@pithy-sh/i18n 0.13.0 → 0.15.0

package/dist/react/useNegotiatedLocale.js

@@ -1,10 +1,11 @@
 // SPDX-FileCopyrightText: 2026 Pithy
 // SPDX-License-Identifier: MIT
 import { resolveBrowserLocale } from "../resolve/browser.js";
-import { applyDocumentLocale, readBrowserSignals, rememberBrowserLocale } from "../browser/signals.js";
 import { loadKitCatalog } from "../catalogs/browser.js";
+import { browserLocaleEnvironment } from "./browserLocaleEnvironment.js";
 import { localeDirection } from "@pithy-sh/core/src/i18n/locale";
-import { useCallback, useEffect, useMemo, useState } from "react";
+import { useRead } from "@pithy-sh/ui-core/src/read";
+import { useCallback, useMemo, useState } from "react";
 //#region src/react/useNegotiatedLocale.ts
 /**
 * What `locale` answers, and what nothing writes to the document, when the capability is not composed.
@@ -15,8 +16,8 @@ import { useCallback, useEffect, useMemo, useState } from "react";
 */
 const UNNEGOTIATED_LOCALE = "en";
 /**
-* Negotiate the reader's locale in the browser, load that locale's catalog, and keep the document in
-* step.
+* Negotiate the reader's locale, load that locale's catalog, and keep the platform in step: the document in a
+* browser, `I18nManager` on React Native, through `options.environment`.
 *
 * **It takes what a browser holds.** `projection` is `virtual:pithy/i18n` — locale metadata and nothing
 * else — so a screen reads the chain order **this project** configured rather than one the front end
@@ -39,50 +40,41 @@ const UNNEGOTIATED_LOCALE = "en";
 function useNegotiatedLocale(projection, options = {}) {
 	const config = projection.enabled ? projection : null;
 	const enabled = projection.enabled;
-	const resolved = useMemo(() => config === null ? null : resolveBrowserLocale({
-		...readBrowserSignals(config),
+	const environment = options.environment ?? browserLocaleEnvironment;
+	const signals = environment.useSignals(config);
+	const pending = enabled && signals === void 0;
+	const resolved = useMemo(() => config === null || signals === void 0 ? null : resolveBrowserLocale({
+		...signals,
 		account: options.account
-	}, config), [config, options.account]);
+	}, config), [
+		config,
+		signals,
+		options.account
+	]);
 	const [chosen, setChosen] = useState(null);
-	const [kit, setKit] = useState(null);
 	const locale = chosen ?? resolved?.catalogLocale ?? UNNEGOTIATED_LOCALE;
 	const formattingLocale = chosen ?? resolved?.formattingLocale ?? UNNEGOTIATED_LOCALE;
 	const defaultLocale = config?.defaultLocale ?? UNNEGOTIATED_LOCALE;
-	useEffect(() => {
-		if (!enabled) return;
-		let live = true;
-		loadKitCatalog(locale).then((catalog) => {
-			if (live) setKit({
-				locale,
-				catalog
-			});
-		}).catch(() => {
-			if (live) setKit({
-				locale,
-				catalog: {}
-			});
-		});
-		return () => {
-			live = false;
-		};
-	}, [enabled, locale]);
-	const direction = localeDirection(locale);
-	useEffect(() => {
-		if (!enabled) return;
-		applyDocumentLocale(locale, direction);
-	}, [
-		enabled,
+	const kit = useRead(`catalog:${locale}`, async () => ({
 		locale,
-		direction
-	]);
+		catalog: await loadKitCatalog(locale).catch(() => ({}))
+	}), { skip: !enabled || pending }).value;
+	const direction = localeDirection(locale);
+	const reloadRequired = environment.useApply(enabled && !pending, locale, direction);
 	const persist = options.persist;
 	const choose = useCallback((next) => {
 		if (config === null) return;
 		if (!config.supportedLocales.includes(next)) return;
-		rememberBrowserLocale(next, config);
+		try {
+			Promise.resolve(environment.remember(next, config)).catch(() => void 0);
+		} catch {}
 		setChosen(next);
 		Promise.resolve(persist?.(next)).catch(() => void 0);
-	}, [config, persist]);
+	}, [
+		config,
+		persist,
+		environment
+	]);
 	return {
 		source: useMemo(() => {
 			if (kit?.locale !== locale) return null;
@@ -103,7 +95,8 @@ function useNegotiatedLocale(projection, options = {}) {
 			defaultLocale
 		]),
 		locale,
-		choose
+		choose,
+		reloadRequired
 	};
 }
 //#endregion

package/dist/resolve/browser.d.ts

@@ -60,7 +60,8 @@ export interface BrowserLocaleSignals {
 /**
  * The reader's locale, by the configured browser chain.
  *
- * Default order: `?lang=`, the account, local storage, the server's answer, the project default.
+ * Default order: `?lang=`, the account, local storage, the browser's own languages, the server's answer,
+ * the project default.
  *
  * **The account outranks the device.** `pithy_auth_users.locale` is where a person's locale lives, so a
  * signed-in reader who picks a language on one device must not silently be reading another language on

package/dist/resolve/browser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/resolve/browser.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAA4C,MAAM,SAAS,CAAC;AAExG;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sGAAsG;IACtG,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAuBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,EAAE,CAE/E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9C,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,CAIxG"}
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/resolve/browser.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,cAAc,EAA4C,MAAM,SAAS,CAAC;AAExG;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sGAAsG;IACtG,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAuBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,eAAe,EAAE,CAE/E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9C,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,GAAG,cAAc,CAIxG"}

package/dist/resolve/browser.js

@@ -35,7 +35,8 @@ function recognizedResolvers(names) {
 /**
 * The reader's locale, by the configured browser chain.
 *
-* Default order: `?lang=`, the account, local storage, the server's answer, the project default.
+* Default order: `?lang=`, the account, local storage, the browser's own languages, the server's answer,
+* the project default.
 *
 * **The account outranks the device.** `pithy_auth_users.locale` is where a person's locale lives, so a
 * signed-in reader who picks a language on one device must not silently be reading another language on

package/dist/version.generated.d.ts

@@ -3,5 +3,5 @@
 /** This package's npm name — the join key against a release feed. */
 export declare const PACKAGE_NAME = "@pithy-sh/i18n";
 /** This package's version, stamped from its own package.json at generation time. */
-export declare const PACKAGE_VERSION = "0.13.0";
+export declare const PACKAGE_VERSION = "0.15.0";
 //# sourceMappingURL=version.generated.d.ts.map

package/dist/version.generated.js

@@ -4,6 +4,6 @@
 /** This package's npm name — the join key against a release feed. */
 const PACKAGE_NAME = "@pithy-sh/i18n";
 /** This package's version, stamped from its own package.json at generation time. */
-const PACKAGE_VERSION = "0.13.0";
+const PACKAGE_VERSION = "0.15.0";
 //#endregion
 export { PACKAGE_NAME, PACKAGE_VERSION };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pithy-sh/i18n",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -27,7 +27,7 @@
   },
   "scripts": {
     "build": "tsdown && tsc -p tsconfig.build.json && bun ../../tooling/build/src/stampDeclarations.ts",
-    "typecheck": "bun check -p tsconfig.json && bun check -p tsconfig.browser.json",
+    "typecheck": "bun check -p tsconfig.json && bun check -p tsconfig.browser.json && bun check -p tsconfig.native.json",
     "test": "vitest run",
     "test:node": "vitest run --project=node --project=dom",
     "test:workers": "vitest run --project=workers",
@@ -35,14 +35,27 @@
     "reset": "bun run clean && rm -rf node_modules"
   },
   "peerDependencies": {
-    "@pithy-sh/core": "^0.13.0",
+    "@pithy-sh/core": "^0.15.0",
+    "@pithy-sh/ui-core": "^0.1.0",
+    "@react-native-async-storage/async-storage": "^2.2.0",
+    "expo-localization": "^57.0.2",
     "hono": "^4.13.2",
     "react": "^19.0.0",
+    "react-native": "^0.86.3",
     "zod": "^4.4.0"
   },
   "peerDependenciesMeta": {
+    "@react-native-async-storage/async-storage": {
+      "optional": true
+    },
+    "expo-localization": {
+      "optional": true
+    },
     "react": {
       "optional": true
+    },
+    "react-native": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -51,14 +64,18 @@
     "@pithy-sh/core": "workspace:*",
     "@pithy-sh/payments": "workspace:*",
     "@pithy-sh/tsconfig": "workspace:*",
+    "@pithy-sh/ui-core": "workspace:*",
+    "@react-native-async-storage/async-storage": "2.2.0",
     "@types/node": "^22.15.0",
     "@types/react": "^19.2.17",
     "@types/react-dom": "^19.2.3",
     "@vitest/coverage-v8": "^4.1.0",
+    "expo-localization": "57.0.2",
     "happy-dom": "^20.11.1",
     "hono": "^4.13.2",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
+    "react-native": "0.86.3",
     "tsdown": "^0.23.0",
     "typescript": "^7.0.2",
     "vitest": "^4.1.0",

package/src/capability.ts

@@ -47,7 +47,7 @@ export interface I18nCapability extends Capability {
  * 1. the adopter's catalog for the resolved locale,
  * 2. the adopter's catalog for the project default,
  * 3. **the kit's translation** for the resolved locale — the `es` this package ships,
- * 4. every composed capability's English, for the resolved locale,
+ * 4. every composed capability's own copy for the resolved locale,
  * 5. every composed capability's copy for the project default,
  * 6. and their English, which is the language the kit is written in.
  *
@@ -69,13 +69,9 @@ export function i18n(config: I18nConfigInput = {}): I18nCapability {
     KIT_CATALOGS[locale],
     composedMessages[locale],
     composedMessages[resolved.defaultLocale],
-    // **The source language, explicitly, and last.** This was `catalogFor(composedMessages, default)`,
-    // which answers `catalogs[default] ?? catalogs.en` — so it only ever reached English because no
-    // capability had contributed a non-`en` locale. `@pithy-sh/email` does now (#442), which made the
-    // fallback silently stop existing for any project whose `defaultLocale` is not `en`: layers 5 and
-    // 6 collapsed into the same Spanish map, and an adopter's own English-only key rendered as its raw
-    // key on a Spanish page. English is the language the kit is written in, so it is a layer of its
-    // own rather than something another layer resolves to by coincidence.
+    // **The source language, explicitly, and last.** A capability may contribute a non-`en` locale, so
+    // the default's catalog is not English for a project whose `defaultLocale` is not `en`. English is
+    // the language the kit is written in, so it is a layer of its own.
     composedMessages[DEFAULT_LOCALE],
   ];
 
@@ -84,7 +80,7 @@ export function i18n(config: I18nConfigInput = {}): I18nCapability {
     // The package this capability ships in and the version it ships at, both stamped by
     // `scripts/stampVersions.ts` — a Worker cannot read its own package.json. Reported per capability by
     // the control-plane manifest, and reported together: a release feed is keyed by package name, so the
-    // version alone leaves a client guessing the key (#626).
+    // version alone leaves a client guessing the key.
     version: PACKAGE_VERSION,
     package: PACKAGE_NAME,
     config: I18nConfig,

package/src/catalogs/es/errors.ts

@@ -52,6 +52,7 @@ export const esErrors: MessageCatalog = {
   // not here: a translating client renders this sentence and the screen shows the reason beside it.
   "auth/account_suspended": "Tu cuenta está suspendida.",
   "auth/account_deleted": "Tu cuenta está eliminada. Aún se puede recuperar durante un tiempo.",
+  "auth/handoff_invalid": "Ese código de acceso ya se usó o ha caducado. Vuelve a iniciar sesión.",
   "core/not_found": "No existe el recurso solicitado.",
   "core/conflict": "La solicitud entra en conflicto con el estado actual.",
   "rate_limit/exceeded": "Demasiadas solicitudes. Inténtalo más tarde.",
@@ -65,6 +66,8 @@ export const esErrors: MessageCatalog = {
   "core/unknown_workflow": "La operación solicitada no existe.",
   "core/workflow_failed": "La operación no se ha completado.",
   "core/webhook_unverified": "La firma de la notificación no es válida.",
+  "core/presence_ticket_invalid": "Ese pase de presencia no es válido.",
+  "core/presence_room_full": "La sala está llena.",
 
   // Cloudflare REST. Naming the provider is safe — it is the adopter's own account, not our infrastructure.
   "cloudflare/not_configured": "Este servicio no está disponible ahora.",
@@ -130,6 +133,9 @@ export const esErrors: MessageCatalog = {
   "ledger/insufficient_funds": "El saldo no es suficiente.",
   "ledger/hold_not_open": "Esa reserva de saldo ya está resuelta.",
   "ledger/invalid_amount": "El importe debe ser un número entero positivo.",
+  "ledger/entry_not_found": "Ese movimiento no existe.",
+  "ledger/entry_not_reversible": "Ese movimiento no se puede revertir.",
+  "ledger/ref_conflict": "Esa referencia ya pertenece a otro movimiento.",
 
   // Rating.
   "rating/unknown_algorithm": "Ese algoritmo de valoración no existe.",
@@ -139,6 +145,16 @@ export const esErrors: MessageCatalog = {
   "rating/pool_not_found": "Ese grupo de valoración no existe.",
   "rating/record_forbidden": "No puedes registrar resultados valorados.",
 
+  // Consent.
+  "consent/unknown_purpose": "Ese propósito de consentimiento no existe.",
+  "consent/stale_notice": "El aviso ha cambiado. Vuelve a leerlo antes de aceptar.",
+  "consent/method_below_minimum": "Este consentimiento necesita una firma más fuerte.",
+  "consent/withdrawal_below_grant": "Para retirar este consentimiento, fírmalo igual que lo diste.",
+  "consent/evidence_missing": "Falta la firma o el documento que este consentimiento necesita.",
+  "consent/expiry_passed": "Esa fecha de caducidad ya ha pasado.",
+  "consent/document_not_found": "Ese documento firmado no existe.",
+  "consent/evidence_store_missing": "No se pudo guardar la firma.",
+
   // Matchmaking.
   "matchmaking/room_not_found": "Ese código no corresponde a ninguna sala abierta.",
   "matchmaking/room_full": "Esa sala ya no admite más jugadores.",

package/src/catalogs/es/screens.ts

@@ -36,7 +36,7 @@ export const esScreens: MessageCatalog = {
   "auth/sign_in.provider.label": "Continuar con {provider}",
   "auth/sign_in.provider_unconfigured": "{provider} no está configurado aquí. Usa el enlace.",
   "auth/sign_in.provider_silent": "{provider} no respondió. Usa el enlace.",
-  // Ni una palabra sobre si la cuenta existe (#625). El servidor manda un solo código para "tienes
+  // Ni una palabra sobre si la cuenta existe. El servidor manda un solo código para "tienes
   // cuenta y este proveedor no está conectado a ella" y para "no tienes ninguna", así que una frase que
   // eligiera una de las dos devolvería, escrita, el oráculo que el Worker acaba de cerrar en la cabecera.
   "auth/sign_in.refused.title": "{provider} no te ha dejado entrar.",
@@ -65,6 +65,12 @@ export const esScreens: MessageCatalog = {
   "auth/otp.failed": "Ese código no funcionó. Inténtalo otra vez o pide uno nuevo.",
   "auth/otp.submit": "Entrar",
   "auth/otp.resend": "Enviar un código nuevo",
+  // The native sign-in screen on a phone with no universal link, where email signs in with a code.
+  "auth/otp.ask.submit": "Envíame un código",
+  "auth/otp.ask.provider_unconfigured": "{provider} no está configurado aquí. Usa un código.",
+  "auth/otp.ask.provider_silent": "{provider} no respondió. Usa un código.",
+  "auth/otp.ask.signup_email_only":
+    "Te enviamos un código y se crea una. Los botones de arriba solo entran en cuentas que ya existen.",
 
   // ── auth: the magic link's landing screen ──────────────────────────────────
   "auth/callback.title": "Entrando.",
@@ -81,6 +87,39 @@ export const esScreens: MessageCatalog = {
   "auth/deleted.detail": "Hasta entonces se puede recuperar. Te enviamos la fecha a la dirección de tu cuenta.",
   "auth/deleted.contact": "Para recuperarla, responde a ese correo antes de esa fecha.",
   "auth/deleted.sign_out": "Cerrar sesión",
+  // ── auth: an application acting as you ─────────────────────────────────────
+  "auth/consent.title": "Una aplicación quiere actuar en tu nombre.",
+  "auth/consent.reported": "Se presenta como {name}. Ese nombre lo puso ella, y nadie lo ha comprobado.",
+  "auth/consent.unnamed": "No dio ningún nombre.",
+  "auth/consent.verified": "Comprobado: se publica en",
+  "auth/consent.redirect": "El acceso se enviará a",
+  "auth/consent.redirect_note": "Aprueba solo si empezaste esto desde esa aplicación.",
+  "auth/consent.can_do": "Si apruebas, podrá:",
+  "auth/consent.count.one": "{reachable} de {count} operación en {capability}.",
+  "auth/consent.count.other": "{reachable} de {count} operaciones en {capability}.",
+  "auth/consent.withheld.one": "{count} más necesita un rol que no tienes.",
+  "auth/consent.withheld.other": "{count} más necesitan un rol que no tienes.",
+  "auth/consent.nothing": "Tu rol todavía no le permite nada aquí. Gana lo que gane tu rol.",
+  "auth/consent.refused_scope": "{scope}: {reason}",
+  "auth/consent.not_granted.role": "Solicitado, y no concedido, porque tu rol no lo incluye.",
+  "auth/consent.not_granted.unknown": "Solicitado, y no concedido, porque esta aplicación no tiene ese permiso.",
+  "auth/consent.bound":
+    "Si apruebas, esta aplicación actuará en tu nombre. Nunca podrá hacer más de lo que tu rol permite, y pierde todo lo que tu rol pierda.",
+  "auth/consent.approve": "Dejar que actúe en mi nombre",
+  "auth/consent.deny": "No permitir",
+  "auth/consent.expired": "Esta solicitud ha caducado. Empieza de nuevo desde la aplicación.",
+  "auth/consent.effect.writes": "cambia datos",
+  "auth/consent.effect.sends": "envía un mensaje",
+  "auth/consent.effect.charges": "cobra dinero",
+  "auth/consent.effect.deletes": "borra datos",
+  "auth/connected.title": "Aplicaciones que actúan en tu nombre",
+  "auth/connected.empty": "Ninguna. Nada actúa en tu nombre.",
+  "auth/connected.unnamed": "Una aplicación sin nombre",
+  "auth/connected.verified": "Publicada en {host}. Eso está comprobado.",
+  "auth/connected.approved": "Aprobada el {date}. El acceso va a {redirect}.",
+  "auth/connected.revoke": "Revocar",
+  "auth/connected.failed": "No pudimos cargar tus aplicaciones.",
+  "auth/connected.retry": "Reintentar",
   "organization/suspended.title": "Esta organización está suspendida.",
   "organization/suspended.body": "Nadie puede usarla hasta que se reactive. Tu propia cuenta no se ve afectada.",
   "organization/suspended.contact": "A sus propietarios se les dijo el motivo. Pregunta a uno de ellos.",
@@ -100,6 +139,21 @@ export const esScreens: MessageCatalog = {
   "organization/choose.failed": "No hemos podido cargar tus cuentas.",
   "organization/choose.retry": "Reintentar",
 
+  // ── organization: accepting an invitation ──────────────────────────────────
+  "organization/invitation.title": "Únete a {organization}",
+  "organization/invitation.invited_by": "{inviter} te invitó como {role}.",
+  "organization/invitation.invited": "Te invitaron como {role}.",
+  "organization/invitation.expires": "La invitación caduca el {date}.",
+  "organization/invitation.as": "Te unirás como {email}.",
+  "organization/invitation.accept": "Unirme",
+  "organization/invitation.sign_in": "Inicia sesión para aceptar",
+  "organization/invitation.invalid.title": "Esta invitación no se puede usar.",
+  "organization/invitation.invalid.body":
+    "Caducó, ya se usó o se retiró, o se envió a otra dirección. Pide una nueva a quien te invitó.",
+  "organization/invitation.failed": "No hemos podido cargar esta invitación.",
+  "organization/invitation.join_failed": "No hemos podido terminar de unirte.",
+  "organization/invitation.retry": "Reintentar",
+
   // ── payments: the paywall ──────────────────────────────────────────────────
   "payments/paywall.title": "Ve más lejos.",
   "payments/paywall.body": "Elige lo que necesitas. Puedes cambiar de idea más tarde.",
@@ -113,6 +167,10 @@ export const esScreens: MessageCatalog = {
   "payments/paywall.done.title": "Todo listo.",
   "payments/paywall.done.body": "Gracias. Tu compra ya está en tu cuenta.",
   "payments/paywall.done.home": "Ir al inicio",
+  "payments/paywall.restore": "Restaurar compras",
+  "payments/paywall.nothing_to_restore": "La tienda no tiene nada que restaurar para esta cuenta.",
+  "payments/paywall.restored_elsewhere": "Tus compras se han restaurado. Ninguna incluye lo que se vende aquí.",
+  "payments/paywall.pending": "La tienda aún está procesando esta compra. Aparecerá en tu cuenta cuando se confirme.",
 
   // ── payments: the pricing screen ───────────────────────────────────────────
   "payments/pricing.title": "Lo que cuesta.",
@@ -124,6 +182,12 @@ export const esScreens: MessageCatalog = {
   "payments/pricing.sign_in": "Entra para comprar {product}",
   "payments/pricing.buy": "Comprar {product}",
   "payments/pricing.holdings": "¿Qué tengo ya?",
+  "payments/pricing.store_body": "Los precios son los de la tienda, para donde estás.",
+  "payments/pricing.at_checkout": "Verás el precio al pagar.",
+  "payments/pricing.done": "Gracias. Tu compra ya está en tu cuenta.",
+  "payments/pricing.pending": "La tienda aún está procesando esta compra. Aparecerá en tu cuenta cuando se confirme.",
+  "payments/pricing.empty.rail":
+    "Nada de aquí se vende por el método de pago de esta plataforma. Dale a un producto su SKU en ese método en",
   // `{interval}` is Paddle's own word for the billing period and arrives from their API in English, so
   // it is left where it lands rather than half-translated into a sentence that then disagrees with the
   // figure beside it. An adopter who wants `al mes` says so in `i18n({ messages })`.
@@ -152,6 +216,34 @@ export const esScreens: MessageCatalog = {
   "payments/subscription.google": "Comprado en Google Play",
   "payments/subscription.more": "Ver qué más hay",
 
+  // ── payments: buying in the app ────────────────────────────────────────────
+  "payments/checkout.in_page": "Este pago se abre dentro de una página web, y la app no puede mostrarla.",
+  "payments/store.unavailable": "La tienda no ha respondido. Inténtalo de nuevo en un momento.",
+  "payments/store.refused": "La tienda no ha terminado la compra.",
+  "payments/store.no_token":
+    "Este dispositivo no ha podido guardar lo que marca una compra como tuya, así que no se ha comprado nada.",
+  "payments/store.signed_out": "Inicia sesión antes de comprar.",
+  "payments/store.no_answer": "La tienda no ha respondido. Si la compra se completa, llegará a tu cuenta sola.",
+
+  // ── consent: the reader's privacy choices ─────────────────────────────
+  "consent/settings.title": "Tus opciones de privacidad.",
+  "consent/settings.loading": "Un momento.",
+  "consent/settings.unreadable": "No pudimos cargar tus opciones.",
+  "consent/settings.none": "Aquí nada pide tu consentimiento.",
+  "consent/settings.on": "Activado.",
+  "consent/settings.off": "Desactivado.",
+  "consent/settings.renew": "El aviso ha cambiado. Acepta de nuevo para mantenerlo.",
+  "consent/settings.expired": "Ha caducado.",
+  "consent/settings.agree": "Aceptar",
+  "consent/settings.withdraw": "Retirar",
+  "consent/settings.signed_elsewhere": "Necesita tu firma en el documento que cubre.",
+  "consent/settings.type_name": "Escribe tu nombre completo para retirarlo por escrito",
+  "consent/settings.draw_name": "Firma abajo para retirarlo por escrito",
+  "consent/settings.clear": "Borrar",
+  "consent/settings.signed_with_provider":
+    "Lo firmaste con un servicio de firma electrónica. Retíralo donde lo firmaste.",
+  "consent/settings.saved": "Guardado.",
+
   // ── app: the adopter's own shell and home screen ───────────────────────────
   //
   // Under `app/` rather than a capability name because that is what these are: the router and the home
@@ -170,6 +262,7 @@ export const esScreens: MessageCatalog = {
   "app/home.bare.checking": "comprobando",
   "app/home.bare.unknown": "desconocido",
   "app/home.bare.unreachable": "inaccesible",
+  "app/locale.reload_required": "Reinicia la app para terminar de cambiar el idioma.",
 
   // ── client: the failures a browser mints for itself, never sent by a Worker ─
   //

package/src/config/config.ts

@@ -33,7 +33,6 @@ export type BrowserResolver = z.infer<typeof BrowserResolver>;
 /** The server chain's default order — explicit param, account, cookie, `Accept-Language`, project default. */
 const DEFAULT_SERVER_RESOLVERS: readonly ServerResolver[] = ["param", "user", "cookie", "header", "default"];
 
-/** The browser chain's default order — `?lang=`, account, local storage, the server's answer, default. */
 /**
  * The browser chain's default order — `?lang=`, account, this device's memory, the reader's own
  * browser languages, what the server declared, the project default.

package/src/http/middleware.ts

@@ -30,7 +30,7 @@ export type LayersFor = (locale: string) => readonly (MessageCatalog | undefined
  * ## Why the query string is read off the URL here, and not through `validate`
  *
  * §HTTP's rule is that a route declares its request contract on the route line and a handler reads
- * `c.req.valid(target)`; `plugins/no-raw-request-input.grit` enforces it by making the raw accessors
+ * `c.req.valid(target)`; `templates/starter/plugins/no-raw-request-input.grit` enforces it by making the raw accessors
  * unreadable under every capability's `src/http/` tree. This is a **global middleware over every route**, so there
  * is no route line to declare a validator on and no handler to hand a typed value to — the rule's
  * replacement does not exist at this position.

package/src/native/environment.ts

@@ -0,0 +1,57 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import { useRead } from "@pithy-sh/ui-core/src/read";
+import AsyncStorage from "@react-native-async-storage/async-storage";
+import { useLocales } from "expo-localization";
+import { useMemo } from "react";
+import type { LocaleEnvironment, LocaleKeys } from "../react/localeEnvironment";
+import type { BrowserLocaleSignals } from "../resolve/browser";
+import { useNativeDirection } from "./useNativeDirection";
+
+/**
+ * React Native's locale environment. Pass it as `useNegotiatedLocale(projection, { environment: nativeLocaleEnvironment })`.
+ *
+ * - **Starting signals:** the device's preferred languages from `expo-localization`, in the order the reader set
+ *   them, and a choice remembered in AsyncStorage. `useLocales` re-renders when the operating system's language
+ *   changes, so the app follows it while it runs. There is no query string and no server-rendered `lang`, so those
+ *   two links of the chain answer nothing.
+ * - **Remember:** AsyncStorage, under the projection's `storageKey`. A locale is not a secret, so it is not kept in
+ *   the secure store.
+ * - **Apply:** `I18nManager`, whose direction takes effect after a reload. `reloadRequired` says when.
+ */
+export const nativeLocaleEnvironment: LocaleEnvironment = {
+  useSignals: useNativeSignals,
+  remember: (locale, keys) => AsyncStorage.setItem(keys.storageKey, locale),
+  useApply: (enabled, _locale, direction) => useNativeDirection(enabled, direction),
+};
+
+/** The device's languages and this device's remembered choice; `undefined` until the memory has been read. */
+function useNativeSignals(keys: LocaleKeys | null): BrowserLocaleSignals | undefined {
+  const device = useLocales();
+  const storageKey = keys?.storageKey;
+  const memory = useRead(
+    `pithy-locale-memory:${storageKey ?? ""}`,
+    async (): Promise<string | null> => (storageKey === undefined ? null : readMemory(storageKey)),
+    { skip: storageKey === undefined },
+  );
+  const navigator = useMemo(() => {
+    const tags = device.map((entry) => entry.languageTag).filter((tag) => tag.trim().length > 0);
+    return tags.length > 0 ? tags : null;
+  }, [device]);
+  const remembered = memory.value ?? null;
+  const ready = storageKey !== undefined && !memory.loading;
+  return useMemo(
+    () => (ready ? { query: null, storage: remembered, navigator, server: null } : undefined),
+    [ready, remembered, navigator],
+  );
+}
+
+/** The remembered choice, or `null` when there is none or the store refuses. */
+async function readMemory(storageKey: string): Promise<string | null> {
+  try {
+    return await AsyncStorage.getItem(storageKey);
+  } catch {
+    return null;
+  }
+}

package/src/native/useNativeDirection.ts

@@ -0,0 +1,24 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import { useEffect } from "react";
+import { I18nManager } from "react-native";
+
+/**
+ * Keep `I18nManager`'s direction in step with the locale in force, and answer whether it needs a reload.
+ *
+ * React Native reads the direction once, at launch: `forceRTL` changes the next launch, and `isRTL` keeps answering
+ * for this one. So the answer is a comparison, not a flag the effect sets. `allowRTL` moves with `forceRTL`, so an
+ * English choice on an Arabic device lays out left to right rather than following the device.
+ *
+ * `enabled` false touches nothing and asks for no reload.
+ */
+export function useNativeDirection(enabled: boolean, direction: "ltr" | "rtl"): boolean {
+  const rtl = direction === "rtl";
+  useEffect(() => {
+    if (!enabled) return;
+    I18nManager.allowRTL(rtl);
+    I18nManager.forceRTL(rtl);
+  }, [enabled, rtl]);
+  return enabled && I18nManager.isRTL !== rtl;
+}

package/src/react/browserLocaleEnvironment.ts

@@ -0,0 +1,32 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import { useMemo } from "react";
+import { readBrowserSignals, rememberBrowserLocale } from "../browser/signals";
+import type { BrowserLocaleSignals } from "../resolve/browser";
+import type { LocaleEnvironment, LocaleKeys } from "./localeEnvironment";
+import { useDocumentLocale } from "./useDocumentLocale";
+
+/** The query string, `localStorage`, `navigator` and `<html lang>`, read once per pair of names. */
+function useBrowserSignals(keys: LocaleKeys | null): BrowserLocaleSignals | undefined {
+  const queryParam = keys?.queryParam;
+  const storageKey = keys?.storageKey;
+  return useMemo(
+    () =>
+      queryParam === undefined || storageKey === undefined ? undefined : readBrowserSignals({ queryParam, storageKey }),
+    [queryParam, storageKey],
+  );
+}
+
+/** `lang` and `dir` on the document. A browser lays out a new direction at once, so no reload is ever needed. */
+function useDocumentApply(enabled: boolean, locale: string, direction: "ltr" | "rtl"): boolean {
+  useDocumentLocale(enabled, locale, direction);
+  return false;
+}
+
+/** The browser's locale environment: what `useNegotiatedLocale` uses when it is handed none. */
+export const browserLocaleEnvironment: LocaleEnvironment = {
+  useSignals: useBrowserSignals,
+  remember: rememberBrowserLocale,
+  useApply: useDocumentApply,
+};

package/src/react/localeEnvironment.ts

@@ -0,0 +1,31 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import type { BrowserChain, BrowserLocaleSignals } from "../resolve/browser";
+
+/** The two names a client looks its own signals up by. */
+export type LocaleKeys = Pick<BrowserChain, "queryParam" | "storageKey">;
+
+/**
+ * Where `useNegotiatedLocale` gets its starting signals, where it remembers a choice, and how it applies the locale.
+ *
+ * The browser's is the default; `@pithy-sh/i18n/src/native/environment` is React Native's. Both hooks are called on
+ * every render, so the environment a component passes must be the same one for the life of that component: a module
+ * constant, never an object built in the render.
+ */
+export interface LocaleEnvironment {
+  /**
+   * The signals this platform holds, as a hook, so a source that changes while the app runs, or answers after the
+   * first render, re-renders the caller. `undefined` while a signal is still being read: nothing is negotiated, no
+   * catalog is asked for and nothing is applied until it answers. `keys` is `null` when the capability is not
+   * composed, and nothing is read.
+   */
+  readonly useSignals: (keys: LocaleKeys | null) => BrowserLocaleSignals | undefined;
+  /** Remember a choice on this device. Not awaited; a rejection is caught. */
+  readonly remember: (locale: string, keys: LocaleKeys) => void | Promise<void>;
+  /**
+   * Apply the locale in force, as a hook. Answers `true` when the direction it applied takes effect only after the
+   * app reloads, which is React Native's rule for `I18nManager`. The browser always answers `false`.
+   */
+  readonly useApply: (enabled: boolean, locale: string, direction: "ltr" | "rtl") => boolean;
+}

package/src/react/useDocumentLocale.ts

@@ -0,0 +1,18 @@
+// SPDX-FileCopyrightText: 2026 Pithy
+// SPDX-License-Identifier: MIT
+
+import { useEffect } from "react";
+import { applyDocumentLocale } from "../browser/signals";
+
+/**
+ * Keep `lang` and `dir` on the document in step with the locale in force.
+ *
+ * `enabled` false writes nothing: a project without the capability keeps the `lang` its `index.html` shipped,
+ * because restamping the document with a locale no chain chose would declare a language nothing negotiated.
+ */
+export function useDocumentLocale(enabled: boolean, locale: string, direction: "ltr" | "rtl"): void {
+  useEffect(() => {
+    if (!enabled) return;
+    applyDocumentLocale(locale, direction);
+  }, [enabled, locale, direction]);
+}