading: 0,
+      pitch: -Math.PI / 2,
+      roll: 0,
+    },
+  };
+}
+
+test('a hash navigation to a different share restores it and holds URL writes', (t) => {
+  const tab = installTab(t, SHARE_A);
+  const manager = new ShareLinkManager(fakeViewer());
+  const initial = manager.parseInitialHash();
+  manager.completeInitialRestore(initial.restoreToken);
+  const navigated = [];
+  manager.watchNavigation((state) => navigated.push(state));
+
+  tab.navigate(SHARE_B);
+  assert.equal(navigated.length, 1);
+  assert.equal(navigated[0].lat, 48.8584);
+  assert.equal(navigated[0].style, 'normal');
+  assert.deepEqual(navigated[0].layerState.enabledLayerIds, ['flights']);
+  assert.equal(manager._initialRestorePending, true);
+  // Nothing from the previous view may overwrite the incoming link.
+  manager._updateHash();
+  assert.equal(window.location.hash, `#${SHARE_B}`);
+  manager.completeInitialRestore(navigated[0].restoreToken);
+  assert.equal(manager._initialRestorePending, false);
+  manager.destroy();
+});
+
+test("the app's own hash writes never trigger a restore", (t) => {
+  installTab(t, SHARE_A);
+  const manager = new ShareLinkManager(fakeViewer());
+  manager.completeInitialRestore(manager.parseInitialHash().restoreToken);
+  let restores = 0;
+  manager.watchNavigation(() => {
+    restores += 1;
+  });
+  manager._updateHash();
+  assert.notEqual(window.location.hash, `#${SHARE_A}`);
+  // replaceState fires nothing, but a stray event for our own hash is ignored.
+  window.dispatchEvent(new Event('hashchange'));
+  window.dispatchEvent(new Event('popstate'));
+  assert.equal(restores, 0);
+  assert.equal(manager._initialRestorePending, false);
+  manager.destroy();
+});
+
+test('a non-share hash is ignored and Back/Forward restores each entry once', (t) => {
+  const tab = installTab(t, SHARE_A);
+  const manager = new ShareLinkManager(fakeViewer());
+  manager.completeInitialRestore(manager.parseInitialHash().restoreToken);
+  // The app rewrites entry 0 with its own state; Back must return to that.
+  manager._updateHash();
+  const ownHash = window.location.hash.slice(1);
+  const navigated = [];
+  manager.watchNavigation((state) => navigated.push(state));
+
+  tab.navigate('not-a-share');
+  assert.equal(navigated.length, 0);
+  assert.equal(manager._initialRestorePending, false);
+
+  tab.navigate(SHARE_B);
+  assert.equal(navigated.length, 1);
+  manager.completeInitialRestore(navigated[0].restoreToken);
+
+  tab.back(); // not-a-share
+  tab.back(); // the app's own rewritten first entry
+  assert.equal(navigated.length, 2, 'popstate and hashchange restore once');
+  assert.equal(window.location.hash.slice(1), ownHash);
+  assert.equal(navigated[1].lat, 0);
+  manager.completeInitialRestore(navigated[1].restoreToken);
+
+  tab.forward();
+  tab.forward();
+  assert.equal(navigated.length, 3);
+  assert.equal(navigated[2].lat, 48.8584);
+  manager.destroy();
+});
+
+test('a newer navigation supersedes an older restore and its pending write', (t) => {
+  const tab = installTab(t, SHARE_A);
+  const timers = installManualTimers(t);
+
+  const manager = new ShareLinkManager(fakeViewer());
+  manager.completeInitialRestore(manager.parseInitialHash().restoreToken);
+  assert.equal(timers.size, 1, 'releasing suppression schedules a write');
+  const navigated = [];
+  manager.watchNavigation((state) => navigated.push(state));
+
+  tab.navigate(SHARE_B);
+  assert.equal(
+    timers.size,
+    0,
+    'the pending write of the old view is cancelled',
+  );
+  tab.navigate(SHARE_A);
+  const [older, newer] = navigated;
+  assert.ok(newer.restoreToken > older.restoreToken);
+  manager.completeInitialRestore(older.restoreToken);
+  assert.equal(
+    manager._initialRestorePending,
+    true,
+    'a superseded restore cannot release writes',
+  );
+  manager.completeInitialRestore(newer.restoreToken);
+  assert.equal(manager._initialRestorePending, false);
+  manager.destroy();
+});
+
+test('destroy removes the navigation listeners', (t) => {
+  const tab = installTab(t, SHARE_A);
+  const manager = new ShareLinkManager(fakeViewer());
+  manager.parseInitialHash();
+  let restores = 0;
+  manager.watchNavigation(() => {
+    restores += 1;
+  });
+  assert.deepEqual(tab.listeners, { hashchange: 1, popstate: 1 });
+  manager.watchNavigation(() => {
+    restores += 1;
+  });
+  assert.deepEqual(
+    tab.listeners,
+    { hashchange: 1, popstate: 1 },
+    'rewatching replaces',
+  );
+  manager.destroy();
+  assert.deepEqual(tab.listeners, { hashchange: 0, popstate: 0 });
+  tab.navigate(SHARE_B);
+  assert.equal(restores, 0);
+});
+
+function deferred() {
+  let resolve;
+  const promise = new Promise((res) => {
+    resolve = res;
+  });
+  return { promise, resolve };
+}
+
+/** A ShareRestoration over a real ShareLinkManager with a stub restore sink. */
+function restorationHarness(t, initialHash, navigationOverrides = {}) {
+  const tab = installTab(t, initialHash);
+  const timers = installManualTimers(t);
+
+  const restores = [];
+  let navigationGeneration = 0;
+  const manager = new ShareLinkManager(fakeViewer(), {
+    onRestore: (state) => {
+      const gate = deferred();
+      restores.push({ state, gate });
+      return gate.promise;
+    },
+    isNavigationCurrent: () => false,
+  });
+  const layerCalls = [];
+  const handoffs = [];
+  const owner = new ShareRestoration({
+    viewer: { canvas: new EventTarget() },
+    navigation: {
+      _beginDeferredNavigation: () => ++navigationGeneration,
+      _reassertNavigationHandoff: (generation, options) => {
+        handoffs.push({ generation, options });
+        return true;
+      },
+      _stampNavigation() {},
+      ...navigationOverrides,
+    },
+    syncShareState() {},
+    syncModels3d() {},
+    showStatus() {},
+    feedback: {},
+    updateFeedback() {},
+  });
+  owner.attachLinks(manager);
+  owner._layerStateCoordinator = {
+    applyShareLayerState(options) {
+      layerCalls.push(options);
+      return Promise.resolve([]);
+    },
+    getDurableState: () => null,
+    cancelPendingShareTracking: () => false,
+    destroy() {},
+  };
+  owner.start();
+  t.after(() => owner.destroy());
+  return { tab, timers, manager, owner, restores, layerCalls, handoffs };
+}
+
+const flush = () => new Promise((resolve) => setImmediate(resolve));
+
+test('a navigated share runs the start-up restore pipeline and supersedes the delayed one', async (t) => {
+  const { tab, timers, manager, owner, restores, layerCalls } =
+    restorationHarness(t, SHARE_A);
+  assert.equal(timers.size, 1, 'start-up restore waits for its delayed flight');
+
+  tab.navigate(SHARE_B);
+  assert.equal(timers.size, 0, 'the delayed start-up restore never runs');
+  assert.equal((await owner.initialRestorePromise).status, 'superseded');
+  assert.equal(restores.length, 1);
+  assert.equal(restores[0].state.style, 'normal');
+  assert.equal(restores[0].state.mapStack, 'photoreal');
+  assert.deepEqual(layerCalls[0].shareLayerState.enabledLayerIds, ['flights']);
+
+  restores[0].gate.resolve();
+  await flush();
+  assert.equal(manager._initialRestorePending, false);
+});
+
+test('a navigated share releases the old Follow passively, never as a saved preference', (t) => {
+  const { tab, handoffs } = restorationHarness(t, SHARE_A);
+  tab.navigate(SHARE_B);
+  assert.equal(handoffs.length, 1);
+  assert.deepEqual(handoffs[0].options, { trackingOrigin: 'programmatic' });
+});
+
+test('a navigated share that fails to start never freezes the address bar', async (t) => {
+  const settled = [];
+  let calls = 0;
+  const { tab, manager } = restorationHarness(t, SHARE_A, {
+    // Start-up reserves the camera; the navigated share then fails to.
+    _beginDeferredNavigation: () => {
+      calls += 1;
+      if (calls > 1) throw new Error('navigation unavailable');
+      return calls;
+    },
+  });
+  window.addEventListener('gev:share-navigation-restore-settled', (event) =>
+    settled.push(event.detail),
+  );
+  tab.navigate(SHARE_B);
+  assert.equal(manager._initialRestorePending, false);
+  assert.equal(settled[0]?.status, 'failed');
+});
+
+test('a second navigation during a restore supersedes it end to end', async (t) => {
+  const { tab, manager, restores, layerCalls } = restorationHarness(t, SHARE_A);
+  tab.navigate(SHARE_B);
+  tab.navigate(SHARE_A);
+  assert.equal(restores.length, 2);
+  assert.equal(layerCalls.length, 2);
+  assert.deepEqual(layerCalls[1].shareLayerState.enabledLayerIds, [
+    'earthquakes',
+  ]);
+
+  // The newer restore finishes first; the older one settling late must not
+  // release or reopen anything.
+  restores[1].gate.resolve();
+  await flush();
+  assert.equal(manager._initialRestorePending, false);
+  manager._initialRestorePending = true; // observe any late release
+  restores[0].gate.resolve();
+  await flush();
+  assert.equal(manager._initialRestorePending, true);
+});
+
+test('the layer coordinator replaces in-flight share layers with the navigated share', async () => {
+  const enableGates = new Map();
+  const manager = new DataLayerManager({});
+  for (const id of REGISTERED_LAYER_IDS) {
+    manager.register({
+      id,
+      name: id,
+      icon: '',
+      source: 'test',
+      async init() {
+        return true;
+      },
+      async enable() {
+        const gate = enableGates.get(id);
+        if (gate) await gate.promise;
+        return true;
+      },
+      async update() {
+        return true;
+      },
+      async disable() {
+        return true;
+      },
+    });
+  }
+  manager.finalizeRegistrations(LAYER_STATE_REGISTRY);
+  const quakeGate = deferred();
+  enableGates.set('earthquakes', quakeGate);
+  const writes = [];
+  const storage = {
+    getItem: () => null,
+    setItem: (...args) => writes.push(args),
+  };
+  const sink = {
+    provider: null,
+    setLayerStateProvider(provider) {
+      this.provider = provider;
+    },
+    onLayerStateChange() {},
+  };
+  const coordinator = new LayerStateCoordinator(manager, sink, { storage });
+  const first = coordinator.start({
+    shareLayerState: decodeLayerStateParams(new URLSearchParams(SHARE_A)),
+    allowLocalState: false,
+  });
+  const second = coordinator.applyShareLayerState({
+    shareLayerState: decodeLayerStateParams(new URLSearchParams(SHARE_B)),
+  });
+  quakeGate.resolve();
+  await Promise.all([first, second]);
+  const enabled = (id) => manager.getLayerLifecycleState(id)?.enabled === true;
+  assert.equal(enabled('earthquakes'), false);
+  assert.equal(enabled('flights'), true);
+  assert.deepEqual(sink.provider().enabledLayerIds, ['flights']);
+  assert.equal(coordinator.source, 'share');
+  assert.deepEqual(
+    writes,
+    [],
+    'a passive share restore never writes local preferences',
+  );
+
+  // A share without a layer payload restores the defaults, as a reload does.
+  await coordinator.applyShareLayerState({ shareLayerState: null });
+  assert.equal(coordinator.source, 'legacy-share');
+  assert.deepEqual(
+    sink.provider().enabledLayerIds,
+    createDefaultLayerState().enabledLayerIds,
+  );
+  assert.equal(
+    enabled('flights'),
+    createDefaultLayerState().enabledLayerIds.includes('flights'),
+  );
+  coordinator.destroy();
+});
diff --git a/src/sources/featureGeometry.js b/src/sources/featureGeometry.js
index a18d5f22f..b2ccc9630 100644
--- a/src/sources/featureGeometry.js
+++ b/src/sources/featureGeometry.js
@@ -250,10 +250,13 @@ export function approximateAreaM2(coords) {
   return Math.abs(area) / 2;
 }
 
+/** Local equirectangular distance in metres, the short way round 180°. */
 export function approximateDistanceM(latA, lonA, latB, lonB) {
   const latScale = 111_320;
   const lonScale = latScale * Math.cos(((latA + latB) / 2) * (Math.PI / 180));
-  return Math.hypot((latB - latA) * latScale, (lonB - lonA) * lonScale);
+  let dLon = lonB - lonA;
+  dLon -= 360 * Math.round(dLon / 360);
+  return Math.hypot((latB - latA) * latScale, dLon * lonScale);
 }
 
 export function pointInPolygon(lon, lat, coords) {
diff --git a/src/sources/featureGeometry.test.mjs b/src/sources/featureGeometry.test.mjs
new file mode 100644
index 000000000..6da3ff92f
--- /dev/null
+++ b/src/sources/featureGeometry.test.mjs
@@ -0,0 +1,15 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { approximateDistanceM } from './featureGeometry.js';
+
+test('approximate distance takes the short way round 180°', () => {
+  // Lau Islands (-179.0) to Savusavu (179.33): about 178 km apart.
+  const across = approximateDistanceM(-17.5, -179.0, -16.78, 179.33);
+  assert.ok(across > 150_000 && across < 200_000, String(across));
+  assert.equal(
+    Math.round(approximateDistanceM(0, 179.9, 0, -179.9)),
+    Math.round(approximateDistanceM(0, -0.1, 0, 0.1)),
+  );
+  // Away from 180° nothing changes.
+  assert.equal(Math.round(approximateDistanceM(0, 0, 0, 1)), 111_320);
+});
diff --git a/src/sources/gbfsStations.js b/src/sources/gbfsStations.js
index c37c2fae4..c942579db 100644
--- a/src/sources/gbfsStations.js
+++ b/src/sources/gbfsStations.js
@@ -98,6 +98,13 @@ function dockCapacity(raw) {
   return capacity - geofenced;
 }
 
+/** Read a numeric coordinate without treating blank text or other JSON types as zero. */
+function coordinateNumber(value) {
+  if (typeof value !== 'number' && (typeof value !== 'string' || !value.trim()))
+    return NaN;
+  return Number(value);
+}
+
 /**
  * Parse a GBFS station_information payload into a Map of station metadata.
  * Handles field-name variations across different GBFS providers
@@ -113,9 +120,16 @@ export function parseStationInformation(payload) {
   for (const raw of stations) {
     // Accept both GBFS (station_id) and alternate (id) field names
     const stationId = String(raw?.station_id ?? raw?.id ?? '').trim();
-    const lat = Number(raw?.lat ?? raw?.latitude);
-    const lon = Number(raw?.lon ?? raw?.longitude);
-    if (!stationId || !Number.isFinite(lat) || !Number.isFinite(lon)) continue;
+    const lat = coordinateNumber(raw?.lat ?? raw?.latitude);
+    const lon = coordinateNumber(raw?.lon ?? raw?.longitude);
+    if (
+      !stationId ||
+      !Number.isFinite(lat) ||
+      !Number.isFinite(lon) ||
+      Math.abs(lat) > 90 ||
+      Math.abs(lon) > 180
+    )
+      continue;
 
     stationMap.set(stationId, {
       stationId,
diff --git a/src/sources/gbfsStations.test.mjs b/src/sources/gbfsStations.test.mjs
index 91983df98..1ab273556 100644
--- a/src/sources/gbfsStations.test.mjs
+++ b/src/sources/gbfsStations.test.mjs
@@ -19,6 +19,73 @@ const parseCapacity = (fields) =>
   parseStationInformation({ data: { stations: [station(fields)] } }).get('s1')
     .capacity;
 
+test('station information skips missing, blank and malformed coordinates', () => {
+  for (const field of ['lat', 'lon', 'latitude', 'longitude']) {
+    for (const value of [
+      undefined,
+      null,
+      '',
+      ' \t ',
+      false,
+      true,
+      [],
+      [0],
+      {},
+      'bad',
+      NaN,
+      Infinity,
+    ]) {
+      const raw = { station_id: 'bad', lat: 0, lon: 0 };
+      if (field === 'latitude') delete raw.lat;
+      if (field === 'longitude') delete raw.lon;
+      raw[field] = value;
+      const parsed = parseStationInformation({
+        data: { stations: [raw, station({ station_id: 'good' })] },
+      });
+      assert.deepEqual(
+        [...parsed.keys()],
+        ['good'],
+        `${field} = ${JSON.stringify(value)}`,
+      );
+    }
+  }
+});
+
+test('station information skips coordinates outside latitude and longitude bounds', () => {
+  for (const fields of [
+    { lat: 90.001 },
+    { lat: -90.001 },
+    { lon: 180.001 },
+    { lon: -180.001 },
+    { lat: undefined, latitude: '91' },
+    { lon: undefined, longitude: '-181' },
+  ]) {
+    const parsed = parseStationInformation({
+      data: { stations: [station(fields)] },
+    });
+    assert.equal(parsed.size, 0, JSON.stringify(fields));
+  }
+});
+
+test('station information preserves zero, boundary coordinates and numeric aliases', () => {
+  for (const [fields, expected] of [
+    [{ lat: 0, lon: 0 }, [0, 0]],
+    [{ lat: ' 0 ', lon: '0' }, [0, 0]],
+    [{ lat: 90, lon: 180 }, [90, 180]],
+    [{ lat: '-90', lon: '-180' }, [-90, -180]],
+    [
+      { lat: null, lon: undefined, latitude: '30.2681', longitude: '-97.7469' },
+      [30.2681, -97.7469],
+    ],
+  ]) {
+    const parsed = parseStationInformation({
+      data: { stations: [station(fields)] },
+    }).get('s1');
+    assert.ok(parsed, JSON.stringify(fields));
+    assert.deepEqual([parsed.lat, parsed.lon], expected);
+  }
+});
+
 test('capacity counts docks, not the geofenced area PBSC adds to it', () => {
   // Bilbao Bizi, BiciMAD and Dbizi as published on 2026-10-17.
   assert.equal(parseCapacity({ capacity: 839, geofenced_capacity: 800 }), 39);
diff --git a/src/sources/live/standalone.js b/src/sources/live/standalone.js
index 3f2c73b3b..d76ecf3fa 100644
--- a/src/sources/live/standalone.js
+++ b/src/sources/live/standalone.js
@@ -31,9 +31,7 @@ function openSkyError(response) {
     const reasons = {
       oauth_invalid_or_missing: 'OpenSky OAuth client missing/invalid',
       oauth_invalid_credentials: 'OpenSky OAuth rejected credentials',
-      basic_invalid_credentials: 'OpenSky username/password rejected',
-      missing_basic_creds: 'OpenSky auth missing',
-      missing_oauth_and_basic_creds: 'OpenSky auth missing',
+      missing_oauth_creds: 'OpenSky auth missing',
       auth_required: 'OpenSky auth required',
       forced_anonymous: 'OpenSky auth required',
     };
diff --git a/src/standalone/layerSources.js b/src/standalone/layerSources.js
index 935351685..693ddd47f 100644
--- a/src/standalone/layerSources.js
+++ b/src/standalone/layerSources.js
@@ -19,6 +19,7 @@ import { createWeatherSource } from '../layers/weather/source.js';
 import { createCycloneSource } from '../layers/cyclones/source.js';
 import { createWindSource } from '../layers/wind/source.js';
 import { createFirmsSource } from '../layers/firms/source.js';
+import { createGhostMapsSource } from '../layers/ghostMaps/source.js';
 import { createMapillarySource } from '../layers/streetLevel/providers/mapillary/source.js';
 import { createReferenceSources } from '../sources/reference.js';
 export { createReferenceSources as createStandaloneReferenceSources } from '../sources/reference.js';
@@ -50,6 +51,7 @@ export function createStandaloneLayerSources(overrides = {}) {
     launches: createLaunchSource(),
     alpr: createAlprTileSource(),
     firms: createFirmsSource(),
+    's2-ghostmaps': createGhostMapsSource(),
     wind: createWindSource(),
     weather: createWeatherSource(),
     cyclones: createCycloneSource(),
diff --git a/src/standalone/tools.js b/src/standalone/tools.js
index eec4d0796..fdeb08d37 100644
--- a/src/standalone/tools.js
+++ b/src/standalone/tools.js
@@ -19,6 +19,7 @@ export function createStandaloneTools(options) {
     ...options,
     voice: {
       supportedProviders: ['openai', 'gemini'],
+      panel: true,
       toolCatalog: loadToolCatalog,
       ...options?.voice,
     },
diff --git a/src/styles/anime.js b/src/styles/anime.js
index deb79c355..4097ecc48 100644
--- a/src/styles/anime.js
+++ b/src/styles/anime.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * Anime / Studio Ghibli Style — Cel-shading + Saturation boost
diff --git a/src/styles/noir.js b/src/styles/noir.js
index 5ea458859..472dde990 100644
--- a/src/styles/noir.js
+++ b/src/styles/noir.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * Noir Style — Desaturation + High Contrast + Vignette
diff --git a/src/styles/retro.js b/src/styles/retro.js
index 396f95853..f4e2d8f62 100644
--- a/src/styles/retro.js
+++ b/src/styles/retro.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * CRT Terminal — Dynamic CRT Monitor Aesthetic
diff --git a/src/styles/snow.js b/src/styles/snow.js
index 569f6cbbc..a4db0a029 100644
--- a/src/styles/snow.js
+++ b/src/styles/snow.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * Snow Style — White overlay + Desaturation + Falling particles
diff --git a/src/styles/surveillance.js b/src/styles/surveillance.js
index 810ac7e4f..5eae7fdd3 100644
--- a/src/styles/surveillance.js
+++ b/src/styles/surveillance.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * Night Vision / NVG — PVS-14 Image Intensifier Emulation
diff --git a/src/styles/thermal.js b/src/styles/thermal.js
index 90aff5312..f62327507 100644
--- a/src/styles/thermal.js
+++ b/src/styles/thermal.js
@@ -1,4 +1,4 @@
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /**
  * FLIR — Forward Looking Infrared
diff --git a/src/terrainHeightsBounds.test.mjs b/src/terrainHeightsBounds.test.mjs
index 3746f4fe4..7556e9aea 100644
--- a/src/terrainHeightsBounds.test.mjs
+++ b/src/terrainHeightsBounds.test.mjs
@@ -99,6 +99,18 @@ function stubTerrainUpstream(t) {
   return asked;
 }
 
+/**
+ * A cache file of the test's own, removed when the test ends. Without one the
+ * proxy falls back to this checkout's `.gev-cache/terrain-heights.json`, and a
+ * point the app has already cached there would answer a request the test
+ * expects to reach the stubbed upstream (#1242).
+ */
+async function isolatedCachePath(t) {
+  const dir = await mkdtemp(path.join(tmpdir(), 'gev-terrain-'));
+  t.after(() => rm(dir, { recursive: true, force: true }));
+  return path.join(dir, 'terrain-heights.json');
+}
+
 test('a coordinate off the globe is not a cache key', () => {
   // Finite but not on Earth — the old guard accepted every one of these.
   for (const raw of [
@@ -122,7 +134,9 @@ test('an out-of-range point is refused before it reaches upstream or the cache',
     upstreamCalls += 1;
     return new Response('[]', { status: 200 });
   });
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
 
   const refused = await request(route, { url: '/?points=0,91' });
   assert.equal(refused.statusCode, 400);
@@ -135,7 +149,9 @@ test('an out-of-range point is refused before it reaches upstream or the cache',
 
 test('one out-of-range point rejects the batch it is hidden in', async (t) => {
   stubFetch(t, async () => new Response('[]', { status: 200 }));
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
   const mixed = await request(route, {
     url: '/?points=-97.74,30.26;0,999;-97.75,30.27',
   });
@@ -145,9 +161,12 @@ test('one out-of-range point rejects the batch it is hidden in', async (t) => {
 test('the point cache stops growing, and an evicted point is simply refetched', async (t) => {
   const asked = stubTerrainUpstream(t);
   // A ceiling of 3 exercises the same code path 50,000 does, in four requests.
-  const route = install(terrainHeightsProxy({ cacheMaxEntries: 3 })).get(
-    '/api/terrain/heights',
-  );
+  const route = install(
+    terrainHeightsProxy({
+      cachePath: await isolatedCachePath(t),
+      cacheMaxEntries: 3,
+    }),
+  ).get('/api/terrain/heights');
 
   const point = (i) => `-97.7${i}000,30.26000`;
   for (let i = 1; i <= 4; i += 1)
@@ -165,12 +184,48 @@ test('the point cache stops growing, and an evicted point is simply refetched',
   assert.equal(asked[4], point(1));
 });
 
+test('a refetched point counts as new when the cache evicts', async (t) => {
+  const root = await mkdtemp(path.join(tmpdir(), 'terrain-evict-order-'));
+  t.after(() => rm(root, { recursive: true, force: true }));
+  const cachePath = path.join(root, 'cache.json');
+  const day = 24 * 3600_000;
+  const now = Date.now();
+  const point = (i) => `-97.7${i}000,30.26000`;
+  const entry = (at) => ({ at, result: { ellipsoid: 150 } });
+  // Written newest first: the file's order is not the age order. Point 1 is
+  // past the 30-day TTL, so the next request for it refetches.
+  await writeFile(
+    cachePath,
+    JSON.stringify({
+      version: 2,
+      points: {
+        [point(3)]: entry(now - 3600_000),
+        [point(2)]: entry(now - day),
+        [point(1)]: entry(now - 31 * day),
+      },
+    }),
+  );
+  const asked = stubTerrainUpstream(t);
+  const route = install(
+    terrainHeightsProxy({ cacheMaxEntries: 3, cachePath }),
+  ).get('/api/terrain/heights');
+
+  await request(route, { url: `/?points=${point(1)}` });
+  assert.deepEqual(asked, [point(1)], 'the stale point is refetched');
+  await request(route, { url: `/?points=${point(4)}` });
+  assert.equal(asked.length, 2);
+
+  // Point 2 is now the oldest fetch; point 1 was just refreshed.
+  await request(route, { url: `/?points=${point(1)};${point(3)}` });
+  assert.equal(asked.length, 2, 'the refreshed and the recent point stay');
+  await request(route, { url: `/?points=${point(2)}` });
+  assert.deepEqual(asked.slice(2), [point(2)], 'the oldest fetch was evicted');
+});
+
 test('an over-large cache file is not read back into memory', async (t) => {
   const asked = stubTerrainUpstream(t);
   const point = '-97.74000,30.26000';
-  const dir = await mkdtemp(path.join(tmpdir(), 'gev-terrain-'));
-  const cachePath = path.join(dir, 'terrain-heights.json');
-  t.after(() => rm(dir, { recursive: true, force: true }));
+  const cachePath = await isolatedCachePath(t);
 
   // A cache file holding the answer, but larger than the ceiling allows.
   const padded = {
@@ -201,7 +256,9 @@ test('an over-large cache file is not read back into memory', async (t) => {
 
 test('the route refuses a flood of requests from one client', async (t) => {
   stubTerrainUpstream(t);
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
 
   let refusedAt = 0;
   for (let i = 1; i <= 95; i += 1) {
@@ -218,7 +275,9 @@ test('the route refuses a flood of requests from one client', async (t) => {
 
 test('a cross-site page cannot fill the cache or spend the visitor quota', async (t) => {
   const asked = stubTerrainUpstream(t);
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
   const host = 'localhost:5173';
   const refused = [
     { host, 'sec-fetch-site': 'cross-site' }, // <img src> from any web page
@@ -253,7 +312,9 @@ test('a cross-site page cannot fill the cache or spend the visitor quota', async
 
 test('the app served behind a reverse proxy still gets terrain', async (t) => {
   const asked = stubTerrainUpstream(t);
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
   const host = 'globe.example.lan';
   // What nginx/Caddy/Cloudflare add in front of a same-origin app fetch. The
   // cost-bearing routes refuse these; terrain is keyless and needed to render,
@@ -347,7 +408,9 @@ test('a second client keeps its own quota', async (t) => {
   stubFetch(t, async () =>
     Response.json([{ lng: -97.74, lat: 30.26, height: 150 }]),
   );
-  const route = install(terrainHeightsProxy()).get('/api/terrain/heights');
+  const route = install(
+    terrainHeightsProxy({ cachePath: await isolatedCachePath(t) }),
+  ).get('/api/terrain/heights');
 
   for (let i = 0; i < 90; i += 1)
     await request(route, {
diff --git a/src/testSupport/shareViewFixtures.mjs b/src/testSupport/shareViewFixtures.mjs
new file mode 100644
index 000000000..629132459
--- /dev/null
+++ b/src/testSupport/shareViewFixtures.mjs
@@ -0,0 +1,103 @@
+/**
+ * Shared fixtures for the share-view codec tests: a seeded generator and
+ * real long-form links.
+ */
+import {
+  REGISTERED_LAYER_IDS,
+  createDefaultLayerState,
+  optionSpecs,
+} from '../data/layerState.js';
+
+/** A long-form link copied from a real session. */
+export const HAL_EXAMPLE_HASH =
+  'v=2&lat=30.2672&lon=-97.7431&alt=600&heading=15&pitch=-30&roll=360&style=normal&bloom=0&sharpen=1&bi=0&bv=2&si=49&hud=tactical&hv=1&dm=DENSE&dd=75&da=elastic&kf=7&ko=1&cr=0&sc=1&scf=11&map=photoreal&l=a.f.s&lo=f.e.1_k.o.n&ui=c.c.1_c.p.0_l.c.1_l.p.0_d.c.1_v.c.0_i.c.0_t.c.1_r.c.1_s.c.1_g.c.1_p.c.1_m.c.0';
+
+/** Deterministic generator (mulberry32) for property-style tests. */
+export function rng(seed) {
+  let a = seed >>> 0;
+  return () => {
+    a = (a + 0x6d2b79f5) >>> 0;
+    let t = a;
+    t = Math.imul(t ^ (t >>> 15), t | 1);
+    t ^= t + Math.imul(t ^ (t >>> 7), t | 61);
+    return ((t ^ (t >>> 14)) >>> 0) / 4294967296;
+  };
+}
+
+const OPTION_CANDIDATES = [
+  true,
+  false,
+  'light',
+  'strong',
+  'gfs',
+  'ifs',
+  'none',
+  'speed',
+  'temperature',
+  'pressure',
+  'km/h',
+  'm/s',
+  'mph',
+  'proximity',
+  'all',
+  'core',
+  'dense',
+  'off',
+  'on',
+  'viewshed',
+  'tomtom',
+  'osm',
+  'hybrid',
+  'clouds',
+  'clouds-regional',
+  'pano',
+  'flat',
+  'filtered',
+  'full',
+  0,
+  1,
+  2,
+  37,
+  50,
+  100,
+  365,
+  -12345678,
+  12345678,
+  8505110,
+  'S30:2026-09-18',
+  'L30:2024-02-29',
+  'VIIRS:2025-01-02',
+  'genre:jazz & blues',
+  'news',
+  'public-safety',
+  0.35,
+  0.8,
+  'abc-1*def-0',
+  'osm-1',
+  25544,
+  'a1b2c3',
+  '~abc123',
+];
+
+/** A random layer state using only values each option accepts. */
+export function randomLayerState(random) {
+  const state = createDefaultLayerState();
+  state.enabledLayerIds = REGISTERED_LAYER_IDS.filter(() => random() < 0.3);
+  for (const ownerId of Object.keys(state.options)) {
+    for (const spec of optionSpecs(ownerId)) {
+      if (random() < 0.5) continue;
+      const accepted = OPTION_CANDIDATES.filter(
+        (value) => spec.normalize(value) !== null,
+      );
+      if (accepted.length)
+        state.options[ownerId][spec.key] =
+          accepted[Math.floor(random() * accepted.length)];
+    }
+  }
+  return state;
+}
+
+/** One element of `values`, chosen by `random`. */
+export function pick(random, values) {
+  return values[Math.floor(random() * values.length)];
+}
diff --git a/src/tooling/environmentProviders.test.mjs b/src/tooling/environmentProviders.test.mjs
index bbb0e9d6e..5e786e408 100644
--- a/src/tooling/environmentProviders.test.mjs
+++ b/src/tooling/environmentProviders.test.mjs
@@ -158,6 +158,7 @@ test('terrain middleware migrates valid legacy disk points without fabricating o
 test('traffic middleware preserves keyless mode, caching, stale budget fallback and UTC rollover', async (t) => {
   isolate(t, { TOMTOM_API_KEY: '', TOMTOM_DAILY_TILE_BUDGET: '1' });
   let now = Date.UTC(2026, 8, 12, 12);
+  const fetchedAt = String(now);
   t.mock.method(Date, 'now', () => now);
   let calls = 0;
   t.mock.method(globalThis, 'fetch', async (raw) => {
@@ -182,10 +183,10 @@ test('traffic middleware preserves keyless mode, caching, stale budget fallback
   assert.equal(json(await request('/status')).dailyCount, 1);
   assert.equal(calls, 1);
   now += 120001;
-  assert.equal(
-    (await request('/flow/8/1/1.pbf')).headers['x-tomtom-cache'],
-    'STALE-BUDGET',
-  );
+  const staleTile = await request('/flow/8/1/1.pbf');
+  assert.equal(staleTile.headers['x-tomtom-cache'], 'STALE-BUDGET');
+  // The stale copy still says when TomTom produced it.
+  assert.equal(staleTile.headers['x-tomtom-fetched-at'], fetchedAt);
   assert.equal((await request('/flow/8/2/1.pbf')).status, 429);
   assert.equal(calls, 1);
   now += 86400000;
diff --git a/src/tooling/googleTokenUnavailable.test.mjs b/src/tooling/googleTokenUnavailable.test.mjs
new file mode 100644
index 000000000..e0ee19232
--- /dev/null
+++ b/src/tooling/googleTokenUnavailable.test.mjs
@@ -0,0 +1,94 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createServer } from 'node:http';
+import { once } from 'node:events';
+import { createGoogleTokenSource } from '../maps/googleTokens.js';
+import { googleTokenUnavailablePlugin } from '../../server/standalone/google-token-unavailable.js';
+
+async function withServer({ beforeFallback } = {}, check) {
+  const middlewares = [];
+  const app = {
+    middlewares: {
+      use: (handler) => middlewares.push(handler),
+    },
+  };
+  if (beforeFallback) app.middlewares.use(beforeFallback);
+  googleTokenUnavailablePlugin().configureServer(app);
+  app.middlewares.use((_req, res) => {
+    res.writeHead(404, { 'Content-Type': 'application/json' });
+    res.end(JSON.stringify({ error: 'Unknown API route' }));
+  });
+
+  const server = createServer((req, res) => {
+    let index = 0;
+    const next = () => middlewares[index++]?.(req, res, next);
+    next();
+  });
+  server.listen(0, '127.0.0.1');
+  await once(server, 'listening');
+  const address = server.address();
+  const url = 'http://127.0.0.1:' + address.port;
+  try {
+    await check(url);
+  } finally {
+    server.close();
+    await once(server, 'close');
+  }
+}
+
+test('keyless GET and HEAD return uncached 204 instead of 404', async () => {
+  await withServer({}, async (url) => {
+    for (const method of ['GET', 'HEAD']) {
+      const response = await fetch(url + '/api/google/tiles-token?probe=1', {
+        method,
+      });
+      assert.equal(response.status, 204);
+      assert.equal(response.headers.get('cache-control'), 'no-store');
+      assert.equal(await response.text(), '');
+    }
+  });
+});
+
+test('the existing client treats unavailable tokens as null', async () => {
+  await withServer({}, async (url) => {
+    const source = createGoogleTokenSource({
+      fetchImpl: (path, options) => fetch(new URL(path, url), options),
+    });
+    assert.equal(await source.token(), null);
+  });
+});
+
+test('unrelated API paths and unsupported methods remain 404', async () => {
+  await withServer({}, async (url) => {
+    for (const [path, method] of [
+      ['/api/google/tiles-token/extra', 'GET'],
+      ['/api/not-a-token', 'GET'],
+      ['/api/google/tiles-token', 'POST'],
+    ]) {
+      const response = await fetch(new URL(path, url), { method });
+      assert.equal(response.status, 404);
+    }
+  });
+});
+
+test('a real token provider registered first still wins', async () => {
+  await withServer(
+    {
+      beforeFallback: (req, res, next) => {
+        if (req.url !== '/api/google/tiles-token') return next();
+        res.writeHead(200, { 'Content-Type': 'application/json' });
+        res.end(
+          JSON.stringify({
+            accessToken: 'server-token',
+            expiresAt: 10000000000000,
+          }),
+        );
+      },
+    },
+    async (url) => {
+      const response = await fetch(url + '/api/google/tiles-token');
+      assert.equal(response.status, 200);
+      assert.equal((await response.json()).accessToken, 'server-token');
+    },
+  );
+});
diff --git a/src/tooling/liveProviders.test.mjs b/src/tooling/liveProviders.test.mjs
index 6b880d186..1f1befc95 100644
--- a/src/tooling/liveProviders.test.mjs
+++ b/src/tooling/liveProviders.test.mjs
@@ -584,6 +584,69 @@ test('track backfill proxy returns 502 on an oversized upstream body and caches
   assert.equal(callCount, 1);
 });
 
+test('OpenSky Basic mode no longer sends username and password: it asks anonymously and warns once', async (t) => {
+  environment(t, {
+    OPENSKY_CLIENT_ID: undefined,
+    OPENSKY_CLIENT_SECRET: undefined,
+    OPENSKY_CREDENTIALS_FILE: undefined,
+    OPENSKY_AUTH_MODE: 'basic',
+    OPENSKY_USERNAME: 'fixture-user',
+    OPENSKY_PASSWORD: 'fixture-password',
+  });
+  const warnings = [];
+  t.mock.method(console, 'warn', (message) => warnings.push(message));
+  const authorizations = [];
+  t.mock.method(globalThis, 'fetch', async (url, options) => {
+    if (url.includes('/states/')) {
+      authorizations.push(options.headers.Authorization);
+      return Response.json({ time: Math.floor(Date.now() / 1000), states: [] });
+    }
+    throw Error(`Unexpected URL: ${url}`);
+  });
+  const fresh = await import(
+    `../../server/providers/aircraft/opensky.js?basic=${Math.random()}`
+  );
+  const flights = install(fresh.openSkyProxy());
+  const first = await flights('/api/flights');
+  assert.equal(first.statusCode, 200);
+  assert.equal(first.headers['x-opensky-auth'], 'anon');
+  assert.equal(first.headers['x-opensky-auth-reason'], 'basic_retired');
+  assert.deepEqual(authorizations, [undefined]);
+  assert.equal(warnings.length, 1);
+  assert.match(warnings[0], /retired username\/password sign-in/);
+  assert.ok(!warnings[0].includes('fixture-password'));
+});
+
+test('OpenSky auto mode never falls back to Basic, even when OAuth is rejected', async (t) => {
+  environment(t, {
+    OPENSKY_CLIENT_ID: 'fixture-client',
+    OPENSKY_CLIENT_SECRET: 'fixture-secret',
+    OPENSKY_CREDENTIALS_FILE: undefined,
+    OPENSKY_AUTH_MODE: 'auto',
+    OPENSKY_USERNAME: 'fixture-user',
+    OPENSKY_PASSWORD: 'fixture-password',
+  });
+  t.mock.method(console, 'warn', () => {});
+  t.mock.method(console, 'log', () => {});
+  t.mock.method(console, 'error', () => {});
+  const authorizations = [];
+  t.mock.method(globalThis, 'fetch', async (url, options) => {
+    if (url.includes('/token'))
+      return Response.json({ access_token: 'fixture-token', expires_in: 1800 });
+    if (url.includes('/states/')) {
+      authorizations.push(options.headers.Authorization);
+      return new Response('', { status: 401 });
+    }
+    if (url.includes('/lat/')) return regionalFallback();
+    throw Error(`Unexpected URL: ${url}`);
+  });
+  const fresh = await import(
+    `../../server/providers/aircraft/opensky.js?auto=${Math.random()}`
+  );
+  await install(fresh.openSkyProxy())('/api/flights', '?lat=30&lon=-97');
+  assert.deepEqual(authorizations, ['Bearer fixture-token']);
+});
+
 test('retired military history refuses without upstream I/O while validating identifiers', async (t) => {
   t.mock.method(globalThis, 'fetch', async () => {
     assert.fail('retired history must not contact the upstream');
diff --git a/src/tooling/placeProviders.test.mjs b/src/tooling/placeProviders.test.mjs
index 352cc8824..d533b7fb9 100644
--- a/src/tooling/placeProviders.test.mjs
+++ b/src/tooling/placeProviders.test.mjs
@@ -81,6 +81,24 @@ test('nearby labels rank landmarks, deduplicate names/addresses and bound the pr
   assert.deepEqual(projectNearbyPlaces({}, 0, 0), []);
 });
 
+test('nearby place distances take the short way round 180°', () => {
+  const at = (name, longitude) => ({
+    id: name,
+    displayName: { text: name },
+    location: { latitude: -16.8, longitude },
+    types: ['point_of_interest'],
+  });
+  // From Taveuni at 179.98: 2 km east across 180°, 4 km west on this side.
+  const result = projectNearbyPlaces(
+    { places: [at('West', 179.942), at('East', -179.999)] },
+    -16.8,
+    179.98,
+  );
+  const byName = Object.fromEntries(result.map((p) => [p.name, p.distanceM]));
+  assert.ok(byName.East > 1500 && byName.East < 2500, String(byName.East));
+  assert.ok(byName.West > 3500 && byName.West < 4500, String(byName.West));
+});
+
 test('text search preserves bounds, rejects malformed bounds and tolerates absent locations', () => {
   const viewport = {
     low: { latitude: 1, longitude: 2 },
diff --git a/src/tooling/previewServing.test.mjs b/src/tooling/previewServing.test.mjs
index 04c24b92d..a049b40e5 100644
--- a/src/tooling/previewServing.test.mjs
+++ b/src/tooling/previewServing.test.mjs
@@ -11,6 +11,7 @@ test('data providers have both hooks; credential editing stays development-only'
   const plugins = localProviderPlugins();
   assert.ok(plugins.some(({ name }) => name === 'fire-perimeters'));
   assert.ok(plugins.some(({ name }) => name === 'gnss-integrity'));
+  assert.ok(plugins.some(({ name }) => name === 'ghostmaps'));
   for (const plugin of plugins) {
     if (plugin.name === 'gev-key-setup') {
       assert.equal(plugin.configurePreviewServer, undefined);
@@ -105,6 +106,7 @@ test('real dev and built-preview servers serve provider JSON and terminate unkno
         ['/api/firms/status', 200],
         ['/api/fire-perimeters/inciweb/publication/invalid', 400],
         ['/api/gnss-integrity?lat=invalid', 400],
+        ['/api/ghostmaps/unknown', 404],
         ['/api/terrain/heights?points=invalid', 400],
         ['/api/overpass', 405],
         ['/api/overpass/status', 200],
diff --git a/src/tooling/transitQa.test.mjs b/src/tooling/transitQa.test.mjs
index 51e4d5c44..634538c2a 100644
--- a/src/tooling/transitQa.test.mjs
+++ b/src/tooling/transitQa.test.mjs
@@ -1,6 +1,7 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
+import { getTransitFeed } from '../data/transitFeeds.js';
 import {
   chooseLiveCities,
   selectStyle,
@@ -101,6 +102,18 @@ test('live visual cities follow local operating hours in summer and winter', ()
     const cities = chooseLiveCities(now);
     assert.ok(cities.length >= 1);
     for (const city of cities) {
+      const feed = getTransitFeed(city.feedId);
+      assert.ok(feed, `${city.id} has a registered feed`);
+      const distanceKm =
+        111.32 *
+        Math.hypot(
+          feed.center.lat - city.lat,
+          (feed.center.lon - city.lon) * Math.cos((city.lat * Math.PI) / 180),
+        );
+      assert.ok(
+        distanceKm < feed.loadRadiusKm,
+        `${city.id} is inside its feed's admission region`,
+      );
       const local = Number(
         new Intl.DateTimeFormat('en', {
           timeZone: city.zone,
diff --git a/src/tooling/viteBuild.test.mjs b/src/tooling/viteBuild.test.mjs
index 7417f7145..a9e8c5398 100644
--- a/src/tooling/viteBuild.test.mjs
+++ b/src/tooling/viteBuild.test.mjs
@@ -1,3 +1,4 @@
+import { fileURLToPath } from 'node:url';
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
@@ -5,7 +6,11 @@ import { rm, writeFile } from 'node:fs/promises';
 import { request } from 'node:http';
 import path from 'node:path';
 import { build, createServer, preview } from 'vite';
-import { BROWSER_CSP, createBrowserViteConfig } from '../../build/vite.js';
+import {
+  BROWSER_CSP,
+  createBrowserViteConfig,
+  escapeFsDenyPath,
+} from '../../build/vite.js';
 import standaloneConfig, * as compatibility from '../../vite.config.js';
 import * as providers from '../../server/providers/local.js';
 import { apiNotFoundPlugin } from '../../server/standalone/api-not-found.js';
@@ -30,6 +35,20 @@ test('explicit build inputs preserve browser-only defines, plugin order and loop
   assert.deepEqual(config.server.allowedHosts, ['localhost', '127.0.0.1']);
   assert.ok(config.server.fs.deny.includes('**/ENVIRONMENT'));
   assert.ok(config.server.fs.deny.includes('.env.*'));
+  assert.ok(config.server.fs.deny.includes('**/.gev-logs/**'));
+  assert.ok(config.server.fs.deny.includes('**/.gev-cache/**'));
+  const root = fileURLToPath(new URL('../../', import.meta.url))
+    .replace(/\\/g, '/')
+    .replace(/\/$/, '');
+  assert.deepEqual(
+    config.server.fs.deny.filter((pattern) => pattern.endsWith('/dist/**')),
+    [`${escapeFsDenyPath(root)}/dist/**`],
+    'only project build output is denied, not dependency dist directories',
+  );
+  assert.equal(
+    escapeFsDenyPath('C:/Users/a/project (1) [test]{copy}'),
+    'C:/Users/a/project \\(1\\) \\[test\\]\\{copy\\}',
+  );
   assert.equal(config.server.headers['X-Frame-Options'], 'DENY');
   assert.equal(config.server.headers['X-Content-Type-Options'], 'nosniff');
   const csp = config.server.headers['Content-Security-Policy'];
@@ -98,7 +117,7 @@ test('root config retains existing named exports and standalone provider order',
     assert.equal(compatibility[name], value, name);
   const config = standaloneConfig({ mode: 'test' });
   const standaloneProviders = config.plugins
-    .slice(4, -5)
+    .slice(4, -6)
     .map((plugin) => plugin.name);
   assert.equal(
     standaloneProviders.filter((name) => name === 'gemini-live-proxy').length,
@@ -112,9 +131,10 @@ test('root config retains existing named exports and standalone provider order',
     standaloneProviders.filter((name) => name !== 'gemini-live-proxy'),
     providers.localProviderPlugins().map((plugin) => plugin.name),
   );
-  assert.equal(config.plugins.at(-6).name, 'gev-key-setup');
-  // The local MCP route follows every provider and precedes the API fallback.
-  assert.equal(config.plugins.at(-5).name, 'local-mcp');
+  assert.equal(config.plugins.at(-7).name, 'gev-key-setup');
+  // Token fallback follows real providers and local MCP before the API 404.
+  assert.equal(config.plugins.at(-6).name, 'local-mcp');
+  assert.equal(config.plugins.at(-5).name, 'google-token-unavailable');
   assert.equal(config.plugins.at(-4).name, 'api-not-found');
   // Config-only, so it sits after the provider slice rather than in it.
   assert.equal(config.plugins.at(-3).name, 'gev-unwatched-runtime-dirs');
diff --git a/src/tools/queries/atmosphere.js b/src/tools/queries/atmosphere.js
index d20a58027..9cbd8fec0 100644
--- a/src/tools/queries/atmosphere.js
+++ b/src/tools/queries/atmosphere.js
@@ -204,10 +204,14 @@ export const getWind = defineTool({
     const speed = windSpeed(vector.u, vector.v);
     const from = windFrom(vector.u, vector.v);
     const kph = speed * 3.6;
+    // When the model upstream fails, the proxy keeps serving the last run it
+    // has, however old, marked stale.
+    const stale = snapshot.stale === true;
     return {
       summary:
         `Wind at ${point.label}: ${kph.toFixed(0)} km/h` +
-        (from === 'Calm' ? ', calm.' : ` from the ${from}.`),
+        (from === 'Calm' ? ', calm' : ` from the ${from}`) +
+        (stale ? ' (forecast may be stale).' : '.'),
       data: {
         view: suggestView(services, {
           point,
@@ -224,6 +228,7 @@ export const getWind = defineTool({
         level: snapshot.level ?? '10 m above ground',
         model,
         cycle: snapshot.cycle ?? null,
+        stale,
       },
     };
   },
diff --git a/src/tools/queries/atmosphere.test.mjs b/src/tools/queries/atmosphere.test.mjs
index cf19d83f3..57b41b81a 100644
--- a/src/tools/queries/atmosphere.test.mjs
+++ b/src/tools/queries/atmosphere.test.mjs
@@ -148,6 +148,34 @@ test('wind is sampled from the model grid at the location', async () => {
   const calm = await catalog.call('get_wind', { location: { lat: 0, lon: 0 } });
   assert.equal(calm.summary, 'Wind at 0.0000, 0.0000: 0 km/h, calm.');
   assert.equal(calm.data.calm, true);
+  assert.equal(calm.data.stale, false);
+  // The proxy's last run, served while the model upstream fails.
+  const cached = composeCatalog({
+    tools: coreTools,
+    services: {
+      wind: {
+        getSnapshot: async (options) => ({
+          ...(await wind.getSnapshot(options)),
+          stale: true,
+          reason: 'Wind upstream unavailable',
+        }),
+      },
+    },
+  });
+  const stale = await cached.call('get_wind', { location: { lat: 0, lon: 0 } });
+  assert.equal(
+    stale.summary,
+    'Wind at 0.0000, 0.0000: 0 km/h, calm (forecast may be stale).',
+  );
+  assert.equal(stale.data.stale, true);
+  u.fill(10);
+  const staleWest = await cached.call('get_wind', {
+    location: { lat: 30.27, lon: -97.74 },
+  });
+  assert.equal(
+    staleWest.summary,
+    'Wind at 30.2700, -97.7400: 36 km/h from the W (forecast may be stale).',
+  );
   const down = composeCatalog({
     tools: coreTools,
     services: { wind: { getSnapshot: async () => ({ unavailable: true }) } },
diff --git a/src/tools/queries/hazards.js b/src/tools/queries/hazards.js
index 475df97ba..2b11c639c 100644
--- a/src/tools/queries/hazards.js
+++ b/src/tools/queries/hazards.js
@@ -5,6 +5,24 @@ import { defineTool, ToolError } from '../catalog.js';
 import { AREA_SCHEMA, areaContains, resolveArea } from '../area.js';
 import { LIMIT_SCHEMA, capRows, countNoun, isoTime } from '../results.js';
 
+function acquiredMsUtc(acqDate, acqTime) {
+  if (typeof acqDate !== 'string' || !/^\d{4}-\d{2}-\d{2}$/.test(acqDate))
+    return NaN;
+  const timeText = String(acqTime ?? '').trim();
+  if (!/^\d{1,4}$/.test(timeText)) return NaN;
+  const hhmm = timeText.padStart(4, '0');
+  const hours = Number(hhmm.slice(0, 2));
+  const minutes = Number(hhmm.slice(2, 4));
+  if (hours > 23 || minutes > 59) return NaN;
+  const timestamp = Date.parse(
+    `${acqDate}T${hhmm.slice(0, 2)}:${hhmm.slice(2, 4)}:00.000Z`,
+  );
+  return Number.isFinite(timestamp) &&
+    new Date(timestamp).toISOString().slice(0, 10) === acqDate
+    ? timestamp
+    : NaN;
+}
+
 export const getEarthquakes = defineTool({
   name: 'get_earthquakes',
   title: 'Recent earthquakes',
@@ -114,8 +132,7 @@ export const getActiveFires = defineTool({
           lon: fire.lon,
           frp_mw: fire.frp ?? null,
           confidence: fire.confidence ?? null,
-          acquired:
-            [fire.acqDate, fire.acqTime].filter(Boolean).join(' ') || null,
+          acquired: isoTime(acquiredMsUtc(fire.acqDate, fire.acqTime)),
           satellite: fire.satellite ?? null,
           day_night: fire.daynight ?? null,
         })),
diff --git a/src/tools/queries/hazards.test.mjs b/src/tools/queries/hazards.test.mjs
new file mode 100644
index 000000000..fa17158dd
--- /dev/null
+++ b/src/tools/queries/hazards.test.mjs
@@ -0,0 +1,46 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { composeCatalog } from '../catalog.js';
+import { getActiveFires } from './hazards.js';
+
+const catalogWith = (fires) =>
+  composeCatalog({
+    tools: [getActiveFires],
+    services: { fires: { getSnapshot: async () => ({ fires }) } },
+  });
+
+test('a fire acquired at 00:45 UTC reads as 00:45, not "45"', async () => {
+  const result = await catalogWith([
+    { lat: 24, lon: 121, frp: 5, acqDate: '2026-01-01', acqTime: '45' },
+  ]).call('get_active_fires', { area: { bbox: [120, 23, 122, 25] } });
+  assert.equal(result.data.rows[0].acquired, '2026-01-01T00:45:00.000Z');
+});
+
+test('fire acquisition timestamps reject impossible calendar dates', async () => {
+  for (const acqDate of [
+    '2026-02-29',
+    '2026-02-30',
+    '2026-04-31',
+    '1900-02-29',
+    '2026-13-01',
+    '2026-01-00',
+  ]) {
+    const result = await catalogWith([
+      { lat: 24, lon: 121, acqDate, acqTime: '45' },
+    ]).call('get_active_fires', { area: { bbox: [120, 23, 122, 25] } });
+    assert.equal(result.data.rows[0].acquired, null, acqDate);
+  }
+});
+
+test('fire acquisition timestamps preserve valid leap days and UTC times', async () => {
+  for (const [acqDate, acqTime, expected] of [
+    ['2024-02-29', '45', '2024-02-29T00:45:00.000Z'],
+    ['2000-02-29', 0, '2000-02-29T00:00:00.000Z'],
+    ['2026-04-30', '2359', '2026-04-30T23:59:00.000Z'],
+  ]) {
+    const result = await catalogWith([
+      { lat: 24, lon: 121, acqDate, acqTime },
+    ]).call('get_active_fires', { area: { bbox: [120, 23, 122, 25] } });
+    assert.equal(result.data.rows[0].acquired, expected);
+  }
+});
diff --git a/src/tools/queries/mobility.js b/src/tools/queries/mobility.js
index 743fa22a2..0a57ae3ae 100644
--- a/src/tools/queries/mobility.js
+++ b/src/tools/queries/mobility.js
@@ -473,11 +473,22 @@ export const getTrafficFlow = defineTool({
           : `No live traffic is reported in ${area.label}.`) +
         (flow.partial
           ? ' Some map tiles did not load, so these figures are partial.'
+          : '') +
+        // Past the daily TomTom budget, or while TomTom fails, the proxy
+        // serves its last copy of a tile however old it is.
+        (flow.stale
+          ? ' Some tiles are cached copies' +
+            (isoTime(flow.oldestTileAt)
+              ? `, the oldest from ${isoTime(flow.oldestTileAt)}`
+              : '') +
+            ', so traffic may be out of date.'
           : ''),
       data: {
         view: suggestView(services, { area, layers: ['traffic'] }),
         area: area.label,
         partial: flow.partial,
+        stale: flow.stale === true,
+        oldest_tile_at: isoTime(flow.oldestTileAt),
         speed_pct_of_free_flow: speedPct,
         measured_km: round(measuredKm, 1),
         congested_km: round(congestedKm, 1),
diff --git a/src/tools/queries/mobility.test.mjs b/src/tools/queries/mobility.test.mjs
index 011e431fd..0ea882727 100644
--- a/src/tools/queries/mobility.test.mjs
+++ b/src/tools/queries/mobility.test.mjs
@@ -171,6 +171,46 @@ test('bike share reports uncovered areas and failed systems honestly', async ()
   );
 });
 
+test('bike share excludes blank coordinates without losing stations on the prime meridian', async () => {
+  const stations = [
+    { station_id: 'blank', lat: 51.5, lon: ' ' },
+    { station_id: 'zero', lat: 51.5, lon: 0 },
+  ];
+  const catalog = composeCatalog({
+    tools: coreTools,
+    services: {
+      bikeshare: {
+        systems: [system('fixture', 'Fixture Bikes', 51.5, 0)],
+        async getStations(url) {
+          return {
+            data: {
+              stations: url.endsWith('station_information.json')
+                ? stations
+                : stations.map(({ station_id }) => ({
+                    station_id,
+                    num_bikes_available: 4,
+                  })),
+            },
+          };
+        },
+      },
+    },
+  });
+  const result = await catalog.call('get_bike_share', {
+    area: { lat: 51.5, lon: 0, radius_km: 2 },
+  });
+  assert.deepEqual(
+    result.data.rows.map((row) => row.station_id),
+    ['zero'],
+  );
+  assert.equal(result.data.total, 1);
+  assert.equal(result.data.rows[0].lon, 0);
+  assert.equal(
+    result.summary,
+    '1 bike-share station in 2 km around 51.500, 0.000 with 4 bikes available.',
+  );
+});
+
 const feed = {
   id: 'capmetro',
   name: 'CapMetro',
@@ -555,6 +595,47 @@ test('traffic counts only roads inside a radius area and reports missing tiles',
   assert.match(partial.summary, /Some map tiles did not load/);
 });
 
+test('traffic says when the proxy served cached tiles, and how old the oldest is', async () => {
+  const road = [
+    {
+      coords: [
+        [-0.2, 0],
+        [0.2, 0],
+      ],
+      trafficLevel: 0.9,
+    },
+  ];
+  const call = (detail) =>
+    composeCatalog({
+      tools: coreTools,
+      services: {
+        traffic: {
+          getStatus: async () => ({ hasKey: true }),
+          fetchFlowDetail: async () => ({
+            segments: road,
+            partial: false,
+            ...detail,
+          }),
+        },
+      },
+    }).call('get_traffic_flow', { area: { lat: 0, lon: 0, radius_km: 10 } });
+  const oldest = Date.UTC(2026, 9, 16, 8);
+  const stale = await call({ stale: true, oldestTileAt: oldest });
+  assert.equal(stale.data.stale, true);
+  assert.equal(stale.data.oldest_tile_at, '2026-10-16T08:00:00.000Z');
+  assert.match(
+    stale.summary,
+    /cached copies, the oldest from 2026-10-16T08:00:00\.000Z, so traffic may be out of date\./,
+  );
+  const live = await call({ stale: false, oldestTileAt: oldest });
+  assert.equal(live.data.stale, false);
+  assert.doesNotMatch(live.summary, /out of date/);
+  // A source that can't tell (no freshness fields) isn't reported as stale.
+  const unknown = await call({});
+  assert.equal(unknown.data.stale, false);
+  assert.equal(unknown.data.oldest_tile_at, null);
+});
+
 test('a whole-world bike-share search names every system it skipped', async () => {
   const empty = { data: { stations: [] } };
   const result = await composeCatalog({
diff --git a/src/tools/queries/queries.test.mjs b/src/tools/queries/queries.test.mjs
index b64f5e009..5f53cf9e8 100644
--- a/src/tools/queries/queries.test.mjs
+++ b/src/tools/queries/queries.test.mjs
@@ -125,7 +125,7 @@ test('fires need an area and report a missing key as unavailable', async () => {
     result.data.rows.map((row) => row.frp_mw),
     [40, 12],
   );
-  assert.equal(result.data.rows[1].acquired, '2026-01-01 0130');
+  assert.equal(result.data.rows[1].acquired, '2026-01-01T01:30:00.000Z');
 
   const keyless = composeCatalog({
     tools: coreTools,
diff --git a/src/ui/aircraftDisplay.js b/src/ui/aircraftDisplay.js
index ba325f6e9..6e14e0adf 100644
--- a/src/ui/aircraftDisplay.js
+++ b/src/ui/aircraftDisplay.js
@@ -70,7 +70,6 @@ export class AircraftDisplay {
     // a screen reader without this. It matters more now that the button ships
     // ACTIVE from markup (default-on, 2026-08-22): the very first thing assistive
     // tech reported was an unpressed-looking control over an armed layer.
-    // Mirrors #scope-toggle, which has always carried aria-pressed.
     this._models3dBtn?.setAttribute(
       'aria-pressed',
       String(this._models3dEnabled),
diff --git a/src/ui/applicationShell.js b/src/ui/applicationShell.js
index 4552da8d4..4b999a75f 100644
--- a/src/ui/applicationShell.js
+++ b/src/ui/applicationShell.js
@@ -35,6 +35,10 @@ import * as Cesium from 'cesium';
 import { aircraftTrackingTarget } from '../cockpitTracking.js';
 
 import { ShellFeedback } from './shellFeedback.js';
+import {
+  applyShareFollowOffset,
+  readShareFollowSubject,
+} from './shareFollow.js';
 
 import { runCctvLayerEnableTransition } from '../cctvFocusPolicy.js';
 
@@ -74,7 +78,13 @@ export class StyleManager extends ShellFacade {
    */
   constructor(
     viewer,
-    { mapStackController = null, placeSearch, services, requestServices } = {},
+    {
+      mapStackController = null,
+      placeSearch,
+      services,
+      requestServices,
+      initialShareCode = null,
+    } = {},
   ) {
     super();
     const {
@@ -165,6 +175,8 @@ export class StyleManager extends ShellFacade {
         this._showGlobalStatusNotice(message, options),
       feedback: this._feedback,
       updateFeedback: () => this._updateGlobalLoadingFeedback(),
+      applyFollowOffset: (entity, offset) =>
+        applyShareFollowOffset(viewer, entity, offset),
     });
 
     this._visualSettings = new VisualSettings({
@@ -336,6 +348,7 @@ export class StyleManager extends ShellFacade {
         _poiRow: this._poiRow,
         _locationBarDivider: this._locationBarDivider,
         _locationSearch: this._locationSearch,
+        _locationSearchError: this._locationSearchError,
         _searchToggle: this._searchToggle,
         _resetGlobeBtn: this._resetGlobeBtn,
         _cockpitResetGlobeBtn: this._cockpitResetGlobeBtn,
@@ -430,7 +443,12 @@ export class StyleManager extends ShellFacade {
       isNavigationCurrent: (generation) =>
         generation === this._navigationGeneration,
       cancelOwnedNavigation: () => this.viewer.camera.cancelFlight(),
+      // A host may open a share code without a `/share/<code>` address.
+      initialShareCode,
     });
+    this.shareLinkManager.setFollowSubjectProvider(({ nowMs }) =>
+      readShareFollowSubject({ viewer: this.viewer, nowMs }),
+    );
     this.shareLinkManager.setPanelStateProvider(() =>
       this._buildSharePanelState(),
     );
@@ -1652,14 +1670,35 @@ export class StyleManager extends ShellFacade {
   // ── Share Button ─────────────────────────────
 
   /**
-   * Wires the share button click to copy the current share link to the clipboard.
+   * Wires the share button. By default it copies the current share link to the
+   * clipboard; a host may pass `services.shareLink(url)` to share it another way
+   * (a system share sheet, for example). It resolves to 'shared', 'copied',
+   * 'cancelled' (no toast) or false (failed).
    * @returns {void}
    */
   _initShareButton() {
     this._lifetime.listen(this._shareBtn, 'click', async () => {
-      const success = await this.shareLinkManager.copyLink();
-      if (!this._disposed)
-        this._showToast(success ? t('Link copied!') : t('Copy failed'));
+      const share = this.services.shareLink;
+      let result;
+      if (typeof share === 'function') {
+        // A host's hook may return a plain value or throw; both are answers.
+        result = await Promise.resolve()
+          .then(() => {
+            const href = this.shareLinkManager.buildLink();
+            return href ? share(href) : false;
+          })
+          .catch(() => false);
+      } else {
+        result = (await this.shareLinkManager.copyLink()) ? 'copied' : false;
+      }
+      if (this._disposed || result === 'cancelled') return;
+      this._showToast(
+        result === 'shared'
+          ? t('Link shared')
+          : result === 'copied'
+            ? t('Link copied!')
+            : t('Copy failed'),
+      );
     });
   }
 
diff --git a/src/ui/cockpitContext.js b/src/ui/cockpitContext.js
index 852cc32a8..2c65d3bf6 100644
--- a/src/ui/cockpitContext.js
+++ b/src/ui/cockpitContext.js
@@ -15,7 +15,7 @@ const LOCALIZED_CONTEXT_SCOPE = Object.freeze({
   window: ({ label, radiusKm }) =>
     t('{label} · {radius} AIR/SEA WINDOW', {
       label,
-      radius: `${radiusKm === null ? '—' : formatNumber(radiusKm)}\u00a0${getLocale() === 'zh-CN' ? unitLabel('km') : unitLabel('km').toUpperCase()}`,
+      radius: `${radiusKm === null ? '—' : formatNumber(radiusKm)}\u00a0${getLocale().startsWith('zh-') ? unitLabel('km') : unitLabel('km').toUpperCase()}`,
     }),
   installations: ({ scope, coverage }) =>
     t('{scope} · INSTALLATIONS {coverage}', { scope, coverage }),
diff --git a/src/ui/cockpitInstruments.js b/src/ui/cockpitInstruments.js
index 1904b6cea..77a4bea7d 100644
--- a/src/ui/cockpitInstruments.js
+++ b/src/ui/cockpitInstruments.js
@@ -14,6 +14,7 @@ import {
   formatAltitudeRulerTick,
   formatCompassDivision,
   formatCockpitEmergency,
+  formatHeadingReadout,
   formatSpeedRulerTick,
   normalizeHeading,
   relativeBearing,
@@ -238,7 +239,7 @@ export function updateRoute(info) {
   }
   if (this.routeDirectionLabel) {
     this.routeDirectionLabel.textContent = t('DEST {bearing}', {
-      bearing: `${String(Math.round(destinationBearing)).padStart(3, '0')}°`,
+      bearing: `${formatHeadingReadout(destinationBearing)}°`,
     });
   }
 }
diff --git a/src/ui/cockpitPresentation.js b/src/ui/cockpitPresentation.js
index 8285b74b3..4f3faac9d 100644
--- a/src/ui/cockpitPresentation.js
+++ b/src/ui/cockpitPresentation.js
@@ -149,14 +149,16 @@ export function formatCockpitDistance(distanceM) {
     minimumFractionDigits: digits,
     maximumFractionDigits: digits,
   });
-  return getLocale() === 'zh-CN' ? distance : distance.toUpperCase();
+  return getLocale().startsWith('zh-') ? distance : distance.toUpperCase();
 }
 
 export function formatCockpitWindDirection(value) {
   if (!Number.isFinite(value)) return t('DIR UNKNOWN');
   const labels = Object.keys(COMPASS_POINT_LABELS);
   const normalized = ((value % 360) + 360) % 360;
-  return `${compassPointLabel(labels[Math.round(normalized / 45) % labels.length])} · ${Math.round(normalized)}°`;
+  // 359.5° and above is north. Modulo keeps that from printing 360°.
+  const degrees = Math.round(normalized) % 360;
+  return `${compassPointLabel(labels[Math.round(normalized / 45) % labels.length])} · ${degrees}°`;
 }
 
 // Digit grouping and decimal marks (`26,175`, `26 175`, `26.175`) take a
diff --git a/src/ui/cockpitPresentation.test.mjs b/src/ui/cockpitPresentation.test.mjs
new file mode 100644
index 000000000..da5c8e53b
--- /dev/null
+++ b/src/ui/cockpitPresentation.test.mjs
@@ -0,0 +1,10 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { formatCockpitWindDirection } from './cockpitPresentation.js';
+
+test('wind just west of north reads 0°, not 360°', () => {
+  assert.equal(formatCockpitWindDirection(90), 'E · 90°');
+  assert.equal(formatCockpitWindDirection(0), 'N · 0°');
+  assert.equal(formatCockpitWindDirection(359.4), 'N · 359°');
+  assert.equal(formatCockpitWindDirection(359.6), 'N · 0°');
+});
diff --git a/src/ui/contextSession.js b/src/ui/contextSession.js
index 241b5f168..936fc2cb1 100644
--- a/src/ui/contextSession.js
+++ b/src/ui/contextSession.js
@@ -86,6 +86,9 @@ export async function _restoreContextSession({
         throw error;
       }
     }
+    // Clear All may have run while Contacts settled. It owns the selection
+    // now, so the snapshot must not come back behind it.
+    if (restoreState.cancelled) return;
     await this._dataManager.restoreEnabledLayerIds(
       restoreState.enabledLayerIds,
       {
diff --git a/src/ui/cyberTheme.test.mjs b/src/ui/cyberTheme.test.mjs
index 68710a36a..03ee75f08 100644
--- a/src/ui/cyberTheme.test.mjs
+++ b/src/ui/cyberTheme.test.mjs
@@ -1,3 +1,4 @@
+import { getScopeMaskFeather, isScopeMaskEnabled, setScopeMaskEnabled, setScopeMaskFeather } from '../scopeMask.js';
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
 import test from 'node:test';
@@ -271,6 +272,35 @@ test('Display and voice HUD routes preserve explicit Cyber entry and exit author
   assert.equal(voice.owner.activeStyle, 'snow');
 });
 
+test('scope choice and expanded feather survive every HUD layout and both restore paths', async (t) => {
+  const { owner } = styleOwner(t, 'tactical');
+  const previous = { enabled: isScopeMaskEnabled(), feather: getScopeMaskFeather() };
+  t.after(() => { setScopeMaskEnabled(previous.enabled); setScopeMaskFeather(previous.feather); });
+  Object.assign(owner.services, { setScopeMaskEnabled, setScopeMaskFeather });
+  owner._scopeBtn = { checked: true };
+  owner._scopeFeatherSlider = { value: '11', disabled: false };
+  owner._scopeFeatherValue = {};
+  await owner.restoreShareState({ scopeEnabled: false, scopeFeatherPct: 200 });
+  assert.equal(owner._scopeBtn.checked, false);
+  assert.equal(owner._scopeFeatherSlider.disabled, true);
+  assert.equal(owner._scopeFeatherSlider.value, '200');
+  for (const layout of ['minimal', 'operator', 'cyber', 'tactical']) {
+    owner._setHudVariant(layout, { applyVisualDefaults: true });
+    assert.equal(isScopeMaskEnabled(), false, layout);
+    assert.equal(getScopeMaskFeather(), 2, layout);
+    assert.equal(owner._scopeBtn.checked, false, layout);
+  }
+  await owner.applyVisualState({ scope: { enabled: true, featherPct: 175 } });
+  assert.equal(isScopeMaskEnabled(), true);
+  assert.equal(getScopeMaskFeather(), 1.75);
+  assert.equal(owner._scopeBtn.checked, true);
+  assert.equal(owner._scopeFeatherSlider.disabled, false);
+  assert.equal(owner._scopeFeatherValue.textContent, '175%');
+  await owner.applyVisualState({ scope: { featherPct: 500 } });
+  assert.equal(getScopeMaskFeather(), 2);
+  assert.equal(owner._scopeFeatherSlider.value, '200');
+});
+
 test('scene and share HUD transitions do not restore a local pre-Cyber preset', async (t) => {
   const { owner, hud } = styleOwner(t, 'tactical');
   owner.setStyle('noir');
diff --git a/src/ui/displayBindings.js b/src/ui/displayBindings.js
index 329681798..3ae874c3c 100644
--- a/src/ui/displayBindings.js
+++ b/src/ui/displayBindings.js
@@ -1,6 +1,7 @@
+import { clampScopeFeatherPct } from '../scopeMaskPolicy.js';
 import { createFrameRateMonitor } from './frameRateMonitor.js';
 import { bindApplicationShortcuts } from './visualInput.js';
-import { bindDisplayControls } from './displayControls.js';
+import { bindDisplayControls, syncScopeControls } from './displayControls.js';
 import { canonicalizeDensity } from '../data/detectionPolicy.js';
 
 /** Own keyboard/display event subscriptions; settings remain with their state owners. */
@@ -92,6 +93,11 @@ export class DisplayBindings {
       },
     });
 
+    syncScopeControls(
+      this._scopeBtn,
+      this._scopeFeatherSlider,
+      isScopeMaskEnabled(),
+    );
     this._displayControls?.destroy();
     this._displayControls = bindDisplayControls({
       elements: {
@@ -100,7 +106,7 @@ export class DisplayBindings {
         bloomSlider: this._bloomSlider,
         sharpenButton: this._sharpenBtn,
         sharpenSlider: this._sharpenSlider,
-        scopeButton: this._scopeBtn,
+        scopeToggle: this._scopeBtn,
         scopeFeatherSlider: this._scopeFeatherSlider,
         hudLayout: this._hudLayoutSelect,
         hudButton: this._hudBtn,
@@ -134,17 +140,15 @@ export class DisplayBindings {
           this.shareLinkManager?.claimRestoreLane?.('visual');
           this._setSharpenEnabled(!this.sharpenEnabled);
         },
-        toggleScope: () => {
+        setScopeEnabled: (enabled) => {
           this.shareLinkManager?.claimRestoreLane?.('visual');
-          const next = !isScopeMaskEnabled();
-          setScopeMaskEnabled(next);
-          this._scopeBtn.classList.toggle('active', next);
-          this._scopeBtn.setAttribute('aria-pressed', String(next));
+          setScopeMaskEnabled(enabled);
+          syncScopeControls(this._scopeBtn, this._scopeFeatherSlider, enabled);
           this._syncShareState();
         },
         setScopeFeather: (value) => {
           this.shareLinkManager?.claimRestoreLane?.('visual');
-          const pct = Math.max(0, Math.min(100, value || 0));
+          const pct = clampScopeFeatherPct(value);
           if (this._scopeFeatherValue)
             this._scopeFeatherValue.textContent = `${pct}%`;
           setScopeMaskFeather(pct / 100);
diff --git a/src/ui/displayControls.js b/src/ui/displayControls.js
index e0d76d338..ceab61d91 100644
--- a/src/ui/displayControls.js
+++ b/src/ui/displayControls.js
@@ -18,7 +18,6 @@ export function bindDisplayControls({ elements, actions }) {
   for (const [name, action] of [
     ['bloomButton', 'toggleBloom'],
     ['sharpenButton', 'toggleSharpen'],
-    ['scopeButton', 'toggleScope'],
     ['cleanViewButton', 'toggleCleanView'],
     ['cleanViewExitButton', 'exitCleanView'],
     ['celestialButton', 'toggleCelestial'],
@@ -34,6 +33,7 @@ export function bindDisplayControls({ elements, actions }) {
     ['scopeFeatherSlider', 'setScopeFeather'],
   ])
     listen(elements[name], 'input', action, integer);
+  listen(elements.scopeToggle, 'change', 'setScopeEnabled', (el) => el.checked);
   listen(elements.densitySlider, 'input', 'setDensity', (el) => el.value);
   listen(elements.hudLayout, 'change', 'setHudLayout', (el) => el.value);
   for (const [name, action] of [
@@ -72,3 +72,9 @@ export function bindDisplayControls({ elements, actions }) {
     },
   };
 }
+
+/** Keep the native Scope checkbox and feather availability in step with the mask. */
+export function syncScopeControls(toggle, featherSlider, enabled) {
+  if (toggle) toggle.checked = enabled;
+  if (featherSlider) featherSlider.disabled = !enabled;
+}
diff --git a/src/ui/displayControls.test.mjs b/src/ui/displayControls.test.mjs
index 705a9f775..f7c5bcafb 100644
--- a/src/ui/displayControls.test.mjs
+++ b/src/ui/displayControls.test.mjs
@@ -158,3 +158,29 @@ test('optional controls are absent safely and subscriptions stay instance-owned'
   assert.deepEqual(calls, ['b']);
   two.destroy();
 });
+
+test('the native Scope checkbox reads checked state on change and disposes its listener', () => {
+  const scopeToggle = element();
+  scopeToggle.checked = true;
+  const scopeFeatherSlider = element('200');
+  const calls = [];
+  const controls = bindDisplayControls({
+    elements: { scopeToggle, scopeFeatherSlider },
+    actions: {
+      setScopeEnabled: (value) => calls.push(['enabled', value]),
+      setScopeFeather: (value) => calls.push(['feather', value]),
+    },
+  });
+  scopeToggle.checked = false;
+  scopeToggle.dispatchEvent(new Event('change'));
+  scopeToggle.checked = true;
+  scopeToggle.dispatchEvent(new Event('change'));
+  scopeFeatherSlider.dispatchEvent(new Event('input'));
+  controls.destroy();
+  scopeToggle.dispatchEvent(new Event('change'));
+  assert.deepEqual(calls, [
+    ['enabled', false],
+    ['enabled', true],
+    ['feather', 200],
+  ]);
+});
diff --git a/src/ui/frameRateMonitor.js b/src/ui/frameRateMonitor.js
index 3bad73a20..2f6ab8e8d 100644
--- a/src/ui/frameRateMonitor.js
+++ b/src/ui/frameRateMonitor.js
@@ -6,7 +6,7 @@ export function createFrameRateMonitor({ viewer, documentRef = document }) {
   if (!host || !frameEvent) return { destroy() {} };
 
   const readout = documentRef.createElement('div');
-  readout.className = 'frame-rate-readout';
+  readout.className = 'frame-rate-readout scene-text-holdout';
   readout.hidden = true;
   // i18n-ignore: FPS is a unit code, the same in every language
   readout.textContent = 'FPS —';
diff --git a/src/ui/layerNames.js b/src/ui/layerNames.js
index d9674efea..2c918ad95 100644
--- a/src/ui/layerNames.js
+++ b/src/ui/layerNames.js
@@ -34,6 +34,7 @@ export const LAYER_NAME_KEYS = Object.freeze({
   'recent-imagery': msg('Recent Imagery'),
   'fire-perimeters': msg('Fire Perimeters'),
   'gnss-integrity': msg('GNSS Integrity'),
+  's2-ghostmaps': msg('S2 GhostMaps'),
   wind: msg('Wind'),
   'weather-radar': msg('Rain radar'),
   'weather-satellite': msg('Satellite clouds'),
diff --git a/src/ui/layerPanel.js b/src/ui/layerPanel.js
index 109d96c60..18b71dabf 100644
--- a/src/ui/layerPanel.js
+++ b/src/ui/layerPanel.js
@@ -73,6 +73,7 @@ const PANEL_GROUPS = [
       'local-firms',
       'fire-perimeters',
       'gnss-integrity',
+      's2-ghostmaps',
     ],
   },
   {
diff --git a/src/ui/localePicker.js b/src/ui/localePicker.js
index d60b4e91a..41875042d 100644
--- a/src/ui/localePicker.js
+++ b/src/ui/localePicker.js
@@ -20,6 +20,11 @@ export const LOCALE_SEARCH_THRESHOLD = 8;
 /** Type-ahead keystrokes closer together than this extend one prefix. */
 export const TYPEAHEAD_RESET_MS = 500;
 
+const CHINESE_LABELS = {
+  'zh-CN': 'Chinese (Simplified)',
+  'zh-Hant': 'Chinese (Traditional)',
+};
+
 /**
  * Text folded for search: no diacritics, lower case. 'Español' → 'espanol',
  * 'Ёжик' → 'ежик'.
@@ -464,12 +469,13 @@ export function mountLocalePicker({
     item.dataset.locale = option.code;
     const name = element(documentRef, 'span', 'locale-picker-native');
     name.textContent = option.nativeName;
-    // Every row reads the same: the language named in itself, then its code.
-    // The interface-language name only helps the search find it.
+    // Chinese variants are distinguished by script rather than region.
     const meta = element(documentRef, 'span', 'locale-picker-meta');
     const codeLabel = element(documentRef, 'span', 'locale-picker-option-code');
     codeLabel.setAttribute('translate', 'no');
-    codeLabel.textContent = option.code.toUpperCase();
+    codeLabel.textContent =
+      CHINESE_LABELS[option.code] || option.code.toUpperCase();
+    if (CHINESE_LABELS[option.code]) codeLabel.lang = 'en';
     meta.append(codeLabel);
     const text = element(documentRef, 'span', 'locale-picker-text');
     text.append(name, meta);
diff --git a/src/ui/localePicker.test.mjs b/src/ui/localePicker.test.mjs
index 7f6d11f9b..057642827 100644
--- a/src/ui/localePicker.test.mjs
+++ b/src/ui/localePicker.test.mjs
@@ -40,7 +40,7 @@ test('the current language comes first, the rest by their own names', () => {
         nativeNames: LOCALE_NAMES,
       }),
     ),
-    ['ru', 'en', 'es', 'zh-CN'],
+    ['ru', 'en', 'es', 'zh-CN', 'zh-Hant'],
   );
   assert.deepEqual(
     codes(
@@ -50,7 +50,7 @@ test('the current language comes first, the rest by their own names', () => {
         nativeNames: LOCALE_NAMES,
       }),
     ),
-    ['es', 'en', 'ru', 'zh-CN'],
+    ['es', 'en', 'ru', 'zh-CN', 'zh-Hant'],
   );
   assert.deepEqual(
     codes(
@@ -60,7 +60,7 @@ test('the current language comes first, the rest by their own names', () => {
         nativeNames: LOCALE_NAMES,
       }),
     ),
-    ['en', 'es', 'ru', 'zh-CN'],
+    ['en', 'es', 'ru', 'zh-CN', 'zh-Hant'],
   );
   const rows = buildLocaleOptions({
     locales: MANY,
@@ -263,7 +263,7 @@ test('keyboard model: open on the current language, move, choose, close', () =>
   assert.deepEqual(model.keydown({ key: 'ArrowDown' }), { handled: true });
   assert.equal(model.activeOption.code, 'en');
   model.keydown({ key: 'End' });
-  assert.equal(model.activeOption.code, 'zh-CN');
+  assert.equal(model.activeOption.code, 'zh-Hant');
   model.keydown({ key: 'Home' });
   assert.equal(model.activeOption.code, 'ru');
   model.keydown({ key: 'ArrowUp' });
diff --git a/src/ui/locationControls.js b/src/ui/locationControls.js
index f2b67c7db..27363c1ac 100644
--- a/src/ui/locationControls.js
+++ b/src/ui/locationControls.js
@@ -22,6 +22,7 @@ export class LocationControls {
     onCity,
     onPoi,
     onSearch,
+    onSearchEdit,
     onReset,
     doc = document,
     requestFrame = (callback) => requestAnimationFrame(callback),
@@ -74,6 +75,11 @@ export class LocationControls {
     this.bind(elements.search, 'keydown', (event) => {
       if (event.key === 'Enter') void onSearch(elements.search.value);
     });
+    // Typing corrects a failed query; closing the field (which empties it) drops its error.
+    this.bind(elements.search, 'input', () => onSearchEdit?.());
+    this.bind(elements.search, 'blur', () => {
+      if (!elements.search.value) onSearchEdit?.();
+    });
     for (const button of elements.resetButtons)
       this.bind(button, 'click', onReset);
   }
diff --git a/src/ui/locationControls.test.mjs b/src/ui/locationControls.test.mjs
index 928e48554..33f5eaa7f 100644
--- a/src/ui/locationControls.test.mjs
+++ b/src/ui/locationControls.test.mjs
@@ -86,6 +86,7 @@ function fixture() {
     onCity: (id) => calls.push(['city', id]),
     onPoi: (id, index) => calls.push(['poi', id, index]),
     onSearch: (query) => calls.push(['search', query]),
+    onSearchEdit: () => calls.push(['edit']),
     onReset: () => calls.push(['reset']),
     doc,
     requestFrame: (fn) => {
@@ -147,3 +148,13 @@ test('location and POI keys route once while form controls retain typing', () =>
   f.elements.resetButtons[1].fire('click');
   assert.deepEqual(f.calls, [['poi', 'a', 1], ['reset']]);
 });
+test('typing clears a failed search error and closing the emptied field drops it too', () => {
+  const f = fixture();
+  f.elements.search.value = 'Pariss';
+  f.elements.search.fire('blur');
+  assert.deepEqual(f.calls, [], 'leaving a kept query keeps its error');
+  f.elements.search.fire('input');
+  f.elements.search.value = '';
+  f.elements.search.fire('blur');
+  assert.deepEqual(f.calls, [['edit'], ['edit']]);
+});
diff --git a/src/ui/locationNavigation.js b/src/ui/locationNavigation.js
index af8fb95b8..d0664509f 100644
--- a/src/ui/locationNavigation.js
+++ b/src/ui/locationNavigation.js
@@ -80,19 +80,27 @@ export class LocationNavigation {
 
   _handleLocationSearchState(state, change) {
     if (this._disposed || !change) return;
-    if (change.type === 'started')
+    if (change.type === 'started') {
       this._activeLocationSearchGeneration = change.generation;
-    else if (change.type === 'found') {
+      this._setLocationSearchError(null);
+    } else if (change.type === 'found') {
       this._searchedLocationLabel = state.destination.label || state.query;
       this._setActiveLocation(null);
       this._currentPoi = null;
       this._collapsePOIRow();
       this._updateLocationMiniStatus();
     } else if (change.type === 'missing')
-      this._showToast(t('Location not found'));
-    else if (change.type === 'failed') this._showToast(t('Search failed'));
+      this._setLocationSearchError(
+        `${t('Location not found')}. ${t('Check the spelling and press Enter to search again.')}`,
+      );
+    else if (change.type === 'failed')
+      this._setLocationSearchError(
+        `${t('Search failed')}. ${t('Press Enter to try again.')}`,
+      );
     else if (change.type === 'settled')
-      this._settleLocationSearchUi(change.generation);
+      this._settleLocationSearchUi(change.generation, {
+        keepQuery: state.status === 'missing' || state.status === 'failed',
+      });
     else if (
       change.type === 'reset' &&
       this._activeLocationSearchGeneration !== null
@@ -101,6 +109,21 @@ export class LocationNavigation {
     }
   }
 
+  /** Show, or with null clear, the announced error under the search field. */
+  _setLocationSearchError(message) {
+    const input = this._locationSearch;
+    const error = this._locationSearchError;
+    if (error) error.textContent = message || '';
+    if (!input) return;
+    if (message) {
+      input.setAttribute('aria-invalid', 'true');
+      if (error?.id) input.setAttribute('aria-describedby', error.id);
+    } else {
+      input.removeAttribute('aria-invalid');
+      input.removeAttribute('aria-describedby');
+    }
+  }
+
   _initLocationBar() {
     const { CITY_POIS, searchAndFlyTo, LocationSearch } = this.services;
     this._locationControls?.destroy();
@@ -144,6 +167,7 @@ export class LocationNavigation {
       onCity: (id) => this._onCityPillClick(id),
       onPoi: (id, index) => this._onPoiClick(id, index),
       onSearch: (query) => this._locationLookup.run(query),
+      onSearchEdit: () => this._setLocationSearchError(null),
       onReset: () => this.resetToGlobeView(),
     });
   }
diff --git a/src/ui/locationSearchRecovery.test.mjs b/src/ui/locationSearchRecovery.test.mjs
new file mode 100644
index 000000000..19a310203
--- /dev/null
+++ b/src/ui/locationSearchRecovery.test.mjs
@@ -0,0 +1,110 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { NavigationController } from './navigationController.js';
+import { LocationNavigation } from './locationNavigation.js';
+
+function input() {
+  const classes = new Set(['expanded', 'searching']);
+  const attributes = new Map();
+  return {
+    id: 'location-search',
+    value: 'Pariss',
+    focused: false,
+    selected: false,
+    classList: {
+      remove: (...names) => names.forEach((name) => classes.delete(name)),
+      contains: (name) => classes.has(name),
+    },
+    focus() {
+      this.focused = true;
+    },
+    blur() {
+      this.focused = false;
+    },
+    select() {
+      this.selected = true;
+    },
+    setAttribute: (name, value) => attributes.set(name, value),
+    removeAttribute: (name) => attributes.delete(name),
+    getAttribute: (name) => attributes.get(name) ?? null,
+  };
+}
+
+function settle(searchInput, options) {
+  const owner = { _activeLocationSearchGeneration: 4, searchInput };
+  NavigationController.prototype._settleLocationSearchUi.call(
+    owner,
+    4,
+    options,
+  );
+  return owner;
+}
+
+test('a search that found nothing keeps its query, the open field and focus', () => {
+  const field = input();
+  const owner = settle(field, { keepQuery: true });
+  assert.equal(owner._activeLocationSearchGeneration, null);
+  assert.equal(field.value, 'Pariss');
+  assert.equal(field.classList.contains('expanded'), true);
+  assert.equal(field.classList.contains('searching'), false);
+  assert.equal(field.focused, true);
+  assert.equal(field.selected, true);
+});
+
+test('a search that arrived still clears and closes the field', () => {
+  const field = input();
+  field.focused = true;
+  settle(field);
+  assert.equal(field.value, '');
+  assert.equal(field.classList.contains('expanded'), false);
+  assert.equal(field.focused, false);
+});
+
+function navigation() {
+  const field = input();
+  const error = { id: 'location-search-error', textContent: '' };
+  const settled = [];
+  const toasts = [];
+  const owner = {
+    _disposed: false,
+    _locationSearch: field,
+    _locationSearchError: error,
+    _activeLocationSearchGeneration: null,
+    _settleLocationSearchUi: (generation, options) =>
+      settled.push([generation, options]),
+    _showToast: (message) => toasts.push(message),
+    _setLocationSearchError:
+      LocationNavigation.prototype._setLocationSearchError,
+  };
+  const handle = (status, type) =>
+    LocationNavigation.prototype._handleLocationSearchState.call(
+      owner,
+      { status, query: field.value },
+      { type, generation: 7 },
+    );
+  return { owner, field, error, settled, toasts, handle };
+}
+
+for (const [status, text] of [
+  ['missing', 'Location not found'],
+  ['failed', 'Search failed'],
+]) {
+  test(`a ${status} search announces a lasting error on the field instead of a toast`, () => {
+    const n = navigation();
+    n.handle('searching', 'started');
+    n.handle(status, status);
+    n.handle(status, 'settled');
+    assert.match(n.error.textContent, new RegExp(`^${text}\\. `));
+    assert.equal(n.field.getAttribute('aria-invalid'), 'true');
+    assert.equal(
+      n.field.getAttribute('aria-describedby'),
+      'location-search-error',
+    );
+    assert.deepEqual(n.settled, [[7, { keepQuery: true }]]);
+    assert.deepEqual(n.toasts, []);
+    n.handle('searching', 'started');
+    assert.equal(n.error.textContent, '');
+    assert.equal(n.field.getAttribute('aria-invalid'), null);
+    assert.equal(n.field.getAttribute('aria-describedby'), null);
+  });
+}
diff --git a/src/ui/navigationController.js b/src/ui/navigationController.js
index 437b643f3..3c0bc7684 100644
--- a/src/ui/navigationController.js
+++ b/src/ui/navigationController.js
@@ -119,10 +119,17 @@ export class NavigationController {
     return this._navigationGeneration;
   }
 
-  _settleLocationSearchUi(generation) {
+  /** A search that found nothing keeps its query and focus so it can be corrected. */
+  _settleLocationSearchUi(generation, { keepQuery = false } = {}) {
     if (this._activeLocationSearchGeneration !== generation) return;
     this._activeLocationSearchGeneration = null;
-    this.searchInput?.classList.remove('searching', 'expanded');
+    this.searchInput?.classList.remove('searching');
+    if (keepQuery) {
+      this.searchInput?.focus();
+      this.searchInput?.select?.();
+      return;
+    }
+    this.searchInput?.classList.remove('expanded');
     if (this.searchInput) this.searchInput.value = '';
     this.searchInput?.blur();
   }
@@ -241,7 +248,7 @@ export class NavigationController {
     });
   }
 
-  _reassertNavigationHandoff(generation) {
+  _reassertNavigationHandoff(generation, { trackingOrigin = 'tool' } = {}) {
     return reassertNavigationHandoff({
       generation,
       currentGeneration: this._navigationGeneration,
@@ -253,7 +260,7 @@ export class NavigationController {
       // was refused by the cockpit leaves the old readout standing.
       release: () => {
         this.clearLocation();
-        return this._releaseFollowCamera();
+        return this._releaseFollowCamera({ trackingOrigin });
       },
     });
   }
diff --git a/src/ui/shareButton.test.mjs b/src/ui/shareButton.test.mjs
new file mode 100644
index 000000000..e5e8422c0
--- /dev/null
+++ b/src/ui/shareButton.test.mjs
@@ -0,0 +1,160 @@
+// The share button copies by default; a host's `services.shareLink` shares the
+// link its own way and reports how it went.
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { StyleManager } from './applicationShell.js';
+import { ShareLinkManager } from '../sharelink.js';
+import { parseSharePath } from '../share/shareLinkPath.js';
+import { decodeShareView } from '../share/viewCodec.js';
+
+/** The decoded view of a `/share/<code>` link. */
+const sharedState = (href) =>
+  decodeShareView(parseSharePath(new URL(href).pathname).code).state;
+const SHARE_LINK = /^https:\/\/gev\.example\/share\/[A-Za-z0-9_-]+$/;
+
+function makeManager(href, { positioned = true } = {}) {
+  globalThis.window = { location: { href, hash: new URL(href).hash } };
+  globalThis.history = { replaceState() {} };
+  const viewer = {
+    camera: {
+      changed: { addEventListener() {} },
+      positionCartographic: positioned
+        ? { latitude: 0, longitude: 0, height: 1000 }
+        : undefined,
+      heading: 0,
+      pitch: -Math.PI / 2,
+      roll: 0,
+    },
+  };
+  return new ShareLinkManager(viewer);
+}
+
+function installClipboard(writeText) {
+  Object.defineProperty(globalThis, 'navigator', {
+    configurable: true,
+    value: { clipboard: { writeText } },
+  });
+}
+
+/** Wire the real share button handler onto a minimal shell; return a click. */
+function shell({ manager, services = {} }) {
+  const toasts = [];
+  let click;
+  const owner = {
+    services,
+    shareLinkManager: manager,
+    _shareBtn: {},
+    _disposed: false,
+    _lifetime: { listen: (_el, _type, handler) => (click = handler) },
+    _showToast: (message) => toasts.push(message),
+  };
+  StyleManager.prototype._initShareButton.call(owner);
+  return { toasts, click: () => click() };
+}
+
+test('buildLink is a /share link stamped with its creation time, without ?lang', () => {
+  const manager = makeManager('https://gev.example/?lang=ru#v=2&lat=10&lon=20');
+  const href = manager.buildLink({ nowMs: 5_000_000 });
+  assert.match(href, SHARE_LINK);
+  const link = new URL(href);
+  assert.equal(link.searchParams.get('lang'), null);
+  assert.equal(link.hash, '');
+  assert.equal(sharedState(href).sharedAtMs, 5_000_000);
+  // The camera is the live one, not the address bar's.
+  assert.equal(sharedState(href).lat, 0);
+  assert.equal(
+    makeManager('https://gev.example/', { positioned: false }).buildLink(),
+    null,
+  );
+});
+
+test('copyLink copies exactly what buildLink builds', async () => {
+  let copied = null;
+  installClipboard(async (url) => {
+    copied = url;
+  });
+  const manager = makeManager('https://gev.example/#v=2');
+  assert.equal(await manager.copyLink({ nowMs: 7_000_000 }), true);
+  assert.equal(copied, manager.buildLink({ nowMs: 7_000_000 }));
+});
+
+test('without a host hook the button copies the link', async () => {
+  let copied = null;
+  installClipboard(async (url) => {
+    copied = url;
+  });
+  const { toasts, click } = shell({
+    manager: makeManager('https://gev.example/#v=2'),
+  });
+  await click();
+  assert.match(copied, SHARE_LINK);
+  assert.deepEqual(toasts, ['Link copied!']);
+
+  installClipboard(async () => {
+    throw new Error('denied');
+  });
+  await click();
+  assert.deepEqual(toasts, ['Link copied!', 'Copy failed']);
+});
+
+test('a host hook receives the link and its result picks the toast', async () => {
+  installClipboard(async () => assert.fail('the host shares instead'));
+  const shared = [];
+  const results = ['shared', 'copied', 'cancelled', false];
+  const { toasts, click } = shell({
+    manager: makeManager('https://gev.example/#v=2'),
+    services: {
+      shareLink: async (url) => {
+        shared.push(url);
+        return results.shift();
+      },
+    },
+  });
+  for (let i = 0; i < 4; i++) await click();
+  assert.equal(shared.length, 4);
+  assert.match(shared[0], SHARE_LINK);
+  // 'cancelled' (the user closed the sheet) shows nothing.
+  assert.deepEqual(toasts, ['Link shared', 'Link copied!', 'Copy failed']);
+});
+
+test('a failing host hook, or no camera position, reports a failure', async () => {
+  const failing = shell({
+    manager: makeManager('https://gev.example/#v=2'),
+    services: { shareLink: async () => Promise.reject(new Error('no sheet')) },
+  });
+  await failing.click();
+  assert.deepEqual(failing.toasts, ['Copy failed']);
+
+  let called = false;
+  const unpositioned = shell({
+    manager: makeManager('https://gev.example/', { positioned: false }),
+    services: {
+      shareLink: async () => {
+        called = true;
+        return 'shared';
+      },
+    },
+  });
+  await unpositioned.click();
+  assert.equal(called, false);
+  assert.deepEqual(unpositioned.toasts, ['Copy failed']);
+});
+
+test('a host hook that answers without a promise, or throws, still gets a toast', async () => {
+  for (const [shareLink, toast] of [
+    [() => 'shared', 'Link shared'],
+    [
+      () => {
+        throw new Error('no sheet');
+      },
+      'Copy failed',
+    ],
+  ]) {
+    const { toasts, click } = shell({
+      manager: makeManager('https://gev.example/#v=2'),
+      services: { shareLink },
+    });
+    await click();
+    assert.deepEqual(toasts, [toast]);
+  }
+});
diff --git a/src/ui/shareFollow.js b/src/ui/shareFollow.js
new file mode 100644
index 000000000..ba5851da6
--- /dev/null
+++ b/src/ui/shareFollow.js
@@ -0,0 +1,190 @@
+import * as Cesium from 'cesium';
+import { trackedDisplayPositionForCamera } from '../data/trackedCamera.js';
+import {
+  SHARE_VIEW_ENTITY_KINDS,
+  followOffsetFromEnu,
+  followOffsetToEnu,
+} from '../share/follow.js';
+
+/**
+ * The bridge between the camera following an entity and a share link's thing
+ * view: what the camera follows now, in the share format's terms, and the
+ * stored follow offset applied to an entity the camera has started to follow.
+ */
+
+const KIND_BY_LAYER = new Map(
+  SHARE_VIEW_ENTITY_KINDS.map((entry) => [entry.layerId, entry.kind]),
+);
+const MAX_FRAMES = 120;
+
+/** `position`'s local east/north/up offset from `origin`, in metres. */
+function enuOffset(origin, position) {
+  const frame = Cesium.Transforms.eastNorthUpToFixedFrame(origin);
+  const local = Cesium.Matrix4.multiplyByPoint(
+    Cesium.Matrix4.inverseTransformation(frame, new Cesium.Matrix4()),
+    position,
+    new Cesium.Cartesian3(),
+  );
+  return { east: local.x, north: local.y, up: local.z };
+}
+
+/**
+ * The entity the camera follows as `{ kind, id, offset, lastKnown }`, with
+ * the camera's offset from it and its displayed position as of `nowMs`; null
+ * when the camera follows nothing a share link can name. A selected vessel is
+ * not followed (the camera stays where the user puts it), so a link made then
+ * keeps its own camera.
+ */
+export function readShareFollowSubject({ viewer, nowMs = Date.now() }) {
+  const cameraPosition = viewer?.camera?.positionWC;
+  if (!cameraPosition) return null;
+  const tracked = viewer.trackedEntity;
+  const trackedId = String(tracked?.gevTrackedId || '');
+  const separator = trackedId.indexOf(':');
+  if (separator <= 0) return null;
+  const kind = KIND_BY_LAYER.get(trackedId.slice(0, separator));
+  const id = trackedId.slice(separator + 1);
+  const target = kind
+    ? trackedDisplayPositionForCamera(
+        tracked,
+        viewer.clock.currentTime,
+        new Cesium.Cartesian3(),
+      )
+    : null;
+  if (!kind || !id || !target) return null;
+  const offset = followOffsetFromEnu(enuOffset(target, cameraPosition));
+  const fix = Cesium.Cartographic.fromCartesian(target);
+  if (!offset || !fix) return null;
+  return {
+    kind,
+    id,
+    offset,
+    lastKnown: {
+      lat: Cesium.Math.toDegrees(fix.latitude),
+      lon: Cesium.Math.toDegrees(fix.longitude),
+      alt: fix.height,
+      observedAtMs: nowMs,
+    },
+  };
+}
+
+/** Largest turn, in radians, the camera makes around the entity per frame. */
+const MAX_TURN_PER_FRAME = Math.PI / 3;
+
+/**
+ * Put the camera at a shared follow offset from `entity` once following it
+ * has framed the camera. Cesium keeps the offset afterwards, as it keeps one
+ * the user orbits to. The camera swings round the entity at most 60° a frame:
+ * the follow's own guard treats a jump to the far side as the camera crossing
+ * through the entity and puts it back. Returns a disposer.
+ */
+export function applyShareFollowOffset(viewer, entity, offset) {
+  if (!viewer?.scene?.preUpdate || !entity || !(offset?.range > 0))
+    return () => {};
+  const local = followOffsetToEnu(offset);
+  let frames = 0;
+  let remove = null;
+  const stop = () => {
+    remove?.();
+    remove = null;
+  };
+  remove = viewer.scene.preUpdate.addEventListener(() => {
+    if (viewer.isDestroyed?.() || viewer.trackedEntity !== entity) {
+      stop();
+      return;
+    }
+    frames += 1;
+    const camera = viewer.camera;
+    // Let the follow frame the camera first (its first frame), then move it.
+    const framed =
+      frames > 1 &&
+      !Cesium.Matrix4.equals(camera.transform, Cesium.Matrix4.IDENTITY);
+    const target = framed
+      ? trackedDisplayPositionForCamera(
+          entity,
+          viewer.clock.currentTime,
+          new Cesium.Cartesian3(),
+        )
+      : null;
+    if (!target) {
+      if (frames >= MAX_FRAMES) stop();
+      return;
+    }
+    // The offset is east/north/up at the entity; the follow's own frame may
+    // differ, so place the camera in world space and re-express it there.
+    const world = Cesium.Matrix4.multiplyByPoint(
+      Cesium.Transforms.eastNorthUpToFixedFrame(target),
+      new Cesium.Cartesian3(local.east, local.north, local.up),
+      new Cesium.Cartesian3(),
+    );
+    const goal = Cesium.Matrix4.multiplyByPoint(
+      Cesium.Matrix4.inverseTransformation(
+        camera.transform,
+        new Cesium.Matrix4(),
+      ),
+      world,
+      new Cesium.Cartesian3(),
+    );
+    const from = Cesium.Cartesian3.clone(
+      camera.position,
+      new Cesium.Cartesian3(),
+    );
+    const angle =
+      Cesium.Cartesian3.magnitude(from) > 0
+        ? Cesium.Cartesian3.angleBetween(from, goal)
+        : 0;
+    const done = !(angle > MAX_TURN_PER_FRAME);
+    const next = done ? goal : turnToward(from, goal, MAX_TURN_PER_FRAME);
+    camera.lookAtTransform(camera.transform, next);
+    viewer.scene.requestRender?.();
+    if (done) stop();
+  });
+  return stop;
+}
+
+/**
+ * `from` turned `step` radians toward `to`, with its length moved the same
+ * fraction of the way: one frame of the swing round the entity.
+ */
+function turnToward(from, to, step) {
+  const angle = Cesium.Cartesian3.angleBetween(from, to);
+  const unitFrom = Cesium.Cartesian3.normalize(from, new Cesium.Cartesian3());
+  // The direction perpendicular to `from` in the plane toward `to` (or any
+  // perpendicular when they are opposite).
+  let toward = Cesium.Cartesian3.subtract(
+    Cesium.Cartesian3.normalize(to, new Cesium.Cartesian3()),
+    Cesium.Cartesian3.multiplyByScalar(
+      unitFrom,
+      Math.cos(angle),
+      new Cesium.Cartesian3(),
+    ),
+    new Cesium.Cartesian3(),
+  );
+  if (Cesium.Cartesian3.magnitude(toward) < 1e-9)
+    toward = Cesium.Cartesian3.cross(
+      unitFrom,
+      Math.abs(unitFrom.z) < 0.9
+        ? Cesium.Cartesian3.UNIT_Z
+        : Cesium.Cartesian3.UNIT_X,
+      new Cesium.Cartesian3(),
+    );
+  Cesium.Cartesian3.normalize(toward, toward);
+  const length =
+    Cesium.Cartesian3.magnitude(from) +
+    (Cesium.Cartesian3.magnitude(to) - Cesium.Cartesian3.magnitude(from)) *
+      (step / angle);
+  const direction = Cesium.Cartesian3.add(
+    Cesium.Cartesian3.multiplyByScalar(
+      unitFrom,
+      Math.cos(step),
+      new Cesium.Cartesian3(),
+    ),
+    Cesium.Cartesian3.multiplyByScalar(
+      toward,
+      Math.sin(step),
+      new Cesium.Cartesian3(),
+    ),
+    new Cesium.Cartesian3(),
+  );
+  return Cesium.Cartesian3.multiplyByScalar(direction, length, direction);
+}
diff --git a/src/ui/shareLinks.test.mjs b/src/ui/shareLinks.test.mjs
new file mode 100644
index 000000000..d7b747d66
--- /dev/null
+++ b/src/ui/shareLinks.test.mjs
@@ -0,0 +1,554 @@
+// Short share links: `/share/<code>` opens through the start-up restore
+// pipeline, the address then follows the live view, and the share button
+// makes `/share/<code>` links (following an entity when the camera does).
+import { test } from 'node:test';
+import assert from 'node:assert/strict';
+import * as Cesium from 'cesium';
+import { ShareLinkManager } from '../sharelink.js';
+import { ShareRestoration, sharedFixNotice } from './shareRestoration.js';
+import {
+  applyShareFollowOffset,
+  readShareFollowSubject,
+} from './shareFollow.js';
+import { createDefaultLayerState } from '../data/layerState.js';
+import { parseSharePath, shareLinkUrl } from '../share/shareLinkPath.js';
+import {
+  decodeShareView,
+  encodeShareView,
+  followCameraFor,
+  followOffsetToEnu,
+} from '../share/viewCodec.js';
+
+const NOW_MS = Date.now();
+const FIX = { lat: 37.6213, lon: -122.379, alt: 3200 };
+const OFFSET = { range: 5800, heading: 0, pitch: -35 };
+
+const PLACE_CODE = encodeShareView({
+  lat: 48.8584,
+  lon: 2.2945,
+  alt: 1200,
+  heading: 120,
+  pitch: -25,
+  style: 'noir',
+  panelState: { specs: [{ id: 'data-panel', collapsed: false }] },
+  sharedAtMs: NOW_MS - 60_000,
+});
+
+function aircraftCode() {
+  const layerState = createDefaultLayerState();
+  layerState.enabledLayerIds = ['flights'];
+  return encodeShareView({
+    view: {
+      kind: 'thing',
+      entity: { kind: 'aircraft', id: 'a1b2c3' },
+      offset: OFFSET,
+      lastKnown: { ...FIX, observedAtMs: NOW_MS - 120_000 },
+    },
+    layerState,
+    sharedAtMs: NOW_MS - 120_000,
+  });
+}
+
+/**
+ * A page at `href`. `history.replaceState` rewrites the address in place and
+ * is counted; `pushState` (a new history entry) is counted too.
+ */
+function installPage(t, href) {
+  const prior = { window: globalThis.window, history: globalThis.history };
+  const target = new EventTarget();
+  const location = new URL(href);
+  target.location = location;
+  globalThis.window = target;
+  const writes = { replaced: 0, pushed: 0 };
+  globalThis.history = {
+    replaceState(_state, _title, next) {
+      writes.replaced += 1;
+      location.href = new URL(next, location.href).href;
+    },
+    pushState() {
+      writes.pushed += 1;
+    },
+  };
+  t.after(() => Object.assign(globalThis, prior));
+  return { location, writes, target };
+}
+
+function installManualTimers(t) {
+  const prior = {
+    setTimeout: globalThis.setTimeout,
+    clearTimeout: globalThis.clearTimeout,
+  };
+  const timers = new Map();
+  let timerId = 0;
+  globalThis.setTimeout = (fn) => {
+    timers.set(++timerId, fn);
+    return timerId;
+  };
+  globalThis.clearTimeout = (id) => timers.delete(id);
+  t.after(() => Object.assign(globalThis, prior));
+  return {
+    timers,
+    runAll() {
+      for (const [id, fn] of [...timers]) {
+        timers.delete(id);
+        fn();
+      }
+    },
+  };
+}
+
+/** A viewer whose camera flights land at once. */
+function fakeViewer() {
+  const flights = [];
+  return {
+    flights,
+    canvas: new EventTarget(),
+    camera: {
+      changed: { addEventListener: () => () => {} },
+      positionCartographic: { latitude: 0, longitude: 0, height: 1000 },
+      heading: 0,
+      pitch: -Math.PI / 2,
+      roll: 0,
+      flyTo(options) {
+        flights.push(options);
+        options.complete?.();
+      },
+      setView() {},
+    },
+  };
+}
+
+const flush = () => new Promise((resolve) => setImmediate(resolve));
+
+/** A ShareRestoration over a real ShareLinkManager, as the shell wires them. */
+function openPage(t, href, { managerOptions = {}, tracking = null } = {}) {
+  const page = installPage(t, href);
+  const clock = installManualTimers(t);
+  const viewer = fakeViewer();
+  const restores = [];
+  const manager = new ShareLinkManager(viewer, {
+    onRestore: async (state) => restores.push(state),
+    isNavigationCurrent: () => true,
+    ...managerOptions,
+  });
+  const notices = [];
+  let generation = 0;
+  const owner = new ShareRestoration({
+    viewer,
+    navigation: {
+      _beginDeferredNavigation: () => ++generation,
+      _reassertNavigationHandoff: () => true,
+      _stampNavigation() {},
+    },
+    syncShareState() {},
+    syncModels3d() {},
+    showStatus() {},
+    feedback: {},
+    updateFeedback() {},
+    applyFollowOffset: (entity, offset) =>
+      applyShareFollowOffset(viewer, entity, offset),
+  });
+  // Notices are checked by message; their start-up-cover timing is not.
+  owner._presentAfterStartupCover = (message) => notices.push(message);
+  owner.attachLinks(manager);
+  owner._layerStateCoordinator = {
+    applyShareLayerState: () => Promise.resolve([]),
+    getDurableState: () => null,
+    cancelPendingShareTracking: () => false,
+    restoreShareTrackingSelection: async () => tracking?.(owner) ?? null,
+    destroy() {},
+  };
+  owner.start();
+  t.after(() => owner.destroy());
+  return { ...page, ...clock, viewer, manager, owner, restores, notices };
+}
+
+/** Run the delayed start-up restore and let it settle. */
+async function restore(page) {
+  page.runAll();
+  const result = await page.owner.initialRestorePromise;
+  await flush();
+  return result;
+}
+
+test('a /share/<code> address opens its place view through the start-up restore', async (t) => {
+  const page = openPage(t, `http://localhost/share/${PLACE_CODE}`);
+  assert.equal(page.timers.size, 1, 'the restore waits for its delayed flight');
+  assert.equal(page.manager._initialRestorePending, true);
+  const result = await restore(page);
+  assert.equal(result.status, 'settled');
+  assert.equal(result.share.camera, 'applied');
+  assert.equal(page.restores[0].style, 'noir');
+  assert.deepEqual(page.restores[0].panelState.specs, [
+    { id: 'data-panel', collapsed: false, pinned: null },
+  ]);
+  const destination = Cesium.Cartographic.fromCartesian(
+    page.viewer.flights[0].destination,
+  );
+  assert.ok(
+    Math.abs(Cesium.Math.toDegrees(destination.latitude) - 48.8584) < 1e-6,
+  );
+  assert.equal(page.manager._initialRestorePending, false);
+  assert.deepEqual(page.notices, []);
+});
+
+test('after a restore the address becomes the app root and the long hash, with no new history entry', async (t) => {
+  for (const [href, root] of [
+    [`http://localhost/share/${PLACE_CODE}`, 'http://localhost/'],
+    [
+      `http://localhost:4173/gev/share/${PLACE_CODE}`,
+      'http://localhost:4173/gev/',
+    ],
+  ]) {
+    const page = openPage(t, href);
+    await restore(page);
+    page.manager._updateHash();
+    assert.equal(`${page.location.origin}${page.location.pathname}`, root);
+    // The live view's long form, as written for any other page.
+    const params = new URLSearchParams(page.location.hash.slice(1));
+    assert.equal(params.get('v'), '2');
+    assert.ok(params.has('lat') && params.has('style'));
+    assert.equal(page.writes.pushed, 0);
+    assert.equal(page.writes.replaced, 1);
+    page.manager.destroy();
+  }
+});
+
+test('a host can pass the share code instead of the address', async (t) => {
+  const page = openPage(t, 'http://localhost/', {
+    managerOptions: { initialShareCode: PLACE_CODE },
+  });
+  await restore(page);
+  assert.equal(page.restores[0].style, 'noir');
+});
+
+test('a code that fails its check restores nothing and says so', async (t) => {
+  // One character changed: the check byte no longer matches.
+  const last = PLACE_CODE.at(-2) === 'A' ? 'B' : 'A';
+  const typo = `${PLACE_CODE.slice(0, -2)}${last}${PLACE_CODE.at(-1)}`;
+  const page = openPage(t, `http://localhost/share/${typo}`);
+  assert.equal(page.manager.rejectedShareCode, 'checksum');
+  assert.notEqual(page.owner._hasShareState, true);
+  assert.equal(page.timers.size, 0, 'nothing to restore');
+  assert.equal(
+    (await page.owner.initialRestorePromise).status,
+    'not-requested',
+  );
+  assert.deepEqual(page.notices, ["This share link can't be opened"]);
+  // The default start's first address write leaves the bad link behind.
+  page.manager._updateHash();
+  assert.equal(page.location.pathname, '/');
+});
+
+test('a thing view turns its layer on, follows by id and frames the shared offset', async (t) => {
+  let entity = null;
+  const page = openPage(t, `http://localhost/share/${aircraftCode()}`, {
+    tracking: (owner) => {
+      // What the coordinator does when the aircraft is in the feed.
+      owner.viewer.trackedEntity = entity;
+      owner._handleShareTrackingRestoreStatus({
+        layerId: 'flights',
+        targetId: 'a1b2c3',
+        classification: 'followed',
+      });
+      return { classification: 'followed' };
+    },
+  });
+  const target = Cesium.Cartesian3.fromDegrees(FIX.lon, FIX.lat, FIX.alt);
+  const listeners = [];
+  const looks = [];
+  Object.assign(page.viewer, {
+    clock: { currentTime: Cesium.JulianDate.now() },
+    scene: {
+      preUpdate: {
+        addEventListener(fn) {
+          listeners.push(fn);
+          return () => listeners.splice(listeners.indexOf(fn), 1);
+        },
+      },
+    },
+    isDestroyed: () => false,
+  });
+  Object.assign(page.viewer.camera, {
+    transform: Cesium.Transforms.eastNorthUpToFixedFrame(target),
+    // The app's own follow framing: south of the aircraft and above it.
+    position: new Cesium.Cartesian3(0, -4800, 3300),
+    lookAtTransform(transform, offset) {
+      looks.push(offset);
+      this.position = Cesium.Cartesian3.clone(offset);
+    },
+  });
+  entity = {
+    gevTrackedId: 'flights:a1b2c3',
+    gevDisplayPosition: () => target,
+  };
+
+  const parsed = page.manager._parseShareCode(aircraftCode());
+  assert.deepEqual(parsed.layerState.enabledLayerIds, ['flights']);
+  assert.equal(
+    parsed.layerState.options.flights.selectedFlightsTrackingId,
+    'a1b2c3',
+  );
+  await restore(page);
+  // The opening flight goes where following the fix puts the camera.
+  const camera = followCameraFor(FIX, OFFSET);
+  const destination = Cesium.Cartographic.fromCartesian(
+    page.viewer.flights[0].destination,
+  );
+  assert.ok(
+    Math.abs(Cesium.Math.toDegrees(destination.latitude) - camera.lat) < 1e-3,
+  );
+  assert.ok(
+    Math.abs(Cesium.Math.toDegrees(destination.longitude) - camera.lon) < 1e-3,
+  );
+  // Once followed, the camera takes the shared offset after the follow's
+  // own first frame.
+  assert.equal(listeners.length, 1);
+  listeners[0]();
+  assert.equal(looks.length, 0);
+  listeners[0]?.();
+  assert.equal(looks.length, 1);
+  const expected = followOffsetToEnu(OFFSET);
+  assert.ok(Math.abs(looks[0].x - expected.east) < 1);
+  assert.ok(Math.abs(looks[0].y - expected.north) < 1);
+  assert.ok(Math.abs(looks[0].z - expected.up) < 1);
+  assert.equal(listeners.length, 0, 'the offset is applied once');
+  assert.deepEqual(page.notices, []);
+});
+
+test('a thing that is not reporting leaves the view at its last-known fix, with a notice', async (t) => {
+  const page = openPage(t, `http://localhost/share/${aircraftCode()}`, {
+    tracking: (owner) => {
+      // The coordinator's verdict once the follow window has passed.
+      const result = {
+        layerId: 'flights',
+        targetId: 'a1b2c3',
+        label: 'flight',
+        classification: 'expired',
+      };
+      owner._handleShareTrackingRestoreStatus(result);
+      return result;
+    },
+  });
+  await restore(page);
+  await flush();
+  assert.equal(page.notices.length, 1);
+  assert.match(
+    page.notices[0],
+    /^A1B2C3 isn't reporting now — showing where it was at .+/,
+  );
+  // A long link names no fix and keeps the existing notice.
+  page.owner._initialShareState = { shareView: null };
+  page.owner._handleShareTrackingRestoreStatus({
+    layerId: 'flights',
+    targetId: 'a1b2c3',
+    label: 'flight',
+    classification: 'expired',
+  });
+  assert.equal(page.notices[1], 'Shared flight follow expired');
+});
+
+test('the not-reporting notice names the id and the time of the fix', () => {
+  const at = new Date(2026, 9, 26, 14, 5).getTime();
+  assert.match(
+    sharedFixNotice({ kind: 'aircraft', id: 'a1b2c3' }, at, at + 60_000),
+    /^A1B2C3 isn't reporting now — showing where it was at .*05/,
+  );
+  assert.equal(
+    sharedFixNotice({ kind: 'vessel', id: '366999712' }, null),
+    "366999712 isn't reporting now — showing where it was last seen",
+  );
+});
+
+test('a shared vessel is selected once the vessel feed has it', async (t) => {
+  t.mock.timers.enable({ apis: ['Date'], now: NOW_MS });
+  const page = openPage(t, 'http://localhost/');
+  const selected = [];
+  let present = false;
+  page.owner._dataManager = {
+    layers: new Map([
+      [
+        'ais-live-vessels',
+        {
+          module: {
+            hasContact: (id) => present && id === '366999712',
+            selectById: (id) => selected.push(id) > 0,
+          },
+        },
+      ],
+    ]),
+  };
+  const view = {
+    kind: 'thing',
+    entity: { kind: 'vessel', id: '366999712' },
+    lastKnown: { lat: 1, lon: 2, alt: 0, observedAtMs: NOW_MS - 30_000 },
+  };
+  const found = page.owner._restoreSharedVessel(view, () => true);
+  await flush();
+  present = true;
+  page.runAll();
+  assert.equal(await found, true);
+  assert.deepEqual(selected, ['366999712']);
+
+  present = false;
+  const missing = page.owner._restoreSharedVessel(view, () => true);
+  for (let i = 0; i < 61; i += 1) {
+    await flush();
+    t.mock.timers.tick(2_000);
+    page.runAll();
+  }
+  assert.equal(await missing, false);
+  assert.match(page.notices.at(-1), /^366999712 isn't reporting now/);
+});
+
+test('the share button links to /share/<code>, following the followed entity', (t) => {
+  installPage(t, 'https://gev.example/?lang=ru#v=2&lat=1&lon=2');
+  const manager = new ShareLinkManager(fakeViewer());
+  // A fresh session's look, as the app reports it at start-up.
+  manager.onToggleChange(false, true, {
+    hudVisible: true,
+    detectionMode: 'DENSE',
+    detectionDensity: 75,
+  });
+  // No entity: a place view at the live camera.
+  const place = manager.buildLink({ nowMs: NOW_MS });
+  assert.match(place, /^https:\/\/gev\.example\/share\/[A-Za-z0-9_-]+$/);
+  assert.equal(
+    decodeShareView(parseSharePath(new URL(place).pathname).code).state.view
+      .kind,
+    'place',
+  );
+
+  manager.setFollowSubjectProvider(() => ({
+    kind: 'aircraft',
+    id: 'a1b2c3',
+    offset: OFFSET,
+    lastKnown: { ...FIX, observedAtMs: NOW_MS },
+  }));
+  const href = manager.buildLink({ nowMs: NOW_MS });
+  const code = parseSharePath(new URL(href).pathname).code;
+  const { state } = decodeShareView(code, { nowMs: NOW_MS });
+  assert.deepEqual(state.view, {
+    kind: 'thing',
+    entity: { kind: 'aircraft', id: 'a1b2c3' },
+    offset: OFFSET,
+    lastKnown: { ...FIX, observedAtMs: Math.floor(NOW_MS / 1000) * 1000 },
+  });
+  // The followed aircraft's layer is implied; the camera is derived.
+  assert.ok(code.length <= 45, `${code.length} characters`);
+  assert.equal(href, shareLinkUrl(code, 'https://gev.example/'));
+  manager.destroy();
+});
+
+test('the followed entity is read in the share format, and its offset round-trips', () => {
+  const target = Cesium.Cartesian3.fromDegrees(FIX.lon, FIX.lat, FIX.alt);
+  const offset = { range: 2400, heading: 30, pitch: -20 };
+  const local = followOffsetToEnu(offset);
+  const cameraPosition = Cesium.Matrix4.multiplyByPoint(
+    Cesium.Transforms.eastNorthUpToFixedFrame(target),
+    new Cesium.Cartesian3(local.east, local.north, local.up),
+    new Cesium.Cartesian3(),
+  );
+  const viewer = {
+    camera: { positionWC: cameraPosition },
+    clock: { currentTime: Cesium.JulianDate.now() },
+    trackedEntity: {
+      gevTrackedId: 'military:ae1234',
+      gevDisplayPosition: () => target,
+    },
+  };
+  const subject = readShareFollowSubject({ viewer, nowMs: NOW_MS });
+  assert.equal(subject.kind, 'military_aircraft');
+  assert.equal(subject.id, 'ae1234');
+  assert.deepEqual(subject.offset, offset);
+  assert.ok(Math.abs(subject.lastKnown.lat - FIX.lat) < 1e-9);
+  assert.ok(Math.abs(subject.lastKnown.alt - FIX.alt) < 1e-3);
+  // A followed entity the share format has no kind for is not a thing view.
+  viewer.trackedEntity.gevTrackedId = 'local-adsb:abc';
+  assert.equal(readShareFollowSubject({ viewer }), null);
+  // Nor is a camera that follows nothing (a selected vessel is not followed).
+  viewer.trackedEntity = undefined;
+  assert.equal(readShareFollowSubject({ viewer }), null);
+});
+
+test('a shared offset on the far side swings round, never jumping through the entity', () => {
+  const target = Cesium.Cartesian3.fromDegrees(FIX.lon, FIX.lat, FIX.alt);
+  const listeners = [];
+  const looks = [];
+  const entity = { gevDisplayPosition: () => target };
+  const viewer = {
+    clock: { currentTime: Cesium.JulianDate.now() },
+    scene: {
+      preUpdate: {
+        addEventListener(fn) {
+          listeners.push(fn);
+          return () => listeners.splice(listeners.indexOf(fn), 1);
+        },
+      },
+    },
+    trackedEntity: entity,
+    camera: {
+      transform: Cesium.Transforms.eastNorthUpToFixedFrame(target),
+      position: new Cesium.Cartesian3(0, -4800, 3300),
+      lookAtTransform(transform, offset) {
+        looks.push(Cesium.Cartesian3.clone(offset));
+        this.position = Cesium.Cartesian3.clone(offset);
+      },
+    },
+  };
+  // Looking south at the nose: the opposite side of the app's framing.
+  const offset = { range: 5800, heading: 180, pitch: -35 };
+  applyShareFollowOffset(viewer, entity, offset);
+  let previous = viewer.camera.position;
+  for (let frame = 0; frame < 10 && listeners.length; frame += 1) {
+    listeners[0]();
+    const now = viewer.camera.position;
+    // The follow's guard treats a turn of 90° or more as a crossing.
+    assert.ok(Cesium.Cartesian3.angleBetween(previous, now) < Math.PI / 2);
+    previous = now;
+  }
+  assert.equal(listeners.length, 0, 'it arrives');
+  assert.ok(looks.length >= 2, `${looks.length} steps`);
+  const expected = followOffsetToEnu(offset);
+  const last = looks.at(-1);
+  assert.ok(Math.abs(last.x - expected.east) < 1);
+  assert.ok(Math.abs(last.y - expected.north) < 1);
+  assert.ok(Math.abs(last.z - expected.up) < 1);
+});
+
+test('applying a follow offset gives up when the follow ends', () => {
+  const listeners = [];
+  const viewer = {
+    scene: {
+      preUpdate: {
+        addEventListener(fn) {
+          listeners.push(fn);
+          return () => listeners.splice(listeners.indexOf(fn), 1);
+        },
+      },
+    },
+    trackedEntity: null,
+  };
+  applyShareFollowOffset(viewer, {}, OFFSET);
+  listeners[0]();
+  assert.equal(listeners.length, 0);
+});
+
+test('long links and hash navigation are unaffected by a share code start', async (t) => {
+  // A long link still opens from the hash.
+  const long = openPage(t, 'http://localhost/#v=2&lat=10&lon=20&style=nvg');
+  await restore(long);
+  assert.equal(long.restores[0].style, 'surveillance');
+  assert.equal(long.restores[0].shareView, undefined);
+  long.manager._updateHash();
+  assert.equal(long.location.pathname, '/');
+
+  // After a /share start, navigating to a long link restores it (#1416).
+  const page = openPage(t, `http://localhost/share/${PLACE_CODE}`);
+  await restore(page);
+  page.location.hash = 'v=2&lat=1.0000&lon=2.0000&style=normal';
+  page.target.dispatchEvent(new Event('hashchange'));
+  await flush();
+  assert.equal(page.restores.length, 2);
+  assert.equal(page.restores[1].style, 'normal');
+});
diff --git a/src/ui/shareRestoration.js b/src/ui/shareRestoration.js
index 52c48c95b..12f09c18b 100644
--- a/src/ui/shareRestoration.js
+++ b/src/ui/shareRestoration.js
@@ -1,9 +1,18 @@
 import { LayerStateCoordinator } from '../data/layerStateCoordinator.js';
 import { stampInitialShareGesture } from '../navigationPolicy.js';
 import { canPresentDeferredStatusNotice } from '../loadingFeedback.js';
-import { t, msg } from '../i18n/index.js';
+import { t, msg, formatDate } from '../i18n/index.js';
+import { SHARE_VIEW_ENTITY_KINDS } from '../share/follow.js';
 import { UiLifetime } from './uiLifetime.js';
 
+/** How long a shared vessel may take to appear in the vessel feed. */
+export const SHARED_VESSEL_WAIT_MS = 120_000;
+const SHARED_VESSEL_POLL_MS = 2_000;
+const DAY_MS = 86_400_000;
+const ENTITY_BY_KIND = new Map(
+  SHARE_VIEW_ENTITY_KINDS.map((entry) => [entry.kind, entry]),
+);
+
 // One ready-made sentence per restore policy (SHARE_TRACKING_RESTORE_POLICIES
 // label) and outcome: a label dropped into a template cannot take the case or
 // article the sentence needs in every language. The generic template stays
@@ -51,6 +60,36 @@ export function shareTrackingRestoreNotice(result) {
       : t('Shared {subject} is unavailable', { subject });
 }
 
+/**
+ * The notice for a shared entity that is not reporting: the view shows where
+ * it was when the link was made.
+ * @param {{kind: string, id: string}} entity
+ * @param {number|null} observedAtMs
+ * @param {number} [nowMs]
+ * @returns {string}
+ */
+export function sharedFixNotice(entity, observedAtMs, nowMs = Date.now()) {
+  // ICAO addresses read as they are written on the aircraft: upper case.
+  const id =
+    ENTITY_BY_KIND.get(entity.kind)?.idForm === 'hex24'
+      ? String(entity.id).toUpperCase()
+      : String(entity.id);
+  if (!Number.isFinite(observedAtMs))
+    return t("{id} isn't reporting now — showing where it was last seen", {
+      id,
+    });
+  const time = formatDate(
+    observedAtMs,
+    nowMs - observedAtMs < DAY_MS
+      ? { hour: '2-digit', minute: '2-digit' }
+      : { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' },
+  );
+  return t("{id} isn't reporting now — showing where it was at {time}", {
+    id,
+    time,
+  });
+}
+
 /** Own initial share restoration, durable layer state and restoration notices. */
 export class ShareRestoration {
   constructor({
@@ -61,6 +100,7 @@ export class ShareRestoration {
     showStatus,
     feedback,
     updateFeedback,
+    applyFollowOffset = null,
   }) {
     Object.assign(this, {
       viewer,
@@ -70,6 +110,9 @@ export class ShareRestoration {
       showStatus,
       feedback,
       updateFeedback,
+      // (entity, offset) => disposer: frame a followed entity from a shared
+      // follow offset (shareFollow.js).
+      applyFollowOffset,
     });
     this._lifetime = new UiLifetime();
     this._disposed = false;
@@ -80,6 +123,14 @@ export class ShareRestoration {
     this._initialShareRestoreTimeout = null;
     this._layerStateCoordinator = null;
     this._layerStateRestorePromise = null;
+    // Bumped by every share opened after start-up; an older restore that
+    // settles later must neither apply follow-up work nor release URL writes.
+    this._shareRestoreGeneration = 0;
+    this._navigatedShareRestoreActive = false;
+    this._stopFollowOffset = null;
+    // Bumped to abandon the wait for a shared vessel.
+    this._sharedVesselGeneration = 0;
+    this._sharedVesselPending = false;
   }
   attachLinks(shareLinkManager) {
     this.shareLinkManager = shareLinkManager;
@@ -108,54 +159,35 @@ export class ShareRestoration {
         const applyCamera =
           Number.isInteger(generation) &&
           this.navigation._reassertNavigationHandoff(generation);
-        void (async () => {
-          try {
-            const share = await this.shareLinkManager.applyState(savedState, {
-              applyCamera,
-              navigationToken: generation,
-            });
-            const layers = await (this._layerStateRestorePromise ||
-              Promise.resolve([]));
-            const tracking =
-              share.camera === 'applied'
-                ? await this._layerStateCoordinator?.restoreShareTrackingSelection?.()
-                : {
-                    status: 'superseded',
-                    cleared:
-                      this._layerStateCoordinator?.cancelPendingShareTracking?.(
-                        'shared-camera-superseded',
-                        { clearSelection: true },
-                      ) === true,
-                  };
-            this.shareLinkManager.completeInitialRestore();
-            this._settleInitialShareRestore({
-              status: 'settled',
-              share,
-              layers,
-              tracking,
-            });
-          } catch (error) {
-            this.shareLinkManager.completeInitialRestore();
-            this._settleInitialShareRestore({
-              status: 'failed',
-              error: String(error?.message || error),
-              share: null,
-              layers: [],
-            });
-          }
-        })();
+        void this._runShareRestore(savedState, {
+          applyCamera,
+          navigationToken: generation,
+          layersPromise: this._layerStateRestorePromise,
+          settle: (result) => this._settleInitialShareRestore(result),
+        });
       }, 1500);
     } else {
       this.syncShareState();
+      if (this.shareLinkManager?.rejectedShareCode)
+        this._presentAfterStartupCover(
+          t("This share link can't be opened"),
+          ++this._shareTrackingNoticeGeneration,
+        );
     }
     // A recipient can orbit before or during the delayed share flight. That
     // gesture keeps ordinary layer state but revokes the passive base camera
     // and selected-subject Follow so delayed work cannot seize navigation.
     this._initialShareGestureHandler = () => {
+      // The recipient taking the camera also ends the wait for a vessel.
+      if (this._sharedVesselPending) {
+        this._sharedVesselGeneration += 1;
+        this._sharedVesselPending = false;
+      }
       if (
         this._disposed ||
         !this._hasShareState ||
-        !this._resolveInitialShareRestore
+        (!this._resolveInitialShareRestore &&
+          !this._navigatedShareRestoreActive)
       )
         return;
       stampInitialShareGesture((options) =>
@@ -176,6 +208,126 @@ export class ShareRestoration {
         passive: true,
       },
     );
+    // A different share opened in this tab later (pasted address, link,
+    // Back/Forward) runs the same restore as start-up.
+    this.shareLinkManager?.watchNavigation?.((state) =>
+      this._restoreNavigatedShare(state),
+    );
+  }
+
+  /**
+   * Apply one incoming share: camera, visual, map and panels, then layers and
+   * any shared Follow. Only the newest share may finish: a superseded run
+   * stops before follow-up work and leaves URL writes suppressed for the
+   * newer one.
+   */
+  async _runShareRestore(
+    state,
+    { applyCamera, navigationToken, layersPromise, settle },
+  ) {
+    const generation = this._shareRestoreGeneration;
+    const current = () =>
+      !this._disposed && generation === this._shareRestoreGeneration;
+    try {
+      const share = await this.shareLinkManager.applyState(state, {
+        applyCamera,
+        navigationToken,
+      });
+      const layers = await (layersPromise || Promise.resolve([]));
+      if (!current()) return;
+      const tracking =
+        share.camera === 'applied'
+          ? await this._layerStateCoordinator?.restoreShareTrackingSelection?.()
+          : {
+              status: 'superseded',
+              cleared:
+                this._layerStateCoordinator?.cancelPendingShareTracking?.(
+                  'shared-camera-superseded',
+                  { clearSelection: true },
+                ) === true,
+            };
+      if (!current()) return;
+      this.shareLinkManager.completeInitialRestore(state.restoreToken);
+      // Selecting a vessel leaves the camera alone, so it does not depend on
+      // the shared flight having landed.
+      const vessel = this._sharedVessel(state);
+      if (vessel) void this._restoreSharedVessel(vessel, current);
+      settle({ status: 'settled', share, layers, tracking });
+    } catch (error) {
+      if (!current()) return;
+      this.shareLinkManager.completeInitialRestore(state.restoreToken);
+      settle({
+        status: 'failed',
+        error: String(error?.message || error),
+        share: null,
+        layers: [],
+      });
+    }
+  }
+
+  /** Restore a share opened in this tab after start-up, superseding any other. */
+  _restoreNavigatedShare(state) {
+    if (this._disposed || !state) return;
+    this._shareRestoreGeneration += 1;
+    const settle = (result) => {
+      this._navigatedShareRestoreActive = false;
+      window.dispatchEvent(
+        new CustomEvent('gev:share-navigation-restore-settled', {
+          detail: result,
+        }),
+      );
+    };
+    try {
+      return this._beginNavigatedShareRestore(state, settle);
+    } catch (error) {
+      // Never leave the address bar frozen on a restore that did not start.
+      this.shareLinkManager.completeInitialRestore(state.restoreToken);
+      settle({
+        status: 'failed',
+        error: String(error?.message || error),
+        share: null,
+        layers: [],
+      });
+    }
+  }
+
+  _beginNavigatedShareRestore(state, settle) {
+    // A start-up restore still waiting for its delayed flight never runs.
+    clearTimeout(this._initialShareRestoreTimeout);
+    this._initialShareRestoreTimeout = null;
+    this._settleInitialShareRestore({
+      status: 'superseded',
+      share: null,
+      layers: [],
+    });
+    this._initialShareState = state;
+    this._initialShareSelectionSuperseded = false;
+    this._hasShareState = true;
+    this._navigatedShareRestoreActive = true;
+    // A new deferred navigation generation retires any older share flight.
+    const navigationToken = this.navigation._beginDeferredNavigation(
+      'shared view',
+      { cancelPendingSelection: false },
+    );
+    // Releasing the previous Follow is part of the passive share restore and
+    // must not be saved as the recipient's own layer preference.
+    const applyCamera =
+      Number.isInteger(navigationToken) &&
+      this.navigation._reassertNavigationHandoff(navigationToken, {
+        trackingOrigin: 'programmatic',
+      });
+    const layersPromise = this._layerStateCoordinator
+      ? this._layerStateCoordinator.applyShareLayerState({
+          shareLayerState: state.layerState || null,
+          shareCreatedAtMs: state.sharedAtMs ?? null,
+        })
+      : null;
+    return this._runShareRestore(state, {
+      applyCamera,
+      navigationToken,
+      layersPromise,
+      settle,
+    });
   }
   connect(dataManager) {
     this._dataManager = dataManager;
@@ -210,7 +362,79 @@ export class ShareRestoration {
       });
     }
   }
+  /** The shared vessel a share's thing view selects, if it names one. */
+  _sharedVessel(state) {
+    const view = state?.shareView;
+    return view?.kind === 'thing' && view.entity.kind === 'vessel'
+      ? view
+      : null;
+  }
+
+  /**
+   * Select a shared vessel once the vessel feed has it. Vessels are selected,
+   * not followed: the camera is already at the shared view. If the vessel does
+   * not appear in time, the view stays where it was when the link was made.
+   */
+  async _restoreSharedVessel(view, current) {
+    const generation = ++this._sharedVesselGeneration;
+    const live = () => current() && generation === this._sharedVesselGeneration;
+    const deadline = Date.now() + SHARED_VESSEL_WAIT_MS;
+    const { id } = view.entity;
+    const { layerId } = ENTITY_BY_KIND.get(view.entity.kind);
+    this._sharedVesselPending = true;
+    try {
+      while (live()) {
+        const vessels = this._dataManager?.layers?.get?.(layerId)?.module;
+        if (vessels?.hasContact?.(id) && vessels.selectById(id)) return true;
+        if (Date.now() >= deadline) break;
+        await new Promise((resolve) =>
+          this._lifetime.timeout(resolve, SHARED_VESSEL_POLL_MS),
+        );
+      }
+    } finally {
+      if (generation === this._sharedVesselGeneration)
+        this._sharedVesselPending = false;
+    }
+    if (!live()) return false;
+    this._presentAfterStartupCover(
+      view.lastKnown
+        ? sharedFixNotice(view.entity, view.lastKnown.observedAtMs)
+        : t('Shared vessel is unavailable'),
+      ++this._shareTrackingNoticeGeneration,
+    );
+    return false;
+  }
+
+  /** The current share's thing view when `result` is about its entity. */
+  _sharedThingFor(result) {
+    const view = this._initialShareState?.shareView;
+    if (view?.kind !== 'thing') return null;
+    const entry = ENTITY_BY_KIND.get(view.entity.kind);
+    return entry?.tracking === result?.layerId &&
+      String(view.entity.id) === String(result?.targetId)
+      ? view
+      : null;
+  }
+
+  /** Frame a shared entity the camera now follows from the shared offset. */
+  _applySharedFollowOffset(result) {
+    const view = this._sharedThingFor(result);
+    const entity = this.viewer?.trackedEntity;
+    // Only a link made while following carries a real offset (with the fix);
+    // a long link's follow keeps the app's own framing.
+    if (
+      !view?.lastKnown ||
+      String(entity?.gevTrackedId || '') !==
+        `${result.layerId}:${result.targetId}`
+    )
+      return;
+    this._stopFollowOffset?.();
+    this._stopFollowOffset = this.applyFollowOffset?.(entity, view.offset);
+  }
+
   cancelSelection() {
+    // An explicit navigation also ends the wait for a shared vessel.
+    this._sharedVesselGeneration += 1;
     if (
       this._hasShareState &&
       this._resolveInitialShareRestore &&
@@ -256,17 +480,39 @@ export class ShareRestoration {
         this.updateFeedback();
       }
     }
-    if (
-      result.classification === 'followed' ||
-      result.classification === 'cancelled'
-    )
+    if (result.classification === 'followed') {
+      this._applySharedFollowOffset(result);
       return;
+    }
+    if (result.classification === 'cancelled') return;
     // A stale terminal result must never replace a newer target's acquisition.
     if (this._shareTrackingAcquiringKey) return;
     const noticeGeneration = ownsAcquiringNotice
       ? this._shareTrackingNoticeGeneration
       : ++this._shareTrackingNoticeGeneration;
-    const message = shareTrackingRestoreNotice(result);
+    // A share link that knows where the entity was says so; the view is
+    // already there.
+    const fix = this._sharedThingFor(result)?.lastKnown;
+    const message = fix
+      ? sharedFixNotice(
+          this._initialShareState.shareView.entity,
+          fix.observedAtMs,
+        )
+      : shareTrackingRestoreNotice(result);
+    if (this._resolveInitialShareRestore) {
+      void this.initialRestorePromise.then(() =>
+        this._presentAfterStartupCover(message, noticeGeneration),
+      );
+      return;
+    }
+    this._presentAfterStartupCover(message, noticeGeneration);
+  }
+
+  /**
+   * Show a status notice once the start-up cover is gone, unless a newer
+   * notice (generation) has taken its place.
+   */
+  _presentAfterStartupCover(message, noticeGeneration) {
     const showAfterStartupCover = () => {
       this._lifetime.frame(() => {
         if (
@@ -308,10 +554,6 @@ export class ShareRestoration {
         fallbackTimer = this._lifetime.timeout(showOnce, 1000);
       });
     };
-    if (this._resolveInitialShareRestore) {
-      void this.initialRestorePromise.then(showAfterStartupCover);
-      return;
-    }
     showAfterStartupCover();
   }
   _settleInitialShareRestore(result) {
@@ -328,6 +570,9 @@ export class ShareRestoration {
     this._disposed = true;
     this._shareTrackingNoticeGeneration += 1;
     this._shareTrackingAcquiringKey = null;
+    this._sharedVesselGeneration += 1;
+    this._stopFollowOffset?.();
+    this._stopFollowOffset = null;
     this._layerStateCoordinator?.destroy();
     this._layerStateCoordinator = null;
     this._layerStateRestorePromise = null;
diff --git a/src/ui/shellElements.js b/src/ui/shellElements.js
index 9134b9045..df7fcbc16 100644
--- a/src/ui/shellElements.js
+++ b/src/ui/shellElements.js
@@ -180,6 +180,7 @@ export function readShellElements(document = globalThis.document) {
     _cctvSyncProgress: document.getElementById('cctv-sync-progress'),
     _toast: document.getElementById('toast'),
     _locationSearch: document.getElementById('location-search'),
+    _locationSearchError: document.getElementById('location-search-error'),
     _searchToggle: document.getElementById('search-toggle'),
     _locationPills: document.getElementById('location-pills'),
     _poiRow: document.getElementById('poi-row'),
diff --git a/src/ui/shellFacade.js b/src/ui/shellFacade.js
index 2c1861b31..01962f8f9 100644
--- a/src/ui/shellFacade.js
+++ b/src/ui/shellFacade.js
@@ -550,7 +550,7 @@ export class ShellFacade {
   }
 
   /** Settle only the search generation that still owns the shared input UI. */
-  _settleLocationSearchUi(generation) {
+  _settleLocationSearchUi(generation, options) {
     return this._navigation._settleLocationSearchUi(...arguments);
   }
 
diff --git a/src/ui/streetLevelPresentation.js b/src/ui/streetLevelPresentation.js
index c491ed9bf..2366371f7 100644
--- a/src/ui/streetLevelPresentation.js
+++ b/src/ui/streetLevelPresentation.js
@@ -168,8 +168,9 @@ function presentViewer(state) {
   const { street } = state;
   const right = [];
   if (street.isPano) right.push('360°');
+  // 359.5° and above rounds to north; modulo keeps it from printing 360°.
   if (Number.isFinite(street.bearing))
-    right.push(`${Math.round(street.bearing)}°`);
+    right.push(`${Math.round(street.bearing) % 360}°`);
   if (street.capturedAt)
     right.push(formatDate(street.capturedAt, street.capturedAtPrecision));
   const left = [];
diff --git a/src/ui/streetLevelPresentation.test.mjs b/src/ui/streetLevelPresentation.test.mjs
index b81e203cb..b72e1a5d3 100644
--- a/src/ui/streetLevelPresentation.test.mjs
+++ b/src/ui/streetLevelPresentation.test.mjs
@@ -273,6 +273,14 @@ test('viewer caption reads "Image by" left, date right, and links to Mapillary',
   assert.equal(view.viewer.open, true);
 });
 
+test('a bearing that rounds to north reads 0°, not 360°', () => {
+  const caption = (bearing) =>
+    presentStreetLevelPanel(snapshot({ street: { open: true, bearing } }))
+      .viewer.captionRight;
+  assert.equal(caption(359.4), '359°');
+  assert.equal(caption(359.6), '0°');
+});
+
 test('an image without a creator name leaves the left caption empty', () => {
   const view = presentStreetLevelPanel(
     snapshot({
diff --git a/src/ui/styles/command-dock-trays.css b/src/ui/styles/command-dock-trays.css
index eef3c6001..547037de7 100644
--- a/src/ui/styles/command-dock-trays.css
+++ b/src/ui/styles/command-dock-trays.css
@@ -478,6 +478,12 @@ body:not(.ui-clean-view):not(.recording-mode):has(
   bottom: calc(2vh + 5.4rem);
 }
 
+:root[data-scope-mask='off']
+  #intel-hud[data-variant='minimal']
+  .hud-bottom-left {
+  bottom: calc(2vh + 6.5rem);
+}
+
 #intel-hud[data-variant='minimal'] .hud-bottom-bar {
   bottom: calc(2vh + 9rem);
 }
diff --git a/src/ui/styles/controls.css b/src/ui/styles/controls.css
index f11378bb9..59f275109 100644
--- a/src/ui/styles/controls.css
+++ b/src/ui/styles/controls.css
@@ -501,6 +501,27 @@ html:not([lang='en']) .panel-collapse-btn {
   color: var(--accent);
 }
 
+.pp-scope-toggle input {
+  width: 14px;
+  height: 14px;
+  margin: 0 0 0 auto;
+  accent-color: var(--accent);
+  cursor: pointer;
+}
+
+.pp-scope-toggle:has(input:checked) .pp-label {
+  color: var(--accent);
+}
+
+.pp-scope-toggle:has(input:focus-visible) {
+  outline: 1px solid var(--accent);
+  outline-offset: 2px;
+}
+
+#scope-slider-row:has(input:disabled) {
+  opacity: 0.45;
+}
+
 /* ── Bloom Slider (inline with toggle) ───────── */
 .pp-toggle-group {
   display: flex;
diff --git a/src/ui/styles/first-run.css b/src/ui/styles/first-run.css
index d91f24fbe..1693b27e5 100644
--- a/src/ui/styles/first-run.css
+++ b/src/ui/styles/first-run.css
@@ -209,6 +209,49 @@
   letter-spacing: 0.055rem;
 }
 
+.first-run-dismiss {
+  position: relative;
+  padding: 0 0 0 0.75rem;
+  border: 0;
+  background: none;
+  color: inherit;
+  font: inherit;
+  letter-spacing: inherit;
+  text-transform: inherit;
+  cursor: pointer;
+}
+
+/* A 44px touch target drawn outside the layout, so the footer row keeps the
+   height of its one line of text; a 44px button box would nearly treble it. */
+.first-run-dismiss::before {
+  content: '';
+  position: absolute;
+  top: 50%;
+  right: 0;
+  left: 0;
+  height: 44px;
+  transform: translateY(-50%);
+}
+
+.first-run-dismiss:hover,
+.first-run-dismiss:focus-visible {
+  color: rgba(54, 220, 255, 0.86);
+}
+
+.first-run-dismiss-touch {
+  display: none;
+}
+
+/* No hover and a coarse pointer: a phone or tablet, where ESC means nothing. */
+@media (hover: none) and (pointer: coarse) {
+  .first-run-dismiss-key {
+    display: none;
+  }
+  .first-run-dismiss-touch {
+    display: inline;
+  }
+}
+
 .first-run-suppress {
   display: flex;
   align-items: center;
@@ -270,8 +313,9 @@ body.scene-playback-mode #first-run-launcher {
   #first-run-launcher.visible {
     transform: translate(-50%, 0) scale(1);
   }
-  /* Five tiles have to clear the dock on a 375 x 812 phone, so the rows tighten
-     and the redundant "ESC to dismiss" hint (no ESC key on a phone) drops. */
+  /* Five tiles have to clear the dock on a 375 x 812 phone, so the rows
+     tighten. The dismiss button stays: it is the only way to close the card
+     without choosing a mission on a phone, which has no ESC key. */
   #first-run-launcher h2 {
     margin-top: 0.45rem;
   }
@@ -289,9 +333,6 @@ body.scene-playback-mode #first-run-launcher {
   .first-run-choices small {
     font-size: 0.62rem;
   }
-  .first-run-footer > span:last-child {
-    display: none;
-  }
 }
 
 /* Short viewports — landscape phones, small laptop windows. The chrome tightens
diff --git a/src/ui/styles/location.css b/src/ui/styles/location.css
index 281e4b08f..5c10f20b5 100644
--- a/src/ui/styles/location.css
+++ b/src/ui/styles/location.css
@@ -298,3 +298,20 @@
 #location-search.searching {
   opacity: 0.5;
 }
+
+.location-search-error {
+  /* Its own line under the search row, which clips overflow in the dock. */
+  margin: 6px 0 0;
+  padding: 6px 10px;
+  border: 1px solid rgba(255, 99, 99, 0.45);
+  border-radius: 6px;
+  background: rgba(30, 8, 10, 0.92);
+  color: #ffb3b3;
+  font-family: var(--font-sans);
+  font-size: 12px;
+  line-height: 1.35;
+}
+
+.location-search-error:empty {
+  display: none;
+}
diff --git a/src/ui/styles/overlays.css b/src/ui/styles/overlays.css
index 227d2d6d0..7f491439b 100644
--- a/src/ui/styles/overlays.css
+++ b/src/ui/styles/overlays.css
@@ -371,3 +371,134 @@
 #intel-hud[data-variant='minimal'] .hud-summary-wrap {
   max-width: 280px;
 }
+
+/* Scope OFF adds text-sized backing; Scope ON retains the original HUD. */
+.hud-readout {
+  display: contents;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is(
+    [data-variant='minimal'],
+    [data-variant='operator'],
+    [data-variant='tactical']
+  )
+  .hud-readout,
+:root[data-scope-mask='off']:not([data-ui-theme='cyber']) .scene-text-holdout {
+  background: rgba(0, 0, 0, 0.7);
+  box-shadow: none;
+  border-radius: 2px;
+  padding-block: 0;
+  padding-inline: 6px;
+  margin-block: 0;
+  margin-inline: -6px;
+  width: fit-content;
+  max-width: 100%;
+  box-sizing: content-box;
+  white-space: nowrap;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is(
+    [data-variant='minimal'],
+    [data-variant='operator'],
+    [data-variant='tactical']
+  )
+  .hud-readout {
+  display: block;
+  width: max-content;
+  min-width: 0;
+  box-sizing: content-box;
+  white-space: nowrap;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is(
+    [data-variant='minimal'],
+    [data-variant='operator'],
+    [data-variant='tactical']
+  )
+  :is(.hud-top-right, .hud-bottom-right)
+  .hud-readout,
+:root[data-scope-mask='off']:not([data-ui-theme='cyber'])
+  #style-indicator
+  .scene-text-holdout {
+  margin-inline-start: auto;
+}
+
+/* Preserve glyph opacity without dimming the vertical backplates. */
+:root[data-scope-mask='off']
+  #intel-hud:is([data-variant='operator'], [data-variant='tactical'])
+  .hud-edge {
+  opacity: 1;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is([data-variant='operator'], [data-variant='tactical'])
+  .hud-edge
+  .hud-readout
+  > * {
+  opacity: 0.5;
+}
+
+:root[data-scope-mask='off'] #intel-hud[data-variant='operator'] .hud-corner,
+:root[data-scope-mask='off']
+  #intel-hud:is([data-variant='minimal'], [data-variant='operator'])
+  :is(.hud-top-bar, .hud-bottom-bar) {
+  background: transparent;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is([data-variant='minimal'], [data-variant='operator'])
+  :is(.hud-top-bar, .hud-bottom-bar) {
+  width: fit-content;
+  max-width: calc(100vw - 120px);
+  gap: 24px;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud:is([data-variant='minimal'], [data-variant='operator'])
+  :is(.hud-top-bar, .hud-bottom-bar)
+  .hud-readout {
+  overflow: hidden;
+  white-space: nowrap;
+  text-overflow: ellipsis;
+}
+
+:root[data-scope-mask='off']:not([data-ui-theme='cyber'])
+  #title-bar
+  h1::before {
+  content: '';
+  position: absolute;
+  inset: -0.12em -6px;
+  z-index: -1;
+  border-radius: 2px;
+  background: rgba(0, 0, 0, 0.7);
+}
+
+:root[data-scope-mask='off']:not([data-ui-theme='cyber'])
+  :is(#title-bar .subtitle, #style-indicator .indicator-label) {
+  color: var(--text-secondary);
+}
+
+:root[data-scope-mask='off']:not([data-ui-theme='cyber']) #title-bar .subtitle {
+  margin-top: 8px;
+}
+
+:root[data-scope-mask='off']:not([data-ui-theme='cyber'])
+  #style-indicator
+  .indicator-value {
+  margin-top: 4px;
+}
+
+:root[data-scope-mask='off']
+  #intel-hud[data-variant='minimal']
+  .hud-readout:has(> :is(.hud-classification, .hud-system)) {
+  display: none;
+}
+
+:root[data-scope-mask='off']:not([data-ui-theme='cyber'])
+  #title-bar
+  .frame-rate-readout {
+  margin-top: 6px;
+}
diff --git a/src/ui/styles/scenes.css b/src/ui/styles/scenes.css
index b048c5bd2..29250a636 100644
--- a/src/ui/styles/scenes.css
+++ b/src/ui/styles/scenes.css
@@ -363,7 +363,8 @@ html:not([lang='en']) #scene-panel .scene-controls .scene-btn {
 #param-slider-panel.collapsed #param-sliders,
 #location-bar.collapsed .poi-row-container,
 #location-bar.collapsed .location-bar-divider,
-#location-bar.collapsed .location-city-row {
+#location-bar.collapsed .location-city-row,
+#location-bar.collapsed .location-search-error {
   display: none !important;
 }
 
diff --git a/src/ui/styles/voice-card.css b/src/ui/styles/voice-card.css
index ef3d77055..5afe57a26 100644
--- a/src/ui/styles/voice-card.css
+++ b/src/ui/styles/voice-card.css
@@ -387,3 +387,249 @@ body.recording-mode .gev-pointer-reticle {
     animation: none;
   }
 }
+
+/* Opt-in shared panel: header stays fixed while only the body scrolls. */
+#gev-voice-control .gev-voice-panel {
+  position: absolute;
+  bottom: calc(100% + 0.7rem);
+  left: 50%;
+  z-index: 10;
+  display: flex;
+  flex-direction: column;
+  width: clamp(18rem, 26vw, 22rem);
+  max-width: calc(100vw - 1.5rem);
+  max-height: min(
+    28rem,
+    max(7.5rem, calc(100dvh - 12rem - var(--gev-provider-lift, 0px)))
+  );
+  box-sizing: border-box;
+  padding: 0.6rem 0.7rem 0.65rem;
+  color: rgba(223, 245, 250, 0.92);
+  background: rgba(7, 22, 31, 0.96);
+  border: 1px solid rgba(54, 220, 255, 0.34);
+  border-radius: 0.6rem;
+  box-shadow:
+    0 0.85rem 2rem rgba(0, 0, 0, 0.58),
+    0 0 1.2rem rgba(0, 212, 255, 0.08);
+  backdrop-filter: blur(24px) saturate(1.3);
+  -webkit-backdrop-filter: blur(24px) saturate(1.3);
+  color-scheme: dark;
+  font: 0.75rem/1.45 var(--font-sans);
+  text-align: left;
+  transform: translateX(-50%);
+}
+:root[data-ui-theme='cyber'] #gev-voice-control .gev-voice-panel {
+  background-color: var(--cyber-panel-surface);
+  background-image: var(--cyber-panel-surface-detail);
+  border-color: var(--glass-border);
+  box-shadow: var(--cyber-panel-shadow);
+}
+#gev-voice-control .gev-voice-panel[hidden],
+#gev-voice-control .gev-voice-panel [hidden] {
+  display: none;
+}
+#gev-voice-control .gev-voice-panel-header {
+  display: flex;
+  flex: 0 0 auto;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.35rem;
+  padding: 0 0 0.5rem;
+  border-bottom: 1px solid var(--glass-border);
+}
+.gev-voice-panel-title {
+  color: var(--voice-panel-accent, var(--accent));
+  font: 600 0.65rem/1 var(--font-mono);
+  letter-spacing: 0.14em;
+}
+.gev-voice-panel-tabs {
+  margin-left: auto;
+}
+#gev-voice-control .gev-voice-panel-header .gev-voice-panel-tab {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 2rem;
+  padding: 0;
+}
+#gev-voice-control .gev-voice-panel-tab-icon {
+  font-size: 18px;
+}
+.gev-voice-panel-header [role='tablist'] {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.2rem;
+  min-width: 0;
+}
+#gev-voice-control
+  .gev-voice-panel
+  :is(.gev-voice-panel-header button, select, input[type='number']) {
+  min-height: 2rem;
+  box-sizing: border-box;
+  color: var(--text-primary);
+  background: rgba(255, 255, 255, 0.04);
+  border: 1px solid var(--glass-border);
+  border-radius: 0.3rem;
+  font: inherit;
+}
+#gev-voice-control .gev-voice-panel .gev-voice-panel-header button {
+  padding: 0 0.6rem;
+  color: var(--text-secondary);
+  font-family: var(--font-mono);
+  font-size: 0.68rem;
+  letter-spacing: 0.04em;
+  line-height: 1;
+  cursor: pointer;
+}
+#gev-voice-control #gev-voice-settings-close {
+  width: 2rem;
+  padding: 0;
+  font-size: 1rem;
+}
+#gev-voice-control .gev-voice-panel-header button:hover {
+  color: var(--text-primary);
+  border-color: var(--voice-panel-accent, var(--accent));
+}
+#gev-voice-control .gev-voice-panel [role='tab'][aria-selected='true'] {
+  color: var(--voice-panel-accent, var(--accent));
+  border-color: currentColor;
+  box-shadow: 0 -2px 0 currentColor inset;
+}
+#gev-voice-control .gev-voice-panel [role='tab']:focus,
+#gev-voice-control .gev-voice-panel :focus-visible {
+  outline: 2px solid var(--voice-panel-accent, var(--accent));
+  outline-offset: 2px;
+}
+.gev-voice-panel-body {
+  min-height: 0;
+  overflow: auto;
+  overscroll-behavior: contain;
+  scrollbar-width: thin;
+  padding: 0.55rem 0.75rem 3px 3px;
+  line-height: 1.45;
+  overflow-wrap: anywhere;
+}
+.gev-voice-panel-body .gev-voice-card-who {
+  overflow-wrap: break-word;
+}
+.gev-voice-panel-body p {
+  margin: 0;
+}
+.gev-voice-preference {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  margin: 0;
+  color: var(--text-primary);
+}
+.gev-voice-preference-toggle {
+  flex-direction: row-reverse;
+  justify-content: space-between;
+  min-height: 2.75rem;
+  font-weight: 600;
+  cursor: pointer;
+}
+.gev-voice-preference-toggle input {
+  flex: 0 0 auto;
+  width: 18px;
+  height: 18px;
+  margin: 0;
+  accent-color: var(--voice-panel-accent, var(--accent));
+}
+.gev-voice-setting-title {
+  margin-bottom: 0.4rem;
+  font-weight: 600;
+}
+.gev-voice-timeout-group {
+  margin-top: 0.65rem;
+  padding-top: 0.65rem;
+  border-top: 1px solid var(--glass-border);
+}
+.gev-voice-timeout-controls {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+}
+#gev-voice-timeout-select {
+  flex: 1 1 auto;
+  min-width: 0;
+  padding: 0 0.45rem;
+}
+#gev-voice-timeout-input {
+  flex: 0 0 4.5rem;
+  width: 4.5rem;
+  padding: 0 0.45rem;
+  font-variant-numeric: tabular-nums;
+}
+.gev-voice-timeout-unit {
+  order: 1;
+  color: var(--text-dim);
+  font-size: 0.63rem;
+}
+.gev-voice-timeout-controls:has(#gev-voice-timeout-input[hidden])
+  .gev-voice-timeout-unit {
+  display: none;
+}
+.gev-voice-settings-note {
+  color: rgba(190, 221, 230, 0.72);
+  font-size: 0.63rem;
+  line-height: 1.45;
+}
+.gev-voice-settings-note:not(:empty) {
+  margin-top: 0.25rem;
+}
+#gev-voice-control .gev-voice-panel .gev-voice-card {
+  position: static;
+  width: 100%;
+  max-height: none;
+  overflow: visible;
+  padding: 0;
+  border: 0;
+  background: transparent;
+  box-shadow: none;
+  transform: none;
+  animation: none;
+}
+#command-dock > #gev-voice-control:has(.gev-voice-panel:not([hidden])) {
+  z-index: 101;
+}
+#gev-voice-control:has(.gev-voice-panel:not([hidden])) .gev-voice-help-tray {
+  display: none;
+}
+#command-dock #gev-voice-control[data-provider-choice='true'] .gev-voice-panel {
+  bottom: min(
+    calc(100% + 4.8rem + var(--gev-provider-lift)),
+    calc(100dvh - 7.75rem)
+  );
+}
+
+#command-dock.dock-has-pinned-tray
+  #gev-voice-control:not([data-provider-choice='true'])
+  .gev-voice-panel {
+  bottom: min(
+    calc(100% + 1.7rem + var(--dock-pinned-stack-height)),
+    calc(100dvh - 18rem)
+  );
+}
+@media (pointer: coarse) {
+  #gev-voice-control
+    .gev-voice-panel
+    :is(
+      .gev-voice-panel-header button,
+      select,
+      input[type='number'],
+      .gev-voice-card-dismiss
+    ) {
+    min-height: 44px;
+  }
+  #gev-voice-control
+    .gev-voice-panel
+    :is(.gev-voice-panel-header button, .gev-voice-card-dismiss) {
+    min-width: 44px;
+  }
+}
+
+/* A connection error remains reachable even while the manual panel is open. */
+#gev-voice-control:has(.gev-voice-panel) .gev-voice-error-tray {
+  z-index: 12;
+}
diff --git a/src/ui/styles/voice-cost.css b/src/ui/styles/voice-cost.css
index b43f40168..4ca1d558d 100644
--- a/src/ui/styles/voice-cost.css
+++ b/src/ui/styles/voice-cost.css
@@ -62,6 +62,15 @@
   color: #ffc46b;
 }
 
+.gev-voice-cost-warning {
+  margin-left: auto;
+  flex: 0 0 auto;
+}
+
+.gev-voice-cost-warning[data-level='unknown'] {
+  color: #ffc46b;
+}
+
 .gev-voice-cost-value[data-level='cap'] {
   color: #ff6b6b;
   font-weight: 600;
@@ -111,7 +120,7 @@ html:not([lang='en']) #command-dock .gev-voice-cost {
   padding-left: 0.1rem;
 }
 
-html:not([lang='en']) #command-dock .gev-voice-tier-btn {
+html:not([lang='en']) #command-dock .gev-voice-heading .gev-voice-tier-btn {
   min-width: 0;
   padding: 0 0.2rem;
 }
@@ -232,3 +241,326 @@ html:not([lang='en'])
     pointer-events: auto;
   }
 }
+
+/* The opt-in provider and gear share a discoverable row at the existing anchor. */
+#gev-voice-control:has(> .gev-voice-settings-button) {
+  --gev-voice-settings-gap: 0.75rem;
+  --gev-voice-tray-clearance: 0px;
+}
+#gev-voice-control:has(> .gev-voice-settings-button)
+  .gev-voice-provider-field:not([hidden]) {
+  bottom: calc(
+    100% + var(--gev-provider-lift, 0px) + var(--gev-voice-settings-gap)
+  );
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 6px 46px 6px 6px;
+  border-color: rgba(123, 189, 211, 0.28);
+  background: rgba(9, 18, 27, 0.88);
+  box-shadow: 0 8px 24px rgba(0, 0, 0, 0.46);
+  color-scheme: dark;
+  opacity: 1;
+  pointer-events: auto;
+}
+#gev-voice-control:has(> .gev-voice-settings-button)
+  .gev-voice-provider-field
+  > span {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  overflow: hidden;
+  clip-path: inset(50%);
+  white-space: nowrap;
+}
+#gev-voice-control:has(> .gev-voice-settings-button)
+  .gev-voice-provider-field
+  select {
+  min-height: 34px;
+  font-size: 0.7rem;
+}
+#gev-voice-control .gev-voice-settings-button {
+  position: absolute;
+  top: 1rem;
+  right: 0.25rem;
+  z-index: 11;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 34px;
+  height: 34px;
+  min-width: 34px;
+  min-height: 34px;
+  padding: 0;
+  color: rgba(190, 221, 230, 0.72);
+  background: rgba(9, 18, 27, 0.92);
+  border: 1px solid var(--glass-border);
+  border-radius: 0.3rem;
+  font-size: 18px;
+  line-height: 1;
+  cursor: pointer;
+}
+#gev-voice-control[data-provider-choice='true']:has(
+    .gev-voice-provider-field:not([hidden])
+  )
+  .gev-voice-settings-button {
+  top: auto;
+  right: 7px;
+  bottom: calc(
+    100% + var(--gev-provider-lift, 0px) + var(--gev-voice-settings-gap) + 7px
+  );
+}
+#gev-voice-control
+  .gev-voice-settings-button:is(:hover, [aria-expanded='true']) {
+  color: var(--voice-panel-accent, var(--accent));
+  border-color: currentColor;
+  background: rgba(0, 212, 255, 0.12);
+}
+#gev-voice-control .gev-voice-settings-button:focus-visible {
+  outline: 2px solid var(--voice-panel-accent, var(--accent));
+  outline-offset: 2px;
+}
+:root[data-ui-theme='cyber']
+  #gev-voice-control:has(> .gev-voice-settings-button) {
+  --voice-panel-accent: var(--cyber-red-bright);
+}
+:root[data-ui-theme='cyber']
+  #gev-voice-control:has(> .gev-voice-settings-button)
+  .gev-voice-provider-field {
+  background: var(--cyber-panel-surface);
+  border-color: var(--glass-border);
+}
+@media (pointer: coarse) {
+  #gev-voice-control .gev-voice-settings-button {
+    width: 44px;
+    height: 44px;
+    min-width: 44px;
+    min-height: 44px;
+  }
+  #gev-voice-control:has(> .gev-voice-settings-button)
+    .gev-voice-provider-field:not([hidden]) {
+    padding-right: 56px;
+  }
+  #gev-voice-control:has(> .gev-voice-settings-button)
+    .gev-voice-provider-field
+    select {
+    min-height: 44px;
+  }
+}
+
+/* Keep the row and popup on the same lift, with a small gap above pinned
+   trays. On very short screens the shared lift still yields to the viewport. */
+#command-dock.dock-has-pinned-tray
+  #gev-voice-control[data-provider-choice='true']:has(
+    > .gev-voice-settings-button
+  ) {
+  --gev-voice-settings-gap: 0.375rem;
+  --gev-provider-lift: min(
+    calc(var(--dock-pinned-stack-height) + var(--gev-voice-tray-clearance)),
+    max(0px, calc(100dvh - 20rem))
+  );
+}
+
+/* Match the attribution-aware tray offsets without moving the trays. The
+   popup can scroll before the shared viewport budget caps its lift. */
+@media (max-width: 900px) {
+  #gev-voice-control:has(> .gev-voice-settings-button) {
+    --gev-voice-tray-clearance: calc(3rem - 1.2rem);
+  }
+}
+@media (max-width: 720px) {
+  #gev-voice-control:has(> .gev-voice-settings-button) {
+    --gev-voice-tray-clearance: calc(2vh + 2.5rem - 1.2rem);
+  }
+}
+
+/* Short touch landscapes have room beside the dock, not above its pinned
+   stack. Keep the same chooser and gear together in that empty lower gutter;
+   the open popup remains a bounded, scrollable overlay above the microphone. */
+@media (pointer: coarse) and (orientation: landscape) and (min-width: 480px) and (max-height: 500px) {
+  #command-dock
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    ),
+  #command-dock.dock-has-pinned-tray
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    ) {
+    --gev-provider-lift: 0px;
+    --gev-landscape-row-width: clamp(
+      108px,
+      calc((100vw - var(--dock-unified-width)) / 2 - 0.875rem),
+      calc(100% - 2px)
+    );
+  }
+  #command-dock
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    )
+    > .gev-voice-provider-field:not([hidden]) {
+    left: calc(50% - 50vw + 0.5rem);
+    right: auto;
+    bottom: 0.375rem;
+    width: var(--gev-landscape-row-width);
+    box-sizing: border-box;
+  }
+  #command-dock
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    )
+    > .gev-voice-settings-button {
+    left: calc(50% - 50vw + 0.5rem + var(--gev-landscape-row-width) - 51px);
+    right: auto;
+    top: auto;
+    bottom: calc(0.375rem + 7px);
+  }
+}
+
+/* The revealed row clears pinned wings without making the Voice column's
+   noninteractive gaps cover their controls. Keep hit surfaces stable so hover
+   promotion cannot oscillate when the pointer crosses root padding. */
+#command-dock
+  > #gev-voice-control[data-provider-choice='true']:has(
+    > .gev-voice-settings-button
+  ) {
+  pointer-events: none;
+}
+#command-dock
+  > #gev-voice-control[data-provider-choice='true']:has(
+    > .gev-voice-settings-button
+  )
+  > :is(
+    #gev-voice-button,
+    .gev-voice-heading,
+    .gev-voice-readout,
+    .gev-voice-provider-field,
+    .gev-voice-settings-button,
+    .gev-voice-panel,
+    .gev-voice-error-tray
+  ) {
+  pointer-events: auto;
+}
+@media (hover: hover) and (pointer: fine) {
+  #command-dock.dock-has-pinned-tray
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    ):is(
+      :hover,
+      [data-row-grace],
+      :has(
+        :focus-visible,
+        #gev-voice-provider:focus,
+        .gev-voice-panel[data-view='settings']:not([hidden])
+      )
+    ) {
+    z-index: 101;
+  }
+}
+@media (hover: none), (pointer: coarse) {
+  #command-dock.dock-has-pinned-tray
+    > #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    ) {
+    z-index: 101;
+  }
+}
+
+/* Pointer grace crosses pinned trays without covering their controls. Keyboard
+   focus, the provider select and an open panel hold the shared row visible. */
+@media (hover: hover) and (pointer: fine) {
+  #command-dock
+    #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    )
+    :is(.gev-voice-provider-field, .gev-voice-settings-button) {
+    transition:
+      opacity 160ms ease,
+      transform 180ms ease;
+  }
+  #command-dock
+    #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    ):not(:hover):not([data-row-grace]):not(
+      :has(
+        :focus-visible,
+        #gev-voice-provider:focus,
+        .gev-voice-panel[data-view='settings']:not([hidden])
+      )
+    )
+    :is(.gev-voice-provider-field, .gev-voice-settings-button) {
+    opacity: 0;
+    pointer-events: none;
+    transform: translateY(8px);
+  }
+  #command-dock:not(.dock-has-pinned-tray)
+    #gev-voice-control[data-provider-choice='true']:has(
+      > .gev-voice-settings-button
+    )
+    .gev-voice-provider-field::after {
+    content: '';
+    position: absolute;
+    top: 100%;
+    right: 0;
+    left: 0;
+    height: calc(var(--gev-voice-settings-gap) + 8px);
+  }
+}
+
+/* Existing tier and estimate controls are readable Settings content in panel mode. */
+.gev-voice-cost-settings {
+  display: grid;
+  gap: 0.55rem;
+  margin-top: 0.75rem;
+  padding-top: 0.7rem;
+  border-top: 1px solid var(--glass-border);
+}
+.gev-voice-cost-settings:has(#gev-voice-tier[hidden]):has(
+    #gev-voice-cost-value[hidden]
+  ),
+.gev-voice-cost-setting-row:has(> [hidden]) {
+  display: none;
+}
+.gev-voice-cost-setting-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+  min-height: 2rem;
+  color: var(--text-primary);
+  font-size: 0.68rem;
+}
+.gev-voice-cost-setting-row > span {
+  min-width: 0;
+}
+#gev-voice-control .gev-voice-cost-settings .gev-voice-tier-btn {
+  flex: 0 0 auto;
+  min-height: 2rem;
+  min-width: 3.25rem;
+  padding: 0.3rem 0.55rem;
+  font-size: 0.67rem;
+}
+.gev-voice-cost-settings .gev-voice-cost-value {
+  flex: 0 0 auto;
+  font-size: 0.75rem;
+}
+.gev-voice-cost-settings .gev-voice-cost-value[data-level='ok'] {
+  color: var(--voice-panel-accent, var(--accent));
+}
+#gev-voice-control .gev-voice-settings-icon {
+  font-size: 18px;
+  line-height: 1;
+}
+@media (pointer: coarse) {
+  #gev-voice-control .gev-voice-cost-settings .gev-voice-tier-btn {
+    min-height: 44px;
+    min-width: 44px;
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  #command-dock
+    #gev-voice-control:has(> .gev-voice-settings-button)
+    :is(.gev-voice-provider-field, .gev-voice-settings-button) {
+    transition: none;
+  }
+}
diff --git a/src/ui/templates/command-dock.html b/src/ui/templates/command-dock.html
index e6e2735ea..3dac977ae 100644
--- a/src/ui/templates/command-dock.html
+++ b/src/ui/templates/command-dock.html
@@ -91,6 +91,7 @@
             <input type="text" id="location-search" placeholder="Search any location..." autocomplete="off" spellcheck="false" aria-label="Search location by name or coordinates" data-i18n-aria-label data-i18n-placeholder />
           </div>
         </div>
+        <p id="location-search-error" class="location-search-error" role="alert"></p>
       </div>
     </div>
   </div>
diff --git a/src/ui/templates/display-controls.html b/src/ui/templates/display-controls.html
index f31453b6c..f6af31127 100644
--- a/src/ui/templates/display-controls.html
+++ b/src/ui/templates/display-controls.html
@@ -106,19 +106,15 @@
       </div>
     </div>
     <div class="pp-toggle-group">
-      <button class="pp-toggle-btn active" id="scope-toggle" title="Scope — the circular viewport mask" aria-pressed="true" data-i18n-title>
+      <label class="pp-toggle-btn pp-scope-toggle" title="Scope — the circular viewport mask" data-i18n-title>
         <span class="pp-icon material-symbols-outlined" aria-hidden="true">adjust</span>
         <span class="pp-label" data-i18n>Scope</span>
-      </button>
+        <input type="checkbox" id="scope-toggle" checked />
+      </label>
       <div class="pp-slider-row visible" id="scope-slider-row">
         <span class="pp-slider-mini-label" data-i18n>Feather</span>
-        <!-- Feather starts at an 11% soft scope-mask edge (owner final lock
-             2026-08-24, superseding the 08-22 hard-crop and 08-23 8% rulings);
-             mirrors SCOPE_FEATHER_RATIO_DEFAULT in src/scopeMask.js. Feather
-             softens the black mask edge; label fading is the separate Fade
-             slider. -->
-        <input type="range" class="gev-quantitative-slider pp-slider" id="scope-feather-slider" min="0" max="100" value="11" aria-label="Scope edge feather" title="Scope edge feather as a percentage of the keyhole radius" data-i18n-aria-label data-i18n-title />
-        <span class="pp-slider-value" id="scope-feather-value">11%</span>
+        <input type="range" class="gev-quantitative-slider pp-slider" id="scope-feather-slider" min="0" max="200" value="100" aria-label="Scope edge feather" title="Scope edge feather as a percentage of the keyhole radius" data-i18n-aria-label data-i18n-title />
+        <span class="pp-slider-value" id="scope-feather-value">100%</span>
       </div>
     </div>
     <div class="pp-toggle-group">
diff --git a/src/ui/templates/scene-chrome.html b/src/ui/templates/scene-chrome.html
index b3c9785f1..ba786c30b 100644
--- a/src/ui/templates/scene-chrome.html
+++ b/src/ui/templates/scene-chrome.html
@@ -11,13 +11,13 @@
   <div id="title-bar">
     <div class="title-glow"></div>
     <h1><span class="title-logo brand-logo" data-logo-gaze data-logo-src="/logo.svg" aria-hidden="true"><img src="/logo.svg" alt="" /></span> <span translate="no">GOD'S EYE <span class="title-accent">VIEW</span></span></h1>
-    <p class="subtitle" data-i18n>NO PLACE LEFT BEHIND</p>
+    <p class="subtitle scene-text-holdout" data-i18n>NO PLACE LEFT BEHIND</p>
   </div>
 
   <!-- Style indicator -->
   <div id="style-indicator">
-    <span class="indicator-label" data-i18n>ACTIVE STYLE</span>
-    <span class="indicator-value" id="active-style-name" data-i18n>NORMAL</span>
+    <span class="indicator-label scene-text-holdout" data-i18n>ACTIVE STYLE</span>
+    <span class="indicator-value scene-text-holdout" id="active-style-name" data-i18n>NORMAL</span>
   </div>
 
   <!-- Top-center camera and share actions -->
diff --git a/src/ui/templates/welcome.html b/src/ui/templates/welcome.html
index 852c232d5..2d9e0b4c5 100644
--- a/src/ui/templates/welcome.html
+++ b/src/ui/templates/welcome.html
@@ -44,7 +44,13 @@
         <input type="checkbox" data-first-run-suppress />
         <span data-i18n>Don't show this again</span>
       </label>
-      <span data-i18n>ESC to dismiss</span>
+      <!-- A button, not just a hint: phones and tablets have no ESC key. It
+           closes exactly as ESC does, for this session only. Touch screens
+           see DISMISS; a keyboard keeps the ESC hint (first-run.css). -->
+      <button type="button" class="first-run-dismiss" data-first-run-dismiss>
+        <span class="first-run-dismiss-key" data-i18n>ESC to dismiss</span>
+        <span class="first-run-dismiss-touch" data-i18n>DISMISS</span>
+      </button>
     </div>
     <!-- Kept out of the footer row: it swaps to mission progress and errors, and
          a live region that also holds layout makes the row jump as it speaks. -->
diff --git a/src/ui/visualEffects.js b/src/ui/visualEffects.js
index 8b5234ef2..9d10f0cef 100644
--- a/src/ui/visualEffects.js
+++ b/src/ui/visualEffects.js
@@ -159,18 +159,30 @@ export class VisualEffects {
     this.requestRender('bloom');
   }
 
+  /**
+   * Sharpen runs only when it is on and its slider is above 0, as the style
+   * stages do: the pass costs the same at any amount (~1.5 ms GPU per frame
+   * on the Arc, 2026-10-24), and `0.1 + value * 2` still sharpened at 0.
+   */
+  syncSharpenEnabled() {
+    if (this.stopped || !this.sharpenStage) return;
+    this.sharpenStage.enabled =
+      this.sharpenEnabled && this.sharpenIntensity > 0.001;
+  }
+
   applySharpenIntensity(value) {
     if (this.stopped) return;
     this.sharpenIntensity = value;
     if (this.sharpenStage)
       this.sharpenStage.uniforms.amount = 0.1 + value * 2.0;
+    this.syncSharpenEnabled();
     this.requestRender('sharpen');
   }
 
   setSharpenEnabled(enabled) {
     if (this.stopped) return;
     this.sharpenEnabled = !!enabled;
-    if (this.sharpenStage) this.sharpenStage.enabled = this.sharpenEnabled;
+    this.syncSharpenEnabled();
     this.requestRender('sharpen');
   }
 
diff --git a/src/ui/visualEffects.test.mjs b/src/ui/visualEffects.test.mjs
index 68fa45962..9e9542c52 100644
--- a/src/ui/visualEffects.test.mjs
+++ b/src/ui/visualEffects.test.mjs
@@ -224,6 +224,24 @@ test('sharpen uses the existing uniform scale and keeps values while disabled',
   f.effects.destroy();
 });
 
+test('sharpen at 0 runs no pass, and comes back with the slider', () => {
+  const f = fixture();
+  f.effects.initPostProcess(0.49);
+  f.effects.setSharpenEnabled(true);
+  assert.equal(f.effects.sharpenStage.enabled, true);
+  f.effects.applySharpenIntensity(0);
+  assert.equal(
+    f.effects.sharpenStage.enabled,
+    false,
+    'no residual sharpen at 0',
+  );
+  f.effects.setSharpenEnabled(true);
+  assert.equal(f.effects.sharpenStage.enabled, false, 'on at 0 is still off');
+  f.effects.applySharpenIntensity(0.2);
+  assert.equal(f.effects.sharpenStage.enabled, true);
+  f.effects.destroy();
+});
+
 test('stop revokes pending work immediately but retains stages until final destruction', () => {
   const f = fixture();
   f.effects.initStyles();
diff --git a/src/ui/visualPresets.js b/src/ui/visualPresets.js
index 48a758a33..e3830601a 100644
--- a/src/ui/visualPresets.js
+++ b/src/ui/visualPresets.js
@@ -5,7 +5,7 @@ import { snowShader } from '../styles/snow.js';
 import { nightVisionShader } from '../styles/surveillance.js';
 import { thermalShader } from '../styles/thermal.js';
 import { BLOOM_INTENSITY_DEFAULT } from '../bloom.js';
-import { msg } from '../i18n/index.js';
+import { msg } from '../i18n/marker.js';
 
 /** Duration (ms) for shader intensity crossfade between style presets. */
 export const TRANSITION_DURATION_MS = 500;
diff --git a/src/ui/visualSettings.js b/src/ui/visualSettings.js
index c804ea342..a6f7b5674 100644
--- a/src/ui/visualSettings.js
+++ b/src/ui/visualSettings.js
@@ -1,3 +1,5 @@
+import { clampScopeFeatherPct } from '../scopeMaskPolicy.js';
+import { syncScopeControls } from './displayControls.js';
 import { STYLE_STATUS_LABELS } from './visualPresets.js';
 import { syncSegmentedControl } from './segmentedControl.js';
 import { t } from '../i18n/index.js';
@@ -73,13 +75,24 @@ export class VisualSettings {
       panelState,
       styleParams,
     } = state || {};
-    // Ignore the retired 'ai-edit' style from older share links.
-    if (style && style !== 'normal' && style !== 'ai-edit') {
+    // Ignore the retired 'ai-edit' style from older share links. Normal is
+    // the start-up style, but a share opened later in the tab must still leave
+    // a filtered style for it.
+    if (
+      style &&
+      style !== 'ai-edit' &&
+      (style !== 'normal' || this.activeStyle !== 'normal')
+    ) {
+      const alreadyActive = style === this.activeStyle;
       this.setStyle(style, {
         applyPreset: true,
         revealParameters: false,
         restore: true,
       });
+      // setStyle leaves an already-active style untouched; the incoming share
+      // still starts from that preset before its own parameters apply.
+      if (alreadyActive && style !== 'normal')
+        this._applyStylePresetDefaults(style);
     }
     if (styleParams && style && this.stages[style] && STYLES[style]?.uniforms) {
       for (const [uniformName, uniformValue] of Object.entries(styleParams)) {
@@ -136,11 +149,10 @@ export class VisualSettings {
     }
     if (typeof scopeEnabled === 'boolean') {
       setScopeMaskEnabled(scopeEnabled);
-      this._scopeBtn?.classList.toggle('active', scopeEnabled);
-      this._scopeBtn?.setAttribute('aria-pressed', String(scopeEnabled));
+      syncScopeControls(this._scopeBtn, this._scopeFeatherSlider, scopeEnabled);
     }
     if (typeof scopeFeatherPct === 'number' && this._scopeFeatherSlider) {
-      const pct = Math.max(0, Math.min(100, Math.round(scopeFeatherPct)));
+      const pct = clampScopeFeatherPct(scopeFeatherPct);
       this._scopeFeatherSlider.value = String(pct);
       if (this._scopeFeatherValue)
         this._scopeFeatherValue.textContent = `${pct}%`;
@@ -1302,11 +1314,14 @@ export class VisualSettings {
     const scopeState = state.scope || {};
     if (typeof scopeState.enabled === 'boolean') {
       setScopeMaskEnabled(scopeState.enabled);
-      this._scopeBtn?.classList.toggle('active', scopeState.enabled);
-      this._scopeBtn?.setAttribute('aria-pressed', String(scopeState.enabled));
+      syncScopeControls(
+        this._scopeBtn,
+        this._scopeFeatherSlider,
+        scopeState.enabled,
+      );
     }
     if (typeof scopeState.featherPct === 'number' && this._scopeFeatherSlider) {
-      const pct = Math.max(0, Math.min(100, Math.round(scopeState.featherPct)));
+      const pct = clampScopeFeatherPct(scopeState.featherPct);
       this._scopeFeatherSlider.value = String(pct);
       if (this._scopeFeatherValue)
         this._scopeFeatherValue.textContent = `${pct}%`;
diff --git a/src/voice/actionSchemas.js b/src/voice/actionSchemas.js
index 3f464cad1..bf7e2f66d 100644
--- a/src/voice/actionSchemas.js
+++ b/src/voice/actionSchemas.js
@@ -178,6 +178,9 @@ const schemas = [
             'global-context-panel',
             'weather-panel',
             'recent-imagery-panel',
+            'voice-settings',
+            'voice-preview',
+            'provider-settings',
           ],
         },
         open: {
@@ -187,6 +190,15 @@ const schemas = [
       required: ['panelId', 'open'],
     },
   },
+  {
+    name: 'set_voice_inactivity_timeout',
+    parameters: {
+      type: 'object',
+      additionalProperties: false,
+      properties: { minutes: { type: 'integer', minimum: 0, maximum: 60 } },
+      required: ['minutes'],
+    },
+  },
   {
     name: 'set_context_mode',
     parameters: {
@@ -223,6 +235,7 @@ const schemas = [
         aircraftClass: {
           type: 'string',
         },
+        voicePanel: { type: 'string', enum: ['preview', 'settings'] },
       },
       required: ['action'],
     },
diff --git a/src/voice/actionSchemas.test.mjs b/src/voice/actionSchemas.test.mjs
index d65d7d8db..97e5004b5 100644
--- a/src/voice/actionSchemas.test.mjs
+++ b/src/voice/actionSchemas.test.mjs
@@ -32,7 +32,8 @@ test('the complete Realtime tool payload pins the manifest-generated layer relea
     .digest('hex');
   assert.equal(
     digest,
-    // Re-derived for the voice layer manifest (generated layer enums and
+    // Re-derived for Provider Settings and explicit Visual Presets/Scenes routing,
+    // plus the deliberate direct Panel tool/target additions and voice layer manifest (generated layer enums and
     // aliases), point-and-ask (pointer sentinels, referent args) and the
     // consolidated tool wording (each policy stated once); model-facing tools
     // omit top-level anyOf (OpenAI rejects it). Contacts list routing preserves
@@ -41,8 +42,10 @@ test('the complete Realtime tool payload pins the manifest-generated layer relea
     // Air quality (ECCC AQHI) extends the manifest.
     // Globe rotation adds one motion; visual keyhole fit and explicit
     // reset guidance/defaults update only move_camera and mode descriptions.
-    // Restore base descriptions; append only globe-rotation defaults and fit guidance.
-    '967b5a043b812e2f8c1e190fc571cf12b960c9d4486df736902221aab4d99cf6',
+    // S2 GhostMaps extends the generated layer enums.
+    // Panel adds named voice targets and timeout; shared Panel/Cockpit guidance
+    // is consolidated without changing either feature's arguments.
+    '9ee82c4214499280c208c93751b19d7b724c81b7727a2d0c6dab0184749fbe15',
   );
 });
 
@@ -100,12 +103,18 @@ test('metadata cannot add tools, fields, types or enum values', () => {
 
 test('all legacy action arguments are byte-identical after removing the deliberate additions', () => {
   const legacy = structuredClone(GEV_ACTION_SCHEMAS).filter(
-    (tool) => !['next_satellite_pass', 'set_cyber_sonar'].includes(tool.name),
+    (tool) =>
+      ![
+        'next_satellite_pass',
+        'set_cyber_sonar',
+        'set_voice_inactivity_timeout',
+      ].includes(tool.name),
   );
   // Layer enums are generated from the voice layer manifest and pinned by
   // layerManifest.test.mjs; the two shipped right-rail panels are additive.
   const property = (name) =>
     legacy.find((tool) => tool.name === name).parameters.properties;
+  delete property('control_cockpit').voicePanel;
   delete property('set_layer_visibility').layerId.enum;
   delete property('show_data_layers_menu').layerId.enum;
   delete property('get_entity_context').layerId.enum;
@@ -123,7 +132,14 @@ test('all legacy action arguments are byte-identical after removing the delibera
   motion.enum = motion.enum.filter((value) => value !== 'rotate_globe');
   const panels = property('set_panel_open').panelId;
   panels.enum = panels.enum.filter(
-    (id) => !['weather-panel', 'recent-imagery-panel'].includes(id),
+    (id) =>
+      ![
+        'weather-panel',
+        'recent-imagery-panel',
+        'voice-settings',
+        'voice-preview',
+        'provider-settings',
+      ].includes(id),
   );
   for (const tool of legacy) {
     // Point-and-ask adds `referent` arguments and 'pointer' enum values.
@@ -228,3 +244,13 @@ test('globe reset guidance requires a separate explicit command after refusal',
   assert.match(paragraph, /bare yes\/ok/);
   assert.match(paragraph, /Do not ask a question/);
 });
+
+test('direct voice timeout schema accepts None and exact integers, rejects malformed duration', () => {
+  const tool = GEV_REALTIME_TOOLS.find(
+    (tool) => tool.name === 'set_voice_inactivity_timeout',
+  );
+  for (const minutes of [0, 1, 5, 60])
+    assert.equal(validateArgs(tool.parameters, { minutes }).length, 0);
+  for (const minutes of [-1, 61, 1.5, '5'])
+    assert.ok(validateArgs(tool.parameters, { minutes }).length > 0);
+});
diff --git a/src/voice/commands.js b/src/voice/commands.js
index c5f92b209..1fed3bc12 100644
--- a/src/voice/commands.js
+++ b/src/voice/commands.js
@@ -2,17 +2,50 @@ import { createVoiceCommands as bindVoiceCommands } from './sessionCommands.js';
 import { createRealtimeSession } from './realtimeSession.js';
 import { createGeminiSession } from './geminiSession.js';
 import { createProviderCommands } from './providerCommands.js';
+import { createVoicePanelHost } from './panel/host.js';
 
 /** Default composition; callers may supply another session adapter factory. */
 export function createVoiceCommands(options = {}) {
+  const panelHost =
+    options.panel === true
+      ? createVoicePanelHost({
+          storage: options.panelStorage,
+          clock: options.panelClock,
+          readCockpitState: options.styleManager?.getCockpitState
+            ? () => options.styleManager.getCockpitState()
+            : undefined,
+        })
+      : null;
+  const bind = (settings) =>
+    bindVoiceCommands({
+      ...settings,
+      ...(panelHost
+        ? {
+            panelHost,
+            nativePanelProvider: settings.createController
+              ? null
+              : settings.createSession === createRealtimeSession
+                ? 'openai'
+                : settings.createSession === createGeminiSession
+                  ? 'gemini'
+                  : null,
+          }
+        : {}),
+    });
+  let commands;
   // Generic hosts retain the existing default; standalone opts in explicitly.
   if (!options.createSession && options.supportedProviders !== undefined)
-    return createProviderCommands(options, {
-      bind: bindVoiceCommands,
+    commands = createProviderCommands(options, {
+      bind,
       factories: { openai: createRealtimeSession, gemini: createGeminiSession },
     });
-  return bindVoiceCommands({
-    createSession: createRealtimeSession,
-    ...options,
-  });
+  else commands = bind({ createSession: createRealtimeSession, ...options });
+  if (panelHost) {
+    const lifetime = commands.signal ?? commands.session?.signal;
+    lifetime?.addEventListener('abort', () => panelHost.destroy(), {
+      once: true,
+    });
+    if (lifetime?.aborted) panelHost.destroy();
+  }
+  return commands;
 }
diff --git a/src/voice/control.js b/src/voice/control.js
index c77197412..df40be104 100644
--- a/src/voice/control.js
+++ b/src/voice/control.js
@@ -27,7 +27,7 @@ export function voiceStatusLabel(status) {
 }
 
 /** Build the voice control independently of its connection backend. */
-export function createVoiceControl({ reset = false } = {}) {
+export function createVoiceControl({ reset = false, panel = false } = {}) {
   let root = document.getElementById('gev-voice-control');
   if (root && reset) {
     root.remove();
@@ -43,13 +43,18 @@ export function createVoiceControl({ reset = false } = {}) {
         <span>${t('Voice provider')}</span>
         <select id="gev-voice-provider" aria-label="${t('Voice provider')}" title="${t('Changing provider reconnects voice if it is on.')}"></select>
       </label>
+      ${panel ? `<button id="gev-voice-settings-button" class="gev-voice-settings-button" type="button" aria-label="${t('Voice Settings')}" aria-controls="gev-voice-panel" aria-expanded="false"><span class="material-symbols-outlined gev-voice-settings-icon" aria-hidden="true">settings</span></button>` : ''}
       <div class="gev-voice-heading">
         <div class="gev-voice-kicker">${t('AI AGENT')}</div>
         <div id="gev-voice-status">${voiceStatusLabel('idle')}</div>
-        <div class="gev-voice-cost">
+        ${
+          panel
+            ? `<span id="gev-voice-cost-warning" class="gev-voice-cost-value gev-voice-cost-warning" hidden role="status" aria-live="polite"></span>`
+            : `<div class="gev-voice-cost">
           <button id="gev-voice-tier" class="gev-voice-tier-btn" type="button" aria-pressed="false" title="${t('Voice model tier — applies next session')}">${t('STD')}</button>
           <span id="gev-voice-cost-value" class="gev-voice-cost-value" data-level="ok" title="${t('Estimated session cost')}">~$0.00</span>
-        </div>
+        </div>`
+        }
       </div>
       <button id="gev-voice-button" type="button" aria-label="${t('Voice control — activate to toggle voice; hold Space to speak')}" aria-describedby="gev-voice-help">
         <span class="gev-mic-orbit"><img src="/mic.svg" alt="" /></span>
@@ -65,13 +70,29 @@ export function createVoiceControl({ reset = false } = {}) {
         <span class="gev-voice-help-kicker">${t('VOICE CONTROL')}</span>
         <span class="gev-voice-help-detail">${t('Hold Space to speak · tap Space to activate focused controls')}</span>
       </div>
+      ${
+        panel
+          ? `<section id="gev-voice-panel" class="gev-voice-panel" hidden aria-label="${t('Voice Settings')}">
+        <div class="gev-voice-panel-header">
+          <span class="gev-voice-panel-title">${t('VOICE')}</span>
+          <div class="gev-voice-panel-tabs" role="tablist" aria-label="${t('Voice Settings')}">
+            <button id="gev-voice-preview-tab" class="gev-voice-panel-tab" type="button" role="tab" aria-label="${t('Preview')}" title="${t('Preview')}" aria-selected="true" aria-controls="gev-voice-preview-panel"><span class="material-symbols-outlined gev-voice-panel-tab-icon" aria-hidden="true">visibility</span></button>
+            <button id="gev-voice-settings-tab" class="gev-voice-panel-tab" type="button" role="tab" aria-label="${t('Settings')}" title="${t('Settings')}" aria-selected="false" tabindex="-1" aria-controls="gev-voice-settings-panel"><span class="material-symbols-outlined gev-voice-panel-tab-icon" aria-hidden="true">settings</span></button>
+          </div>
+          <button id="gev-voice-settings-close" type="button" aria-label="${t('Close voice panel')}">×</button>
+        </div>
+        <div class="gev-voice-panel-body">
+          <section id="gev-voice-preview-panel" role="tabpanel" aria-labelledby="gev-voice-preview-tab">
+            <p id="gev-voice-preview-empty">${t('Voice replies appear here.')}</p>`
+          : ''
+      }
       <section id="gev-voice-card" class="gev-voice-card" hidden aria-label="${t('Voice assistant')}">
         <div class="gev-voice-card-header">
           <span class="gev-voice-card-kicker">${t('VOICE')}</span>
           <span id="gev-voice-card-phase" class="gev-voice-card-phase"></span>
           <button id="gev-voice-card-dismiss" class="gev-voice-card-dismiss" type="button" aria-label="${t('Dismiss voice card')}">×</button>
         </div>
-        <p id="gev-voice-card-user" class="gev-voice-card-caption" data-role="user" hidden><span class="gev-voice-card-who">${t('YOU')}</span><span id="gev-voice-card-user-text" class="gev-voice-card-text"></span></p>
+        <p id="gev-voice-card-user" class="gev-voice-card-caption" data-role="user" hidden><span id="gev-voice-card-user-who" class="gev-voice-card-who">${t('YOU')}</span><span id="gev-voice-card-user-text" class="gev-voice-card-text"></span></p>
         <p id="gev-voice-card-pointer" class="gev-voice-card-pointer" hidden><span id="gev-voice-card-pointer-kind" class="gev-voice-card-who">${t('THIS')}</span><span class="gev-voice-card-sr">: </span><span id="gev-voice-card-pointer-text" class="gev-voice-card-pointer-label"></span></p>
         <p id="gev-voice-card-assistant" class="gev-voice-card-caption" data-role="assistant" hidden><span class="gev-voice-card-who">${ASSISTANT_NAME}</span><span id="gev-voice-card-assistant-text" class="gev-voice-card-text"></span></p>
         <ol id="gev-voice-card-plan" class="gev-voice-card-plan" aria-label="${t('Plan')}" hidden></ol>
@@ -87,6 +108,40 @@ export function createVoiceControl({ reset = false } = {}) {
         </div>
         <div id="gev-voice-card-live" class="gev-voice-card-sr" aria-live="polite" aria-atomic="true"></div>
       </section>
+      ${
+        panel
+          ? `</section>
+          <section id="gev-voice-settings-panel" role="tabpanel" aria-labelledby="gev-voice-settings-tab" hidden>
+            <label class="gev-voice-preference gev-voice-preference-toggle"><input id="gev-voice-preview-enabled" type="checkbox" checked aria-describedby="gev-voice-preview-note" /><span>${t('Show Voice Preview')}</span></label>
+            <p id="gev-voice-preview-note" class="gev-voice-settings-note"></p>
+            <div class="gev-voice-timeout-group">
+            <label class="gev-voice-preference gev-voice-setting-title" for="gev-voice-timeout-select">${t('Voice inactivity timeout')}</label>
+            <div class="gev-voice-timeout-controls">
+            <select id="gev-voice-timeout-select" aria-describedby="gev-voice-timeout-note gev-voice-timeout-status">
+              <option value="3">3 ${t('Minutes')}</option><option value="5" selected>5 ${t('Minutes')}</option><option value="10">10 ${t('Minutes')}</option><option value="15">15 ${t('Minutes')}</option>
+              <option value="custom">${t('Custom')}</option><option value="0">${t('None')}</option>
+            </select>
+            <label class="gev-voice-timeout-unit" for="gev-voice-timeout-input">${t('Minutes')}</label>
+            <input id="gev-voice-timeout-input" type="number" min="1" max="60" step="1" value="5" aria-describedby="gev-voice-timeout-note" />
+            </div>
+            <p id="gev-voice-timeout-note" class="gev-voice-settings-note">${t('These preferences stay in this browser.')}</p>
+            <p id="gev-voice-timeout-status" class="gev-voice-settings-note" role="status" aria-live="polite"></p>
+            </div>
+            <div class="gev-voice-cost-settings">
+              <div class="gev-voice-cost-setting-row">
+                <span>${t('Voice model tier — applies next session')}</span>
+                <button id="gev-voice-tier" class="gev-voice-tier-btn" type="button" aria-pressed="false" title="${t('Voice model tier — applies next session')}">${t('STD')}</button>
+              </div>
+              <div class="gev-voice-cost-setting-row">
+                <span>${t('Estimated session cost')}</span>
+                <span id="gev-voice-cost-value" class="gev-voice-cost-value" data-level="ok" title="${t('Estimated session cost')}">~$0.00</span>
+              </div>
+            </div>
+          </section>
+        </div>
+      </section>`
+          : ''
+      }
       <div class="gev-voice-error-tray" role="alert" aria-live="assertive">
         <div class="gev-voice-error-header">
           <span>${t('VOICE SYSTEM ERROR')}</span>
@@ -114,6 +169,20 @@ export function createVoiceControl({ reset = false } = {}) {
   }
   return {
     root,
+    voicePanel: root.querySelector('#gev-voice-panel'),
+    previewPanel: root.querySelector('#gev-voice-preview-panel'),
+    voiceSettingsPanel: root.querySelector('#gev-voice-settings-panel'),
+    previewTab: root.querySelector('#gev-voice-preview-tab'),
+    settingsTab: root.querySelector('#gev-voice-settings-tab'),
+    voiceSettingsButton: root.querySelector('#gev-voice-settings-button'),
+    voiceSettingsClose: root.querySelector('#gev-voice-settings-close'),
+    previewEmpty: root.querySelector('#gev-voice-preview-empty'),
+    voicePreviewInput: root.querySelector('#gev-voice-preview-enabled'),
+    voicePreviewNote: root.querySelector('#gev-voice-preview-note'),
+    voiceTimeoutSelect: root.querySelector('#gev-voice-timeout-select'),
+    voiceTimeoutInput: root.querySelector('#gev-voice-timeout-input'),
+    voiceTimeoutNote: root.querySelector('#gev-voice-timeout-note'),
+    voiceTimeoutStatus: root.querySelector('#gev-voice-timeout-status'),
     providerField: root.querySelector('#gev-voice-provider-field'),
     providerSelect: root.querySelector('#gev-voice-provider'),
     button: root.querySelector('#gev-voice-button'),
@@ -124,6 +193,7 @@ export function createVoiceControl({ reset = false } = {}) {
     errorDetail: root.querySelector('#gev-voice-error-detail'),
     tierButton: root.querySelector('#gev-voice-tier'),
     costValue: root.querySelector('#gev-voice-cost-value'),
+    costWarning: root.querySelector('#gev-voice-cost-warning'),
     card: root.querySelector('#gev-voice-card'),
   };
 }
diff --git a/src/voice/gevActions.js b/src/voice/gevActions.js
index f7613aed1..8e5466b7b 100644
--- a/src/voice/gevActions.js
+++ b/src/voice/gevActions.js
@@ -74,8 +74,17 @@ const PANEL_ALIASES = new Map([
   ['styles', 'control-panel'],
   ['filters', 'control-panel'],
   ['visual styles', 'control-panel'],
+  ['visual preset', 'control-panel'],
+  ['visual presets', 'control-panel'],
+  ['provider settings', 'provider-settings'],
   ['cctv', 'cctv-panel'],
   ['cameras', 'cctv-panel'],
+  ['voice settings', 'voice-settings'],
+  ['voice-settings', 'voice-settings'],
+  ['voice preview', 'voice-preview'],
+  ['voice-preview', 'voice-preview'],
+  ['voice control', 'voice-preview'],
+  ['voice controls', 'voice-preview'],
   ['radio', 'radio-panel'],
   ['internet radio', 'radio-panel'],
   ['radio stations', 'radio-panel'],
@@ -110,6 +119,7 @@ const PANEL_IDS = new Set([
   'pp-toggles',
   'weather-panel',
   'recent-imagery-panel',
+  'provider-settings',
 ]);
 const CONTEXT_MODE_ALIASES = new Map([
   ['off', 'off'],
@@ -243,6 +253,7 @@ export function createGevActionRunner({
   searchNavigation = searchAndFlyTo,
   speechBuilders = null,
   deixis = null,
+  readVoicePanelOperation = null,
 }) {
   // Voice enable times and analyst follow-up memory belong to this runner.
   // Speech builders turn results into say/display envelopes; callers extend
@@ -268,6 +279,81 @@ export function createGevActionRunner({
   });
   // Nested calls (select_nearest_aircraft composing layer + flight) use the
   // raw runner; only the outer call gets a voice envelope.
+  const voiceUnavailable = (action) => ({
+    ok: false,
+    action,
+    applied: false,
+    unavailable: true,
+    error: 'Voice panel controls are unavailable in this host.',
+    say: 'Voice panel controls are unavailable in this host.',
+  });
+  async function showVoicePanel(
+    view,
+    open,
+    options,
+    operation = readVoicePanelOperation?.(),
+  ) {
+    const current = () =>
+      !options.signal?.aborted &&
+      (!options.isCurrent || options.isCurrent()) &&
+      operation?.isCurrent();
+    if (!operation) return voiceUnavailable('set_panel_open');
+    if (!current())
+      return {
+        ok: false,
+        action: 'set_panel_open',
+        applied: false,
+        cancelled: true,
+      };
+    let exit = null;
+    if (open) {
+      if (typeof styleManager?.getCockpitState !== 'function')
+        return voiceUnavailable('set_panel_open');
+      if (styleManager.getCockpitState()?.active) {
+        if (typeof styleManager.controlCockpit !== 'function')
+          return voiceUnavailable('set_panel_open');
+        exit = await styleManager.controlCockpit('exit');
+        if (styleManager.getCockpitState()?.active)
+          return {
+            ok: false,
+            action: 'set_panel_open',
+            applied: false,
+            exit,
+            error: exit?.error || 'Cockpit did not exit.',
+          };
+      }
+    }
+    if (!current())
+      return {
+        ok: false,
+        action: 'set_panel_open',
+        applied: false,
+        cancelled: true,
+        exit,
+        cockpitExited: Boolean(exit && !styleManager.getCockpitState()?.active),
+        say:
+          exit && !styleManager.getCockpitState()?.active
+            ? 'Cockpit exited; the voice panel was left as you last set it.'
+            : 'The voice panel was left as you last set it.',
+      };
+    const result = operation.show(view, open);
+    return {
+      ...result,
+      action: 'set_panel_open',
+      panelId: view === 'settings' ? 'voice-settings' : 'voice-preview',
+      exit,
+      state: styleManager?.getCockpitState?.() ?? null,
+      say: !result.ok
+        ? 'The voice panel was not changed.'
+        : result.settingsOpen
+          ? 'Voice Settings is open.'
+          : result.panelOpen
+            ? result.previewEnabled
+              ? 'Voice Preview is open.'
+              : 'Voice control is open; Preview remains off.'
+            : 'The voice panel is closed.',
+    };
+  }
   const runGevAction = async function runGevAction(
     name,
     rawArgs = {},
@@ -639,6 +725,25 @@ export function createGevActionRunner({
       return { ok: true, action: 'set_visual_style', style };
     }
 
+    if (name === 'set_voice_inactivity_timeout') {
+      const operation = readVoicePanelOperation?.();
+      if (!operation) return voiceUnavailable(name);
+      if (!current() || !operation.isCurrent())
+        return { ok: false, action: name, applied: false, cancelled: true };
+      const result = operation.setMinutes(args.minutes);
+      const duration =
+        result.minutes === 0 ? 'disabled' : `${result.minutes} minutes`;
+      return {
+        ...result,
+        action: name,
+        say: !result.applied
+          ? 'Voice inactivity was not changed.'
+          : result.persisted
+            ? `Voice inactivity is ${duration}, saved in this browser.`
+            : `Voice inactivity is ${duration} for now, but could not be saved in this browser.`,
+      };
+    }
+
     if (name === 'set_panel_open') {
       const panelId = normalizePanelId(args.panelId || args.panel);
       if (!panelId)
@@ -646,6 +751,70 @@ export function createGevActionRunner({
           `Unknown panel: ${args.panelId || args.panel || 'missing'}`,
         );
       const open = args.open !== false;
+      if (panelId === 'voice-settings' || panelId === 'voice-preview')
+        return showVoicePanel(
+          panelId === 'voice-settings' ? 'settings' : 'preview',
+          open,
+          runOptions,
+        );
+      if (panelId === 'provider-settings') {
+        if (!current())
+          return {
+            ok: false,
+            action: name,
+            panelId,
+            applied: false,
+            cancelled: true,
+          };
+        const doc = globalThis.document;
+        const panel = doc?.getElementById?.('key-setup');
+        const button = open
+          ? doc?.getElementById?.('key-setup-chip')
+          : panel?.querySelector?.('[data-key-setup-close]');
+        const concealed =
+          open &&
+          [
+            'ui-clean-view',
+            'recording-mode',
+            'cockpit-mode',
+            'scene-playback-mode',
+          ].some((mode) => doc?.body?.classList?.contains(mode));
+        if (
+          concealed ||
+          panel?.dataset?.ready !== 'true' ||
+          typeof button?.click !== 'function'
+        ) {
+          const error = concealed
+            ? 'Provider Settings is hidden in the current view. Leave that view before opening it.'
+            : 'Provider Settings is unavailable in this runtime.';
+          return {
+            ok: false,
+            action: name,
+            panelId,
+            applied: false,
+            unavailable: true,
+            error,
+            say: error,
+          };
+        }
+        button.click();
+        // Opening unhides immediately; closing removes visible before its fade ends.
+        const applied = open
+          ? !panel.hidden
+          : !panel.classList.contains('visible');
+        const say = applied
+          ? `Provider Settings is ${open ? 'open' : 'closed'}.`
+          : 'Provider Settings did not change.';
+        return {
+          ok: applied,
+          action: name,
+          panelId,
+          applied,
+          open: applied ? open : !panel.hidden,
+          say,
+          ...(!applied ? { error: say } : {}),
+        };
+      }
       setPanelOpen(styleManager, panelId, open);
       return { ok: true, action: 'set_panel_open', panelId, open };
     }
@@ -734,6 +903,25 @@ export function createGevActionRunner({
           error: `Unknown cockpit action: ${args.action || args.command || 'missing'}`,
         };
       }
+      if (args.voicePanel !== undefined) {
+        if (
+          action !== 'exit' ||
+          !['preview', 'settings'].includes(args.voicePanel)
+        )
+          return {
+            ok: false,
+            action: 'control_cockpit',
+            applied: false,
+            error: 'Voice panel reveal requires exit and a valid view.',
+          };
+        const result = await showVoicePanel(args.voicePanel, true, runOptions);
+        return {
+          ...result,
+          action: 'control_cockpit',
+          cockpitAction: 'exit',
+          voicePanel: args.voicePanel,
+        };
+      }
       const inferred = normalizeCockpitNavigationHints(rawAction);
       const targetLayer = normalizeCockpitTargetLayer(
         args.targetLayer || inferred.targetLayer || args.layer || args.layerId,
diff --git a/src/voice/gevRealtime.js b/src/voice/gevRealtime.js
index 8364a5723..6d060b9c0 100644
--- a/src/voice/gevRealtime.js
+++ b/src/voice/gevRealtime.js
@@ -50,12 +50,17 @@ export function initGevVoiceCommands(options) {
   const referents = createReferentRegistry();
   // The controller exists only after the runner, so its hooks bind late.
   const deixis = { pointer, referents, cameraKey };
-  const commands = createVoiceCommands({
+  let commands;
+  commands = createVoiceCommands({
     ...options,
     pointer,
     referents,
     runner: withToolCatalog(
-      createGevActionRunner({ ...options, deixis }),
+      createGevActionRunner({
+        ...options,
+        deixis,
+        readVoicePanelOperation: () => commands?.captureVoicePanelOperation?.(),
+      }),
       options.toolCatalog,
     ),
   });
diff --git a/src/voice/layerManifest.js b/src/voice/layerManifest.js
index eb0f09909..267399e58 100644
--- a/src/voice/layerManifest.js
+++ b/src/voice/layerManifest.js
@@ -57,6 +57,20 @@ const layers = [
     context: false,
     noQuery: 'navigation-integrity cells; no countable analyst records',
   },
+  {
+    id: 's2-ghostmaps',
+    aliases: [
+      's2 ghostmaps',
+      'ghost maps',
+      'ghostmaps',
+      's2 underground',
+      's2 intel',
+      'intel picture',
+      'common intelligence picture',
+    ],
+    context: false,
+    noQuery: 'published third-party intel placemarks; not analyst records',
+  },
   {
     id: 'flights',
     track: true,
@@ -511,6 +525,8 @@ const SELF_EVIDENT_IDS = new Set([
   'radio',
   'wind',
   'directions',
+  // The brand is already the layer id; all spoken aliases remain accepted.
+  's2-ghostmaps',
 ]);
 
 /**
@@ -525,7 +541,7 @@ export function voiceLayerAliasHint() {
       entry.toggle && entry.aliases.length && !SELF_EVIDENT_IDS.has(entry.id),
   )
     .map((entry) => `${entry.aliases.slice(0, 2).join('/')}→${entry.id}`)
-    .join('; ');
+    .join(';');
 }
 
 /** Field names that already carry their unit (altitudeM, speedKts, …). */
diff --git a/src/voice/panel/actionObserver.js b/src/voice/panel/actionObserver.js
new file mode 100644
index 000000000..c198c1148
--- /dev/null
+++ b/src/voice/panel/actionObserver.js
@@ -0,0 +1,178 @@
+/**
+ * Private action accounting prototype. Keys describe invocations, never input
+ * provenance, successful effects, provider admission or physical settlement.
+ * The supplied runAction continues to own execution and currentness.
+ */
+export function createPanelActionObserver({
+  runAction,
+  onObservation,
+  signal,
+}) {
+  if (typeof runAction !== 'function')
+    throw new TypeError('runAction is required');
+  const pending = new Map();
+  let disposed = false;
+  const publish = (type, record, details = {}) => {
+    try {
+      onObservation?.(
+        Object.freeze({
+          type,
+          key: record.key,
+          name: record.name,
+          pendingCount: pending.size,
+          ...details,
+        }),
+      );
+    } catch {
+      // A presentation observer cannot change execution or its result.
+    }
+  };
+  const release = (record) => {
+    if (!pending.delete(record.key)) return false;
+    try {
+      record.signal?.removeEventListener('abort', record.abort);
+    } catch {
+      /* Observer cleanup only. */
+    }
+    return true;
+  };
+  const retireOne = (record, reason) => {
+    if (release(record)) publish('ownership-retired', record, { reason });
+  };
+  const retire = (reason = 'owner-retired') => {
+    for (const record of [...pending.values()])
+      retireOne(record, typeof reason === 'string' ? reason : 'owner-retired');
+  };
+  const dispose = () => {
+    if (disposed) return;
+    disposed = true;
+    try {
+      signal?.removeEventListener('abort', dispose);
+    } catch {
+      /* Observer cleanup only. */
+    }
+    retire('mount-retired');
+  };
+  signal?.addEventListener('abort', dispose, { once: true });
+  if (signal?.aborted) dispose();
+
+  function observedAction(...args) {
+    if (disposed) return Reflect.apply(runAction, this, args);
+    const record = {
+      key: Object.freeze({}),
+      name: typeof args[0] === 'string' ? args[0] : undefined,
+    };
+    const originalOptions = args[2];
+    let forwarded = args;
+    // Main supplies ordinary data options. Leave exotic/accessor options intact
+    // rather than evaluating getters or pretending all custom factories fit.
+    try {
+      const prototype =
+        originalOptions == null ? null : Object.getPrototypeOf(originalOptions);
+      const descriptors =
+        originalOptions == null
+          ? {}
+          : Object.getOwnPropertyDescriptors(originalOptions);
+      const callerSignal = descriptors.signal?.value;
+      if (callerSignal instanceof AbortSignal) record.signal = callerSignal;
+      const dataOnly = Object.values(descriptors).every((d) => 'value' in d);
+      const originalProgress = descriptors.progress?.value;
+      if (
+        originalOptions !== undefined &&
+        originalOptions !== null &&
+        (prototype === Object.prototype || prototype === null) &&
+        dataOnly &&
+        (originalProgress == null || typeof originalProgress === 'function')
+      ) {
+        const progressDescriptor = descriptors.progress;
+        delete descriptors.progress;
+        const options = Object.create(prototype, descriptors);
+        Object.defineProperty(options, 'progress', {
+          configurable: true,
+          enumerable: progressDescriptor?.enumerable ?? true,
+          writable: true,
+          value: function (...updates) {
+            const receiver = this === options ? originalOptions : this;
+            const returned =
+              originalProgress == null
+                ? undefined
+                : Reflect.apply(originalProgress, receiver, updates);
+            if (pending.has(record.key)) {
+              // No raw mutable result/options/update object escapes to observers.
+              try {
+                const step = Object.getOwnPropertyDescriptor(
+                  updates[0] ?? {},
+                  'step',
+                )?.value;
+                const label = Object.getOwnPropertyDescriptor(
+                  updates[0] ?? {},
+                  'label',
+                )?.value;
+                if (typeof step === 'string')
+                  publish('progress', record, {
+                    step,
+                    ...(typeof label === 'string' ? { label } : {}),
+                  });
+              } catch {
+                /* Private metadata inspection cannot change progress. */
+              }
+            }
+            return returned;
+          },
+        });
+        forwarded = [...args];
+        forwarded[2] = options;
+      }
+    } catch {
+      // Unsupported option introspection is not an execution failure.
+    }
+    if (!record.signal?.aborted) {
+      pending.set(record.key, record);
+      record.abort = () => retireOne(record, 'caller-aborted');
+      try {
+        record.signal?.addEventListener('abort', record.abort, { once: true });
+      } catch {
+        retireOne(record, 'unobserved-signal');
+      }
+      if (pending.has(record.key)) publish('attempt-started', record);
+    }
+    const settle = (outcome) => {
+      if (release(record)) publish('attempt-settled', record, { outcome });
+    };
+    let result;
+    try {
+      result = Reflect.apply(runAction, this, forwarded);
+    } catch (error) {
+      settle('synchronous-throw');
+      throw error;
+    }
+    // The actual common session returns a same-realm native Promise. Do not
+    // assimilate arbitrary thenables, read their .then getter or invent their
+    // settlement; custom return values still reach the caller unchanged.
+    try {
+      if (result instanceof Promise) {
+        Promise.prototype.then.call(
+          result,
+          () => settle('fulfilled'),
+          () => settle('rejected'),
+        );
+      } else if (
+        result === null ||
+        !['object', 'function'].includes(typeof result)
+      ) {
+        settle('synchronous-return');
+      } else retireOne(record, 'unobserved-return-kind');
+    } catch {
+      retireOne(record, 'unobserved-return-kind');
+    }
+    return result;
+  }
+  return {
+    runAction: observedAction,
+    retire,
+    dispose,
+    get pendingCount() {
+      return pending.size;
+    },
+  };
+}
diff --git a/src/voice/panel/actionObserver.test.mjs b/src/voice/panel/actionObserver.test.mjs
new file mode 100644
index 000000000..68508385b
--- /dev/null
+++ b/src/voice/panel/actionObserver.test.mjs
@@ -0,0 +1,498 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { getEventListeners } from 'node:events';
+import { createPanelActionObserver } from './actionObserver.js';
+import { createVoiceSession } from '../session.js';
+
+function deferred() {
+  let resolve, reject;
+  const promise = new Promise((yes, no) => {
+    resolve = yes;
+    reject = no;
+  });
+  return { promise, resolve, reject };
+}
+
+test('sync value/throw, receiver, arguments and opaque unsupported result stay exact', () => {
+  const receiver = {},
+    args = {},
+    options = { extra: 7 };
+  const error = Error('original');
+  let calls = 0;
+  const events = [];
+  const observer = createPanelActionObserver({
+    onObservation: (event) => events.push(event),
+    runAction(name, received, opts, tail) {
+      assert.equal(this, receiver);
+      assert.equal(received, args);
+      assert.equal(opts.extra, 7);
+      assert.equal(tail, 'tail');
+      calls++;
+      if (name === 'throw') throw error;
+      return 42;
+    },
+  });
+  assert.equal(
+    observer.runAction.call(receiver, 'value', args, options, 'tail'),
+    42,
+  );
+  assert.throws(
+    () => observer.runAction.call(receiver, 'throw', args, options, 'tail'),
+    (e) => e === error,
+  );
+  assert.equal(calls, 2);
+  assert.equal(observer.pendingCount, 0);
+  assert.deepEqual(
+    events.filter((e) => e.type === 'attempt-settled').map((e) => e.outcome),
+    ['synchronous-return', 'synchronous-throw'],
+  );
+  const opaque = Object.defineProperty({}, 'then', {
+    get() {
+      throw Error('must not read then');
+    },
+  });
+  const another = createPanelActionObserver({ runAction: () => opaque });
+  assert.equal(another.runAction('opaque'), opaque);
+  assert.equal(another.pendingCount, 0);
+});
+
+test('native Promise identity, fulfillment object and rejection object are preserved', async () => {
+  for (const reject of [false, true]) {
+    const d = deferred(),
+      value = { exact: true },
+      events = [];
+    const observer = createPanelActionObserver({
+      runAction: () => d.promise,
+      onObservation: (e) => events.push(e),
+    });
+    const returned = observer.runAction('promise');
+    assert.equal(returned, d.promise);
+    assert.equal(observer.pendingCount, 1);
+    if (reject) {
+      d.reject(value);
+      await assert.rejects(returned, (e) => e === value);
+    } else {
+      d.resolve(value);
+      assert.equal(await returned, value);
+    }
+    assert.equal(observer.pendingCount, 0);
+    assert.equal(events.at(-1).outcome, reject ? 'rejected' : 'fulfilled');
+    assert.equal('result' in events.at(-1), false);
+    assert.equal('error' in events.at(-1), false);
+  }
+});
+
+test('null/reused callIds have independent keys and settlement cannot retire a sibling', async () => {
+  const a = deferred(),
+    b = deferred(),
+    events = [];
+  const observer = createPanelActionObserver({
+    runAction: (name) => (name === 'a' ? a.promise : b.promise),
+    onObservation: (e) => events.push(e),
+  });
+  const pa = observer.runAction('a', {}, { callId: null });
+  const pb = observer.runAction('b', {}, { callId: null });
+  const starts = events.filter((e) => e.type === 'attempt-started');
+  assert.notEqual(starts[0].key, starts[1].key);
+  assert.equal(observer.pendingCount, 2);
+  b.resolve('b');
+  await pb;
+  assert.equal(observer.pendingCount, 1);
+  assert.equal(events.at(-1).key, starts[1].key);
+  a.resolve('a');
+  await pa;
+  assert.equal(observer.pendingCount, 0);
+});
+
+test('progress preserves public-before-original-before-private order, receiver and option references', async () => {
+  const order = [],
+    signal = new AbortController().signal,
+    symbol = Symbol('unknown');
+  let currentCalls = 0;
+  const isCurrent = () => {
+    currentCalls++;
+    return true;
+  };
+  const options = {
+    signal,
+    isCurrent,
+    progress(update) {
+      assert.equal(this, options);
+      order.push('original');
+      return update;
+    },
+  };
+  Object.defineProperty(options, 'hidden', { value: 8 });
+  options[symbol] = 9;
+  const custom = {};
+  const observer = createPanelActionObserver({
+    onObservation(e) {
+      if (e.type === 'progress') order.push('private');
+    },
+    runAction(name, args, received) {
+      assert.equal(received.signal, signal);
+      assert.equal(received.isCurrent, isCurrent);
+      assert.equal(received.hidden, 8);
+      assert.equal(received[symbol], 9);
+      assert.equal(
+        Object.getOwnPropertyDescriptor(received, 'hidden').enumerable,
+        false,
+      );
+      order.push('public');
+      assert.equal(received.progress({ step: 'running' }).step, 'running');
+      return Promise.resolve();
+    },
+  });
+  await observer.runAction('action', {}, options);
+  assert.deepEqual(order, ['public', 'original', 'private']);
+  assert.equal(currentCalls, 0);
+  const explicit = createPanelActionObserver({
+    runAction(name, args, received) {
+      received.progress.call(custom, { step: 'running' });
+      return 0;
+    },
+  });
+  let originalReceiver;
+  explicit.runAction(
+    'explicit',
+    {},
+    {
+      progress() {
+        originalReceiver = this;
+      },
+    },
+  );
+  assert.equal(originalReceiver, custom);
+});
+
+test('observer faults and private metadata faults cannot replace original callback errors', async () => {
+  const originalError = Error('callback');
+  const observer = createPanelActionObserver({
+    onObservation() {
+      throw Error('observer');
+    },
+    runAction(name, args, options) {
+      options.progress({ step: 'work' });
+      return Promise.resolve('ok');
+    },
+  });
+  await assert.rejects(
+    Promise.resolve().then(() =>
+      observer.runAction(
+        'error',
+        {},
+        {
+          progress() {
+            throw originalError;
+          },
+        },
+      ),
+    ),
+    (e) => e === originalError,
+  );
+  const hostile = new Proxy(
+    {},
+    {
+      getOwnPropertyDescriptor() {
+        throw Error('private read');
+      },
+    },
+  );
+  const safe = createPanelActionObserver({
+    runAction(name, args, options) {
+      options.progress(hostile);
+      return Promise.resolve('unchanged');
+    },
+    onObservation() {
+      throw Error('observer');
+    },
+  });
+  assert.equal(await safe.runAction('safe', {}, {}), 'unchanged');
+});
+
+test('accessor/custom options are forwarded untouched without extra getter/currentness probes', async () => {
+  let reads = 0,
+    predicates = 0;
+  const options = Object.defineProperty(
+    {
+      isCurrent() {
+        predicates++;
+        return true;
+      },
+    },
+    'progress',
+    {
+      get() {
+        reads++;
+        return () => {};
+      },
+    },
+  );
+  const observer = createPanelActionObserver({
+    runAction(name, args, received) {
+      assert.equal(received, options);
+      received.progress({});
+      received.isCurrent();
+      return Promise.resolve();
+    },
+  });
+  await observer.runAction('accessor', {}, options);
+  assert.equal(reads, 1);
+  assert.equal(predicates, 1);
+  assert.equal(observer.pendingCount, 0);
+});
+
+test('real caller abort retires ownership only; late A cannot release or report over B', async () => {
+  const a = deferred(),
+    b = deferred(),
+    caller = new AbortController(),
+    events = [],
+    callbacks = [];
+  let oldOptions;
+  const observer = createPanelActionObserver({
+    onObservation: (e) => events.push(e),
+    runAction(name, args, options) {
+      if (name === 'a') oldOptions = options;
+      return name === 'a' ? a.promise : b.promise;
+    },
+  });
+  const pa = observer.runAction(
+    'a',
+    {},
+    { signal: caller.signal, progress: () => callbacks.push('original') },
+  );
+  caller.abort();
+  assert.equal(observer.pendingCount, 0);
+  assert.equal(events.at(-1).type, 'ownership-retired');
+  assert.equal(
+    events.some((e) => e.type === 'attempt-settled'),
+    false,
+  );
+  const pb = observer.runAction('b');
+  const count = events.length;
+  oldOptions.progress({ step: 'late' });
+  a.resolve('a');
+  await pa;
+  assert.deepEqual(callbacks, ['original']);
+  assert.equal(events.length, count);
+  assert.equal(observer.pendingCount, 1);
+  b.resolve('b');
+  await pb;
+  assert.equal(observer.pendingCount, 0);
+  assert.equal(getEventListeners(caller.signal, 'abort').length, 0);
+});
+
+test('already-aborted caller and disposed mount still invoke original exactly once', async () => {
+  const caller = new AbortController(),
+    mount = new AbortController();
+  caller.abort();
+  let calls = 0;
+  const events = [];
+  const observer = createPanelActionObserver({
+    signal: mount.signal,
+    onObservation: (e) => events.push(e),
+    runAction: () => {
+      calls++;
+      return Promise.resolve('original');
+    },
+  });
+  assert.equal(
+    await observer.runAction('aborted', {}, { signal: caller.signal }),
+    'original',
+  );
+  assert.equal(observer.pendingCount, 0);
+  mount.abort();
+  assert.equal(await observer.runAction('disposed'), 'original');
+  assert.equal(calls, 2);
+  assert.equal(events.length, 0);
+  assert.equal(getEventListeners(mount.signal, 'abort').length, 0);
+});
+
+test('reentrant start retirement retains only fresh ownership and never skips execution', async () => {
+  const a = deferred(),
+    b = deferred(),
+    called = [];
+  let observer, pb;
+  observer = createPanelActionObserver({
+    runAction(name) {
+      called.push(name);
+      return name === 'a' ? a.promise : b.promise;
+    },
+    onObservation(e) {
+      if (e.type === 'attempt-started' && e.name === 'a') {
+        observer.retire('actual-interruption');
+        pb = observer.runAction('b');
+      }
+    },
+  });
+  const pa = observer.runAction('a');
+  assert.deepEqual(called, ['b', 'a']);
+  assert.equal(observer.pendingCount, 1);
+  a.resolve();
+  await pa;
+  assert.equal(observer.pendingCount, 1);
+  b.resolve();
+  await pb;
+  assert.equal(observer.pendingCount, 0);
+});
+
+test('actual pinned-main common session: private invocation stream is separate from public events', async (t) => {
+  const publicEvents = [],
+    privateEvents = [],
+    order = [];
+  let hooks, observer;
+  const result = { ok: true, unchanged: true };
+  const session = createVoiceSession({
+    runner: async (name, args, options) => {
+      assert.equal(options.isCurrent(), true);
+      options.progress({ step: 'actual', label: 'Actual' });
+      return result;
+    },
+    createAdapter(h) {
+      hooks = h;
+      observer = createPanelActionObserver({
+        runAction: h.runAction,
+        signal: h.signal,
+        onObservation(e) {
+          privateEvents.push(e);
+          if (e.type === 'progress') order.push('private');
+        },
+      });
+      return {
+        start() {
+          h.emit({ type: 'state', state: 'listening' });
+        },
+        stop() {},
+        sendText() {},
+        sendMapEvent() {},
+      };
+    },
+  });
+  t.after(() => session.destroy());
+  session.subscribe((e) => {
+    publicEvents.push(e);
+    if (e.type === 'progress') order.push('public');
+  });
+  await session.start();
+  assert.equal(
+    await observer.runAction(
+      'actual',
+      {},
+      {
+        progress() {
+          order.push('caller');
+        },
+      },
+    ),
+    result,
+  );
+  assert.deepEqual(order, ['public', 'caller', 'private']);
+  const call = publicEvents.find((e) => e.type === 'action-call');
+  assert.deepEqual(call, {
+    type: 'action-call',
+    name: 'actual',
+    callId: null,
+    arguments: {},
+  });
+  assert.equal(
+    publicEvents.some((e) => e.type === 'action-settled'),
+    false,
+  );
+  assert.equal(privateEvents.at(-1).type, 'attempt-settled');
+  assert.equal(observer.pendingCount, 0);
+  assert.equal(hooks.signal.aborted, false);
+});
+
+test('actual common interruption aborts resources; injected real-lifecycle observation retires uncooperative A', async (t) => {
+  const a = deferred(),
+    b = deferred(),
+    events = [];
+  let hooks, observer, aSignal;
+  const session = createVoiceSession({
+    runner: (name, args, options) => {
+      if (name === 'a') aSignal = options.signal;
+      return name === 'a' ? a.promise : b.promise;
+    },
+    createAdapter(h) {
+      hooks = h;
+      observer = createPanelActionObserver({
+        runAction: h.runAction,
+        signal: h.signal,
+        onObservation: (e) => events.push(e),
+      });
+      return {
+        start() {
+          h.emit({ type: 'state', state: 'listening' });
+        },
+        stop() {},
+        sendText() {},
+        sendMapEvent() {},
+      };
+    },
+  });
+  t.after(() => session.destroy());
+  await session.start();
+  const pa = observer.runAction('a');
+  const rejection = assert.rejects(pa, { name: 'AbortError' });
+  hooks.emit({ type: 'interruption', reason: 'actual-common-event' });
+  assert.equal(aSignal.aborted, true);
+  // This bridge is explicitly supplied by the test, not automatically inferred.
+  observer.retire('observed-common-interruption');
+  assert.equal(observer.pendingCount, 0);
+  const pb = observer.runAction('b');
+  const count = events.length;
+  a.resolve({ ok: true });
+  await rejection;
+  assert.equal(events.length, count);
+  assert.equal(observer.pendingCount, 1);
+  b.resolve({ ok: true });
+  await pb;
+  assert.equal(observer.pendingCount, 0);
+});
+
+test('null-prototype option descriptors survive instrumentation; mount abort does not fabricate settlement', async () => {
+  const mount = new AbortController(),
+    d = deferred(),
+    events = [],
+    originalProgress = [];
+  const options = Object.assign(Object.create(null), {
+    progress: () => originalProgress.push('original'),
+  });
+  let received;
+  const observer = createPanelActionObserver({
+    signal: mount.signal,
+    onObservation: (e) => events.push(e),
+    runAction(name, args, opts) {
+      received = opts;
+      return d.promise;
+    },
+  });
+  const promise = observer.runAction('pending', {}, options);
+  assert.equal(Object.getPrototypeOf(received), null);
+  mount.abort();
+  assert.equal(observer.pendingCount, 0);
+  assert.equal(events.at(-1).type, 'ownership-retired');
+  const count = events.length;
+  received.progress({ step: 'late' });
+  d.resolve('done');
+  assert.equal(await promise, 'done');
+  assert.deepEqual(originalProgress, ['original']);
+  assert.equal(events.length, count);
+  assert.equal(getEventListeners(mount.signal, 'abort').length, 0);
+});
+
+test('omitted and explicit undefined options keep original arity and values', () => {
+  const calls = [];
+  const observer = createPanelActionObserver({
+    runAction: function (...args) {
+      calls.push(args);
+      return 1;
+    },
+  });
+  assert.equal(observer.runAction('omitted', {}), 1);
+  assert.equal(observer.runAction('explicit', {}, undefined), 1);
+  assert.equal(calls[0].length, 2);
+  assert.equal(calls[1].length, 3);
+  assert.equal(calls[0][2], undefined);
+  assert.equal(calls[1][2], undefined);
+});
diff --git a/src/voice/panel/host.js b/src/voice/panel/host.js
new file mode 100644
index 000000000..138b0a6c6
--- /dev/null
+++ b/src/voice/panel/host.js
@@ -0,0 +1,304 @@
+import { t } from '../../i18n/index.js';
+import { createManualVoicePanel } from './manualPanel.js';
+import {
+  createVoicePreferences,
+  bindPreferenceControls,
+} from './preferences.js';
+import { createPanelActionObserver } from './actionObserver.js';
+import { observeNativeActivity } from './nativeActivity.js';
+import { createVoiceInactivity } from './inactivity.js';
+
+/** One UI/preference owner across provider mounts; no semantic voice routes. */
+export function createVoicePanelHost({
+  storage,
+  clock = {},
+  readCockpitState = () => ({
+    active:
+      globalThis.document?.body?.classList?.contains('cockpit-mode') === true,
+  }),
+} = {}) {
+  const preferences = createVoicePreferences({ storage });
+  let current = null;
+  let disposed = false;
+  let saved = { view: 'preview', panelOpen: false, automatic: true };
+  function observeActions(hooks) {
+    const observer = createPanelActionObserver({
+      runAction: hooks.runAction,
+      signal: hooks.signal,
+      onObservation: () => {
+        if (current?.observer === observer) current.workChanged();
+      },
+    });
+    return observer;
+  }
+  function mount({ ui, card, session, observer, nativeProvider }) {
+    if (disposed || !ui.voicePanel || !card?.setEnabled || !card?.setPresented)
+      return null;
+    current?.destroy();
+    let dead = false;
+    let revision = 0;
+    let operationEpoch = 0;
+    let operationWrite = false;
+    let panel;
+    let idle;
+    let refreshQueued = false;
+    let automatic = saved.automatic;
+    let inputBusy = false;
+    let finalTranscript = null;
+    const presentationLifetime = new AbortController();
+    const rearm = () => {
+      if (!owns() || !session.isActive()) return;
+      automatic = true;
+      saved.automatic = true;
+      card.rearm?.();
+      // Unknown IDs cannot distinguish a fresh identical answer after input.
+      if (!finalTranscript?.id) finalTranscript = null;
+    };
+    const owns = () =>
+      !dead && !disposed && current === binding && !session.disposed;
+    const remember = ({ automatic: auto = false } = {}) => {
+      if (!auto) {
+        revision++;
+        automatic = false;
+      }
+      if (panel) {
+        const value = panel.snapshot();
+        saved = { view: value.view, panelOpen: value.panelOpen, automatic };
+      }
+    };
+    const renderActivity = () => {
+      if (ui.voiceTimeoutStatus)
+        ui.voiceTimeoutStatus.textContent =
+          nativeProvider === 'openai' || nativeProvider === 'gemini'
+            ? ''
+            : t('Automatic stop is unavailable for this voice connection.');
+    };
+    const changed = () => {
+      if (!owns()) return;
+      const busy = activity.snapshot().inputBusy;
+      if (busy && !inputBusy) rearm();
+      inputBusy = busy;
+      idle?.update({ activity: true });
+      renderActivity();
+    };
+    const activity = observeNativeActivity({
+      adapter: session.adapter,
+      nativeProvider,
+      signal: session.signal,
+      onChange: changed,
+      onInput: rearm,
+    });
+    const closeAfterStop = (ticket) => {
+      if (owns() && ticket === revision && !session.isActive()) panel.close();
+    };
+    const binding = {
+      observer,
+      get panel() {
+        return panel;
+      },
+      stopTicket: () => revision,
+      closeAfterStop,
+      workChanged: changed,
+      captureOperation() {
+        const stamp = revision;
+        const epoch = operationEpoch;
+        const isCurrent = () =>
+          owns() && stamp === revision && epoch === operationEpoch;
+        const cancelled = () => ({
+          ok: false,
+          applied: false,
+          cancelled: true,
+        });
+        return {
+          isCurrent,
+          setMinutes(value) {
+            if (!isCurrent()) return cancelled();
+            if (typeof value !== 'number' || !Number.isInteger(value))
+              return {
+                ok: false,
+                applied: false,
+                changed: false,
+                persisted: null,
+                reason: 'invalid-value',
+                minutes: preferences.snapshot().minutes,
+              };
+            let result;
+            operationWrite = true;
+            try {
+              result = preferences.setMinutes(value);
+            } finally {
+              operationWrite = false;
+            }
+            return {
+              ok: result.ok,
+              applied: result.applied,
+              changed: result.changed,
+              persisted: result.persisted,
+              minutes: result.minutes,
+              ...(result.reason ? { reason: result.reason } : {}),
+            };
+          },
+          show(view, open = true) {
+            if (!isCurrent()) return cancelled();
+            const result = open ? panel.select(view) : panel.close(view);
+            return { ...result, applied: result.ok };
+          },
+        };
+      },
+      handle(event) {
+        if (!owns()) return;
+        if (event.type !== 'state' && !session.isActive()) return;
+        if (
+          event.type === 'state' &&
+          ['connecting', 'idle', 'error'].includes(event.state)
+        ) {
+          finalTranscript = null;
+          if (event.state !== 'connecting') saved.automatic = automatic = false;
+        }
+        if (
+          event.type === 'interruption' &&
+          !event.preserveAdvisoryCaption &&
+          ['user-speech', 'user-text', 'push-to-talk'].includes(event.reason)
+        )
+          rearm();
+        if (
+          event.type === 'transcript' &&
+          event.role === 'assistant' &&
+          event.text
+        ) {
+          const id = event.responseId || event.itemId || null;
+          if (
+            finalTranscript &&
+            (id ? id === finalTranscript.id : !finalTranscript.id) &&
+            ((!event.final && id) ||
+              (event.final && event.text === finalTranscript.text))
+          )
+            return;
+          if (event.final) finalTranscript = { id, text: event.text };
+          if (
+            automatic &&
+            preferences.snapshot().previewEnabled &&
+            !readCockpitState()?.active
+          )
+            panel.select('preview', { automatic: true });
+        }
+        // A retired native boundary is not fresh input and must not revive
+        // dismissal or erase the advisory caption it explicitly preserves.
+        if (!(event.type === 'interruption' && event.preserveAdvisoryCaption))
+          card.handle(event);
+        if (
+          event.type === 'interruption' ||
+          (event.type === 'state' &&
+            ['connecting', 'idle', 'error'].includes(event.state))
+        ) {
+          operationEpoch++;
+          observer.retire('session-boundary');
+        }
+        activity.handle(event);
+        idle?.update();
+        // Native controllers finish processing after forwarding some events.
+        // One guarded microtask refresh reads the final current local state.
+        if (!refreshQueued) {
+          refreshQueued = true;
+          queueMicrotask(() => {
+            refreshQueued = false;
+            if (!owns()) return;
+            activity.handle({ type: 'refresh' });
+            idle?.update();
+          });
+        }
+      },
+      snapshot: () => ({
+        ...panel.snapshot(),
+        preferences: preferences.snapshot(),
+        activity: activity.snapshot(),
+        inactivity: idle.snapshot(),
+      }),
+      destroy() {
+        if (dead) return;
+        dead = true;
+        presentationLifetime.abort();
+        idle?.destroy();
+        activity.destroy();
+        fields.dispose();
+        observer.dispose();
+        panel.destroy();
+        session.signal.removeEventListener('abort', binding.destroy);
+        if (current === binding) current = null;
+      },
+    };
+    current = binding;
+    panel = createManualVoicePanel({
+      ui,
+      card,
+      getPreviewEnabled: () => preferences.snapshot().previewEnabled,
+      getCockpitActive: () => readCockpitState()?.active === true,
+      copy: {
+        previewEmpty: t('Voice replies appear here.'),
+        previewDisabled: t('Preview is off.'),
+      },
+      onPresentationIntent: remember,
+    });
+    const fields = bindPreferenceControls({
+      ui,
+      preferences,
+      copy: {
+        previewNote: '',
+        timeoutNote: t('These preferences stay in this browser.'),
+        notSaved: t('Your choice applies now, but could not be saved.'),
+      },
+      onChange: (state) => {
+        if (!owns()) return;
+        if (!operationWrite) revision++;
+        card.setEnabled(state.previewEnabled);
+        panel.sync();
+        idle?.setMinutes(state.minutes);
+      },
+    });
+    globalThis.window?.addEventListener(
+      'gev:cockpit-mode-changed',
+      () => {
+        if (owns()) panel.sync();
+      },
+      { signal: presentationLifetime.signal },
+    );
+    ui.root?.querySelector('#gev-voice-card-dismiss')?.addEventListener(
+      'click',
+      () => {
+        remember();
+        if (panel.snapshot().panelOpen) ui.previewTab?.focus();
+      },
+      { signal: presentationLifetime.signal },
+    );
+    card.setEnabled(preferences.snapshot().previewEnabled);
+    panel.sync();
+    idle = createVoiceInactivity({
+      readActivity: activity.snapshot,
+      readPending: () => observer.pendingCount,
+      minutes: preferences.snapshot().minutes,
+      signal: session.signal,
+      ...clock,
+      onExpire: () => {
+        if (!owns()) return;
+        const ticket = revision;
+        session.stop();
+        closeAfterStop(ticket);
+      },
+    });
+    if (saved.panelOpen) panel.select(saved.view, { automatic: true });
+    renderActivity();
+    session.signal.addEventListener('abort', binding.destroy, { once: true });
+    if (session.signal.aborted) binding.destroy();
+    return binding;
+  }
+  return {
+    observeActions,
+    mount,
+    snapshot: () => preferences.snapshot(),
+    destroy() {
+      if (disposed) return;
+      current?.destroy();
+      disposed = true;
+    },
+  };
+}
diff --git a/src/voice/panel/host.test.mjs b/src/voice/panel/host.test.mjs
new file mode 100644
index 000000000..ce8d6e50d
--- /dev/null
+++ b/src/voice/panel/host.test.mjs
@@ -0,0 +1,756 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createVoiceControl } from '../control.js';
+import { createGevActionRunner } from '../gevActions.js';
+import { createVoiceCommands as bind } from '../sessionCommands.js';
+import { createVoiceCommands as compose } from '../commands.js';
+import { createProviderCommands } from '../providerCommands.js';
+import { createVoicePanelHost } from './host.js';
+import { installPanelDom, controlledClock } from './testDom.mjs';
+
+function factory(instances, { stopError = null, native = false } = {}) {
+  return (hooks) => {
+    const input = {
+      pushToTalkKeyHeld: false,
+      setMicrophoneEnabled() {},
+      releasePushToTalkKey() {
+        this.pushToTalkKeyHeld = false;
+      },
+      resetSession() {},
+    };
+    const controller = native
+      ? {
+          input,
+          _input: input,
+          _turns: { observeSpeech() {} },
+          status: 'idle',
+          dc: null,
+          sendTextCommand(text) {
+            if (!text) return false;
+            hooks.emit({
+              type: 'pointer',
+              pointer: { kind: 'here', label: 'Typed target' },
+            });
+          },
+          createAudio(options) {
+            this.audioCallbacks = options;
+            return {
+              pending: false,
+              play() {},
+              clearPlayback() {},
+              close() {},
+            };
+          },
+          handleMessage() {},
+          userActivityOpen: false,
+          pendingTools: 0,
+          isActive: () => true,
+        }
+      : {};
+    const adapter = {
+      controller,
+      capabilities: { pushToTalk: true },
+      starts: 0,
+      stops: 0,
+      bindControls() {},
+      start() {
+        this.starts++;
+        if (native) {
+          hooks.emit({ type: 'state', state: 'connecting' });
+          controller.audio = controller.createAudio({ pushToTalk: false });
+          hooks.emit({ type: 'state', state: 'connecting' });
+          // Native open-mic startup marks presentation pending before speech.
+          controller.userTurnPending = true;
+        }
+        hooks.emit({ type: 'state', state: 'listening' });
+      },
+      stop() {
+        this.stops++;
+        if (stopError) throw stopError;
+      },
+      sendText: () => false,
+      sendMapEvent() {},
+      getStartOptions: () => ({ pushToTalk: false }),
+      hooks,
+      input,
+    };
+    instances.push(adapter);
+    return adapter;
+  };
+}
+function mounted(t, options = {}) {
+  const doc = installPanelDom(t);
+  const clock = controlledClock();
+  const host = createVoicePanelHost({
+    storage: options.storage ?? null,
+    clock,
+    readCockpitState: options.readCockpitState,
+  });
+  const instances = [];
+  const commands = bind({
+    runner: options.runner ?? (async () => ({ ok: true })),
+    dataManager: { layers: new Map() },
+    createSession: factory(instances, options),
+    panelHost: host,
+    nativePanelProvider: options.native
+      ? (options.nativeProvider ?? 'gemini')
+      : null,
+  });
+  t.after(() => {
+    try {
+      commands.session.destroy();
+    } catch {}
+    host.destroy();
+  });
+  return { doc, clock, host, instances, commands, ui: commands.ui };
+}
+
+test('actual control default remains opt-out; panel markup has unique controlled panes and an outside alert', (t) => {
+  const doc = installPanelDom(t);
+  const baseline = createVoiceControl();
+  assert.equal(baseline.voicePanel, null);
+  const ui = createVoiceControl({ reset: true, panel: true });
+  assert.equal(doc.getElementById('gev-voice-panel'), ui.voicePanel);
+  assert.equal(
+    ui.voiceSettingsButton.getAttribute('aria-controls'),
+    ui.voicePanel.id,
+  );
+  assert.equal(ui.previewTab.getAttribute('aria-controls'), ui.previewPanel.id);
+  assert.equal(
+    ui.settingsTab.getAttribute('aria-controls'),
+    ui.voiceSettingsPanel.id,
+  );
+  assert.equal(ui.previewPanel.contains(ui.card), true);
+  assert.equal(
+    ui.voicePanel.contains(ui.root.querySelector('.gev-voice-error-tray')),
+    false,
+  );
+  assert.equal(ui.root.querySelectorAll('#gev-voice-card').length, 1);
+});
+
+test('actual binder/card has launcher toggle, idempotent tabs, focus and disabled Preview', (t) => {
+  const { ui, commands, doc } = mounted(t);
+  ui.voiceSettingsButton.fire('click');
+  assert.equal(commands.voicePanel.snapshot().settingsOpen, true);
+  ui.voiceSettingsButton.fire('click');
+  assert.equal(commands.voicePanel.snapshot().panelOpen, false);
+  ui.settingsTab.fire('click');
+  ui.settingsTab.fire('keydown', { key: 'End' });
+  assert.equal(commands.voicePanel.snapshot().settingsOpen, true);
+  ui.settingsTab.fire('click');
+  assert.equal(commands.voicePanel.snapshot().settingsOpen, true);
+  commands.voicePanel.select('preview');
+  commands.voiceCard.handle({
+    type: 'transcript',
+    role: 'assistant',
+    final: true,
+    text: 'A visible reply',
+  });
+  const dismiss = ui.root.querySelector('#gev-voice-card-dismiss');
+  dismiss.focus();
+  dismiss.fire('click');
+  assert.equal(ui.card.hidden, true);
+  assert.equal(commands.voicePanel.snapshot().panelOpen, true);
+  assert.equal(doc.activeElement?.id, ui.previewTab.id);
+  ui.voicePanel.fire('keydown', { key: 'Escape', target: doc.activeElement });
+  assert.equal(commands.voicePanel.snapshot().panelOpen, false);
+  commands.voicePanel.select('settings');
+  ui.voicePreviewInput.checked = false;
+  ui.voicePreviewInput.fire('change');
+  commands.voicePanel.select('preview');
+  commands.voiceCard.handle({
+    type: 'transcript',
+    role: 'assistant',
+    final: true,
+    text: 'A hidden reply',
+  });
+  assert.equal(ui.card.hidden, true);
+  assert.equal(ui.previewEmpty.textContent, 'Preview is off.');
+  ui.previewTab.focus();
+  ui.voicePanel.fire('keydown', { key: 'Escape' });
+  assert.equal(doc.activeElement, ui.voiceSettingsButton);
+  commands.voiceCard.handle({
+    type: 'transcript',
+    role: 'assistant',
+    final: true,
+    text: 'Later reply',
+  });
+  assert.equal(commands.voicePanel.snapshot().panelOpen, false);
+});
+
+test('actual facade remount keeps failed-save live preferences/view and manual close, with no restore writes or focus theft', async (t) => {
+  const doc = installPanelDom(t);
+  const writes = [];
+  const storage = {
+    getItem: () => null,
+    setItem(key, value) {
+      writes.push([key, value]);
+      throw Error('blocked');
+    },
+  };
+  const host = createVoicePanelHost({ storage });
+  const instances = [];
+  const commands = createProviderCommands(
+    {
+      runner: async () => ({}),
+      dataManager: { layers: new Map() },
+      supportedProviders: ['openai', 'gemini'],
+    },
+    {
+      bind: (options) => bind({ ...options, panelHost: host }),
+      factories: { openai: factory(instances), gemini: factory(instances) },
+      storage,
+    },
+  );
+  t.after(() => {
+    commands.destroy();
+    host.destroy();
+  });
+  const old = commands.ui;
+  commands.voicePanel.select('settings');
+  old.voicePreviewInput.checked = false;
+  old.voicePreviewInput.fire('change');
+  old.voiceTimeoutInput.value = '7';
+  old.voiceTimeoutSelect.value = 'custom';
+  old.voiceTimeoutSelect.fire('change');
+  const preferenceWrites = () =>
+    writes.filter(([key]) => key.startsWith('godsEyeView.voice.')).length;
+  assert.equal(preferenceWrites(), 2);
+  old.providerSelect.value = 'gemini';
+  old.providerSelect.fire('change');
+  assert.notEqual(commands.ui, old);
+  assert.equal(old.root.isConnected, false);
+  assert.equal(commands.voicePanel.snapshot().settingsOpen, true);
+  assert.deepEqual(commands.getVoicePreferences(), {
+    previewEnabled: false,
+    minutes: 7,
+    previewPersisted: false,
+    timeoutPersisted: false,
+  });
+  assert.equal(commands.ui.voicePreviewInput.checked, false);
+  assert.match(commands.ui.voiceTimeoutNote.textContent, /could not be saved/);
+  assert.equal(preferenceWrites(), 2);
+  assert.equal(doc.activeElement, commands.ui.providerSelect);
+  commands.ui.voicePreviewInput.checked = true;
+  commands.ui.voicePreviewInput.fire('change');
+  commands.voicePanel.close();
+  await commands.start();
+  const retired = instances[1];
+  commands.ui.providerSelect.value = 'openai';
+  commands.ui.providerSelect.fire('change');
+  await commands.start();
+  assert.equal(commands.session.isActive(), true);
+  retired.hooks.emit({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Retired output',
+    final: true,
+  });
+  const emit = instances[2].hooks.emit;
+  emit({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Current output after remount',
+    final: true,
+  });
+  assert.equal(commands.voicePanel.snapshot().panelOpen, false);
+  emit({ type: 'interruption', reason: 'user-speech' });
+  emit({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Reply after genuine input',
+    final: true,
+  });
+  assert.equal(commands.voicePanel.snapshot().previewVisible, true);
+});
+
+test('explicit successful mic Stop closes; failed Stop idle and startup error do not', async (t) => {
+  const good = mounted(t);
+  await good.commands.session.start();
+  good.commands.voicePanel.select('settings');
+  good.ui.button.fire('click');
+  assert.equal(good.commands.voicePanel.snapshot().panelOpen, false);
+  const error = Error('stop failed');
+  const bad = mounted(t, { stopError: error });
+  await bad.commands.session.start();
+  bad.commands.voicePanel.select('settings');
+  assert.throws(
+    () => bad.ui.button.fire('click'),
+    (value) => value === error,
+  );
+  assert.equal(bad.commands.session.state, 'idle');
+  assert.equal(bad.commands.voicePanel.snapshot().settingsOpen, true);
+  bad.instances[0].hooks.emit({
+    type: 'state',
+    state: 'error',
+    detail: 'startup failed',
+  });
+  assert.equal(bad.commands.voicePanel.snapshot().settingsOpen, true);
+});
+
+test('reentrant manual choice/new start during Stop cannot close the successor choice', async (t) => {
+  const f = mounted(t);
+  await f.commands.session.start();
+  f.commands.voicePanel.select('settings');
+  const unsubscribe = f.commands.session.subscribe((event) => {
+    if (event.type === 'state' && event.state === 'idle')
+      f.commands.voicePanel.select('preview');
+  });
+  f.ui.button.fire('click');
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, true);
+  assert.equal(f.commands.voicePanel.snapshot().view, 'preview');
+  unsubscribe();
+});
+
+test('integrated inactivity rechecks held PTT at expiry, then normal stop closes on later quiet expiry', async (t) => {
+  const f = mounted(t, { native: true });
+  await f.commands.session.start();
+  f.commands.voicePanel.select('settings');
+  f.ui.voiceTimeoutInput.value = '1';
+  f.ui.voiceTimeoutSelect.value = 'custom';
+  f.ui.voiceTimeoutSelect.fire('change');
+  f.instances[0].input.pushToTalkKeyHeld = true;
+  f.clock.advance(60000);
+  assert.equal(f.instances[0].stops, 0);
+  f.instances[0].input.releasePushToTalkKey();
+  f.clock.advance(60000);
+  assert.equal(f.instances[0].stops, 1);
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, false);
+});
+
+test('None cancels integrated app timer and unknown custom hosts never guess expiry', async (t) => {
+  const native = mounted(t, { native: true });
+  await native.commands.session.start();
+  native.ui.voiceTimeoutSelect.value = '0';
+  native.ui.voiceTimeoutSelect.fire('change');
+  native.clock.advance(600000);
+  assert.equal(native.instances[0].stops, 0);
+  assert.equal(native.commands.getVoicePreferences().minutes, 0);
+  const unknown = mounted(t);
+  await unknown.commands.session.start();
+  unknown.clock.advance(600000);
+  assert.equal(unknown.instances[0].stops, 0);
+  assert.match(unknown.ui.voiceTimeoutStatus.textContent, /unavailable/);
+});
+
+test('transient native OpenAI response activity does not announce connection unavailability', async (t) => {
+  const f = mounted(t, { native: true, nativeProvider: 'openai' });
+  await f.commands.session.start();
+  f.ui.voiceTimeoutInput.value = '1';
+  f.ui.voiceTimeoutSelect.value = 'custom';
+  f.ui.voiceTimeoutSelect.fire('change');
+  f.instances[0].controller._turns.observeSpeech({ type: 'response.created' });
+  assert.equal(f.ui.voiceTimeoutStatus.textContent, '');
+  f.clock.advance(60000);
+  assert.equal(f.instances[0].stops, 0, 'unknown output still prevents expiry');
+  f.instances[0].controller._turns.observeSpeech({
+    type: 'output_audio_buffer.cleared',
+  });
+  f.clock.advance(60000);
+  assert.equal(f.instances[0].stops, 1, 'known quiet output permits expiry');
+});
+
+test('native factory with custom controller remains uninstrumented despite panel opt-in', (t) => {
+  installPanelDom(t);
+  let inspected = 0;
+  const commands = compose({
+    panel: true,
+    panelStorage: null,
+    runner: async () => ({}),
+    dataManager: { layers: new Map() },
+    createController: (options) => ({
+      ui: options.ui,
+      get _turns() {
+        inspected++;
+        throw Error('custom internal getter');
+      },
+      start() {},
+      stop() {},
+      sendTextCommand() {},
+      notifyMapEvent() {},
+      syncCostUi() {},
+      bindPushToTalkShortcut() {},
+      toggleVoiceTier() {},
+    }),
+  });
+  t.after(() => commands.session.destroy());
+  assert.equal(inspected, 0);
+  assert.equal(commands.getVoicePanelState().activity.known, false);
+  assert.equal(inspected, 0);
+});
+
+test('native connecting phases retain output observation; idle starts before first speech and waits for drain', async (t) => {
+  const f = mounted(t, { native: true });
+  await f.commands.session.start();
+  const adapter = f.instances[0];
+  const controller = adapter.controller;
+  assert.equal(
+    f.commands.getVoicePanelState().inactivity.eligible,
+    true,
+    'open microphone presentation-pending is not admitted speech',
+  );
+  controller.audio.pending = true;
+  controller.handleMessage({});
+  f.clock.advance(300000);
+  assert.equal(adapter.stops, 0);
+  assert.equal(f.commands.getVoicePanelState().activity.outputBusy, true);
+  controller.audio.pending = false;
+  controller.audioCallbacks.onDrain();
+  f.clock.advance(300000);
+  assert.equal(adapter.stops, 1);
+});
+
+async function directActions(
+  t,
+  { storage = null, delayExit = false, exposePanel = true } = {},
+) {
+  installPanelDom(t);
+  let f, releaseExit;
+  const state = { active: true, exits: 0, visual: [] };
+  const styleManager = {
+    getCockpitState: () => ({ active: state.active }),
+    controlCockpit(action) {
+      assert.equal(action, 'exit');
+      state.exits++;
+      state.active = false;
+      const result = { ok: true, state: { active: false } };
+      return delayExit
+        ? new Promise((resolve) => {
+            releaseExit = () => resolve(result);
+          })
+        : result;
+    },
+    setPanelCollapsed(...args) {
+      state.visual.push(args);
+    },
+  };
+  const runner = createGevActionRunner({
+    viewer: {
+      clock: { onTick: { addEventListener: () => () => {} } },
+      scene: { canvas: { addEventListener() {}, removeEventListener() {} } },
+      camera: { moveEnd: { addEventListener() {} } },
+    },
+    styleManager,
+    dataManager: { layers: new Map(), getAll: () => [] },
+    readVoicePanelOperation: () =>
+      exposePanel ? f?.commands.captureVoicePanelOperation() : undefined,
+  });
+  f = mounted(t, { native: true, runner, storage });
+  await f.commands.session.start();
+  return {
+    ...f,
+    runner,
+    state,
+    run: f.instances[0].hooks.runAction,
+    releaseExit: () => releaseExit(),
+  };
+}
+
+test('actual runner applies exact timeout directly and reports live-unsaved truth, invalid/cancelled attempts stay inert', async (t) => {
+  const f = await directActions(t);
+  const result = await f.run('set_voice_inactivity_timeout', { minutes: 7 });
+  assert.equal(result.applied, true);
+  assert.equal(result.persisted, false);
+  assert.equal(result.minutes, 7);
+  assert.match(result.say, /could not be saved/);
+  assert.equal(f.commands.getVoicePreferences().minutes, 7);
+  const invalid = await f.run('set_voice_inactivity_timeout', { minutes: 7.5 });
+  assert.equal(invalid.applied, false);
+  assert.equal(f.commands.getVoicePreferences().minutes, 7);
+  const abort = new AbortController();
+  abort.abort();
+  const cancelled = await f.runner(
+    'set_voice_inactivity_timeout',
+    { minutes: 2 },
+    { signal: abort.signal },
+  );
+  assert.equal(cancelled.cancelled, true);
+  assert.equal(f.commands.getVoicePreferences().minutes, 7);
+  const operation = f.commands.captureVoicePanelOperation();
+  f.commands.session.stop();
+  assert.equal(operation.setMinutes(2).cancelled, true);
+});
+
+test('named voice settings exits Cockpit directly; Preview stays disabled and visual presets stay separate from Scenes', async (t) => {
+  const f = await directActions(t);
+  const result = await f.run('set_panel_open', {
+    panelId: 'voice-settings',
+    open: true,
+  });
+  assert.equal(f.state.exits, 1);
+  assert.equal(result.settingsOpen, true);
+  f.ui.voicePreviewInput.checked = false;
+  f.ui.voicePreviewInput.fire('change');
+  const preview = await f.run('set_panel_open', {
+    panelId: 'voice control',
+    open: true,
+  });
+  assert.equal(preview.view, 'preview');
+  assert.equal(preview.previewEnabled, false);
+  assert.equal(f.commands.getVoicePreferences().previewEnabled, false);
+  for (const panelId of [
+    'visual styles',
+    'visual preset',
+    'visual presets',
+    'scenes',
+  ])
+    await f.run('set_panel_open', { panelId, open: true });
+  assert.equal(f.state.exits, 1);
+  assert.deepEqual(
+    f.state.visual.map(([id]) => id),
+    ['control-panel', 'control-panel', 'control-panel', 'scene-panel'],
+  );
+  await assert.rejects(
+    () => f.run('set_panel_open', { panelId: 'settings', open: true }),
+    /Unknown panel: settings/,
+  );
+  assert.equal(
+    f.state.visual.length,
+    4,
+    'an unnamed settings target never guesses a panel',
+  );
+});
+
+test('canonical exit reveals requested voice UI; newer manual choice or Stop defeats pending reveal', async (t) => {
+  const f = await directActions(t, { delayExit: true });
+  const pending = f.run('control_cockpit', {
+    action: 'exit',
+    voicePanel: 'settings',
+  });
+  f.commands.voicePanel.select('preview');
+  f.releaseExit();
+  const result = await pending;
+  assert.equal(result.cancelled, true);
+  assert.equal(f.state.active, false);
+  assert.equal(result.exit.ok, true);
+  assert.equal(result.cockpitExited, true);
+  assert.match(result.say, /Cockpit exited/);
+  assert.equal(f.commands.voicePanel.snapshot().view, 'preview');
+  f.state.active = true;
+  const alias = f.run('control_cockpit', {
+    action: 'leave cockpit',
+    voicePanel: 'settings',
+  });
+  f.releaseExit();
+  assert.equal((await alias).settingsOpen, true);
+  f.commands.voicePanel.select('preview');
+  f.state.active = true;
+  const stopped = f.run('control_cockpit', {
+    action: 'quit cockpit',
+    voicePanel: 'settings',
+  });
+  f.commands.session.stop();
+  f.releaseExit();
+  await assert.rejects(stopped, { name: 'AbortError' });
+  assert.equal(f.commands.voicePanel.snapshot().view, 'preview');
+});
+
+test('unavailable host refuses direct voice operations before Cockpit or preference effects', async (t) => {
+  const f = await directActions(t, { exposePanel: false });
+  const timeout = await f.run('set_voice_inactivity_timeout', { minutes: 1 });
+  assert.equal(timeout.unavailable, true);
+  assert.equal(timeout.applied, false);
+  const panel = await f.run('set_panel_open', {
+    panelId: 'voice-settings',
+    open: true,
+  });
+  assert.equal(panel.unavailable, true);
+  assert.equal(f.state.exits, 0);
+  assert.equal(f.commands.getVoicePreferences().minutes, 5);
+});
+
+test('voice timeout change preserves a pending voice reveal', async (t) => {
+  const f = await directActions(t, { delayExit: true });
+  const pending = f.run('control_cockpit', {
+    action: 'exit',
+    voicePanel: 'settings',
+  });
+  const timeout = await f.run('set_voice_inactivity_timeout', { minutes: 0 });
+  assert.equal(timeout.minutes, 0);
+  assert.equal(timeout.applied, true);
+  f.releaseExit();
+  const result = await pending;
+  assert.equal(result.settingsOpen, true);
+  assert.equal(f.commands.getVoicePreferences().minutes, 0);
+});
+
+test('active provider output reveals Preview after done; manual choice wins until genuine input, replays do not reset idle', async (t) => {
+  const f = mounted(t, { native: true, nativeProvider: 'openai' });
+  await f.commands.session.start();
+  const emit = f.instances[0].hooks.emit;
+  const reply = (text, responseId = 'r1', extra = {}) =>
+    emit({
+      type: 'transcript',
+      role: 'assistant',
+      text,
+      responseId,
+      final: true,
+      ...extra,
+    });
+  emit({ type: 'completion', responseId: 'r1' });
+  reply('Late answer');
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, true);
+  const timer = f.commands.voiceCard.hideTimer;
+  reply('Late answer');
+  reply('Late', 'r1', { final: false });
+  assert.equal(f.commands.voiceCard.hideTimer, timer);
+  assert.equal(f.commands.voiceCard.state.assistant, 'Late answer');
+  f.commands.voicePanel.close();
+  emit({
+    type: 'transcript',
+    role: 'user',
+    text: 'advisory caption',
+    final: false,
+  });
+  f.commands.voiceCard.handle({ type: 'dismiss' });
+  const advisory = f.commands.voiceCard.state.user;
+  emit({
+    type: 'interruption',
+    reason: 'user-speech',
+    preserveAdvisoryCaption: true,
+  });
+  assert.equal(f.commands.voiceCard.state.dismissed, true);
+  assert.equal(f.commands.voiceCard.state.user, advisory);
+  reply('Older reply', 'r2');
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, false);
+  emit({ type: 'interruption', reason: 'user-speech' });
+  reply('A reply with no newest-request attribution', 'older-id');
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, true);
+  f.commands.voicePanel.select('settings');
+  reply('Another reply', 'r3');
+  assert.equal(f.commands.voicePanel.snapshot().settingsOpen, true);
+  f.commands.voicePanel.close();
+  f.commands.voiceCard.handle({ type: 'dismiss' });
+  f.commands.sendTextCommand('Show the typed target');
+  reply('Typed reply', 'typed-id');
+  assert.equal(f.commands.voicePanel.snapshot().previewVisible, true);
+  assert.equal(f.commands.voiceCard.state.dismissed, false);
+  assert.equal(f.commands.voiceCard.state.pointer.label, 'Typed target');
+  f.commands.session.stop();
+  reply('Stopped stale output', 'r4');
+  assert.equal(f.commands.voiceCard.state.assistant, null);
+  f.commands.session.destroy();
+  reply('Disposed stale output', 'r5');
+  assert.equal(f.commands.voicePanel.snapshot().panelOpen, false);
+});
+
+test('Preview off and actual Cockpit state suppress automatic presentation without enabling preference', async (t) => {
+  let cockpit = false;
+  const f = mounted(t, {
+    native: true,
+    readCockpitState: () => ({ active: cockpit }),
+  });
+  await f.commands.session.start();
+  const emit = f.instances[0].hooks.emit;
+  const reply = (text) =>
+    emit({ type: 'transcript', role: 'assistant', text, final: true });
+  reply('Visible');
+  f.ui.previewTab.focus();
+  cockpit = true;
+  window.dispatchEvent(new Event('gev:cockpit-mode-changed'));
+  assert.equal(f.ui.voicePanel.hidden, true);
+  assert.equal(f.doc.activeElement, f.ui.voiceSettingsButton);
+  f.commands.voicePanel.select('settings', { focus: true });
+  assert.equal(f.doc.activeElement, f.ui.settingsTab);
+  f.commands.voicePanel.select('preview', { focus: true });
+  assert.equal(f.doc.activeElement, f.ui.voiceSettingsButton);
+  const outside = f.doc.createElement('button');
+  f.doc.body.appendChild(outside);
+  outside.focus();
+  window.dispatchEvent(new Event('gev:cockpit-mode-changed'));
+  assert.equal(f.doc.activeElement, outside);
+  assert.equal(f.commands.voicePanel.snapshot().previewVisible, false);
+  reply('Suppressed in Cockpit');
+  assert.equal(f.ui.voicePanel.hidden, true);
+  f.commands.voicePanel.close();
+  cockpit = false;
+  window.dispatchEvent(new Event('gev:cockpit-mode-changed'));
+  assert.equal(f.ui.voicePanel.hidden, true);
+  f.ui.voicePreviewInput.checked = false;
+  f.ui.voicePreviewInput.fire('change');
+  emit({ type: 'interruption', reason: 'user-speech' });
+  reply('Preference stays off');
+  assert.equal(f.ui.voicePanel.hidden, true);
+  assert.equal(f.commands.getVoicePreferences().previewEnabled, false);
+});
+
+test('Provider Settings uses its ready dialog handlers and refuses unavailable or cancelled requests', async (t) => {
+  const f = await directActions(t);
+  t.mock.timers.enable({ apis: ['setTimeout'] });
+  const request = (open, options) =>
+    f.run('set_panel_open', { panelId: 'provider-settings', open }, options);
+  assert.equal((await request(true)).unavailable, true);
+  const doc = globalThis.document;
+  const chip = doc.createElement('button');
+  chip.id = 'key-setup-chip';
+  const panel = doc.createElement('aside');
+  panel.id = 'key-setup';
+  panel.hidden = true;
+  const close = doc.createElement('button');
+  panel.appendChild(close);
+  doc.body.append(chip, panel);
+  const query = panel.querySelector.bind(panel);
+  panel.querySelector = (selector) =>
+    selector === '[data-key-setup-close]' ? close : query(selector);
+  chip.click = () => chip.fire('click');
+  close.click = () => close.fire('click');
+  let frames = 0;
+  const previousFrame = globalThis.requestAnimationFrame;
+  globalThis.requestAnimationFrame = (callback) => {
+    frames++;
+    callback();
+  };
+  t.after(() => {
+    if (previousFrame === undefined) delete globalThis.requestAnimationFrame;
+    else globalThis.requestAnimationFrame = previousFrame;
+  });
+  const { initKeySetup } = await import('../../keySetup.js');
+  let finishStatus;
+  const pending = initKeySetup({
+    documentRef: doc,
+    fetchImpl: () =>
+      new Promise((resolve) => {
+        finishStatus = resolve;
+      }),
+  });
+  assert.equal(
+    (await request(true)).unavailable,
+    true,
+    'initializing is not ready',
+  );
+  finishStatus({
+    ok: true,
+    json: async () => ({ keys: [], setCount: 0, total: 1 }),
+  });
+  const setup = await pending;
+  t.after(() => setup.destroy());
+  doc.body.classList.add('cockpit-mode');
+  assert.equal((await request(true)).unavailable, true);
+  assert.equal(
+    panel.hidden,
+    true,
+    'a concealed view cannot schedule a later surprise reveal',
+  );
+  doc.body.classList.remove('cockpit-mode');
+  const abort = new AbortController();
+  abort.abort();
+  await assert.rejects(() => request(true, { signal: abort.signal }), {
+    name: 'AbortError',
+  });
+  assert.equal(panel.hidden, true);
+  assert.equal((await request(true)).ok, true);
+  assert.equal(panel.hidden, false);
+  assert.equal(panel.classList.contains('visible'), true);
+  assert.equal((await request(true)).ok, true);
+  assert.equal(frames, 1, 'repeated open reuses the dialog');
+  assert.equal((await request(false)).ok, true);
+  assert.equal(panel.classList.contains('visible'), false);
+  t.mock.timers.tick(400);
+  assert.equal(panel.hidden, true);
+  assert.equal((await request(false)).ok, true);
+  assert.equal(
+    f.state.visual.length,
+    0,
+    'provider setup never opens a visual or scene panel',
+  );
+});
diff --git a/src/voice/panel/inactivity.js b/src/voice/panel/inactivity.js
new file mode 100644
index 000000000..7f92ae053
--- /dev/null
+++ b/src/voice/panel/inactivity.js
@@ -0,0 +1,77 @@
+/** Local inactivity only. Unknown activity never authorizes expiry. */
+export function createVoiceInactivity({
+  readActivity,
+  readPending,
+  minutes = 5,
+  onExpire,
+  signal,
+  setTimer = setTimeout,
+  clearTimer = clearTimeout,
+  now = Date.now,
+}) {
+  if (!Number.isInteger(minutes) || minutes < 0 || minutes > 60) minutes = 5;
+  let disposed = false,
+    timer = null,
+    deadline = null,
+    eligible = false,
+    epoch = 0;
+  function cancel() {
+    epoch++;
+    if (timer !== null) clearTimer(timer);
+    timer = deadline = null;
+  }
+  function quiet() {
+    const a = readActivity();
+    return (
+      a.known &&
+      a.connected &&
+      !a.held &&
+      !a.inputBusy &&
+      !a.outputBusy &&
+      !a.generationBusy &&
+      !readPending()
+    );
+  }
+  function arm() {
+    cancel();
+    if (!minutes || disposed) return;
+    const id = epoch;
+    deadline = now() + minutes * 60000;
+    timer = setTimer(() => {
+      if (disposed || id !== epoch) return;
+      timer = deadline = null;
+      eligible = quiet();
+      if (eligible) onExpire?.();
+    }, minutes * 60000);
+  }
+  function update({ activity = false } = {}) {
+    if (disposed) return;
+    const next = quiet();
+    if (!next) cancel();
+    else if (!eligible || activity) arm();
+    eligible = next;
+  }
+  function setMinutes(value) {
+    if (!Number.isInteger(value) || value < 0 || value > 60) return false;
+    if (disposed) return false;
+    minutes = value;
+    eligible = false;
+    update();
+    return true;
+  }
+  function destroy() {
+    if (disposed) return;
+    disposed = true;
+    cancel();
+    signal?.removeEventListener('abort', destroy);
+  }
+  signal?.addEventListener('abort', destroy, { once: true });
+  if (signal?.aborted) destroy();
+  update();
+  return {
+    update,
+    setMinutes,
+    snapshot: () => ({ minutes, deadline, eligible, disposed }),
+    destroy,
+  };
+}
diff --git a/src/voice/panel/inactivity.test.mjs b/src/voice/panel/inactivity.test.mjs
new file mode 100644
index 000000000..aaf54d4ac
--- /dev/null
+++ b/src/voice/panel/inactivity.test.mjs
@@ -0,0 +1,108 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createVoiceInactivity } from './inactivity.js';
+function fixture() {
+  let activity = {
+    known: true,
+    connected: true,
+    held: false,
+    inputBusy: false,
+    outputBusy: false,
+    generationBusy: false,
+  };
+  let pending = 0,
+    expired = 0,
+    time = 100,
+    serial = 0;
+  const timers = new Map();
+  const idle = createVoiceInactivity({
+    readActivity: () => activity,
+    readPending: () => pending,
+    onExpire: () => expired++,
+    now: () => time,
+    setTimer: (fn, delay) => {
+      timers.set(++serial, { fn, delay });
+      return serial;
+    },
+    clearTimer: (id) => timers.delete(id),
+  });
+  return {
+    idle,
+    activity,
+    timers,
+    setPending: (n) => (pending = n),
+    expired: () => expired,
+    fire: () => {
+      const entry = [...timers][0];
+      timers.delete(entry[0]);
+      entry[1].fn();
+    },
+    tick: (n) => (time += n),
+  };
+}
+test('one clock; quiet arms default five minutes; busy blocks and quiescence rearms', () => {
+  const f = fixture();
+  assert.equal([...f.timers.values()][0].delay, 300000);
+  assert.equal(f.idle.snapshot().deadline, 300100);
+  f.activity.outputBusy = true;
+  f.idle.update();
+  assert.equal(f.timers.size, 0);
+  f.activity.outputBusy = false;
+  f.tick(200);
+  f.idle.update();
+  assert.equal(f.idle.snapshot().deadline, 300300);
+  f.fire();
+  assert.equal(f.expired(), 1);
+});
+test('actual activity resets but silent unchanged snapshots do not', () => {
+  const f = fixture();
+  const deadline = f.idle.snapshot().deadline;
+  f.tick(1000);
+  f.idle.update();
+  assert.equal(f.idle.snapshot().deadline, deadline);
+  f.idle.update({ activity: true });
+  assert.equal(f.idle.snapshot().deadline, deadline + 1000);
+});
+test('None cancels; invalid values cannot replace setting; explicit retry rearms', () => {
+  const f = fixture();
+  assert.equal(f.idle.setMinutes(0), true);
+  assert.equal(f.timers.size, 0);
+  for (const bad of [1.5, -1, 61, '5', NaN])
+    assert.equal(f.idle.setMinutes(bad), false);
+  assert.equal(f.idle.setMinutes(1), true);
+  assert.equal([...f.timers.values()][0].delay, 60000);
+});
+test('expiry rereads held, unknown and pending counts despite missing update', () => {
+  for (const kind of ['held', 'unknown', 'pending']) {
+    const f = fixture();
+    if (kind === 'held') f.activity.held = true;
+    if (kind === 'unknown') f.activity.known = false;
+    if (kind === 'pending') f.setPending(2);
+    f.fire();
+    assert.equal(f.expired(), 0);
+  }
+});
+test('pending siblings and held-before-connect forbid timer; stale callback cannot expire', () => {
+  const f = fixture();
+  const stale = [...f.timers.values()][0].fn;
+  f.setPending(2);
+  f.idle.update();
+  stale();
+  assert.equal(f.expired(), 0);
+  f.setPending(1);
+  f.idle.update();
+  assert.equal(f.timers.size, 0);
+  f.setPending(0);
+  f.activity.connected = false;
+  f.activity.held = true;
+  f.idle.update();
+  assert.equal(f.timers.size, 0);
+  f.activity.connected = true;
+  f.idle.update();
+  assert.equal(f.timers.size, 0);
+  f.activity.held = false;
+  f.idle.update();
+  assert.equal(f.timers.size, 1);
+  f.idle.destroy();
+  assert.equal(f.timers.size, 0);
+});
diff --git a/src/voice/panel/manualPanel.js b/src/voice/panel/manualPanel.js
new file mode 100644
index 000000000..6d2f058d1
--- /dev/null
+++ b/src/voice/panel/manualPanel.js
@@ -0,0 +1,182 @@
+const ROW_GRACE_MS = 700;
+
+/** Manual presentation only. Session and action events belong to the host. */
+export function createManualVoicePanel({
+  ui,
+  card,
+  getPreviewEnabled,
+  getCockpitActive = () => false,
+  copy,
+  onPresentationIntent,
+}) {
+  if (!ui?.voicePanel || typeof getPreviewEnabled !== 'function')
+    throw new TypeError(
+      'A voice panel and Preview preference reader are required.',
+    );
+  if (
+    typeof copy?.previewEmpty !== 'string' ||
+    typeof copy?.previewDisabled !== 'string'
+  )
+    throw new TypeError('Localized Preview messages are required.');
+  const lifetime = new AbortController();
+  const panel = ui.voicePanel;
+  const tabs = [ui.previewTab, ui.settingsTab];
+  const doc = panel.ownerDocument;
+  let disposed = false;
+  let open = false;
+  let view = 'preview';
+  const enabled = () => getPreviewEnabled() === true;
+  const suppressed = () => view === 'preview' && getCockpitActive() === true;
+  const visible = (element) =>
+    Boolean(
+      element &&
+      !element.hidden &&
+      element.isConnected !== false &&
+      element.checkVisibility?.({
+        opacityProperty: true,
+        visibilityProperty: true,
+      }) !== false,
+    );
+  const snapshot = () => ({
+    view,
+    panelOpen: !disposed && open,
+    settingsOpen: !disposed && open && view === 'settings',
+    previewEnabled: enabled(),
+    previewVisible:
+      !disposed &&
+      open &&
+      view === 'preview' &&
+      !suppressed() &&
+      enabled() &&
+      visible(ui.card),
+  });
+  const sync = () => {
+    if (disposed) return;
+    const hidePanel = !open || suppressed();
+    const restoreFocus = hidePanel && panel.contains?.(doc?.activeElement);
+    panel.hidden = hidePanel;
+    panel.dataset.view = view;
+    if (ui.previewPanel)
+      ui.previewPanel.hidden = !open || view !== 'preview' || suppressed();
+    if (ui.voiceSettingsPanel)
+      ui.voiceSettingsPanel.hidden = !open || view !== 'settings';
+    ui.voiceSettingsButton?.setAttribute(
+      'aria-expanded',
+      String(open && view === 'settings'),
+    );
+    tabs.forEach((tab, index) => {
+      if (!tab) return;
+      const selected = view === (index === 0 ? 'preview' : 'settings');
+      tab.setAttribute('aria-selected', String(selected));
+      tab.tabIndex = selected ? 0 : -1;
+    });
+    card?.setPresented?.(open && view === 'preview' && !suppressed());
+    if (ui.previewEmpty) {
+      ui.previewEmpty.hidden = Boolean(ui.card && !ui.card.hidden);
+      ui.previewEmpty.textContent = enabled()
+        ? copy.previewEmpty
+        : copy.previewDisabled;
+    }
+    if (restoreFocus)
+      [ui.voiceSettingsButton, ui.button].find(visible)?.focus?.();
+  };
+  const refuse = (reason) => ({
+    ok: false,
+    changed: false,
+    reason,
+    ...snapshot(),
+  });
+  const select = (next, { focus = false, automatic = false } = {}) => {
+    if (disposed) return refuse('disposed');
+    if (!['preview', 'settings'].includes(next)) return refuse('unknown-view');
+    const changed = !open || view !== next;
+    const outgoing =
+      view === 'preview' ? ui.previewPanel : ui.voiceSettingsPanel;
+    const transferFocus = changed && outgoing?.contains?.(doc?.activeElement);
+    open = true;
+    view = next;
+    onPresentationIntent?.({ automatic });
+    sync();
+    const tab = tabs[next === 'preview' ? 0 : 1];
+    if ((focus || transferFocus) && visible(panel) && visible(tab))
+      tab.focus?.();
+    return { ok: true, changed, ...snapshot() };
+  };
+  const close = (onlyView) => {
+    if (disposed) return refuse('disposed');
+    if (onlyView && !['preview', 'settings'].includes(onlyView))
+      return refuse('unknown-view');
+    if (onlyView && onlyView !== view)
+      return { ok: true, changed: false, ...snapshot() };
+    const changed = open;
+    open = false;
+    onPresentationIntent?.();
+    sync();
+    return { ok: true, changed, ...snapshot() };
+  };
+  const listen = (element, type, handler) =>
+    element?.addEventListener(type, handler, { signal: lifetime.signal });
+  const toggleSettings = () =>
+    open && view === 'settings'
+      ? close('settings')
+      : select('settings', { focus: true });
+  try {
+    listen(ui.voiceSettingsButton, 'click', toggleSettings);
+    tabs.forEach((tab, index) => {
+      listen(tab, 'click', () =>
+        select(index === 0 ? 'preview' : 'settings', { focus: true }),
+      );
+      listen(tab, 'keydown', (event) => {
+        const next =
+          event.key === 'Home'
+            ? 0
+            : event.key === 'End'
+              ? 1
+              : ['ArrowLeft', 'ArrowRight'].includes(event.key)
+                ? 1 - index
+                : null;
+        if (next === null) return;
+        event.preventDefault();
+        select(next === 0 ? 'preview' : 'settings', { focus: true });
+      });
+    });
+    listen(ui.voiceSettingsClose, 'click', () => close());
+    listen(panel, 'keydown', (event) => {
+      if (event.key !== 'Escape' || !open) return;
+      event.preventDefault();
+      close();
+    });
+    // Keep the raised row reachable across pinned trays without intercepting
+    // their controls. The same lifetime owns the listeners and pending timer.
+    let graceTimer;
+    const endGrace = () => {
+      clearTimeout(graceTimer);
+      if (ui.root) delete ui.root.dataset.rowGrace;
+    };
+    listen(ui.root, 'pointerleave', (event) => {
+      if (event.pointerType === 'touch') return;
+      endGrace();
+      ui.root.dataset.rowGrace = 'true';
+      graceTimer = setTimeout(endGrace, ROW_GRACE_MS);
+    });
+    listen(ui.root, 'pointerenter', endGrace);
+    lifetime.signal.addEventListener('abort', endGrace, { once: true });
+    sync();
+  } catch (error) {
+    lifetime.abort();
+    throw error;
+  }
+  return {
+    select,
+    close,
+    sync,
+    snapshot,
+    destroy() {
+      if (disposed) return;
+      open = false;
+      sync();
+      disposed = true;
+      lifetime.abort();
+    },
+  };
+}
diff --git a/src/voice/panel/manualPanel.test.mjs b/src/voice/panel/manualPanel.test.mjs
new file mode 100644
index 000000000..14476cb98
--- /dev/null
+++ b/src/voice/panel/manualPanel.test.mjs
@@ -0,0 +1,198 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createManualVoicePanel } from './manualPanel.js';
+
+function fixture(t) {
+  const doc = { activeElement: null };
+  const node = () =>
+    Object.assign(new EventTarget(), {
+      hidden: false,
+      isConnected: true,
+      dataset: {},
+      attributes: {},
+      ownerDocument: doc,
+      setAttribute(name, value) {
+        this.attributes[name] = value;
+      },
+      focus() {
+        doc.activeElement = this;
+      },
+      contains(other) {
+        return other === this;
+      },
+      checkVisibility() {
+        return !this.hidden;
+      },
+    });
+  const ui = Object.fromEntries(
+    [
+      'root',
+      'voicePanel',
+      'previewPanel',
+      'voiceSettingsPanel',
+      'previewTab',
+      'settingsTab',
+      'voiceSettingsButton',
+      'voiceSettingsClose',
+      'previewEmpty',
+      'card',
+      'button',
+    ].map((key) => [key, node()]),
+  );
+  ui.voicePanel.contains = (element) =>
+    Object.values(ui).includes(element) &&
+    ![ui.root, ui.voiceSettingsButton, ui.button].includes(element);
+  let enabled = true,
+    content = false,
+    intents = 0;
+  const card = {
+    setPresented(value) {
+      this.presented = value;
+      ui.card.hidden = !(value && enabled && content);
+    },
+  };
+  const copy = {
+    previewEmpty: 'Habla para ver resultados.',
+    previewDisabled: 'Vista previa desactivada.',
+  };
+  const panel = createManualVoicePanel({
+    ui,
+    card,
+    getPreviewEnabled: () => enabled,
+    copy,
+    onPresentationIntent: () => intents++,
+  });
+  t.after(() => panel.destroy());
+  return {
+    ui,
+    panel,
+    doc,
+    card,
+    copy,
+    intents: () => intents,
+    enabled(value) {
+      enabled = value;
+      panel.sync();
+    },
+    content(value) {
+      content = value;
+      panel.sync();
+    },
+  };
+}
+const click = (element) => element.dispatchEvent(new Event('click'));
+function key(element, value) {
+  const event = new Event('keydown', { cancelable: true });
+  Object.defineProperty(event, 'key', { value });
+  element.dispatchEvent(event);
+  return event;
+}
+
+test('Settings launcher toggles while tab and programmatic selection remain idempotent', (t) => {
+  const f = fixture(t);
+  assert.equal(f.panel.snapshot().panelOpen, false);
+  click(f.ui.voiceSettingsButton);
+  assert.equal(f.panel.snapshot().settingsOpen, true);
+  assert.equal(f.doc.activeElement, f.ui.settingsTab);
+  assert.equal(f.ui.voiceSettingsButton.attributes['aria-expanded'], 'true');
+  click(f.ui.voiceSettingsButton);
+  assert.equal(f.panel.snapshot().panelOpen, false);
+  click(f.ui.settingsTab);
+  assert.equal(f.panel.snapshot().settingsOpen, true);
+  assert.equal(f.panel.select('settings').changed, false);
+  assert.equal(f.panel.snapshot().settingsOpen, true);
+  click(f.ui.settingsTab);
+  assert.equal(f.panel.snapshot().settingsOpen, true);
+  assert.equal(f.panel.select('unknown').reason, 'unknown-view');
+});
+
+test('tab keyboard navigation and Escape preserve focus and accessibility state', (t) => {
+  const f = fixture(t);
+  click(f.ui.voiceSettingsButton);
+  assert.equal(key(f.ui.settingsTab, 'ArrowLeft').defaultPrevented, true);
+  assert.equal(f.panel.snapshot().view, 'preview');
+  assert.equal(f.doc.activeElement, f.ui.previewTab);
+  assert.equal(f.ui.previewTab.tabIndex, 0);
+  assert.equal(f.ui.settingsTab.tabIndex, -1);
+  assert.equal(f.ui.previewTab.attributes['aria-selected'], 'true');
+  key(f.ui.previewTab, 'End');
+  assert.equal(f.panel.snapshot().view, 'settings');
+  key(f.ui.settingsTab, 'Home');
+  assert.equal(f.panel.snapshot().view, 'preview');
+  assert.equal(key(f.ui.voicePanel, 'Escape').defaultPrevented, true);
+  assert.equal(f.panel.snapshot().panelOpen, false);
+  assert.equal(f.doc.activeElement, f.ui.voiceSettingsButton);
+  assert.equal(key(f.ui.voicePanel, 'Escape').defaultPrevented, false);
+});
+
+test('manual switching transfers hidden-panel focus without stealing unrelated focus', (t) => {
+  const f = fixture(t);
+  f.panel.select('settings');
+  f.ui.voiceSettingsPanel.focus();
+  f.panel.select('preview');
+  assert.equal(f.doc.activeElement, f.ui.previewTab);
+  const unrelated = (f.doc.activeElement = {});
+  f.panel.select('settings');
+  assert.equal(f.doc.activeElement, unrelated);
+  assert.equal(f.panel.close('preview').changed, false);
+  assert.equal(f.panel.snapshot().settingsOpen, true);
+});
+
+test('manual Preview selection never enables a disabled preference and uses injected copy', (t) => {
+  const f = fixture(t);
+  f.enabled(false);
+  f.content(true);
+  f.panel.select('preview');
+  assert.equal(f.panel.snapshot().previewEnabled, false);
+  assert.equal(f.panel.snapshot().previewVisible, false);
+  assert.equal(f.ui.previewEmpty.textContent, f.copy.previewDisabled);
+  assert.equal(f.ui.previewEmpty.hidden, false);
+  f.enabled(true);
+  assert.equal(f.panel.snapshot().previewVisible, true);
+  assert.equal(f.ui.previewEmpty.hidden, true);
+  f.content(false);
+  assert.equal(f.ui.previewEmpty.textContent, f.copy.previewEmpty);
+});
+
+test('disposal hides owned presentation and removes listeners without destroying the card', (t) => {
+  const f = fixture(t);
+  f.panel.select('settings');
+  const count = f.intents();
+  f.panel.destroy();
+  f.panel.destroy();
+  click(f.ui.voiceSettingsButton);
+  click(f.ui.settingsTab);
+  assert.equal(f.intents(), count);
+  assert.equal(f.ui.voicePanel.hidden, true);
+  assert.equal(f.card.presented, false);
+  assert.equal(f.panel.select('preview').reason, 'disposed');
+  assert.equal(f.panel.close().reason, 'disposed');
+});
+
+test('pointer grace expires, resets on reentry, ignores touch and clears on disposal', (t) => {
+  t.mock.timers.enable({ apis: ['setTimeout'] });
+  const f = fixture(t);
+  const pointer = (type, pointerType = 'mouse') => {
+    const event = new Event(type);
+    Object.defineProperty(event, 'pointerType', { value: pointerType });
+    f.ui.root.dispatchEvent(event);
+  };
+  pointer('pointerleave');
+  t.mock.timers.tick(699);
+  assert.equal(f.ui.root.dataset.rowGrace, 'true');
+  pointer('pointerenter');
+  assert.equal(f.ui.root.dataset.rowGrace, undefined);
+  pointer('pointerleave');
+  t.mock.timers.tick(699);
+  assert.equal(f.ui.root.dataset.rowGrace, 'true');
+  t.mock.timers.tick(1);
+  assert.equal(f.ui.root.dataset.rowGrace, undefined);
+  pointer('pointerleave', 'touch');
+  assert.equal(f.ui.root.dataset.rowGrace, undefined);
+  pointer('pointerleave');
+  f.panel.destroy();
+  assert.equal(f.ui.root.dataset.rowGrace, undefined);
+  pointer('pointerleave');
+  t.mock.timers.tick(700);
+  assert.equal(f.ui.root.dataset.rowGrace, undefined);
+});
diff --git a/src/voice/panel/nativeActivity.js b/src/voice/panel/nativeActivity.js
new file mode 100644
index 000000000..ce9426cdc
--- /dev/null
+++ b/src/voice/panel/nativeActivity.js
@@ -0,0 +1,292 @@
+/** Inspected native capabilities only; scheduled/reported output is not acoustics. */
+export function observeNativeActivity({
+  adapter,
+  nativeProvider,
+  signal,
+  onChange,
+  onInput,
+}) {
+  const native = nativeProvider === 'openai' || nativeProvider === 'gemini';
+  // Do not even inspect custom controller properties.
+  const controller = native ? adapter.controller : null;
+  const input = native
+    ? nativeProvider === 'gemini'
+      ? controller.input
+      : controller._input
+    : null;
+  let dead = false,
+    connected = false,
+    inputBusy = false,
+    recoverableError = false;
+  function cleanNativeOutput() {
+    if (nativeProvider === 'gemini') return true;
+    if (nativeProvider !== 'openai') return false;
+    const turns = controller._turns;
+    return (
+      ['idle', 'connecting', 'error'].includes(controller.status) &&
+      controller.dc == null &&
+      !turns.assistantAudioPlaying &&
+      !turns.responseActive &&
+      !turns.responseCreatePending &&
+      !turns.userTurnPending &&
+      !turns.activeResponseId &&
+      !turns.progressResponse
+    );
+  }
+  let outputKnown = cleanNativeOutput();
+  let audio = null,
+    version = 0;
+  const restores = [];
+  const audioRestores = [];
+  const pendingOutput = new Map();
+  let untrackedOutput = !outputKnown;
+  function retireAudio() {
+    audio = null;
+    for (const restore of audioRestores.splice(0).reverse()) restore();
+  }
+  function refreshOutputKnowledge() {
+    outputKnown = !untrackedOutput && pendingOutput.size === 0;
+  }
+  function hasNoAudioOutput(response) {
+    return (
+      ['completed', 'cancelled', 'failed', 'incomplete'].includes(
+        response?.status,
+      ) &&
+      Array.isArray(response.output) &&
+      response.output.every(
+        (item) =>
+          item?.type === 'function_call' ||
+          (item?.type === 'message' &&
+            Array.isArray(item.content) &&
+            item.content.every((part) =>
+              ['text', 'output_text', 'refusal'].includes(part?.type),
+            )),
+      )
+    );
+  }
+  function snapshot() {
+    const turns = nativeProvider === 'openai' ? controller?._turns : controller;
+    return {
+      known: native && outputKnown && !dead,
+      connected: connected && !dead,
+      held: Boolean(input?.pushToTalkKeyHeld),
+      inputBusy: Boolean(
+        inputBusy ||
+        (nativeProvider === 'gemini' && controller?.userActivityOpen),
+      ),
+      outputBusy: Boolean(
+        nativeProvider === 'gemini'
+          ? audio && audio === controller.audio && audio.pending
+          : turns?.assistantAudioPlaying,
+      ),
+      generationBusy: Boolean(
+        turns?.responseActive ||
+        turns?.responseCreatePending ||
+        (nativeProvider === 'openai' && turns?.userTurnPending) ||
+        (nativeProvider === 'gemini' &&
+          (turns?.replyPending ||
+            turns?.retiredReplyPending ||
+            turns?.deferredInput ||
+            turns?.automaticTurnOpen ||
+            turns?.pendingTools ||
+            turns?.controlQueue?.length)),
+      ),
+    };
+  }
+  function notify() {
+    if (!dead) {
+      try {
+        onChange?.(snapshot());
+      } catch {}
+    }
+  }
+  function wrap(object, key, after, ownedRestores = restores) {
+    const original = object?.[key];
+    if (typeof original !== 'function') return;
+    function wrapped(...args) {
+      const stamp = version;
+      const result = Reflect.apply(original, this, args);
+      if (!dead && stamp === version) {
+        try {
+          after?.(args, result);
+        } catch {}
+      }
+      return result;
+    }
+    object[key] = wrapped;
+    ownedRestores.push(() => {
+      if (object[key] === wrapped) object[key] = original;
+    });
+  }
+  function handle(event) {
+    if (dead || !native) return;
+    if (event?.type === 'state') {
+      const state = event.state;
+      const wasConnected = connected;
+      const liveError =
+        state === 'error' &&
+        nativeProvider === 'openai' &&
+        controller.dc?.readyState === 'open';
+      const restartingAfterError = state === 'connecting' && recoverableError;
+      recoverableError = liveError;
+      connected = !['idle', 'connecting', 'error'].includes(state);
+      // Connecting has multiple native phases around audio allocation. Retire
+      // a previous connected generation once, not each phase of this start.
+      // A failed reply can briefly report error on a live OpenAI transport.
+      // Preserve its output evidence through recovery to listening; a later
+      // reconnect still retires the failed connection's generation.
+      if (
+        state === 'idle' ||
+        (state === 'error' && !liveError) ||
+        (state === 'connecting' && (wasConnected || restartingAfterError))
+      ) {
+        version++;
+        retireAudio();
+        inputBusy = false;
+        outputKnown = cleanNativeOutput();
+        untrackedOutput = !outputKnown;
+        pendingOutput.clear();
+      }
+    }
+    notify();
+  }
+  if (native) {
+    wrap(controller, 'sendTextCommand', ([text], result) => {
+      if (String(text || '').trim() && result !== false) onInput?.();
+    });
+    for (const key of [
+      'setMicrophoneEnabled',
+      'releasePushToTalkKey',
+      'resetSession',
+    ])
+      wrap(input, key, notify);
+    if (nativeProvider === 'openai') {
+      wrap(controller._turns, 'observeSpeech', ([event]) => {
+        if (event?.type === 'input_audio_buffer.speech_started')
+          inputBusy = true;
+        if (event?.type === 'input_audio_buffer.speech_stopped')
+          inputBusy = false;
+        const type = event?.type;
+        const id = event?.response_id || event?.response?.id;
+        // Keep each unresolved response separate: a later silent reply cannot
+        // establish that an earlier audio reply has drained.
+        if (type === 'response.created') {
+          if (id && pendingOutput.size < 64)
+            pendingOutput.set(id, { audioSeen: false });
+          else untrackedOutput = true;
+        }
+        const pending = pendingOutput.get(id);
+        if (
+          pending &&
+          (type?.startsWith('response.output_audio') ||
+            type?.startsWith('response.audio') ||
+            ['audio', 'output_audio'].includes(event?.part?.type))
+        )
+          pending.audioSeen = true;
+        if (
+          type === 'response.done' &&
+          pending &&
+          !pending.audioSeen &&
+          hasNoAudioOutput(event.response)
+        )
+          pendingOutput.delete(id);
+        if (
+          type === 'output_audio_buffer.started' ||
+          type === 'output_audio_buffer.cleared'
+        ) {
+          // Native playback events establish the transport's output lifecycle.
+          // Generation completion alone never establishes audio drainage.
+          untrackedOutput = false;
+          if (id) pendingOutput.delete(id);
+          else pendingOutput.clear();
+        }
+        refreshOutputKnowledge();
+        notify();
+      });
+    } else {
+      wrap(controller, 'handleMessage', notify);
+      const original = controller.createAudio;
+      function createAudio(...args) {
+        const stamp = version;
+        const options = args[0];
+        let current;
+        const decorated = { ...options };
+        for (const key of [
+          'onAudioStart',
+          'onAudioEnd',
+          'onAudioDiscard',
+          'onDrain',
+        ]) {
+          const callback = options?.[key];
+          decorated[key] = function (...values) {
+            const result =
+              typeof callback === 'function'
+                ? Reflect.apply(
+                    callback,
+                    this === decorated ? options : this,
+                    values,
+                  )
+                : undefined;
+            if (
+              !dead &&
+              stamp === version &&
+              audio === current &&
+              controller.audio === current
+            ) {
+              if (
+                key === 'onAudioStart' &&
+                options.pushToTalk &&
+                controller.captureOwner?.admitted
+              )
+                inputBusy = true;
+              if (key === 'onAudioEnd' || key === 'onAudioDiscard')
+                inputBusy = false;
+              notify();
+            }
+            return result;
+          };
+        }
+        const forwarded = args.slice();
+        forwarded[0] = decorated;
+        current = Reflect.apply(original, this, forwarded);
+        if (!dead && stamp === version) {
+          retireAudio();
+          audio = current;
+          inputBusy = false;
+          for (const key of ['play', 'clearPlayback', 'close'])
+            wrap(
+              current,
+              key,
+              () => {
+                if (audio !== current) return;
+                if (key === 'close') {
+                  retireAudio();
+                  inputBusy = false;
+                }
+                if (controller.audio === current) notify();
+              },
+              audioRestores,
+            );
+        }
+        return current;
+      }
+      controller.createAudio = createAudio;
+      restores.push(() => {
+        if (controller.createAudio === createAudio)
+          controller.createAudio = original;
+      });
+    }
+  }
+  function destroy() {
+    if (dead) return;
+    dead = true;
+    version++;
+    retireAudio();
+    pendingOutput.clear();
+    for (const restore of restores.splice(0).reverse()) restore();
+    signal?.removeEventListener('abort', destroy);
+  }
+  signal?.addEventListener('abort', destroy, { once: true });
+  if (signal?.aborted) destroy();
+  return { snapshot, handle, destroy };
+}
diff --git a/src/voice/panel/nativeActivity.test.mjs b/src/voice/panel/nativeActivity.test.mjs
new file mode 100644
index 000000000..81709ce53
--- /dev/null
+++ b/src/voice/panel/nativeActivity.test.mjs
@@ -0,0 +1,770 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createVoiceInactivity } from './inactivity.js';
+import { RealtimeTurns } from '../realtimeTurns.js';
+import { observeNativeActivity } from './nativeActivity.js';
+// Deliberately small native-shaped fixtures exercise wrapper contracts, not devices.
+function gemini(onChange = () => {}) {
+  const callbacks = [];
+  const input = {
+    pushToTalkKeyHeld: false,
+    setMicrophoneEnabled() {},
+    releasePushToTalkKey() {
+      this.pushToTalkKeyHeld = false;
+    },
+    resetSession() {
+      this.pushToTalkKeyHeld = false;
+    },
+  };
+  const c = {
+    input,
+    captureOwner: { admitted: false },
+    createAudio(opts) {
+      callbacks.push(opts);
+      return {
+        pending: 0,
+        play() {
+          this.pending++;
+          return 42;
+        },
+        clearPlayback() {
+          this.pending = 0;
+        },
+        close() {
+          this.pending = 0;
+        },
+      };
+    },
+    handleMessage() {},
+  };
+  const observer = observeNativeActivity({
+    adapter: { controller: c },
+    nativeProvider: 'gemini',
+    onChange,
+  });
+  const start = () => {
+    observer.handle({ type: 'state', state: 'connecting' });
+    c.audio = c.createAudio({ pushToTalk: true });
+    observer.handle({ type: 'state', state: 'listening' });
+    return c.audio;
+  };
+  return { c, input, observer, callbacks, start };
+}
+test('custom host never inspected, including hostile controller getter', () => {
+  const adapter = {
+    get controller() {
+      throw Error('must not inspect');
+    },
+  };
+  const o = observeNativeActivity({ adapter, nativeProvider: null });
+  assert.equal(o.snapshot().known, false);
+  o.handle({ type: 'state', state: 'listening' });
+  o.destroy();
+});
+test('PTT hold is direct before connect; silent automatic stream is not admitted speech', () => {
+  const f = gemini();
+  f.input.pushToTalkKeyHeld = true;
+  assert.equal(f.observer.snapshot().held, true);
+  assert.equal(f.observer.snapshot().connected, false);
+  f.start();
+  f.callbacks[0].onAudioStart({});
+  assert.equal(f.observer.snapshot().inputBusy, false);
+  f.c.captureOwner.admitted = true;
+  f.callbacks[0].onAudioStart({});
+  assert.equal(f.observer.snapshot().inputBusy, true);
+  f.callbacks[0].onAudioDiscard();
+  f.input.releasePushToTalkKey();
+  assert.equal(f.observer.snapshot().inputBusy, false);
+  assert.equal(f.observer.snapshot().held, false);
+});
+test('queue-to-drain, clear and close use current instance, without an acoustic claim', () => {
+  const f = gemini();
+  const a = f.start();
+  assert.equal(a.play(), 42);
+  assert.equal(f.observer.snapshot().outputBusy, true);
+  a.clearPlayback();
+  assert.equal(f.observer.snapshot().outputBusy, false);
+  a.play();
+  a.close();
+  assert.equal(f.observer.snapshot().outputBusy, false);
+  a.play();
+  a.pending = 0;
+  f.callbacks[0].onDrain();
+  assert.equal(f.observer.snapshot().outputBusy, false);
+});
+test('same-mount restart old callbacks cannot clear new admitted capture/output', () => {
+  const f = gemini();
+  f.start();
+  const old = f.callbacks[0];
+  const b = f.start();
+  f.c.captureOwner.admitted = true;
+  f.callbacks[1].onAudioStart();
+  b.play();
+  old.onAudioDiscard();
+  old.onDrain();
+  assert.equal(f.observer.snapshot().inputBusy, true);
+  assert.equal(f.observer.snapshot().outputBusy, true);
+});
+test('native callbacks original first with receiver, arguments, return and thrown identity; observation failure isolated', () => {
+  const f = gemini(() => {
+    throw Error('observer');
+  });
+  const receiver = {};
+  const argument = {};
+  let seen;
+  f.c.audio = f.c.createAudio({
+    pushToTalk: true,
+    onAudioEnd: function (...args) {
+      seen = [this, args];
+      return argument;
+    },
+  });
+  const cb = f.callbacks[0];
+  assert.equal(cb.onAudioEnd.call(receiver, argument), argument);
+  assert.equal(seen[0], receiver);
+  assert.equal(seen[1][0], argument);
+  const error = Error('same');
+  f.c.audio = f.c.createAudio({
+    onDrain() {
+      throw error;
+    },
+  });
+  assert.throws(
+    () => f.callbacks[1].onDrain(),
+    (e) => e === error,
+  );
+});
+test('reentrant Stop in original callback suppresses stale post-callback observation; teardown preserves newer replacement', () => {
+  let count = 0;
+  const f = gemini(() => count++);
+  f.c.audio = f.c.createAudio({
+    onDrain() {
+      f.observer.handle({ type: 'state', state: 'idle' });
+    },
+  });
+  const before = count;
+  f.callbacks[0].onDrain();
+  assert.equal(count, before + 1);
+  assert.equal(f.observer.snapshot().connected, false);
+  const newer = () => {};
+  f.input.releasePushToTalkKey = newer;
+  f.observer.destroy();
+  assert.equal(f.input.releasePushToTalkKey, newer);
+});
+test('OpenAI response.done does not drain output; absent lifecycle remains unknown', () => {
+  const turns = {
+    assistantAudioPlaying: false,
+    responseActive: false,
+    observeSpeech(e) {
+      if (e.type === 'output_audio_buffer.started')
+        this.assistantAudioPlaying = true;
+      if (
+        e.type === 'output_audio_buffer.stopped' ||
+        e.type === 'output_audio_buffer.cleared'
+      )
+        this.assistantAudioPlaying = false;
+    },
+  };
+  const c = { _turns: turns, _input: { pushToTalkKeyHeld: false } };
+  const original = turns.observeSpeech;
+  const o = observeNativeActivity({
+    adapter: { controller: c },
+    nativeProvider: 'openai',
+  });
+  o.handle({ type: 'state', state: 'listening' });
+  assert.equal(o.snapshot().known, false);
+  turns.observeSpeech({ type: 'output_audio_buffer.started' });
+  assert.equal(o.snapshot().known, true);
+  turns.responseActive = false;
+  o.handle({ type: 'completion' });
+  assert.equal(o.snapshot().outputBusy, true);
+  turns.observeSpeech({ type: 'output_audio_buffer.cleared' });
+  assert.equal(o.snapshot().outputBusy, false);
+  o.destroy();
+  assert.equal(turns.observeSpeech, original);
+});
+test('method receiver/args/result and throw are exact; abort restores wrappers', () => {
+  const abort = new AbortController();
+  const result = Promise.resolve();
+  let seen;
+  const error = Error('original');
+  const input = {
+    setMicrophoneEnabled(...args) {
+      seen = [this, args];
+      if (args[0] === 'throw') throw error;
+      return result;
+    },
+  };
+  const original = input.setMicrophoneEnabled;
+  const c = {
+    input,
+    createAudio() {
+      return {};
+    },
+    handleMessage() {},
+  };
+  const o = observeNativeActivity({
+    adapter: { controller: c },
+    nativeProvider: 'gemini',
+    signal: abort.signal,
+    onChange() {
+      throw Error('observe');
+    },
+  });
+  assert.equal(input.setMicrophoneEnabled(1, 2), result);
+  assert.equal(seen[0], input);
+  assert.deepEqual(seen[1], [1, 2]);
+  assert.throws(
+    () => input.setMicrophoneEnabled('throw'),
+    (e) => e === error,
+  );
+  abort.abort();
+  assert.equal(input.setMicrophoneEnabled, original);
+  assert.equal(o.snapshot().known, false);
+});
+
+test('options-method callback receiver maps to original options, explicit receiver is preserved', () => {
+  const f = gemini();
+  let receiver;
+  const options = {
+    onDrain() {
+      receiver = this;
+      return 17;
+    },
+  };
+  f.c.audio = f.c.createAudio(options);
+  assert.equal(f.callbacks[0].onDrain(), 17);
+  assert.equal(receiver, options);
+  const explicit = {};
+  f.callbacks[0].onDrain.call(explicit);
+  assert.equal(receiver, explicit);
+});
+test('actual native RealtimeTurns output lifecycle remains busy beyond generation', () => {
+  const turns = new RealtimeTurns({});
+  const observer = observeNativeActivity({
+    adapter: { controller: { _turns: turns, _input: {} } },
+    nativeProvider: 'openai',
+  });
+  observer.handle({ type: 'state', state: 'listening' });
+  turns.observeSpeech({ type: 'output_audio_buffer.started' });
+  turns.responseActive = false;
+  observer.handle({ type: 'completion' });
+  assert.equal(observer.snapshot().outputBusy, true);
+  turns.observeSpeech({ type: 'output_audio_buffer.stopped' });
+  assert.equal(observer.snapshot().outputBusy, false);
+  turns.observeSpeech({ type: 'response.created' });
+  turns.observeSpeech({ type: 'output_audio_buffer.stopped' });
+  assert.equal(observer.snapshot().known, false);
+  observer.destroy();
+});
+
+test('verified clean native mount can arm initial idle, eventless response invalidates it', () => {
+  const turns = new RealtimeTurns({});
+  const controller = { status: 'idle', dc: null, _turns: turns, _input: {} };
+  const observer = observeNativeActivity({
+    adapter: { controller },
+    nativeProvider: 'openai',
+  });
+  let armed = 0,
+    cleared = 0;
+  const idle = createVoiceInactivity({
+    readActivity: observer.snapshot,
+    readPending: () => 0,
+    setTimer() {
+      armed++;
+      return 1;
+    },
+    clearTimer() {
+      cleared++;
+    },
+  });
+  assert.equal(observer.snapshot().known, true);
+  assert.equal(armed, 0);
+  controller.status = 'listening';
+  controller.dc = { readyState: 'open' };
+  observer.handle({ type: 'state', state: 'listening' });
+  idle.update();
+  assert.equal(armed, 1);
+  turns.observeSpeech({ type: 'response.created' });
+  idle.update();
+  assert.equal(observer.snapshot().known, false);
+  assert.equal(cleared, 1);
+  turns.responseActive = false;
+  observer.handle({ type: 'completion' });
+  idle.update();
+  assert.equal(armed, 1);
+  assert.equal(observer.snapshot().known, false);
+  controller.status = 'idle';
+  controller.dc = null;
+  turns.reset();
+  observer.handle({ type: 'state', state: 'idle' });
+  assert.equal(observer.snapshot().known, true);
+  idle.destroy();
+  observer.destroy();
+});
+test('attaching to already active native transport never assumes empty playback', () => {
+  const turns = new RealtimeTurns({});
+  for (const controller of [
+    { status: 'listening', dc: {}, _turns: turns, _input: {} },
+    { status: 'idle', dc: {}, _turns: turns, _input: {} },
+  ]) {
+    const observer = observeNativeActivity({
+      adapter: { controller },
+      nativeProvider: 'openai',
+    });
+    assert.equal(observer.snapshot().known, false);
+    observer.destroy();
+  }
+  turns.responseActive = true;
+  const observer = observeNativeActivity({
+    adapter: {
+      controller: { status: 'idle', dc: null, _turns: turns, _input: {} },
+    },
+    nativeProvider: 'openai',
+  });
+  assert.equal(observer.snapshot().known, false);
+  observer.destroy();
+});
+
+test('Gemini queue-only work blocks idle, queue drain rearms, expiry rereads delayed queue', () => {
+  const f = gemini();
+  f.start();
+  f.c.controlQueue = [];
+  let callback,
+    arms = 0,
+    clears = 0,
+    expired = 0;
+  const idle = createVoiceInactivity({
+    readActivity: f.observer.snapshot,
+    readPending: () => 0,
+    onExpire() {
+      expired++;
+    },
+    setTimer(fn) {
+      callback = fn;
+      return ++arms;
+    },
+    clearTimer() {
+      clears++;
+    },
+  });
+  assert.equal(arms, 1);
+  f.c.controlQueue.push({});
+  assert.equal(f.observer.snapshot().generationBusy, true);
+  idle.update();
+  assert.equal(clears, 1);
+  f.c.controlQueue.shift();
+  assert.equal(f.observer.snapshot().generationBusy, false);
+  idle.update();
+  assert.equal(arms, 2);
+  // A queue may change after the last event-driven snapshot and before the deadline.
+  f.c.controlQueue.push({});
+  callback();
+  assert.equal(expired, 0);
+  f.c.controlQueue = [];
+  idle.update();
+  assert.equal(arms, 3);
+  callback();
+  assert.equal(expired, 1);
+  idle.destroy();
+  f.observer.destroy();
+});
+
+test('Gemini presentation-only pending does not block idle; retired/deferred work still does', () => {
+  const f = gemini();
+  f.start();
+  f.c.userTurnPending = true;
+  assert.equal(f.observer.snapshot().generationBusy, false);
+  f.c.retiredReplyPending = true;
+  assert.equal(f.observer.snapshot().generationBusy, true);
+  f.c.retiredReplyPending = false;
+  f.c.deferredInput = {};
+  assert.equal(f.observer.snapshot().generationBusy, true);
+  f.c.deferredInput = null;
+  assert.equal(f.observer.snapshot().generationBusy, false);
+  f.observer.destroy();
+});
+
+test('actual Gemini startup phases keep playback observation and permit quiet open-mic expiry', async () => {
+  const { harness } = await import('../../testSupport/geminiNativeHarness.mjs');
+  let observer,
+    idle,
+    deadline,
+    expiries = 0;
+  const h = harness({ emit: (event) => observer?.handle(event) });
+  observer = observeNativeActivity({
+    adapter: { controller: h.c },
+    nativeProvider: 'gemini',
+    onChange: () => idle?.update(),
+  });
+  idle = createVoiceInactivity({
+    readActivity: observer.snapshot,
+    readPending: () => 0,
+    setTimer(fn) {
+      deadline = fn;
+      return fn;
+    },
+    clearTimer() {},
+    onExpire() {
+      expiries++;
+    },
+  });
+  try {
+    await h.c.start();
+    assert.equal(h.c.userTurnPending, true);
+    assert.equal(idle.snapshot().eligible, true);
+    const beforeOutput = deadline;
+    h.sockets[0].message({
+      serverContent: {
+        modelTurn: {
+          parts: [
+            {
+              inlineData: { data: 'output', mimeType: 'audio/pcm;rate=24000' },
+            },
+          ],
+        },
+        turnComplete: true,
+      },
+    });
+    assert.equal(observer.snapshot().outputBusy, true);
+    assert.equal(idle.snapshot().eligible, false);
+    beforeOutput();
+    assert.equal(expiries, 0);
+    h.captures[0].drain();
+    assert.equal(observer.snapshot().outputBusy, false);
+    assert.equal(idle.snapshot().eligible, true);
+    deadline();
+    assert.equal(expiries, 1);
+  } finally {
+    idle.destroy();
+    observer.destroy();
+    h.c.stop({ removeUi: true });
+  }
+});
+
+test('native typed input observation preserves receiver/result, refuses failed submissions and retires old wrapper', () => {
+  let inputs = 0;
+  const controller = {
+    input: {},
+    handleMessage() {},
+    createAudio() {},
+    sendTextCommand(text) {
+      assert.equal(this, controller);
+      if (text === 'throw') throw new Error('rejected');
+      return text === 'reject' ? false : undefined;
+    },
+  };
+  const original = controller.sendTextCommand;
+  const observer = observeNativeActivity({
+    adapter: { controller },
+    nativeProvider: 'gemini',
+    onInput: () => inputs++,
+  });
+  const old = controller.sendTextCommand;
+  assert.equal(controller.sendTextCommand('typed request'), undefined);
+  controller.sendTextCommand('reject');
+  controller.sendTextCommand('');
+  assert.throws(() => controller.sendTextCommand('throw'), /rejected/);
+  assert.equal(inputs, 1);
+  observer.destroy();
+  assert.equal(controller.sendTextCommand, original);
+  old.call(controller, 'late');
+  assert.equal(inputs, 1);
+});
+
+test('explicit silent OpenAI completion rearms expiry, including cancelled and failed responses', () => {
+  for (const status of ['completed', 'cancelled', 'failed', 'incomplete']) {
+    const turns = new RealtimeTurns({});
+    const controller = { status: 'idle', dc: null, _turns: turns, _input: {} };
+    let idle;
+    let timer;
+    let expired = 0;
+    const observer = observeNativeActivity({
+      adapter: { controller },
+      nativeProvider: 'openai',
+      onChange: () => idle?.update(),
+    });
+    idle = createVoiceInactivity({
+      readActivity: observer.snapshot,
+      readPending: () => false,
+      setTimer(callback) {
+        timer = callback;
+        return 1;
+      },
+      clearTimer() {
+        timer = null;
+      },
+      onExpire: () => expired++,
+    });
+    controller.status = 'listening';
+    controller.dc = {};
+    observer.handle({ type: 'state', state: 'listening' });
+    assert.equal(typeof timer, 'function');
+    turns.responseActive = true;
+    turns.observeSpeech({
+      type: 'response.created',
+      response: { id: 'silent' },
+    });
+    assert.equal(timer, null);
+    turns.observeSpeech({
+      type: 'response.done',
+      response: {
+        id: 'silent',
+        status,
+        output:
+          status === 'completed'
+            ? [{ type: 'function_call', name: 'set_panel_open' }]
+            : [],
+      },
+    });
+    // The provider updates generation state after forwarding the raw event.
+    assert.equal(timer, null);
+    turns.responseActive = false;
+    observer.handle({ type: 'completion' });
+    assert.equal(observer.snapshot().known, true);
+    assert.equal(typeof timer, 'function');
+    timer();
+    assert.equal(expired, 1);
+    idle.destroy();
+    observer.destroy();
+  }
+});
+
+test('silent OpenAI replies cannot clear unresolved older audio or incomplete output metadata', () => {
+  const turns = new RealtimeTurns({});
+  const observer = observeNativeActivity({
+    adapter: {
+      controller: { status: 'idle', dc: null, _turns: turns, _input: {} },
+    },
+    nativeProvider: 'openai',
+  });
+  const created = (id) =>
+    turns.observeSpeech({ type: 'response.created', response: { id } });
+  const done = (id, output) =>
+    turns.observeSpeech({
+      type: 'response.done',
+      response: { id, status: 'completed', output },
+    });
+  created('audio');
+  turns.observeSpeech({
+    type: 'response.output_audio.delta',
+    response_id: 'audio',
+  });
+  created('silent');
+  done('silent', []);
+  assert.equal(observer.snapshot().known, false);
+  done('audio', []); // Even contradictory completion metadata cannot erase audio evidence.
+  assert.equal(observer.snapshot().known, false);
+  turns.observeSpeech({
+    type: 'output_audio_buffer.started',
+    response_id: 'audio',
+  });
+  assert.equal(observer.snapshot().outputBusy, true);
+  done('silent', []);
+  assert.equal(observer.snapshot().outputBusy, true);
+  turns.observeSpeech({
+    type: 'output_audio_buffer.stopped',
+    response_id: 'audio',
+  });
+  assert.equal(observer.snapshot().outputBusy, false);
+  created('unknown');
+  done('unknown', undefined);
+  assert.equal(observer.snapshot().known, false);
+  done('unobserved', []);
+  assert.equal(observer.snapshot().known, false);
+  observer.destroy();
+});
+
+test('overlapping silent replies resolve independently and audio output items remain unknown until playback', () => {
+  const turns = new RealtimeTurns({});
+  const observer = observeNativeActivity({
+    adapter: {
+      controller: { status: 'idle', dc: null, _turns: turns, _input: {} },
+    },
+    nativeProvider: 'openai',
+  });
+  for (const id of ['a', 'b'])
+    turns.observeSpeech({ type: 'response.created', response: { id } });
+  for (const id of ['a', 'b']) {
+    turns.observeSpeech({
+      type: 'response.done',
+      response: {
+        id,
+        status: 'completed',
+        output: [
+          { type: 'message', content: [{ type: 'text', text: 'Done' }] },
+        ],
+      },
+    });
+    assert.equal(observer.snapshot().known, id === 'b');
+  }
+  turns.observeSpeech({ type: 'response.created', response: { id: 'audio' } });
+  turns.observeSpeech({
+    type: 'response.done',
+    response: {
+      id: 'audio',
+      status: 'completed',
+      output: [{ type: 'message', content: [{ type: 'audio' }] }],
+    },
+  });
+  assert.equal(observer.snapshot().known, false);
+  observer.destroy();
+});
+
+test('silent completion cannot establish output knowledge when observer attached mid-session', () => {
+  const turns = new RealtimeTurns({});
+  const observer = observeNativeActivity({
+    adapter: {
+      controller: { status: 'listening', dc: {}, _turns: turns, _input: {} },
+    },
+    nativeProvider: 'openai',
+  });
+  turns.observeSpeech({ type: 'response.created', response: { id: 'new' } });
+  turns.observeSpeech({
+    type: 'response.done',
+    response: { id: 'new', status: 'completed', output: [] },
+  });
+  assert.equal(observer.snapshot().known, false);
+  observer.destroy();
+});
+
+test('Gemini restores each retired audio immediately across repeated same-mount restarts', () => {
+  const originals = new Map();
+  const controller = {
+    input: {},
+    createAudio() {
+      const audio = { pending: 0, play() {}, clearPlayback() {}, close() {} };
+      originals.set(audio, { ...audio });
+      return audio;
+    },
+    handleMessage() {},
+  };
+  const observer = observeNativeActivity({
+    adapter: { controller },
+    nativeProvider: 'gemini',
+  });
+  const assertRestored = (audio) => {
+    for (const key of ['play', 'clearPlayback', 'close'])
+      assert.equal(audio[key], originals.get(audio)[key]);
+  };
+  for (let i = 0; i < 5; i++) {
+    observer.handle({ type: 'state', state: 'connecting' });
+    controller.audio = controller.createAudio({});
+    const audio = controller.audio;
+    observer.handle({ type: 'state', state: 'listening' });
+    assert.notEqual(audio.close, originals.get(audio).close);
+    audio.close();
+    assertRestored(audio);
+    controller.audio = null;
+    observer.handle({ type: 'state', state: 'idle' });
+  }
+  controller.audio = controller.createAudio({});
+  const replaced = controller.audio;
+  controller.audio = controller.createAudio({});
+  assertRestored(replaced);
+  const current = controller.audio;
+  const replacement = () => {};
+  current.play = replacement;
+  observer.handle({ type: 'state', state: 'error' });
+  assert.equal(current.play, replacement);
+  assert.equal(current.close, originals.get(current).close);
+  observer.destroy();
+});
+
+test('actual OpenAI failed-response error/listening recovery preserves only proven no-audio knowledge', async (t) => {
+  const { GevRealtimeController } = await import('../realtimeController.js');
+  t.mock.method(console, 'error', () => {});
+  for (const [output, known] of [
+    [[], true],
+    [[{ type: 'message', content: [{ type: 'audio' }] }], false],
+    [undefined, false],
+  ]) {
+    let observer, idle, timer;
+    const states = [];
+    let expired = 0;
+    const controller = new GevRealtimeController({
+      runner: async () => ({ ok: true }),
+      backend: {},
+      debugSink: null,
+      ui: {
+        root: {
+          dataset: {},
+          classList: { remove() {} },
+          querySelectorAll: () => [],
+        },
+        status: {},
+        detail: {},
+      },
+      onSessionEvent(event) {
+        if (event.type === 'state') states.push(event.state);
+        observer?.handle(event);
+      },
+    });
+    observer = observeNativeActivity({
+      adapter: { controller },
+      nativeProvider: 'openai',
+      onChange: () => idle?.update(),
+    });
+    idle = createVoiceInactivity({
+      readActivity: observer.snapshot,
+      readPending: () => false,
+      setTimer(callback) {
+        timer = callback;
+        return 1;
+      },
+      clearTimer() {
+        timer = null;
+      },
+      onExpire() {
+        expired++;
+      },
+    });
+    try {
+      controller.dc = {
+        readyState: 'open',
+        send() {},
+        close() {
+          this.readyState = 'closed';
+        },
+      };
+      controller.setStatus('listening', 'Ready');
+      const event = (payload) =>
+        controller.handleRealtimeEvent({ data: JSON.stringify(payload) });
+      await event({
+        type: 'response.created',
+        response: { id: 'failed-reply' },
+      });
+      await event({
+        type: 'response.done',
+        response: {
+          id: 'failed-reply',
+          status: 'failed',
+          output,
+          status_details: { error: { message: 'Synthetic failed reply' } },
+        },
+      });
+      assert.deepEqual(states.slice(-2), ['error', 'listening']);
+      assert.equal(controller.dc.readyState, 'open');
+      assert.equal(observer.snapshot().known, known);
+      assert.equal(idle.snapshot().eligible, known);
+      if (known) {
+        timer();
+        assert.equal(expired, 1);
+      } else assert.equal(timer, null);
+      // Fatal teardown can preserve the error status; the next connection must
+      // still retire the old generation rather than inherit unresolved output.
+      controller.setStatus('error', 'Transport failed');
+      controller.stop({ preserveStatus: true });
+      controller.setStatus('connecting', 'Reconnecting');
+      assert.equal(observer.snapshot().connected, false);
+      assert.equal(observer.snapshot().known, true);
+      controller.stop();
+      assert.equal(observer.snapshot().connected, false);
+      assert.equal(observer.snapshot().known, true);
+    } finally {
+      idle.destroy();
+      observer.destroy();
+      controller.stop();
+    }
+  }
+});
diff --git a/src/voice/panel/preferences.js b/src/voice/panel/preferences.js
new file mode 100644
index 000000000..f01a6d59f
--- /dev/null
+++ b/src/voice/panel/preferences.js
@@ -0,0 +1,194 @@
+export const VOICE_PREVIEW_STORAGE_KEY = 'godsEyeView.voice.previewEnabled';
+export const VOICE_TIMEOUT_STORAGE_KEY = 'godsEyeView.voice.inactivityMinutes';
+const PRESETS = ['3', '5', '10', '15'];
+
+function parseMinutes(value) {
+  if (typeof value !== 'number' && typeof value !== 'string') return undefined;
+  if (typeof value === 'string' && !/^\d+$/.test(value)) return undefined;
+  const number = Number(value);
+  return Number.isInteger(number) && number >= 0 && number <= 60
+    ? number
+    : undefined;
+}
+
+/** Outer, browser-local live state. Construction never writes storage. */
+export function createVoicePreferences({ storage } = {}) {
+  const listeners = new Set();
+  const target = () =>
+    storage === undefined ? globalThis.localStorage : storage;
+  const read = (key) => {
+    try {
+      return target()?.getItem?.(key);
+    } catch {
+      return undefined;
+    }
+  };
+  const rawMinutes = read(VOICE_TIMEOUT_STORAGE_KEY);
+  let state = {
+    previewEnabled: read(VOICE_PREVIEW_STORAGE_KEY) !== 'false',
+    minutes: rawMinutes === 'none' ? 0 : (parseMinutes(rawMinutes) ?? 5),
+    previewPersisted: null,
+    timeoutPersisted: null,
+  };
+  const snapshot = () => ({ ...state });
+  function apply(field, status, key, value, serialized) {
+    const changed = state[field] !== value;
+    let persisted = false;
+    state = { ...state, [field]: value };
+    try {
+      const destination = target();
+      if (
+        typeof destination?.setItem === 'function' &&
+        typeof destination?.getItem === 'function'
+      ) {
+        destination.setItem(key, serialized);
+        persisted = destination.getItem(key) === serialized;
+      }
+    } catch {
+      /* The applied live value remains authoritative across mounts. */
+    }
+    state = { ...state, [status]: persisted };
+    const result = {
+      ok: true,
+      applied: true,
+      changed,
+      persisted,
+      ...snapshot(),
+    };
+    for (const listener of [...listeners]) listener(snapshot());
+    return result;
+  }
+  const invalid = () => ({
+    ok: false,
+    applied: false,
+    changed: false,
+    persisted: null,
+    reason: 'invalid-value',
+    ...snapshot(),
+  });
+  return {
+    snapshot,
+    setPreviewEnabled(value) {
+      return typeof value === 'boolean'
+        ? apply(
+            'previewEnabled',
+            'previewPersisted',
+            VOICE_PREVIEW_STORAGE_KEY,
+            value,
+            String(value),
+          )
+        : invalid();
+    },
+    setMinutes(value) {
+      const parsed = parseMinutes(value);
+      return parsed === undefined
+        ? invalid()
+        : apply(
+            'minutes',
+            'timeoutPersisted',
+            VOICE_TIMEOUT_STORAGE_KEY,
+            parsed,
+            parsed === 0 ? 'none' : String(parsed),
+          );
+    },
+    subscribe(listener) {
+      if (typeof listener !== 'function')
+        throw new TypeError('Preference listener required');
+      listeners.add(listener);
+      return () => listeners.delete(listener);
+    },
+  };
+}
+
+/** Mount-local controls, backed by an independently owned preference model. */
+export function bindPreferenceControls({ ui, preferences, copy, onChange }) {
+  const {
+    voicePreviewInput: preview,
+    voicePreviewNote: previewNote,
+    voiceTimeoutSelect: select,
+    voiceTimeoutInput: input,
+    voiceTimeoutNote: timeoutNote,
+  } = ui;
+  let disposed = false;
+  const initial = preferences.snapshot();
+  const displayed = parseMinutes(input?.value);
+  let custom =
+    !PRESETS.includes(String(initial.minutes)) && initial.minutes > 0
+      ? initial.minutes
+      : displayed > 0
+        ? displayed
+        : 5;
+  function render(state) {
+    if (disposed) return;
+    if (preview) preview.checked = state.previewEnabled;
+    if (previewNote)
+      previewNote.textContent = `${copy.previewNote}${state.previewPersisted === false ? ` ${copy.notSaved}` : ''}`;
+    if (timeoutNote)
+      timeoutNote.textContent = `${copy.timeoutNote}${state.timeoutPersisted === false ? ` ${copy.notSaved}` : ''}`;
+    const value = String(state.minutes);
+    const customSelected = state.minutes > 0 && !PRESETS.includes(value);
+    if (customSelected) custom = state.minutes;
+    if (select)
+      select.value =
+        state.minutes === 0 ? '0' : customSelected ? 'custom' : value;
+    if (input) {
+      input.value = String(custom);
+      input.hidden = !customSelected;
+    }
+  }
+  const unsubscribe = preferences.subscribe((state) => {
+    render(state);
+    onChange?.(state);
+  });
+  const previewChange = () => {
+    if (!disposed && !preferences.setPreviewEnabled(preview.checked).ok)
+      render(preferences.snapshot());
+  };
+  const selectChange = () => {
+    if (disposed) return;
+    const value = select.value;
+    if (value === 'custom') {
+      const parsed = parseMinutes(input?.value);
+      if (parsed === undefined || parsed === 0) {
+        render(preferences.snapshot());
+        return;
+      }
+      custom = parsed;
+      preferences.setMinutes(parsed);
+      // A custom value may equal a preset: retain the user's explicit editor choice.
+      select.value = 'custom';
+      if (input) input.hidden = false;
+    } else if (value === '0' || PRESETS.includes(value))
+      preferences.setMinutes(value);
+    else render(preferences.snapshot());
+  };
+  const inputChange = () => {
+    if (disposed) return;
+    const parsed = parseMinutes(input.value);
+    if (parsed === undefined || parsed === 0) {
+      render(preferences.snapshot());
+      return;
+    }
+    custom = parsed;
+    preferences.setMinutes(parsed);
+    if (select) select.value = 'custom';
+    input.hidden = false;
+  };
+  const bindings = [
+    [preview, previewChange],
+    [select, selectChange],
+    [input, inputChange],
+  ];
+  for (const [element, listener] of bindings)
+    element?.addEventListener('change', listener);
+  render(initial);
+  return {
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      unsubscribe();
+      for (const [element, listener] of bindings)
+        element?.removeEventListener('change', listener);
+    },
+  };
+}
diff --git a/src/voice/panel/preferences.test.mjs b/src/voice/panel/preferences.test.mjs
new file mode 100644
index 000000000..76ea3b904
--- /dev/null
+++ b/src/voice/panel/preferences.test.mjs
@@ -0,0 +1,272 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import {
+  createVoicePreferences,
+  bindPreferenceControls,
+  VOICE_PREVIEW_STORAGE_KEY as P,
+  VOICE_TIMEOUT_STORAGE_KEY as T,
+} from './preferences.js';
+
+function storage(entries = {}, mode = 'normal') {
+  const values = new Map(Object.entries(entries));
+  const writes = [];
+  return {
+    writes,
+    values,
+    getItem(key) {
+      if (mode === 'readthrow') throw Error('blocked');
+      return values.get(key) ?? null;
+    },
+    setItem(key, value) {
+      writes.push([key, value]);
+      if (mode === 'throw') throw Error('blocked');
+      if (mode !== 'noop' && mode !== 'readthrow')
+        values.set(key, mode === 'mismatch' ? `${value}!` : value);
+    },
+  };
+}
+class Element {
+  value = '';
+  checked = false;
+  textContent = '';
+  hidden = false;
+  listeners = new Set();
+  addEventListener(type, listener) {
+    assert.equal(type, 'change');
+    this.listeners.add(listener);
+  }
+  removeEventListener(type, listener) {
+    assert.equal(type, 'change');
+    this.listeners.delete(listener);
+  }
+  change(value) {
+    if (typeof value === 'boolean') this.checked = value;
+    else this.value = value;
+    for (const listener of [...this.listeners]) listener();
+  }
+}
+function controls(custom = '7') {
+  const ui = Object.fromEntries(
+    [
+      'voicePreviewInput',
+      'voicePreviewNote',
+      'voiceTimeoutSelect',
+      'voiceTimeoutInput',
+      'voiceTimeoutNote',
+    ].map((key) => [key, new Element()]),
+  );
+  ui.voiceTimeoutInput.value = custom;
+  return ui;
+}
+const copy = {
+  previewNote: 'Preview local',
+  timeoutNote: 'Provider limits still apply',
+  notSaved: 'Not saved',
+};
+function bind(ui, preferences, onChange) {
+  return bindPreferenceControls({ ui, preferences, copy, onChange });
+}
+
+test('defaults and restore are passive; legacy None and stored custom restore', () => {
+  for (const [entries, minutes, previewEnabled] of [
+    [{}, 5, true],
+    [{ [P]: 'false', [T]: 'none' }, 0, false],
+    [{ [T]: '17' }, 17, true],
+    [{ [T]: 'broken' }, 5, true],
+  ]) {
+    const disk = storage(entries);
+    const prefs = createVoicePreferences({ storage: disk });
+    assert.deepEqual(prefs.snapshot(), {
+      previewEnabled,
+      minutes,
+      previewPersisted: null,
+      timeoutPersisted: null,
+    });
+    const ui = controls();
+    bind(ui, prefs).dispose();
+    assert.deepEqual(disk.writes, []);
+  }
+});
+
+test('exact valid values, presets, None and serialized readback', () => {
+  const disk = storage();
+  const prefs = createVoicePreferences({ storage: disk });
+  for (const value of [3, 5, 10, 15, '1', '60', 0]) {
+    const result = prefs.setMinutes(value);
+    assert.equal(result.ok, true);
+    assert.equal(result.applied, true);
+    assert.equal(result.persisted, true);
+    assert.equal(result.minutes, Number(value));
+    assert.deepEqual(disk.writes.at(-1), [
+      T,
+      Number(value) === 0 ? 'none' : String(Number(value)),
+    ]);
+  }
+  assert.equal(prefs.setPreviewEnabled(false).previewEnabled, false);
+  assert.deepEqual(disk.writes.at(-1), [P, 'false']);
+});
+
+test('fractional, malformed, coercible and out-of-range inputs never write or notify', () => {
+  const disk = storage();
+  const prefs = createVoicePreferences({ storage: disk });
+  let notices = 0;
+  prefs.subscribe(() => notices++);
+  const before = prefs.snapshot();
+  for (const value of [
+    null,
+    undefined,
+    true,
+    {},
+    [],
+    '',
+    ' ',
+    ' 3',
+    '3 ',
+    '3.0',
+    '1e1',
+    '0x10',
+    'none',
+    -1,
+    61,
+    3.2,
+    NaN,
+    Infinity,
+  ]) {
+    const result = prefs.setMinutes(value);
+    assert.equal(result.ok, false, String(value));
+    assert.equal(result.applied, false);
+    assert.equal(result.changed, false);
+    assert.deepEqual(prefs.snapshot(), before);
+  }
+  for (const value of [0, 'true', null])
+    assert.equal(prefs.setPreviewEnabled(value).ok, false);
+  assert.equal(notices, 0);
+  assert.deepEqual(disk.writes, []);
+});
+
+for (const mode of ['throw', 'noop', 'mismatch', 'readthrow', 'missing']) {
+  test(`storage ${mode} preserves live value and exposes unsaved state across A → B`, () => {
+    const disk = mode === 'missing' ? null : storage({}, mode);
+    const prefs = createVoicePreferences({ storage: disk });
+    const a = controls();
+    const bindingA = bind(a, prefs);
+    a.voicePreviewInput.change(false);
+    a.voiceTimeoutSelect.change('custom');
+    a.voiceTimeoutInput.change('19');
+    assert.deepEqual(prefs.snapshot(), {
+      previewEnabled: false,
+      minutes: 19,
+      previewPersisted: false,
+      timeoutPersisted: false,
+    });
+    bindingA.dispose();
+    const writeCount = disk?.writes.length;
+    const b = controls();
+    const bindingB = bind(b, prefs);
+    assert.equal(b.voicePreviewInput.checked, false);
+    assert.equal(b.voiceTimeoutInput.value, '19');
+    assert.match(b.voicePreviewNote.textContent, /Not saved/);
+    assert.match(b.voiceTimeoutNote.textContent, /Not saved/);
+    assert.equal(disk?.writes.length, writeCount);
+    a.voicePreviewInput.change(true);
+    a.voiceTimeoutSelect.change('3');
+    assert.equal(prefs.snapshot().minutes, 19);
+    assert.equal(prefs.snapshot().previewEnabled, false);
+    bindingB.dispose();
+  });
+}
+
+test('same-value retry really writes and clears warnings after storage recovers', () => {
+  const disk = storage();
+  const original = disk.setItem;
+  disk.setItem = () => {
+    throw Error('blocked');
+  };
+  const prefs = createVoicePreferences({ storage: disk });
+  const ui = controls();
+  bind(ui, prefs);
+  prefs.setPreviewEnabled(false);
+  prefs.setMinutes(12);
+  assert.match(ui.voiceTimeoutNote.textContent, /Not saved/);
+  disk.setItem = original;
+  const timeout = prefs.setMinutes(12);
+  const preview = prefs.setPreviewEnabled(false);
+  assert.equal(timeout.changed, false);
+  assert.equal(preview.changed, false);
+  assert.equal(timeout.persisted, true);
+  assert.equal(preview.persisted, true);
+  assert.deepEqual(disk.writes, [
+    [T, '12'],
+    [P, 'false'],
+  ]);
+  assert.equal(ui.voiceTimeoutNote.textContent, copy.timeoutNote);
+  assert.equal(ui.voicePreviewNote.textContent, copy.previewNote);
+});
+
+test('Custom commits displayed valid value immediately, even when equal to preset', () => {
+  const disk = storage();
+  const prefs = createVoicePreferences({ storage: disk });
+  const ui = controls('10');
+  bind(ui, prefs);
+  assert.equal(disk.writes.length, 0);
+  ui.voiceTimeoutSelect.change('custom');
+  assert.equal(prefs.snapshot().minutes, 10);
+  assert.equal(ui.voiceTimeoutSelect.value, 'custom');
+  assert.equal(ui.voiceTimeoutInput.hidden, false);
+  assert.deepEqual(disk.writes, [[T, '10']]);
+  ui.voiceTimeoutInput.change('23');
+  ui.voiceTimeoutSelect.change('5');
+  assert.equal(ui.voiceTimeoutInput.value, '23');
+  assert.equal(ui.voiceTimeoutInput.hidden, true);
+  ui.voiceTimeoutSelect.change('custom');
+  assert.equal(prefs.snapshot().minutes, 23);
+  assert.equal(ui.voiceTimeoutInput.value, '23');
+});
+
+test('invalid control edits restore valid state without writes; None remains distinct', () => {
+  const disk = storage({ [T]: '17' });
+  const prefs = createVoicePreferences({ storage: disk });
+  const ui = controls();
+  bind(ui, prefs);
+  assert.equal(ui.voiceTimeoutInput.value, '17');
+  for (const value of ['1.5', '', '61', '0']) {
+    ui.voiceTimeoutInput.change(value);
+    assert.equal(ui.voiceTimeoutInput.value, '17');
+    assert.equal(prefs.snapshot().minutes, 17);
+  }
+  ui.voiceTimeoutSelect.change('malformed');
+  assert.equal(ui.voiceTimeoutSelect.value, 'custom');
+  assert.equal(disk.writes.length, 0);
+  ui.voiceTimeoutSelect.change('0');
+  assert.equal(prefs.snapshot().minutes, 0);
+  assert.equal(ui.voiceTimeoutInput.hidden, true);
+  ui.voiceTimeoutInput.value = 'bad';
+  ui.voiceTimeoutSelect.change('custom');
+  assert.equal(ui.voiceTimeoutSelect.value, '0');
+  assert.equal(prefs.snapshot().minutes, 0);
+  assert.deepEqual(disk.writes, [[T, 'none']]);
+});
+
+test('model snapshots cannot mutate state; unsubscribe and binder disposal release ownership', () => {
+  const prefs = createVoicePreferences({ storage: storage() });
+  const ui = controls();
+  let calls = 0;
+  const binding = bind(ui, prefs, () => calls++);
+  const snap = prefs.snapshot();
+  snap.minutes = 41;
+  assert.equal(prefs.snapshot().minutes, 5);
+  const unsub = prefs.subscribe((state) => {
+    state.minutes = 22;
+  });
+  prefs.setMinutes(11);
+  assert.equal(calls, 1);
+  assert.equal(prefs.snapshot().minutes, 11);
+  unsub();
+  binding.dispose();
+  binding.dispose();
+  prefs.setMinutes(12);
+  assert.equal(calls, 1);
+  assert.equal(ui.voiceTimeoutInput.value, '11');
+  for (const element of Object.values(ui))
+    assert.equal(element.listeners.size, 0);
+});
diff --git a/src/voice/panel/testDom.mjs b/src/voice/panel/testDom.mjs
new file mode 100644
index 000000000..fe7a002d4
--- /dev/null
+++ b/src/voice/panel/testDom.mjs
@@ -0,0 +1,204 @@
+// Minimal DOM fixture for actual control/card/binder composition, not layout proof.
+class Element {
+  constructor(doc, tag = 'div') {
+    Object.assign(this, {
+      ownerDocument: doc,
+      tagName: tag.toUpperCase(),
+      children: [],
+      attributes: new Map(),
+      dataset: {},
+      hidden: false,
+      value: '',
+      checked: false,
+      listeners: new Map(),
+      style: { setProperty() {}, removeProperty() {} },
+    });
+    this.classList = {
+      add: (...names) => names.forEach((n) => this.classes.add(n)),
+      remove: (...names) => names.forEach((n) => this.classes.delete(n)),
+      contains: (name) => this.classes.has(name),
+    };
+    this.classes = new Set();
+  }
+  set id(value) {
+    this.attributes.set('id', value);
+  }
+  get id() {
+    return this.attributes.get('id') || '';
+  }
+  set className(value) {
+    this.classes = new Set(value.split(/\s+/).filter(Boolean));
+  }
+  get className() {
+    return [...this.classes].join(' ');
+  }
+  setAttribute(name, value) {
+    this.attributes.set(name, String(value));
+    if (name === 'class') this.className = value;
+    if (name === 'hidden') this.hidden = true;
+    if (name === 'value') this.value = value;
+    if (name.startsWith('data-'))
+      this.dataset[
+        name.slice(5).replace(/-([a-z])/g, (_, c) => c.toUpperCase())
+      ] = value;
+  }
+  getAttribute(name) {
+    return this.attributes.get(name) ?? null;
+  }
+  get isConnected() {
+    return (
+      this === this.ownerDocument.body || Boolean(this.parentNode?.isConnected)
+    );
+  }
+  get parentElement() {
+    return this.parentNode;
+  }
+  set innerHTML(html) {
+    this.replaceChildren();
+    const stack = [this];
+    const voids = new Set(['INPUT', 'IMG', 'BR', 'HR']);
+    for (const match of html.matchAll(/<(\/?)([a-z][\w-]*)\b([^>]*)>/gi)) {
+      if (match[1]) {
+        if (stack.length > 1) stack.pop();
+        continue;
+      }
+      const node = new Element(this.ownerDocument, match[2]);
+      for (const attr of match[3].matchAll(/([^\s=\/]+)(?:="([^"]*)")?/g))
+        node.setAttribute(attr[1], attr[2] ?? '');
+      stack.at(-1).appendChild(node);
+      if (!voids.has(node.tagName)) stack.push(node);
+    }
+  }
+  set textContent(value) {
+    this.text = String(value);
+  }
+  get textContent() {
+    return this.text ?? '';
+  }
+  appendChild(node) {
+    node.remove();
+    this.children.push(node);
+    node.parentNode = this;
+    return node;
+  }
+  append(...nodes) {
+    nodes.forEach((node) => this.appendChild(node));
+  }
+  insertBefore(node, before) {
+    node.remove();
+    const at = this.children.indexOf(before);
+    this.children.splice(at < 0 ? this.children.length : at, 0, node);
+    node.parentNode = this;
+  }
+  replaceChildren(...nodes) {
+    for (const child of this.children) child.parentNode = null;
+    this.children = [];
+    this.append(...nodes);
+  }
+  remove() {
+    if (this.parentNode)
+      this.parentNode.children = this.parentNode.children.filter(
+        (n) => n !== this,
+      );
+    this.parentNode = null;
+  }
+  contains(node) {
+    return node === this || this.children.some((child) => child.contains(node));
+  }
+  matches(selector) {
+    if (selector.startsWith('#')) return this.id === selector.slice(1);
+    if (selector.startsWith('.')) return this.classes.has(selector.slice(1));
+    return this.tagName === selector.toUpperCase();
+  }
+  querySelectorAll(selector) {
+    return this.children.flatMap((n) => [
+      ...(n.matches(selector) ? [n] : []),
+      ...n.querySelectorAll(selector),
+    ]);
+  }
+  querySelector(selector) {
+    return this.querySelectorAll(selector)[0] || null;
+  }
+  checkVisibility() {
+    return (
+      this.isConnected &&
+      !this.hidden &&
+      (!this.parentNode || this.parentNode.checkVisibility())
+    );
+  }
+  focus() {
+    this.ownerDocument.activeElement = this;
+  }
+  addEventListener(type, listener, options = {}) {
+    if (options.signal?.aborted) return;
+    if (!this.listeners.has(type)) this.listeners.set(type, new Set());
+    this.listeners.get(type).add(listener);
+    if (options.signal)
+      options.signal.addEventListener(
+        'abort',
+        () => this.removeEventListener(type, listener),
+        { once: true },
+      );
+  }
+  removeEventListener(type, listener) {
+    this.listeners.get(type)?.delete(listener);
+  }
+  fire(type, fields = {}) {
+    const event = {
+      type,
+      target: this,
+      preventDefault() {
+        this.defaultPrevented = true;
+      },
+      ...fields,
+    };
+    for (const listener of [...(this.listeners.get(type) || [])])
+      listener.call(this, event);
+    return event;
+  }
+}
+
+const installed = new WeakMap();
+export function installPanelDom(t) {
+  if (installed.has(t)) return installed.get(t);
+  const previous = {
+    window: globalThis.window,
+    document: globalThis.document,
+    Element: globalThis.Element,
+  };
+  const doc = new EventTarget();
+  doc.body = new Element(doc, 'body');
+  doc.documentElement = new Element(doc, 'html');
+  doc.documentElement.lang = 'en';
+  doc.activeElement = doc.body;
+  doc.createElement = (tag) => new Element(doc, tag);
+  doc.getElementById = (id) => doc.body.querySelector(`#${id}`);
+  doc.querySelector = (selector) => doc.body.querySelector(selector);
+  const win = new EventTarget();
+  globalThis.window = win;
+  globalThis.document = doc;
+  globalThis.Element = Element;
+  installed.set(t, doc);
+  t.after(() => Object.assign(globalThis, previous));
+  return doc;
+}
+
+export function controlledClock() {
+  let now = 0,
+    next = 0;
+  const tasks = new Map();
+  return {
+    now: () => now,
+    setTimer(fn, ms) {
+      const id = ++next;
+      tasks.set(id, { fn, at: now + ms });
+      return id;
+    },
+    clearTimer: (id) => tasks.delete(id),
+    advance(ms) {
+      now += ms;
+      for (const [id, task] of [...tasks])
+        if (task.at <= now && tasks.delete(id)) task.fn();
+    },
+  };
+}
diff --git a/src/voice/realtimeCost.js b/src/voice/realtimeCost.js
index 98b03781f..ce20e1fe2 100644
--- a/src/voice/realtimeCost.js
+++ b/src/voice/realtimeCost.js
@@ -46,6 +46,17 @@ export class RealtimeCost {
    */
   syncCostUi() {
     const state = this.costTracker.state();
+    const syncWarning = () => {
+      const warning = this.ui?.costWarning;
+      const value = this.ui?.costValue;
+      if (!warning || !value) return;
+      warning.hidden = !['warn', 'cap', 'unknown'].includes(
+        value.dataset.level,
+      );
+      warning.textContent = warning.hidden ? '' : value.textContent;
+      warning.title = value.title;
+      warning.dataset.level = value.dataset.level;
+    };
     const pendingTier = resolveVoiceModel(this.voiceTier).tier;
     const isMini = pendingTier === 'mini';
     if (this.ui?.tierButton) {
@@ -91,6 +102,7 @@ export class RealtimeCost {
                 'Usage is incomplete because a response was still in flight when the session ended.',
               )
             : '');
+        syncWarning();
         return;
       }
       this.ui.costValue.hidden = false;
@@ -114,6 +126,7 @@ export class RealtimeCost {
               'Estimate is incomplete — a response was still in flight when the session ended, so its usage was never reported.',
             )
           : '');
+      syncWarning();
     }
   }
 
diff --git a/src/voice/realtimeCostPanel.test.mjs b/src/voice/realtimeCostPanel.test.mjs
new file mode 100644
index 000000000..07622f84d
--- /dev/null
+++ b/src/voice/realtimeCostPanel.test.mjs
@@ -0,0 +1,100 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { createVoiceControl } from './control.js';
+import { RealtimeCost } from './realtimeCost.js';
+import { createVoiceCostTracker, resolveVoiceModel } from './voiceCost.js';
+import { installPanelDom } from './panel/testDom.mjs';
+
+function harness(t) {
+  installPanelDom(t);
+  const ui = createVoiceControl({ panel: true });
+  const stops = [];
+  const statuses = [];
+  const cost = new RealtimeCost({
+    readUi: () => ui,
+    readStatus: () => 'listening',
+    operations: {
+      isActive: () => true,
+      stop: (options) => stops.push(options),
+      setStatus: (...args) => statuses.push(args),
+      debugLog() {},
+    },
+  });
+  cost.cloudVoiceAuth = 'api-key';
+  cost.costTracker = createVoiceCostTracker({
+    tier: 'standard',
+    limits: { warnUsd: 2, capUsd: 5 },
+  });
+  const recordThreeDollars = () => {
+    const tokens = Math.ceil(
+      (3 * 1_000_000) / resolveVoiceModel('standard').rates.textOutput,
+    );
+    const state = cost.costTracker.record({
+      output_tokens: tokens,
+      output_token_details: { text_tokens: tokens },
+    });
+    cost.applyCost(state);
+  };
+  t.mock.method(console, 'warn', () => {});
+  return { cost, ui, stops, statuses, recordThreeDollars };
+}
+
+test('soft cost warning is visible outside closed Settings, while ordinary spend stays inside', (t) => {
+  const { cost, ui, recordThreeDollars } = harness(t);
+  cost.syncCostUi();
+  assert.equal(ui.voicePanel.hidden, true);
+  assert.equal(ui.costValue.checkVisibility(), false);
+  assert.equal(ui.costWarning.hidden, true);
+  assert.equal(ui.voicePanel.contains(ui.costWarning), false);
+  assert.equal(ui.root.querySelectorAll('#gev-voice-cost-value').length, 1);
+
+  recordThreeDollars();
+  assert.equal(ui.costWarning.checkVisibility(), true);
+  assert.equal(ui.costWarning.dataset.level, 'warn');
+  assert.equal(ui.costWarning.textContent, ui.costValue.textContent);
+  assert.equal(ui.costWarning.title, ui.costValue.title);
+  assert.match(ui.costWarning.title, /Warns at/);
+  assert.equal(
+    ui.voicePanel.hidden,
+    true,
+    'warning never forces Settings open',
+  );
+
+  cost.prepareSession();
+  cost.syncCostUi();
+  assert.equal(
+    ui.costWarning.hidden,
+    true,
+    'new session clears the old warning',
+  );
+  assert.equal(ui.costWarning.textContent, '');
+});
+
+test('closed Settings cannot hide the hard cap or suppress its ordinary stop and status', (t) => {
+  const { ui, stops, statuses, recordThreeDollars } = harness(t);
+  recordThreeDollars();
+  assert.equal(stops.length, 0);
+  recordThreeDollars();
+  assert.equal(ui.costWarning.checkVisibility(), true);
+  assert.equal(ui.costWarning.dataset.level, 'cap');
+  assert.deepEqual(stops, [{ preserveStatus: true }]);
+  assert.equal(statuses.at(-1)[0], 'idle');
+  assert.match(statuses.at(-1)[1], /Session ended — cost cap/);
+});
+
+test('unknown OAuth cost remains visible outside Settings and clears on a fresh API meter', (t) => {
+  const { cost, ui } = harness(t);
+  cost.sessionCloudVoiceAuth = 'oauth';
+  cost.syncCostUi();
+  assert.equal(ui.costWarning.checkVisibility(), true);
+  assert.equal(ui.costWarning.dataset.level, 'unknown');
+  assert.equal(ui.costWarning.textContent, 'COST UNKNOWN');
+  assert.match(
+    ui.costWarning.title,
+    /USD cost and the API spend cap are unavailable/,
+  );
+  assert.equal(ui.voicePanel.hidden, true);
+  cost.sessionCloudVoiceAuth = 'api-key';
+  cost.syncCostUi();
+  assert.equal(ui.costWarning.hidden, true);
+});
diff --git a/src/voice/sessionCommands.js b/src/voice/sessionCommands.js
index 9431555df..7451a4e5b 100644
--- a/src/voice/sessionCommands.js
+++ b/src/voice/sessionCommands.js
@@ -36,15 +36,24 @@ export function createVoiceCommands({
   pointer = null,
   referents = null,
   createReticle = createDefaultReticle,
+  panelHost = null,
+  nativePanelProvider = null,
 }) {
   if (resetExisting) window.__gevVoiceCommands?.stop?.({ removeUi: true });
-  const ui = createControl({ reset: true });
+  const ui = createControl({
+    reset: true,
+    ...(panelHost ? { panel: true } : {}),
+  });
+  let actionObserver;
+  let panelMount;
   const session = createVoiceSession({
     runner,
     signal,
-    createAdapter: (hooks) =>
-      createSession({
+    createAdapter: (hooks) => {
+      if (panelHost) actionObserver = panelHost.observeActions(hooks);
+      return createSession({
         ...hooks,
+        ...(actionObserver ? { runAction: actionObserver.runAction } : {}),
         runner,
         ui,
         dataManager,
@@ -53,7 +62,8 @@ export function createVoiceCommands({
         createController,
         pointer,
         radioLayer: dataManager?.layers?.get('radio')?.module || null,
-      }),
+      });
+    },
   });
   const adapter = session.adapter;
   const capabilities = adapter.capabilities || {};
@@ -117,11 +127,31 @@ export function createVoiceCommands({
   });
   // Captions, plan and result card nested in the control; it only reads
   // provider-neutral session events.
-  const card = ui.card ? createCard({ root: ui.root }) : null;
-  const updateCard = card
-    ? session.subscribe((event) => card.handle(event))
+  const card = ui.card
+    ? createCard({
+        root: ui.root,
+        ...(panelHost ? { onRender: () => panelMount?.panel.sync() } : {}),
+      })
     : null;
+  panelMount = panelHost?.mount({
+    ui,
+    card,
+    session,
+    observer: actionObserver,
+    nativeProvider: nativePanelProvider,
+  });
+  const updatePanel = panelMount ? session.subscribe(panelMount.handle) : null;
+  const updateCard =
+    card && !panelMount
+      ? session.subscribe((event) => card.handle(event))
+      : null;
   controls.voiceCard = card;
+  if (panelMount) {
+    controls.voicePanel = panelMount.panel;
+    controls.captureVoicePanelOperation = panelMount.captureOperation;
+    controls.getVoicePanelState = panelMount.snapshot;
+    controls.getVoicePreferences = panelHost.snapshot;
+  }
   // Point-and-ask: the reticle follows turn events; pointer and referents are
   // session-scoped, so a session that ends forgets both.
   const reticle = pointer ? createReticle(pointer) : null;
@@ -151,8 +181,11 @@ export function createVoiceCommands({
   );
   const buttonHandler = () => {
     if (adapter.ignoreButtonClick?.()) return;
-    if (session.isActive()) session.stop();
-    else void session.start({ pushToTalk: false });
+    if (session.isActive()) {
+      const ticket = panelMount?.stopTicket();
+      session.stop();
+      panelMount?.closeAfterStop(ticket);
+    } else void session.start({ pushToTalk: false });
   };
   ui.button.addEventListener('click', buttonHandler);
   let cleaned = false;
@@ -165,6 +198,9 @@ export function createVoiceCommands({
     annotationUnsubscribe?.();
     updateStatus();
     updateCard?.();
+    updatePanel?.();
+    panelMount?.destroy();
+    actionObserver?.dispose();
     updatePointer();
     forwardEvents?.();
     reticle?.destroy();
diff --git a/src/voice/speech.js b/src/voice/speech.js
index ab129aad3..c53881595 100644
--- a/src/voice/speech.js
+++ b/src/voice/speech.js
@@ -115,6 +115,18 @@ function shownSources(source) {
   return source ? [{ label: sourceLabel(source) }] : [];
 }
 
+// Entity labels that layers register as English data (firms/, alpr/); keep in
+// step with the producers. Other names (callsigns, places) show as they came.
+const ENTITY_LABELS = new Set([msg('ALPR camera')]);
+const FIRE_LABEL = /^Fire · FRP (\S+) MW$/;
+
+/** An entity label as the card shows it, in the active language. */
+export function shownEntityLabel(label) {
+  if (ENTITY_LABELS.has(label)) return t(label);
+  const fire = FIRE_LABEL.exec(label ?? '');
+  return fire ? t('Fire · FRP {frp} MW', { frp: fire[1] }) : label;
+}
+
 /*
  * Tool errors stay English in the result (the model reads them). The card
  * translates the known ones; the English must match gevActions exactly.
@@ -592,7 +604,7 @@ function getEntityContext(result) {
     return {
       say: null,
       display: {
-        title,
+        title: spokenLabel(shownEntityLabel(title)),
         lines: [
           selected.layerName
             ? shownLayerName(selected.layerName, selected.layerId)
@@ -836,6 +848,7 @@ const STEP_TITLES = Object.freeze({
   zoom_to_globe: msg('Zoom out to globe'),
   show_data_layers_menu: msg('Open data layers'),
   set_panel_open: msg('Open or close a panel'),
+  set_voice_inactivity_timeout: msg('Voice inactivity timeout'),
   set_context_mode: msg('Change context mode'),
   control_cockpit: msg('Control cockpit'),
   set_visual_style: msg('Change visual style'),
diff --git a/src/voice/voiceCard.js b/src/voice/voiceCard.js
index 09619bb54..4e5be69b4 100644
--- a/src/voice/voiceCard.js
+++ b/src/voice/voiceCard.js
@@ -13,6 +13,7 @@ const ELEMENT_IDS = Object.freeze({
   dismiss: 'gev-voice-card-dismiss',
   user: 'gev-voice-card-user',
   userText: 'gev-voice-card-user-text',
+  userWho: 'gev-voice-card-user-who',
   pointer: 'gev-voice-card-pointer',
   pointerKind: 'gev-voice-card-pointer-kind',
   pointerText: 'gev-voice-card-pointer-text',
@@ -70,8 +71,9 @@ export class VoiceCardControls {
     idleMs = VOICE_CARD_IDLE_MS,
     setTimer = (fn, ms) => setTimeout(fn, ms),
     clearTimer = (id) => clearTimeout(id),
+    onRender,
   }) {
-    Object.assign(this, { idleMs, setTimer, clearTimer });
+    Object.assign(this, { idleMs, setTimer, clearTimer, onRender });
     this.elements = Object.fromEntries(
       Object.entries(ELEMENT_IDS).map(([key, id]) => [
         key,
@@ -79,6 +81,10 @@ export class VoiceCardControls {
       ]),
     );
     this.state = initialVoiceCardState();
+    this.enabled = true;
+    this.presented = true;
+    this.announcementRevision = 0;
+    this.consumedPresentationAnnouncement = -1;
     this.hideTimer = null;
     this.destroyed = false;
     this.listeners = new AbortController();
@@ -96,17 +102,53 @@ export class VoiceCardControls {
     if (this.destroyed || !this.elements.card) return;
     const next = reduceVoiceCard(this.state, event);
     if (next === this.state) return;
+    if (
+      next.announce !== this.state.announce ||
+      (next.announce &&
+        ((event.type === 'transcript' &&
+          event.role === 'assistant' &&
+          event.final) ||
+          (event.type === 'action-result' &&
+            next.result !== this.state.result) ||
+          (event.type === 'pointer' &&
+            next.pointer &&
+            next.pointer !== this.state.pointer)))
+    )
+      this.announcementRevision++;
     this.state = next;
     this.render();
     if (this.state.visible) this.scheduleIdle();
     else this.cancelIdle();
   }
 
+  /** A local submission allows future output after dismissal; keep its content. */
+  rearm() {
+    if (this.destroyed || !this.elements.card) return;
+    this.state = { ...this.state, dismissed: false };
+  }
+
   /** An annotation outline resolved or failed after its tool result. */
   outline(event) {
     this.handle({ type: 'outline', id: event?.id, status: event?.status });
   }
 
+  /** Change presentation only; session events and the idle deadline continue. */
+  setEnabled(enabled) {
+    if (this.destroyed || !this.elements.card) return;
+    this.enabled = Boolean(enabled);
+    this.render();
+  }
+
+  /** View selection changes presentation without changing the saved preference. */
+  setPresented(presented) {
+    if (this.destroyed || !this.elements.card || this.presented === presented)
+      return;
+    if (!presented)
+      this.consumedPresentationAnnouncement = this.announcementRevision;
+    this.presented = presented;
+    this.render();
+  }
+
   scheduleIdle() {
     this.cancelIdle();
     this.hideTimer = this.setTimer(() => {
@@ -129,12 +171,13 @@ export class VoiceCardControls {
 
   render() {
     const el = this.elements;
-    const view = voiceCardView(this.state);
+    const view = this.snapshot();
     setHidden(el.card, !view.visible);
     el.card.dataset.busy = String(view.busy);
     setText(el.phase, view.phase);
     setHidden(el.user, !view.user.visible);
     setText(el.userText, view.user.text);
+    setText(el.userWho, view.user.label);
     setHidden(el.pointer, !view.pointer.visible);
     setText(el.pointerKind, view.pointer.kind);
     setText(el.pointerText, view.pointer.text);
@@ -186,11 +229,21 @@ export class VoiceCardControls {
       node.textContent = note;
     });
     setText(el.live, view.announce);
+    this.onRender?.();
   }
 
   /** Test/diagnostic view of what the card shows. */
   snapshot() {
-    return voiceCardView(this.state);
+    const view = voiceCardView(this.state);
+    return this.enabled && this.presented
+      ? {
+          ...view,
+          announce:
+            this.consumedPresentationAnnouncement === this.announcementRevision
+              ? ''
+              : view.announce,
+        }
+      : { ...view, visible: false, announce: '' };
   }
 
   /** Idempotent: removes listeners and the idle timer; markup stays owned by the control. */
diff --git a/src/voice/voiceCard.test.mjs b/src/voice/voiceCard.test.mjs
index 5863cde8d..64a72955b 100644
--- a/src/voice/voiceCard.test.mjs
+++ b/src/voice/voiceCard.test.mjs
@@ -3,13 +3,17 @@ import { readFileSync } from 'node:fs';
 import test from 'node:test';
 import { readStylesheet } from '../testSupport/readStylesheet.mjs';
 import { VoiceCardControls } from './voiceCard.js';
+import { getLocale, setLocale } from '../i18n/index.js';
 import {
   initialVoiceCardState,
   reduceVoiceCard,
   voiceCardView,
 } from './voiceCardPresentation.js';
 
-const controlSource = readFileSync(new URL('./control.js', import.meta.url), 'utf8');
+const controlSource = readFileSync(
+  new URL('./control.js', import.meta.url),
+  'utf8',
+);
 const css = readStylesheet(new URL('../../style.css', import.meta.url));
 
 function fold(events) {
@@ -19,11 +23,37 @@ function fold(events) {
 test('presentation: a slow annotate turn shows captions, plan steps and the result card', () => {
   const state = fold([
     { type: 'interruption' },
-    { type: 'transcript', role: 'user', text: 'Annotate the Texas State Capitol', final: true },
-    { type: 'transcript', role: 'assistant', text: 'Finding the Capitol, ', responseId: 'r1' },
-    { type: 'transcript', role: 'assistant', text: 'then outlining it.', responseId: 'r1' },
-    { type: 'action-call', name: 'annotate_map', callId: 'call_a', arguments: { annotations: [{ target: 'Texas State Capitol' }] } },
-    { type: 'progress', name: 'annotate_map', callId: 'call_a', step: 'resolve', label: 'Texas State Capitol' },
+    {
+      type: 'transcript',
+      role: 'user',
+      text: 'Annotate the Texas State Capitol',
+      final: true,
+    },
+    {
+      type: 'transcript',
+      role: 'assistant',
+      text: 'Finding the Capitol, ',
+      responseId: 'r1',
+    },
+    {
+      type: 'transcript',
+      role: 'assistant',
+      text: 'then outlining it.',
+      responseId: 'r1',
+    },
+    {
+      type: 'action-call',
+      name: 'annotate_map',
+      callId: 'call_a',
+      arguments: { annotations: [{ target: 'Texas State Capitol' }] },
+    },
+    {
+      type: 'progress',
+      name: 'annotate_map',
+      callId: 'call_a',
+      step: 'resolve',
+      label: 'Texas State Capitol',
+    },
   ]);
   let view = voiceCardView(state);
   assert.equal(view.visible, true);
@@ -31,9 +61,16 @@ test('presentation: a slow annotate turn shows captions, plan steps and the resu
   assert.equal(view.phase, 'WORKING');
   assert.equal(view.user.text, 'Annotate the Texas State Capitol');
   assert.equal(view.assistant.text, 'Finding the Capitol, then outlining it.');
-  assert.deepEqual(view.steps.map(({ label, status, detail }) => ({ label, status, detail })), [
-    { label: 'Mark Texas State Capitol', status: 'running', detail: 'Finding places: Texas State Capitol' },
-  ]);
+  assert.deepEqual(
+    view.steps.map(({ label, status, detail }) => ({ label, status, detail })),
+    [
+      {
+        label: 'Mark Texas State Capitol',
+        status: 'running',
+        detail: 'Finding places: Texas State Capitol',
+      },
+    ],
+  );
   const done = [
     {
       type: 'action-result',
@@ -43,7 +80,12 @@ test('presentation: a slow annotate turn shows captions, plan steps and the resu
         ok: true,
         outlinePending: true,
         items: [{ ok: true, id: 'anno-1', outlinePending: true }],
-        display: { title: 'Marked 1 place', lines: ['Texas State Capitol'], notes: ['Tracing outlines'], sources: [{ label: 'OpenStreetMap' }] },
+        display: {
+          title: 'Marked 1 place',
+          lines: ['Texas State Capitol'],
+          notes: ['Tracing outlines'],
+          sources: [{ label: 'OpenStreetMap' }],
+        },
         referents: [{ n: 1, id: 'anno-1', label: 'Texas State Capitol' }],
       },
     },
@@ -53,35 +95,80 @@ test('presentation: a slow annotate turn shows captions, plan steps and the resu
   assert.equal(view.phase, 'DONE');
   assert.equal(view.steps[0].detail, 'Outline traced');
   assert.equal(view.result.title, 'Marked 1 place');
-  assert.deepEqual(view.result.referents, [{ n: 1, label: 'Texas State Capitol' }]);
-  assert.deepEqual(view.result.notes, ['Tracing outlines', 'Source: OpenStreetMap']);
-  assert.equal(view.announce, 'Marked 1 place', 'the live region carries the result title');
+  assert.deepEqual(view.result.referents, [
+    { n: 1, label: 'Texas State Capitol' },
+  ]);
+  assert.deepEqual(view.result.notes, [
+    'Tracing outlines',
+    'Source: OpenStreetMap',
+  ]);
+  assert.equal(
+    view.announce,
+    'Marked 1 place',
+    'the live region carries the result title',
+  );
 });
 
 test('presentation: silent lookups, dismissal and session end', () => {
   const lookup = fold([
     { type: 'interruption' },
     { type: 'action-call', name: 'get_current_view_state', arguments: {} },
-    { type: 'action-result', name: 'get_current_view_state', result: { ok: true, schedule: 'silent', display: { title: 'View state' } } },
+    {
+      type: 'action-result',
+      name: 'get_current_view_state',
+      result: {
+        ok: true,
+        schedule: 'silent',
+        display: { title: 'View state' },
+      },
+    },
   ]);
-  assert.equal(voiceCardView(lookup).result.visible, false, 'a silent lookup does not take the result card');
+  assert.equal(
+    voiceCardView(lookup).result.visible,
+    false,
+    'a silent lookup does not take the result card',
+  );
   const dismissed = reduceVoiceCard(lookup, { type: 'dismiss' });
   assert.equal(voiceCardView(dismissed).visible, false);
-  const stillDismissed = reduceVoiceCard(dismissed, { type: 'transcript', role: 'assistant', text: 'Hi', final: true });
-  assert.equal(voiceCardView(stillDismissed).visible, false, 'dismissed until the next turn');
-  assert.equal(voiceCardView(reduceVoiceCard(stillDismissed, { type: 'interruption' })).visible, true);
-  assert.deepEqual(reduceVoiceCard(lookup, { type: 'state', state: 'idle' }), initialVoiceCardState());
-  assert.equal(reduceVoiceCard(lookup, { type: 'turn-metrics' }), lookup, 'unrelated events are no-ops');
+  const stillDismissed = reduceVoiceCard(dismissed, {
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Hi',
+    final: true,
+  });
+  assert.equal(
+    voiceCardView(stillDismissed).visible,
+    false,
+    'dismissed until the next turn',
+  );
+  assert.equal(
+    voiceCardView(reduceVoiceCard(stillDismissed, { type: 'interruption' }))
+      .visible,
+    true,
+  );
+  assert.deepEqual(
+    reduceVoiceCard(lookup, { type: 'state', state: 'idle' }),
+    initialVoiceCardState(),
+  );
+  assert.equal(
+    reduceVoiceCard(lookup, { type: 'turn-metrics' }),
+    lookup,
+    'unrelated events are no-ops',
+  );
 });
 
 test('markup: the card nests inside the voice control with every element and a polite live region', () => {
   const root = controlSource.indexOf("root.id = 'gev-voice-control'");
   const card = controlSource.indexOf('id="gev-voice-card"');
-  assert.ok(root >= 0 && card > root, 'the card is part of the voice control markup');
+  assert.ok(
+    root >= 0 && card > root,
+    'the card is part of the voice control markup',
+  );
   for (const id of [
     'gev-voice-card-phase',
     'gev-voice-card-dismiss',
     'gev-voice-card-user-text',
+    'gev-voice-card-user-who',
     'gev-voice-card-assistant-text',
     'gev-voice-card-plan',
     'gev-voice-card-result-title',
@@ -92,11 +179,22 @@ test('markup: the card nests inside the voice control with every element and a p
   ]) {
     assert.match(controlSource, new RegExp(`id="${id}"`), `${id} is missing`);
   }
-  assert.match(controlSource, /id="gev-voice-card-live"[^>]*aria-live="polite"/);
+  assert.match(
+    controlSource,
+    /id="gev-voice-card-live"[^>]*aria-live="polite"/,
+  );
   assert.match(controlSource, /aria-label="\$\{t\('Dismiss voice card'\)\}"/);
   assert.match(css, /#gev-voice-control \.gev-voice-card \{/);
-  assert.match(css, /body\.recording-mode #gev-voice-control/, 'recording mode hides the control, card included');
-  assert.match(css, /body\.ui-clean-view #command-dock/, 'Clean-UI hides the dock, card included');
+  assert.match(
+    css,
+    /body\.recording-mode #gev-voice-control/,
+    'recording mode hides the control, card included',
+  );
+  assert.match(
+    css,
+    /body\.ui-clean-view #command-dock/,
+    'Clean-UI hides the dock, card included',
+  );
 });
 
 function fakeRoot() {
@@ -111,7 +209,12 @@ function fakeRoot() {
       ownerDocument: null,
       addEventListener(type, handler, options) {
         listeners.set(type, handler);
-        options?.signal?.addEventListener('abort', () => listeners.delete(type));
+        options?.signal?.addEventListener('abort', () =>
+          listeners.delete(type),
+        );
+      },
+      removeEventListener(type, handler) {
+        if (listeners.get(type) === handler) listeners.delete(type);
       },
       fire: (type) => listeners.get(type)?.({}),
       listenerCount: () => listeners.size,
@@ -128,6 +231,7 @@ function fakeRoot() {
   const nodes = new Map();
   const doc = { createElement: (tag) => ({ ...make(tag), tag }) };
   const root = {
+    ...make('gev-voice-control'),
     querySelector(selector) {
       const id = selector.slice(1);
       if (!nodes.has(id)) {
@@ -160,12 +264,26 @@ test('controls: render, idle hide, dismiss and idempotent teardown', () => {
   });
   assert.equal(nodes.get('gev-voice-card').hidden, true, 'starts hidden');
   card.handle({ type: 'interruption' });
-  card.handle({ type: 'action-call', name: 'fly_to_location', arguments: { query: 'Tokyo' } });
-  card.handle({ type: 'action-result', name: 'fly_to_location', result: { ok: true, display: { title: 'Tokyo', lines: [], chips: [{ label: 'stale' }] } } });
+  card.handle({
+    type: 'action-call',
+    name: 'fly_to_location',
+    arguments: { query: 'Tokyo' },
+  });
+  card.handle({
+    type: 'action-result',
+    name: 'fly_to_location',
+    result: {
+      ok: true,
+      display: { title: 'Tokyo', lines: [], chips: [{ label: 'stale' }] },
+    },
+  });
   assert.equal(nodes.get('gev-voice-card').hidden, false);
   assert.equal(nodes.get('gev-voice-card-result-title').textContent, 'Tokyo');
   assert.equal(nodes.get('gev-voice-card-plan').children.length, 1);
-  assert.equal(nodes.get('gev-voice-card-chips').children[0].textContent, 'stale');
+  assert.equal(
+    nodes.get('gev-voice-card-chips').children[0].textContent,
+    'stale',
+  );
   assert.equal(timers.size, 1, 'one idle timer at a time');
   [...timers.values()][0]();
   assert.equal(nodes.get('gev-voice-card').hidden, true, 'hides when idle');
@@ -177,7 +295,11 @@ test('controls: render, idle hide, dismiss and idempotent teardown', () => {
   assert.equal(timers.size, 0);
   assert.equal(nodes.get('gev-voice-card-dismiss').listenerCount(), 0);
   card.handle({ type: 'interruption' });
-  assert.equal(nodes.get('gev-voice-card').hidden, true, 'a destroyed card ignores late events');
+  assert.equal(
+    nodes.get('gev-voice-card').hidden,
+    true,
+    'a destroyed card ignores late events',
+  );
 });
 
 test('controls: a control without card markup is inert', () => {
@@ -189,17 +311,41 @@ test('controls: a control without card markup is inert', () => {
 test('presentation: concurrent calls of one tool update their own steps', () => {
   const state = fold([
     { type: 'interruption' },
-    { type: 'action-call', name: 'fly_to_location', callId: 'c1', arguments: { query: 'Tokyo' } },
-    { type: 'action-call', name: 'fly_to_location', callId: 'c2', arguments: { query: 'Paris' } },
+    {
+      type: 'action-call',
+      name: 'fly_to_location',
+      callId: 'c1',
+      arguments: { query: 'Tokyo' },
+    },
+    {
+      type: 'action-call',
+      name: 'fly_to_location',
+      callId: 'c2',
+      arguments: { query: 'Paris' },
+    },
     // Out of order: the first call finishes last.
-    { type: 'action-result', name: 'fly_to_location', callId: 'c2', result: { ok: false, error: 'x' } },
-    { type: 'progress', name: 'fly_to_location', callId: 'c1', step: 'search', label: 'Tokyo' },
+    {
+      type: 'action-result',
+      name: 'fly_to_location',
+      callId: 'c2',
+      result: { ok: false, error: 'x' },
+    },
+    {
+      type: 'progress',
+      name: 'fly_to_location',
+      callId: 'c1',
+      step: 'search',
+      label: 'Tokyo',
+    },
   ]);
   const steps = voiceCardView(state).steps;
-  assert.deepEqual(steps.map(({ label, status }) => [label, status]), [
-    ['Fly to Tokyo', 'running'],
-    ['Fly to Paris', 'failed'],
-  ]);
+  assert.deepEqual(
+    steps.map(({ label, status }) => [label, status]),
+    [
+      ['Fly to Tokyo', 'running'],
+      ['Fly to Paris', 'failed'],
+    ],
+  );
   assert.equal(steps[0].detail, 'Looking up place: Tokyo');
 });
 
@@ -207,27 +353,299 @@ test('presentation: stale and unmatched events never reopen the card', () => {
   const ended = fold([
     { type: 'interruption' },
     { type: 'action-call', name: 'annotate_map', callId: 'c1', arguments: {} },
-    { type: 'action-result', name: 'annotate_map', callId: 'c1', result: { ok: true, outlinePending: true, items: [{ ok: true, id: 'anno-9', outlinePending: true }] } },
+    {
+      type: 'action-result',
+      name: 'annotate_map',
+      callId: 'c1',
+      result: {
+        ok: true,
+        outlinePending: true,
+        items: [{ ok: true, id: 'anno-9', outlinePending: true }],
+      },
+    },
     { type: 'state', state: 'idle' },
   ]);
   for (const late of [
     { type: 'outline', id: 'anno-9', status: 'resolved' },
     { type: 'outline', status: 'resolved' },
     { type: 'progress', name: 'annotate_map', callId: 'c1', step: 'resolve' },
-    { type: 'action-result', name: 'annotate_map', callId: 'c1', result: { ok: true, display: { title: 'Marked 1 place' } } },
+    {
+      type: 'action-result',
+      name: 'annotate_map',
+      callId: 'c1',
+      result: { ok: true, display: { title: 'Marked 1 place' } },
+    },
   ]) {
-    assert.equal(reduceVoiceCard(ended, late), ended, `${late.type} after stop is a no-op`);
+    assert.equal(
+      reduceVoiceCard(ended, late),
+      ended,
+      `${late.type} after stop is a no-op`,
+    );
   }
   const live = fold([
     { type: 'interruption' },
     { type: 'action-call', name: 'annotate_map', callId: 'c1', arguments: {} },
-    { type: 'action-result', name: 'annotate_map', callId: 'c1', result: { ok: true, outlinePending: true, items: [{ ok: true, id: 'anno-1', outlinePending: true }, { ok: true, id: 'anno-2', outlinePending: true }] } },
+    {
+      type: 'action-result',
+      name: 'annotate_map',
+      callId: 'c1',
+      result: {
+        ok: true,
+        outlinePending: true,
+        items: [
+          { ok: true, id: 'anno-1', outlinePending: true },
+          { ok: true, id: 'anno-2', outlinePending: true },
+        ],
+      },
+    },
     { type: 'dismiss' },
   ]);
-  assert.equal(reduceVoiceCard(live, { type: 'outline', id: 'anno-7', status: 'resolved' }), live, 'another mark is ignored');
-  const first = reduceVoiceCard(live, { type: 'outline', id: 'anno-1', status: 'resolved' });
-  assert.equal(voiceCardView(first).steps[0].detail, 'Tracing outline', 'one of two outlines still pending');
-  assert.equal(voiceCardView(first).visible, false, 'a dismissed card stays hidden');
-  const both = reduceVoiceCard(first, { type: 'outline', id: 'anno-2', status: 'failed' });
+  assert.equal(
+    reduceVoiceCard(live, {
+      type: 'outline',
+      id: 'anno-7',
+      status: 'resolved',
+    }),
+    live,
+    'another mark is ignored',
+  );
+  const first = reduceVoiceCard(live, {
+    type: 'outline',
+    id: 'anno-1',
+    status: 'resolved',
+  });
+  assert.equal(
+    voiceCardView(first).steps[0].detail,
+    'Tracing outline',
+    'one of two outlines still pending',
+  );
+  assert.equal(
+    voiceCardView(first).visible,
+    false,
+    'a dismissed card stays hidden',
+  );
+  const both = reduceVoiceCard(first, {
+    type: 'outline',
+    id: 'anno-2',
+    status: 'failed',
+  });
   assert.equal(voiceCardView(both).steps[0].detail, 'Outline unavailable');
 });
+
+test('presentation controls preserve real reducer content and the existing 14-second idle deadline', () => {
+  const { root, nodes } = fakeRoot();
+  const timers = new Map();
+  let next = 0,
+    renders = 0;
+  const card = new VoiceCardControls({
+    root,
+    setTimer(fn, ms) {
+      const id = ++next;
+      timers.set(id, { fn, ms });
+      return id;
+    },
+    clearTimer(id) {
+      timers.delete(id);
+    },
+    onRender() {
+      renders++;
+    },
+  });
+  card.handle({ type: 'interruption' });
+  card.handle({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'A current answer',
+    final: true,
+    responseId: 'r1',
+  });
+  const content = card.state;
+  const timer = [...timers.keys()][0];
+  assert.equal(timers.get(timer).ms, 14000);
+  card.setPresented(false);
+  assert.equal(card.snapshot().visible, false);
+  assert.equal(nodes.get('gev-voice-card-live').textContent, '');
+  card.setPresented(true);
+  assert.equal(card.snapshot().visible, true);
+  assert.equal(card.snapshot().assistant.text, 'A current answer');
+  assert.equal(
+    card.snapshot().announce,
+    '',
+    'returning to a tab does not repeat an already presented announcement',
+  );
+  assert.equal(card.state, content);
+  assert.equal(
+    [...timers.keys()][0],
+    timer,
+    'presentation switches do not reset idle',
+  );
+  card.setEnabled(false);
+  card.handle({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'A later answer',
+    final: true,
+    responseId: 'r2',
+  });
+  assert.equal(card.snapshot().visible, false);
+  card.setEnabled(true);
+  assert.equal(card.snapshot().assistant.text, 'A later answer');
+  assert.equal(card.snapshot().announce, 'A later answer');
+  assert.ok(renders > 4);
+  const idle = [...timers.values()][0];
+  idle.fn();
+  assert.equal(
+    card.snapshot().visible,
+    false,
+    'original idle still ends content presentation',
+  );
+  card.destroy();
+  const lastRenders = renders;
+  card.setPresented(false);
+  card.setEnabled(false);
+  assert.equal(renders, lastRenders);
+});
+
+test('a new hidden reply with identical words is still a fresh announcement', () => {
+  const { root } = fakeRoot();
+  const card = new VoiceCardControls({
+    root,
+    setTimer: () => 1,
+    clearTimer() {},
+  });
+  card.handle({ type: 'interruption' });
+  card.handle({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Same words',
+    final: true,
+    responseId: 'r1',
+  });
+  card.setPresented(false);
+  card.handle({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Same words',
+    final: true,
+    responseId: 'r2',
+  });
+  card.setPresented(true);
+  assert.equal(card.snapshot().announce, 'Same words');
+  card.destroy();
+});
+
+test('additive presentation gates retain the current localized reducer labels', () => {
+  const previous = getLocale();
+  try {
+    setLocale('es');
+    const { root } = fakeRoot();
+    const card = new VoiceCardControls({
+      root,
+      setTimer: () => 1,
+      clearTimer() {},
+    });
+    card.handle({ type: 'interruption' });
+    card.handle({
+      type: 'action-call',
+      name: 'annotate_map',
+      callId: 'a',
+      arguments: {},
+    });
+    assert.equal(card.snapshot().phase, 'EN CURSO');
+    const steps = card.state.steps;
+    const result = card.state.result;
+    const who = root.querySelector('#gev-voice-card-user-who');
+    card.handle({ type: 'transcript', role: 'user', text: 'Same words', attribution: 'unverified' });
+    assert.equal(card.state.userAttribution, 'unverified');
+    assert.equal(card.snapshot().user.label, 'Habla reciente');
+    assert.equal(who.textContent, 'Habla reciente');
+    card.handle({ type: 'transcript', role: 'user', text: 'Same words' });
+    assert.equal(card.state.userAttribution, null);
+    assert.equal(card.snapshot().user.label, 'TÚ');
+    assert.equal(who.textContent, 'TÚ');
+    assert.equal(card.state.steps, steps);
+    assert.equal(card.state.result, result);
+
+    card.setPresented(false);
+    card.setPresented(true);
+    assert.equal(card.snapshot().phase, 'EN CURSO');
+    card.setEnabled(false);
+    card.setEnabled(true);
+    assert.equal(card.snapshot().phase, 'EN CURSO');
+    card.destroy();
+  } finally {
+    setLocale(previous);
+  }
+});
+
+test('manual panel and preference compose with the actual card without changing voice content or enabling Preview', async () => {
+  const { createManualVoicePanel } = await import('./panel/manualPanel.js');
+  const { createVoicePreferences, bindPreferenceControls } =
+    await import('./panel/preferences.js');
+  const { root } = fakeRoot();
+  let panel;
+  const card = new VoiceCardControls({
+    root,
+    setTimer: () => 1,
+    clearTimer() {},
+    onRender: () => panel?.sync(),
+  });
+  const ui = {
+    root,
+    card: root.querySelector('#gev-voice-card'),
+    voicePanel: root.querySelector('#panel'),
+    previewPanel: root.querySelector('#preview-panel'),
+    voiceSettingsPanel: root.querySelector('#settings-panel'),
+    previewEmpty: root.querySelector('#empty'),
+    voicePreviewInput: root.querySelector('#preview-input'),
+    voicePreviewNote: root.querySelector('#preview-note'),
+  };
+  const preference = createVoicePreferences({ storage: null });
+  const fields = bindPreferenceControls({
+    ui,
+    preferences: preference,
+    copy: {
+      previewNote: 'Mostrar respuestas.',
+      timeoutNote: '',
+      notSaved: 'No guardado.',
+    },
+    onChange: (state) => {
+      card.setEnabled(state.previewEnabled);
+      panel?.sync();
+    },
+  });
+  card.setEnabled(preference.snapshot().previewEnabled);
+  panel = createManualVoicePanel({
+    ui,
+    card,
+    getPreviewEnabled: () => preference.snapshot().previewEnabled,
+    copy: { previewEmpty: 'Sin respuesta.', previewDisabled: 'Desactivada.' },
+  });
+  card.handle({ type: 'interruption' });
+  card.handle({
+    type: 'transcript',
+    role: 'assistant',
+    text: 'Actual current answer',
+    final: true,
+  });
+  const content = card.state;
+  assert.equal(
+    card.snapshot().visible,
+    false,
+    'manual panel stays closed despite content',
+  );
+  panel.select('preview');
+  assert.equal(card.snapshot().assistant.text, 'Actual current answer');
+  assert.equal(card.snapshot().visible, true);
+  preference.setPreviewEnabled(false);
+  assert.equal(card.snapshot().visible, false);
+  assert.equal(ui.previewEmpty.textContent, 'Desactivada.');
+  panel.select('settings');
+  panel.select('preview');
+  assert.equal(preference.snapshot().previewEnabled, false);
+  assert.equal(card.snapshot().visible, false);
+  assert.equal(card.state, content);
+  fields.dispose();
+  panel.destroy();
+  card.destroy();
+});
diff --git a/src/voice/voiceCardLocale.test.mjs b/src/voice/voiceCardLocale.test.mjs
index 08274d21b..9c70d91f9 100644
--- a/src/voice/voiceCardLocale.test.mjs
+++ b/src/voice/voiceCardLocale.test.mjs
@@ -3,8 +3,16 @@
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { setLocale } from '../i18n/index.js';
-import { attachVoiceResult, planStepLabel } from './speech.js';
-import { voiceCardView } from './voiceCardPresentation.js';
+import {
+  attachVoiceResult,
+  planStepLabel,
+  shownEntityLabel,
+} from './speech.js';
+import {
+  initialVoiceCardState,
+  reduceVoiceCard,
+  voiceCardView,
+} from './voiceCardPresentation.js';
 
 for (const locale of ['ru', 'es']) {
   test(`voice card is in ${locale} for a layer switch`, (t) => {
@@ -86,3 +94,49 @@ test('en: layer switch, distance and plan labels in English', () => {
     'Earthquakes (24h) on',
   );
 });
+
+// FIRMS and ALPR register English entity labels: the model reads them as data
+// (get_entity_context, pointer_context), the card shows them translated.
+const ENTITY_LABELS = {
+  ru: { fire: 'Пожар · FRP 12 МВт', alpr: 'Камера ALPR' },
+  es: { fire: 'Incendio · FRP 12 MW', alpr: 'Cámara ALPR' },
+};
+
+for (const [locale, shown] of Object.entries(ENTITY_LABELS)) {
+  test(`entity labels stay English in the result and show in ${locale}`, (t) => {
+    t.after(() => setLocale('en'));
+    setLocale(locale);
+    const out = attachVoiceResult('get_entity_context', {
+      ok: true,
+      selected: {
+        id: 'fire-1',
+        name: 'Fire · FRP 12 MW',
+        layerId: 'local-firms',
+        layerName: 'NASA FIRMS',
+      },
+    });
+    assert.equal(out.selected.name, 'Fire · FRP 12 MW');
+    assert.equal(out.display.title, shown.fire);
+
+    const state = reduceVoiceCard(initialVoiceCardState(), {
+      type: 'pointer',
+      pointer: { kind: 'this', label: 'ALPR camera' },
+    });
+    assert.equal(state.pointer.label, 'ALPR camera');
+    assert.equal(voiceCardView(state).pointer.text, shown.alpr);
+    assert.equal(state.announce, `This: ${shown.alpr}`);
+  });
+}
+
+test('only the registered entity labels are translated', () => {
+  assert.equal(shownEntityLabel('Fire · FRP 4.9 MW'), 'Fire · FRP 4.9 MW');
+  assert.equal(shownEntityLabel('ALPR camera'), 'ALPR camera');
+  setLocale('ru');
+  try {
+    assert.equal(shownEntityLabel('Fire · FRP 4.9 MW'), 'Пожар · FRP 4.9 МВт');
+    assert.equal(shownEntityLabel('UPS793'), 'UPS793');
+    assert.equal(shownEntityLabel('Fire Station 5'), 'Fire Station 5');
+  } finally {
+    setLocale('en');
+  }
+});
diff --git a/src/voice/voiceCardPresentation.js b/src/voice/voiceCardPresentation.js
index f8bf8ff7d..b4d0f0911 100644
--- a/src/voice/voiceCardPresentation.js
+++ b/src/voice/voiceCardPresentation.js
@@ -1,4 +1,9 @@
-import { planStepLabel, progressStepLabel, spokenLabel } from './speech.js';
+import {
+  planStepLabel,
+  progressStepLabel,
+  shownEntityLabel,
+  spokenLabel,
+} from './speech.js';
 import { presentResult } from './resultDisplay.js';
 import { MAX_DISPLAYED_REFERENTS, normalizeReferents } from './referents.js';
 
@@ -39,6 +44,7 @@ export function initialVoiceCardState() {
     visible: false,
     dismissed: false,
     user: null,
+    userAttribution: null,
     pointer: null,
     assistant: null,
     assistantResponse: null,
@@ -64,6 +70,7 @@ function newTurn(state) {
     visible: true,
     dismissed: false,
     user: '',
+    userAttribution: null,
     pointer: null,
     assistant: null,
     assistantResponse: null,
@@ -132,13 +139,20 @@ export function reduceVoiceCard(state, event) {
       return reveal({
         ...state,
         pointer,
-        announce: `${kind}: ${spokenLabel(pointer.label, 32)}`,
+        announce: `${kind}: ${spokenLabel(shownEntityLabel(pointer.label), 32)}`,
       });
     }
     case 'transcript': {
       const text = event.text || '';
       if (event.role === 'user') {
-        return text ? reveal({ ...state, user: caption(text) }) : state;
+        return text
+          ? reveal({
+              ...state,
+              user: caption(text),
+              userAttribution:
+                event.attribution === 'unverified' ? 'unverified' : null,
+            })
+          : state;
       }
       if (event.role !== 'assistant' || !text) return state;
       const sameResponse =
@@ -282,13 +296,15 @@ export function voiceCardView(state) {
     busy: running,
     phase: running ? t('WORKING') : state.steps.length ? t('DONE') : '',
     user: {
+      label:
+        state.userAttribution === 'unverified' ? t('Recent speech') : t('YOU'),
       visible: state.user !== null,
       text: state.user || '…',
     },
     pointer: {
       visible: Boolean(state.pointer),
       kind: state.pointer?.kind === 'here' ? t('HERE') : t('THIS'),
-      text: spokenLabel(state.pointer?.label || '', 32),
+      text: spokenLabel(shownEntityLabel(state.pointer?.label || ''), 32),
     },
     assistant: {
       visible: Boolean(state.assistant),