@bongos/core 1.21.30 → 1.21.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.21.30",
+  "version": "1.21.31",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -8936,5 +8936,11 @@
       "id": "1004493",
       "text": "The hall's sidebar now follows the mode you pick. Building shows the everyday tabs, Artistry shows Studio, Goals and Your thinking, Ideating shows the Sky, Your thinking and Goals, and Governing is the shortest list: Blockers,"
     }
+  ],
+  "1.21.31": [
+    {
+      "id": "1004550",
+      "text": "Setting up a new project is quicker: the final check screen now takes one click to accept, with less text and no per-row confirm buttons."
+    }
   ]
 }

package/src/module-api.js

@@ -75,7 +75,7 @@ const { responsibilityFor, ROLE_RESPONSIBILITIES } = require('./role-responsibil
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.21.30'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.21.31'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');

package/tests/projects_hub.mjs

@@ -2316,8 +2316,11 @@ test('the extras picker ships as real markup on the review\'s Extras row and is
   assert.match(EXTRAS_ROW, /id="modCards"/, 'the band the picker paints its rows into');
   assert.match(EXTRAS_ROW, /class="typeCards"/, 'and it is the SAME band the type and team questions use — no new grammar');
   assert.match(EXTRAS_ROW, /id="modCoreNote"/, 'the always-on core is stated on the row');
-  // the suggested set is accepted by its own control — "Looks right" — never inferred
-  assert.match(HUB, /<div class="setRow" data-row="extras">[\s\S]*?<button type="button" class="rowOk" data-row-ok>Looks right<\/button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change<\/button>/,
+  // the suggested set is accepted by a control — the page's "Looks right, continue", or
+  // Done on the open row (task 1004550) — never inferred
+  assert.match(HUB, /<div class="setRow" data-row="extras">[\s\S]*?<button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit<\/button>/,
+    'the row can be opened and changed');
+  assert.match(HUB, /<button type="submit" class="btn" id="reviewGo">Looks right, continue<\/button>/,
     'accepting the suggested set is a control, not an inference');
   // confirming turns the shown set into an answer given; the row's validity never refuses it
   const confirm = (SCRIPT.match(/function confirmRow\(key\) \{([\s\S]*?)\n    \}/) || [, ''])[1];
@@ -2397,6 +2400,6 @@ test('the kit stub answers the picker\'s read, so the panel renders in the desig
   assert.match(stub, /rest === '\/provisioning\/starter-bundles'/, 'the stub serves the picker\'s read');
   const probes = JSON.parse(fs.readFileSync(path.join(LANDING, 'projects.probes.json'), 'utf8')).probes;
   assert.ok(probes.some((p) => /the wizard driver \(tasks? 1003346\b/.test(p.name)
-    && p.steps.some((st) => st[1] === '#reviewRows .setRow[data-row="extras"] [data-row-ok]')),
-  'and the end-to-end driver confirms the Extras row rather than stopping at it (task 1004504)');
+    && p.steps.some((st) => st[1] === '#reviewGo')),
+  'and the end-to-end driver confirms the review rather than stopping at it (tasks 1004504, 1004550)');
 });

package/tests/projects_hub_app_step.mjs

@@ -1,7 +1,7 @@
 // tests/projects_hub_app_step.mjs — the create wizard's "where your app runs" question,
 // EXECUTED (task 1004351, ADR 0345), and its Render setup (task 1004352, ADR 0348). Since
 // task 1004504 the old App step is the review's "App hosting" row: its controls moved into
-// the row whole, and "Use this" runs the check its Next used to.
+// the row whole, and Done (the row's Edit, open) runs the check its Next used to.
 //
 // A static regex cannot tell a guard that works from one that is never consulted, so —
 // as tests/projects_hub_module_picker.mjs does for the picker — this slices the block out
@@ -162,7 +162,7 @@ test('the row is real markup: Render and Decide later, Decide later the default'
   assert.doesNotMatch(PANEL, /Coming soon/, 'and is no longer marked soon');
   assert.match(PANEL, /<input type="radio" name="appPlatform" value="later" checked>/, 'Decide later is the default');
   assert.ok(PANEL.indexOf('value="later"') < PANEL.indexOf('value="render"'), 'Decide later comes first');
-  assert.match(PANEL, /<button type="button" class="btn small rowUse" data-row-use>Use this<\/button>/, 'Use this confirms the row');
+  assert.match(HUB.slice(HUB.indexOf('<div class="setRow" data-row="app">')), /^[\s\S]*?<span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit<\/button>/, 'Edit opens the row, and reads Done to confirm it (task 1004550)');
   assert.doesNotMatch(HUB, /id="panel-app"/, 'the old App panel is gone');
 });
 
@@ -230,7 +230,8 @@ test('the hall is spelled one way on this page', () => {
 test('the key field says what the key is used for, and claims no protection it lacks', () => {
   const setup = (PANEL.match(/<div class="renderSetup"[\s\S]*?<div class="hint" id="h-render"/) || [''])[0];
   assert.match(setup, /<input type="password" id="f-renderKey" autocomplete="off"/, 'masked, and never autofilled');
-  assert.match(setup, /used once, to create your app on your own Render account, and then thrown away/);
+  assert.match(setup, /Used once to create your app on your Render account, then thrown away — not kept, not even in this browser/);
+  assert.match(setup, /A key can act on your whole Render account/, 'what a key can reach is still said (task 1004550 shortened the rest)');
   assert.match(setup, /Render bills you directly/);
   assert.match(setup, /href="https:\/\/dashboard\.render\.com\/u\/settings#api-keys"/, 'links to where Render issues keys');
   assert.doesNotMatch(setup, /encrypt|secure|safe|protected/i, 'no protection claim the design does not give (ADR 0327 §2)');

package/tests/projects_hub_module_picker.mjs

@@ -1,8 +1,9 @@
 // tests/projects_hub_module_picker.mjs — the create wizard's module picker,
 // EXECUTED (BV1.R20, task 1002339; goal 1000046 criterion `proj-module-select`).
 // Since task 1004504 the picker is the review's Extras row: its controls moved into the
-// row whole, "Looks right" / "Use this" confirm the set on screen, and there is no Skip —
-// Create waits for every row, this one included.
+// row whole, the page's one "Looks right, continue" (or Done on the open row) confirms
+// the set on screen (task 1004550), and there is no Skip — Create waits for every row,
+// this one included.
 //
 // tests/projects_hub.mjs pins this surface statically, on purpose (C7: "real
 // markup, not JS-built"). But the picker is the one part of the wizard whose
@@ -146,11 +147,11 @@ function makeEl(id) {
   };
 }
 
-// One review row, shaped like the markup: its hidden .opts, Looks right and Change.
+// One review row, shaped like the markup: its hidden .opts and its one Edit / Done control.
 function makeRow(key) {
   const row = makeEl('row-' + key);
   row.setAttribute('data-row', key);
-  const parts = { '.opts': makeEl('opts-' + key), '[data-row-ok]': makeEl('ok-' + key), '[data-row-chg]': makeEl('chg-' + key) };
+  const parts = { '.opts': makeEl('opts-' + key), '[data-row-chg]': makeEl('chg-' + key) };
   parts['.opts'].hidden = true;
   row.querySelector = (sel) => parts[sel] || null;
   return row;
@@ -220,7 +221,7 @@ function boot({ state: seed = {}, fetchOk = true, payload = PAYLOAD } = {}) {
   // a click inside the review, through its one delegated listener, as the browser sends it
   const rowClick = (attr) => {
     const row = rowFor('#reviewRows .setRow[data-row="extras"]');
-    const t = { hasAttribute: (a) => a === attr, closest: (sel) => (sel === '.setRow' ? row : null) };
+    const t = { hasAttribute: (a) => a === attr, closest: (sel) => (sel === '.setRow' ? row : null), focus() {} };
     $('reviewRows')._handlers.click({ target: { closest: () => t } });
   };
   return {
@@ -246,10 +247,11 @@ function boot({ state: seed = {}, fetchOk = true, payload = PAYLOAD } = {}) {
       };
       band._handlers.click({ target });
     },
-    // "Looks right" on the Extras row, "Change" to open it, "Use this" inside it
-    looksRight: () => rowClick('data-row-ok'),
+    // the page's "Looks right, continue" (every row through its own check), Edit to
+    // open the Extras row, and Done — the same control, open — to confirm it
+    looksRight: () => sandbox.confirmAllRows(),
     change: () => rowClick('data-row-chg'),
-    use: () => rowClick('data-row-use'),
+    use: () => rowClick('data-row-chg'),
     confirmed: () => !!(state.confirmed && state.confirmed.extras),
     unconfirmed: () => [...sandbox.unconfirmedRows()],
     forCreate: () => sandbox.modulesForCreate(),
@@ -355,7 +357,7 @@ test('an unconfirmed row answers NOTHING, and Create waits for it (no Skip since
   assert.ok(h.unconfirmed().includes('extras'), 'and the review holds Continue until the row is confirmed');
 });
 
-test('Change, a toggle, then Use this: the toggle stands as the answer', async () => {
+test('Edit, a toggle, then Done: the toggle stands as the answer', async () => {
   // A visitor who changed something and then confirmed meant "this", not "throw that away".
   const h = boot({ state: { projType: 'game' } });
   await h.open();
@@ -368,7 +370,7 @@ test('Change, a toggle, then Use this: the toggle stands as the answer', async (
   assert.equal(h.confirmed(), true, 'and the row is confirmed');
 });
 
-test('Looks right CONFIRMS the set on screen — looking at it and accepting it is not the same as never being asked', async () => {
+test('Looks right, continue CONFIRMS the set on screen — looking at it and accepting it is not the same as never being asked', async () => {
   const h = boot({ state: { projType: 'game' } });
   await h.open();
 

package/tests/projects_hub_pre_uat.mjs

@@ -243,7 +243,7 @@ test('a resumed draft past the code row still probes repo access before Create',
     'every screen between the review and the done panel re-probes');
 });
 
-test('a half-typed custom domain says why Use this is dead; a taken handle silences the format cheer', () => {
+test('a half-typed custom domain says why Done refuses it; a taken handle silences the format cheer', () => {
   assert.match(SCRIPT, /That doesn’t look like a domain yet \(e\.g\. moonbase\.example\.com\) — fix it, or clear the field to use the address above\./);
   assert.match(SCRIPT, /if \(avail === 'taken' \|\| avail === 'yours' \|\| avail === 'reserved'\) \{ var hs = \$\('h-slug'\); hs\.innerHTML = ' '; hs\.className = 'hint'; \}/);
 });

package/tests/wizard_physics_more.mjs

@@ -184,9 +184,12 @@ function boot({ check = (body) => ({ stop: false, soft_limits: softLimitsFor(bod
     a: () => state.physics.answers,
     pick: (key, val) => q(`[data-phys="${key}"][data-val="${val}"]`)[0].click(),
     rowSays: (key) => [row(key).querySelector('[data-row-v]').textContent, row(key).querySelector('[data-row-s]').textContent],
-    ok: (key) => row(key).querySelector('[data-row-ok]').click(),
+    // a row's own check and confirmation, as the page's one "Looks right, continue" runs it
+    // per row (task 1004550): there is no per-row Looks right any more
+    ok: (key) => vm.runInContext(`confirmRow('${key}')`, sandbox),
+    // Edit opens a row; the same control reads Done while it is open, and confirms it
     change: (key) => row(key).querySelector('[data-row-chg]').click(),
-    use: (key) => row(key).querySelector('[data-row-use]').click(),
+    done: (key) => row(key).querySelector('[data-row-chg]').click(),
     isOpen: (key) => !row(key).querySelector('.opts').hidden,
     go: () => $('reviewGo'),
     settle: async () => { for (let i = 0; i < 4; i += 1) await tick(); },
@@ -343,9 +346,11 @@ test('Team size: one or many, a start count, and a guessed growth the founder co
   assert.deepEqual(w.rowSays('team'), ['4 people now', 'About 12 by month three · people you invite.']);
   w.state.teamShape = 'community'; w.run('paintSetup()');
   assert.equal(w.rowSays('team')[1], 'About 12 by month three · anyone can apply.');
-  w.use('team');
+  assert.equal(w.row('team').querySelector('[data-row-chg]').textContent, 'Done', 'an open row\'s one control reads Done');
+  w.done('team');
   assert.equal(w.state.confirmed.team, true);
-  assert.equal(w.isOpen('team'), false, 'Use this closes the row');
+  assert.equal(w.isOpen('team'), false, 'Done closes the row');
+  assert.equal(w.row('team').querySelector('[data-row-chg]').textContent, 'Edit');
 });
 
 test('changing the team re-asks the rows it moves: rewards and extras', async () => {
@@ -372,13 +377,13 @@ test('rewards are hidden for a solo founder: the real table hides the row, and t
   assert.equal(w.run("rowApplies('rewards')"), false, 'the REAL softLimitsFor hides reward_intents for one-and-one');
   assert.equal(w.row('rewards').hidden, true, 'and the row goes with it');
   assert.ok(!w.run('unconfirmedRows()').includes('rewards'), 'nothing to confirm for a question never asked');
-  assert.equal(w.go().textContent, 'Confirm 6 more', 'six rows apply');
+  assert.equal(w.run('unconfirmedRows()').length, 6, 'six rows apply');
   assert.equal(w.run('createDetail()').reward_intents, undefined);
   w.change('team');
   w.q('[data-phys-solo="many"]')[0].click();
   await w.settle();
   assert.equal(w.row('rewards').hidden, false, 'a team brings the question back, once the table is asked again');
-  assert.equal(w.go().textContent, 'Confirm 7 more');
+  assert.equal(w.run('unconfirmedRows()').length, 7);
 });
 
 test('rewards: a greyed option is disabled and leaves the list, and each reason is said once', async () => {
@@ -472,30 +477,46 @@ test('a demo\'s team, rewards and run are the demo\'s own: fixed, said plainly,
 });
 
 // ── confirming, and the locked Continue ──────────────────────────────────────
-test('the review locks Continue until every row that applies is confirmed, and validateStep opens the first one left', async () => {
+test('one "Looks right, continue" confirms every row that applies, each through its own check (task 1004550)', async () => {
   const w = await onReview({ builders_at_start: 3, builders_expected: 8 });
-  assert.equal(w.go().disabled, true);
-  assert.equal(w.go().textContent, 'Confirm 7 more');
-  assert.equal(w.run('validateStep(4)'), false);
-  assert.equal(w.isOpen('code'), true, 'the first unconfirmed row opens');
-  for (const [i, key] of ['code', 'address', 'app', 'extras', 'team', 'rewards'].entries()) {
-    w.ok(key);
-    assert.equal(w.state.confirmed[key], true, key);
-    assert.equal(w.row(key).querySelector('[data-row-ok]').textContent, 'Confirmed');
-    assert.equal(w.row(key).querySelector('[data-row-ok]').disabled, true);
-    assert.equal(w.go().textContent, `Confirm ${6 - i} more`);
-  }
+  assert.equal(w.go().disabled, false, 'Continue is never locked: it is the confirmation');
+  assert.equal(w.go().textContent, 'Looks right, continue');
+  assert.equal(w.row('code').querySelector('[data-row-ok]'), null, 'no row carries a Looks right of its own');
+  assert.equal(w.run('unconfirmedRows()').length, 7, 'nothing is confirmed before the founder says so');
+  assert.equal(w.run('validateStep(4)'), true, 'one Continue confirms them all');
+  for (const key of ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run']) assert.equal(w.state.confirmed[key], true, key);
   assert.equal(w.state.modules && plain(w.state.modules).join(), 'discord', 'confirming the extras is the answer the create sends');
-  w.ok('run');
-  assert.equal(w.go().disabled, false);
-  assert.equal(w.go().textContent, 'Continue');
-  assert.equal(w.run('validateStep(4)'), true);
   w.change('team');
-  assert.equal(w.state.confirmed.team, undefined, 'Change takes a row back');
+  assert.equal(w.state.confirmed.team, undefined, 'Edit takes a row back');
   assert.equal(w.isOpen('team'), true);
-  assert.equal(w.go().textContent, 'Confirm 1 more');
+  assert.deepEqual(plain(w.run('unconfirmedRows()')), ['team']);
+  w.done('team');
+  assert.equal(w.isOpen('team'), false, 'Done closes it again');
+  assert.equal(w.state.confirmed.team, true, 'and Done is the answer');
+});
+
+test('Continue stops on the first row that fails its check, opened with its reason, and confirms nothing past it', async () => {
+  const w = await onReview({ builders_at_start: 3, builders_expected: 8 });
+  w.state.physics.answers.builders_at_start = 4; w.state.physics.answers.builders_expected = 2;   // fewer later than now
+  assert.equal(w.run('validateStep(4)'), false, 'Continue refuses');
+  assert.equal(w.isOpen('team'), true, 'the failing row opens');
+  assert.equal(w.state.confirmed.team, undefined);
+  assert.equal(w.state.confirmed.rewards, undefined, 'nothing after it is confirmed on the founder\'s behalf');
+  assert.equal(w.state.confirmed.code, true, 'the rows before it held, and stay confirmed');
+  assert.match(w.$('h-review').textContent, /Fix the row that’s open/);
+  assert.equal(w.$('h-review').className, 'hint err');
+});
+
+test('opening a row closes another open one whose answer holds, and leaves one that fails open', async () => {
+  const w = await onReview({ builders_at_start: 3, builders_expected: 8 });
+  w.change('code');
   w.change('team');
-  assert.equal(w.isOpen('team'), false, 'a second Change closes it again');
+  assert.equal(w.isOpen('code'), false, 'one row open at a time');
+  assert.equal(w.state.confirmed.code, true, 'closing it that way is the same as Done');
+  w.state.physics.answers.builders_expected = 1;   // fewer later than now: the team row fails
+  w.change('run');
+  assert.equal(w.isOpen('team'), true, 'a row that fails its check stays open');
+  assert.equal(w.isOpen('run'), true);
 });
 
 test('the prefills never overwrite a founder\'s own answer', () => {
@@ -578,7 +599,7 @@ test('a new owner walks from the quick checks through a fully confirmed review,
   w.ok('code'); w.ok('address'); w.ok('app'); w.ok('extras');
   w.change('team');
   w.q('[data-phys-solo="many"]')[0].click();
-  w.use('team');
+  w.done('team');
   await w.settle();
   assert.equal(w.state.confirmed.extras, undefined, 'the team moved the extras\' preselect, so that row is asked again');
   w.ok('extras');
@@ -586,16 +607,15 @@ test('a new owner walks from the quick checks through a fully confirmed review,
   w.change('rewards');
   w.pick('reward_intents', 'cash');
   w.pick('reward_intents', 'equity');
-  w.use('rewards');
+  w.done('rewards');
   w.change('run');
   w.pick('framing', 'open-source');
   await w.settle();
-  w.use('run');
+  w.done('run');
   assert.equal(w.state.confirmed.app, undefined, 'the framing moved the App hosting row');
   assert.equal(w.rowSays('app')[0], 'Runs on your own machines');
-  w.ok('app');
-  assert.equal(w.go().textContent, 'Continue');
-  assert.equal(w.run('validateStep(4)'), true);
+  assert.equal(w.run('validateStep(4)'), true, 'one Continue confirms the rest');
+  assert.equal(w.state.confirmed.app, true);
   const d = plain(w.run('createDetail()'));
   assert.deepEqual({ voice: d.voice, framing: d.framing, services: d.services, team: [d.builders_at_start, d.builders_expected], shape: d.team_shape, rewards: d.reward_intents },
     { voice: 'professional', framing: 'open-source', services: undefined, team: [2, 5], shape: 'small-team', rewards: ['cash', 'equity'] });
@@ -611,10 +631,14 @@ test('no path reaches Look without the founder confirming the address: a prefill
     assert.equal(w.row('address').querySelector('[data-row-chg]').hidden, false, `${label}: it can always be changed`);
     for (const key of ['code', 'app', 'extras', 'team', 'rewards', 'run']) if (w.run(`rowApplies('${key}')`)) w.ok(key);
     assert.deepEqual(plain(w.run('unconfirmedRows()')), ['address'], `${label}: every other row confirmed, the address still asked`);
-    assert.equal(w.go().disabled, true, `${label}: Continue stays locked`);
-    assert.equal(w.run('validateStep(4)'), false, `${label}: Continue refuses`);
+    // the address is on the page the founder confirms (task 1004550): only their own
+    // "Looks right, continue" — or Done on the row — confirms it, and its check still runs
+    w.run('validateAddress = function () { return false; }');
+    assert.equal(w.run('validateStep(4)'), false, `${label}: an address that fails its check refuses Continue`);
     assert.equal(w.isOpen('address'), true, `${label}: and opens the address row`);
-    w.use('address');
+    assert.equal(w.state.confirmed.address, undefined, `${label}: still unconfirmed`);
+    w.run('validateAddress = function () { return true; }');
+    w.done('address');
     assert.equal(w.state.confirmed.address, true, `${label}: choosing it is the answer`);
     assert.equal(w.run('validateStep(4)'), true, `${label}: then Continue goes on`);
   }

package/tests/wizard_six_screens.mjs

@@ -55,7 +55,7 @@ test('each screen opens with the mockup\'s own words', () => {
     ['panel-fork', 'You’re about to start a digital planet.', 'Try a small demo first, or start your real project.'],
     ['panel-what', 'What are you making?', null],
     ['panel-checks', 'A few quick checks.', 'These decide which legal and payout options we can offer.'],
-    ['panel-review', 'Check what we set up.', 'We filled these in from your answers. Confirm each one, or change it.'],
+    ['panel-review', 'Check what we set up.', 'We filled these in from your answers. Change anything that’s wrong.'],
     ['panel-look', 'Give it a look.', 'So builders always know which project they’re in.'],
   ];
   for (const [id, h, lede] of pairs) {
@@ -81,19 +81,21 @@ test('planet words survive only as the light touch: the fork and the alive momen
   assert.match(SCRIPT, /if \(inst\.last_verified_up\) \{\n\s*\/\*[^*]*\*\/\n\s*\$\('done-h'\)\.textContent =/, 'said only once the project has answered (Live is a verified claim)');
 });
 
-test('the review cannot be skipped: seven rows, each confirmed or changed, and a locked Continue', () => {
+test('the review cannot be skipped: seven rows, one Edit each, and one Continue that confirms them all (task 1004550)', () => {
   const p = panel('panel-review');
   const rows = [...p.matchAll(/<div class="setRow" data-row="([a-z]+)">/g)].map((m) => m[1]);
   assert.deepEqual(rows, ['code', 'address', 'app', 'extras', 'team', 'rewards', 'run']);
   for (const key of rows) {
     const r = (p.match(new RegExp(`<div class="setRow" data-row="${key}">[\\s\\S]*?<span class="acts">[^\\n]*\\n`)) || [''])[0];
-    assert.match(r, /<button type="button" class="rowOk" data-row-ok>Looks right<\/button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change<\/button>/, `${key}: Looks right and Change`);
-    assert.match(r, /<div class="opts" hidden>[\s\S]*<button type="button" class="btn small rowUse" data-row-use>Use this<\/button>/, `${key}: Change opens the row's own controls with Use this`);
+    assert.match(r, /<span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit<\/button><\/span>/, `${key}: one Edit, nothing else`);
+    assert.match(r, /<div class="opts" hidden>/, `${key}: Edit opens the row's own controls`);
   }
-  assert.match(p, /<button type="submit" class="btn" id="reviewGo" disabled>Confirm 7 more<\/button>/, 'Continue is baked locked');
-  assert.match(SCRIPT, /go\.textContent = left \? 'Confirm ' \+ left \+ ' more' : 'Continue';/, 'and says how many rows are left');
-  assert.match(SCRIPT, /if \(step === 4\) \{\n\s*var open = unconfirmedRows\(\);\n\s*if \(open\.length\) \{ openRow\(open\[0\]\); return false; \}/, 'Continue with a row left opens that row');
-  assert.match(SCRIPT, /if \(unconfirmedRows\(\)\.length\) \{ show\(4, true\); validateStep\(4\); return; \}/, 'and Create refuses until every row is confirmed');
+  assert.doesNotMatch(p, /data-row-ok|data-row-use|Use this/, 'no per-row Looks right and no Use this are left');
+  assert.match(p, /<button type="submit" class="btn" id="reviewGo">Looks right, continue<\/button>/, 'Continue is the one confirmation, never locked');
+  assert.match(SCRIPT, /if \(step === 4\) return confirmAllRows\(\);/, 'Continue confirms every row through its own check');
+  assert.match(SCRIPT, /if \(!confirmRow\(rows\[i\]\)\) \{/, 'and stops on the first that fails');
+  assert.match(SCRIPT, /if \(unconfirmedRows\(\)\.length\) \{ reopenReview\(\); return; \}/, 'and Create refuses until every row is confirmed');
+  assert.match(SCRIPT, /chg\.textContent = 'Done';/, 'an open row\'s control reads Done');
 });
 
 test('nothing the old steps could do is lost: their controls are moved whole into the rows', () => {