npm - @blamejs/blamejs-shop - Versions diffs - 0.1.35 → 0.1.37 - Mend

@blamejs/blamejs-shop 0.1.35 → 0.1.37

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (20) hide show

package/CHANGELOG.md +4 -0
package/README.md +2 -0
package/lib/asset-manifest.json +3 -3
package/lib/currency-display.js +201 -4
package/lib/storefront.js +612 -80
package/lib/translations.js +203 -0
package/lib/vendor/MANIFEST.json +2 -2
package/lib/vendor/blamejs/CHANGELOG.md +4 -0
package/lib/vendor/blamejs/README.md +2 -0
package/lib/vendor/blamejs/api-snapshot.json +10 -2
package/lib/vendor/blamejs/examples/wiki/lib/source-comment-block-validator.js +1 -0
package/lib/vendor/blamejs/index.js +2 -0
package/lib/vendor/blamejs/lib/ai-aedt-bias-audit.js +180 -0
package/lib/vendor/blamejs/lib/ai-frontier-protocol.js +196 -0
package/lib/vendor/blamejs/package.json +1 -1
package/lib/vendor/blamejs/release-notes/v0.13.5.json +18 -0
package/lib/vendor/blamejs/release-notes/v0.13.6.json +18 -0
package/lib/vendor/blamejs/test/layer-0-primitives/ai-aedt-bias-audit.test.js +107 -0
package/lib/vendor/blamejs/test/layer-0-primitives/ai-frontier-protocol.test.js +83 -0
package/package.json +1 -1

package/lib/storefront.js CHANGED Viewed

@@ -27,9 +27,23 @@
 var emailModule = require("./email");
 var pricing      = require("./pricing");
+var currencyDisplayModule = require("./currency-display");
+var translationsModule = require("./translations");
+var { AsyncLocalStorage } = require("node:async_hooks");   // allow:non-shop-require — Node-core per-request context (no npm dep); the framework itself composes it in db-role-context / log. No b.* request-context primitive exists to wrap it.
 var b = require("./vendor/blamejs");
+// Per-request locale context store. The storefront's locale middleware
+// resolves the request's locale + chrome strings once and seeds this
+// store; every `_wrap` call on the same request reads the resolved
+// context back out without the ~30 renderers having to thread it through
+// their opts. `enterWith` scopes the value to the request's async
+// execution context (each inbound request runs its own `handle()` chain),
+// so concurrent requests never see each other's locale. A renderer
+// reached outside a request (a unit test calling `renderHome` directly)
+// finds no store and falls back to the English baseline.
+var _localeAls = new AsyncLocalStorage();
 // Payment-webhook signatures (Stripe's HMAC, PayPal's, …) are computed over
 // the EXACT raw request bytes, but the global JSON body-parser reparses and
 // discards them. This middleware buffers the raw body for the given POST
@@ -125,7 +139,7 @@ var CONSENT_BANNER =
 var LAYOUT =
   "<!DOCTYPE html>\n" +
-  "<html lang=\"en\">\n" +
+  "<html lang=\"{{lang}}\" dir=\"{{dir}}\">\n" +
   "<head>\n" +
   "  <meta charset=\"utf-8\">\n" +
   "  <meta name=\"viewport\" content=\"width=device-width,initial-scale=1\">\n" +
@@ -145,13 +159,13 @@ var LAYOUT =
   "  <meta name=\"twitter:image\" content=\"{{og_image}}\">\n" +
   "</head>\n" +
   "<body>\n" +
-  "  <a class=\"skip-link\" href=\"#main\">Skip to content</a>\n" +
+  "  <a class=\"skip-link\" href=\"#main\">{{skip_to_content}}</a>\n" +
   "\n" +
   "  <div class=\"utility-bar\" role=\"complementary\">\n" +
   "    <div class=\"utility-bar__inner\">\n" +
-  "      <span class=\"utility-bar__pill\"><span class=\"dot dot--live\" aria-hidden=\"true\"></span> Open source · Apache 2.0</span>\n" +
-  "      <span class=\"utility-bar__msg\">Server-rendered HTML · post-quantum crypto on by default · zero npm runtime deps</span>\n" +
-  "      <a class=\"utility-bar__link\" href=\"https://github.com/blamejs/blamejs.shop\" rel=\"noopener\">Star on GitHub →</a>\n" +
+  "      <span class=\"utility-bar__pill\"><span class=\"dot dot--live\" aria-hidden=\"true\"></span> {{util_pill}}</span>\n" +
+  "      <span class=\"utility-bar__msg\">{{util_msg}}</span>\n" +
+  "      <a class=\"utility-bar__link\" href=\"https://github.com/blamejs/blamejs.shop\" rel=\"noopener\">{{util_star}}</a>\n" +
   "    </div>\n" +
   "  </div>\n" +
   "\n" +
@@ -160,17 +174,17 @@ var LAYOUT =
   "      <a href=\"/\" class=\"brand\" aria-label=\"{{shop_name}}\"><img src=\"/assets/brand/logo.png\" alt=\"{{shop_name}}\"></a>\n" +
   "      <form class=\"site-search\" action=\"/search\" method=\"get\" role=\"search\">\n" +
   "        <div class=\"site-search__inner\">\n" +
-  "          <label for=\"site-search-q\" class=\"skip-link\">Search products</label>\n" +
+  "          <label for=\"site-search-q\" class=\"skip-link\">{{search_label}}</label>\n" +
   "          <svg class=\"site-search__icon\" viewBox=\"0 0 24 24\" width=\"18\" height=\"18\" aria-hidden=\"true\"><path d=\"M21 21l-4.35-4.35M11 19a8 8 0 1 1 0-16 8 8 0 0 1 0 16Z\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\"/></svg>\n" +
-  "          <input id=\"site-search-q\" type=\"search\" name=\"q\" value=\"{{search_q}}\" placeholder=\"Search the catalog\" autocomplete=\"off\" spellcheck=\"false\" maxlength=\"200\">\n" +
-  "          <button type=\"submit\">Search</button>\n" +
+  "          <input id=\"site-search-q\" type=\"search\" name=\"q\" value=\"{{search_q}}\" placeholder=\"{{search_placeholder}}\" autocomplete=\"off\" spellcheck=\"false\" maxlength=\"200\">\n" +
+  "          <button type=\"submit\">{{search_submit}}</button>\n" +
   "        </div>\n" +
   "      </form>\n" +
   "      <nav class=\"site-nav\" aria-label=\"Primary\">\n" +
-  "        <a class=\"site-nav__link\" href=\"/\">Shop</a>\n" +
-  "        <a class=\"site-nav__link\" href=\"#framework\">Framework</a>\n" +
-  "        <a class=\"site-nav__icon\" href=\"/account\" aria-label=\"Account\"><svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" aria-hidden=\"true\"><path d=\"M12 12a4 4 0 1 0 0-8 4 4 0 0 0 0 8Zm-7 9a7 7 0 0 1 14 0\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\"/></svg></a>\n" +
-  "        <a class=\"cart-pill\" href=\"/cart\" aria-label=\"Cart, {{cart_count}} items\"><svg viewBox=\"0 0 24 24\" width=\"18\" height=\"18\" aria-hidden=\"true\"><path d=\"M3 4h2l2.4 12.1a2 2 0 0 0 2 1.6h7.6a2 2 0 0 0 1.95-1.55L21 8H6\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\"/><circle cx=\"10\" cy=\"21\" r=\"1.4\" fill=\"currentColor\"/><circle cx=\"17\" cy=\"21\" r=\"1.4\" fill=\"currentColor\"/></svg><span class=\"cart-pill__count\">{{cart_count}}</span></a>\n" +
+  "        <a class=\"site-nav__link\" href=\"/\">{{nav_shop}}</a>\n" +
+  "        <a class=\"site-nav__link\" href=\"#framework\">{{nav_framework}}</a>\n" +
+  "        <a class=\"site-nav__icon\" href=\"/account\" aria-label=\"{{nav_account}}\"><svg viewBox=\"0 0 24 24\" width=\"20\" height=\"20\" aria-hidden=\"true\"><path d=\"M12 12a4 4 0 1 0 0-8 4 4 0 0 0 0 8Zm-7 9a7 7 0 0 1 14 0\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\"/></svg></a>\n" +
+  "        <a class=\"cart-pill\" href=\"/cart\" aria-label=\"{{nav_cart_aria}}\"><svg viewBox=\"0 0 24 24\" width=\"18\" height=\"18\" aria-hidden=\"true\"><path d=\"M3 4h2l2.4 12.1a2 2 0 0 0 2 1.6h7.6a2 2 0 0 0 1.95-1.55L21 8H6\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.75\" stroke-linecap=\"round\" stroke-linejoin=\"round\"/><circle cx=\"10\" cy=\"21\" r=\"1.4\" fill=\"currentColor\"/><circle cx=\"17\" cy=\"21\" r=\"1.4\" fill=\"currentColor\"/></svg><span class=\"cart-pill__count\">{{cart_count}}</span></a>\n" +
   "      </nav>\n" +
   "    </div>\n" +
   "  </header>\n" +
@@ -180,14 +194,14 @@ var LAYOUT =
   "  <section class=\"newsletter-band\" aria-labelledby=\"newsletter-title\">\n" +
   "    <div class=\"newsletter-band__inner\">\n" +
   "      <div class=\"newsletter-band__copy\">\n" +
-  "        <p class=\"eyebrow eyebrow--on-dark\">Stay in the loop</p>\n" +
-  "        <h2 id=\"newsletter-title\">Get release notes the day they ship.</h2>\n" +
-  "        <p class=\"newsletter-band__lede\">No marketing emails. A single short note when there's a new framework release, a security advisory, or a primitive worth knowing about.</p>\n" +
+  "        <p class=\"eyebrow eyebrow--on-dark\">{{newsletter_eyebrow}}</p>\n" +
+  "        <h2 id=\"newsletter-title\">{{newsletter_title}}</h2>\n" +
+  "        <p class=\"newsletter-band__lede\">{{newsletter_lede}}</p>\n" +
   "      </div>\n" +
   "      <form class=\"newsletter-band__form\" method=\"post\" action=\"/newsletter\">\n" +
-  "        <label class=\"skip-link\" for=\"newsletter-email\">Email address</label>\n" +
+  "        <label class=\"skip-link\" for=\"newsletter-email\">{{newsletter_email}}</label>\n" +
   "        <input id=\"newsletter-email\" type=\"email\" name=\"email\" required placeholder=\"you@example.com\" autocomplete=\"email\">\n" +
-  "        <button type=\"submit\">Subscribe</button>\n" +
+  "        <button type=\"submit\">{{newsletter_submit}}</button>\n" +
   "      </form>\n" +
   "    </div>\n" +
   "  </section>\n" +
@@ -196,7 +210,7 @@ var LAYOUT =
   "    <div class=\"site-footer__inner\">\n" +
   "      <div class=\"site-footer__brand-col\">\n" +
   "        <img class=\"site-footer__logo\" src=\"/assets/brand/logo.png\" alt=\"{{shop_name}}\">\n" +
-  "        <p class=\"site-footer__tagline\">An open-source shop framework — server-rendered HTML, zero npm runtime dependencies, security defaults on.</p>\n" +
+  "        <p class=\"site-footer__tagline\">{{footer_tagline}}</p>\n" +
   "        <ul class=\"site-footer__social\" aria-label=\"Project links\">\n" +
   "          <li><a href=\"https://github.com/blamejs/blamejs.shop\" rel=\"noopener\" aria-label=\"GitHub\"><svg viewBox=\"0 0 24 24\" width=\"18\" height=\"18\" aria-hidden=\"true\"><path d=\"M12 .5a11.5 11.5 0 0 0-3.6 22.4c.6.1.8-.3.8-.6v-2c-3.2.7-3.9-1.5-3.9-1.5-.5-1.4-1.3-1.8-1.3-1.8-1-.7.1-.7.1-.7 1.2.1 1.8 1.2 1.8 1.2 1 1.8 2.8 1.3 3.5 1 .1-.8.4-1.3.7-1.6-2.6-.3-5.3-1.3-5.3-5.7 0-1.3.4-2.3 1.2-3.1-.1-.3-.5-1.5.1-3.1 0 0 1-.3 3.3 1.2a11 11 0 0 1 6 0c2.3-1.5 3.3-1.2 3.3-1.2.6 1.6.2 2.8.1 3.1.8.8 1.2 1.8 1.2 3.1 0 4.4-2.7 5.4-5.3 5.7.4.4.8 1.1.8 2.3v3.4c0 .3.2.7.8.6A11.5 11.5 0 0 0 12 .5Z\" fill=\"currentColor\"/></svg></a></li>\n" +
   "          <li><a href=\"https://npmjs.com/package/blamejs\" rel=\"noopener\" aria-label=\"npm\"><svg viewBox=\"0 0 24 24\" width=\"18\" height=\"18\" aria-hidden=\"true\"><path d=\"M2 7v10h6v-7h3v7h11V7H2Zm15 8h-2v-5h-3v5h-1V9h6v6Z\" fill=\"currentColor\"/></svg></a></li>\n" +
@@ -204,43 +218,45 @@ var LAYOUT =
   "        </ul>\n" +
   "      </div>\n" +
   "      <div class=\"site-footer__col\">\n" +
-  "        <h4>Shop</h4>\n" +
+  "        <h4>{{footer_shop_heading}}</h4>\n" +
   "        <ul>\n" +
-  "          <li><a href=\"/\">All products</a></li>\n" +
-  "          <li><a href=\"/collections\">Collections</a></li>\n" +
-  "          <li><a href=\"/categories\">Categories</a></li>\n" +
-  "          <li><a href=\"/?sort=new\">New arrivals</a></li>\n" +
-  "          <li><a href=\"/?sort=sale\">On sale</a></li>\n" +
-  "          <li><a href=\"/compare\">Compare</a></li>\n" +
-  "          <li><a href=\"/cart\">Cart</a></li>\n" +
+  "          <li><a href=\"/\">{{footer_shop_all}}</a></li>\n" +
+  "          <li><a href=\"/collections\">{{footer_shop_collections}}</a></li>\n" +
+  "          <li><a href=\"/categories\">{{footer_shop_categories}}</a></li>\n" +
+  "          <li><a href=\"/?sort=new\">{{footer_shop_new}}</a></li>\n" +
+  "          <li><a href=\"/?sort=sale\">{{footer_shop_sale}}</a></li>\n" +
+  "          <li><a href=\"/compare\">{{footer_shop_compare}}</a></li>\n" +
+  "          <li><a href=\"/cart\">{{footer_shop_cart}}</a></li>\n" +
   "        </ul>\n" +
   "      </div>\n" +
   "      <div class=\"site-footer__col\">\n" +
-  "        <h4>Framework</h4>\n" +
+  "        <h4>{{footer_framework_heading}}</h4>\n" +
   "        <ul>\n" +
-  "          <li><a href=\"https://github.com/blamejs/blamejs.shop\" rel=\"noopener\">Source on GitHub</a></li>\n" +
-  "          <li><a href=\"https://github.com/blamejs/blamejs\" rel=\"noopener\">blamejs core</a></li>\n" +
-  "          <li><a href=\"/SECURITY.md\">Security policy</a></li>\n" +
-  "          <li><a href=\"/CHANGELOG.md\">Changelog</a></li>\n" +
+  "          <li><a href=\"https://github.com/blamejs/blamejs.shop\" rel=\"noopener\">{{footer_framework_source}}</a></li>\n" +
+  "          <li><a href=\"https://github.com/blamejs/blamejs\" rel=\"noopener\">{{footer_framework_core}}</a></li>\n" +
+  "          <li><a href=\"/SECURITY.md\">{{footer_framework_security}}</a></li>\n" +
+  "          <li><a href=\"/CHANGELOG.md\">{{footer_framework_changelog}}</a></li>\n" +
   "        </ul>\n" +
   "      </div>\n" +
   "      <div class=\"site-footer__col\">\n" +
-  "        <h4>Operators</h4>\n" +
+  "        <h4>{{footer_operators_heading}}</h4>\n" +
   "        <ul>\n" +
-  "          <li><a href=\"/account\">Account</a></li>\n" +
-  "          <li><a href=\"/orders\">Orders</a></li>\n" +
-  "          <li><a href=\"/admin\">Admin</a></li>\n" +
-  "          <li><a href=\"mailto:hello@blamejs.shop\">Contact</a></li>\n" +
+  "          <li><a href=\"/account\">{{footer_operators_account}}</a></li>\n" +
+  "          <li><a href=\"/orders\">{{footer_operators_orders}}</a></li>\n" +
+  "          <li><a href=\"/admin\">{{footer_operators_admin}}</a></li>\n" +
+  "          <li><a href=\"mailto:hello@blamejs.shop\">{{footer_operators_contact}}</a></li>\n" +
   "        </ul>\n" +
   "      </div>\n" +
   "    </div>\n" +
+    "    RAW_CURRENCY_SWITCHER\n" +
+    "    RAW_LOCALE_SWITCHER\n" +
   "    <div class=\"site-footer__copy\">\n" +
-  "      <p>&copy; {{year}} {{shop_name}} — built on blamejs · Apache 2.0 licensed.</p>\n" +
+  "      <p>&copy; {{year}} {{shop_name}} — {{footer_copy_suffix}}</p>\n" +
   "      <ul>\n" +
-  "        <li><a href=\"/SECURITY.md\">Security</a></li>\n" +
-  "        <li><a href=\"/privacy\">Privacy</a></li>\n" +
-  "        <li><a href=\"/terms\">Terms</a></li>\n" +
-  "        <li><a href=\"/cookies\">Manage cookies</a></li>\n" +
+  "        <li><a href=\"/SECURITY.md\">{{footer_legal_security}}</a></li>\n" +
+  "        <li><a href=\"/privacy\">{{footer_legal_privacy}}</a></li>\n" +
+  "        <li><a href=\"/terms\">{{footer_legal_terms}}</a></li>\n" +
+  "        <li><a href=\"/cookies\">{{footer_legal_cookies}}</a></li>\n" +
   "      </ul>\n" +
   "    </div>\n" +
   "  </footer>\n" +
@@ -315,6 +331,77 @@ function _islandScript(name, opts) {
     (sri ? " integrity=\"" + sri + "\"" : "") + " defer" + policyAttr + "></script>";
 }
+// Multi-currency display switcher — a GET form in the footer listing the
+// operator's display currencies. Selecting one POSTs to /currency, which
+// sets the sealed `shop_ccy` cookie and redirects back. The currently
+// selected currency is pre-checked. Absent a presenter (feature not
+// wired) the whole block is empty so older deploys render unchanged.
+// `currencies` is the operator's allow-list; `selected` is the active
+// display currency; `note` is the "charged in <base>" disclosure (present
+// only when a non-base currency is active).
+function _buildCurrencySwitcher(opts) {
+  if (!opts || !Array.isArray(opts.currencies) || opts.currencies.length < 2) return "";
+  var esc = function (s) { return b.template.escapeHtml(String(s)); };
+  var selected = opts.selected || opts.currencies[0];
+  var options = opts.currencies.map(function (c) {
+    var sel = c === selected ? " selected" : "";
+    return "<option value=\"" + esc(c) + "\"" + sel + ">" + esc(c) + "</option>";
+  }).join("");
+  // GET-action would expose the choice in the URL + cache key; a POST
+  // keeps it in the sealed cookie and bypasses the edge cache via the
+  // 303 redirect. `redirect_to` carries the current path so the visitor
+  // lands back where they were. The form auto-submits via the island
+  // script when present; without JS the explicit "Set" button submits.
+  var noteHtml = opts.note
+    ? "<p class=\"currency-switcher__note\">" + esc(opts.note) + "</p>"
+    : "";
+  return "<div class=\"currency-switcher\">\n" +
+    "      <form class=\"currency-switcher__form\" method=\"post\" action=\"/currency\">\n" +
+    "        <input type=\"hidden\" name=\"redirect_to\" value=\"" + esc(opts.redirect_to || "/") + "\">\n" +
+    "        <label class=\"currency-switcher__label\" for=\"currency-select\">Display currency</label>\n" +
+    "        <select id=\"currency-select\" name=\"currency\" class=\"currency-switcher__select\" data-currency-switcher>" + options + "</select>\n" +
+    "        <button type=\"submit\" class=\"currency-switcher__btn\">Set</button>\n" +
+    "      </form>\n" +
+    "      " + noteHtml + "\n" +
+    "    </div>";
+}
+// The per-request price formatter a renderer uses for every displayed
+// price. When the route handler resolved a display-currency presenter and
+// threaded it in as `opts.format_price`, that's used (it converts base →
+// display currency + applies the display rounding rule). Otherwise the
+// renderer falls back to `pricing.format` — identical to pre-feature
+// behaviour, so an un-wired store or any renderer the route handler
+// didn't thread keeps formatting in the catalog currency.
+function _priceFormatter(opts) {
+  return (opts && typeof opts.format_price === "function") ? opts.format_price : pricing.format;
+}
+// Lift the currency-switcher fields off a renderer's opts so they reach
+// `_wrap` unchanged. Keeps the per-renderer `_wrap` call sites short.
+function _currencyWrapOpts(opts) {
+  return {
+    currency_options:     opts.currency_options,
+    currency_selected:    opts.currency_selected,
+    currency_note:        opts.currency_note,
+    currency_redirect_to: opts.currency_redirect_to,
+  };
+}
+// Default locale context — the English chrome baseline, `lang="en"`,
+// `dir="ltr"`, no switcher. Any page rendered without a resolved
+// `locale_ctx` (an internal renderer that doesn't thread one, a deploy
+// with no locale policy) falls back to this, so the chrome is always
+// complete English — never a raw `{{key}}` and never a 500. The cart
+// aria carries a literal `{count}` here because the baseline isn't tied
+// to a request; `_wrap` interpolates the real count below.
+var _DEFAULT_LOCALE_CTX = {
+  lang:        "en",
+  dir:         "ltr",
+  chrome:      translationsModule.chromeDefaults(),
+  switcher_html: "",
+};
 function _wrap(opts) {
   var themeCss = (opts && typeof opts.theme_css === "string" && opts.theme_css.length)
     ? opts.theme_css
@@ -333,10 +420,39 @@ function _wrap(opts) {
   var ogDescription = opts.og_description || "Open-source ecommerce framework built on blamejs. Server-rendered HTML, post-quantum crypto, zero npm runtime dependencies.";
   var ogImage       = opts.og_image       || "/assets/brand/logo.png";
   var ogUrl         = opts.og_url         || "";
-  return _render(LAYOUT, {
+  // Multi-currency display switcher — populated only when the operator
+  // configured >1 display currency (opts.currency_options). The block is
+  // empty otherwise, so a single-currency store renders unchanged.
+  var switcherHtml = _buildCurrencySwitcher({
+    currencies:  opts.currency_options,
+    selected:    opts.currency_selected,
+    note:        opts.currency_note,
+    redirect_to: opts.currency_redirect_to,
+  });
+  // Locale context — resolved per request by the storefront's locale
+  // middleware and read back from the async-local store; an explicit
+  // `opts.locale_ctx` (a renderer that threads its own) takes precedence.
+  // Absent both, the English baseline applies. The chrome strings are
+  // HTML-escaped by `_render` per substitution like every other
+  // placeholder; the switcher form is raw HTML (already escaped at its
+  // own build site) so it's spliced post-render like the body.
+  var storeCtx = _localeAls.getStore();
+  var localeCtx = (opts.locale_ctx && opts.locale_ctx.chrome)
+    ? opts.locale_ctx
+    : ((storeCtx && storeCtx.chrome) ? storeCtx : _DEFAULT_LOCALE_CTX);
+  var chrome = localeCtx.chrome;
+  var cartCount = opts.cart_count == null ? 0 : opts.cart_count;
+  // The cart aria-label carries the count: when the resolved string is
+  // the request-localised one it already has the count baked in; the
+  // English baseline default ships a literal `{count}` we fill here so
+  // the un-threaded fallback path still reads naturally.
+  var cartAria = String(chrome.nav_cart_aria).replace("{count}", String(cartCount));
+  var vars = {
     title:          opts.title,
     shop_name:      shopName,
-    cart_count:     opts.cart_count == null ? 0 : opts.cart_count,
+    cart_count:     cartCount,
     year:           _COPYRIGHT_YEAR,
     search_q:       opts.search_q == null ? "" : opts.search_q,
     theme_css:           themeCss,
@@ -345,9 +461,29 @@ function _wrap(opts) {
     og_description: ogDescription,
     og_image:       ogImage,
     og_url:         ogUrl,
+    lang:           localeCtx.lang || "en",
+    dir:            localeCtx.dir  || "ltr",
+    nav_cart_aria:  cartAria,
     body:           "RAW_BODY_PLACEHOLDER",
-  }).replace("RAW_CSS_INTEGRITY", themeCssIntegrity)
+  };
+  // Layer in every chrome string the LAYOUT references. `nav_cart_aria`
+  // is handled above (it needs the count interpolated); the two
+  // `locale_switcher_*` strings live only inside the switcher form
+  // (spliced via RAW_LOCALE_SWITCHER), not in the LAYOUT body — the
+  // strict `_render` refuses an unused placeholder, so they're skipped
+  // here.
+  var chromeKeys = Object.keys(chrome);
+  for (var ci = 0; ci < chromeKeys.length; ci += 1) {
+    var ck = chromeKeys[ci];
+    if (ck === "nav_cart_aria" || ck === "locale_switcher_label" || ck === "locale_switcher_submit") continue;
+    vars[ck] = chrome[ck];
+  }
+  return _render(LAYOUT, vars)
+    .replace("RAW_CSS_INTEGRITY", themeCssIntegrity)
     .replace("RAW_CONSENT_SCRIPT", _islandScript("consent.js", { id: "consent-island", policy: _activeConsentPolicy }))
+    .replace("RAW_CURRENCY_SWITCHER", switcherHtml)
+    .replace("RAW_LOCALE_SWITCHER", localeCtx.switcher_html || "")
     .replace("RAW_BODY_PLACEHOLDER", opts.body);
   // The body is RAW HTML (already rendered + escaped at the
   // per-fragment level). The placeholder swap is post-render so the
@@ -607,9 +743,10 @@ function renderHome(opts) {
   var cartCount = opts.cart_count == null ? 0 : opts.cart_count;
   var title     = opts.title || "Shop";
   var assetPrefix = opts.asset_prefix || "/assets/";
+  var fmt = _priceFormatter(opts);
   var products    = opts.products.map(function (p) {
     var priceStr = p.starting_price_minor != null
-      ? pricing.format(p.starting_price_minor, p.starting_price_currency || "USD")
+      ? fmt(p.starting_price_minor, p.starting_price_currency || "USD")
       : "—";
     // Hero image — first media row attached to the product (the
     // route handler bundles it in via `p.hero_media`). Image-less
@@ -684,13 +821,13 @@ function renderHome(opts) {
   // designed surface even when no products are loaded yet —
   // visitors land on the storefront shell, not a tech demo.
   var body = hero + catalog;
-  return _wrap({
+  return _wrap(Object.assign({
     title:      title,
     shop_name:  shopName,
     cart_count: cartCount,
     theme_css: opts.theme_css,
     body:       body,
-  });
+  }, _currencyWrapOpts(opts)));
 }
 // ---- search results -----------------------------------------------------
@@ -914,9 +1051,10 @@ function renderSearch(opts) {
       .replace("RAW_CLEAR", clearLink);
   } else {
     var assetPrefix = opts.asset_prefix || "/assets/";
+    var fmt = _priceFormatter(opts);
     var cards = products.map(function (p) {
       var priceStr = p.starting_price_minor != null
-        ? pricing.format(p.starting_price_minor, p.starting_price_currency || "USD")
+        ? fmt(p.starting_price_minor, p.starting_price_currency || "USD")
         : "—";
       var imageUrl = p.hero_media ? assetPrefix + p.hero_media.r2_key : null;
       var imageAlt = p.hero_media ? (p.hero_media.alt_text || p.title) : null;
@@ -932,14 +1070,14 @@ function renderSearch(opts) {
   } else {
     body = header + correctionHtml + chipsHtml + resultsInner;
   }
-  return _wrap({
+  return _wrap(Object.assign({
     title:      "Search",
     shop_name:  opts.shop_name || "blamejs.shop",
     cart_count: opts.cart_count,
     search_q:   opts.q,
     theme_css: opts.theme_css,
     body:       body,
-  });
+  }, _currencyWrapOpts(opts)));
 }
 // ---- product detail -----------------------------------------------------
@@ -2654,9 +2792,10 @@ function renderProduct(opts) {
   var shopName = opts.shop_name || "blamejs.shop";
   var cartCount = opts.cart_count == null ? 0 : opts.cart_count;
   var description = opts.product.description || "";
+  var fmt = _priceFormatter(opts);
   var rendered = variants.map(function (v) {
     var price = prices[v.id];
-    var priceStr = price ? pricing.format(price.amount_minor, price.currency) : "—";
+    var priceStr = price ? fmt(price.amount_minor, price.currency) : "—";
     var vTitle = v.title || (Object.keys(v.options || {}).map(function (k) { return v.options[k]; }).join(" / ") || "Default");
     return { id: v.id, sku: v.sku, title: vTitle, price: priceStr };
   });
@@ -2762,7 +2901,7 @@ function renderProduct(opts) {
   });
   jsonLd = (jsonLd || "") + breadcrumbJsonLd;
-  return _wrap({
+  return _wrap(Object.assign({
     title:          opts.product.title,
     shop_name:      shopName,
     cart_count:     cartCount,
@@ -2772,7 +2911,7 @@ function renderProduct(opts) {
     og_description: description || ("Browse " + opts.product.title + " on " + shopName + "."),
     og_image:       ogImage,
     body:           body + jsonLd,
-  });
+  }, _currencyWrapOpts(opts)));
 }
 // ---- cart --------------------------------------------------------------
@@ -3299,6 +3438,7 @@ function renderCart(opts) {
   // route handler bundles it in. Lines without an entry render with
   // a dashed-placeholder tile + the SKU as the fallback title.
   var lookup  = opts.product_lookup || {};
+  var fmt = _priceFormatter(opts);
   var rendered = lines.map(function (l) {
     var match  = lookup[l.variant_id] || null;
     var prod   = match && match.product;
@@ -3309,16 +3449,16 @@ function renderCart(opts) {
       id:             l.id,
       sku:            l.sku,
       qty:            String(l.qty),
-      unit:           pricing.format(l.unit_amount_minor, l.unit_currency),
-      total:          pricing.format(l.qty * l.unit_amount_minor, l.unit_currency),
+      unit:           fmt(l.unit_amount_minor, l.unit_currency),
+      total:          fmt(l.qty * l.unit_amount_minor, l.unit_currency),
       product_title:  (prod && prod.title) || l.sku,
       product_url:    prod ? ("/products/" + prod.slug) : "#",
       image_url:      imageUrl,
       image_alt:      imageAlt,
     };
   });
-  var subtotal = pricing.format(totals.subtotal_minor,    totals.currency);
-  var total    = pricing.format(totals.grand_total_minor, totals.currency);
+  var subtotal = fmt(totals.subtotal_minor,    totals.currency);
+  var total    = fmt(totals.grand_total_minor, totals.currency);
   if (opts.theme) {
     return opts.theme.render("cart", {
       title:          "Cart",
@@ -3364,13 +3504,13 @@ function renderCart(opts) {
       total:     total,
     }).replace("RAW_LINES", rows);
   }
-  return _wrap({
+  return _wrap(Object.assign({
     title:      "Cart",
     shop_name:  shopName,
     cart_count: lines.length,
     theme_css: opts.theme_css,
     body:       body,
-  });
+  }, _currencyWrapOpts(opts)));
 }
 // ---- admin landing (HTML — the rest of /admin/* is JSON API) ----------
@@ -3637,6 +3777,14 @@ var OAUTH_COOKIE_NAME = "shop_oauth";
 // Sealed so it can't be forged to mis-attribute a signup.
 var REFERRAL_COOKIE_NAME = "shop_ref";
+// Sealed cookie holding the visitor's chosen DISPLAY currency (ISO 4217).
+// Display-only: the cart / order / payment currency is unchanged — this
+// only selects which currency the price strings are rendered in. Sealed
+// so a tampered value can't smuggle a non-allow-listed code past the
+// reader; a garbage value reads as "unset" and the storefront renders in
+// the base currency. Path "/" so the choice persists across the catalog.
+var CURRENCY_COOKIE_NAME = "shop_ccy";
 // Shape of a valid session id — mirrors cart.js's SESSION_ID_RE.
 var SID_SHAPE_RE = /^[A-Za-z0-9_-]{16,64}$/;
@@ -3864,6 +4012,57 @@ function _uaClass(req) {
   return "unknown";
 }
+var CCY_SHAPE_RE = /^[A-Z]{3}$/;
+// The visitor's chosen display currency, or null. Sealed so the value
+// can't be forged; a missing / malformed / mis-shaped value reads as null
+// (→ base-currency display), never throws.
+function _readCurrencyCookie(req) {
+  var raw = _cookieJar().readSealed(req, CURRENCY_COOKIE_NAME);
+  if (raw === null || !CCY_SHAPE_RE.test(raw)) return null;
+  return raw;
+}
+function _setCurrencyCookie(res, code) {
+  var T = b.constants.TIME;
+  _cookieJar().writeSealed(res, CURRENCY_COOKIE_NAME, code, { expires: new Date(Date.now() + T.days(180)) });
+}
+function _clearCurrencyCookie(res) {
+  _cookieJar().clear(res, CURRENCY_COOKIE_NAME);
+}
+// ---- locale cookie -----------------------------------------------------
+//
+// The visitor's locale choice rides an UNSEALED cookie. Unlike the
+// session / auth / referral cookies, the locale carries no authority —
+// it only selects which operator-configured, server-resolved locale the
+// chrome renders in (every candidate is validated against the active
+// policy's supported list; an unknown / garbage value resolves to the
+// default locale). It is deliberately not vault-sealed so the value
+// resolves IDENTICALLY on both render substrates: the edge Worker has no
+// vault and couldn't unseal a sealed cookie, which would split the
+// edge/container resolution. The framework cookie primitive still
+// applies the RFC 6265 grammar, the `Secure` / `SameSite=Lax` / `Path=/`
+// invariants, and (in production) the cookie-prefix policy. A read still
+// shape-validates the value (BCP-47) before it reaches the resolver, so
+// a tampered cookie is dropped, never trusted.
+var LOCALE_COOKIE_NAME = "shop_locale";
+// BCP-47 envelope mirror of localeRouter.LOCALE_RE — the cookie value is
+// shape-checked before it's handed to the resolver so a hostile cookie
+// can't smuggle a non-tag string through.
+var LOCALE_COOKIE_RE = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{1,8})*$/;
+var LOCALE_COOKIE_MAX = 35;
+function _readLocaleCookie(req) {
+  var v = _cookieJar().read(req, LOCALE_COOKIE_NAME);
+  if (!v || typeof v !== "string" || v.length > LOCALE_COOKIE_MAX) return null;
+  return LOCALE_COOKIE_RE.test(v) ? v : null;
+}
+function _setLocaleCookie(res, locale) {
+  var T = b.constants.TIME;
+  _cookieJar().write(res, LOCALE_COOKIE_NAME, locale, { expires: new Date(Date.now() + T.days(365)) });
+}
 // ---- account-page renderers --------------------------------------------
 var ACCOUNT_LOGIN_PAGE =
@@ -4131,6 +4330,304 @@ function mount(router, deps) {
     return lines.length;
   }
+  // ---- multi-currency display -------------------------------------------
+  //
+  // Opt-in: wired only when the operator supplies `deps.currencyDisplay`
+  // (an FX-rate cache instance) AND `deps.currency_display_options` (the
+  // allow-list of display currencies, base first). Absent either, every
+  // render call gets an empty currency bundle and prices stay in the base
+  // currency exactly as before. `deps.currencyRounding` is optional —
+  // present, it applies the per-currency display-increment rule (CHF 0.05,
+  // SEK 0.10); absent, conversion uses banker's rounding only.
+  var _ccyBase    = (deps.currency_base || "USD").toUpperCase();
+  var _ccyOptions = Array.isArray(deps.currency_display_options)
+    ? deps.currency_display_options.map(function (c) { return String(c).toUpperCase(); })
+    : null;
+  // The feature mounts (the /currency route + the per-request bundle)
+  // whenever an FX instance is wired AND the boot-time allow-list names
+  // >1 currency. The per-request `currency_config` resolver can narrow /
+  // widen the live allow-list, but mounting is decided once at boot from
+  // the seed so a single-currency store never registers the route.
+  var _ccyEnabled = !!(deps.currencyDisplay && _ccyOptions && _ccyOptions.length > 1);
+  var _ccyConfig  = typeof deps.currency_config === "function" ? deps.currency_config : null;
+  // Per-request currency bundle merged into every render call's opts:
+  //   format_price          — sync base→display formatter (or pricing.format)
+  //   currency_options       — the switcher's option list
+  //   currency_selected      — the visitor's active display currency
+  //   currency_note          — "charged in <base>" disclosure (when converting)
+  //   currency_redirect_to   — the path the switcher returns the visitor to
+  // A read / conversion failure degrades to the base bundle (prices in the
+  // base currency) — a broken FX backend never breaks a priced page.
+  async function _currencyForReq(req) {
+    if (!_ccyEnabled) return {};
+    var path = String((req && req.url) || "/").split("?")[0] || "/";
+    // Resolve the live base + allow-list (config override, else the boot
+    // seed). A resolver failure falls back to the seed.
+    var base = _ccyBase;
+    var options = _ccyOptions;
+    if (_ccyConfig) {
+      try {
+        var cfg = await _ccyConfig();
+        if (cfg && cfg.base) base = cfg.base;
+        if (cfg && Array.isArray(cfg.options) && cfg.options.length) options = cfg.options;
+      } catch (_e) { /* keep the boot seed */ }
+    }
+    var bundle = {
+      currency_options:     options,
+      currency_selected:    base,
+      currency_redirect_to: path,
+    };
+    var chosen = _readCurrencyCookie(req);
+    try {
+      var presenter = await currencyDisplayModule.loadPresenter({
+        fx:              deps.currencyDisplay,
+        rounding:        deps.currencyRounding || null,
+        baseCurrency:    base,
+        displayCurrency: chosen,
+      });
+      // The presenter only activates when the chosen currency is in the
+      // live allow-list AND has a usable rate. A cookie naming a currency
+      // the operator since removed from the list resolves to base.
+      if (presenter && presenter.active && options.indexOf(presenter.displayCurrency) !== -1) {
+        bundle.format_price      = presenter.format;
+        bundle.currency_selected = presenter.displayCurrency;
+        if (presenter.note) bundle.currency_note = presenter.note;
+      }
+    } catch (_e) {
+      // FX / rounding backend unavailable — fall back to base display.
+    }
+    return bundle;
+  }
+  // ---- locale / i18n chrome ---------------------------------------------
+  //
+  // The storefront renders its UI chrome (nav, footer, search controls,
+  // newsletter band, locale switcher) localised per request. The locale
+  // is resolved the SAME way the edge Worker resolves it — cookie-first,
+  // then `?lang=`, then Accept-Language, then the policy default — so a
+  // visitor sees identical chrome whether the request is served at the
+  // edge or by this container. The strings come from `b.i18n` over the
+  // chrome catalog in `lib/translations.js`, layered with the operator's
+  // `ui`/`chrome` translation rows; a missing key falls back to the
+  // English baseline (never a raw key).
+  //
+  // `deps.chromeI18n` is the `b.i18n` instance (built once at boot via
+  // translations.createChromeI18n with the operator's overrides). When
+  // absent — a deploy with no locale policy seeded — the storefront
+  // renders the English baseline and shows no switcher. `deps.localeRouter`
+  // is the optional resolver; `deps.localeOptions` carries the default
+  // locale + the active-locale list the switcher renders.
+  var chromeI18n   = deps.chromeI18n   || null;
+  var localeRouter = deps.localeRouter || null;
+  var localeOptions = deps.localeOptions || {};
+  var defaultLocale = localeOptions.defaultLocale || translationsModule.BASELINE_LOCALE;
+  // Active locales the switcher offers: [{ tag, label }]. Operators
+  // declare the label (the autonym — "Deutsch", "Français") in
+  // localeOptions; absent that, the tag itself is the label.
+  var activeLocales = Array.isArray(localeOptions.locales) ? localeOptions.locales : [];
+  // Supported tags for the cookie/`?lang=` direct-match fast path.
+  var supportedTags = activeLocales.map(function (l) { return l.tag; });
+  // i18n RTL helper — `b.i18n.dir({ locale })` returns "rtl"/"ltr".
+  function _dirFor(locale) {
+    if (!chromeI18n) return "ltr";
+    try { return chromeI18n.dir({ locale: locale }); } catch (_e) { return "ltr"; }
+  }
+  // Per-locale resolved chrome string set, memoised — the strings don't
+  // change per request (only the cart count, interpolated at render
+  // time), so resolve each locale once.
+  var _chromeByLocale = Object.create(null);
+  function _chromeFor(locale) {
+    if (!chromeI18n) return translationsModule.chromeDefaults();
+    if (_chromeByLocale[locale]) return _chromeByLocale[locale];
+    var resolved = translationsModule.resolveChrome(chromeI18n, locale);
+    _chromeByLocale[locale] = resolved;
+    return resolved;
+  }
+  // Match a candidate tag against the supported set — the SAME rule the
+  // locale-router uses: a case-insensitive direct hit, then a primary-
+  // subtag match (`en-GB` candidate -> supported `en`). Returns the
+  // matched supported tag (catalog casing) or null. Kept in-process so
+  // resolution is synchronous — the middleware must seed the async-local
+  // store within one synchronous tick (an `await` inside the middleware
+  // would set the store in the awaited frame, not the request's).
+  var _supportedLowerToTag = Object.create(null);
+  for (var _si = 0; _si < supportedTags.length; _si += 1) {
+    _supportedLowerToTag[String(supportedTags[_si]).toLowerCase()] = supportedTags[_si];
+  }
+  function _matchSupported(candidate) {
+    if (!candidate) return null;
+    var lowered = String(candidate).toLowerCase();
+    if (Object.prototype.hasOwnProperty.call(_supportedLowerToTag, lowered)) {
+      return _supportedLowerToTag[lowered];
+    }
+    var primary = lowered.split("-")[0];
+    if (Object.prototype.hasOwnProperty.call(_supportedLowerToTag, primary)) {
+      return _supportedLowerToTag[primary];
+    }
+    return null;
+  }
+  // Parse an Accept-Language header into a q-sorted list of tags. A
+  // garbage header yields an empty list (the resolver then falls to the
+  // default). Mirrors the locale-router's parser shape.
+  function _parseAcceptLanguage(raw) {
+    if (typeof raw !== "string" || !raw.length || raw.length > 4096) return [];
+    var out = [];
+    var parts = raw.split(",");
+    for (var i = 0; i < parts.length; i += 1) {
+      var part = parts[i].trim();
+      if (!part) continue;
+      var semi = part.indexOf(";");
+      var tag = (semi === -1 ? part : part.slice(0, semi)).trim();
+      var q = 1.0;
+      if (semi !== -1) {
+        var m = /q=([0-9.]+)/.exec(part.slice(semi + 1));
+        if (m) { var n = parseFloat(m[1]); if (isFinite(n) && n >= 0 && n <= 1) q = n; }
+      }
+      if (tag === "*" || !LOCALE_COOKIE_RE.test(tag) || tag.length > LOCALE_COOKIE_MAX) continue;
+      out.push({ tag: tag, q: q, order: i });
+    }
+    out.sort(function (a, c) { return a.q !== c.q ? c.q - a.q : a.order - c.order; });
+    return out;
+  }
+  // Resolve the request's locale synchronously, in the SAME precedence
+  // the edge Worker / locale-router use: an explicit `?lang=` choice,
+  // then the persisted cookie, then the browser's Accept-Language list,
+  // then the policy default. Only a tag that resolves into the active
+  // supported set is honoured; anything else (unknown code, garbage
+  // cookie) falls through to the default. Never throws.
+  function _resolveRequestLocale(req) {
+    var queryLocale = null;
+    if (req.query && typeof req.query.lang === "string" &&
+        LOCALE_COOKIE_RE.test(req.query.lang) && req.query.lang.length <= LOCALE_COOKIE_MAX) {
+      queryLocale = req.query.lang;
+    }
+    var qMatch = _matchSupported(queryLocale);
+    if (qMatch) return qMatch;
+    var cMatch = _matchSupported(_readLocaleCookie(req));
+    if (cMatch) return cMatch;
+    var alHeader = req.headers && (req.headers["accept-language"] || req.headers["Accept-Language"]);
+    var alList = _parseAcceptLanguage(alHeader);
+    for (var i = 0; i < alList.length; i += 1) {
+      var alMatch = _matchSupported(alList[i].tag);
+      if (alMatch) return alMatch;
+    }
+    return defaultLocale;
+  }
+  // Best-effort: record the resolution in the locale-router's audit log
+  // (locale_resolutions_log). Fire-and-forget — never awaited, never
+  // blocks the request, never throws into the hot path. Wired only when
+  // the locale-router is present.
+  function _logResolution(req, locale) {
+    if (!localeRouter || typeof localeRouter.resolveLocale !== "function") return;
+    try {
+      var hostHeader = (req.headers && (req.headers.host || req.headers.Host)) || "localhost";
+      var p = localeRouter.resolveLocale({
+        request: {
+          host:            String(hostHeader),
+          path:            req.pathname || (String(req.url || "/").split("?")[0]) || "/",
+          cookie_locale:   locale,
+          accept_language: undefined,
+        },
+      });
+      if (p && typeof p.then === "function") p.then(function () {}, function () {});
+    } catch (_e) { /* drop-silent — the audit log is non-critical */ }
+  }
+  // Build the server-rendered locale switcher form. A GET form (works
+  // with JS off) that submits the chosen `lang` to /locale, which sets
+  // the cookie and 303-redirects back to the page the visitor was on
+  // (validated same-origin). Rendered only when there's more than one
+  // active locale to choose between.
+  function _switcherHtml(req, activeLocale, chrome) {
+    if (activeLocales.length < 2) return "";
+    var esc = b.template.escapeHtml;
+    // `to` carries the current path+query so the redirect lands the
+    // visitor back where they were. Validated server-side in /locale.
+    var here = req.pathname || (String(req.url || "/").split("?")[0]) || "/";
+    var options = activeLocales.map(function (l) {
+      var sel = l.tag === activeLocale ? " selected" : "";
+      return "<option value=\"" + esc(l.tag) + "\"" + sel + ">" + esc(l.label || l.tag) + "</option>";
+    }).join("");
+    return "" +
+      "    <form class=\"locale-switcher\" method=\"get\" action=\"/locale\">\n" +
+      "      <label class=\"locale-switcher__label\" for=\"locale-switcher-select\">" + esc(chrome.locale_switcher_label) + "</label>\n" +
+      "      <input type=\"hidden\" name=\"to\" value=\"" + esc(here) + "\">\n" +
+      "      <select id=\"locale-switcher-select\" class=\"locale-switcher__select\" name=\"lang\">" + options + "</select>\n" +
+      "      <button class=\"locale-switcher__submit\" type=\"submit\">" + esc(chrome.locale_switcher_submit) + "</button>\n" +
+      "    </form>\n";
+  }
+  // The per-request locale context the layout reads via the async-local
+  // store. Resolved SYNCHRONOUSLY so the middleware can seed the store
+  // within one tick. Shape: { locale, lang, dir, chrome, switcher_html }.
+  // Never throws — any failure falls back to the default locale.
+  function _localeCtx(req) {
+    var locale = defaultLocale;
+    try { locale = _resolveRequestLocale(req); } catch (_e) { locale = defaultLocale; }
+    var chrome = _chromeFor(locale);
+    return {
+      locale:        locale,
+      lang:          locale,
+      dir:           _dirFor(locale),
+      chrome:        chrome,
+      switcher_html: _switcherHtml(req, locale, chrome),
+    };
+  }
+  // Seed the per-request locale context into the async-local store so
+  // every `_wrap` on this request reads the resolved chrome. The
+  // middleware is SYNCHRONOUS: `AsyncLocalStorage.enterWith` only
+  // propagates to the request's downstream handlers when it runs in the
+  // same synchronous tick the router awaits — an `await` inside the
+  // middleware would scope the store to the awaited frame, not the
+  // request. Resolution is best-effort (falls back to the English
+  // baseline). The audit-log write is fired off without awaiting so it
+  // never blocks the render. Only mounted when the router exposes `.use`.
+  if (typeof router.use === "function") {
+    router.use(function localeMiddleware(req, _res, next) {
+      try {
+        var ctx = _localeCtx(req);
+        _localeAls.enterWith(ctx);
+        _logResolution(req, ctx.locale);
+      } catch (_e) { /* drop-silent — baseline applies */ }
+      next();
+    });
+  }
+  // Persist a locale choice. A GET form (works with JS off) from the
+  // footer switcher submits `lang` (the chosen tag) + `to` (the path to
+  // return to). We validate the tag against the active locale set, set
+  // the unsealed `shop_locale` cookie, and 303-redirect to the `to`
+  // path — refusing anything that isn't a same-origin absolute path so
+  // the redirect can't be turned into an open-redirect. Unknown / bad
+  // `lang` still redirects (to "/" or the validated `to`) without
+  // setting a cookie, so a hostile link can't 500 the route.
+  router.get("/locale", function (req, res) {
+    var q = req.query || {};
+    var to = (typeof q.to === "string") ? q.to : "/";
+    // Same-origin path only: must start with a single "/" (not "//" — a
+    // protocol-relative URL — and not a scheme). Anything else falls
+    // back to the home path.
+    if (to.charAt(0) !== "/" || to.charAt(1) === "/" || to.indexOf("\\") !== -1 || /[\x00-\x1f\x7f]/.test(to)) {
+      to = "/";
+    }
+    var lang = (typeof q.lang === "string") ? q.lang : "";
+    if (lang && LOCALE_COOKIE_RE.test(lang) && lang.length <= LOCALE_COOKIE_MAX && supportedTags.indexOf(lang) !== -1) {
+      _setLocaleCookie(res, lang);
+    }
+    res.status(303);
+    res.setHeader && res.setHeader("location", to);
+    return res.end ? res.end() : res.send("");
+  });
   // Absolute shareable referral link for a code. Prefers the operator's
   // configured origin (deps.shop_origin / SHOP_ORIGIN) so the link is
   // stable across the edge/container split; falls back to the request's
@@ -4254,8 +4751,9 @@ function mount(router, deps) {
   // reachable via multiple variant SKUs. Drop-silent on a primitive
   // error so a bundles read failure can't 500 the PDP — the rail just
   // doesn't render (mirrors the reviews/Q&A degrade-to-empty stance).
-  async function _resolveBundleOffers(variantSkus, currency) {
+  async function _resolveBundleOffers(variantSkus, currency, fmtPrice) {
     if (!deps.bundles) return [];
+    var fmt = typeof fmtPrice === "function" ? fmtPrice : pricing.format;
     var seen = Object.create(null);
     var offers = [];
     try {
@@ -4300,9 +4798,9 @@ function mount(router, deps) {
             bundle_sku:         bundle.bundle_sku,
             title:              bundle.title,
             components:         componentsOut,
-            list_total_str:     pricing.format(listMinor, cur),
-            amount_str:         pricing.format(amountMinor, cur),
-            discount_str:       discountMinor > 0 ? pricing.format(discountMinor, cur) : null,
+            list_total_str:     fmt(listMinor, cur),
+            amount_str:         fmt(amountMinor, cur),
+            discount_str:       discountMinor > 0 ? fmt(discountMinor, cur) : null,
             available:          available,
             unavailable_reason: available
               ? null
@@ -4326,8 +4824,9 @@ function mount(router, deps) {
   // that quantity. Rows read as ascending ranges ("1–4", "5–9",
   // "10+"). Returns [] when no active sku-scoped tier set exists.
   // Drop-silent on a read failure so the PDP still renders.
-  async function _resolveQtyBreaks(sku, unitMinor, currency) {
+  async function _resolveQtyBreaks(sku, unitMinor, currency, fmtPrice) {
     if (!deps.quantityDiscounts || unitMinor == null) return [];
+    var fmt = typeof fmtPrice === "function" ? fmtPrice : pricing.format;
     var breakdown;
     try {
       breakdown = await deps.quantityDiscounts.tierBreakdown({
@@ -4350,7 +4849,7 @@ function mount(router, deps) {
     if (sorted[0].min_quantity > 1) {
       out.push({
         label:    "1–" + (sorted[0].min_quantity - 1),
-        unit_str: pricing.format(unitMinor, currency),
+        unit_str: fmt(unitMinor, currency),
       });
     }
     for (var i = 0; i < sorted.length; i += 1) {
@@ -4358,7 +4857,7 @@ function mount(router, deps) {
       var next = sorted[i + 1];
       var label = next ? (t.min_quantity + "–" + (next.min_quantity - 1)) : (t.min_quantity + "+");
       var unit = t.sample_discounted_unit_minor != null ? t.sample_discounted_unit_minor : unitMinor;
-      out.push({ label: label, unit_str: pricing.format(unit, currency) });
+      out.push({ label: label, unit_str: fmt(unit, currency) });
     }
     return out;
   }
@@ -4398,7 +4897,35 @@ function mount(router, deps) {
     return out;
   }
-  router.get("/", async function (_req, res) {
+  // POST /currency — set (or clear) the visitor's display-currency choice.
+  // Registered only when multi-currency display is wired. Display-only:
+  // this NEVER touches the cart / order / payment currency — it sets the
+  // sealed `shop_ccy` cookie that selects which currency price strings are
+  // rendered in, then 303-redirects back so the new choice takes effect on
+  // the next render. A choice outside the operator's allow-list clears the
+  // cookie (→ base-currency display) rather than persisting a code the
+  // switcher would never offer.
+  if (_ccyEnabled) {
+    router.post("/currency", function (req, res) {
+      var body = req.body || {};
+      var chosen = typeof body.currency === "string" ? body.currency.toUpperCase() : "";
+      // `redirect_to` is constrained to a same-origin path (leading single
+      // slash, no scheme / host / protocol-relative `//`) so the switcher
+      // can't be turned into an open redirect.
+      var rawTo = typeof body.redirect_to === "string" ? body.redirect_to : "/";
+      var to = (/^\/(?!\/)/.test(rawTo)) ? rawTo : "/";
+      if (chosen === _ccyBase || _ccyOptions.indexOf(chosen) === -1) {
+        _clearCurrencyCookie(res);
+      } else {
+        _setCurrencyCookie(res, chosen);
+      }
+      res.status(303);
+      res.setHeader && res.setHeader("location", to);
+      return res.end ? res.end() : res.send("");
+    });
+  }
+  router.get("/", async function (req, res) {
     var page = await deps.catalog.products.list({ status: "active", limit: 24 });
     // Best-effort "starting price" + "hero media" lookup. Each
     // product on the home grid carries its first variant's USD
@@ -4423,7 +4950,8 @@ function mount(router, deps) {
         hero_media:              heroMedia,
       }));
     }
-    var html = renderHome({ products: products, shop_name: shopName, theme: theme });
+    var ccy = await _currencyForReq(req);
+    var html = renderHome(Object.assign({ products: products, shop_name: shopName, theme: theme }, ccy));
     _send(res, 200, html);
   });
@@ -4553,7 +5081,8 @@ function mount(router, deps) {
         cartCount = lines.length;
       }
     }
-    _send(res, 200, renderSearch({
+    var ccy = await _currencyForReq(req);
+    _send(res, 200, renderSearch(Object.assign({
       q:               q,
       products:        products,
       facets:          facetGroups,
@@ -4561,7 +5090,7 @@ function mount(router, deps) {
       corrected_query: correctedQ,
       shop_name:       shopName,
       cart_count:      cartCount,
-    }));
+    }, ccy)));
   });
   router.get("/products/:slug", async function (req, res) {
@@ -4654,14 +5183,16 @@ function mount(router, deps) {
     // so the buy path renders regardless. The quantity-break table is
     // built against the first variant's list price — the band a shopper
     // sees on the PDP matches what the cart charges at that quantity.
+    var ccy = await _currencyForReq(req);
+    var ccyFmt = ccy.format_price || null;
     var variantSkus = variants.map(function (v) { return v.sku; });
-    var bundleOffers = await _resolveBundleOffers(variantSkus, "USD");
+    var bundleOffers = await _resolveBundleOffers(variantSkus, "USD", ccyFmt);
     var firstVariant = variants[0] || null;
     var firstPrice = firstVariant ? prices[firstVariant.id] : null;
     var qtyBreaks = firstVariant && firstPrice
-      ? await _resolveQtyBreaks(firstVariant.sku, firstPrice.amount_minor, firstPrice.currency)
+      ? await _resolveQtyBreaks(firstVariant.sku, firstPrice.amount_minor, firstPrice.currency, ccyFmt)
       : [];
-    var html = renderProduct({
+    var html = renderProduct(Object.assign({
       product:        product,
       variants:       variants,
       prices:         prices,
@@ -4677,7 +5208,7 @@ function mount(router, deps) {
       shop_name:      shopName,
       cart_count:     cartCount,
       theme:          theme,
-    });
+    }, ccy));
     _send(res, 200, html);
   });
@@ -4992,19 +5523,20 @@ function mount(router, deps) {
   }
   router.get("/cart", async function (req, res) {
+    var ccy = await _currencyForReq(req);
     var sid = _readSidCookie(req);
     if (!sid) {
-      return _send(res, 200, renderCart({
+      return _send(res, 200, renderCart(Object.assign({
         lines: [], totals: { subtotal_minor: 0, grand_total_minor: 0, currency: "USD" },
         shop_name: shopName, theme: theme,
-      }));
+      }, ccy)));
     }
     var c = await deps.cart.bySession(sid);
     if (!c) {
-      return _send(res, 200, renderCart({
+      return _send(res, 200, renderCart(Object.assign({
         lines: [], totals: { subtotal_minor: 0, grand_total_minor: 0, currency: "USD" },
         shop_name: shopName, theme: theme,
-      }));
+      }, ccy)));
     }
     var rawLines = await deps.cart.listLines(c.id);
     // Reapply the active quantity-break for each line at its current
@@ -5031,14 +5563,14 @@ function mount(router, deps) {
         hero_media: media.length ? media[0] : null,
       };
     }
-    _send(res, 200, renderCart({
+    _send(res, 200, renderCart(Object.assign({
       lines:           lines,
       totals:          totals,
       product_lookup:  productLookup,
       can_save:        !!(deps.saveForLater && deps.customers),
       shop_name:       shopName,
       theme:           theme,
-    }));
+    }, ccy)));
   });
   // ---- checkout flow -------------------------------------------------