fix(cctv): keep Icelandic labels intact and treat 'og' facings as ambiguous

- Label repeat-collapse uses letter lookarounds instead of ASCII-only \b, so
  'Þverá Árnessýslu' is no longer joined and 'séð séð' collapses.
- 'til austurs og vesturs' and 'í norður og suður' name two facings and keep
  the low-confidence pose.
- Fallback name uses the frame stem when the station number is missing.
- Tests: label and heading regressions, dedupe keeps the last row, cap clamp,
  high-confidence pose, frame redirect pin; file added to format scope.
- Credit names the dataset, links the terms and states no endorsement.

src/data/cctvIceland.test.mjs

@@ -10,6 +10,7 @@ import {
   ICELAND_IMAGE_ORIGIN,
   ICELAND_MAX_CATALOG_BYTES,
 } from '../../server/providers/cctv/constants.js';
+import { fetchWithinHost } from '../../server/providers/cctv/media.js';
 import { isLikelyIcelandCoordinate } from '../../server/providers/cctv/normalize.js';
 import {
   icelandCameraToSource,
@@ -76,6 +77,10 @@ test('an Iceland row maps to a source on the pinned frame directory', () => {
   assert.equal(source.lon, -21.4);
   assert.equal(source.headingDeg, 270);
   assert.equal(source.headingConfidence, 'high');
+  assert.equal(source.pitchDeg, -24);
+  assert.equal(source.fovDeg, 56);
+  assert.equal(source.rangeM, 210);
+  assert.equal(source.mountHeightM, 10);
   assert.equal(source.feedType, 'image');
   assert.equal(source.sourceKind, 'iceland-vegagerdin');
   assert.equal(source.code, 'HELLISHEIÐI');
@@ -109,6 +114,27 @@ test('the label collapses the feed’s doubled spaces and repeated words', () =>
     ).name,
     'Strandarheiði séð niður á veg til austurs',
   );
+  const label = (Skyring) => icelandCameraToSource(row({ Skyring })).name;
+  // Repeats of words with Icelandic letters collapse too.
+  assert.equal(
+    label('Hellisheiði séð séð til austurs'),
+    'Hellisheiði séð til austurs',
+  );
+  assert.equal(label('Brú á á Jökulsá'), 'Brú á Jökulsá');
+  // A word ending in a letter the next word starts with is not a repeat.
+  for (const text of [
+    'Þverá Árnessýslu',
+    'brú Úlfarsá',
+    'Vesturlandsvegur við Elliðaá Ártúnsbrekku',
+  ])
+    assert.equal(label(text), text);
+});
+
+test('a row with no label, station or station number is named by its frame', () => {
+  const source = icelandCameraToSource(
+    row({ Skyring: '', Myndavel: '', Maelist_nr: undefined }),
+  );
+  assert.equal(source.name, 'Vegagerðin hellisheidi_1');
 });
 
 test('only an explicit facing sets a heading', () => {
@@ -123,6 +149,8 @@ test('only an explicit facing sets a heading', () => {
     ['Staður séð í suðvestur', 225],
     ['Staður séð til norðvesturs', 315],
     ['STAÐUR SÉÐ TIL VESTURS', 270],
+    ['Brú séð til austurs og Selfoss', 90], // "og" then a place, not a facing
+    ['Staður séð til austurs og Vesturlandsvegur', 90],
   ];
   for (const [text, heading] of cases) {
     assert.equal(icelandHeadingFromDescription(text), heading, text);
@@ -137,6 +165,9 @@ test('only an explicit facing sets a heading', () => {
     'Norðurárdalur niður á veg', // a place name that contains a cardinal
     'Staður séð til suðurlands', // a longer word, not "suður"
     'Staður séð til norðurs og til suðurs', // two facings: ambiguous
+    'Staður séð til austurs og vesturs', // the second facing shares "til"
+    'Staður séð í norður og suður',
+    'Staður séð í norður og í suður',
     'Norðfjarðargöng séð til Eskifjarðar',
   ]) {
     assert.ok(Number.isNaN(icelandHeadingFromDescription(text)), String(text));
@@ -189,10 +220,16 @@ test('the Iceland loader reads the list with redirects refused and keeps the nea
     }),
   );
   // Reykjavík cameras come last in the feed but first in the priority order.
+  // A frame the feed repeats keeps its last row, as the other packs do.
+  rows.push(row({ Slod: `${ICELAND_IMAGE_ORIGIN}rvk_1.jpg`, Skyring: 'Old' }));
   rows.push(
-    row({ Slod: `${ICELAND_IMAGE_ORIGIN}rvk_1.jpg`, Breidd: 64.1466, Lengd: -21.9426 }),
+    row({
+      Slod: `${ICELAND_IMAGE_ORIGIN}rvk_1.jpg`,
+      Skyring: 'Kringlumýrarbraut',
+      Breidd: 64.1466,
+      Lengd: -21.9426,
+    }),
   );
-  rows.push(row({ Slod: `${ICELAND_IMAGE_ORIGIN}rvk_1.jpg` })); // repeated frame
   const seen = [];
   t.mock.method(globalThis, 'fetch', async (url, init) => {
     seen.push([String(url), init.redirect]);
@@ -202,6 +239,8 @@ test('the Iceland loader reads the list with redirects refused and keeps the nea
   assert.deepEqual(seen, [[ICELAND_CAMERAS_URL, 'manual']]);
   assert.equal(sources.length, 8);
   assert.equal(sources[0].id, 'is-vegagerdin-rvk_1');
+  assert.equal(sources[0].name, 'Kringlumýrarbraut');
+  assert.equal(sources[0].lat, 64.1466);
   assert.equal(
     new Set(sources.map((s) => s.id)).size,
     sources.length,
@@ -213,8 +252,9 @@ test('the Iceland loader reads the list with redirects refused and keeps the nea
 test('the default Iceland cap is DEFAULT_ICELAND_MAX_SOURCES', async (t) => {
   t.mock.method(console, 'log', () => {});
   withEnv(t, { CCTV_ICELAND_MAX_SOURCES: undefined });
-  const rows = Array.from({ length: DEFAULT_ICELAND_MAX_SOURCES + 40 }, (_, i) =>
-    row({ Slod: `${ICELAND_IMAGE_ORIGIN}cam_${i}.jpg` }),
+  const rows = Array.from(
+    { length: DEFAULT_ICELAND_MAX_SOURCES + 40 },
+    (_, i) => row({ Slod: `${ICELAND_IMAGE_ORIGIN}cam_${i}.jpg` }),
   );
   t.mock.method(globalThis, 'fetch', async () => json(rows));
   assert.equal(
@@ -223,17 +263,71 @@ test('the default Iceland cap is DEFAULT_ICELAND_MAX_SOURCES', async (t) => {
   );
 });
 
+test('CCTV_ICELAND_MAX_SOURCES is clamped to 8..600 and ignored when not a number', async (t) => {
+  t.mock.method(console, 'log', () => {});
+  withEnv(t, { CCTV_ICELAND_MAX_SOURCES: undefined });
+  const rows = Array.from({ length: 650 }, (_, i) =>
+    row({ Slod: `${ICELAND_IMAGE_ORIGIN}cam_${i}.jpg` }),
+  );
+  t.mock.method(globalThis, 'fetch', async () => json(rows));
+  for (const [value, expected] of [
+    ['0', 8],
+    ['3', 8],
+    ['1000', 600],
+    ['abc', DEFAULT_ICELAND_MAX_SOURCES],
+  ]) {
+    process.env.CCTV_ICELAND_MAX_SOURCES = value;
+    assert.equal(
+      (await loadIcelandSourcesFromOpenData()).length,
+      expected,
+      value,
+    );
+  }
+});
+
+test('a redirect on the Iceland frame host stays inside vefmyndavelar/', async () => {
+  const frame = `${ICELAND_IMAGE_ORIGIN}hellisheidi_1.jpg`;
+  const redirectTo = (location) => async (url) =>
+    url === frame
+      ? new Response(null, { status: 302, headers: { location } })
+      : new Response('frame', { headers: { 'content-type': 'image/jpeg' } });
+  for (const location of [
+    '/vgdata/other/x.jpg',
+    '/vgdata/vefmyndavelar/../x.jpg',
+    '/',
+  ])
+    assert.equal(
+      await fetchWithinHost(frame, {}, redirectTo(location)),
+      null,
+      location,
+    );
+  const followed = await fetchWithinHost(
+    frame,
+    {},
+    redirectTo('/vgdata/vefmyndavelar/hellisheidi_1b.jpg'),
+  );
+  assert.equal(await followed.text(), 'frame');
+});
+
 test('the Iceland loader fails soft on HTTP errors, bad payloads and network errors', async (t) => {
   t.mock.method(console, 'log', () => {});
   t.mock.method(console, 'warn', () => {});
-  t.mock.method(globalThis, 'fetch', async () => new Response('x', { status: 503 }));
+  t.mock.method(
+    globalThis,
+    'fetch',
+    async () => new Response('x', { status: 503 }),
+  );
   assert.deepEqual(await loadIcelandSourcesFromOpenData(), []);
   t.mock.restoreAll();
   t.mock.method(console, 'log', () => {});
   t.mock.method(console, 'warn', () => {});
   t.mock.method(globalThis, 'fetch', async () => json({ rows: [] }));
   assert.deepEqual(await loadIcelandSourcesFromOpenData(), []);
-  t.mock.method(globalThis, 'fetch', async () => new Response('<html>', { status: 200 }));
+  t.mock.method(
+    globalThis,
+    'fetch',
+    async () => new Response('<html>', { status: 200 }),
+  );
   assert.deepEqual(await loadIcelandSourcesFromOpenData(), []);
   t.mock.method(globalThis, 'fetch', async () => {
     throw new Error('network down');
@@ -245,11 +339,17 @@ test('the Iceland catalog fetch refuses redirects and oversized bodies', async (
   t.mock.method(console, 'warn', () => {});
   const redirected = streamingResponse({
     status: 302,
-    headers: { location: 'http://gagnaveita.vegagerdin.is/api/vefmyndavelar2014_1' },
+    headers: {
+      location: 'http://gagnaveita.vegagerdin.is/api/vefmyndavelar2014_1',
+    },
   });
   t.mock.method(globalThis, 'fetch', async () => redirected.response);
   assert.deepEqual(await loadIcelandSourcesFromOpenData(), []);
-  assert.equal(redirected.state.cancelled, true, 'the redirect body is cancelled');
+  assert.equal(
+    redirected.state.cancelled,
+    true,
+    'the redirect body is cancelled',
+  );
 
   t.mock.restoreAll();
   t.mock.method(console, 'warn', () => {});
@@ -287,7 +387,9 @@ test('the Iceland catalog fetch refuses redirects and oversized bodies', async (
 test('CCTV catalog merges Iceland cameras and CCTV_ICELAND_ENABLED=0 skips the request', async (t) => {
   t.mock.method(console, 'log', () => {});
   t.mock.method(console, 'warn', () => {});
-  const sourceRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'gev-cctv-catalog-iceland-'));
+  const sourceRoot = fs.mkdtempSync(
+    path.join(os.tmpdir(), 'gev-cctv-catalog-iceland-'),
+  );
   t.after(() => fs.rmSync(sourceRoot, { recursive: true, force: true }));
   withEnv(t, {
     CCTV_SOURCES_FILE: undefined,

src/data/dataCredits.js

@@ -324,9 +324,11 @@ export const DATA_CREDITS = [
   {
     key: 'iceland-cctv',
     html:
-      'CCTV cameras & frames (Iceland): ' +
+      'CCTV cameras & frames (Iceland): road camera images, fetched live, from the ' +
       '<a href="https://www.vegagerdin.is/" target="_blank" rel="noopener">Icelandic Road and Coastal Administration (Vegagerðin)</a> — ' +
-      '<a href="https://creativecommons.org/licenses/by/4.0/" target="_blank" rel="noopener">CC BY 4.0</a>',
+      '<a href="https://creativecommons.org/licenses/by/4.0/" target="_blank" rel="noopener">CC BY 4.0</a> ' +
+      '(<a href="https://www.vegagerdin.is/vegagerdin/gagnasafn/vefthjonustur/terms-and-conditions" target="_blank" rel="noopener">terms</a>); ' +
+      'no endorsement by IRCA is implied',
   },
   {
     key: 'kingcounty-cctv',