@@ -50,3 +50,6 @@ mined_candidates_hi.csv
 
 # Parser regression baseline (ephemeral; regenerate with make regression-baseline)
 .regression-baseline.tsv
+
+# Copied with the WASM demo assets from npm/NOTICE.md
+/web/NOTICE.md
@@ -39,6 +39,9 @@ archives:
     files:
       - README.md
       - LICENSE
+      # Binaries embed CC BY-SA / CC BY data; ship the attribution notice.
+      - src: npm/NOTICE.md
+        dst: NOTICE.md
 
 checksum:
   name_template: 'checksums.txt'
 
@@ -13,10 +13,17 @@ tagged release also has auto-generated notes on the
 
 ### Changed
 
+- npm/WASM accepts per-call `language: "bengali"`; omitted language remains Hindi.
+  The browser adds explicit language selection and remembers options per language.
+  Unsupported JavaScript language values throw without terminating the WASM engine.
+
 - CLI accepts `--language=bengali` or `--language bengali` for every input mode;
   omitted language remains Hindi. Bengali learned components stay opt-in.
   Unsupported names fail with the supported list; Bengali `--rerank` without
   `--schwa-model` prints a warning instead of being silently ignored.
+- npm wrappers reject non-object options and non-boolean flags (a BigInt flag
+  previously crashed the WASM runtime). The npm license field and release
+  archives now carry the embedded-data licenses (`NOTICE.md`).
 
 - Debug rule traces now retain metadata-only changes in all phases and fallback
   passes; metadata extraction remains disabled outside debug execution.
 
@@ -72,6 +72,7 @@ wasm: ## Build the WebAssembly demo into web/ (gomanize.wasm + wasm_exec.js + ve
 	@cp "$$($(GOCMD) env GOROOT)/lib/wasm/wasm_exec.js" $(WASM_DIR)/wasm_exec.js 2>/dev/null \
 		|| cp "$$($(GOCMD) env GOROOT)/misc/wasm/wasm_exec.js" $(WASM_DIR)/wasm_exec.js
 	@cp $(NPM_DIR)/index.mjs $(WASM_DIR)/gomanize.mjs
+	@cp $(NPM_DIR)/NOTICE.md $(WASM_DIR)/NOTICE.md
 	@echo "✓ WASM demo built. Serve locally with: make wasm-serve"
 
 wasm-serve: wasm ## Build and serve the WASM demo at http://localhost:8080
@@ -87,9 +88,9 @@ npm: wasm ## Assemble the @budhash/gomanize npm package (copies wasm + wasm_exec
 	@cp $(WASM_DIR)/wasm_exec.js $(NPM_DIR)/dist/wasm_exec.js
 	@echo "✓ npm package ready in $(NPM_DIR)/"
 
-npm-test: npm ## Build + smoke-test the npm package under Node
+npm-test: build npm ## Build + smoke-test the npm package under Node
 	@echo "Smoke-testing npm package..."
-	@node $(NPM_DIR)/smoke.test.mjs
+	@GOMANIZE_CLI="$(CURDIR)/$(BINARY)" node $(NPM_DIR)/smoke.test.mjs
 
 install: build ## Install gomanize to GOPATH/bin
 	@echo "Installing $(BINARY)..."
 
@@ -168,8 +168,8 @@ The Go library accepts `gomanize.New("bengali")`. Experimental B1 adds scoped
 phalas, positional conjuncts, final-cluster vowels, and হও/হওয়া handling to the
 B0 symbols and Unicode aliases. It reaches 56.52% match-any on the held-out
 Dakshina word set; pronunciation ambiguities remain. The CLI accepts `--language=bengali` (or
-`--language bengali`); omitting it preserves Hindi. npm and web-demo language
-selection will follow in a separate change. See the [B1 results and
+`--language bengali`); omitting it preserves Hindi. npm accepts `{ language: "bengali" }`, and the browser has an explicit language
+selector. Both continue to default to Hindi. See the [B1 results and
 limitations](docs/reviews/2026-10-04-bengali-b1-results.md).
 
 
@@ -203,4 +203,12 @@ gomanize --language=bengali --list-rules
 Language selection also applies to `--test`, `--debug`, and rule overrides.
 Only `hindi` and `bengali` are accepted (case-insensitive); unsupported or empty
 languages fail with a nonzero exit. Bengali reranking needs `--schwa-model`;
-style flags retain the library's documented learned-component fallbacks.
+Hindi style flags do not implement Bengali rendering styles; supplying them
+bypasses Bengali lexicon lookup and reranking. The browser hides those Hindi
+style controls while Bengali is selected.
+
+```js
+const g = await load();
+g.translit("আমি বাংলা", { language: "bengali" }); // ami bangla
+g.translit("नमस्ते दुनिया"); // namaste duniya — default remains Hindi
+```
@@ -60,8 +60,8 @@ Tags: `@deps=` `@rel=` `@branch=` `@pr=` `@issue=` `@tags=` `@effort=` `@system=
   - [x] (T-0066) [P2] [done] B2 promote cross-fitted selector: native-aware runtime contract, parity, style fallbacks and external validation @deps=T-0065 @branch=feature/bengali-b2-runtime-rerank @rel=T-0054 @done=2026-10-05 @pr=123
   - [x] (T-0067) [P2] [done] B3 source-pinned Bengali lyrics pilot, provisional references and line-level evaluation @deps=T-0066 @branch=feature/bengali-b3-lyrics-seed @done=2026-10-05 @pr=124
   - [ ] (T-0068) [P2] [todo] B3 independent Bengali reference review: correct and attest the lyrics pilot before gold promotion @deps=T-0067
-  - [x] (T-0069) [P2] [done] Expose Bengali in CLI with explicit language selection and Hindi-default compatibility @deps=T-0067 @branch=feature/bengali-cli @done=2026-10-05
-  - [ ] (T-0070) [P2] [todo] Expose Bengali through npm/WASM and browser language selection with Hindi defaults @deps=T-0069
+  - [x] (T-0069) [P2] [done] Expose Bengali in CLI with explicit language selection and Hindi-default compatibility @deps=T-0067 @branch=feature/bengali-cli @done=2026-10-05 @pr=125
+  - [x] (T-0070) [P2] [done] Expose Bengali through npm/WASM and browser language selection with Hindi defaults @deps=T-0069 @branch=feature/bengali-web-npm @done=2026-10-05 @pr=126
 - [ ] (F-0009) [P2] [todo] npm distribution: @budhash/gomanize (WASM engine + JS/TS wrapper) @shadow
   - [x] (T-0036) [P2] [done] Package the WASM engine as @budhash/gomanize with loader, types, make target, and Node smoke test @done=2026-09-08
 - [ ] (F-0006) [P2] [todo] WASM build + web demo (data flywheel) @shadow
 
@@ -5,7 +5,9 @@
 //
 //	gomanizeTranslit(text, options) -> string
 //
-// where options is an object of booleans (see webdemo.FlagNames). The engine
+// where options contains boolean flags (see webdemo.FlagNames) and an optional
+// language: "hindi" (default) or "bengali". Invalid languages return a JS Error
+// which the npm wrapper throws. The engine
 // and all its embedded models are compiled in via go:embed, so the page needs
 // no network calls beyond fetching the .wasm itself.
 //
@@ -14,16 +16,21 @@
 package main
 
 import (
+	"strings"
 	"syscall/js"
 
 	"github.com/budhash/gomanize"
 	"github.com/budhash/gomanize/webdemo"
 )
 
 func main() {
-	g, err := gomanize.New("hindi")
-	if err != nil {
-		panic(err)
+	engines := make(map[string]*gomanize.Gomanize)
+	for _, language := range []string{"hindi", "bengali"} {
+		g, err := gomanize.New(language)
+		if err != nil {
+			panic(err)
+		}
+		engines[language] = g
 	}
 
 	// The WASM runtime dispatches JS calls one at a time on a single event
@@ -34,13 +41,25 @@ func main() {
 		}
 		text := args[0].String()
 
+		language := "hindi"
 		flags := make(map[string]bool, len(webdemo.FlagNames()))
 		if len(args) >= 2 && args[1].Type() == js.TypeObject {
+			value := args[1].Get("language")
+			if value.Type() != js.TypeUndefined {
+				if value.Type() != js.TypeString {
+					return js.Global().Get("Error").New("gomanize: language must be hindi or bengali")
+				}
+				language = strings.ToLower(value.String())
+			}
 			for _, name := range webdemo.FlagNames() {
 				flags[name] = args[1].Get(name).Truthy()
 			}
 		}
 
+		g, ok := engines[language]
+		if !ok {
+			return js.Global().Get("Error").New("gomanize: unsupported language: " + language)
+		}
 		g.SetOptions(webdemo.Options(flags))
 		return g.Translit(text)
 	})
 
@@ -0,0 +1,69 @@
+# Bengali CLI, npm/WASM and browser integration
+
+T-0069 exposes the existing Bengali engine through CLI language selection;
+T-0070 adds the same choice to npm/WASM and the browser. Neither increment
+changes the core rules, learned artifacts or quality thresholds. Bengali
+remains experimental; the independent lyrics-reference review is still open.
+
+## Contract
+
+- CLI: `--language=bengali` and `--language bengali`; omitting the option selects
+  Hindi. Selection applies to every input/debug/test/rule mode. Full language
+  names are case-insensitive. Missing, empty and unsupported values fail.
+- JS: `translit(text, {language: "bengali"})`; each call independently defaults
+  to Hindi when language is absent. Both ESM and CJS forward the option. Invalid
+  values throw an Error without terminating the WASM runtime. The TypeScript
+  `Language` union exposes the canonical lowercase names.
+- Browser: a labeled selector updates input language, label, placeholder, sample
+  and rendered output. Existing text survives language changes. Checkbox values
+  are remembered separately per language for the current page session. Hindi
+  retains its previous Long vowels default; Bengali starts with all flags off.
+- Bengali reranking requires the vowel model. Hindi style toggles are hidden
+  for Bengali: they do not implement Bengali rendering styles, and passing them
+  through the API bypasses Bengali lexicon/reranking under the existing contract.
+- npm and web assets include code/embedded-data attribution via `NOTICE.md`.
+  The package version is unchanged and no package or website is published.
+
+## Validation
+
+CLI subprocess tests run the actual entry point and compare both languages with
+the library. Coverage includes positional and piped input, input files, TSV
+comparison, debug, rule listing/overrides, omitted language and malformed flags.
+A sanity-revert to the hard-coded Hindi constructor fails the Bengali tests.
+Full local `make ci` passed for CLI commit `3e3665e` in an isolated checkout.
+
+`make npm-test` now builds the CLI as well as WASM. Both ESM and CJS test nine
+option profiles for each language against the CLI, plus defaults after Bengali
+calls, option reset, mixed scripts, whitespace/punctuation and recovery after
+invalid languages. A sanity-revert that ignores the WASM language option fails
+its Bengali assertion; the restored implementation passes. TypeScript strict
+checking accepts both languages and rejects an unsupported one. An npm pack
+dry run confirms the entry points, declarations, WASM, runtime and notice ship.
+
+Local Safari inspection confirms initial Hindi selection, successful Bengali
+sample rendering, text preservation during switching, restored Hindi defaults
+and remembered Bengali learned options. A final page check confirms that only
+supported learned controls appear for Bengali. The second full local `make ci`
+result is recorded in the npm/browser PR. Hosted full CI remains configured for
+main-targeting PRs, so these stacked-branch full runs are local.
+
+## Review notes (2026-10-05)
+
+Independent stack review; language/option isolation, ESM/CJS parity, textContent
+output and per-language UI state verified.
+
+- **Flag types are validated in JS.** Only `language` was type-checked, so a
+  BigInt flag (`{longVowels: 1n}`) panicked inside the Go runtime and every later
+  call failed with "Go program has already exited"; string flags were truthy
+  (`"false"` meant true). Both wrappers now reject non-object options and
+  non-boolean flags with `TypeError`; the smoke test asserts each case and that
+  the instance survives.
+- **Licensing.** `NOTICE.md` lists every embedded data file (Hindi lexicon, schwa
+  tree, n-grams; Bengali lexicon, vowel tree, selector) with source, license and
+  changes. `package.json` declares `MIT AND CC-BY-SA-4.0 AND CC-BY-4.0`. GoReleaser
+  archives now include `NOTICE.md`; the npm README links it absolutely.
+- **Web.** The language select opts out of browser form restoration so a restored
+  value cannot desynchronize the UI; structured data lists `bn`.
+- Tracked: unknown option keys are ignored; npm Bengali `rerank` without
+  `schwaModel` is silent (the CLI warns); the About dialog still describes the
+  Hindi components only.
@@ -0,0 +1,60 @@
+# Code and embedded-data attribution
+
+Gomanize implementation code is MIT licensed, Copyright (c) 2023–2026
+Budhaditya (budhash@gmail.com). The WebAssembly binary also embeds learned data;
+the code license does not replace the data licenses below.
+
+Every gomanize build (CLI binaries, the WebAssembly module, the npm package and
+the web demo) embeds the data files below:
+
+| Embedded file | Derived from | License | Changes from the source |
+|---|---|---|---|
+| `lang/hindi/lexicon.tsv` | Dakshina Hindi train spellings; Shabd frequencies (CC0) for ranking | CC BY-SA 4.0 | High-attestation winning spelling per word, frequency-filtered, serialized as TSV |
+| `lang/hindi/schwa_tree.json` | Dakshina Hindi train alignments | CC BY-SA 4.0 | Decision tree learned over aligned schwa positions |
+| `lang/hindi/roman_ngrams.tsv` | Dakshina Hindi train romanizations | CC BY-SA 4.0 | Character 4-gram counts |
+| `lang/bengali/lexicon.tsv` | Dakshina Bengali train spellings | CC BY-SA 4.0 | Normalized native keys, held-out vocabularies excluded, unique high-attestation winners, TSV |
+| `lang/bengali/vowel_tree.json` | Google Bengali pronunciation lexicon (train partition) | CC BY 4.0 | Grapheme–phoneme alignment; inherent-vowel decision tree |
+| `lang/bengali/selector.json` | Dakshina Bengali train spellings and the Google Bengali lexicon | CC BY-SA 4.0 | Out-of-fold candidate generation; preference tree |
+
+Sources:
+
+- **Google Dakshina**, Google / Roark et al., 2020:
+  [source](https://github.com/google-research-datasets/dakshina),
+  [CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/).
+- **Google Bengali pronunciation lexicon**, Copyright Google 2015/2016:
+  [source](https://github.com/googlei18n/language-resources/tree/master/bn),
+  [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).
+- **Shabd** psycholinguistic database: [source](https://osf.io/xfbhd/),
+  [CC0](https://creativecommons.org/publicdomain/zero/1.0/) (no attribution
+  required; credited for transparency).
+
+Source hashes, transformations, exclusions and reproduction tools are recorded
+in the [training data record](https://github.com/budhash/gomanize/blob/main/training/data/bengali/README.md),
+[Bengali lexicon record](https://github.com/budhash/gomanize/blob/main/lang/bengali/LEXICON.md),
+[selector record](https://github.com/budhash/gomanize/blob/main/lang/bengali/RERANKER.md),
+and [research record](https://github.com/budhash/gomanize/blob/main/docs/RESEARCH.md).
+These notices identify adapted data and do not imply endorsement by its creators.
+
+## MIT code license
+
+MIT License
+
+Copyright (c) 2023-2026 Budhaditya (budhash@gmail.com)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
@@ -1,6 +1,6 @@
 # @budhash/gomanize
 
-Romanize Hindi (Devanagari) into readable, diacritic-free Latin script — the
+Romanize Hindi (Devanagari) or experimental Bengali into readable, diacritic-free Latin script — the
 [gomanize](https://github.com/budhash/gomanize) engine (Go) compiled to
 WebAssembly, with a thin JS/TS wrapper. It is the **same engine as the CLI**, so
 output is identical; nothing is reimplemented.
@@ -20,28 +20,38 @@ import { load } from "@budhash/gomanize";
 
 const g = await load();                       // instantiate once
 g.translit("नमस्ते दुनिया");                    // "namaste duniya"
+g.translit("আমি বাংলা", { language: "bengali" }); // "ami bangla"
 g.translit("गाना", { longVowels: true });      // "gaanaa"
-g.translit("मेरे सपनों की रानी", { rerank: true }); // "mere sapnon ki rani"
+g.translit("मेरे सपनों की रानी", { rerank: true }); // "mere sapanon ki rani"
 ```
 
 CommonJS works too: `const { load } = require("@budhash/gomanize");`
 
 ## Options
 
-All optional, default `false`:
+Language defaults to `"hindi"` on every call; boolean flags default to `false`.
+Unsupported languages (including empty strings) throw `Error`; language names
+are case-insensitive at runtime. The TypeScript type uses canonical lowercase names.
 
 | Group | Option | Effect |
 |-------|--------|--------|
-| rule tweak | `longVowels` | write "aa" for every ā (गाना → gaanaa) |
-| rule tweak | `simpleNasals` | करें → karen, not karein |
-| rule tweak | `keepMedialSchwa` | disable CCV deletion (जनता → janata) |
+| language | `language` | `"hindi"` (default) or `"bengali"` |
+| Hindi rule tweak | `longVowels` | write "aa" for every ā (गाना → gaanaa) |
+| Hindi rule tweak | `simpleNasals` | करें → karen, not karein |
+| Hindi rule tweak | `keepMedialSchwa` | disable CCV deletion (जनता → janata) |
 | learned | `schwaModel` | decision-tree schwa classifier |
 | learned | `lexicon` | prefer attested spellings |
-| learned | `rerank` | re-rank candidates with a char n-gram model |
+| learned | `rerank` | rank candidates; Bengali requires `schwaModel: true` |
+
+For Bengali, `schwaModel` enables the three-way vowel model; `rerank` requires
+that option too. `lexicon` remains opt-in and can change spelling style. The
+three Hindi rule tweaks do not implement Bengali rendering styles; supplying
+any of them bypasses Bengali lexicon lookup and reranking. Language selection
+is explicit, not script detection. Input in other scripts is preserved.
 
 ## Notes
 
 - `load()` is async (instantiates the wasm) and cached; `translit` is synchronous after.
-- The `.wasm` is ~1.4 MB gzipped — it embeds the schwa model, lexicon, and n-gram data.
+- The `.wasm` embeds both languages and their learned data; Bengali needs no additional download.
 - Runs on **Node ≥ 18** and modern browsers/bundlers (the wasm + `wasm_exec.js` are resolved relative to the module).
-- Romanization, not strict transliteration — see the [project README](https://github.com/budhash/gomanize). MIT licensed.
+- Romanization, not strict transliteration — see the [project README](https://github.com/budhash/gomanize). MIT code; embedded data has separate licenses in [NOTICE.md](https://github.com/budhash/gomanize/blob/main/npm/NOTICE.md) (shipped in this package).