@bongos/core 1.19.669 → 1.19.671

package/docs/module-api-changelog.md

@@ -1797,5 +1797,9 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.19.667 with no explicit bump. run 34618700494. (task 1002620)
   1.19.669 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.19.668 with no explicit bump. run 34619821252. (task 1002620)
+  1.19.670 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.669 with no explicit bump. run 34622305231. (task 1002620)
+  1.19.671 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.19.670 with no explicit bump. run 34627255469. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/modules/provisioning/onboard-plan.js

@@ -49,6 +49,14 @@ function onboardPlan(mode = 'greenfield', opts = {}) {
     // collects it, so it is not one of the irreducibly-manual legs a done panel
     // lists. `optional` is what makes it skippable — see the header.
     { key: 'project-detail', kind: 'auto', optional: true, label: 'Tell us about your project — optional, skip it and add it later' },
+    // The creation picker's module choice (BV1.R20/R24, task 1002339). 'auto' and
+    // optional for project-detail's reasons, and it sits immediately after it
+    // because it READS that step's answer: the declared `type` keys the starter
+    // bundle this step preselects (ADR 0237). Skipping stores nothing and the
+    // bundle is resolved on read (ADR 0240), so a skip yields exactly the set the
+    // picker had ticked — which is why the label says "take the recommended set"
+    // rather than "add them later": the modules are already there.
+    { key: 'project-modules', kind: 'auto', optional: true, label: 'Pick its extras — optional, skip it to take the recommended set for your project type' },
     { key: 'github-repo', kind: 'human', label: adopt ? 'Use your EXISTING GitHub repository' : 'Create the empty GitHub repository' },
     { key: 'dns-preflight', kind: 'auto', shapes: CONTROL_PLANE_SHAPES, label: 'DNS token preflight — before the address step (task 1980)' },
     { key: 'init', kind: 'auto', label: adopt ? 'bongos init --adopt — LAYER onto the existing repo (pre-flight + accept)' : 'bongos init — scaffold the instance config' },

package/modules/public-landing/public/assets/cosmos.css

@@ -1585,6 +1585,12 @@ p.sec-p{font-size:var(--fs-lede);font-weight:500;color:var(--ink-soft);line-heig
 #view-new .panel .lede strong,#view-new .panel .lede em{color:var(--ink);font-weight:500;font-style:normal;}
 /* the done clause's link to Your projects clears the 24px hit floor as a box (an inline's rect is its content box) */
 #view-new .panel .lede a{display:inline-block;padding:3px 0;min-height:24px;line-height:18px;color:var(--ink);font-weight:400;text-decoration:underline;text-underline-offset:3px;}
+/* the "still watching …" line above step 1 (task 1003503): a quiet offer, not a
+   banner — the fresh wizard is what the click asked for. Its link clears the 24px
+   hit floor as a box, the same way the lede's does. */
+#view-new .resumeOffer{font-weight:400;font-size:13.5px;line-height:1.5;color:var(--ink-soft);margin:0 0 22px;max-width:62ch;}
+#view-new .resumeOffer strong{color:var(--ink);font-weight:500;}
+#view-new .resumeOffer a{display:inline-block;padding:3px 0;min-height:24px;line-height:18px;color:var(--ink);font-weight:400;text-decoration:underline;text-underline-offset:3px;}
 #view-new .finePrint{font-weight:400;font-size:13.5px;line-height:1.5;color:var(--ink-soft);margin-top:18px;max-width:62ch;}
 #view-new .finePrint a{color:var(--ink);font-weight:400;text-decoration:underline;text-underline-offset:3px;}
 #view-new .finePrint em{font-style:normal;color:var(--ink);}

package/modules/public-landing/public/projects.html

@@ -978,6 +978,11 @@ summary{min-height:24px;padding:3px 0;}
             <h1 id="name-h">Start a project</h1>
             <p class="lede">Your own project: its own repository, its own home on the web, and a hall of AI builders
               who do the building. You set the direction; agents lay down the code.</p>
+            <!-- The standup already being watched, kept one click away (task 1003503).
+                 A deliberate "New project" click opens THIS fresh step 1; the previous
+                 project's done panel is reachable here instead of taking the panel over.
+                 Baked markup, hidden until enter() has a record to name. -->
+            <p class="resumeOffer" id="wizResume" hidden>still watching <strong id="wizResumeName">your project</strong> — <a href="#" id="wizResumeGo">resume it</a></p>
             <form id="newForm" data-next="2">
               <label class="wizField"><span>Project name</span>
                 <input type="text" id="newName" placeholder="What should it be called?" autocomplete="off" maxlength="80" aria-label="Project name">
@@ -4613,6 +4618,36 @@ summary{min-height:24px;padding:3px 0;}
       tick();
     }
 
+    /* Everything the wizard must FORGET to start a second project: the watch, the
+       manifest leg, the answers, the fields. Deliberately not the created record —
+       the caller owns that. "Start another project" drops it (the founder said they
+       were done); the intent-driven resume below keeps it, so the standup stays one
+       click away while a fresh step 1 is filled in. */
+    function resetForNewProject() {
+      stopPolling();
+      stopManifestPoll();
+      instanceId = null;
+      watchPending = false; manifestPending = false; manifestState = null;
+      manifestStartedAt = 0; manifestStale = false;
+      live = { instStatus: null, manifest: null, manifestMsg: '', manifestCode: '', appSlug: null };
+      lastStepsHtml = '';
+      lastProgHtml = '';
+      try { sessionStorage.removeItem(DRAFT_KEY); } catch (e) {}
+      /* Every key the initial state declares has to be re-declared here. `modules`
+         is three-valued and null is its "nothing said" sentinel; leaving the key out
+         left it UNDEFINED, which is not null — so pickedModules() reached .slice()
+         on it and the second project's Modules step threw. */
+      state = { step: 1, name: '', projType: null, description: '', teamShape: null, modules: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
+      $('newName').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
+      $('f-noaddr').checked = false; $('f-desc').value = '';
+      /* Re-seed the owner from the signed-in account for the next project. */
+      if (me && me.github_login) { state.owner = me.github_login; $('f-owner').value = state.owner; }
+      $('h-name').innerHTML = '&nbsp;';
+      paintType(null);
+      paintTeam(null);
+      setMode('greenfield');
+    }
+
     /* start another project: clear the stored instance + draft, back to step 1 */
     function wireAgain() {
       var again = document.createElement('button');
@@ -4620,24 +4655,11 @@ summary{min-height:24px;padding:3px 0;}
       again.addEventListener('click', function () {
         /* a standup still being watched is not abandoned by accident */
         if (instanceId && pollTimer && !confirm((state.name || state.slug) + ' keeps building — you’ll find it on your projects page. Start a new one?')) return;
-        stopPolling();
-        stopManifestPoll();
-        instanceId = null;
-        watchPending = false; manifestPending = false; manifestState = null;
-        manifestStartedAt = 0; manifestStale = false;
-        live = { instStatus: null, manifest: null, manifestMsg: '', manifestCode: '', appSlug: null };
-        lastStepsHtml = '';
-        lastProgHtml = '';
-        try { sessionStorage.removeItem(CREATED_KEY); sessionStorage.removeItem(DRAFT_KEY); } catch (e) {}
-        state = { step: 1, name: '', projType: null, description: '', teamShape: null, mode: 'greenfield', owner: '', ownerTouched: false, repo: '', repoTouched: false, slug: '', slugTouched: false, domain: '', noAddress: false };
-        $('newName').value = ''; $('f-owner').value = ''; $('f-repo').value = ''; $('f-slug').value = ''; $('f-domain').value = '';
-        $('f-noaddr').checked = false; $('f-desc').value = '';
-        /* Re-seed the owner from the signed-in account for the next project. */
-        if (me && me.github_login) { state.owner = me.github_login; $('f-owner').value = state.owner; }
-        $('h-name').innerHTML = '&nbsp;';
-        paintType(null);
-        paintTeam(null);
-        setMode('greenfield');
+        resetForNewProject();
+        /* the deliberate goodbye: the record goes too, so nothing offers to resume
+           the project the founder has just said they are finished watching */
+        try { sessionStorage.removeItem(CREATED_KEY); } catch (e) {}
+        paintResumeOffer(null);
         show(1, true);
       });
       $('panel-done').appendChild(again);
@@ -4648,6 +4670,81 @@ summary{min-height:24px;padding:3px 0;}
     function createdRecord() {
       try { return JSON.parse(sessionStorage.getItem(CREATED_KEY) || 'null'); } catch (e) { return null; }
     }
+    /* The "still watching …" offer above step 1 (task 1003503). Its markup is baked
+       into the panel, so this only names the project and shows or hides the line —
+       this surface builds no live DOM from strings. null takes it down. */
+    function paintResumeOffer(created) {
+      var el = $('wizResume');
+      if (!el) return;
+      if (created && created.id) {
+        $('wizResumeName').textContent = created.name || created.slug || 'your project';
+        el.hidden = false;
+      } else {
+        el.hidden = true;
+      }
+    }
+    /* Raised by the resume link so the enter() it triggers reads as "yes, the done
+       panel" instead of one more ask for a fresh wizard. One-shot: enter() lowers it. */
+    var resumeIntent = false;
+    $('wizResumeGo').addEventListener('click', function (ev) {
+      ev.preventDefault();
+      resumeIntent = true;
+      enter(true);
+    });
+
+    /* enterCreated(created, focus) — a stored record means a standup is (or was)
+       being watched, and WHO IS ARRIVING decides what that means (task 1003503,
+       owner call 2026-09-11):
+
+         • a reload, Back, or the identity settle (focus false) — the same visit
+           continuing, so the done panel and its human-steps checklist come back
+           untouched. Losing the checklist there would be the bug;
+         • a deliberate "New project" click (focus true) — an ask for ANOTHER
+           project, so it opens a fresh step 1 and leaves the standup one click
+           away on the resume link. That nav used to land on the previous
+           project's checklist for the rest of the tab session, with "Start
+           another project" the only way out.
+
+       The reset fires only when there is a SECOND DRAFT to lose, and the draft's own
+       step is what says so. A landed create clears DRAFT_KEY — but show(8) then
+       persists the done panel's own position straight back into it, so "is there a
+       draft?" is always yes and would have skipped the reset forever, leaving the
+       finished project's name sitting in the fresh form. Only steps 1–7 are wizard
+       steps: anything else is the done panel's bookkeeping, not a project someone
+       is part-way through typing. */
+    function enterCreated(created, focus) {
+      if (focus && !resumeIntent) {
+        var draft = null;
+        try { draft = JSON.parse(sessionStorage.getItem(DRAFT_KEY) || 'null'); } catch (e) {}
+        var at = draft && draft.step >= 1 && draft.step <= 7 ? draft.step : 0;
+        if (!at) { resetForNewProject(); at = 1; }
+        paintResumeOffer(created);
+        /* step 1's own focus target is the name field, not the heading — the same
+           deliberate-nav rule enter() applies below */
+        show(at, at !== 1);
+        if (at === 1) $('newName').focus();
+        return;
+      }
+      resumeIntent = false;
+      paintResumeOffer(null);
+      /* returning after a create — resume watching that instance instead of a
+         blank wizard */
+      state.name = created.name || created.slug; state.slug = created.slug || '';
+      state.domain = created.domain || ''; state.mode = created.mode || 'greenfield';
+      /* restore the opt-out too — without it resolvedDomain() re-derives the
+         assigned address and the done panel promises one that doesn't exist */
+      state.noAddress = !!created.noaddr;
+      /* the manifest leg's last known truth, kept across a reload */
+      if (created.manifest) { live.manifest = created.manifest; live.appSlug = created.app_slug || null; }
+      if (created.manifest_state && created.manifest !== 'done' && created.manifest !== 'error' && created.manifest !== 'expired') {
+        manifestState = created.manifest_state; manifestPending = true;
+      }
+      renderDone();
+      show(8, !!focus);
+      startProgress(created.id);
+      resumePolls();
+    }
+
     /* enter(focus) — paint the right step for whoever just arrived. Before the
        identity settles it shows the draft step optimistically (the page stays
        usable while /me is in flight — the boot's own rule); onAuth() re-enters
@@ -4655,25 +4752,8 @@ summary{min-height:24px;padding:3px 0;}
     function enter(focus) {
       if (authKnown && !me) { show(0, !!focus); return; }
       var created = authKnown ? createdRecord() : null;
-      if (created && created.id) {
-        /* returning after a create — resume watching that instance instead of a
-           blank wizard */
-        state.name = created.name || created.slug; state.slug = created.slug || '';
-        state.domain = created.domain || ''; state.mode = created.mode || 'greenfield';
-        /* restore the opt-out too — without it resolvedDomain() re-derives the
-           assigned address and the done panel promises one that doesn't exist */
-        state.noAddress = !!created.noaddr;
-        /* the manifest leg's last known truth, kept across a reload */
-        if (created.manifest) { live.manifest = created.manifest; live.appSlug = created.app_slug || null; }
-        if (created.manifest_state && created.manifest !== 'done' && created.manifest !== 'error' && created.manifest !== 'expired') {
-          manifestState = created.manifest_state; manifestPending = true;
-        }
-        renderDone();
-        show(8, !!focus);
-        startProgress(created.id);
-        resumePolls();
-        return;
-      }
+      if (created && created.id) { enterCreated(created, !!focus); return; }
+      paintResumeOffer(null);
       /* before identity settles, never render past the name step: deeper steps
          carry authenticated side effects (the Home-step repo probe), and onAuth()
          re-enters to the real draft step the moment /me answers */

package/modules/public-landing/public/projects.states.json

@@ -37,6 +37,7 @@
     "in-new-address": { "auth": true, "url": "/projects?view=new", "actions": [["wait",600],["fill","#newName","Mercury"],["click","#panel-name button[type=submit]"],["wait",400],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-type button[type=submit]"],["wait",400],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#teamCards .tpill[data-team=\"small-team\"]"],["click","#panel-detail button[type=submit]"],["wait",900],["click","#panel-modules button[type=submit]"],["wait",400],["click","#panel-home button[type=submit]"],["wait",400]], "expect": {"visible":["#panel-address"],"hidden":["#panel-home","#qWrap"]} },
     "in-new-review": { "auth": true, "url": "/projects?view=new", "actions": [["wait",600],["fill","#newName","Mercury"],["click","#panel-name button[type=submit]"],["wait",400],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-type button[type=submit]"],["wait",400],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#teamCards .tpill[data-team=\"small-team\"]"],["click","#panel-detail button[type=submit]"],["wait",900],["click","#panel-modules button[type=submit]"],["wait",400],["click","#panel-home button[type=submit]"],["wait",400],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#panel-address button[type=submit]"],["wait",400]], "expect": {"visible":["#panel-review","#reviewList li"],"hidden":["#panel-address","#qWrap"]} },
     "in-new-done": { "auth": true, "url": "/projects?view=new", "actions": [["wait",600],["fill","#newName","Mercury"],["click","#panel-name button[type=submit]"],["wait",400],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-type button[type=submit]"],["wait",400],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#teamCards .tpill[data-team=\"small-team\"]"],["click","#panel-detail button[type=submit]"],["wait",900],["click","#panel-modules button[type=submit]"],["wait",400],["click","#panel-home button[type=submit]"],["wait",400],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#panel-address button[type=submit]"],["wait",400],["click","#doCreate"],["wait",1500]], "expect": {"visible":["#panel-done","#liveProgress .prog","#humanSteps li"],"hidden":["#panel-review","#qWrap"]} },
+    "in-new-resume-offer": { "auth": true, "url": "/projects?view=new", "actions": [["wait",600],["fill","#newName","Mercury"],["click","#panel-name button[type=submit]"],["wait",400],["click","#typeCards .tpill[data-type=\"game\"]"],["click","#panel-type button[type=submit]"],["wait",400],["fill","#f-desc","A co-op farming game where the seasons never repeat."],["click","#teamCards .tpill[data-team=\"small-team\"]"],["click","#panel-detail button[type=submit]"],["wait",900],["click","#panel-modules button[type=submit]"],["wait",400],["click","#panel-home button[type=submit]"],["wait",400],["fill","#f-slug","mercury"],["wait",900],["fill","#f-domain","mercury.example.com"],["wait",200],["click","#panel-address button[type=submit]"],["wait",400],["click","#doCreate"],["wait",1500],["click","#projTrig"],["wait",350],["click","#menuProjects [data-nav=\"new\"]"],["wait",500]], "expect": {"visible":["#panel-name","#wizResume","#wizResumeGo"],"hidden":["#panel-done"],"text":[["#wizResumeName","Mercury"]]} },
     "out-map-projects": { "auth": false, "actions": [["click", "#projTrig"], ["wait", 350]], "expect": { "expanded": true, "hidden": ["#menuProjects [data-nav=\"mine\"]"] } },
     "card": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://amazonprimea.com\"]"], ["wait", 900]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art"]], "visible": ["#cardArt", "#cardFaces", "#cardBuildersFig", "#cardShippedFig", "#cardOpen", "#cardHall"], "text": [["#cardBuilders", "11"], ["#cardShipped", "0"], ["#cardRel", "you build here"], ["#cardRuns", "amazonprimea.com"], ["#cardFaces .facesMore", "+6"]], "count": [["#cardFaces img", 5]], "href": [["#cardHall", "https://builders.amazonprimea.com/"]] } },
     "card-noart": { "auth": true, "actions": [["dispatchClick", "#orbField a.worldOrb[data-origin=\"https://emersonian-circles.cloudbongos.com\"]"], ["wait", 600]], "expect": { "dialog": true, "hasClass": [["#projCard", "has-art", false]], "hidden": ["#cardArt", "#cardFaces", "#cardHall"], "visible": ["#cardBuildersFig", "#cardShippedFig", "#cardOpen"], "text": [["#cardShipped", "30+"], ["#cardRel", "you build here"]] } },

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.669",
+  "version": "1.19.671",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.19.669",
+      "version": "1.19.671",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.19.669",
+  "version": "1.19.671",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/src/module-api.js

@@ -71,7 +71,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // there. scripts/gds/bump-version.js still rewrites the literal below; it appends
 // the entry to that file. Look for a version's history there, not here.
 // ---------------------------------------------------------------------------
-const CORE_VERSION = '1.19.669'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.19.671'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('dev-box'); log.info('mounted');

package/tests/onboard.mjs

@@ -41,10 +41,28 @@ test('the OPTIONAL project-detail step sits in the canonical sequence, and optio
   assert.equal(step.optional, true, 'the flag is what tells a form it may be walked past');
   assert.equal(step.kind, 'auto',
     "'auto' like name-address: the FORM collects it, so a done panel of outstanding human steps must not list it");
-  // one optional step keeps the flag meaningful; a second would need its own rule
-  assert.deepEqual(plan.filter((s) => s.optional).map((s) => s.key), ['project-detail']);
-  // and the adopt branch carries it identically — the sequence branches only at scaffold
-  assert.ok(ob.onboardPlan('adopt').some((s) => s.key === 'project-detail' && s.optional === true));
+  // THE RULE the second optional step needed (task 1002350). `optional` is not a
+  // general "nice to have" flag — it marks a CREATION-FORM answer that (a) rides the
+  // same POST /provisioning/instances body, (b) has a DEFINED meaning when omitted
+  // rather than an absent one, and (c) has a documented way back afterwards. Both
+  // members qualify: project-detail omitted leaves the project dark-matter until a
+  // description lands (PATCH …/detail is the way back, ADR 0182 D4), and
+  // project-modules omitted resolves the declared type's starter bundle on read
+  // (ADR 0240; modules are addable from the project's own page). A step that fails
+  // any of the three does not get this flag — which is why steps 12 and 13 of the
+  // skill (visibility, invite) are not in this plan at all: they run after the
+  // terminal step and belong to the done panel (ADR 0249), not the rail.
+  assert.deepEqual(plan.filter((s) => s.optional).map((s) => s.key), ['project-detail', 'project-modules']);
+  // the picker follows the interview because it READS its answer: the declared
+  // `type` keys the bundle the picker preselects (ADR 0237), so the order is a
+  // dependency, not a preference.
+  assert.equal(keys.indexOf('project-modules'), keys.indexOf('project-detail') + 1,
+    'the module picker follows the step whose answer decides what it preselects');
+  // and the adopt branch carries BOTH identically — the sequence branches only at scaffold
+  for (const key of ['project-detail', 'project-modules']) {
+    assert.ok(ob.onboardPlan('adopt').some((s) => s.key === key && s.optional === true),
+      `${key}: adopt carries it too`);
+  }
 });
 
 test('every form OFFERS the optional step and names what skipping costs — skill / CLI / wizard / route (task 1002334)', () => {

package/tests/projects_hub_pre_uat.mjs

@@ -691,7 +691,9 @@ test('the done panel re-learns the GitHub-App leg from the instance read, yieldi
   const seedAt = sp.indexOf('var ga = data.github_app;');
   const statusAt = sp.indexOf("if (inst && inst.status !== live.instStatus)");
   assert.ok(seedAt > 0 && seedAt < statusAt, 'the manifest seed lands before the status re-render, so one renderSteps() paints both');
-  assert.match(fn('enter'), /if \(created\.manifest\) \{ live\.manifest = created\.manifest; live\.appSlug = created\.app_slug \|\| null; \}/, 'the sessionStorage bridge stays as the pre-first-tick seed');
+  /* the bridge moved from enter() to enterCreated() when task 1003503 split the
+     created-record branch out — same seed, same place in the same flow */
+  assert.match(fn('enterCreated'), /if \(created\.manifest\) \{ live\.manifest = created\.manifest; live\.appSlug = created\.app_slug \|\| null; \}/, 'the sessionStorage bridge stays as the pre-first-tick seed');
 });
 
 /* ── a settings push is named on both surfaces, by state, with no duration promise (task 1003140) ── */

package/tests/wizard_intent_resume.mjs

@@ -0,0 +1,216 @@
+// tests/wizard_intent_resume.mjs — "New project" means a NEW project (task 1003503).
+//
+// The hub's create wizard stores the instance it just stood up (`cb-created-instance`),
+// and enter() resumed that record's done panel on EVERY arrival. Right mid-standup — the
+// watch continues across a reload — but once the standup finished, the "New project" nav
+// kept landing on the old checklist for the rest of the tab session. The only escape was
+// the done panel's own "Start another project" button.
+//
+// Owner call (2026-09-11, the two options the task offered): intent-driven resume.
+//   • focus === false  — a reload, Back, or the boot's identity settle. The SAME visit
+//     continuing, so the done panel and its human-steps checklist come back untouched.
+//   • focus === true   — a deliberate nav click. An ask for ANOTHER project: a fresh
+//     step 1, with the standup one click away on a "still watching …" link.
+// The record is never cleared by this, so nothing is lost either way — which is what
+// ruled out the task's other option (drop the record at a terminal state).
+//
+// The reset fires only when there is a SECOND DRAFT to lose, and the draft's own step is
+// what says so. A landed create clears DRAFT_KEY — but show(8) then persists the done
+// panel's position straight back into it, so a plain "is there a draft?" test is always
+// yes and would skip the reset forever, leaving the finished project's name sitting in
+// the fresh form. (That is exactly what the first cut of this change shipped into a
+// render: "still watching Mercury" above a name field still reading "Mercury".) Only
+// steps 1-7 are wizard steps; anything else is the done panel's own bookkeeping.
+//
+// Harness: there is no jsdom in this repo, so this follows tests/wizard_draft_resume.mjs
+// and tests/project_door_ui.mjs — slice the real region out of the page's INLINE script
+// and run it in a vm under a minimal DOM stub. Both slice boundaries are asserted, so a
+// rename fails loudly instead of leaving this file quietly testing nothing.
+//
+// projects.html is CRLF on a Windows checkout, so this file normalises at read time the
+// way tests/projects_hub_pre_uat.mjs does — a vm cannot run a slice with stray \r in it.
+//
+// Run:  node --test --test-reporter=tap tests/wizard_intent_resume.mjs
+
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+import fs from 'node:fs';
+import path from 'node:path';
+import vm from 'node:vm';
+import { fileURLToPath } from 'node:url';
+
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
+const LANDING = path.join(ROOT, 'modules', 'public-landing', 'public');
+const HUB = fs.readFileSync(path.join(LANDING, 'projects.html'), 'utf8').replace(/\r\n/g, '\n');
+const COSMOS = fs.readFileSync(path.join(LANDING, 'assets', 'cosmos.css'), 'utf8').replace(/\r\n/g, '\n');
+const SCRIPT = HUB.slice(HUB.lastIndexOf('<script>'), HUB.lastIndexOf('</script>'));
+
+// ── the two slices ───────────────────────────────────────────────────────────────
+// Each function closes on the first `}` at the wizard IIFE's own four-space indent.
+const ENTER_RE = /function enterCreated\(created, focus\) \{[\s\S]*?\n {4}\}/;
+const OFFER_RE = /function paintResumeOffer\(created\) \{[\s\S]*?\n {4}\}/;
+const enterSlice = (SCRIPT.match(ENTER_RE) || [null])[0];
+const offerSlice = (SCRIPT.match(OFFER_RE) || [null])[0];
+
+test('both slices are still findable (a rename must fail loudly, not silently pass)', () => {
+  assert.ok(enterSlice, 'enterCreated() was not found in projects.html');
+  assert.ok(offerSlice, 'paintResumeOffer() was not found in projects.html');
+  assert.match(enterSlice, /if \(focus && !resumeIntent\) \{/, 'the intent branch is part of the slice');
+  assert.match(enterSlice, /startProgress\(created\.id\);/, 'so is the resume branch it guards');
+  assert.match(enterSlice, /draft\.step >= 1 && draft\.step <= 7/,
+    'the STORED draft\'s step decides, not state.step — state.step is 8 for the whole life of a finished standup');
+  assert.match(SCRIPT, /if \(created && created\.id\) \{ enterCreated\(created, !!focus\); return; \}/,
+    'enter() still hands the created record straight to it');
+});
+
+// A faithful miniature: the stubs record what enterCreated ASKS FOR, which is the whole
+// contract — which panel is shown, whether the answers were reset, and what the offer
+// above step 1 was told to name.
+function runEnter({ focus, resumeIntent = false, draft = null, record }) {
+  const store = new Map();
+  if (draft) store.set('draft', JSON.stringify(draft));
+  const calls = { show: [], resets: 0, offer: [], done: 0, progress: [], polls: 0, focused: 0 };
+  // state.step is the DONE step for the whole life of a finished standup — the value
+  // a draft-blind reading would have trusted
+  const state = { step: draft ? draft.step : 8, name: 'Mercury', slug: 'mercury', domain: '', mode: 'greenfield', noAddress: false, modules: null };
+  const sandbox = {
+    record, focus, resumeIntent, state,
+    DRAFT_KEY: 'draft',
+    live: { manifest: null, appSlug: null },
+    manifestState: null,
+    manifestPending: false,
+    sessionStorage: { getItem: (k) => (store.has(k) ? store.get(k) : null) },
+    resetForNewProject() { calls.resets += 1; state.step = 1; state.name = ''; state.slug = ''; },
+    paintResumeOffer(c) { calls.offer.push(c ? (c.name || c.slug) : null); },
+    show(step, moveFocus) { state.step = step; calls.show.push([step, moveFocus]); },
+    renderDone() { calls.done += 1; },
+    startProgress(id) { calls.progress.push(id); },
+    resumePolls() { calls.polls += 1; },
+    $: () => ({ focus() { calls.focused += 1; } }),
+  };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(`${enterSlice}\nenterCreated(record, focus);`, sandbox);
+  return { calls, state, sandbox };
+}
+
+const REC = { id: 'inst-1', name: 'Acme', slug: 'acme', domain: 'acme.example', mode: 'greenfield' };
+
+test('a reload / Back / identity settle (focus false) still resumes the done panel, watch and all', () => {
+  const { calls, state } = runEnter({ focus: false, record: REC });
+  assert.deepEqual(calls.show, [[8, false]], 'the done panel, and no focus steal on a non-deliberate arrival');
+  assert.equal(calls.resets, 0, 'nothing is reset — this is the same standup continuing');
+  assert.equal(calls.done, 1, 'the checklist is re-rendered');
+  assert.deepEqual(calls.progress, ['inst-1'], 'the progress watch is restarted from the record');
+  assert.equal(calls.polls, 1, 'and the parked manifest poll is resumed');
+  assert.equal(state.name, 'Acme', 'the record re-seeds the state the done panel reads');
+  assert.deepEqual(calls.offer, [null], 'the offer is down — the done panel is on stage, not step 1');
+});
+
+test('a deliberate "New project" click after a finished standup opens a FRESH step 1', () => {
+  const { calls, state } = runEnter({ focus: true, record: REC });
+  assert.equal(calls.done, 0, 'the previous project\'s done panel is not painted');
+  assert.equal(calls.progress.length, 0, 'and its watch is not restarted');
+  assert.equal(calls.resets, 1, 'with no second draft to lose, the wizard forgets the finished project');
+  assert.deepEqual(calls.show, [[1, false]], 'step 1, and step 1 does not take the heading focus');
+  assert.equal(calls.focused, 1, 'the name field does — the deliberate-nav rule enter() already applies');
+  assert.equal(state.name, '', 'the old name is gone from the form');
+});
+
+test('…and the standup stays one click away, named, on the resume link', () => {
+  const { calls } = runEnter({ focus: true, record: REC });
+  assert.deepEqual(calls.offer, ['Acme'], 'the offer names the project the record holds');
+  const noName = runEnter({ focus: true, record: { id: 'inst-2', slug: 'beta' } });
+  assert.deepEqual(noName.calls.offer, ['beta'], 'falling back to the handle when the record carries no name');
+});
+
+test('the resume link gets the done panel back — the record was never cleared', () => {
+  const { calls, sandbox } = runEnter({ focus: true, resumeIntent: true, record: REC });
+  assert.deepEqual(calls.show, [[8, true]], 'a deliberate resume moves focus to the done panel');
+  assert.deepEqual(calls.progress, ['inst-1'], 'the watch comes back with it');
+  assert.equal(sandbox.resumeIntent, false, 'the flag is ONE-SHOT — the next plain nav click must mean "new" again');
+  assert.deepEqual(calls.offer, [null], 'and the offer comes down behind it');
+});
+
+test('a second draft already under way is NOT wiped by navigating back to the wizard', () => {
+  // The regression this guards: with the reset unconditional, typing a name, stepping
+  // away to "Your projects" and clicking "New project" again would blank the draft —
+  // trading the reported bug for a worse one.
+  const { calls, state } = runEnter({ focus: true, record: REC, draft: { step: 5 } });
+  assert.equal(calls.resets, 0, 'a live draft is never reset');
+  assert.deepEqual(calls.show, [[5, true]], 'the second draft resumes where it was left, heading focused');
+  assert.equal(state.step, 5);
+  assert.deepEqual(calls.offer, ['Acme'], 'the offer stays up beside it');
+});
+
+test('the done panel\'s own saved step is NOT a second draft — it must not block the reset', () => {
+  // Caught in a render, not in a unit test: show(8) calls saveDraft(), so DRAFT_KEY is
+  // non-empty again the moment a create lands. Reading "is there a draft?" left the
+  // finished project's name in the fresh form, under a line offering to resume it.
+  const { calls, state } = runEnter({ focus: true, record: REC, draft: { step: 8, name: 'Mercury' } });
+  assert.equal(calls.resets, 1, 'the done step is bookkeeping, not a project being typed');
+  assert.deepEqual(calls.show, [[1, false]], 'out-of-range steps land on the name step');
+  assert.equal(state.name, '', 'and the finished project\'s name does not survive into it');
+  assert.equal(calls.done, 0, 'never back onto the done panel');
+});
+
+test('a draft whose step is missing or junk resets too — only 1-7 preserves anything', () => {
+  for (const draft of [{ step: 0 }, { step: 9 }, { name: 'half-typed' }]) {
+    const { calls } = runEnter({ focus: true, record: REC, draft });
+    assert.equal(calls.resets, 1, `step ${JSON.stringify(draft.step)} is not a wizard step`);
+    assert.deepEqual(calls.show, [[1, false]]);
+  }
+});
+
+// ── the offer itself ─────────────────────────────────────────────────────────────
+test('paintResumeOffer names the project by textContent and hides on null (no live DOM from strings)', () => {
+  const els = { wizResume: { hidden: true }, wizResumeName: { textContent: '' } };
+  const sandbox = { $: (id) => els[id] };
+  sandbox.globalThis = sandbox;
+  vm.createContext(sandbox);
+  vm.runInContext(`${offerSlice}
+    paintResumeOffer({ id: 'i', name: 'Acme' });
+    var shown = { hidden: $('wizResume').hidden, name: $('wizResumeName').textContent };
+    paintResumeOffer(null);
+    var hid = $('wizResume').hidden;`, sandbox);
+  assert.equal(sandbox.shown.hidden, false, 'a record shows the line');
+  assert.equal(sandbox.shown.name, 'Acme', 'written as text, never as markup');
+  assert.equal(sandbox.hid, true, 'null takes it down');
+  assert.doesNotMatch(offerSlice, /innerHTML/, 'this surface builds no live DOM from strings');
+});
+
+test('the offer ships as real markup inside step 1, hidden until there is something to resume', () => {
+  const panel = HUB.slice(HUB.indexOf('id="panel-name"'), HUB.indexOf('id="panel-type"'));
+  assert.match(panel, /<p class="resumeOffer" id="wizResume" hidden>still watching <strong id="wizResumeName">your project<\/strong> — <a href="#" id="wizResumeGo">resume it<\/a><\/p>/,
+    'baked into the panel (C7), carrying its own hidden state');
+  assert.ok(panel.indexOf('id="wizResume"') < panel.indexOf('<form id="newForm"'),
+    'it sits above the name form, where a visitor reads it before typing');
+  assert.match(SCRIPT, /\$\('wizResumeGo'\)\.addEventListener\('click', function \(ev\) \{\n\s*ev\.preventDefault\(\);\n\s*resumeIntent = true;\n\s*enter\(true\);/,
+    'the link raises the one-shot intent and re-enters, rather than href-navigating');
+});
+
+test('the offer clears the 24px hit floor as a box, like every other link on this panel', () => {
+  assert.match(COSMOS, /#view-new \.resumeOffer a\{display:inline-block;padding:3px 0;min-height:24px;/,
+    'an inline link\'s rect is its content box — the floor needs the box');
+  assert.match(COSMOS, /#view-new \.resumeOffer\{[^}]*color:var\(--ink-soft\)/, 'quiet ink: this is an offer, not a banner');
+});
+
+// ── the reset the two doors share ────────────────────────────────────────────────
+test('"Start another project" is the deliberate goodbye: the record goes, and the offer with it', () => {
+  const again = SCRIPT.slice(SCRIPT.indexOf('function wireAgain()'), SCRIPT.indexOf('function createdRecord()'));
+  assert.match(again, /resetForNewProject\(\);/, 'it shares the reset with the intent-driven start');
+  assert.match(again, /sessionStorage\.removeItem\(CREATED_KEY\)/, 'and it alone drops the record');
+  assert.match(again, /paintResumeOffer\(null\)/, 'so the offer must not survive it');
+  assert.doesNotMatch(enterSlice, /removeItem\(CREATED_KEY\)/,
+    'the intent-driven path must NEVER clear the record — the link is the whole point');
+});
+
+test('the reset re-declares every key the initial state declares (modules is the one that bites)', () => {
+  const initial = SCRIPT.match(/var state = \{ step: 0,([^}]*)\}/);
+  const reset = SCRIPT.match(/function resetForNewProject\(\)[\s\S]*?state = \{ step: 1,([^}]*)\}/);
+  assert.ok(initial && reset, 'both state literals must be findable');
+  const keys = (s) => [...s.matchAll(/(\w+):/g)].map((m) => m[1]).sort();
+  assert.deepEqual(keys(reset[1]), keys(initial[1]),
+    'a key left out reads as undefined, not as its sentinel — pickedModules() called .slice() on it and the second project\'s Modules step threw');
+  assert.match(reset[1], /modules: null/, 'null is the picker\'s "nothing said" answer (task 1002339)');
+});