@geolibre/core 3.0.0 → 3.2.0

package/dist/index.d.mts

@@ -1,3 +1,5 @@
+import "zustand";
+import "zundo";
 //#region src/cesium-imagery.d.ts
 /**
  * Maps the project's basemap onto imagery the Cesium globe can render.
@@ -113,42 +115,19 @@ export declare const CESIUM_BASEMAPS: readonly [{
   readonly name: "OpenStreetMap";
   readonly icon: "openStreetMap.png";
   readonly category: "Other";
-}, {
-  readonly id: "stadia-watercolor";
-  readonly name: "Stadia x Stamen Watercolor";
-  readonly icon: "stamenWatercolor.png";
-  readonly category: "Other";
-  readonly stadiaStyle: "stamen_watercolor";
-  readonly maximumLevel: 16;
-  readonly extension: "jpg";
-}, {
-  readonly id: "stadia-toner";
-  readonly name: "Stadia x Stamen Toner";
-  readonly icon: "stamenToner.png";
-  readonly category: "Other";
-  readonly stadiaStyle: "stamen_toner";
-  readonly maximumLevel: 20;
-  readonly extension: "png";
-}, {
-  readonly id: "stadia-smooth";
-  readonly name: "Stadia Alidade Smooth";
-  readonly icon: "stadiaAlidadeSmooth.png";
-  readonly category: "Other";
-  readonly stadiaStyle: "alidade_smooth";
-  readonly maximumLevel: 20;
-  readonly extension: "png";
-}, {
-  readonly id: "stadia-dark";
-  readonly name: "Stadia Alidade Smooth Dark";
-  readonly icon: "stadiaAlidadeSmoothDark.png";
-  readonly category: "Other";
-  readonly stadiaStyle: "alidade_smooth_dark";
-  readonly maximumLevel: 20;
-  readonly extension: "png";
 }];
 export type CesiumBasemapId = (typeof CESIUM_BASEMAPS)[number]["id"];
 export declare function normalizeCesiumBasemap(value: unknown): CesiumBasemapId;
-/** Missing credentials fall back to the project background without changing the saved choice. */
+/**
+ * Missing credentials fall back to keyless imagery without changing the saved
+ * choice.
+ *
+ * The fallback is ArcGIS World Imagery rather than the project background: a
+ * globe wants to look like the Earth, and the project's own basemap is usually
+ * a vector street style whose raster analogue is mostly empty ocean from
+ * orbit. It needs no key, so the globe looks the same with or without an Ion
+ * token — only terrain and the Ion-only basemaps are lost.
+ */
 export declare function availableCesiumBasemap(value: unknown, hasIonToken: boolean): CesiumBasemapId;
 /**
  * What the globe should draw underneath the project's data layers.
@@ -177,8 +156,6 @@ export type CesiumBasemapImagery = {
   kind: "xyz";
   /** Tile template with `{z}`/`{x}`/`{y}` placeholders. */
   template: string;
-  /** Credentials are resolved at render time, never embedded in the descriptor. */
-  apiKeyProvider?: "stadia";
   /** Credit to show on the globe, as the HTML the 2D map already uses. */
   attribution: string;
   /** Max native zoom of the source, so the globe overzooms rather than 404s. */
@@ -1347,6 +1324,21 @@ export interface LayerPopupConfig {
   bodyExpression?: string;
   /** `false` drops the synthetic `id` row. Defaults to `true`. */
   showFeatureId?: boolean;
+  /**
+   * Widest the click popup may grow, in CSS pixels. Unset keeps the default
+   * (520px, or 420px for a popup carrying an image). Clamped to the range
+   * `resolvePopupMaxWidth` enforces and always capped by the viewport, so a
+   * value wider than the window still leaves the map usable.
+   */
+  maxWidth?: number;
+  /**
+   * Tallest an `"image"` field's thumbnail may draw inside the popup, in CSS
+   * pixels. Unset keeps the default (`min(50vh, 420px)`). Clamped by
+   * `resolvePopupImageHeight`. Pair it with {@link maxWidth} for a
+   * bigger picture: the thumbnail keeps its aspect ratio, so widening the
+   * popup is what lets a landscape photo use the extra height.
+   */
+  imageHeight?: number;
   /**
    * The fields to show and their order. An empty or absent list keeps today's
    * behavior: every visible property, in the feature's own key order.
@@ -1646,7 +1638,9 @@ export interface AddTileLayerOptions {
   tiles: string[];
   /**
    * Layer discriminator, controlling how the layer is labelled and (for WMS)
-   * dev-server proxied. Defaults to `"xyz"`.
+   * dev-server proxied. Defaults to `"xyz"`. The layer's `source.type` is
+   * always `"raster"`, so any other value (such as `"vector-tiles"` from an
+   * untyped JS caller) throws rather than persisting a mislabelled source.
    */
   type?: "xyz" | "wms" | "wmts" | "raster";
   /** Service or base URL recorded on the source for display and restore. */
@@ -1751,13 +1745,15 @@ export interface MapGridLayout {
  * `"maplibre"` is the 2D MapLibre GL map that owns the app's plugin, styling,
  * and deck.gl integrations. `"cesium"` is the 3D globe (see `CesiumCanvas`),
  * which renders the same shared store state — camera, basemap, layers, group
- * effects — through CesiumJS.
+ * effects — through CesiumJS. `"mapbox"` is Mapbox GL JS and `"arcgis"` the
+ * ArcGIS Maps SDK for JavaScript, loaded from Esri's CDN at runtime (see
+ * `ArcgisCanvas`); both draw the same store state through their own engines.
  *
  * Used both for secondary panes ({@link SecondaryMapView.viewKind}) and for the
  * primary workspace ({@link GeoLibreProject.primaryRenderer}), so the two never
  * drift apart.
  */
-export type MapRendererKind = "maplibre" | "cesium";
+export type MapRendererKind = "maplibre" | "cesium" | "mapbox" | "arcgis";
 /**
  * The engine that draws the primary map area when a project says nothing. The
  * 2D map: it is the renderer every tool, plugin, and panel is wired to, so an
@@ -1925,6 +1921,16 @@ export interface MapPreferences {
   showPointerElevation: boolean;
   /** Whether the built-in 3D terrain control and terrain surface are enabled. */
   terrainEnabled: boolean;
+  /** Mapbox-only style. New projects use Streets; absent follows the shared basemap. */
+  mapboxStyleUrl?: string;
+  /**
+   * ArcGIS-only basemap: an Esri basemap style id (`arcgis/streets`,
+   * `arcgis/imagery`, `osm/standard`, ...). New projects use Streets. Absent
+   * follows the shared basemap, translated to tiles the SDK can draw; the id
+   * is also set aside when no ArcGIS API key is configured, since Esri's
+   * basemap styles service requires one.
+   */
+  arcgisBasemap?: string;
   /** Cesium imagery override; absent follows the shared project basemap. */
   cesiumBasemap?: CesiumBasemapId;
   /**
@@ -1941,6 +1947,12 @@ export interface RuntimeEnvironmentVariable {
   key: string;
   value: string;
   enabled: boolean;
+  /**
+   * Absent or `true`: the value is a secret (desktop keeps it in the OS
+   * keychain; every egress removes it). `false`: an ordinary value saved in the
+   * project and kept on share/export.
+   */
+  secret?: boolean;
 }
 declare global {
   interface Window {
@@ -2526,8 +2538,32 @@ export interface GeoLibreProject {
   styleLibrary?: StyleLibraryEntry[];
   /** Anchored review comments on map points or features (issue #1518). */
   comments?: ProjectComment[];
+  /**
+   * Interaction state applied when the project opens: the Identify target and
+   * which map controls and toolbar panels start shown (issue #2688). Written by
+   * the Python `geolibre` package from `set_identify` / `show_control`, so a
+   * saved or HTML-exported notebook map opens the way it was set up. Omitted
+   * by default; the app keeps what it loaded and writes it back unchanged.
+   */
+  interaction?: ProjectInteraction;
   metadata: Record<string, unknown>;
 }
+/**
+ * Startup interaction state carried by a project (see
+ * {@link GeoLibreProject.interaction}).
+ */
+export interface ProjectInteraction {
+  /**
+   * Identify target on open: a layer id, `"all"` for every visible queryable
+   * layer, a list of layer ids to identify only those, or `null` for off.
+   */
+  identify?: string | string[] | null;
+  /**
+   * Map control or toolbar panel name (`"search"`, `"bookmark"`, `"globe"`,
+   * ...) to whether it starts shown. Unknown names are ignored on open.
+   */
+  controls?: Record<string, boolean>;
+}
 export type CommentAnchor = {
   type: "point";
   lngLat: [number, number];
@@ -3176,8 +3212,9 @@ export declare function horizontalBbox(box: readonly number[] | null | undefined
  * cached per GeoJSON object, so repeated calls on the same data are free.
  *
  * @param geojson - Any GeoJSON object (geometry, feature, or collection).
+ * @param includeZero - Accept zero elevations when explicit absolute-height placement matters.
  */
-export declare function geojsonHasZCoordinates(geojson: GeoJSON$1 | null | undefined): boolean;
+export declare function geojsonHasZCoordinates(geojson: GeoJSON$1 | null | undefined, includeZero?: boolean): boolean;
 /**
  * Returns a copy of the GeoJSON with every coordinate's Z value mapped to
  * `z * verticalScale + offset` (missing or non-finite Z treated as 0). Used
@@ -4252,6 +4289,47 @@ export declare function inferFieldTypes(features: ReadonlyArray<{
   properties?: Record<string, unknown> | null;
 }>, names: string[]): Record<string, ExpressionFieldType>;
 //#endregion
+//#region src/style-layer-evaluator.d.ts
+/** The geometry kinds a MapLibre style expression tells apart (`["geometry-type"]`). */
+export type StyleGeometryKind = "Point" | "LineString" | "Polygon";
+/** A feature as a style layer's expressions read it. */
+export interface StyleFeatureInput {
+  id?: string | number;
+  properties: Record<string, unknown> | null | undefined;
+  kind: StyleGeometryKind;
+}
+/** A style layer's filter and property values, evaluated as MapLibre would. */
+export interface StyleLayerEvaluator {
+  /** Whether the layer's `filter` keeps the feature at `zoom`. */
+  passes: (zoom: number, feature: StyleFeatureInput) => boolean;
+  /**
+   * A paint or layout property's value for a feature at `zoom`: the layer's
+   * value (a literal, a legacy function or an expression) or the spec's
+   * default. A color comes back as `[r, g, b, a]` with channels 0-255 and
+   * alpha 0-1; formatted text as its plain string. `undefined` for a property
+   * the spec does not know or an expression that does not compile.
+   */
+  value: (group: "paint" | "layout", name: string, zoom: number, feature: StyleFeatureInput) => unknown;
+}
+interface StyleLayerInput {
+  id?: string;
+  type: string;
+  filter?: unknown;
+  paint?: Record<string, unknown>;
+  layout?: Record<string, unknown>;
+}
+/**
+ * Compile a MapLibre style layer's filter and properties for evaluation
+ * outside MapLibre, for a renderer that draws the layer itself (the ArcGIS
+ * renderer drawing a plugin's own GeoJSON overlay, say). Uses the style spec's
+ * own evaluator, so data-driven and zoom expressions, legacy functions and
+ * defaults behave as they do on MapLibre. Each property compiles once.
+ *
+ * @param layer - The style layer (its `type`, `filter`, `paint`, `layout`).
+ * @returns The layer's evaluator.
+ */
+export declare function createStyleLayerEvaluator(layer: StyleLayerInput): StyleLayerEvaluator;
+//#endregion
 //#region src/document-locale.d.ts
 /**
  * The document language, so formatted numbers and dates follow the UI locale.
@@ -4423,6 +4501,38 @@ export declare function getExternalNativePaintBridge(layerId: string): ExternalN
  * `!pluginOwnsPaint(layer)` to decide whether to show the slider at all.
  */
 export declare function supportsBridgedOpacity(layerId: string): boolean;
+/**
+ * True when the primary renderer draws this plugin-painted layer itself, from
+ * the store record, and so applies `layer.opacity` without any plugin bridge.
+ *
+ * A Zarr layer is a MapLibre custom layer owned by the Zarr control on the 2D
+ * map, but the ArcGIS view and the Cesium globe render it natively (an ArcGIS
+ * layer's `opacity`, a Cesium `ImageryLayer.alpha`) and mount no control to
+ * register a bridge. Without this the Opacity slider would be hidden there
+ * although it works (opengeos/GeoLibre#2261).
+ *
+ * @param layer - A store layer.
+ * @param renderer - The primary renderer (`useAppStore().primaryRenderer`).
+ * @returns Whether an Opacity slider reaches the layer through the renderer.
+ */
+export declare function rendererAppliesOpacity(layer: {
+  type: string;
+}, renderer: string | undefined): boolean;
+/**
+ * Whether `layer` is an Add Vector Layer layer GeoLibre adopted
+ * (`maplibre-gl-vector-adopted`, ADOPTED_VECTOR_SOURCE_KIND in
+ * @geolibre/plugins) that has no features yet. A project saves a URL- or
+ * path-backed adopted layer without them, and the vector control reads them
+ * again on reopen. Until then its `source.url` may name GeoParquet or
+ * GeoPackage, so a renderer must wait rather than load that URL as GeoJSON.
+ *
+ * @param layer - A store layer.
+ * @returns True while the adopted layer awaits its features.
+ */
+export declare function isAdoptedVectorAwaitingFeatures(layer: {
+  metadata: Record<string, unknown>;
+  geojson?: unknown;
+}): boolean;
 //#endregion
 //#region src/attribute-form.d.ts
 /** Options threaded to expression evaluation (constraints, visibility). */
@@ -4516,6 +4626,36 @@ export interface PopupRow {
 export declare function isPopupClickEnabled(popup: LayerPopupConfig | undefined): boolean;
 /** Whether a hover tooltip should follow the pointer. Default: no. */
 export declare function isPopupHoverEnabled(popup: LayerPopupConfig | undefined): boolean;
+/**
+ * Bounds for {@link LayerPopupConfig.maxWidth}, in CSS pixels. The floor is
+ * the popup's own minimum width (`min-w-[18rem]`), below which the setting
+ * would be overruled by the layout and read as broken; the ceiling keeps a
+ * hand-edited project from authoring a popup that blankets the map.
+ */
+export declare const POPUP_MAX_WIDTH_RANGE: {
+  readonly min: 288;
+  readonly max: 1200;
+};
+/**
+ * Bounds for {@link LayerPopupConfig.imageHeight}, in CSS pixels. Below the
+ * floor a thumbnail carries no information; the ceiling matches
+ * {@link POPUP_MAX_WIDTH_RANGE}, since a taller picture than that is what the
+ * lightbox is for.
+ */
+export declare const POPUP_IMAGE_HEIGHT_RANGE: {
+  readonly min: 40;
+  readonly max: 1200;
+};
+/**
+ * The widest the click popup may draw for a layer, in CSS pixels, or
+ * `undefined` to keep the renderer's default.
+ */
+export declare function resolvePopupMaxWidth(popup: LayerPopupConfig | undefined): number | undefined;
+/**
+ * The tallest an `"image"` field may draw inside the popup, in CSS pixels, or
+ * `undefined` to keep the stylesheet's default.
+ */
+export declare function resolvePopupImageHeight(popup: LayerPopupConfig | undefined): number | undefined;
 /** The label a popup shows for a configured field. */
 export declare function popupFieldLabel(config: PopupFieldConfig): string;
 /**
@@ -5087,14 +5227,23 @@ export declare class ElevationFetchError extends Error {
 }
 /** A `fetch`-compatible function, so tests can inject a stub. */
 export type FetchLike = (url: string, init?: RequestInit) => Promise<Response>;
+/**
+ * Normalize longitude into [-180, 180] degrees (handles unwrapped coordinates
+ * from antimeridian cross-overs and world-copy pannings).
+ */
+export declare function normalizeLongitude(lng: number): number;
+/**
+ * Clamp latitude into [-90, 90] degrees.
+ */
+export declare function clampLatitude(lat: number): number;
 /**
  * Fetch elevations (in meters) for an ordered list of coordinates.
  *
  * @param points - Coordinates as `[lng, lat]`, at most {@link MAX_POINTS_PER_REQUEST}
  * @param fetchImpl - Optional `fetch` implementation; defaults to the global `fetch`
  * @returns The elevation in meters for each input coordinate, in the same order
- * @throws {ElevationFetchError} On too many points, a network error, a non-2xx
- *   response, a malformed body, or a length mismatch
+ * @throws {ElevationFetchError} On too many points, a non-finite coordinate, a
+ *   network error, a non-2xx response, a malformed body, or a length mismatch
  */
 export declare function fetchElevations(points: LngLat[], fetchImpl?: FetchLike): Promise<number[]>;
 /** The slice of the MapLibre map the terrain sampler needs (stubbed in tests). */
@@ -5225,6 +5374,42 @@ export declare function createEmptyProject(name?: string, options?: CreateProjec
  * @returns The file contents to write.
  */
 export declare function serializeProject(project: GeoLibreProject): string;
+/**
+ * Per-layer serialized text kept across {@link serializeProjectWithLayerCache}
+ * calls, keyed by the layer record each entry was built from. A `WeakMap`, so a
+ * layer the store has replaced or removed drops its text with it.
+ */
+export type ProjectLayerSerializationCache = WeakMap<object, {
+  index: number;
+  text: string;
+}>;
+/** Create an empty {@link ProjectLayerSerializationCache}. */
+export declare function createProjectLayerSerializationCache(): ProjectLayerSerializationCache;
+/**
+ * Serialize a project exactly as {@link serializeProject} does, reusing the
+ * text of every layer whose source record is unchanged since an earlier call.
+ *
+ * Feature data lives inside layer records, so re-stringifying every layer on
+ * each autosave costs megabytes of main-thread work for a project with large
+ * GeoJSON layers — even when only the camera moved (GeoLibre#2633). The store
+ * replaces a layer object whenever it changes, so object identity is a sound
+ * cache key: a camera move reuses every layer, and an edit to one layer
+ * re-serializes only that one.
+ *
+ * `layerSources[i]` must be the record `project.layers[i]` was derived from
+ * (e.g. the store's `layers`, before `projectFromStore` prepared them), and that
+ * derivation must depend on the record alone — as `buildProjectSnapshot`'s does
+ * — or a cached entry could outlive a change it should have reflected. When the
+ * two arrays differ in length the cache is bypassed rather than trusted.
+ *
+ * @param project Project to serialize, as built from `layerSources`.
+ * @param layerSources Immutable source record for each entry of
+ *   `project.layers`, in the same order, used as the cache key.
+ * @param cache Cache shared between calls; see
+ *   {@link createProjectLayerSerializationCache}.
+ * @returns The same text {@link serializeProject} returns for `project`.
+ */
+export declare function serializeProjectWithLayerCache(project: GeoLibreProject, layerSources: readonly object[], cache: ProjectLayerSerializationCache): string;
 export declare function parseProject(json: string): GeoLibreProject;
 /**
  * Validate and coerce a story map loaded from an untrusted project file.
@@ -5293,10 +5478,11 @@ export declare function normalizeMapLayout(value: unknown): MapGridLayout | null
  * Returns null for the default 2D map — absent, unknown, or an explicit
  * `"maplibre"` — because the field is only written when it is not the default,
  * so a MapLibre project serializes byte-identically to before this existed.
- * The return type is narrowed to `"cesium" | null` rather than the full
- * {@link MapRendererKind} for that reason: `"maplibre"` is never a result.
+ * The return type is narrowed to `"cesium" | "mapbox" | "arcgis" | null` rather
+ * than the full {@link MapRendererKind} for that reason: `"maplibre"` is never a
+ * result.
  */
-export declare function normalizePrimaryRenderer(value: unknown): "cesium" | null;
+export declare function normalizePrimaryRenderer(value: unknown): "cesium" | "mapbox" | "arcgis" | null;
 /**
  * Coerce an untrusted `secondaryMapViews` array into valid
  * {@link SecondaryMapView} records, dropping entries without a usable id and
@@ -5335,6 +5521,18 @@ export declare function normalizeWidgets(value: unknown): DashboardWidget[] | nu
  * @returns An integer column count within [MIN, MAX].
  */
 export declare function normalizeDashboardColumns(value: unknown): number;
+/**
+ * Coerce an untrusted `interaction` block into a {@link ProjectInteraction}.
+ *
+ * Layer ids are kept even when no such layer exists: the block is replayed
+ * against whatever layers the project has when it opens, and the loader drops
+ * the ones it cannot find. Control names are kept as written for the same
+ * reason; the app ignores names it does not know.
+ *
+ * @param value - Raw `interaction` value from the project JSON or the store.
+ * @returns The normalized block, or null when it carries nothing to apply.
+ */
+export declare function normalizeProjectInteraction(value: unknown): ProjectInteraction | null;
 export declare function isAllowedPluginManifestUrl(url: string): boolean;
 export declare function normalizeProjectComments(rawComments: unknown): ProjectComment[];
 export declare function projectFromStore(state: {
@@ -5363,8 +5561,20 @@ export declare function projectFromStore(state: {
   /** Project-scoped Style Manager entries (the store's `projectStyleLibrary`). */
   styleLibrary?: StyleLibraryEntry[] | null;
   comments?: ProjectComment[] | null;
+  /** Startup interaction state loaded with the project, written back as-is. */
+  interaction?: ProjectInteraction | null;
   metadata: Record<string, unknown>;
 }): GeoLibreProject;
+/**
+ * The plain HTTP(S) WMS template inside the desktop app's `geolibre-wms://`
+ * wrapper (its CORS-exempt native fetcher), or the tile unchanged when it is
+ * not wrapped or the wrapped URL is not HTTP(S). Shared by project export and
+ * the ArcGIS engine's story-export templates.
+ *
+ * @param tile - A tile template, wrapped or not.
+ * @returns The unwrapped template, or `tile` itself.
+ */
+export declare function portableWmsTileUrl(tile: unknown): unknown;
 export declare function applyProjectToStore(project: GeoLibreProject): {
   projectName: string;
   mapView: MapViewState;
@@ -5389,6 +5599,7 @@ export declare function applyProjectToStore(project: GeoLibreProject): {
   primaryRenderer: MapRendererKind;
   projectStyleLibrary: StyleLibraryEntry[];
   comments: ProjectComment[];
+  projectInteraction: ProjectInteraction | null;
   metadata: Record<string, unknown>;
 };
 /**
@@ -5931,6 +6142,101 @@ export declare function extractCopiedLayerStyle(layer: GeoLibreLayer): CopiedLay
  */
 export declare function applyCopiedLayerStyle(target: GeoLibreLayer, copied: CopiedLayerStyle): Partial<GeoLibreLayer> | null;
 //#endregion
+//#region src/layer-style-file.d.ts
+/** `type` tag identifying a layer styles file. */
+export declare const LAYER_STYLES_FILE_TYPE = "geolibre-layer-styles";
+/** Format version written by {@link serializeLayerStylesFile}. */
+export declare const LAYER_STYLES_FILE_VERSION = 1;
+/** One layer's style in a layer styles file, keyed by the layer's name. */
+export type LayerStyleFileEntry = {
+  /** Name of the layer the style was exported from; the match key. */
+  layerName: string;
+  kind: "vector";
+  /** The full vector {@link LayerStyle} bag. */
+  style: LayerStyle;
+} | {
+  layerName: string;
+  kind: "raster";
+  /** Raster visualization state (`metadata.rasterState`). */
+  rasterState?: Record<string, unknown>;
+  /** Raster classification symbology (`metadata.rasterSymbology`). */
+  rasterSymbology?: Record<string, unknown>;
+};
+/** The on-disk layer styles document. */
+export interface LayerStylesFile {
+  type: typeof LAYER_STYLES_FILE_TYPE;
+  version: typeof LAYER_STYLES_FILE_VERSION;
+  styles: LayerStyleFileEntry[];
+}
+/**
+ * Capture the style of every layer that has one. Layers without copyable
+ * symbology (basemap tiles, 3D tiles, ...) are skipped. Layers that share a
+ * name are all written, in stack order; the first one wins when the file is
+ * applied (see {@link findLayerStyleEntryIndex}).
+ *
+ * @param layers - The layers to export, in store (bottom-to-top) order.
+ * @returns The style entries.
+ */
+export declare function extractLayerStyleEntries(layers: readonly GeoLibreLayer[]): LayerStyleFileEntry[];
+/**
+ * Serialize style entries into the JSON written by Export Layer Styles.
+ *
+ * @param entries - The entries to write.
+ * @returns Pretty-printed file content.
+ */
+export declare function serializeLayerStylesFile(entries: readonly LayerStyleFileEntry[]): string;
+/**
+ * Coerce untrusted entries (a hand-edited file, or a copy kept in settings)
+ * into clean ones. An entry without a name or a known kind is dropped; a
+ * vector style is sanitized and completed against the default style, and a
+ * raster state keeps only well-typed appearance keys, so applying an entry
+ * never hands a renderer an unknown, missing or wrong-typed field.
+ *
+ * @param value - The raw `styles` array.
+ * @returns The usable entries.
+ */
+export declare function normalizeLayerStyleEntries(value: unknown): LayerStyleFileEntry[];
+/**
+ * Parse a file written by {@link serializeLayerStylesFile}.
+ *
+ * @param json - The file content.
+ * @returns The normalized entries.
+ * @throws Error when the content is not a layer styles file, comes from a
+ *   newer format version, or holds no usable entries.
+ */
+export declare function parseLayerStylesFile(json: string): LayerStyleFileEntry[];
+/**
+ * Find the entry for a layer name: an exact match first, then one that differs
+ * only in case or surrounding whitespace, so `Roads` still picks up a style
+ * saved for `roads`. The first match in file order wins.
+ *
+ * @param entries - The style entries.
+ * @param layerName - The layer name to look up.
+ * @param kind - When given, only entries of this style family are considered,
+ *   so a raster style saved under a shared name does not shadow the vector one.
+ * @returns The matching entry's index in `entries`, or -1.
+ */
+export declare function findLayerStyleEntryIndex(entries: readonly LayerStyleFileEntry[], layerName: string, kind?: LayerStyleClipboardKind): number;
+/** A layer restyled from a style entry, and the entry it took. */
+export interface LayerStyleMatch {
+  /** Index of the applied entry in the entries array. */
+  entryIndex: number;
+  /** The patch that applies it. */
+  patch: Partial<GeoLibreLayer>;
+}
+/**
+ * Build the patch that restyles a layer from the entry matching its name, with
+ * the same semantics as pasting a copied style: a vector style replaces the
+ * whole style bag, a raster style merges its appearance keys and keeps the
+ * layer's own band selection, and layer opacity is left alone.
+ *
+ * @param layer - The layer to restyle.
+ * @param entries - The style entries.
+ * @returns The matched entry and patch, or `null` when no entry of the layer's
+ *   style family matches its name (or the layer has no stylable symbology).
+ */
+export declare function matchLayerStyleEntry(layer: GeoLibreLayer, entries: readonly LayerStyleFileEntry[]): LayerStyleMatch | null;
+//#endregion
 //#region src/layer-groups.d.ts
 /** Opacity a freshly created {@link LayerGroup} starts at (fully opaque). */
 export declare const DEFAULT_LAYER_GROUP_OPACITY = 1;
@@ -6157,6 +6463,35 @@ export declare function reorderLayerGroupInPanel(layers: GeoLibreLayer[], groups
   layers: GeoLibreLayer[];
   groups: LayerGroup[];
 } | null;
+/** Direction {@link sortLayerGroupInPanel} orders names in, top of panel first. */
+export type LayerGroupSortOrder = "asc" | "desc";
+/**
+ * Sort what sits directly inside a group by name, A to Z (`"asc"`) or Z to A
+ * (`"desc"`) from the top of the panel down (GeoLibre#2599).
+ *
+ * The group's own layers are sorted among themselves, and its child groups are
+ * sorted among themselves by group name, each carrying everything nested inside
+ * it. The two are not interleaved: a group's own layers are one contiguous
+ * block (see {@link normalizeGroupContiguity}), so that block keeps its slot
+ * among the child groups rather than being split between them. Only direct
+ * children move; the contents of a child group keep their order.
+ *
+ * Like {@link reorderLayerGroupInPanel}, both arrays come back, so empty child
+ * folders follow the sort too.
+ *
+ * @param layers Flat layer list in store (render) order.
+ * @param groups Group definitions.
+ * @param id Group whose children to sort.
+ * @param order `"asc"` for A to Z, `"desc"` for Z to A.
+ * @param locale BCP 47 tag whose collation rules to compare names by, normally
+ *   the app's display language. Defaults to the runtime locale.
+ * @returns The new arrays, or `null` when the children are already in that
+ *   order and nothing would change.
+ */
+export declare function sortLayerGroupInPanel(layers: GeoLibreLayer[], groups: LayerGroup[], id: string, order: LayerGroupSortOrder, locale?: string): {
+  layers: GeoLibreLayer[];
+  groups: LayerGroup[];
+} | null;
 /**
  * Which directions {@link reorderLayerGroupInPanel} can actually move each
  * group, so the layer panel can disable a menu item that would do nothing.
@@ -6169,6 +6504,16 @@ export declare function layerGroupMoveability(layers: GeoLibreLayer[], groups: L
   up: boolean;
   down: boolean;
 }>;
+/**
+ * Which orders {@link sortLayerGroupInPanel} would actually change for each
+ * group, so the layer panel can disable a sort that would do nothing.
+ *
+ * @param layers Flat layer list in store (render) order.
+ * @param groups Group definitions.
+ * @param locale Collation locale, as for {@link sortLayerGroupInPanel}.
+ * @returns Per-group flags, keyed by group id.
+ */
+export declare function layerGroupSortability(layers: GeoLibreLayer[], groups: LayerGroup[], locale?: string): Map<string, Record<LayerGroupSortOrder, boolean>>;
 //#endregion
 //#region src/pixel-format.d.ts
 /**
@@ -6183,6 +6528,236 @@ export declare function layerGroupMoveability(layers: GeoLibreLayer[], groups: L
  */
 export declare function formatPixelValue(value: number): string;
 //#endregion
+//#region src/s3.d.ts
+/**
+ * Amazon S3 (and S3-compatible) object URLs: parsing, public HTTPS mapping,
+ * SigV4 query-string presigning, and the registry the app uses to plug
+ * credentialed signing into every reader.
+ *
+ * Readers in GeoLibre take a plain HTTPS URL (geotiff.js, cog-tiler-wasm,
+ * pmtiles, DuckDB-WASM's HTTP reader, the vector control). A presigned URL is
+ * the one form of authenticated S3 access all of them accept without a custom
+ * fetch hook, so private objects are read by signing the URL first and handing
+ * the reader the result. Layers keep the unsigned source URL (`s3://…` or the
+ * plain object URL); the signed one is minted again on every load, so a saved
+ * project never carries a signature or a session token.
+ */
+/** A bucket and object key, with the endpoint the URL named, if any. */
+export interface S3ObjectLocation {
+  bucket: string;
+  /** The raw (decoded) object key, without a leading slash. */
+  key: string;
+  /** The region an AWS HTTPS URL named in its host, when it named one. */
+  region?: string;
+}
+/** Where and how a bucket is addressed. */
+export interface S3EndpointConfig {
+  /** Signing region, e.g. `us-east-1`. S3-compatible stores often accept `auto`. */
+  region: string;
+  /**
+   * Custom endpoint origin for S3-compatible stores (MinIO, Cloudflare R2,
+   * Wasabi, Ceph), e.g. `https://minio.example.com:9000`. Empty for AWS.
+   */
+  endpoint?: string;
+  /** Address the bucket in the path instead of the host name. */
+  pathStyle?: boolean;
+}
+/** AWS credentials used to sign a request. */
+export interface S3Credentials {
+  accessKeyId: string;
+  secretAccessKey: string;
+  sessionToken?: string;
+  /** Epoch milliseconds at which temporary credentials stop working. */
+  expiresAt?: number;
+}
+/** A presigned URL and the moment it stops working. */
+export interface S3SignedUrl {
+  href: string;
+  /** Epoch milliseconds. */
+  expiresAt: number;
+}
+/** SigV4 allows a presigned URL to live at most seven days. */
+export declare const S3_MAX_PRESIGN_SECONDS: number;
+/**
+ * Parses an `s3://bucket/key` URI or an AWS S3 HTTPS object URL
+ * (virtual-hosted or path-style, any region) into its bucket and key.
+ * Query strings and fragments are ignored, so a presigned URL parses to the
+ * object it signs.
+ *
+ * @param url The URL to parse.
+ * @returns The bucket and key, or null when the URL is not an S3 object URL.
+ */
+export declare function parseS3Url(url: string): S3ObjectLocation | null;
+/** Whether `url` is an `s3://` URI (as opposed to an HTTPS object URL). */
+export declare function isS3Uri(url: string): boolean;
+/** Formats a location as an `s3://bucket/key` URI. */
+export declare function formatS3Uri(location: S3ObjectLocation): string;
+/**
+ * URI-encodes a key the way SigV4 canonicalizes an S3 path: every byte except
+ * the unreserved set and `/` is percent-encoded, once.
+ */
+export declare function encodeS3Key(key: string): string;
+/**
+ * Builds the HTTPS URL of an object.
+ *
+ * AWS buckets whose name contains a dot are addressed path-style, since the
+ * `*.s3.amazonaws.com` wildcard certificate covers one label only.
+ *
+ * @param location The bucket and key.
+ * @param config The endpoint; without one the global AWS endpoint is used.
+ * @returns The unsigned object URL.
+ */
+export declare function s3ObjectHttpsUrl(location: S3ObjectLocation, config?: Partial<S3EndpointConfig>): string;
+export interface PresignS3Options {
+  /** The unsigned HTTPS object URL (see {@link s3ObjectHttpsUrl}). */
+  url: string;
+  region: string;
+  credentials: S3Credentials;
+  /** Lifetime in seconds, clamped to 1…{@link S3_MAX_PRESIGN_SECONDS}. */
+  expiresIn: number;
+  /** HTTP method the URL authorizes. Defaults to GET. */
+  method?: string;
+  /** Signing time; defaults to now. Exposed for tests. */
+  now?: Date;
+}
+/**
+ * Presigns an S3 request with AWS Signature Version 4 in the query string.
+ * Runs on WebCrypto, so it works in the browser, the Tauri webview, and Node.
+ *
+ * The URL authorizes exactly one method: a GET URL cannot answer a HEAD, so
+ * readers that probe with HEAD need a GET range request instead.
+ *
+ * @param options The object URL, region, credentials, and lifetime.
+ * @returns The presigned URL.
+ */
+export declare function presignS3Url(options: PresignS3Options): Promise<string>;
+/** One signed S3 GET: an object read, or a bucket-level call such as ListObjectsV2. */
+export interface S3PresignRequest {
+  bucket: string;
+  /** Object key; empty for a bucket-level request. */
+  key: string;
+  /** Extra query parameters to sign (e.g. `list-type=2`). */
+  query?: Record<string, string>;
+  /** Region an AWS URL named, used ahead of the connection's default. */
+  region?: string;
+  /**
+   * Sign with this connection instead of the one matched by bucket name (the
+   * S3 browser listing a chosen connection's buckets, where `bucket` is empty).
+   */
+  connectionId?: string;
+}
+/** A configured connection, as the S3 browser lists it. No secrets. */
+export interface S3ConnectionSummary {
+  id: string;
+  name: string;
+  /** Bucket patterns the connection covers; empty means every bucket. */
+  buckets: string[];
+}
+/**
+ * Presigns S3 requests with the app's configured credentials. `presign`
+ * resolves to null when no configured connection covers the bucket, in which
+ * case the object is read anonymously.
+ */
+export interface S3UrlSigner {
+  /** Whether a configured connection covers `bucket`. Must be synchronous. */
+  covers(bucket: string): boolean;
+  /** Presigns a GET; rejects when the connection's credentials cannot be resolved. */
+  presign(request: S3PresignRequest, signal?: AbortSignal): Promise<S3SignedUrl | null>;
+  /** The configured connections, for pickers. */
+  connections(): S3ConnectionSummary[];
+  /**
+   * Fetches a presigned bucket-level URL (listing). The desktop app routes it
+   * through its native HTTP client, which needs no bucket CORS rule.
+   */
+  fetchText?(url: string, signal?: AbortSignal): Promise<{
+    status: number;
+    body: string;
+  }>;
+  /** The persisted location (`s3://bucket/prefix/`) the S3 browser opens at, or "". */
+  defaultLocation?(): string;
+  /** Persists the S3 browser's default location; "" clears it. */
+  setDefaultLocation?(location: string): void;
+}
+/** Installs (or with null, removes) the app's S3 signer. */
+export declare function registerS3UrlSigner(signer: S3UrlSigner | null): void;
+/**
+ * Whether reading `url` needs the S3 signer: it names an S3 object in a bucket
+ * a configured connection covers.
+ */
+export declare function isCredentialedS3Url(url: string): boolean;
+/**
+ * The unsigned URL a presigned one was minted for by
+ * {@link resolveReadableUrl}, or `url` itself. Layer sync runs every URL a
+ * control reports through this, so the store (and a saved project) keeps the
+ * `s3://` source rather than an expiring signature.
+ */
+export declare function unsignedSourceUrl(url: string): string;
+export declare function unsignedSourceUrl(url: string | undefined): string | undefined;
+/**
+ * Resolves a data URL into one a plain HTTP reader can fetch:
+ *
+ * - an S3 object in a bucket a configured connection covers → a presigned URL;
+ * - any other `s3://` URI → the public HTTPS object URL (anonymous read);
+ * - anything else → unchanged.
+ *
+ * @param url The URL a layer or query names.
+ * @param signal Aborts a pending credential lookup.
+ * @returns The URL to hand the reader.
+ * @throws When the bucket is covered but its credentials cannot be resolved.
+ */
+export declare function resolveReadableUrl(url: string, signal?: AbortSignal): Promise<string>;
+/** The installed signer, for the S3 browser. */
+export declare function getS3UrlSigner(): S3UrlSigner | null;
+/** One page of a ListObjectsV2 response. */
+export interface S3ListPage {
+  /** Common prefixes ("folders") under the requested prefix. */
+  prefixes: string[];
+  objects: Array<{
+    key: string;
+    size: number;
+    lastModified?: string;
+  }>;
+  /** Present when more results follow. */
+  nextContinuationToken?: string;
+}
+/**
+ * Parses a ListObjectsV2 XML body. S3's listing XML is flat and predictable,
+ * so this reads it with patterns rather than an XML DOM, which keeps it usable
+ * in workers and Node tests.
+ */
+export declare function parseS3ListObjects(xml: string): S3ListPage;
+/** The error code and message of an S3 XML error body, when it is one. */
+export declare function parseS3Error(xml: string): {
+  code: string;
+  message: string;
+  region?: string;
+} | null;
+/** Bucket names from a ListBuckets (`GET /` on the service) XML body. */
+export declare function parseS3BucketList(xml: string): string[];
+/** A read the bucket's CORS configuration blocked. */
+export declare class S3CorsError extends Error {
+  readonly bucket: string;
+  readonly origin: string;
+  constructor(message: string, bucket: string, origin: string, cause: unknown);
+}
+/** Translates `key`, falling back to `defaultValue` (an app API's `translate`). */
+export type S3ErrorTranslate = (key: string, defaultValue: string, params?: Record<string, string | number>) => string;
+/**
+ * Explains why reading an S3 object failed when the browser only said
+ * "Failed to fetch". A browser reports a request the bucket's CORS rules
+ * blocked exactly like a network outage, so this repeats the request twice:
+ * normally, where success means the failure was transient; then in `no-cors`
+ * mode, which CORS cannot block. Only when the first fails and the second gets
+ * an answer is the bucket's CORS configuration the cause.
+ *
+ * @param url The `s3://` URI or object URL that was being read.
+ * @param error What the reader threw.
+ * @param translate Turns the message into the UI language.
+ * @returns An {@link S3CorsError} naming the bucket and the origin to allow,
+ *   or `error` unchanged when it is not a CORS refusal of an S3 read.
+ */
+export declare function explainS3ReadError(url: string, error: unknown, translate?: S3ErrorTranslate): Promise<unknown>;
+//#endregion
 //#region src/storymap-sample.d.ts
 /**
  * Build a ready-to-play sample story map.
@@ -6308,351 +6883,249 @@ export declare function serializeStoryMapCsv(storymap: StoryMap): string;
  */
 export declare function parseStoryMapCsv(text: string, base?: StoryMap | null): StoryMap;
 //#endregion
-//#region src/store.d.ts
-type ConversionToolKind = "vector-to-vector" | "vector-to-geoparquet" | "vector-to-flatgeobuf" | "vector-to-shapefile" | "vector-to-geopackage" | "csv-to-geoparquet" | "vector-to-pmtiles" | "raster-to-pmtiles" | "raster-to-cog";
-/**
- * Identifiers of the vector processing tools. Kept in sync by hand with the
- * `id` fields of `VECTOR_TOOLS` in `@geolibre/processing` (`vector-tools.ts`);
- * deriving the type there would create a core -> processing circular import.
- */
-type VectorToolKind = "buffer" | "centroids" | "convex-hull" | "dissolve" | "bounding-box" | "simplify" | "clip" | "intersection" | "difference" | "union" | "spatial-join" | "attribute-join" | "select-by-value" | "select-by-location" | "random-extract" | "reproject" | "explode" | "aggregate" | "smooth" | "extract-vertices" | "points-along-geometry" | "grid" | "voronoi" | "cell-sectors" | "dggs-grid" | "dggs-bin" | "dggs-compact" | "trajectory-speed" | "detect-stops" | "space-time-proximity" | "decode-polyline" | "encode-polyline" | "merge-layers" | "check-validity" | "fix-geometries" | "check-topology-rules" | "fix-topology";
-/** Identifiers of the network-analysis tools (`NETWORK_TOOLS` ids). */
-type NetworkToolKind = "isochrone" | "od-matrix" | "sequential-route";
-/** Identifiers of the spatial-statistics tools (`STATISTICS_TOOLS` ids). */
-type StatisticsToolKind = "global-morans-i" | "local-morans-i" | "getis-ord-gi" | "average-nearest-neighbor" | "kernel-density" | "emerging-hot-spot" | "composite-score";
-/**
- * Identifiers of the raster processing tools. Kept in sync by hand with the
- * `id` fields of `RASTER_TOOLS` in `@geolibre/processing` (`raster-tools.ts`);
- * deriving the type there would create a core -> processing circular import.
- */
-type RasterToolKind = "hillshade" | "slope" | "aspect" | "reproject" | "resample" | "clip-extent" | "clip-mask" | "polygonize" | "contour" | "interpolate" | "zonal" | "raster-calc" | "spectral-index" | "reclassify" | "mosaic" | "focal";
-/**
- * Latest live device-GPS fix published by the GPS Tracking tool (issue #1316),
- * read by the status bar readout. Device state, not project state: excluded
- * from undo history (partialize never lists it) and from project files, and
- * deliberately left untouched on project switches.
- */
-interface GpsStatusFix {
-  lng: number;
-  lat: number;
-  /** Horizontal accuracy radius in meters. */
-  accuracy: number;
-  /** Satellites used for the fix, or null when the provider does not report it. */
-  satellites: number | null;
-  /** Ground speed in m/s, or null when the device doesn't report one. */
-  speed: number | null;
-  /** Fix time in epoch milliseconds. */
-  timestamp: number;
-}
-interface AppState {
-  projectName: string;
-  projectPath: string | null;
-  projectGeneration: number;
-  isDirty: boolean;
-  mapView: MapViewState;
-  basemapStyleUrl: string;
-  basemapVisible: boolean;
-  basemapOpacity: number;
-  blankBackgroundColor: string | null;
-  layers: GeoLibreLayer[];
-  layerGroups: LayerGroup[];
-  preferences: ProjectPreferences;
-  projectPlugins: ProjectPluginState | null;
-  legend: LegendConfig;
-  /** Print Layout composer settings for the open project (discussion #1992). */
-  printLayout: PrintLayoutConfig;
-  storymap: StoryMap | null;
-  /** Saved processing pipelines (batch/model chaining; issue #344). */
-  models: ProcessingModel[];
-  /**
-   * App-level Style Manager library (issue #1294). Lives outside the project
-   * lifecycle: never serialized into the project file, untouched by
-   * newProject/loadProject, and persisted by the desktop app (IndexedDB).
-   */
-  styleLibrary: StyleLibraryEntry[];
-  /**
-   * App-level Layer Library (issue #1520) — the Browser panel's My Data
-   * section. Like {@link styleLibrary} it lives outside the project lifecycle:
-   * never serialized into the project file, untouched by newProject/loadProject,
-   * and persisted by the desktop app (IndexedDB). Most recently saved first.
-   */
-  layerLibrary: LayerLibraryEntry[];
-  /**
-   * App-level Template Library. Persisted by the desktop app (IndexedDB).
-   */
-  templateLibrary: ProjectTemplateEntry[];
+//#region src/store/capabilities-slice.d.ts
+interface CapabilitiesSlice {
   /**
-   * Project-scoped Style Manager entries (issue #1294), serialized into the
-   * `.geolibre.json` `styleLibrary` array and replaced on project load.
+   * What this *deployment* is allowed to do (issue #1673). Set once at startup
+   * from the deployment configuration; never from a project file, a URL
+   * parameter, or anything else the visitor controls, and never edited from the
+   * UI. Defaults to the full set so an unconfigured build behaves as before.
+   *
+   * Excluded from the project file and from undo history: it describes the
+   * server that served the app, not the document being edited.
    */
-  projectStyleLibrary: StyleLibraryEntry[];
-  /** Recorded processing tool runs, oldest first (Processing History; #1292). */
-  processingHistory: ProcessingRun[];
-  /** Saved Dashboard panel chart widgets (issue #401). */
-  widgets: DashboardWidget[];
-  /** Number of columns in the Dashboard widget grid. */
-  dashboardColumns: number;
+  deploymentCapabilities: ReadonlySet<DeploymentCapability>;
   /**
-   * Multi-map grid layout (issue: split/grid view). A 1x1 grid is the normal
-   * single-map workspace. `rows * cols` panes are shown; pane 0 is the primary
-   * map driven by `mapView` / `basemap*`, panes 1.. are `secondaryMapViews`.
+   * Ephemeral application capability model (issue #1672). Gating role and
+   * privileges for the current session/deployment. Excluded from the project file
+   * and undo history.
    */
-  mapLayout: MapGridLayout;
+  capabilities: AppCapabilities;
   /**
-   * Secondary map panes (everything past the primary pane). The store keeps
-   * exactly `rows * cols - 1` entries in sync with `mapLayout`.
+   * Narrow what this deployment may do. Intended for the startup path only —
+   * calling it later would leave already-rendered surfaces stale.
    */
-  secondaryMapViews: SecondaryMapView[];
-  /** User-entered label for the primary pane (shown only in multi-map mode). */
-  primaryMapLabel: string;
+  setDeploymentCapabilities: (capabilities: Iterable<DeploymentCapability>) => void;
   /**
-   * Which engine draws the primary map area (issue #2217): the 2D MapLibre map
-   * or the 3D Cesium globe. Both render the same store state, so switching
-   * keeps the camera, basemap, layers, groups, visibility, and opacity — it
-   * only changes what draws them. Independent of `mapLayout`: switching never
-   * adds or removes panes.
+   * Assign an application role (e.g. "viewer", "editor", "publisher", "administrator", "custom"),
+   * deriving the effective privileges and optional reason.
    */
-  primaryRenderer: MapRendererKind;
-  selectedLayerId: string | null;
-  selectedFeatureId: string | null;
-  /**
-   * Full set of selected feature ids. The attribute table extends the single
-   * selection to many rows via Ctrl/Cmd (toggle) and Shift (range). The anchor
-   * — `selectedFeatureId` — is the primary/last-clicked feature used for map
-   * fit, DuckDB highlight, and scripting, and is always one of these ids (or
-   * `null` when the set is empty). A single click leaves exactly one id here.
+  setAppRole: (role: AppRole, options?: {
+    customPrivileges?: AppPrivilege[];
+    reason?: string;
+  }) => void;
+  /** Set explicit custom privileges and an optional reason. */
+  setAppPrivileges: (privileges: AppPrivilege[], reason?: string) => void;
+  /** Grant an individual application privilege. */
+  grantAppPrivilege: (privilege: AppPrivilege) => void;
+  /** Revoke an individual application privilege with an optional reason. */
+  revokeAppPrivilege: (privilege: AppPrivilege, reason?: string) => void;
+  /** Reset application capabilities back to the default unconstrained Administrator role. */
+  resetAppCapabilities: () => void;
+  /** Check if the current capabilities grant the requested privilege. */
+  hasAppPrivilege: (privilege: AppPrivilege) => boolean;
+}
+//#endregion
+//#region src/store/collaboration-slice.d.ts
+/**
+ * A fresh, inactive collaboration slice (no live session). Frozen (like
+ * DEFAULT_LEGEND_CONFIG) to guard against accidental in-place mutation; store
+ * actions always produce new objects via spread, so the frozen default is only
+ * ever read.
+ */
+export declare const DEFAULT_COLLABORATION_STATE: CollaborationState;
+interface CollaborationSlice {
+  collaboration: CollaborationState;
+  setCollaboration: (patch: Partial<CollaborationState>) => void;
+  updateCollaborationPresence: (clientId: string, presence: CollaborationPresence | null) => void;
+  /** Append a chat message to the session log (bounded; #754). */
+  addCollaborationChat: (message: CollaborationChatMessage) => void;
+  resetCollaboration: () => void;
+}
+//#endregion
+//#region src/store/layer-groups-slice.d.ts
+interface LayerGroupsSlice {
+  layerGroups: LayerGroup[];
+  addLayerGroup: (name?: string, layerIds?: string[]) => string;
+  removeLayerGroup: (id: string, options?: {
+    removeChildren?: boolean;
+  }) => void;
+  renameLayerGroup: (id: string, name: string) => void;
+  setLayerGroupVisibility: (id: string, visible: boolean) => void;
+  setLayerGroupOpacity: (id: string, opacity: number) => void;
+  toggleLayerGroupCollapsed: (id: string) => void;
+  moveLayerToGroup: (layerId: string, groupId: string | null, beforeLayerId?: string | null) => void;
+  moveLayersToGroup: (layerIds: string[], groupId: string | null, beforeLayerId?: string | null) => void;
+  moveLayerGroupToGroup: (id: string, parentId: string | null) => void;
+  reorderLayerGroup: (id: string, direction: "up" | "down") => void;
+  /**
+   * Sort a group's direct children by name, A to Z or Z to A (top of panel
+   * first), collating by `locale` (the app's display language) when given.
    */
-  selectedFeatureIds: string[];
+  sortLayerGroup: (id: string, order: LayerGroupSortOrder, locale?: string) => void;
+}
+//#endregion
+//#region src/store/layers-slice.d.ts
+interface LayersSlice {
+  layers: GeoLibreLayer[];
+  addLayer: (layer: GeoLibreLayer, beforeLayerId?: string | null) => void;
+  removeLayer: (id: string) => void;
+  updateLayer: (id: string, patch: Partial<GeoLibreLayer>) => void;
+  setLayerVisibility: (id: string, visible: boolean) => void;
+  setLayerOpacity: (id: string, opacity: number) => void;
+  setLayerStyle: (id: string, style: Partial<LayerStyle>) => void;
   /**
-   * Store-layer id targeted by Identify, or {@link IDENTIFY_ALL_LAYERS_ID} for
-   * the map-level mode that queries every visible queryable layer — vector,
-   * DuckDB query, WMS, COG, NetCDF image and time-slider raster alike.
+   * Transient clipboard holding a layer's symbology, captured by
+   * {@link copyLayerStyle} and applied by {@link pasteLayerStyle} (copy/paste
+   * styles, issue #1339). Runtime-only: excluded from undo history
+   * (`partialize` never lists it) and from the saved project. `null` until a
+   * style is copied this session. Cleared by `newProject`/`loadProject` so a
+   * paste can't apply an entry from a different project; it deliberately
+   * survives undo/redo within a project (it holds a deep snapshot, not a live
+   * layer reference, so a paste stays valid even if the source layer is undone
+   * away — only the displayed source name may then be stale).
    */
-  identifyLayerId: string | null;
-  pointerCoords: [number, number] | null;
+  copiedLayerStyle: CopiedLayerStyle | null;
   /**
-   * Ground elevation in true metres under the pointer, for the status bar
-   * (issue #1813). Null when it cannot be resolved — the pointer is off the
-   * map, terrain is off and the remote lookup has not answered (or failed), or
-   * the active body is not Earth. Set alongside `pointerCoords` by MapCanvas,
-   * which owns the map instance the terrain sample comes from.
+   * Snapshot the given layer's style into {@link copiedLayerStyle} so it can be
+   * pasted onto a compatible layer. No-op when the layer is missing or has no
+   * copyable symbology (leaving any prior clipboard entry untouched). Returns
+   * `true` when a style was captured, so callers can skip the confirmation on a
+   * no-op.
    */
-  pointerElevation: number | null;
+  copyLayerStyle: (id: string) => boolean;
   /**
-   * Camera height above sea level in metres — Google Earth Pro's "Eye alt"
-   * (issue #1816). Derived from the camera, so deliberately *not* part of
-   * `mapView`: that shape is persisted into the project file, and a stored
-   * altitude could only drift from the center/zoom/pitch it is computed from.
-   * Null before the map loads, or when MapLibre cannot report it.
+   * Apply the {@link copiedLayerStyle} clipboard entry onto the given layer.
+   * No-op when the clipboard is empty, the layer is missing, or the entry's
+   * style family does not match the target layer's. Returns `true` when the
+   * style was applied, so callers can skip the confirmation on a no-op.
    */
-  cameraAltitude: number | null;
-  /** Live GPS fix for the status bar, or null while GPS tracking is off. */
-  gpsStatus: GpsStatusFix | null;
-  /** Anchored review comments on map points or features (issue #1518). */
-  comments: ProjectComment[];
-  metadata: Record<string, unknown>;
-  recentProjects: RecentProjectEntry[];
-  attributeFilter: string;
+  pasteLayerStyle: (id: string) => boolean;
   /**
-   * What this *deployment* is allowed to do (issue #1673). Set once at startup
-   * from the deployment configuration; never from a project file, a URL
-   * parameter, or anything else the visitor controls, and never edited from the
-   * UI. Defaults to the full set so an unconfigured build behaves as before.
+   * Restyle layers from layer styles file entries matched by layer name
+   * (Import Layer Styles, and the Startup setting's auto-apply). Each matched
+   * layer is patched the way {@link pasteLayerStyle} would patch it, all in a
+   * single store update so the import is one undo step.
    *
-   * Excluded from the project file and from undo history: it describes the
-   * server that served the app, not the document being edited.
+   * @param entries - The parsed style entries.
+   * @param layerIds - Restrict the restyle to these layers; every layer when
+   *   omitted.
+   * @returns Each restyled layer's id with the index of the entry it took, in
+   *   stack order.
+   */
+  applyLayerStyleEntries: (entries: readonly LayerStyleFileEntry[], layerIds?: readonly string[]) => {
+    layerId: string;
+    entryIndex: number;
+  }[];
+  /**
+   * Replace a layer's persistent attribute joins and immediately re-derive its
+   * joined columns (strip what the previous joins added, apply the new list).
+   * Pass an empty array to detach every join and restore the base attributes.
    */
-  deploymentCapabilities: ReadonlySet<DeploymentCapability>;
-  collaboration: CollaborationState;
+  setLayerJoins: (id: string, joins: LayerJoin[]) => void;
   /**
-   * Ephemeral application capability model (issue #1672). Gating role and
-   * privileges for the current session/deployment. Excluded from the project file
-   * and undo history.
+   * Replace the layer's Attribute Form designer configuration (per-field edit
+   * widgets, constraints, conditional visibility). Pass `undefined` to remove
+   * the form config entirely.
    */
-  capabilities: AppCapabilities;
-  ui: {
-    processingOpen: boolean;
-    /**
-     * Tool id to preselect when the Whitebox toolbox dialog opens, set when the
-     * user picks a specific tool from the Processing menu's category submenus.
-     * Consumed and cleared by ProcessingDialog. Null means "no preselection".
-     */
-    processingInitialTool: string | null;
-    conversionOpen: ConversionToolKind | null;
-    vectorToolOpen: VectorToolKind | null;
-    networkToolOpen: NetworkToolKind | null;
-    statisticsToolOpen: StatisticsToolKind | null;
-    rasterToolOpen: RasterToolKind | null;
-    segmentationOpen: boolean;
-    objectDetectionOpen: boolean;
-    segmentEverythingOpen: boolean;
-    geocodeOpen: boolean;
-    sqlWorkspaceOpen: boolean;
-    loadEditorFeaturesOpen: boolean;
-    loadEditorFeaturesLayerId: string | null;
-    pythonConsoleOpen: boolean;
-    notebookOpen: boolean;
-    assistantOpen: boolean;
-    attributeTableOpen: boolean;
-    /** Whether the Raster Attribute Table bottom panel is open (issue #1307). */
-    rasterAttributeTableOpen: boolean;
-    dashboardOpen: boolean;
-    storymapPanelOpen: boolean;
-    storymapPresenting: boolean;
-    storymapReturnToEditor: boolean;
-    /**
-     * Layer opacities the active story presentation has applied so far, keyed
-     * by store layer id. Playback fades layers by writing MapLibre paint
-     * properties directly (never the persisted `layers[].opacity`), so this is
-     * how renderers outside MapLibre's paint model (deck.gl diagrams, 3D
-     * Z-value geometry) and the on-map Legend follow a chapter's fades. Empty
-     * while not presenting; never saved with the project.
-     */
-    storymapLayerOpacity: Record<string, number>;
-    storymapComposingId: string | null;
-    /** The Batch tools dialog (run one tool across many layers). */
-    batchToolsOpen: boolean;
-    /** The Model Builder canvas panel (author a processing graph). */
-    modelBuilderOpen: boolean;
-    /** One-shot request for Model Builder to load a saved model. */
-    modelBuilderRequestedModelId: string | null;
-    /** Style Manager dialog visibility (issue #1294). */
-    styleManagerOpen: boolean;
-    /** Processing History panel visibility (#1292). */
-    processingHistoryOpen: boolean;
-    /** Select by Expression dialog visibility (#1314). */
-    selectByExpressionOpen: boolean;
-    selectByExpressionLayerId: string | null;
-    /** Select by Location dialog visibility (#1314). */
-    selectByLocationOpen: boolean;
-    /** Same contract as `selectByExpressionLayerId`, for Select by Location. */
-    selectByLocationLayerId: string | null;
-    /**
-     * Pending "re-run from History" request. Written by the History panel just
-     * before it opens the target processing dialog; consumed and cleared by
-     * that dialog once it has pre-filled its parameter form. Null when idle.
-     */
-    processingRerun: ProcessingRerunRequest | null;
-    zoomToSelectedFeature: boolean;
-    collaborateDialogOpen: boolean;
-  };
-  setPointerCoords: (coords: [number, number] | null) => void;
-  setPointerElevation: (elevation: number | null) => void;
-  setCameraAltitude: (altitude: number | null) => void;
-  setGpsStatus: (fix: GpsStatusFix | null) => void;
-  setCollaboration: (patch: Partial<CollaborationState>) => void;
-  updateCollaborationPresence: (clientId: string, presence: CollaborationPresence | null) => void;
-  /** Append a chat message to the session log (bounded; #754). */
-  addCollaborationChat: (message: CollaborationChatMessage) => void;
-  resetCollaboration: () => void;
-  setMapView: (view: Partial<MapViewState>, markDirty?: boolean) => void;
+  setLayerAttributeForm: (id: string, attributeForm: AttributeFormConfig | undefined) => void;
   /**
-   * Resize the map grid. Clamps `rows`/`cols` into range and grows/shrinks
-   * `secondaryMapViews` so it always holds `rows * cols - 1` panes; new panes
-   * clone the primary map's current camera and basemap.
+   * Replace the layer's popup/tooltip design (which fields the Identify popup
+   * shows, in what order and under what labels, plus the hover tooltip). Pass
+   * `undefined` to restore the default full-property dump.
    */
-  setMapGrid: (rows: number, cols: number) => void;
-  /** Toggle synchronized camera across all panes. */
-  setSyncView: (syncView: boolean) => void;
-  /** Patch one secondary pane's camera by id (no-op if the id is unknown). */
-  setSecondaryMapView: (id: string, view: Partial<MapViewState>, markDirty?: boolean) => void;
+  setLayerPopup: (id: string, popup: LayerPopupConfig | undefined) => void;
   /**
-   * Override a layer's visibility in one secondary pane (no-op if the pane id is
-   * unknown). The override forces the layer visible/hidden in that pane only,
-   * independent of the primary map's visibility.
+   * Replace the layer's editor tracking configuration (whether creation/edit
+   * author and timestamp columns are maintained, and under which names). Pass
+   * `undefined` to drop the configuration entirely.
    */
-  setSecondaryLayerVisibility: (id: string, layerId: string, visible: boolean) => void;
-  /** Set the primary pane's custom label. */
-  setPrimaryMapLabel: (label: string) => void;
+  setLayerEditorTracking: (id: string, editorTracking: EditorTrackingConfig | undefined) => void;
   /**
-   * Switch the primary map area between the 2D map and the 3D globe (no-op if
-   * unchanged). Touches nothing else in the store, so the shared camera, layer,
-   * and basemap state carries straight across the swap.
+   * Replace a layer's virtual fields and immediately re-derive its computed
+   * columns (strip what the previous fields added, evaluate the new list).
+   * Pass an empty array to detach every virtual field.
    */
-  setPrimaryRenderer: (renderer: MapRendererKind) => void;
-  /** Set one secondary pane's custom label (no-op if the id is unknown). */
-  setSecondaryMapLabel: (id: string, label: string) => void;
+  setLayerVirtualFields: (id: string, fields: LayerVirtualField[]) => void;
   /**
-   * Switch one secondary pane between the 2D map and the 3D globe (no-op if the
-   * id is unknown or the kind is unchanged).
+   * Replace a layer's quick filters (issue #2114). The controls persist with
+   * the project and are compiled to a MapLibre filter at sync time, so this
+   * only stores state — nothing re-derives the layer's data. Pass an empty
+   * array to remove every control.
    */
-  setSecondaryViewKind: (id: string, viewKind: NonNullable<SecondaryMapView["viewKind"]>) => void;
-  /** Remove one secondary pane and collapse the grid back toward 1x1. */
-  removeSecondaryMapView: (id: string) => void;
-  setBasemapStyleUrl: (url: string) => void;
+  setLayerQuickFilters: (id: string, filters: LayerQuickFilter[]) => void;
+  /** Set or clear the project-persisted expression filter for a layer. */
+  setLayerFilterExpression: (id: string, expression: unknown[] | null) => void;
+  reorderLayer: (id: string, direction: "up" | "down") => void;
+  moveLayer: (id: string, targetIndex: number) => void;
+  moveLayersRelative: (layerIds: string[], targetLayerId: string, position: "above" | "below") => void;
+  addGeoJsonLayer: (name: string, geojson: FeatureCollection, sourcePath?: string, beforeLayerId?: string | null) => string;
   /**
-   * Apply a planetary basemap and sync the project's ellipsoid to the body it
-   * depicts, so measurements and the globe control use that body's radius. Used
-   * by both the basemap picker and the Layers-panel planet switcher.
+   * Add a georeferenced image overlay (a MapLibre `image` source rendered as a
+   * raster layer) from an image URL and its four corner coordinates, and return
+   * its id. Used for KML/KMZ `<GroundOverlay>` imports; the layer persists and
+   * renders exactly like a Raster Georeferencer overlay. Corners are `[lng,
+   * lat]` in top-left, top-right, bottom-right, bottom-left order.
    */
-  applyPlanetaryBasemap: (basemap: PlanetaryBasemap) => void;
+  addImageOverlayLayer: (name: string, source: {
+    url: string;
+    coordinates: [number, number][];
+  }, options?: {
+    opacity?: number;
+    bounds?: [number, number, number, number];
+    sourcePath?: string;
+    /** Initial visibility (default true); a time-slider frame past the first
+     * starts hidden. */
+    visible?: boolean;
+    /** Epoch-ms time bounds of a KML `<TimeSpan>`/`<TimeStamp>` frame; the
+     * Time Slider toggles this frame's visibility by the current date. */
+    timeSpan?: {
+      begin: number | null;
+      end: number | null;
+    };
+    /**
+     * What produced the overlay, e.g. a NetCDF grid baked to pixels. Defaults
+     * to the KML ground overlay this was first written for; panels gate their
+     * per-source controls on it.
+     */
+    sourceKind?: string;
+    /** Extra metadata merged onto the layer (e.g. a symbology record). */
+    metadata?: Record<string, unknown>;
+  }, beforeLayerId?: string | null) => string;
   /**
-   * Return to Earth: apply `styleUrl` (typically the Earth basemap that was
-   * active before a planet was selected, e.g. Liberty) and reset the ellipsoid
-   * to Earth. Used when a planet is deselected in the switcher.
+   * Add a native raster tile layer (XYZ, WMS, or WMTS) from one or more tile
+   * URL templates and return its id. The layer appears in the Layers panel and
+   * persists with the project exactly like a layer added through the Add Data
+   * dialog, so callers (e.g. an external plugin) do not have to touch MapLibre
+   * directly. See {@link AddTileLayerOptions}.
    */
-  restoreEarthBasemap: (styleUrl: string) => void;
-  setBasemapVisible: (visible: boolean) => void;
-  setBasemapOpacity: (opacity: number) => void;
-  setBlankBackgroundColor: (color: string | null) => void;
-  setPreferences: (preferences: ProjectPreferences) => void;
-  setLegend: (legend: LegendConfig) => void;
+  addTileLayer: (name: string, options: AddTileLayerOptions, beforeLayerId?: string | null) => string;
+}
+//#endregion
+//#region src/store/libraries-slice.d.ts
+interface LibrariesSlice {
   /**
-   * Replace the Print Layout composer settings. A config equal to the current
-   * one is ignored, so re-opening the composer (or a project load seeding the
-   * dialog) never marks the project dirty.
+   * App-level Style Manager library (issue #1294). Lives outside the project
+   * lifecycle: never serialized into the project file, untouched by
+   * newProject/loadProject, and persisted by the desktop app (IndexedDB).
    */
-  setPrintLayout: (printLayout: PrintLayoutConfig) => void;
-  setProjectPlugins: (projectPlugins: ProjectPluginState | null, shouldMarkDirty?: boolean) => void;
-  selectLayer: (id: string | null) => void;
-  selectFeature: (id: string | null) => void;
+  styleLibrary: StyleLibraryEntry[];
   /**
-   * Replace the multi-selection with `ids`. The anchor (`selectedFeatureId`)
-   * becomes `anchorId` when provided, otherwise the last id in the list (or
-   * `null` when the list is empty).
+   * App-level Layer Library (issue #1520) — the Browser panel's My Data
+   * section. Like {@link styleLibrary} it lives outside the project lifecycle:
+   * never serialized into the project file, untouched by newProject/loadProject,
+   * and persisted by the desktop app (IndexedDB). Most recently saved first.
    */
-  selectFeatures: (ids: string[], anchorId?: string | null) => void;
-  setIdentifyLayer: (id: string | null) => void;
-  setAttributeFilter: (filter: string) => void;
-  setProcessingOpen: (open: boolean) => void;
-  setProcessingInitialTool: (toolId: string | null) => void;
-  setConversionOpen: (kind: ConversionToolKind | null) => void;
-  setVectorToolOpen: (kind: VectorToolKind | null) => void;
-  setNetworkToolOpen: (kind: NetworkToolKind | null) => void;
-  setStatisticsToolOpen: (kind: StatisticsToolKind | null) => void;
-  setRasterToolOpen: (kind: RasterToolKind | null) => void;
-  setSegmentationOpen: (open: boolean) => void;
-  setObjectDetectionOpen: (open: boolean) => void;
-  setSegmentEverythingOpen: (open: boolean) => void;
-  setGeocodeOpen: (open: boolean) => void;
-  setSqlWorkspaceOpen: (open: boolean) => void;
-  setLoadEditorFeaturesOpen: (open: boolean, layerId?: string | null) => void;
-  setPythonConsoleOpen: (open: boolean) => void;
-  setNotebookOpen: (open: boolean) => void;
-  setAssistantOpen: (open: boolean) => void;
-  setAttributeTableOpen: (open: boolean) => void;
-  setRasterAttributeTableOpen: (open: boolean) => void;
-  setDashboardOpen: (open: boolean) => void;
-  setStorymapPanelOpen: (open: boolean) => void;
-  setStorymapPresenting: (presenting: boolean, returnToEditor?: boolean) => void;
+  layerLibrary: LayerLibraryEntry[];
   /**
-   * Record the layer opacities a story chapter applied, merging into the
-   * presentation's running map (see `ui.storymapLayerOpacity`).
+   * App-level Template Library. Persisted by the desktop app (IndexedDB).
    */
-  setStorymapLayerOpacity: (changes: Record<string, number>) => void;
-  setStorymapComposing: (chapterId: string | null) => void;
-  setBatchToolsOpen: (open: boolean) => void;
-  setModelBuilderOpen: (open: boolean) => void;
-  setModelBuilderRequestedModelId: (id: string | null) => void;
-  setProcessingHistoryOpen: (open: boolean) => void;
-  /** Open/close Select by Expression, optionally preselecting a target layer. */
-  setSelectByExpressionOpen: (open: boolean, layerId?: string | null) => void;
-  /** Open/close Select by Location, optionally preselecting a target layer. */
-  setSelectByLocationOpen: (open: boolean, layerId?: string | null) => void;
-  setProcessingRerun: (request: ProcessingRerunRequest | null) => void;
-  setCollaborateDialogOpen: (open: boolean) => void;
-  setZoomToSelectedFeature: (enabled: boolean) => void;
-  setStyleManagerOpen: (open: boolean) => void;
+  templateLibrary: ProjectTemplateEntry[];
+  /**
+   * Project-scoped Style Manager entries (issue #1294), serialized into the
+   * `.geolibre.json` `styleLibrary` array and replaced on project load.
+   */
+  projectStyleLibrary: StyleLibraryEntry[];
   /**
    * Replace the app-level style library wholesale. Used by the persistence
    * layer on startup and by bundle imports.
@@ -6665,35 +7138,125 @@ interface AppState {
    * unrelated entry after loading a project authored elsewhere. Project-scope
    * saves mark the project dirty.
    */
-  saveStyleLibraryEntry: (entry: StyleLibraryEntry, scope?: "app" | "project") => void;
+  saveStyleLibraryEntry: (entry: StyleLibraryEntry, scope?: "app" | "project") => void;
+  /**
+   * Remove a Style Manager entry by id. When `scope` is given only that list
+   * is touched — the two scopes can legitimately hold the same id after
+   * loading a project authored elsewhere, and deleting a project entry must
+   * not erase a local app-library style (or vice versa). Omitting `scope`
+   * removes the id from both lists.
+   */
+  deleteStyleLibraryEntry: (id: string, scope?: "app" | "project") => void;
+  /**
+   * Replace the app-level Layer Library wholesale. Used by the persistence
+   * layer on startup and by bundle imports.
+   */
+  setLayerLibrary: (entries: LayerLibraryEntry[]) => void;
+  /**
+   * Insert or replace (matching by `id`) a Layer Library entry. New entries go
+   * to the front so the most recently saved layer leads the My Data section.
+   */
+  saveLayerLibraryEntry: (entry: LayerLibraryEntry) => void;
+  /** Rename a Layer Library entry; a blank name is ignored. */
+  renameLayerLibraryEntry: (id: string, name: string) => void;
+  /** Remove a Layer Library entry by id. */
+  deleteLayerLibraryEntry: (id: string) => void;
+  /** Replace the app-level template library wholesale. */
+  setTemplateLibrary: (templates: ProjectTemplateEntry[]) => void;
+  /** Insert or replace a template in the Template Library. */
+  saveTemplateEntry: (entry: ProjectTemplateEntry) => void;
+  /** Remove a template entry by id from the Template Library. */
+  deleteTemplateEntry: (id: string) => void;
+}
+//#endregion
+//#region src/store/map-view-slice.d.ts
+interface MapViewSlice {
+  mapView: MapViewState;
+  basemapStyleUrl: string;
+  basemapVisible: boolean;
+  basemapOpacity: number;
+  blankBackgroundColor: string | null;
+  preferences: ProjectPreferences;
+  /**
+   * Multi-map grid layout (issue: split/grid view). A 1x1 grid is the normal
+   * single-map workspace. `rows * cols` panes are shown; pane 0 is the primary
+   * map driven by `mapView` / `basemap*`, panes 1.. are `secondaryMapViews`.
+   */
+  mapLayout: MapGridLayout;
+  /**
+   * Secondary map panes (everything past the primary pane). The store keeps
+   * exactly `rows * cols - 1` entries in sync with `mapLayout`.
+   */
+  secondaryMapViews: SecondaryMapView[];
+  /** User-entered label for the primary pane (shown only in multi-map mode). */
+  primaryMapLabel: string;
+  /**
+   * Which engine draws the primary map area (issue #2217): the 2D MapLibre map
+   * or the 3D Cesium globe. Both render the same store state, so switching
+   * keeps the camera, basemap, layers, groups, visibility, and opacity — it
+   * only changes what draws them. Independent of `mapLayout`: switching never
+   * adds or removes panes.
+   */
+  primaryRenderer: MapRendererKind;
+  setMapView: (view: Partial<MapViewState>, markDirty?: boolean) => void;
+  /**
+   * Resize the map grid. Clamps `rows`/`cols` into range and grows/shrinks
+   * `secondaryMapViews` so it always holds `rows * cols - 1` panes; new panes
+   * clone the primary map's current camera and basemap.
+   */
+  setMapGrid: (rows: number, cols: number) => void;
+  /** Toggle synchronized camera across all panes. */
+  setSyncView: (syncView: boolean) => void;
+  /** Patch one secondary pane's camera by id (no-op if the id is unknown). */
+  setSecondaryMapView: (id: string, view: Partial<MapViewState>, markDirty?: boolean) => void;
+  /**
+   * Override a layer's visibility in one secondary pane (no-op if the pane id is
+   * unknown). The override forces the layer visible/hidden in that pane only,
+   * independent of the primary map's visibility.
+   */
+  setSecondaryLayerVisibility: (id: string, layerId: string, visible: boolean) => void;
+  /** Set the primary pane's custom label. */
+  setPrimaryMapLabel: (label: string) => void;
+  /**
+   * Switch the primary map area between the 2D map and the 3D globe (no-op if
+   * unchanged). Touches nothing else in the store, so the shared camera, layer,
+   * and basemap state carries straight across the swap.
+   */
+  setPrimaryRenderer: (renderer: MapRendererKind) => void;
+  /** Set one secondary pane's custom label (no-op if the id is unknown). */
+  setSecondaryMapLabel: (id: string, label: string) => void;
   /**
-   * Remove a Style Manager entry by id. When `scope` is given only that list
-   * is touched — the two scopes can legitimately hold the same id after
-   * loading a project authored elsewhere, and deleting a project entry must
-   * not erase a local app-library style (or vice versa). Omitting `scope`
-   * removes the id from both lists.
+   * Switch one secondary pane between the 2D map and the 3D globe (no-op if the
+   * id is unknown or the kind is unchanged).
    */
-  deleteStyleLibraryEntry: (id: string, scope?: "app" | "project") => void;
+  setSecondaryViewKind: (id: string, viewKind: NonNullable<SecondaryMapView["viewKind"]>) => void;
+  /** Remove one secondary pane and collapse the grid back toward 1x1. */
+  removeSecondaryMapView: (id: string) => void;
+  setBasemapStyleUrl: (url: string) => void;
   /**
-   * Replace the app-level Layer Library wholesale. Used by the persistence
-   * layer on startup and by bundle imports.
+   * Apply a planetary basemap and sync the project's ellipsoid to the body it
+   * depicts, so measurements and the globe control use that body's radius. Used
+   * by both the basemap picker and the Layers-panel planet switcher.
    */
-  setLayerLibrary: (entries: LayerLibraryEntry[]) => void;
+  applyPlanetaryBasemap: (basemap: PlanetaryBasemap) => void;
   /**
-   * Insert or replace (matching by `id`) a Layer Library entry. New entries go
-   * to the front so the most recently saved layer leads the My Data section.
+   * Return to Earth: apply `styleUrl` (typically the Earth basemap that was
+   * active before a planet was selected, e.g. Liberty) and reset the ellipsoid
+   * to Earth. Used when a planet is deselected in the switcher.
    */
-  saveLayerLibraryEntry: (entry: LayerLibraryEntry) => void;
-  /** Rename a Layer Library entry; a blank name is ignored. */
-  renameLayerLibraryEntry: (id: string, name: string) => void;
-  /** Remove a Layer Library entry by id. */
-  deleteLayerLibraryEntry: (id: string) => void;
-  /** Replace the app-level template library wholesale. */
-  setTemplateLibrary: (templates: ProjectTemplateEntry[]) => void;
-  /** Insert or replace a template in the Template Library. */
-  saveTemplateEntry: (entry: ProjectTemplateEntry) => void;
-  /** Remove a template entry by id from the Template Library. */
-  deleteTemplateEntry: (id: string) => void;
+  restoreEarthBasemap: (styleUrl: string) => void;
+  setBasemapVisible: (visible: boolean) => void;
+  setBasemapOpacity: (opacity: number) => void;
+  setBlankBackgroundColor: (color: string | null) => void;
+  setPreferences: (preferences: ProjectPreferences) => void;
+}
+//#endregion
+//#region src/store/processing-slice.d.ts
+interface ProcessingSlice {
+  /** Saved processing pipelines (batch/model chaining; issue #344). */
+  models: ProcessingModel[];
+  /** Recorded processing tool runs, oldest first (Processing History; #1292). */
+  processingHistory: ProcessingRun[];
   /** Insert a new model or replace an existing one matching by `id`. */
   saveModel: (model: ProcessingModel) => void;
   /** Remove a saved model by id. */
@@ -6704,6 +7267,23 @@ interface AppState {
   updateProcessingRun: (id: string, patch: Partial<Omit<ProcessingRun, "id">>) => void;
   /** Drop all recorded processing runs. */
   clearProcessingHistory: () => void;
+}
+//#endregion
+//#region src/store/project-content-slice.d.ts
+interface ProjectContentSlice {
+  storymap: StoryMap | null;
+  /** Saved Dashboard panel chart widgets (issue #401). */
+  widgets: DashboardWidget[];
+  /** Number of columns in the Dashboard widget grid. */
+  dashboardColumns: number;
+  /** Anchored review comments on map points or features (issue #1518). */
+  comments: ProjectComment[];
+  /**
+   * The loaded project's startup `interaction` block (issue #2688). Applied
+   * once on load and written back unchanged on save; live Identify and control
+   * changes do not edit it.
+   */
+  projectInteraction: ProjectInteraction | null;
   /** Append a new dashboard widget. */
   addWidget: (widget: DashboardWidget) => void;
   /** Patch an existing dashboard widget by id (no-op if absent). Merges, so an
@@ -6726,6 +7306,35 @@ interface AppState {
   updateStoryChapter: (id: string, patch: Partial<StoryChapter>) => void;
   removeStoryChapter: (id: string) => void;
   moveStoryChapter: (id: string, targetIndex: number) => void;
+  addComment: (comment: ProjectComment) => void;
+  replyToComment: (commentId: string, reply: CommentReply) => void;
+  toggleResolveComment: (commentId: string, resolved?: boolean) => void;
+  deleteComment: (commentId: string) => void;
+  setComments: (comments: ProjectComment[]) => void;
+}
+//#endregion
+//#region src/store/project-slice.d.ts
+/** Derive a human-friendly display name from a file path or URL. */
+export declare function projectPathLabel(path: string): string;
+interface ProjectSlice {
+  projectName: string;
+  projectPath: string | null;
+  projectGeneration: number;
+  isDirty: boolean;
+  projectPlugins: ProjectPluginState | null;
+  legend: LegendConfig;
+  /** Print Layout composer settings for the open project (discussion #1992). */
+  printLayout: PrintLayoutConfig;
+  metadata: Record<string, unknown>;
+  recentProjects: RecentProjectEntry[];
+  setLegend: (legend: LegendConfig) => void;
+  /**
+   * Replace the Print Layout composer settings. A config equal to the current
+   * one is ignored, so re-opening the composer (or a project load seeding the
+   * dialog) never marks the project dirty.
+   */
+  setPrintLayout: (printLayout: PrintLayoutConfig) => void;
+  setProjectPlugins: (projectPlugins: ProjectPluginState | null, shouldMarkDirty?: boolean) => void;
   newProject: (options?: CreateProjectOptions & {
     name?: string;
   }) => void;
@@ -6735,179 +7344,271 @@ interface AppState {
   }) => void;
   setProjectPath: (path: string | null) => void;
   setProjectName: (name: string) => void;
-  /**
-   * Narrow what this deployment may do. Intended for the startup path only —
-   * calling it later would leave already-rendered surfaces stale.
-   */
-  setDeploymentCapabilities: (capabilities: Iterable<DeploymentCapability>) => void;
   setRecentProjects: (projects: RecentProjectEntry[]) => void;
   rememberRecentProject: (entry: RecentProjectEntry) => void;
   forgetRecentProject: (path: string) => void;
   clearRecentProjects: () => void;
   markSaved: () => void;
+}
+//#endregion
+//#region src/store/session-slice.d.ts
+/**
+ * Latest live device-GPS fix published by the GPS Tracking tool (issue #1316),
+ * read by the status bar readout. Device state, not project state: excluded
+ * from undo history (partialize never lists it) and from project files, and
+ * deliberately left untouched on project switches.
+ */
+interface GpsStatusFix {
+  lng: number;
+  lat: number;
+  /** Horizontal accuracy radius in meters. */
+  accuracy: number;
+  /** Satellites used for the fix, or null when the provider does not report it. */
+  satellites: number | null;
+  /** Ground speed in m/s, or null when the device doesn't report one. */
+  speed: number | null;
+  /** Fix time in epoch milliseconds. */
+  timestamp: number;
+}
+/** Reserved Identify target for querying every visible queryable layer at once. */
+export declare const IDENTIFY_ALL_LAYERS_ID = "__geolibre_identify_all_layers__";
+/** The Identify fields of the store, as set together by an Identify change. */
+interface IdentifyState {
+  identifyLayerId: string | null;
+  identifyLayerIds: string[] | null;
+}
+/**
+ * Resolve an Identify target against the layers that exist.
+ *
+ * Shared by the scripting `setIdentify` command and by project load, which
+ * applies a project's saved `interaction.identify` (issue #2688).
+ *
+ * @param target - A layer id, `"all"`, a list of layer ids, or null/undefined.
+ * @param layerIds - Ids of the layers currently in the project.
+ * @returns The store fields to set. Ids that name no layer are dropped; a list
+ *   that keeps one id becomes a single-layer target, and one that keeps several
+ *   becomes the all-layers mode restricted to those ids.
+ */
+export declare function resolveIdentifyTarget(target: string | readonly string[] | null | undefined, layerIds: Iterable<string>): IdentifyState;
+/**
+ * Whether the all-layers Identify mode may query a layer.
+ *
+ * @param layerId - The candidate layer's id.
+ * @param identifyLayerIds - The store's `identifyLayerIds` restriction.
+ * @returns True when there is no restriction or the layer is in it.
+ */
+export declare function identifyAllIncludes(layerId: string, identifyLayerIds: readonly string[] | null | undefined): boolean;
+/**
+ * Drop removed layers from the Identify state.
+ *
+ * @param state - The current Identify fields.
+ * @param removed - Ids of the layers being removed.
+ * @returns The Identify fields with those layers gone. A restricted all-layers
+ *   mode left with one layer narrows to it, and with none turns Identify off.
+ */
+export declare function identifyStateWithoutLayers(state: IdentifyState, removed: ReadonlySet<string>): IdentifyState;
+interface SessionSlice {
+  /** Local viewing switch; saved layer popup settings are left untouched. */
+  hoverTooltipsEnabled: boolean;
+  setHoverTooltipsEnabled: (enabled: boolean) => void;
+  selectedLayerId: string | null;
+  selectedFeatureId: string | null;
   /**
-   * Assign an application role (e.g. "viewer", "editor", "publisher", "administrator", "custom"),
-   * deriving the effective privileges and optional reason.
-   */
-  setAppRole: (role: AppRole, options?: {
-    customPrivileges?: AppPrivilege[];
-    reason?: string;
-  }) => void;
-  /** Set explicit custom privileges and an optional reason. */
-  setAppPrivileges: (privileges: AppPrivilege[], reason?: string) => void;
-  /** Grant an individual application privilege. */
-  grantAppPrivilege: (privilege: AppPrivilege) => void;
-  /** Revoke an individual application privilege with an optional reason. */
-  revokeAppPrivilege: (privilege: AppPrivilege, reason?: string) => void;
-  /** Reset application capabilities back to the default unconstrained Administrator role. */
-  resetAppCapabilities: () => void;
-  /** Check if the current capabilities grant the requested privilege. */
-  hasAppPrivilege: (privilege: AppPrivilege) => boolean;
-  addLayer: (layer: GeoLibreLayer, beforeLayerId?: string | null) => void;
-  removeLayer: (id: string) => void;
-  updateLayer: (id: string, patch: Partial<GeoLibreLayer>) => void;
-  setLayerVisibility: (id: string, visible: boolean) => void;
-  setLayerOpacity: (id: string, opacity: number) => void;
-  setLayerStyle: (id: string, style: Partial<LayerStyle>) => void;
-  /**
-   * Transient clipboard holding a layer's symbology, captured by
-   * {@link copyLayerStyle} and applied by {@link pasteLayerStyle} (copy/paste
-   * styles, issue #1339). Runtime-only: excluded from undo history
-   * (`partialize` never lists it) and from the saved project. `null` until a
-   * style is copied this session. Cleared by `newProject`/`loadProject` so a
-   * paste can't apply an entry from a different project; it deliberately
-   * survives undo/redo within a project (it holds a deep snapshot, not a live
-   * layer reference, so a paste stays valid even if the source layer is undone
-   * away — only the displayed source name may then be stale).
-   */
-  copiedLayerStyle: CopiedLayerStyle | null;
-  /**
-   * Snapshot the given layer's style into {@link copiedLayerStyle} so it can be
-   * pasted onto a compatible layer. No-op when the layer is missing or has no
-   * copyable symbology (leaving any prior clipboard entry untouched). Returns
-   * `true` when a style was captured, so callers can skip the confirmation on a
-   * no-op.
-   */
-  copyLayerStyle: (id: string) => boolean;
-  /**
-   * Apply the {@link copiedLayerStyle} clipboard entry onto the given layer.
-   * No-op when the clipboard is empty, the layer is missing, or the entry's
-   * style family does not match the target layer's. Returns `true` when the
-   * style was applied, so callers can skip the confirmation on a no-op.
-   */
-  pasteLayerStyle: (id: string) => boolean;
-  /**
-   * Replace a layer's persistent attribute joins and immediately re-derive its
-   * joined columns (strip what the previous joins added, apply the new list).
-   * Pass an empty array to detach every join and restore the base attributes.
-   */
-  setLayerJoins: (id: string, joins: LayerJoin[]) => void;
-  /**
-   * Replace the layer's Attribute Form designer configuration (per-field edit
-   * widgets, constraints, conditional visibility). Pass `undefined` to remove
-   * the form config entirely.
+   * Full set of selected feature ids. The attribute table extends the single
+   * selection to many rows via Ctrl/Cmd (toggle) and Shift (range). The anchor
+   * — `selectedFeatureId` — is the primary/last-clicked feature used for map
+   * fit, DuckDB highlight, and scripting, and is always one of these ids (or
+   * `null` when the set is empty). A single click leaves exactly one id here.
    */
-  setLayerAttributeForm: (id: string, attributeForm: AttributeFormConfig | undefined) => void;
+  selectedFeatureIds: string[];
   /**
-   * Replace the layer's popup/tooltip design (which fields the Identify popup
-   * shows, in what order and under what labels, plus the hover tooltip). Pass
-   * `undefined` to restore the default full-property dump.
+   * Store-layer id targeted by Identify, or {@link IDENTIFY_ALL_LAYERS_ID} for
+   * the map-level mode that queries every visible queryable layer — vector,
+   * DuckDB query, WMS, COG, NetCDF image and time-slider raster alike.
    */
-  setLayerPopup: (id: string, popup: LayerPopupConfig | undefined) => void;
+  identifyLayerId: string | null;
   /**
-   * Replace the layer's editor tracking configuration (whether creation/edit
-   * author and timestamp columns are maintained, and under which names). Pass
-   * `undefined` to drop the configuration entirely.
+   * Layers the all-layers Identify mode is limited to, or null for every
+   * visible queryable layer. Set only alongside {@link IDENTIFY_ALL_LAYERS_ID},
+   * by a script or project that names several layers (issue #2688), and
+   * cleared by every `setIdentifyLayer` call so the in-app buttons keep their
+   * plain meaning.
    */
-  setLayerEditorTracking: (id: string, editorTracking: EditorTrackingConfig | undefined) => void;
+  identifyLayerIds: string[] | null;
+  pointerCoords: [number, number] | null;
   /**
-   * Replace a layer's virtual fields and immediately re-derive its computed
-   * columns (strip what the previous fields added, evaluate the new list).
-   * Pass an empty array to detach every virtual field.
+   * Ground elevation in true metres under the pointer, for the status bar
+   * (issue #1813). Null when it cannot be resolved — the pointer is off the
+   * map, terrain is off and the remote lookup has not answered (or failed), or
+   * the active body is not Earth. Set alongside `pointerCoords` by MapCanvas,
+   * which owns the map instance the terrain sample comes from.
    */
-  setLayerVirtualFields: (id: string, fields: LayerVirtualField[]) => void;
+  pointerElevation: number | null;
   /**
-   * Replace a layer's quick filters (issue #2114). The controls persist with
-   * the project and are compiled to a MapLibre filter at sync time, so this
-   * only stores state — nothing re-derives the layer's data. Pass an empty
-   * array to remove every control.
+   * Camera height above sea level in metres — Google Earth Pro's "Eye alt"
+   * (issue #1816). Derived from the camera, so deliberately *not* part of
+   * `mapView`: that shape is persisted into the project file, and a stored
+   * altitude could only drift from the center/zoom/pitch it is computed from.
+   * Null before the map loads, or when MapLibre cannot report it.
    */
-  setLayerQuickFilters: (id: string, filters: LayerQuickFilter[]) => void;
-  /** Set or clear the project-persisted expression filter for a layer. */
-  setLayerFilterExpression: (id: string, expression: unknown[] | null) => void;
-  reorderLayer: (id: string, direction: "up" | "down") => void;
-  moveLayer: (id: string, targetIndex: number) => void;
-  moveLayersRelative: (layerIds: string[], targetLayerId: string, position: "above" | "below") => void;
-  addGeoJsonLayer: (name: string, geojson: FeatureCollection, sourcePath?: string, beforeLayerId?: string | null) => string;
-  /**
-   * Add a georeferenced image overlay (a MapLibre `image` source rendered as a
-   * raster layer) from an image URL and its four corner coordinates, and return
-   * its id. Used for KML/KMZ `<GroundOverlay>` imports; the layer persists and
-   * renders exactly like a Raster Georeferencer overlay. Corners are `[lng,
-   * lat]` in top-left, top-right, bottom-right, bottom-left order.
+  cameraAltitude: number | null;
+  /** Live GPS fix for the status bar, or null while GPS tracking is off. */
+  gpsStatus: GpsStatusFix | null;
+  attributeFilter: string;
+  setPointerCoords: (coords: [number, number] | null) => void;
+  setPointerElevation: (elevation: number | null) => void;
+  setCameraAltitude: (altitude: number | null) => void;
+  setGpsStatus: (fix: GpsStatusFix | null) => void;
+  selectLayer: (id: string | null) => void;
+  selectFeature: (id: string | null) => void;
+  /**
+   * Replace the multi-selection with `ids`. The anchor (`selectedFeatureId`)
+   * becomes `anchorId` when provided, otherwise the last id in the list (or
+   * `null` when the list is empty).
    */
-  addImageOverlayLayer: (name: string, source: {
-    url: string;
-    coordinates: [number, number][];
-  }, options?: {
-    opacity?: number;
-    bounds?: [number, number, number, number];
-    sourcePath?: string;
-    /** Initial visibility (default true); a time-slider frame past the first
-     * starts hidden. */
-    visible?: boolean;
-    /** Epoch-ms time bounds of a KML `<TimeSpan>`/`<TimeStamp>` frame; the
-     * Time Slider toggles this frame's visibility by the current date. */
-    timeSpan?: {
-      begin: number | null;
-      end: number | null;
-    };
+  selectFeatures: (ids: string[], anchorId?: string | null) => void;
+  setIdentifyLayer: (id: string | null) => void;
+  /** Set both Identify fields at once (see {@link resolveIdentifyTarget}). */
+  setIdentifyState: (state: IdentifyState) => void;
+  setAttributeFilter: (filter: string) => void;
+}
+//#endregion
+//#region src/store/ui-slice.d.ts
+type ConversionToolKind = "vector-to-vector" | "vector-to-geoparquet" | "vector-to-flatgeobuf" | "vector-to-shapefile" | "vector-to-geopackage" | "csv-to-geoparquet" | "vector-to-pmtiles" | "raster-to-pmtiles" | "raster-to-cog";
+/**
+ * Identifiers of the vector processing tools. Kept in sync by hand with the
+ * `id` fields of `VECTOR_TOOLS` in `@geolibre/processing` (`vector-tools.ts`);
+ * deriving the type there would create a core -> processing circular import.
+ */
+type VectorToolKind = "buffer" | "centroids" | "convex-hull" | "dissolve" | "bounding-box" | "simplify" | "clip" | "intersection" | "difference" | "union" | "spatial-join" | "attribute-join" | "select-by-value" | "select-by-location" | "random-extract" | "reproject" | "explode" | "aggregate" | "smooth" | "extract-vertices" | "points-along-geometry" | "grid" | "voronoi" | "cell-sectors" | "dggs-grid" | "dggs-bin" | "dggs-compact" | "trajectory-speed" | "detect-stops" | "space-time-proximity" | "decode-polyline" | "encode-polyline" | "merge-layers" | "check-validity" | "fix-geometries" | "check-topology-rules" | "fix-topology";
+/** Identifiers of the network-analysis tools (`NETWORK_TOOLS` ids). */
+type NetworkToolKind = "isochrone" | "od-matrix" | "sequential-route";
+/** Identifiers of the spatial-statistics tools (`STATISTICS_TOOLS` ids). */
+type StatisticsToolKind = "global-morans-i" | "local-morans-i" | "getis-ord-gi" | "average-nearest-neighbor" | "kernel-density" | "emerging-hot-spot" | "composite-score";
+/**
+ * Identifiers of the raster processing tools. Kept in sync by hand with the
+ * `id` fields of `RASTER_TOOLS` in `@geolibre/processing` (`raster-tools.ts`);
+ * deriving the type there would create a core -> processing circular import.
+ */
+type RasterToolKind = "hillshade" | "slope" | "aspect" | "reproject" | "resample" | "clip-extent" | "clip-mask" | "polygonize" | "contour" | "interpolate" | "zonal" | "raster-calc" | "spectral-index" | "reclassify" | "mosaic" | "focal";
+interface UiSlice {
+  ui: {
+    processingOpen: boolean;
     /**
-     * What produced the overlay, e.g. a NetCDF grid baked to pixels. Defaults
-     * to the KML ground overlay this was first written for; panels gate their
-     * per-source controls on it.
+     * Tool id to preselect when the Whitebox toolbox dialog opens, set when the
+     * user picks a specific tool from the Processing menu's category submenus.
+     * Consumed and cleared by ProcessingDialog. Null means "no preselection".
      */
-    sourceKind?: string;
-    /** Extra metadata merged onto the layer (e.g. a symbology record). */
-    metadata?: Record<string, unknown>;
-  }, beforeLayerId?: string | null) => string;
+    processingInitialTool: string | null;
+    conversionOpen: ConversionToolKind | null;
+    vectorToolOpen: VectorToolKind | null;
+    networkToolOpen: NetworkToolKind | null;
+    statisticsToolOpen: StatisticsToolKind | null;
+    rasterToolOpen: RasterToolKind | null;
+    segmentationOpen: boolean;
+    objectDetectionOpen: boolean;
+    segmentEverythingOpen: boolean;
+    geocodeOpen: boolean;
+    sqlWorkspaceOpen: boolean;
+    loadEditorFeaturesOpen: boolean;
+    loadEditorFeaturesLayerId: string | null;
+    pythonConsoleOpen: boolean;
+    notebookOpen: boolean;
+    assistantOpen: boolean;
+    attributeTableOpen: boolean;
+    /** Whether the Raster Attribute Table bottom panel is open (issue #1307). */
+    rasterAttributeTableOpen: boolean;
+    dashboardOpen: boolean;
+    storymapPanelOpen: boolean;
+    storymapPresenting: boolean;
+    storymapReturnToEditor: boolean;
+    /**
+     * Layer opacities the active story presentation has applied so far, keyed
+     * by store layer id. Playback fades layers by writing MapLibre paint
+     * properties directly (never the persisted `layers[].opacity`), so this is
+     * how renderers outside MapLibre's paint model (deck.gl diagrams, 3D
+     * Z-value geometry) and the on-map Legend follow a chapter's fades. Empty
+     * while not presenting; never saved with the project.
+     */
+    storymapLayerOpacity: Record<string, number>;
+    storymapComposingId: string | null;
+    /** The Batch tools dialog (run one tool across many layers). */
+    batchToolsOpen: boolean;
+    /** The Model Builder canvas panel (author a processing graph). */
+    modelBuilderOpen: boolean;
+    /** One-shot request for Model Builder to load a saved model. */
+    modelBuilderRequestedModelId: string | null;
+    /** Style Manager dialog visibility (issue #1294). */
+    styleManagerOpen: boolean;
+    /** Processing History panel visibility (#1292). */
+    processingHistoryOpen: boolean;
+    /** Select by Expression dialog visibility (#1314). */
+    selectByExpressionOpen: boolean;
+    selectByExpressionLayerId: string | null;
+    /** Select by Location dialog visibility (#1314). */
+    selectByLocationOpen: boolean;
+    /** Same contract as `selectByExpressionLayerId`, for Select by Location. */
+    selectByLocationLayerId: string | null;
+    /**
+     * Pending "re-run from History" request. Written by the History panel just
+     * before it opens the target processing dialog; consumed and cleared by
+     * that dialog once it has pre-filled its parameter form. Null when idle.
+     */
+    processingRerun: ProcessingRerunRequest | null;
+    zoomToSelectedFeature: boolean;
+    collaborateDialogOpen: boolean;
+  };
+  setProcessingOpen: (open: boolean) => void;
+  setProcessingInitialTool: (toolId: string | null) => void;
+  setConversionOpen: (kind: ConversionToolKind | null) => void;
+  setVectorToolOpen: (kind: VectorToolKind | null) => void;
+  setNetworkToolOpen: (kind: NetworkToolKind | null) => void;
+  setStatisticsToolOpen: (kind: StatisticsToolKind | null) => void;
+  setRasterToolOpen: (kind: RasterToolKind | null) => void;
+  setSegmentationOpen: (open: boolean) => void;
+  setObjectDetectionOpen: (open: boolean) => void;
+  setSegmentEverythingOpen: (open: boolean) => void;
+  setGeocodeOpen: (open: boolean) => void;
+  setSqlWorkspaceOpen: (open: boolean) => void;
+  setLoadEditorFeaturesOpen: (open: boolean, layerId?: string | null) => void;
+  setPythonConsoleOpen: (open: boolean) => void;
+  setNotebookOpen: (open: boolean) => void;
+  setAssistantOpen: (open: boolean) => void;
+  setAttributeTableOpen: (open: boolean) => void;
+  setRasterAttributeTableOpen: (open: boolean) => void;
+  setDashboardOpen: (open: boolean) => void;
+  setStorymapPanelOpen: (open: boolean) => void;
+  setStorymapPresenting: (presenting: boolean, returnToEditor?: boolean) => void;
   /**
-   * Add a native raster tile layer (XYZ, WMS, or WMTS) from one or more tile
-   * URL templates and return its id. The layer appears in the Layers panel and
-   * persists with the project exactly like a layer added through the Add Data
-   * dialog, so callers (e.g. an external plugin) do not have to touch MapLibre
-   * directly. See {@link AddTileLayerOptions}.
+   * Record the layer opacities a story chapter applied, merging into the
+   * presentation's running map (see `ui.storymapLayerOpacity`).
    */
-  addTileLayer: (name: string, options: AddTileLayerOptions, beforeLayerId?: string | null) => string;
-  addLayerGroup: (name?: string, layerIds?: string[]) => string;
-  removeLayerGroup: (id: string, options?: {
-    removeChildren?: boolean;
-  }) => void;
-  renameLayerGroup: (id: string, name: string) => void;
-  setLayerGroupVisibility: (id: string, visible: boolean) => void;
-  setLayerGroupOpacity: (id: string, opacity: number) => void;
-  toggleLayerGroupCollapsed: (id: string) => void;
-  moveLayerToGroup: (layerId: string, groupId: string | null, beforeLayerId?: string | null) => void;
-  moveLayersToGroup: (layerIds: string[], groupId: string | null, beforeLayerId?: string | null) => void;
-  moveLayerGroupToGroup: (id: string, parentId: string | null) => void;
-  reorderLayerGroup: (id: string, direction: "up" | "down") => void;
-  addComment: (comment: ProjectComment) => void;
-  replyToComment: (commentId: string, reply: CommentReply) => void;
-  toggleResolveComment: (commentId: string, resolved?: boolean) => void;
-  deleteComment: (commentId: string) => void;
-  setComments: (comments: ProjectComment[]) => void;
+  setStorymapLayerOpacity: (changes: Record<string, number>) => void;
+  setStorymapComposing: (chapterId: string | null) => void;
+  setBatchToolsOpen: (open: boolean) => void;
+  setModelBuilderOpen: (open: boolean) => void;
+  setModelBuilderRequestedModelId: (id: string | null) => void;
+  setProcessingHistoryOpen: (open: boolean) => void;
+  /** Open/close Select by Expression, optionally preselecting a target layer. */
+  setSelectByExpressionOpen: (open: boolean, layerId?: string | null) => void;
+  /** Open/close Select by Location, optionally preselecting a target layer. */
+  setSelectByLocationOpen: (open: boolean, layerId?: string | null) => void;
+  setProcessingRerun: (request: ProcessingRerunRequest | null) => void;
+  setCollaborateDialogOpen: (open: boolean) => void;
+  setZoomToSelectedFeature: (enabled: boolean) => void;
+  setStyleManagerOpen: (open: boolean) => void;
 }
-/** Reserved Identify target for querying every visible queryable layer at once. */
-export declare const IDENTIFY_ALL_LAYERS_ID = "__geolibre_identify_all_layers__";
+//#endregion
+//#region src/store/types.d.ts
 /**
- * A fresh, inactive collaboration slice (no live session). Frozen (like
- * DEFAULT_LEGEND_CONFIG) to guard against accidental in-place mutation; store
- * actions always produce new objects via spread, so the frozen default is only
- * ever read.
+ * The whole app store: every slice's state and actions in one flat object.
+ * The slices are an internal split of `store.ts`; consumers see one store.
  */
-export declare const DEFAULT_COLLABORATION_STATE: CollaborationState;
-/** Derive a human-friendly display name from a file path or URL. */
-export declare function projectPathLabel(path: string): string;
+interface AppState extends ProjectSlice, MapViewSlice, LayersSlice, LayerGroupsSlice, ProjectContentSlice, ProcessingSlice, LibrariesSlice, SessionSlice, CollaborationSlice, CapabilitiesSlice, UiSlice {}
+//#endregion
+//#region src/store/undo-history.d.ts
+/** The fields undo/redo snapshots, restores and compares. */
+type HistoryState = Pick<AppState, "layers" | "layerGroups" | "basemapStyleUrl" | "basemapVisible" | "basemapOpacity" | "blankBackgroundColor" | "storymap" | "comments">;
 export declare function subscribeProjectRestoreHistory(listener: () => void): () => void;
 export declare function canUndoProjectRestore(): boolean;
 export declare function canRedoProjectRestore(): boolean;
@@ -6918,18 +7619,6 @@ export declare function canRedoProjectRestore(): boolean;
  * serialized state, so it needs a full canonical project pair.
  */
 export declare function registerProjectRestoreHistory(before: GeoLibreProject, beforePath: string | null, after: GeoLibreProject, afterPath?: string | null): void;
-export declare const useAppStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<AppState>, "temporal"> & {
-  temporal: import("zustand").StoreApi<import("zundo").TemporalState<{
-    layers: GeoLibreLayer[];
-    layerGroups: LayerGroup[];
-    basemapStyleUrl: string;
-    basemapVisible: boolean;
-    basemapOpacity: number;
-    blankBackgroundColor: string | null;
-    storymap: StoryMap | null;
-    comments: ProjectComment[];
-  }>>;
-}>;
 /**
  * Step the layer/basemap history back one entry and mark the project dirty.
  * zundo restores the partialized slice via the store's set; the resulting new
@@ -6941,6 +7630,11 @@ export declare function undo(): void;
 export declare function redo(): void;
 /** Empty both the undo and redo stacks (e.g. on new/loaded project). */
 export declare function clearHistory(): void;
+//#endregion
+//#region src/store.d.ts
+export declare const useAppStore: import("zustand").UseBoundStore<Omit<import("zustand").StoreApi<AppState>, "temporal"> & {
+  temporal: import("zustand").StoreApi<import("zundo").TemporalState<HistoryState>>;
+}>;
 /**
  * React hook for consuming application capability state for a specific privilege.
  *
@@ -6952,6 +7646,109 @@ export declare function useAppCapability(privilege: AppPrivilege): {
   reason?: string;
 };
 //#endregion
+//#region src/layer-selectors.d.ts
+/**
+ * The fields a layer list needs: enough to draw a row, a `<select>` option or
+ * a visibility checkbox. It deliberately leaves out opacity, style, source,
+ * metadata and feature data, which change far more often.
+ */
+interface LayerSummary {
+  /** The layer id. */
+  readonly id: string;
+  /** The display name. */
+  readonly name: string;
+  /** The layer kind. */
+  readonly type: LayerType;
+  /** Whether the layer is shown on the primary map. */
+  readonly visible: boolean;
+  /** The layer panel group the layer belongs to, if any. */
+  readonly groupId: string | undefined;
+}
+/**
+ * The array {@link useLayersWhen} returns while inactive. Frozen, and shared so
+ * the inactive selection never changes identity.
+ */
+export declare const NO_LAYERS: GeoLibreLayer[];
+/**
+ * Select one layer record by id.
+ *
+ * @param state - The app state.
+ * @param id - The layer id; `null`/`undefined` selects nothing.
+ * @returns The layer record, or `undefined` when there is no such layer.
+ */
+export declare function selectLayerById(state: Pick<AppState, "layers">, id: string | null | undefined): GeoLibreLayer | undefined;
+/**
+ * Select the layer ids in store order (bottom to top).
+ *
+ * Returns a new array on every call; pair it with a shallow comparison (as
+ * {@link useLayerIds} does) so an unchanged id list keeps its identity.
+ *
+ * @param state - The app state.
+ * @returns The layer ids.
+ */
+export declare function selectLayerIds(state: Pick<AppState, "layers">): string[];
+/**
+ * Select a {@link LayerSummary} per layer, in store order (bottom to top).
+ *
+ * Each summary keeps its identity while its own fields are unchanged, so the
+ * returned array is shallow-equal to the previous one after an edit that
+ * touches none of those fields (opacity, style, data, metadata).
+ *
+ * @param state - The app state.
+ * @returns One summary per layer.
+ */
+export declare function selectLayerSummaries(state: Pick<AppState, "layers">): LayerSummary[];
+/**
+ * Build a selector for the full `layers` array that is live only while
+ * `active`.
+ *
+ * @param active - Whether the caller currently needs the layers.
+ * @returns A selector returning `state.layers` while active, and the constant
+ *   {@link NO_LAYERS} otherwise.
+ */
+export declare function selectLayersWhen(active: boolean): (state: Pick<AppState, "layers">) => GeoLibreLayer[];
+/**
+ * Subscribe to one layer record.
+ *
+ * Re-renders only when that layer changes (or appears/disappears), not when
+ * another layer is edited.
+ *
+ * @param id - The layer id; `null`/`undefined` subscribes to nothing.
+ * @returns The layer record, or `undefined` when there is no such layer.
+ */
+export declare function useLayer(id: string | null | undefined): GeoLibreLayer | undefined;
+/**
+ * Subscribe to the ordered list of layer ids.
+ *
+ * Re-renders only when a layer is added, removed or reordered.
+ *
+ * @returns The layer ids in store order (bottom to top).
+ */
+export declare function useLayerIds(): string[];
+/**
+ * Subscribe to a {@link LayerSummary} per layer.
+ *
+ * Re-renders only when a layer is added, removed, reordered, renamed, shown or
+ * hidden, retyped or regrouped; opacity, style, data and metadata edits do not
+ * re-render the caller.
+ *
+ * @returns One summary per layer, in store order (bottom to top).
+ */
+export declare function useLayerSummaries(): LayerSummary[];
+/**
+ * Subscribe to the full `layers` array only while `active`.
+ *
+ * For always-mounted surfaces (dialogs, floating panels) that need every layer
+ * record while open but keep local state across closes and so cannot simply be
+ * unmounted. While inactive the caller gets the constant {@link NO_LAYERS} and
+ * layer edits do not re-render it.
+ *
+ * @param active - Whether the caller currently needs the layers (for example,
+ *   whether its dialog is open).
+ * @returns `layers` while active, otherwise an empty, frozen array.
+ */
+export declare function useLayersWhen(active: boolean): GeoLibreLayer[];
+//#endregion
 //#region src/history.d.ts
 export declare function setHistoryCoalesceMs(ms: number): void;
 export declare function getHistoryCoalesceMs(): number;
@@ -7420,6 +8217,23 @@ export declare function getGoogleMapsApiKey(env?: Record<string, string | undefi
  * @returns The trimmed token, or undefined when unset.
  */
 export declare function getMapboxAccessToken(env?: Record<string, string | undefined>): string | undefined;
+/**
+ * Resolves the ArcGIS API key from the runtime environment.
+ *
+ * The ArcGIS renderer draws the translated project basemap and non-Esri layers
+ * without a key; Esri's basemap styles and location services require one
+ * (an ArcGIS Location Platform or ArcGIS Online API key credential). It is
+ * supplied via `VITE_ARCGIS_API_KEY` (baked in at build time from the bare
+ * `ARCGIS_API_KEY` env var, which `vite.config.ts` copies into the prefixed
+ * name) or set at runtime through Settings → Environment variables
+ * (`window.__GEOLIBRE_RUNTIME_ENV__`, so a bare `ARCGIS_API_KEY` entry works
+ * there too). Same precedence as {@link getMapboxAccessToken}.
+ *
+ * @param env - Environment record (defaults to the runtime environment);
+ *   injectable for testing.
+ * @returns The trimmed key, or undefined when unset.
+ */
+export declare function getArcgisApiKey(env?: Record<string, string | undefined>): string | undefined;
 /**
  * Resolves the Cesium Ion access token from the runtime environment.
  *
@@ -7486,12 +8300,31 @@ type CesiumIonAssetKind = "3d-tiles" | "imagery";
 export declare const CESIUM_OSM_BUILDINGS_ASSET_ID = 96188;
 /** Bing Maps Aerial through Ion, the imagery asset every Ion account can use. */
 export declare const CESIUM_BING_AERIAL_ASSET_ID = 2;
-/** Ion assets offered as one-click picks in the Add Data dialog. */
-export declare const CESIUM_ION_QUICK_PICKS: ReadonlyArray<{
+/**
+ * Google Photorealistic 3D Tiles served through Ion. Unlike the two above it
+ * is not free on every plan: Ion accounts without it get a 403 the globe
+ * surfaces as a layer error.
+ */
+export declare const CESIUM_GOOGLE_PHOTOREALISTIC_ASSET_ID = 2275207;
+/**
+ * Which tier of the Ion catalog a quick pick comes from. `global` assets ship
+ * with every Ion account; `depot` assets are Asset Depot samples the account
+ * has to add once at ion.cesium.com before they stream (until then the
+ * endpoint 404s and the globe reports a layer error).
+ */
+type CesiumIonQuickPickGroup = "global" | "depot";
+interface CesiumIonQuickPick {
   assetId: number;
   kind: CesiumIonAssetKind;
   name: string;
-}>;
+  group: CesiumIonQuickPickGroup;
+}
+/**
+ * Ion assets offered as one-click picks in the Add Data dialog. Asset ids are
+ * the dropdown's option values, so they have to stay unique; the ids below are
+ * the ones Cesium's own samples use.
+ */
+export declare const CESIUM_ION_QUICK_PICKS: ReadonlyArray<CesiumIonQuickPick>;
 /** Parse an Ion asset id the way the Add Data form and the project file carry it. */
 export declare function parseCesiumIonAssetId(value: unknown): number | null;
 /**
@@ -7577,6 +8410,8 @@ interface CzmlLayerOptions {
   url?: string;
   /** Local path when loaded from disk. */
   sourcePath?: string;
+  /** Credit shown in the globe's attribution control while the layer is present. */
+  attribution?: string;
 }
 /**
  * Build a typed GeoLibreLayer representing a CZML dynamic scene on the Cesium globe.
@@ -7614,6 +8449,89 @@ export declare function resolveThreeDTilesRequestHeaders(url: string, headers: R
  */
 export declare function persistedThreeDTilesRequestHeaders(url: string, headers: Record<string, string> | undefined): Record<string, string> | undefined;
 //#endregion
+//#region src/project-credential-refs.d.ts
+export declare function geocodingApiKeyAccount(providerId: string): string;
+export declare function environmentVariableAccount(key: string): string;
+/** Rows are secret unless explicitly marked `secret: false`. */
+export declare function isSecretEnvironmentVariable(variable: RuntimeEnvironmentVariable): boolean;
+type ProjectCredentialLookup = (account: string) => string | undefined;
+/** Install (or clear, with `null`) the source of stored project credentials. */
+export declare function setProjectCredentialLookup(lookup: ProjectCredentialLookup | null): void;
+/** The stored value for `account`, or `undefined` when none (or no lookup). */
+export declare function lookupProjectCredential(account: string): string | undefined;
+/** Fill empty geocoding API keys from the stored ones. */
+export declare function overlayStoredGeocodingApiKeys(geocoding: GeocodingPreferences): GeocodingPreferences;
+/** Fill empty secret environment variable values from the stored ones. */
+export declare function overlayStoredEnvironmentVariables(variables: RuntimeEnvironmentVariable[]): RuntimeEnvironmentVariable[];
+/** Preferences with every empty stored credential filled in. */
+export declare function overlayStoredPreferenceCredentials(preferences: ProjectPreferences): ProjectPreferences;
+/**
+ * The credential changes an edited Settings draft makes, keyed by account
+ * (`""` deletes).
+ *
+ * - `seeded`: the overlaid preferences the dialog opened with.
+ * - `next`: the normalized draft being saved.
+ *
+ * Only values the user changed are returned, so an untouched session override
+ * (plaintext from the opened file) stays out of the keychain and opening a
+ * file never writes it. Removing, renaming, or un-secreting a variable never
+ * deletes its stored value: names are shared by every project on the device.
+ * Clearing a field deletes the stored value only when the field showed that
+ * stored value; clearing a file override that differed from it just drops the
+ * override, so the shared value applies again and other projects keep it.
+ */
+export declare function changedPreferenceCredentials(seeded: ProjectPreferences, next: ProjectPreferences): Record<string, string>;
+/**
+ * Move unambiguous geocoding API keys and secret environment variable values
+ * out of `project` (a copy; the input is untouched) into `secrets`, keyed by
+ * account. Secret environment rows that have no unique name remain in the
+ * project for an explicit keep/strip choice. Layers pass through: their
+ * request headers reference variables as `${NAME}` rather than holding
+ * secrets that need moving.
+ */
+export declare function splitProjectCredentials(project: GeoLibreProject): {
+  project: GeoLibreProject;
+  secrets: Record<string, string>;
+};
+/**
+ * `headers` with every `${NAME}` resolved from the project's enabled
+ * Environment Variables (stored secret values filled in). Only those rows
+ * count, not the OS environment or build-time values that share the runtime
+ * env. A header referencing an unset variable is dropped.
+ */
+export declare function resolveProjectHeaderReferences(headers: Record<string, string> | undefined): Record<string, string> | undefined;
+//#endregion
+//#region src/header-references.d.ts
+/**
+ * `${NAME}` references in request header values.
+ *
+ * A header such as `Authorization: Bearer ${TILES_TOKEN}` is saved as typed
+ * and resolved from the project's Environment Variables when a request is
+ * made, so the secret itself never sits on the layer. This module is pure (no
+ * store import): `credentials.ts` depends on it, and the store depends on
+ * `credentials.ts`.
+ */
+export declare function hasHeaderReferences(headers: Record<string, string> | undefined): boolean;
+/**
+ * Whether `value` carries no secret of its own: at most a scheme word such as
+ * `Bearer` followed by a single `${NAME}`. Redaction keeps such values.
+ */
+export declare function isHeaderReferenceOnly(value: string): boolean;
+/**
+ * Whether credential-bearing request headers may be sent to `url`: HTTPS, or
+ * plain HTTP to loopback so a local dev server still works. The scheme is read
+ * off a parsed URL, so an unusually cased `HTTPS://` is not misread as
+ * plaintext; a relative or unparseable URL is refused.
+ */
+export declare function allowsCredentialHeaders(url: string): boolean;
+/**
+ * `headers` with every `${NAME}` replaced by `values[NAME]`. A header that
+ * references an unset (or empty) variable is omitted rather than sent with a
+ * hole in it. Returns the input unchanged when nothing references a variable,
+ * and `undefined` when no header remains.
+ */
+export declare function resolveHeaderReferences(headers: Record<string, string> | undefined, values: Readonly<Record<string, string>>): Record<string, string> | undefined;
+//#endregion
 //#region src/credentials.d.ts
 /**
  * Project fields whose values are credentials. Keep this registry as the
@@ -7859,5 +8777,5 @@ export declare function localFileName(path: string): string;
 /** Keep imported layers distinguishable, including within a multi-file import. */
 export declare function uniqueImportedLayerName(name: string, names: Iterable<string>): string;
 //#endregion
-export type { AppState, CesiumIonAssetKind, CesiumIonLayerOptions, CesiumKmlLayerOptions, ConversionToolKind, CredentialRedactionResult, CzmlDocument, CzmlLayerOptions, CzmlPacket, CzmlSource, GeocodeMatch, GeocodeRequest, GeocodeStatus, GeocoderConfig, GeocodingPreferenceInput, GeocodingProvider, GeocodingProviderId, GpsStatusFix, NetworkToolKind, NominatimForwardResult, NominatimReverseResult, RasterToolKind, ReverseGeocodeDisplay, StatisticsToolKind, VectorToolKind };
+export type { AppState, CesiumIonAssetKind, CesiumIonLayerOptions, CesiumIonQuickPick, CesiumIonQuickPickGroup, CesiumKmlLayerOptions, ConversionToolKind, CredentialRedactionResult, CzmlDocument, CzmlLayerOptions, CzmlPacket, CzmlSource, GeocodeMatch, GeocodeRequest, GeocodeStatus, GeocoderConfig, GeocodingPreferenceInput, GeocodingProvider, GeocodingProviderId, GpsStatusFix, IdentifyState, LayerSummary, NetworkToolKind, NominatimForwardResult, NominatimReverseResult, ProjectCredentialLookup, RasterToolKind, ReverseGeocodeDisplay, StatisticsToolKind, VectorToolKind };
 //# sourceMappingURL=index.d.mts.map