@bongos/core 1.19.439 → 1.19.441

package/tests/projects_hub_pre_uat.mjs

@@ -79,16 +79,17 @@ test('the restart door appears ONLY where it has a reason to exist, and mirrors
   assert.match(body, /!inst\.open_intent/, 'the strip tells the story while work is in flight');
 });
 
-test('the restart door is offered on BOTH surfaces, and the address row points at it', () => {
-  assert.match(fn('renderCard'), /canRestart\(inst\)[\s\S]*?data-restart=/, 'the list card');
-  assert.match(fn('renderManage'), /canRestart\(inst\)[\s\S]*?data-m-restart/, 'the project’s own page — the two never disagree');
+test('the restart door lives on the project’s own page, and the address row points at it from wherever it is read', () => {
+  // task 1003355: a list row carries only view and manage, so the door has ONE
+  // home — a second copy on the row would be the thing the owner asked to remove
+  assert.doesNotMatch(fn('renderCard'), /data-restart/, 'the row acts on nothing');
+  assert.match(fn('renderManage'), /canRestart\(inst\)[\s\S]*?data-m-restart/, 'the project’s own page');
   // the door and the sentence that sends the owner to it must ship together —
   // and the sentence must be gated by the SAME predicate, or a project with no
-  // button (dedicated shape, or work already queued) is told to scroll to one
+  // button (dedicated shape, or work already queued) is told to go looking for one
   const addr = fn('addressRow');
-  assert.match(addr, /or restart it yourself below/, 'the unreachable line names the action now that one exists');
-  assert.match(addr, /canRestart\(inst\) \? ' — or restart it yourself below\.' : '\.'/,
-    'the pointer is conditioned on canRestart(), not on last_verified_up alone (ADR 0199 §8)');
+  assert.match(addr, /canRestart\(inst\) \? \(onManage \? ' — or restart it yourself below\.' : ' — or restart it from its own page\.'\) : '\.'/,
+    'the pointer is conditioned on canRestart() and names a door the READING surface has (ADR 0199 §8)');
 });
 
 test('a queued restart has its own strip — never the generic "a <action> run is queued" fallthrough', () => {
@@ -102,11 +103,12 @@ test('a queued restart has its own strip — never the generic "a <action> run i
 });
 
 test('the restart sender posts to the restart ROUTE — re-POSTing the slug would be refused on every press', () => {
-  const body = fn('doRestart');
+  const body = fn('mRestart');
   assert.match(body, /\/restart'/, 'its own endpoint');
   assert.doesNotMatch(body, /provisioning\/instances',/, 'NOT the create/re-provision POST — PROVISION_ENQUEUE_FROM excludes active');
-  assert.match(body, /quietActions\(id\)/, 'the row goes quiet while it is in flight');
-  assert.match(fn('mRestart'), /\/restart'/, 'and the manage page sends the same request');
+  assert.match(body, /\$\('mActs'\)\.querySelectorAll\('button'\)\.forEach\(function \(b\) \{ b\.disabled = true; \}\);/,
+    'the doors go quiet while it is in flight');
+  assert.doesNotMatch(SCRIPT, /function doRestart\(/, 'and there is no second sender since the row lost its door (task 1003355)');
 });
 /* ── the moment a standup lands (task 1003243) ── */
 test('the landed moment is earned by a VERIFIED probe inside a window, not invented state', () => {
@@ -319,11 +321,14 @@ test('card metadata is span-wrapped so a separator can never strand; the manage
   assert.match(fn('repaintPlanets'), /if \(manageInst\) paintManagePlanet\(manageInst\);/, 'a catalog that lands after the manage page rendered repaints its head too');
 });
 
-test('an open teardown confirm survives the minute re-render', () => {
-  assert.match(SCRIPT, /var cardAsking = null;/);
-  assert.match(fn('renderCard'), /if \(cardAsking !== null && cardAsking === String\(inst\.id\)\) return;/);
-  assert.match(fn('askTeardown'), /cardAsking = String\(id\);/);
-  assert.match(SCRIPT, /function unAskTeardown\(id\) \{ cardAsking = null;/);
+test('the one open teardown confirm — the ender’s — survives the minute re-render', () => {
+  // task 1003355: the row's two-press confirm is gone with the row's door, so
+  // there is exactly one confirmation on the hub and it is the typed-back name
+  assert.doesNotMatch(SCRIPT, /cardAsking/, 'the row holds no confirmation to protect');
+  assert.match(SCRIPT, /var mDelAsking = null;/);
+  assert.match(fn('renderDelete'), /if \(mDelAsking && mDelAsking === inst\.slug\) return;/,
+    'and it is keyed by PROJECT, so a different project always repaints');
+  assert.match(fn('askDelete'), /mDelAsking = inst\.slug;/);
 });
 
 test('the inputs a stranger types into are labelled', () => {
@@ -332,48 +337,54 @@ test('the inputs a stranger types into are labelled', () => {
   assert.match(SCRIPT, /aria-label="A domain you own, for ' \+ esc\(inst\.slug\) \+ '"/);
 });
 
-/* ── the custom-domain field sits behind a fold (owner decision 2, 2026-08-24) ── */
-test('the domain field is a closed disclosure after the card’s doors — never the card’s loudest control', () => {
-  const fold = fn('attachFold');
-  assert.match(fold, /<details class="attachFold"/, 'the wizard’s address-step disclosure shape');
-  assert.match(fold, /Use a domain I own/, 'labelled the way the wizard labels it');
-  assert.match(fold, /inst\.status !== 'active' && inst\.status !== 'requested'\) return ''/, 'live + queued only — snagged and torn-down cards carry no fold');
-  assert.match(fold, /if \(!canAttachDomain\(inst\)\) return ''/, 'the server-mirror gate still comes first');
-  assert.match(fold, /inst\.open_intent\.action === 'domain-attach'\) return ''/, 'no second attach control while one is wiring');
-  assert.doesNotMatch(fold, /Use your own domain/, 'the old filled-button label is gone');
+/* ── the custom-domain field is a section of the project's own page (owner,
+   2026-08-29 — task 1003355; it sat behind a fold on the list card until then) ── */
+test('the row carries two doors and nothing that acts; the address field is a section of the project’s own page', () => {
   const card = fn('renderCard');
-  assert.doesNotMatch(card, /<div class="attach">/, 'renderCard no longer inlines the bare field');
-  const actions = card.indexOf('<div class="actions" id="act-');
-  const foldCall = card.indexOf('body += attachFold(inst, iid);');
-  assert.ok(actions >= 0 && foldCall > actions, 'Open site → Manage → (fold): the fold renders after the actions row');
-  assert.match(COSMOS, /\.attachFold summary\{cursor:pointer;/, 'the summary reads as a control');
-  // the 390px capture: the fold stacks field over button because the row wraps
-  // and the field's minimum (220px) is narrower than a phone card's body; the
-  // fold itself sets no width, so it can never be the thing that overflows
+  assert.doesNotMatch(card, /<button/, 'no sender survives on a row');
+  assert.doesNotMatch(card, /attachFold|<div class="attach">/, 'and no field either');
+  assert.match(card, /'<div class="actions">' \+ acts\.join\(''\)/, 'one doors strip, always rendered');
+  assert.match(card, /inst\.status === 'active' && inst\.domain\) acts\.push\([\s\S]{0,180}>View<\/a>'\)/,
+    'View only where the project is live and has an address to open');
+  assert.match(card, /acts\.push\('<a class="btn small ghost" data-manage="' \+ iid \+ '" href="\?view=manage&id=' \+ iid \+ '">Manage<\/a>'\);/,
+    'Manage on every row, as a real link');
+  // the section on the manage page: the heading is the disclosure, so the field
+  // needs no fold of its own, and the ender's hairline shapes are reused
+  assert.match(HUB, /<div class="card mSec" id="mAddress" hidden>/, 'a settings section like the three above it');
+  assert.match(HUB, /<h2>Its address<\/h2>/);
+  for (const id of ['mDom', 'mDomWhat']) assert.match(HUB, new RegExp('id="' + id + '"'), '#' + id + ' is real markup');
+  const sec = fn('renderAddress');
+  assert.match(sec, /canAttachDomain\(inst\) && \(inst\.status === 'active' \|\| inst\.status === 'requested'\)/,
+    'the server-mirror gate first, then live + queued only — a snagged or torn-down project has nothing to point an address at');
+  assert.match(sec, /\$\('mAddress'\)\.hidden = !offer;/, 'and the whole section goes, not just the button');
+  assert.match(sec, /inst\.open_intent\.action === 'domain-attach'/, 'no second attach control while one is wiring');
+  assert.match(sec, /<div class="attach">/, 'the ender’s hairline field');
+  assert.match(sec, /data-m-attach/, 'and the manage page’s own marker');
+  assert.doesNotMatch(SCRIPT, /function doAttach\(/, 'the row’s sender is gone with the row’s field');
+  // the 390px capture: the row wraps and the field's minimum (220px) is
+  // narrower than a phone's body, so it can never be the thing that overflows
   assert.match(COSMOS, /\.attach\{display:flex;gap:10px;margin-top:10px;flex-wrap:wrap;\}/, 'the row wraps at phone width');
-  assert.match(COSMOS, /\.attach input\[type=text\]\{flex:1;min-width:220px;/, 'the field fits a 390px card and grows on a laptop');
-  assert.doesNotMatch(COSMOS, /\.attachFold[^{]*\{[^}]*(width|min-width):(?!fit-content)/, 'the fold sets no width of its own');
-  // and in both themes: the summary reads from tokens, never a literal colour
-  assert.doesNotMatch((COSMOS.match(/\.attachFold[^\n]*/g) || []).join('\n'), /#[0-9a-f]{3,8}\b/i, 'the fold paints from --ink-faint / --ink-soft, so dark mode needs no twin');
-});
-
-test('the F19 re-kick door survives the fold: open, pre-filled, one button', () => {
-  const fold = fn('attachFold');
-  assert.match(fold, /var rekick = inst\.status === 'active' && inst\.domain && inst\.error_note;/);
-  assert.match(fold, /\(rekick \? ' open' : ''\)/, 'the fold opens on its own for a stalled address');
-  assert.match(fold, /\(prefill \? ' value="' \+ esc\(inst\.domain\) \+ '"' : ''\)/, 'pre-filled with the address in play');
-  assert.match(fold, /var prefill = rekick \|\| repoint;/, 'a stalled address and a correctable one both arrive in the field');
-  assert.match(fold, /rekick \? 'Try the address again' : repoint \? 'Change the address' : 'Use this domain'/, 'and the button says what it does');
+  assert.match(COSMOS, /\.attach input\[type=text\]\{flex:1;min-width:220px;/, 'the field fits a 390px page and grows on a laptop');
+  assert.doesNotMatch(COSMOS, /attachFold/, 'the fold’s rules went with the fold');
+});
+
+test('the F19 re-kick door survives the move: pre-filled, one button, its own sentence', () => {
+  const sec = fn('renderAddress');
+  assert.match(sec, /var rekick = inst\.status === 'active' && inst\.domain && inst\.error_note;/);
+  assert.match(sec, /\(prefill \? ' value="' \+ esc\(inst\.domain\) \+ '"' : ''\)/, 'pre-filled with the address in play');
+  assert.match(sec, /var prefill = rekick \|\| repoint;/, 'a stalled address and a correctable one both arrive in the field');
+  assert.match(sec, /rekick \? 'Try the address again' : repoint \? 'Change the address' : 'Use this domain'/, 'and the button says what it does');
+  assert.match(sec, /rekick \? 'The wiring for this address stopped\./, 'the section says WHY the field is pre-filled — the fold said it by opening itself');
   assert.match(fn('canAttachDomain'), /inst\.status === 'active' && inst\.domain && inst\.error_note && !inst\.open_intent\) return true;/, 'the route-side re-kick gate is untouched');
 });
 
-test('the correction door: a bring-your-own address can be changed, and the fold says what that costs (task 1003237)', () => {
-  const fold = fn('attachFold');
+test('the correction door: a bring-your-own address can be changed, and the section says what that costs (task 1003237)', () => {
+  const fold = fn('renderAddress');
   // the three doors are told apart by what the project is actually addressed as
   assert.match(fold, /var byo = inst\.domain && inst\.domain !== assignedDefaultFor\(inst\);/,
-    'the platform-assigned <slug>.<apex> is NOT a correction — moving off it is the upgrade the fold already offered');
+    'the platform-assigned <slug>.<apex> is NOT a correction — moving off it is the upgrade this control already offered');
   assert.match(fold, /var repoint = !rekick && byo;/, 'a stalled address keeps the F19 door, which is louder');
-  assert.match(fold, /'Use a different domain'/, 'the summary names the correction');
+  assert.match(fold, /repoint \? 'It answers on an address you brought\./, 'the lead names the correction');
   assert.match(fold, /attachNote/, 'and the consequence is stated where the button is');
   assert.match(fold, /won’t use that address any more/, 'letting the old address go is SAID, not discovered');
   // the door itself: an addressed, live project is no longer excluded
@@ -392,13 +403,23 @@ test('the retired refusal is gone from the card: domain_already_set can no longe
     'the server stopped sending it (task 1003237) — a branch for it would be unreachable copy');
 });
 
-test('a heartbeat re-render keeps an open fold open and a half-typed domain typed', () => {
+test('the minute tick keeps a half-typed domain typed, and its receipt on the page', () => {
+  // the rule moved with the field (task 1003355): renderManage repaints every
+  // section once a minute, so the address section must survive its own repaint
+  const sec = fn('renderAddress');
+  assert.match(sec, /old\.value !== old\.defaultValue \? old\.value : ''/, 'typing is told apart from the pre-fill');
+  assert.match(sec, /document\.activeElement === old/, 'the caret comes back too');
+  // lastIndexOf: the in-flight branch above writes the same slot, and returns
+  const set = sec.lastIndexOf("$('mDom').innerHTML =");
+  assert.ok(sec.indexOf('var typed =') < set && sec.indexOf('if (field && typed) field.value = typed;') > set,
+    'read before the swap, restore after it');
+  assert.match(sec, /if \(mDomFor !== inst\.id\) \{ mDomFor = inst\.id; mDomNote = null; \}/,
+    'and the receipt is keyed by PROJECT, so a different project never wears the last one’s');
+  assert.match(sec, /\(mDomNote \? mDomNote\.html : ''\)/, 'a repaint re-renders the receipt rather than swallowing it');
+  // the row keeps nothing to restore but the door that had focus
   const card = fn('renderCard');
-  assert.match(card, /var keepOpen = !!\(oldFold && oldFold\.open\);/);
-  assert.match(card, /oldInput\.value !== oldInput\.defaultValue \? oldInput\.value : ''/, 'typing is told apart from the re-kick pre-fill');
-  assert.match(card, /document\.activeElement === oldInput/, 'the caret comes back too');
-  const set = card.indexOf('li.innerHTML = orbFor(inst)');
-  assert.ok(card.indexOf('var keepOpen') < set && card.indexOf('if (fold && keepOpen) fold.open = true;') > set, 'read before the swap, restore after it');
+  assert.doesNotMatch(card, /oldFold|oldInput|keepOpen/, 'the row holds no field or fold to carry across the swap');
+  assert.match(card, /if \(wasInside\) focusCardControl\(inst\.id, prefer\);/);
 });
 
 /* ── the owner's five calls of 2026-08-24 (task 1003250) ── */
@@ -464,7 +485,18 @@ test('an unmapped create failure gets a plain sentence with the raw text folded
 test('a manifest error says a plain sentence, folds the route text, and sends a domainless project to its address', () => {
   const steps = fn('renderStepOauthApp');
   assert.doesNotMatch(steps, /'GitHub setup hit a snag' \+ \(live\.manifestMsg \? ': ' \+ esc\(live\.manifestMsg\)/, 'the raw route text is no longer the headline');
-  assert.match(steps, /else if \(live\.manifestCode === 'domain_required'\) snag = 'This project needs an address first — attach one from <a href="\?view=mine">your projects page<\/a>/);
+  assert.match(steps, /else if \(live\.manifestCode === 'domain_required'\) snag = 'This project needs an address first — attach one from ' \+ projectPageLink\('its own page'\)/,
+    'the address lives on the project’s own page since task 1003355 — the list would be a dead end');
+  assert.match(fn('projectPageLink'), /instanceId \? '\?view=manage&id=' \+ encodeURIComponent\(instanceId\) : '\?view=mine'/,
+    'and it is named by id whenever the flow has one');
+  // every done-panel pointer that names a CONTROL goes the same way; the ones
+  // that only say "watch it there" still name the list, which does show it
+  assert.equal((SCRIPT.match(/projectPageLink\(/g) || []).length, 6,
+    'the helper and its five callers: the locked step, the domain_required snag, the domainless standup, the snagged retry, the torn-down revive');
+  for (const dead of ['Retry it \\(and see the technical details\\) from <a href="\\?view=mine">',
+                      'Bring it back any time from <a href="\\?view=mine">']) {
+    assert.doesNotMatch(SCRIPT, new RegExp(dead), 'a control the list no longer has must not be pointed at there');
+  }
   assert.match(steps, /\(raw \? '<details><summary>Technical details<\/summary><p>' \+ esc\(raw\) \+ '<\/p><\/details>' : ''\)/);
   assert.match(SCRIPT, /e\.code = \(d\.error && d\.error\.code\) \|\| '';/, 'the route code travels with the error');
   assert.match(SCRIPT, /live\.manifestCode = String\(\(err && err\.code\) \|\| ''\);/);
@@ -486,21 +518,24 @@ test('the rail at the done panel keeps its marker on Create until the project an
   assert.match(HUB, /<li class="now" data-step="1" aria-current="step">/, 'the static rail starts with the same marker');
 });
 
-test('card action results announce, nothing under the pointer is deleted, and focus stays on the card', () => {
-  assert.match(fn('renderCard'), /id="msg-' \+ iid \+ '" role="status" aria-live="polite">/, 'the card slot is a live region');
+test('every action result announces, nothing under the pointer is deleted, and focus stays where it was', () => {
+  // task 1003355 moved every sender to the project's own page, so the live
+  // regions that matter are that page's; the row keeps its own for the watch's
+  // "can't see this project any more"
+  assert.match(fn('renderCard'), /id="msg-' \+ iid \+ '" role="status" aria-live="polite">/, 'the row slot is a live region');
   assert.match(HUB, /<div class="projMsg" id="mMsg" role="status" aria-live="polite"><\/div>/, 'so is the manage page’s');
-  assert.doesNotMatch(SCRIPT, /act\.innerHTML = '<span class="projMsg">Asking…<\/span>'/, 'no action replaces the row it was pressed in');
-  assert.match(fn('doTeardown'), /quietActions\(id\);\n\s*msg\(id, 'Asking…'\);/);
-  assert.match(fn('reProvision'), /quietActions\(id\);\n\s*msg\(id, 'Asking…'\);/);
-  assert.match(fn('quietActions'), /act\.querySelectorAll\('button'\)\.forEach\(function \(b\) \{ b\.disabled = true; \}\);/);
-  assert.match(fn('quietActions'), /li\.setAttribute\('data-focus-back', ''\)/, 'a disabled button that held focus leaves a note');
-  assert.match(fn('askTeardown'), /<div class="confirmRow" tabindex="-1">/);
-  assert.match(fn('askTeardown'), /if \(row && row\.focus\) row\.focus\(\);/, 'the question takes focus when the button goes');
+  assert.match(fn('renderAddress'), /id="mDomMsg" role="status" aria-live="polite"/, 'and the address section’s own');
+  for (const sender of ['mReProvision', 'mRestart']) {
+    assert.match(fn(sender), /\$\('mActs'\)\.querySelectorAll\('button'\)\.forEach\(function \(b\) \{ b\.disabled = true; \}\);/,
+      sender + ' quiets the doors while it is in flight');
+  }
+  assert.match(fn('mAttach'), /if \(btn\) btn\.disabled = true;/, 'and so does the address control');
+  assert.match(fn('askDelete'), /if \(field\) field\.focus\(\);/, 'the typed-back name takes focus when the ask opens');
   const card = fn('renderCard');
   assert.match(card, /var wasInside = li\.contains\(document\.activeElement\) && document\.activeElement !== li;/);
-  assert.match(card, /else if \(focusBack\) focusCardControl\(inst\.id, prefer\);/);
-  assert.match(fn('focusKeyOf'), /data-teardown-yes'\) \|\| el\.hasAttribute\('data-teardown-no'\)\) return '\[data-teardown\]'/, 'Yes / Keep land back on the door that opened them');
-  assert.match(fn('focusCardControl'), /li\.querySelector\('\.actions a, \.actions button'\) \|\|\n\s*li\.querySelector\('details\.attachFold summary'\)/, 'nearest control as the fallback');
+  assert.match(card, /if \(wasInside\) focusCardControl\(inst\.id, prefer\);/);
+  assert.match(fn('focusKeyOf'), /el\.hasAttribute\('data-manage'\) \? '\[data-manage\]' : null/, 'Manage lands back on Manage');
+  assert.match(fn('focusCardControl'), /li\.querySelector\('\.actions a'\)/, 'nearest door as the fallback');
 });
 
 /* ── copy follow-ups (task 1003245) ── */
@@ -539,7 +574,14 @@ test('repo visibility: the refusal is one line, the mechanism lives in the fold'
 test('a failed manage read offers a retry; the no-address sentence offers a door', () => {
   assert.match(SCRIPT, /a\.innerHTML = 'Couldn’t read this project right now\. <button type="button" class="btn small ghost" id="mAlertRetry">Try again<\/button>';/);
   assert.match(SCRIPT, /\$\('mAlert'\)\.addEventListener\('click', function \(ev\) \{\n\s*if \(ev\.target\.closest && ev\.target\.closest\('#mAlertRetry'\)\) loadManage\(\);/, 'delegated — the catch rewrites the alert on every failure');
-  assert.match(fn('addressRow'), /No address yet<\/span> — sign-in on this project can’t be set up until it has one\. <a href="\?view=mine" data-nav-to="mine">Give it an address from your projects<\/a>\./);
+  // the door the sentence offers must be one the READING surface has: on the
+  // project's own page it is the section below, on a row it is that project's
+  // page — never the list, which since task 1003355 carries no field at all
+  const addr = fn('addressRow');
+  assert.match(addr, /No address yet<\/span> — sign-in on this project can’t be set up until it has one\. '/);
+  assert.match(addr, /onManage \? 'Give it an address below\.'/);
+  assert.match(addr, /'<a href="\?view=manage&id=' \+ esc\(String\(inst\.id\)\) \+ '" data-manage="' \+ esc\(String\(inst\.id\)\) \+ '">Give it an address on its own page<\/a>\.'/,
+    'and it carries data-manage, so the list’s delegated handler opens it in place');
   assert.match(SCRIPT, /var a = ev\.target\.closest && ev\.target\.closest\('\[data-nav-to\]'\);\n\s*if \(!a \|\| !isPlainClick\(ev\)\) return;/, 'data-nav-to is delegated, so a link injected after boot switches views in place');
   assert.doesNotMatch(SCRIPT, /querySelectorAll\('\[data-nav-to\]'\)/, 'the boot-time sweep is gone');
 });
@@ -558,20 +600,22 @@ test('the done panel’s progress region is stable, change-only, and says each s
   assert.match(fn('stripMarkup'), /role="status" aria-live="polite"/, 'the mine-card strip is left alone this pass');
 });
 
-test('the map table sorts from the keyboard and an owned row’s name is a real link', () => {
-  assert.match(HUB, /<th class="colName" data-sort="name" aria-sort="ascending"><button type="button" class="thSort">Project<\/button><\/th>/);
-  assert.match(HUB, /<th class="right colBuilders" data-sort="builders"><button type="button" class="thSort">Builders<\/button><\/th>/);
-  assert.match(SCRIPT, /var btn = th\.querySelector\('button'\);\n\s*if \(!btn\) return;\n\s*btn\.addEventListener\('click'/, 'the listener sits on the button, not the th');
-  assert.doesNotMatch(SCRIPT, /th\.style\.cursor/, 'no JS-set cursor on the th');
-  assert.match(COSMOS, /\.tbl th button\{all:unset;cursor:pointer;\}/);
-  assert.match(COSMOS, /\.tbl th button:focus-visible\{outline:2px solid var\(--accent\);outline-offset:2px;\}/, 'keyboard focus on the sort button is visible');
-  const generated = (SCRIPT.match(/return '<tr data-generated([\s\S]*?)'<\/tr>';/) || [, ''])[1];
+test('the map list sorts from the keyboard and an owned row’s name is a real link', () => {
+  // the sort was a button inside a <th> until task 1003356 took the header row
+  // away with the table; it is a pill in a group now, and still a real button
+  assert.match(HUB, /<button type="button" class="sortPill" data-sort="name" aria-pressed="true">name <span class="dir">a to z<\/span><\/button>/);
+  assert.match(HUB, /<button type="button" class="sortPill" data-sort="builders" aria-pressed="false">builders<\/button>/);
+  assert.match(SCRIPT, /document\.querySelectorAll\('\.tblSort button\[data-sort\]'\)\.forEach\(function \(btn\) \{\r?\n\s*btn\.addEventListener\('click'/, 'the listener sits on the button itself');
+  assert.doesNotMatch(SCRIPT, /th\.style\.cursor/, 'no JS-set cursor on a header that no longer exists');
+  assert.match(COSMOS, /\.tblSort button\{[^}]*min-height:36px;/, 'the sort pill clears the 24px floor on its own, with no all:unset to undo');
+  assert.match(COSMOS, /\.tblSort button:focus-visible\{outline:2px solid var\(--accent\);outline-offset:2px;\}/, 'keyboard focus on the sort button is visible');
+  const generated = (SCRIPT.match(/return '<li class="tblRow" data-generated([\s\S]*?)'<\/li>';/) || [, ''])[1];
   assert.match(generated, /<a class="ptitle" data-manage="' \+ esc\(String\(p\._inst\.id\)\) \+ '" href="\?view=manage&id=' \+ esc\(String\(p\._inst\.id\)\) \+ '">/, 'an owned row’s title is a manage anchor');
   const rows = SCRIPT.slice(SCRIPT.indexOf("$('mapRows').addEventListener('click'"));
   const branch = rows.indexOf("closest('a[data-manage]')");
   const bail = rows.indexOf("if (ev.target.closest && ev.target.closest('a')) return;");
   assert.ok(branch > 0 && bail > branch, 'the manage branch runs before the anchor bail-out');
-  assert.match(HUB, /Sort by Project or Builders\./, 'the hint names the two sortable columns');
+  assert.match(HUB, /Sorted by name, A to Z\./, 'the live order is stated where the hint used to name the columns');
   assert.match(COSMOS, /\.tbl \.ptitle\{[^}]*text-decoration:none;\}/, 'the link wears the title’s ink, not the UA underline');
 });