Merge origin/main into german/navara

Main's work since the last merge runs on the globe contract where this
branch draws through it:

- Satellites take main's classes, sensors, ground-track bearings and
  world time through contract points and rings; launches take the world
  timeline. The satellite's cockpit subject dims, copies positions and
  refocuses through the contract.
- Flights, military and vessels keep main's photos, retry cool-downs,
  world-clock motion and the ship bridge. Trail seeding in the shared
  aircraft tracking reads each layer's clock.
- Traffic's flow lines and single build draw as ground sets; transit
  keeps dated credits and the new cities; CCTV opens the nearest camera,
  and the Quebec overlay projects and tests the horizon through the
  contract. Bikeshare's manager cleanup moved into its current lifecycle.
- Draw keeps main's mark actions across engine switches.
- The world clock in src/time is plain numbers again: Julian dates come
  from src/geo, the frame loop is injected, and the binding to Cesium's
  viewer clock lives in src/globe/cesium/worldTime.js. Navara's sky and
  sun follow the world time; live feeds keep the real time.
- The cockpit's orbital view, with its sensor zoom, ground focus and
  satellite switching, stays Cesium-only for now: Navara hides its entry.
  Its Cesium calls live in src/globe/cesium/orbital.js. The ship bridge's
  finest-detail waterline sampling is Cesium-only too; Navara samples
  loaded geometry and detailed terrain. Both are in KNOWN-ISSUES.
- Main's tests that built a Cesium scene by hand run on the fake engine.
- The boundary manifest is regenerated, the coupling baseline records
  the orbital and bridge code, and the main-chunk baseline is raised to
  the merged size: main itself grew its main chunk by 93,959 bytes
  (gzip -9) since the previous merge base.

changelog.d/1506-cctv-taiwan-quebec-ottawa-world.md

@@ -0,0 +1,8 @@
+- Expand CCTV coverage with a keyless Taiwan Highway Bureau fallback, 1,120
+  Québec camera locations, City of Ottawa traffic cameras (needs a free city
+  access certificate, `OTTAWA_CAMERA_CERTIFICATE`), and 2,230 curated
+  image-backed cameras from Oregon and Japan (InoukT, #1506).
+- Québec 511 in-browser video is opt-in (`CCTV_QUEBEC_VIDEO_ENABLED=1`) and
+  loads only after the viewer presses Play; enforce provider-specific frame
+  refresh limits, and report recognized MLIT maintenance images as degraded
+  instead of healthy camera snapshots.

changelog.d/1512-world-clock-timeline.md

@@ -0,0 +1,5 @@
+- One world clock now drives everything with a time of its own: the sky,
+  the HUD clock, satellites, launches and weather. A timeline along the
+  bottom of the screen, shown while one of those layers is on, plays, pauses
+  and scrubs it, with a tick for each launch or frame and a way back to
+  live. Share links made away from live carry the time (samehkhamis, #1512).

changelog.d/1513-timeline-launches-speed-buffering.md

@@ -0,0 +1,7 @@
+- The timeline brings launches up as the time passes them, offers play
+  speeds from real time to a week a second, and plays smoothly, holding only
+  when the next weather frame has yet to load, with a spinner by the time
+  while it waits. The time rides in a bubble over the handle. The track zooms
+  with a scroll or a pinch, drags along, and goes to the time under a tap, on
+  a phone as on a desktop. Zooming out on the globe stops while the globe is
+  still in view instead of leaving it a speck (samehkhamis, #1513).

changelog.d/1524-tools-heading-wrap.md

@@ -0,0 +1,3 @@
+- The agent and voice query tools wrap whole-degree directions into 0–359, so
+  a vessel course or heading, aircraft course, transit bearing, camera heading
+  or satellite azimuth that rounds to 360 reads 0 (@quanticsoul4772, #1524).

changelog.d/1547-nominatim-cache-mode-windows.md

@@ -0,0 +1,3 @@
+- The Nominatim disk-cache test checks the cache directory and file modes
+  only where POSIX modes exist, so it no longer always fails on Windows
+  (quanticsoul4772, #1547).

changelog.d/1552-firms-drop-snpp.md

@@ -0,0 +1,4 @@
+- Stop requesting Suomi NPP in Active Fires. NASA stopped delivering its data
+  on November 2, 2026, so `VIIRS_SNPP_NRT` returned no rows while still costing
+  a MAP_KEY transaction on every refresh; the layer now merges VIIRS NOAA-20,
+  VIIRS NOAA-21 and MODIS (IMBrandao, #1552).

changelog.d/1557-cockpit-ship-bridge.md

@@ -0,0 +1,4 @@
+- Ride the selected AIS vessel from its bridge: an eye height by vessel type,
+  dead reckoning between fixes, a bridge HUD with a 3–24 NM radar, look-around
+  with the arrow keys, and a waterline read from the scene so river boats sit on
+  the river rather than at sea level (Denis Groshev, @ZloyS, #1557).

changelog.d/1558-satellite-classes.md

@@ -0,0 +1,4 @@
+- File satellites under six classes, Stations, Imaging, Telecom, Starlink,
+  Probes and Debris, each with a toggle; all but Starlink show by default.
+  Classes come from CelesTrak SATCAT, the UCS Satellite Database and name rules
+  (Denis Groshev, @ZloyS, #1558).

changelog.d/1559-cockpit-orbital-view.md

@@ -0,0 +1,4 @@
+- Ride a tracked satellite in an orbital view: a track-up nadir camera, 1–8×
+  zoom, off-nadir tilt with an approximate swath, a CURRENTLY OVER line, and the
+  owner's flag, operator and TLE identity. `C` no longer enters or leaves first
+  person; double-click and the entry buttons do (Denis Groshev, @ZloyS, #1559).

changelog.d/1560-orbital-sensor-zoom.md

@@ -0,0 +1,4 @@
+- Zoom imaging satellites past 8×, up to 128×, as far as their sensor's
+  confirmed swath allows at the live altitude, with a to-scale swath strip, a
+  SENSOR step, mouse-wheel zoom, imagery pre-loaded ahead of the ground track and
+  the TLE's age (Denis Groshev, @ZloyS, #1560).

changelog.d/1569-perimeters-sub-acre-size.md

@@ -0,0 +1,3 @@
+- Show a fire perimeter under one acre at its reported size. The incident card
+  rounded WFIGS sizes to whole acres, so a 0.25-acre fire read "0 ac"
+  (Rudy Celekli, @rudycelekli, #1569).

changelog.d/1576-transit-bikeshare-coverage-prompt.md

@@ -0,0 +1,4 @@
+- Say why Transit and Bike Share are empty outside coverage. Over a city with
+  no feed or system (London, Tokyo) their Layers rows say so and count the
+  covered regions or systems, or say how low to fly, instead of `never`;
+  leaving coverage clears the last-update time (German, @gekh, #1576).

changelog.d/1580-orbital-ground-focus.md

@@ -0,0 +1,4 @@
+- Hold the orbital camera on a mapped site as the satellite passes over it,
+  from a click on its marker or its Live Signals row, and list nearby sites
+  and satellites in orbit's Live Signals, where a row focuses a site or rides
+  a satellite (Denis Groshev, @ZloyS, #1580).

changelog.d/1609-traffic-lines-dots-toggles.md

@@ -0,0 +1,4 @@
+- Street Traffic offers separate Lines and Dots toggles while live flow is on:
+  Lines draws each road with flow in green, amber or red, and Dots shows or
+  hides the moving dots. A host can choose which road modes it offers; without
+  OpenStreetMap the layer never draws simulated roads (#1609).

changelog.d/1611-fr-catalog-review.md

@@ -0,0 +1,2 @@
+- French catalog review: missing narrow no-break spaces, apostrophes, one
+  mistranslated message and the Starlink shell wording (abiyeenzo, #1611).

changelog.d/1616-openai-chat-tool-patterns.md

@@ -0,0 +1,4 @@
+- Typed chat on OpenAI answers again: OpenAI refused every message because
+  `resolve_area`'s area-id pattern uses Unicode classes Chat Completions does
+  not accept. Chat leaves those patterns out; area ids are still checked
+  before the tool runs (samehkhamis, #1616).

changelog.d/1617-cctv-iceland.md

@@ -0,0 +1,12 @@
+- Add Icelandic road cameras from the Icelandic Road and Coastal Administration
+  (Vegagerðin) as a CCTV pack. The camera list is one keyless JSON request to
+  `gagnaveita.vegagerdin.is/api/vefmyndavelar2014_1` (about 500 views at 166
+  stations); frames are JPEG stills in `www.vegagerdin.is/vgdata/vefmyndavelar/`,
+  and only links inside that directory are registered. The catalog is fetched
+  over https with redirects refused and a 2 MiB body cap. An explicit facing in
+  the view description ("til vesturs", "í suður", "séð austur") sets a
+  high-confidence heading; other views keep the low-confidence fallback pose.
+  IRCA publishes the images under CC BY 4.0, credited in the Data attribution
+  popover. Loads the 250 views nearest Reykjavík, Akureyri, Egilsstaðir,
+  Ísafjörður and Selfoss; `CCTV_ICELAND_MAX_SOURCES` changes that cap and
+  `CCTV_ICELAND_ENABLED=0` turns the pack off (daikaginza, #1617).

changelog.d/1619-giroc-camera-hls-segments.md

@@ -0,0 +1,5 @@
+- Add an optional Giroc / Webcam Romania CCTV source pack with corrected
+  coordinates, live HLS, a snapshot fallback and provider attribution. Allow
+  HLS segments up to 8 MiB so high-resolution cameras whose segments exceed
+  4 MiB can play, while retaining the 24 MiB per-session cache and existing
+  origin and session limits (NeoXrated23, #1619).

changelog.d/1620-cctv-opening-camera.md

@@ -0,0 +1,3 @@
+- Turning CCTV on opens the camera nearest you instead of the first camera in
+  the catalog, which showed a Sydney camera in London. A share link opens on
+  the camera nearest the shared view once its flight lands (samehkhamis, #1620).

changelog.d/1628-transit-more-cities.md

@@ -0,0 +1,14 @@
+- Add 34 keyless feeds to the Transit layer, the first in Central and Eastern
+  Europe, Italy, Spain, France, Japan and Malaysia: Szczecin, Lisbon (Carris
+  Metropolitana and the city's Carris), Prague, Warsaw, Kraków, Poznań,
+  Gdańsk, Rzeszów, Vilnius, Bucharest, Cluj-Napoca, Iași, Rome, Turin, Venice
+  (buses and waterbuses), Bordeaux, Montpellier, Rouen, Toulon, Le Havre,
+  Tours, Málaga, Sendai, Johor Bahru, Kota Bharu, Adelaide, Atlanta, Denver,
+  Edmonton, Halifax and Victoria. Each feed records its licence, or that none
+  is stated, in the registry and DATA_SOURCES.md. Speeds published in km/h
+  (Lisbon, Montpellier, Toulon) are converted to m/s by the proxy; route ids
+  read as the line on the vehicle; Prague metro, trains, trams and ferries,
+  Bordeaux trams and boats, the Rouen Métro, Le Havre trams and Venice
+  waterbuses take their own mode. The Warsaw and Poznań credits carry the
+  data date their terms ask for, and the data.gov.my feeds are fetched at
+  most twice a minute to stay inside the API's rate limit (IMBrandao).

changelog.d/1634-layer-state-registered-only.md

@@ -0,0 +1,3 @@
+- An application built with fewer layers no longer restores, saves or shares a
+  layer it does not have when a link or saved state from a full build names it
+  (samehkhamis, #1634).

changelog.d/1636-draw-mark-actions.md

@@ -0,0 +1,4 @@
+- Draw rows take an application's own actions: `createApplicationTools({
+  drawMarkActions })` adds buttons to drawn areas' and lines' rows, each given
+  the shape's `[lon, lat]` geometry, with what it answers shown under the row.
+  The standalone build passes none and is unchanged (samehkhamis, #1636).

changelog.d/1637-orbital-cockpit-followups.md

@@ -0,0 +1,4 @@
+- Keep the orbital cockpit's sensor strip steady through a zoom step, load the
+  satellite owner flags at startup from one generated 15 KB sheet, and name
+  "Place names" in the loading status while the place-name packs load on first
+  lookup (Sameh Khamis, @samehkhamis, #1637).

changelog.d/1638-openai-realtime-tool-patterns.md

@@ -0,0 +1,5 @@
+- Voice on OpenAI connects again: OpenAI Realtime refused every session, so
+  the mic failed with "Failed to create Realtime token", because
+  `resolve_area`'s area-id pattern uses Unicode classes it no longer accepts.
+  Voice leaves those patterns out, as typed chat does; area ids are still
+  checked before the tool runs (avaldini, #1638).

changelog.d/1642-transit-floor-per-point.md

@@ -0,0 +1,7 @@
+- Keep buses and trains off rooftops and out of bridge decks on the photoreal
+  3D tiles: the ground floor probes the rendered mesh where each vehicle is,
+  keeps each reading at the point it was taken (up to sixteen a cell) and
+  answers from the reading nearest the vehicle, instead of one probe at each
+  110 m cell's centre that lifted every vehicle in the cell onto whatever lay
+  there. Transit probes each vehicle's latest point, and grounded flights read
+  the floor at their own position (Sameh Khamis, @samehkhamis, #1642).

changelog.d/1645-traffic-lines-one-build.md

@@ -0,0 +1,3 @@
+- Street Traffic Lines build one set at a time while a city loads, instead of
+  one per paint, so panning with Lines on no longer piles up line builds
+  (Sameh Khamis, @samehkhamis, #1645).

changelog.d/1647-planespotters-photo.md

@@ -0,0 +1,6 @@
+- Show a photo of the tracked aircraft. Tracking a civil flight asks
+  Planespotters for that aircraft's photo, and the CONTEXT panel's CONTACTS view
+  shows it with the photographer's credit and a link to the photo's page. A
+  flight lookup (type, route or photo) that failed temporarily is now asked
+  again after a minute instead of staying empty for the session, and a callsign
+  change drops the previous callsign's route (Sameh Khamis, @samehkhamis, #1647).

changelog.d/762-tile-budget-module.md

@@ -0,0 +1,4 @@
+- Move the tile budget helpers `utcDayKey`, `normalizeBudget` and
+  `isOverBudget` out of the TomTom module into `src/data/tileBudget.js`, so
+  other keyed tile proxies can share them. `src/data/tomtomTiles.js`
+  re-exports them; behaviour does not change (monwiss, #762).

changelog.d/766-node26-allocation-gates.md

@@ -0,0 +1 @@
+- Run the existing GC-bracketed allocation regression gates on Node 26 as well as Node 24. Keep the current byte budgets so CI catches allocation regressions on both supported runtimes (BreezeDelegate, #766; fixes #39).

changelog.d/794-api-method-guard.md

@@ -0,0 +1,4 @@
+- Answer `405 Method Not Allowed` with `Allow: GET` to anything but `GET` on
+  `/api/flights`, `/api/military` and `/api/route`, as the other query proxies
+  do. They answered every verb with the same body. The refusal comes before
+  rate limiting and any upstream call (daikaginza, #794).

changelog.d/795-opensky-compress-cached-body.md

@@ -0,0 +1,5 @@
+- Compress the live flight snapshot on the wire. `/api/flights` gzips its
+  cached global snapshot and its regional adsb.lol fallback once per refresh
+  and sends that frame to clients that offer gzip: about 860 KB becomes about
+  250 KB. Other clients get the same bytes uncompressed, and both answers carry
+  `Vary: Accept-Encoding` (daikaginza, #795).