👁️ Horus

A spy-satellite simulator in your browser, built from public sources and real data.

Photorealistic 3D globe. Live aircraft, ships, satellites, earthquakes, traffic, and public cameras. Hands-free voice control powered by a realtime AI agent.

Horus is a rebranded copy of God's Eye View by Bilawal Sidhu and Sameh Khamis (Halfpixel), used under the MIT License. All credit for the original design and code goes to them. See Credits.

⚡ Start without API keys. Run locally from the terminal. Add optional keys inside the app. → Quick Start

---

Quick Start · First Five Minutes · Talk to It · What's Live · Under the Hood · Keys & Costs · Contributing

---

🌍 Why This Exists

Horus brings public signals into one explorable globe. Track the world live. Talk to it. Break it. Extend it.

Flight transponders, ship beacons, orbital elements, seismographs, and public cameras already tell us a lot about the world. Horus puts them in the same place, so you can move between a global picture and an individual aircraft, ship, or street. It runs locally in your browser, with source code you can inspect and extend.

Half the magic is that it looks like a forbidden cockpit. The other half is that every line of code is inspectable.

Most feeds are live or regularly refreshed. Traffic is simulated along real roads using aggregate location data. CCTV camera poses and rocket launch trajectories are coarse estimates.

Start with the included data sources, then add your own. Each layer is a separate module.

---

🌳 Environment First

Horus opens on Indonesia with the environment layers on. The Environment group leads the layer panel:

• 🌳 Deforestation (2001–2025): Global Forest Change tree-cover loss (Hansen/UMD/Google), draped on the globe.

• 🌊 Natural disasters: current floods, wildfires, cyclones, storms, volcanoes, droughts, landslides and earthquakes from GDACS and NASA EONET. Click a marker for its card and report link.

• 🌿 Flora / 🐾 Fauna habitat: where plants and animals have been recorded, as GBIF occurrence density.

• 🔥 Fires: NASA FIRMS active fires (free FIRMS_MAP_KEY) and fire perimeters, plus earthquakes and air quality.

• 🎯 JEV priority: current disasters ranked by hazard, nearby biodiversity and forest loss, with the reasons on each card.

Product and process docs: PRD · SDLC · JEV decision gate · decisions · security audit.

All of these are keyless except FIRMS. Flights, ships, satellites, cameras and the other layers are still there, further down the panel and off by default.

🎛️ What This Thing Does

• 🛩️ Cockpit view: Ride inside a tracked flight — the camera holds the terrain under you all the way down.
• 📡 Contacts: A 250 km roster of everything near your target — step through live aircraft and drop into any cockpit.
• 🎯 Click-to-track anything: Camera locks on, draws a fading trail, surfaces full metadata — and a tracked fire or vessel hands you off to the nearest live camera in one click.
• 🖊️ Voice whiteboard: Speak annotations onto the world — real boundary polygons, marks, and routes.
• 🛫 3D hangar: Real per-class aircraft models — 787, ATR-72, Citation, Bell 206, MQ-9 — and a tracked contact swaps from glyph to 3D model as you close in.
• 🎨 Reskin reality: GLSL sensor looks over the normal globe — CRT, NVG, FLIR/thermal, Noir, Snow.
• 🟩 Detection overlay: Screen-space bounding boxes and IDs on everything in view.
• 🎖️ Military HUD: Tactical heads-up display with intelligence-style telemetry.
• 🌐 Global Context: Stage the full situational picture with one switch — and get your exact view back when you leave.
• 🎥 Scene director: Capture cinematic camera tours for clips and demos.
• 🔗 Share Links: Camera, style, layers, and even one tracked target serialize into a URL — a live target is a handoff, not a bookmark.
• 🏠 Reset Globe: One control — or one sentence — back to the full Earth.
• 🌦️ Weather: Animate GFS or ECMWF forecast wind, replay observed radar, satellite clouds and lightning on one timeline, and follow NHC/CPHC cyclone tracks. No key needed.
• 📷 Mapped ALPR cameras: License-plate-reader camera locations tagged in OpenStreetMap, one city at a time. Locations and tags only; no key needed.
• 🔭 Satellite passes: Ask by voice when any loaded satellite next rises over you: rise, peak and set times, and whether you can see it.
• 🔎 Analyst answers: Count, filter and rank satellites, datacenters and dams by voice, alongside flights, ships, fires and quakes; answers say when a feed is stale or on a fallback.
• 🧭 Tilt and North Up: Switch between straight-down and a 35° oblique, or put north at the top, while a tracked target stays centered.
• 🔍 Keyless search: Type decimal coordinates, a two-dimensional WGS84 geo: URI (for example, geo:39.7392,-104.9903), or a bundled city or landmark to fly there with no geocoder request; other names use Google when configured, then Photon and Nominatim.

---

⚡ Quick Start

Start without an account or API keys. Both paths open the same app with Esri satellite imagery and keyless terrain. OSM is the fallback if Esri is unreachable. Flights, military traffic, satellites, earthquakes, public cameras, radio, and launches are available without keys.

For photorealistic 3D, add a Cesium ion token for eligible personal, non-commercial use, or a Google Maps key for the direct, metered route and Google place search. Provider terms and quotas apply. Add keys through the app's POWER UP panel; Keys & Costs explains the options.

Already installed? Update to the latest version. Older versions query public OpenStreetMap Overpass servers, which now refuse them, so Traffic, Mapped Installations and ALPR stay empty until you update.

Path 1 — One click, no terminal

1. Install or update Pinokio to 8.2 or later.
2. Open God's Eye View in Pinokio (the Pinokio listing installs the upstream project, not this Horus copy).
3. Click Install, then Start.

Available on Windows, macOS, and Linux. The Pinokio maintainer reports cross-platform testing of the fixed installer. The launcher installs the locked dependencies, finds a free local port, and opens the app.

Tried before and installation failed? Update Pinokio and try again. Version 8.2 fixes the launcher installation issue; details from the Pinokio maintainer.

Pinokio opens but the globe is very choppy? Before treating that as a GPU compatibility or minimum-hardware problem, copy the local server URL shown by Pinokio and open the same URL in your normal hardware-accelerated browser. One Pinokio 8.2.0 user reported severe stutter in Pinokio's embedded view that went away when the same running server was opened in an external browser (#365). That points to the embedded browser rather than the app server or your hardware; it does not establish a minimum GPU requirement.

Path 2 — Terminal / coding agent

Use Node.js 24.x (24.14.0 or later) or 26.x. The setup doctor warns about Node 25, which is end-of-life.

git clone https://github.com/wolfpuplabs/horus.git
cd gods-eye-view
npm ci
npm run doctor
npm run dev

Open http://localhost:4173. Choose Live Contacts, Space Missions, Environmental, or Explore Manually from the first-run panel.

A point-in-time M5/Chrome capture measured a median 1.86-second cold start. This is a comparison baseline, not a guarantee for your machine or connection. See docs/PERFORMANCE.md.

macOS shortcut: ./scripts/dev-fresh.sh clears the Vite cache and pulls any configured keys straight from the Keychain. It starts keyless too.

Path 3 — Docker

No Node install needed; the container publishes the same dev server.

git clone https://github.com/wolfpuplabs/horus.git
cd gods-eye-view
docker compose up

Open http://localhost:4173 as above. Everything the app saves stays in the folder you cloned, so docker compose down never loses anything:

• .env - your API keys, whether saved from Provider Settings or typed in by hand
• .gev-cache/ - downloaded map and satellite data, so later starts are faster
• .gev-logs/ - logs

Back up that folder and you've backed up everything; delete .env to forget your keys. Source edits still hot-reload. The port is published to 127.0.0.1 only, so the default matches the native one.

The local MCP server and ChatGPT OAuth voice are not available under Docker; use an OpenAI API key for voice.

Publishing it wider is the Sharing an instance opt-in, and it hands out Provider Settings too: the launcher trusts the container gateway as this machine, and a wider publish delivers everyone else from that same address. For an instance you mean to share, put the keys in .env by hand instead. SECURITY.md has the detail.

When you widen the publish, also set GEV_KEY_SETUP_TRUSTED_PEERS=none so the launcher trusts no gateway address.

GEV_KEY_SETUP_TRUSTED_PEERS=none docker compose up

Compose forwards GEV_KEY_SETUP_TRUSTED_PEERS and GEV_ALLOWED_HOSTS from your shell or the project's .env; an exported shell value takes precedence. You can also put GEV_KEY_SETUP_TRUSTED_PEERS=none in .env for a persistent setting. Unset or blank trusted peers retain automatic gateway discovery; none explicitly disables it. The startup log confirms that no additional peers are trusted.

Run it as the user who should own the files it writes. id shows the numbers; for yourself on Linux:

env UID=$(id -u) GID=$(id -g) docker compose up

On a NAS, clone onto the share you want the data on and use the share owner's ids:

cd /volume1/docker
git clone https://github.com/wolfpuplabs/horus.git
cd gods-eye-view
env UID=1026 GID=100 docker compose up -d

Keep the env: bash treats UID as read-only, so a plain UID=1026 in front of a command is silently ignored. If the container can't write the checkout, it says so at start. Docker Desktop on macOS and Windows maps ownership for you.

Behind a reverse proxy, put your keys in .env or pass them as environment variables - Provider Settings refuses proxied requests on purpose - and add the hostname you serve it on, for example GEV_ALLOWED_HOSTS=globe.example.lan (see Sharing an instance).

The launcher reads the IPv4 default gateway, so an IPv6-only Docker network finds none: it logs No default gateway; Provider Settings stays loopback-only and the panel refuses every save. Put your keys in .env by hand there, or name the gateway yourself with GEV_KEY_SETUP_TRUSTED_PEERS after reading SECURITY.md.

node_modules deliberately stays inside the image, so it survives in an anonymous volume across restarts: after a git pull that changes dependencies, recreate it with docker compose down -v && docker compose up --build. The image also skips Puppeteer's Chromium download, which keeps it small but leaves npm run test:track to the host — npm run build and npm test run fine in the container.

Then power it up — in the app, not in a file

Keys are upgrades, not prerequisites. When you want one, click the POWER UP chip in the bottom-right corner: Provider Settings lists every supported key, what it switches on, and where to get it. Paste, hit SAVE KEYS, and the app restarts itself with the new capability on. Once everything is configured the chip reads POWERED UP — and if a compact layout hides it, ?setup=1 reopens the same panel.

• Where keys land: Pinokio → the app's ignored pinokio/ENVIRONMENT; a terminal clone → the repo-root .env. Either file is made owner-only before a secret is written into it. These are local plaintext files, excluded from Git; the app uses your keys to contact the providers.
• Keys you already have stay yours: values from your shell or the macOS Keychain show as configured externally and are read-only to the panel.
• What to get first: the free Cesium ion token (eligible personal, non-commercial use; current terms and quotas apply) for photorealistic 3D and world terrain; a Google Maps key only for the billing-enabled, metered route + Google place search; OpenAI when you want to talk to the world. Full map, costs included, in Keys & Costs.

Do not enter credentials in Pinokio 8.0.40's native Configure panel: that release does not save this nested app file correctly, and it logs submitted values. Use POWER UP → Provider Settings inside GEV instead. The Pinokio 8.2 announcement fixes installation; it does not establish that this separate Configure issue is resolved. On macOS, the Keychain via ./scripts/dev-fresh.sh remains the stronger storage option.

The server binds to localhost on both paths, and Provider Settings answers requests only from your machine. Browser-side keys (Google Maps, Cesium ion) must be restricted at their providers — SECURITY.md shows how, and it carries the LAN-sharing rules alongside Keys & Costs.

---

🕐 The First Five Minutes

Choose a first-run mission, or try these in order. The GIFs show Google Photorealistic 3D; your starting basemap depends on the keys you've added.

1. Light up the sky. Take the Live Contacts mission (or turn on Flights yourself) — thousands of live aircraft, gliding on real telemetry, detection mesh already reading the scene. Click one: the camera locks on, a trail draws behind it, and its live telemetry card comes up.
2. Take the controls. Hit COCKPIT on your tracked plane and ride it down, switching sensors mid-flight: NVG into Ironbow FLIR.

3. Drop into a busy airport. Search one and descend to the taxiways with 3D aircraft on — grounded contacts, taxi trails, the whole apron working in real time.

4. Look through a public camera. Turn on Cameras over Austin, London, California, Finland, or Delaware (live video). The feeds aren't webcam embeds — they project into the 3D city. Cycle coverage to VIEWSHED and every camera draws its estimated coverage volume — where it reaches, and where it goes blind.

5. Track something in orbit. Turn on Satellites and click the ISS — you ride along at orbital distance, orbit ring and all.

6. Switch the optics. Tap 1–7 — CRT, NVG, FLIR — and the whole live planet re-renders through a different sensor.

7. Talk to it (needs an OpenAI key): "Take me to LAX and select the nearest airborne aircraft."
8. Come home. Hit Reset Globe — or just say "zoom out to a globe view."

Keyboard: 1–7 visual styles · H HUD · D detection · C cockpit · ` frame rate · Esc out. Trackpad pinch zooms the globe.

---

🛩️ The Cockpit

Every plane should let you do this.

Real-time cockpit mode, built from live flight data: the camera rides your contact with real terrain holding underneath, all the way down — sensor styles come along for the ride, and Contacts keeps the 250 km roster one click away: jump plane to plane and fall straight into the next cockpit.

The cockpit even carries its own briefing strip: nearby live signals, regional headlines, and real local weather — with an opt-in WX mode that renders volumetric clouds from actual observations around your aircraft.

Why cockpit mode exists: you're riding a real aircraft over real terrain — and you get to pick which sensor you see the world through.

---

🎙️ Talk to It

The standalone app offers OpenAI and Gemini in the GEV MIC provider chooser. OpenAI is the initial default; your choice is saved in this browser. To use Gemini, add GEMINI_API_KEY in Provider Settings or your local .env file, then select Gemini. GEMINI_LIVE_MODEL defaults to gemini-3.8-live. The permanent key stays on the local server, which issues a constrained, single-use session credential.

Changing provider ends the current conversation. If voice is on, the new provider starts with the same open-mic or push-to-talk mode; a held Space key is not carried over. Gemini uses the same map actions and captions, but has no OpenAI cost meter or MINI tier. When Gemini reports that its session has expired, start voice again for a new conversation. The provider chooser does not change the OpenAI-backed AI HUD summary.

Voice can use an OpenAI API key or, on the same machine, an opt-in signed-in ChatGPT/Codex OAuth session. The API-key path remains the default. Selecting ChatGPT OAuth in Provider Settings reuses an existing local sign-in or starts the Codex browser sign-in flow and selects OAuth when it completes. The OpenAI key still drives the AI HUD summary: a terse, five-word intelligence-style readout of the current view that regenerates as you move.

The OAuth option is experimental. OpenAI documents ChatGPT plan usage for the Responses API; a supported third-party Realtime contract for reusing Codex tokens has not been confirmed. A successful token mint does not establish billing or support terms.

GEV reads Codex's file credentials but does not write or refresh them. It checks token shape and expiry, and reports expired sign-in as requiring re-authentication. The login button runs codex login, permits one pending attempt, and reports exit failures or a two-minute timeout. CODEX_HOME must match the directory that Codex uses. If CODEX_AUTH_JSON points elsewhere, sign in separately or fix that mismatch before using the button. Codex credential storage must use auth.json; Keychain-only and in-memory storage are not readable by GEV. On Windows, the login button may not be able to start an npm-installed Codex; run codex login yourself, then select OAuth. See Codex credential storage.

For a live voice check, run node scripts/qa-voice-auth.mjs http://127.0.0.1:4189 oauth microphone.wav against your local dev server. Use a WAV with three seconds of leading silence followed by a short spoken reply request. Replace oauth with api-key to check the API-key path. The check verifies audio input, a completed spoken reply, usage, resource cleanup, and reconnect. It saves screenshots and credential-free results under .gev-logs/voice-auth/.

Click GEV MIC, grant the microphone, and just talk. This is more than a voice-controlled remote:

• 🧠 It knows what it's looking at. The agent pulls live scene context before answering — including coordinates, street names, active layers, and view scale. Ask "what city is this?" mid-flight and it knows.
• 🎯 Entity Q&A. Click any plane, ship, or datacenter and ask "what's this?" It answers using the object's live telemetry.
• 👁️ Visual grounding. At street level, it reads a viewport screenshot to identify legible signage and building names, and is instructed never to hallucinate labels.
• 🎬 Cinematic framing. "Show me the planes overhead" pulls the camera back, angles it, and frames the live traffic like a director.
• 🔒 Honest and secure. The agent only confirms actions that succeeded. Your OPENAI_API_KEY never touches the browser; the client only gets a short-lived session token. If you choose USE CHATGPT OAUTH in Provider Settings, the local server uses that sign-in only to mint the same kind of short-lived Realtime credential, and refuses the OAuth path for non-loopback clients.

Thirty tools, four jobs — the commands below come straight from the product's voice test suite and tool playbook:

🎥 Direct it — drone-operator camera verbs:

“Rotate the globe” spins Earth to the right continuously; ask for left, a speed, or stop. If it refuses, follow its reset-and-rotate or further-zoom guidance; camera input stops rotation.

🗣️ "Take me to Tokyo." · "Orbit around this area slowly." · "Draw the walking route from the Capitol to Zilker Park." → "Fly the route we just drew." · "Zoom out to a globe view."

🖊️ Annotate it — a whiteboard over the real world:

🗣️ "Outline the state of Texas." · "Annotate the Texas State Capitol and its grounds" — it draws the actual enclosing boundary, not a circle. · "How far is the Eiffel Tower from the Louvre?" — a connector arrow appears and it speaks the distance. Everything persists until you say "clear the map."

✍️ Or draw it yourself — DISPLAY ▸ Draw: pick Area, Line or Pin, click the vertices on the real world, double-click to finish, label it. Same whiteboard, same persistence, no microphone needed.

🔎 Interrogate it — analyst queries against the live layers:

🗣️ "How many flights are over Texas right now?" · "Which ships are headed to Oakland?" · "What is the biggest fire near Los Angeles?" · "Is anything flying above forty thousand feet?" · "When does the ISS pass over next?" · "How many datacenters are in view?"

🎛️ Operate it — the whole console, hands-free:

🗣️ "Switch to night vision and turn on the flights layer." · "Turn on the camera viewsheds." · "Play a news radio station near Austin." · "Track that plane." → "Enter Cockpit."

And the rapid-fire tier — one sentence each:

🗣️ "Show me global infrastructure." (stages the layers and pulls back to the globe) · "Play Orbital Watch." (a full cinematic scene) · "Set detection density to fifty percent." · "Next contact — helicopters only." (mid-cockpit) · "Show me space missions." · "Switch to OSM." · "Sharpen the image a touch." · "Switch to the tactical layout." · "What's turned on right now?"

Ask for radio near anywhere and the globe starts broadcasting — every station is a real place you can fly to.

---

💬 Or ask from Claude and Codex. Horus is also an MCP server: ask Claude Desktop, Codex or ChatGPT desktop to show a place, and the live globe opens right in the conversation. Setup takes a minute — see docs/MCP_SETUP.md.

🛰️ What's on the Globe

Twenty layers and map sources. Eighteen have a keyless path. Some offer additional capabilities with a provider key. (🟢 no key · 🟡 free key · 🔴 metered.)

Layer	What you get	Source	Auth
🗺️ Map Stack	Esri satellite imagery, Google Photorealistic 3D, OSM, plus additional ion-hosted stacks	Esri / Google / Ion / OSM	🟢 Esri satellite + OSM · 🟡 ion-hosted Google 3D + world terrain · 🔴 direct Google + place search
✈️ Live Flights	11,000+ live aircraft + route history	OpenSky + adsb.lol	🟢 (🟡 optional for more polling credits)
🎖️ Military Flights	ADS-B military traffic in amber, emergency broadcasts in red	adsb.lol	🟢
📡 GNSS Integrity	Regional navigation accuracy scores; anomalies do not confirm interference	adsb.lol, GPSJAM aggregation	🟢
🔥 Fire Perimeters	Incident boundaries and reported containment	WFIGS / NIFC	🟢
🚢 Live Vessels	Thousands of ships worldwide	AISStream	🟡
🛰️ Satellites	838-object catalog, color-coded by class with a live legend — the DENSE chip drops in the whole Starlink shell	CelesTrak	🟢
🌍 Earthquakes	Global seismic activity, last 24h	USGS	🟢
◍ Air quality	Live AQHI on the published 1–10+ health-risk scale, with a Weather-panel card showing the band legend and the highest readings in view. Canada only — ECCC is the first registered provider	ECCC MSC GeoMet	🟢
🚗 Traffic	Simulated vehicles on OSM roads. With TomTom, live flow speeds drive the simulation and congestion colors below ~8 km; individual vehicle positions are not live observations	TomTom + OSM	🟢 simulation · 🟡 live flow speeds
📹 CCTV Mesh	~4,000 public cameras (shared cap) projected into the 3D space — Austin · Texas (TxDOT) · California (Caltrans) · London (TfL) · Ontario (511, free developer key) · Finland (Fintraffic) · British Columbia (DriveBC) · Estonia (Tallinn, Tarktee) · Delaware (DelDOT live video) · New South Wales (Live Traffic NSW) · Calgary · Norway (Statens vegvesen) · Toronto · King County (WA) · Washington (WSDOT) · Catalonia (Servei Català de Trànsit) · Hong Kong (Transport Department) · Taiwan (Freeway Bureau, MOTC), plus opt-in New York City (NYC DOT TMC, needs your own NYC DOT agreement), opt-in Lithuania (Via Lietuva / Eismoinfo, photo licence unconfirmed) and opt-in Florida (FL511, individual personal use only; other use needs FDOT's written consent). Positions are published; poses are estimated priors

Weather, keyless. Wind animates 10 m forecast flow from NOAA GFS or ECMWF IFS, with an optional color field and a reading at map center. Rain radar, Satellite clouds and Lightning density are observations on one history timeline in the WEATHER panel (step back, Play, Latest); Cyclone advisories draw NHC and CPHC positions, forecast tracks and cones. On Google 3D Tiles the observed layers float above the city as translucent shells, sharpened around your view.

In the app, Data Layers groups them as Movement, Cameras, Infrastructure, Events, Weather and Utilities.

The basemap ladder — what each tier buys you:

You have	The globe you get
🟢 Nothing	Esri World Imagery satellite basemap + keyless terrain, in 2D. OSM takes over automatically if Esri is unreachable; if terrain is unavailable the globe continues without it
🟡 A free Cesium ion token	Google Photorealistic 3D cities and world terrain — eligible personal, non-commercial use; current ion terms and quotas apply
🔴 A Google Maps key	The same 3D direct from Google, plus Google place search — the billing-enabled, metered route

The Space Missions layer replaying a Falcon 9 ascent — labeled RECONSTRUCTED ESTIMATE, scrubbable 0.25×–4×.

Also on the globe: neighborhood overlays · an optional cockpit WX cloud effect. Bundled static infrastructure: Datacenters (4,351), Dams (704), and Submarine Cables (712).

Missing a layer you want? Open an issue — or add it and send the PR.

---

📷 Street Level

Street-level photos from any provider in one panel. This build ships Mapillary (a free client token), Google Street View (your Google Maps key), KartaView and Panoramax (no key).

Setup. At mapillary.com/dashboard/developers, register an application with Read access and copy its Client Token (MLY|…). Paste it into POWER UP → Mapillary, or set MAPILLARY_CLIENT_TOKEN in .env and restart. Without it the panel reads KEY REQUIRED. Google Street View uses GOOGLE_MAPS_API_KEY with the Maps JavaScript API enabled for it in Google Cloud; its chip starts off, since every panorama is billed to the key. KartaView and Panoramax need nothing: their public APIs are keyless.

Use. Turn on Street Level under DATA LAYERS → Cameras, or with the pill in the STREET LEVEL panel header. Each provider has a chip in its own colour (Mapillary green), and one is lit at a time: lighting one switches the others off. Mapillary, which is free, is lit by default. Zoom in to street level (below 60 km) for the coverage lines; from orbit the panel says to zoom in. The IMAGERY (ALL / 360° / FLAT) and SINCE filters apply to Mapillary, KartaView and Panoramax; Street View panoramas are all 360°, so with Street View lit the filters are hidden. Click a coverage line for its image cones and a cone to open the photo. Light KARTAVIEW (purple) and zoom in below about 6 km: its lines are the streets KartaView has photos of, and a click on one opens the photo nearest the click, flat or 360° (drag to look around), with cones along its drive; ‹ › or ← → step through the drive (Shift+← →, ↑ ↓ and + − look around a 360° photo; pinch zooms on a phone). Photos KartaView has archived are skipped, and where all are archived the panel says so. For KartaView, SINCE goes by upload date, as KartaView's own map does (it can filter by nothing else), and the panel notes it beside the SINCE value (ANY DATE (by upload date)); KartaView filters its lines on its own server, and a filtered area KartaView has not drawn before can take several seconds. Light PANORAMAX (orange) for the open, federated commons (strongest in France and Belgium): below about 60 km its lines are sequences. A click on a line opens that sequence's picture nearest the click without moving the camera, flat or 360°, with cones along the sequence around it; ‹ › or ← → step through it, and both filters apply. Its caption names the picture's authors (or the instance holding it) and licence (mostly CC BY-SA 4.0; pictures on the IGN instance are Licence Ouverte 2.0). On the Google 3D map (Google's terms keep Street View off other maps, where it does not appear), light GOOGLE STREET VIEW and click a street from below 3 km, or press OPEN STREET VIEW for the view centre, to open Google's panorama there; step along its arrows. Above the photo: EXPAND (full screen; Esc leaves) and FIT / FILL (Mapillary, and flat KartaView and Panoramax photos). The caption links to the image on the provider's site, and the globe credits each provider that is on ("© Mapillary contributors, CC BY-SA 4.0", "Street View imagery © Google", "© KartaView contributors, CC BY-SA 4.0", "© Panoramax contributors, licence per picture"). KartaView's own photo pages fail for signed-out visitors, so its link opens the full-size photo.

Share links carry the provider switches and filters (0.m.0 Mapillary off, 0.m.0_0.r.google-1 Street View on, 0.m.0_0.r.google-0*kartaview-1*panoramax-0 KartaView on and 0.m.0_0.r.google-0*kartaview-0*panoramax-1 Panoramax on, as the app writes them (0.m.0_0.r.kartaview-1 and 0.m.0_0.r.panoramax-1 work too; a link that leaves out m keeps Mapillary, the default, lit), 0.p.p panoramas only, 0.s.365 the last year). To add a provider, implement the contract in src/layers/streetLevel/registry.js and register it in src/app/layers/streetLevel.js.

🎖️ Field Missions

Once the basics click, run these:

Mission	How
🚁 Ask the planet	"Why are all these military helicopters flying in circles?" Select a military track — it silently backfills ~24 h of real trace history — and see what it's been doing, resolved as stacked 3D loops.
✈️ Final approach	Click-track an airliner lining up for a runway, hop into the cockpit, and ride it down.
🌃 Night watch	Fly to your own city, switch to NVG, and let the detection mesh and HUD read the scene.
🚢 Port call	Vessels on over the Port of Long Beach. Click a tanker for its tactical card and wake trail — then hit NEAREST in the CCTV panel and look at the same water through a public camera.
📻 Tokyo FM	Orbit Shibuya with the Radio layer on — then drag the analog tuner needle: every position snaps to a real station and the globe flies to whoever's broadcasting.
🔥 Fire line	FIRMS over California. Click a detection — the camera dives to it — read the intensity, then hit NEAREST in the CCTV panel for a ground view.
🚶 Ask for a walking route 🎙️	Tell the world where you want to go and watch a real street-following route trace itself through the 3D city — then "fly it": banked turns, eased ends, a camera that leads the path like a drone shot.
📏 Measure LAX to DFW 🎙️	"How far is LAX from DFW?" — an arrow spans the country, the distance lands in the caption, and the endpoints stay pinned to the real world as you orbit.
🚀 Launch replay	Open Space Missions, pick a launch from the last 30 days, and ride the T-minus countdown through ascent to orbit — scrub it at 0.25×–4×. Labeled RECONSTRUCTED ESTIMATE, because it is one.
🪦 Walk the boneyard	Fly from regional context down into dense, fully resolved rows of retired aircraft.
🏗️ Orbit Three Gorges	Sweep the dam and its terrain at a glance — then flip on the Dams layer and find 703 more.

🎙️ = voice missions — they need an OpenAI key.

Ask the planet: a military contact's last ~24 hours of real trace history, resolved as stacked 3D loops.

"Draw the walking route… now fly it" — banked turns, eased ends, the camera leading the path like a drone shot.

Walk the boneyard: rows of retired airframes, fully resolved in 3D.

---

🔧 Under the Hood

How the globe handles live data:

• World-stable icons. Aircraft and ships point along their true real-world heading at every camera angle — tracked or not, looking straight down or across the horizon — via per-frame screen-space course projection. No spinning, no viewport-locking.
• Smooth motion from choppy data. Live feeds arrive every 15–30s; the globe renders one interval behind real time and interpolates between known fixes. Dead reckoning fills the gaps.
• Honest satellites. SGP4 propagation with orbit rings that stay locked to their satellites via GMST realignment — no drift, no per-second flicker.
• Sits on the real ground. Entity heights are aligned to work with Google 3D tiles, so aircraft park on aprons and cameras stand on street corners instead of floating.
• Caching and request budgets. An OpenSky credit governor, a TomTom daily tile budget, and disk-cached TLEs reduce repeated requests. These controls do not replace provider quotas or billing controls.
• Server-side credentials. Every API that touches a private key (OpenAI, AISStream, OpenSky OAuth, camera frames) is brokered through a hardened server-side proxy with SSRF protection, response caps, and sanitized errors. The only keys the browser sees are Google Maps and Cesium ion (restrict both at the provider).
• No framework. Vanilla JavaScript, CesiumJS, and Vite — plus Google Photorealistic 3D Tiles for the planet and the OpenAI Realtime API for voice. Fast to read, fast to hack on.

src/
├── main.js                 # Bootstrap: Google 3D tiles, layer registration
├── ui/                     # Runtime UI — panels, HUD, styles, controls
├── hud.js                  # Intelligence HUD + AI scene summary
├── keySetup.js             # POWER UP panel — in-app provider keys (dev server only)
├── mapStackController.js   # Basemap switching — Google 3D / Esri / OSM / ion stacks
├── voice/                  # OpenAI Realtime session + 30 voice tools
├── layers/                 # Layer components — weather, wind, cyclones, transit, ALPR, …
├── data/                   # One module per layer + orchestration + context store
│   ├── iconOrientation.js  # Screen-projected headings + horizon cull
│   └── local_data/         # Bundled datasets (per-folder provenance)
└── scenes/                 # Cinematic scene director

See docs/CURRENT-STATE.md for the authoritative runtime reference.

---

🔑 API Keys

🟢 No key · 🟡 Free key · 🔴 Metered

Use POWER UP → Provider Settings to add keys. The tables below explain what each provider enables; none is required to start. See the setup instructions for storage and configuration details.

No key needed for Wind, Rain radar, Satellite clouds, Lightning density, Cyclone advisories, Mapped ALPR Cameras, Transit, Directions, Delaware live video, and coordinate or bundled-place search. A layer row waiting on a key names it.

Choose the capabilities you want

Seven keys. Five have a free tier, and the two 🔴 ones are metered:

	Key	Why	Get it
🟡	Cesium ion	🗺️ Google Photorealistic 3D, world terrain, and additional ion-hosted imagery stacks. The free Community plan is for eligible individual, personal/non-commercial use and has quotas	cesium.com/ion — use a public assets:read token and check current pricing/eligibility
🔴	Google Maps	Direct Google Photorealistic 3D, Google place search and Street View (Map Tiles API; Street View also needs the Maps JavaScript API)	Google Cloud Console — URL-restrict it
🔴	OpenAI	🎙️ Voice + AI HUD summary through an API key. Provider Settings also offers USE CHATGPT OAUTH for cloud voice without removing the API-key option	platform.openai.com — API-key usage is metered, see costs below
🟡	AISStream	🚢 Live global ships	aisstream.io — free signup
🟡	NASA FIRMS	🔥 Live active fires	firms.modaps.eosdis.nasa.gov — free
🟡	TomTom	🚦 Live flow speeds and congestion colors for the simulated traffic layer	my.tomtom.com — free tier available
🟡	Mapillary	📷 Street Level coverage and photos. A public client token by design (see SECURITY.md)

What the TomTom key buys you: rush-hour density painted on the city — then dive from the jam straight into the camera watching it.

Cherry on top

	Key	Why	Get it
🟡	OpenSky	✈️ More flight-polling credits (🟢 anonymous works without)	opensky-network.org
🔴	Launch Library 2	🚀 Optional paid token for higher limits (🟢 no key needed for public access)	thespacedevs.com/supportus

Add these if you need higher polling allowances. Leave LL2_API_TOKEN blank for standard public access. LL2 tokens are optional paid Patreon upgrades for higher limits; there is no free API-key signup.

npm run doctor reports Node/npm readiness, the primary provider routes, and where each configured provider was found without printing credential values. On macOS its Keychain-aware result previews ./scripts/dev-fresh.sh; plain npm run dev reads only explicit environment and Vite dotenv values. The OpenSky summary reports keyless anonymous access for explicit anon or an OAuth mode without a client pair, retains presence-only wording for a complete OAuth pair, and identifies selected Basic or auto mode without guessing which credentials runtime will accept. Basic and credentials-file modes remain advanced dev-fresh.sh configuration.

For headless machines, coding agents, or scripted setups:

# Put keys in .env (see .env.example), or pass them as env vars:
OPENAI_API_KEY="…" AISSTREAM_API_KEY="…" npm run dev -- --host localhost --port 4173

# On macOS, store any of them in the Keychain and dev-fresh.sh pulls them in:
security add-generic-password -U -s "google-maps-api" -a "api-key" -w
security add-generic-password -U -s "openai-api"      -a "api-key" -w
security add-generic-password -U -s "aisstream-api"   -a "api-key" -w
security add-generic-password -U -s "firms-map"       -a "map-key" -w
security add-generic-password -U -s "cesium-ion"      -a "token"   -w

OpenSky can run fully anonymous (OPENSKY_AUTH_MODE=anon), or import OAuth credentials with ./scripts/opensky-import-client.sh /path/to/credentials.json.

CCTV sources with "feedType": "hls" and a registered HTTP(S) .m3u8 URL play through a lazily loaded hls.js decoder shared by the monitor plane and panel. DelDOT uses its official HTTPS HLS catalog links. Disable that pack with CCTV_DELDOT_ENABLED=0.

The server allows two concurrent sessions. Each retains at most 12 segments and 24 MiB in memory; individual downloads are capped at 4 MiB with a ten second deadline. There are no segment files or ffmpeg processes. Redirects, off-origin references, encrypted playlists and non-MPEG-TS segments are refused. Each decoder has its own client lease (at most eight per session), including native HLS. Closing it releases only that lease; abandoned leases expire after 15 seconds without access. The last release stops upstream work. Failed live video uses the existing still/Street View/synthetic fallback, which is not live video. RTMP-only sources are not supported by this integration.

💸 What it actually costs

Honest numbers, roughly, as of mid-2026 — always check the provider pricing pages:

	Cost reality
🟢 Most layers	$0, no signup. OpenSky anon, USGS, CelesTrak, adsb.lol, city CCTV, Radio Browser, GBFS, Launch Library 2, transit feeds, OSRM routing, NOAA and ECMWF weather, OpenStreetMap ALPR mapping, bundled datasets.
🟡 The free-key tier	$0 with a signup. AISStream, FIRMS, TomTom, OpenSky, plus Cesium ion for eligible personal/non-commercial use. Provider quotas and eligibility still apply.
🗺️ Google 3D tiles	Free through an eligible Cesium ion Community account within its quota; metered through a direct Google key. Use the direct route for Google place search or commercial deployment, verify current provider terms, and set budget alerts where billing is enabled.
🔴 OpenAI voice	API-key sessions keep the live spend readout, STD/MINI model toggle, $2 warning, and $5 hard cap. ChatGPT OAuth is an explicit choice in Provider Settings. Its usage is tracked without an API-dollar estimate or spend cap. The voice context window stays deliberately short.

Google's direct 3D route is surprisingly generous: the first 1,000 Photorealistic 3D Tiles sessions each month are currently free, and one root request supports roughly three hours of rendering. A solo user exploring sparingly can realistically stay inside the free usage cap. Billing must still be enabled, so restrict the key and set a quota or budget alert. Check Google's current pricing before relying on these figures.

🧗 The floor is low on purpose

Everything above is the deliberately cheap baseline — enough to get a real taste of geospatial intelligence, GEOINT, and OSINT without ever talking to a sales team. You'll also notice the ceiling: terrestrial AIS goes quiet mid-ocean and satellite AIS costs real money; premium imagery, SAR, and the deeper commercial feeds live behind enterprise contracts. That's not a limit of the architecture — every layer here is a pattern you can point at your own data sources. This repo hands you the foundation; what you fuse into it is up to you.

🔒 Sharing an instance

By default nobody else can reach your server — it binds to localhost. To share on your LAN, opt in explicitly (npm run dev -- --host 0.0.0.0 --port 4173, or HOST=0.0.0.0 ./scripts/dev-fresh.sh on macOS/Linux). IP addresses work as they are; if you use a LAN hostname, add it with GEV_ALLOWED_HOSTS=globe.lan, since binding to 0.0.0.0 does not trust arbitrary Host headers. But know that ⚠️ a LAN-visible server brokers your configured API keys to anyone who can reach it. Per-IP throttles on the cost-bearing endpoints are on by default (GEV_RATELIMIT_OPENAI_PER_MIN, GEV_RATELIMIT_GOOGLE_PER_MIN — see .env.example to tune them), but before anything else, configure provider quotas, usage limits, and billing alerts: app-level throttles are not billing caps, and a budget alert alone does not stop spending. Full threat model in SECURITY.md.

Provider Settings is disabled when the server is shared, so remote users cannot access the key-entry panel.

Pinokio LAN and Cloudflare sharing remain disabled for this launcher. Use a separately reviewed authentication proxy if remote access is required. SECURITY.md explains the restrictions and threat model.

---

📋 Responsible & Open

Horus runs on public data, clear sources, and local-first execution. No secrets, no private datasets, no mystery scraping — anything involving a private key is brokered server-side. It has the visual grammar of a classified ops room, built entirely from open signals and inspectable code.

The line. This project models events, assets, infrastructure, and systems — aircraft, vessels, satellites, fires, cameras, cities. It does not build features for named-person search, face recognition, or tracking individuals, and pull requests that cross that line won't be merged. People are not a query type here.

Come build it. It is a fork of the live 3D client from God's Eye View — and it's a canvas: the layers here are the signals one person could find and fuse. Add a city pack, a data source, a style, a voice tool. It's the window through which you see the world; bring that window to others.

Status: An evolving open-source client for exploration and learning — a fast, hackable foundation, not a hardened production service. Released under the MIT License. Bundled and live datasets carry their own terms — see DATA_SOURCES.md. Security model: SECURITY.md. Want to contribute? CONTRIBUTING.md.

Original authors: Bilawal Sidhu and Sameh Khamis at Halfpixel.

Media note: the capture GIFs on this page show Google Photorealistic 3D Tiles and live data layers, used promotionally with in-frame attribution; they aren't licensed for standalone reuse. See media provenance and permissions; full source terms in DATA_SOURCES.md.

[!IMPORTANT] Horus is an exploratory visualization of public and third-party data. Data may be delayed, incomplete, modeled, inferred, or wrong. Do not use it for flight or maritime navigation, emergency response, medical or health decisions, investment decisions, or other safety-critical or operational purposes. Verify important information with authoritative sources.

---

🙏 Credits

Horus is based on God's Eye View by Bilawal Sidhu and Sameh Khamis at Halfpixel, released under the MIT License. The original copyright notice is kept in LICENSE. Third-party data, models and packages keep their own licenses — see DATA_SOURCES.md, THIRD_PARTY_NOTICES.md and public/models/README.md.

Some internal identifiers (for example godsEyeView storage keys and the gev prefixes) keep their upstream names so the code stays compatible with upstream.

---

👁️ Horus. No place left behind.