@bongos/core 1.21.30 → 1.21.32

package/modules/government/catalog.js

@@ -100,6 +100,7 @@ const PERMISSIONS = [
   // delegates it (ADR 0172, the owner's lever). The three WITH `substrate: true` are
   // enforced out of band and can never be delegated by a row in this database.
   { key: 'builder.rank.set', system: true, floor: 'archon', guards: 'PATCH /builders/:id/rank — the single rank writer' },
+  { key: 'version.focus.set', system: true, floor: 'archon', guards: "PUT /versions/focus — star a version as the project's focus (Archon only, never delegated; task 1004551)" },
   { key: 'version.close', system: true, floor: 'archon', guards: 'version close disposition (never delegated below Archon)' },
   // core.pin.move (task 1003159, ADR 0293) — MOVE AN INSTANCE'S CORE PIN: the act
   // that makes shipped work visible to users, and the most privileged thing an HTTP

package/modules/government/migrations/government_024_version_focus_set.sql

@@ -0,0 +1,19 @@
+-- government_024_version_focus_set.sql — grant `version.focus.set` to the Archon
+-- rank (task 1004551).
+--
+-- The atom gates PUT /versions/focus, which stars a version on the Roadmap as the
+-- project's focus. ARCHON ONLY and system:true, so no custom rank can be handed it
+-- without a visible catalog edit — the owner's decision on the task. The compat seed
+-- is run-once, so a new atom needs this follow-on grant (see government_014).
+--
+-- Additive, idempotent (ON CONFLICT DO NOTHING), forward-safe: INSERT only.
+
+BEGIN;
+
+INSERT INTO government_rank_permissions (rank_key, permission_key)
+SELECT 'archon', unnest(ARRAY[
+  'version.focus.set'
+])
+ON CONFLICT (rank_key, permission_key) DO NOTHING;
+
+COMMIT;

package/modules/hall-ui/public/roadmap.css

@@ -237,3 +237,8 @@ a.rm-goal__t:hover { color:var(--accent-ink); text-decoration:underline; }
   .rm-goal__dot { display:none; }
   .rm-goal__t { flex:1 0 100%; white-space:normal; }
 }
+/* Focus star (task 1004551): ink-faint when off, accent when on. */
+.rm-star { margin-left:auto; font-size:17px; line-height:1; color:var(--ink-faint); background:none; border:0; padding:0 2px; }
+button.rm-star { cursor:pointer; }
+button.rm-star:hover, button.rm-star:focus-visible { color:var(--accent); }
+.rm-star--on { color:var(--accent); }

package/modules/hall-ui/public/roadmap.js

@@ -147,6 +147,59 @@
     return `<a class="rm-gmore" href="${tasksLink(v.id)}" aria-label="${escapeHtml(label)}" title="${escapeHtml(label)}">View tasks ${arrowSvg}</a>`;
   }
 
+  // The focus star (task 1004551). The focus version is the project's default — chosen by
+  // an Archon here, stored server-side, never inferred. Filled = current focus. Archons
+  // get a button that sets/clears it; everyone else gets the same star read-only. The
+  // button is a convenience: PUT /versions/focus refuses non-Archons on the server.
+  const focus = { id: null, canSet: false };
+  const FOCUS_FAIL = 'Could not change the focus version. Reload and try again.';
+  function starHtml(v) {
+    const on = focus.id === v.id;
+    const glyph = on ? '★' : '☆';
+    const base = `class="rm-star${on ? ' rm-star--on' : ''}" data-vid="${escapeHtml(v.id)}"`;
+    if (focus.canSet) {
+      const tip = on ? 'Clear the focus version.' : 'Make this the project’s focus version.';
+      return `<button type="button" ${base} aria-pressed="${on}" title="${tip}" aria-label="${tip}">${glyph}</button>`;
+    }
+    const tip = (on ? 'This is the project’s focus version. ' : 'Not the focus version. ') + 'Only an Archon can set the focus.';
+    return `<span ${base} role="img" title="${tip}" aria-label="${tip}">${glyph}</span>`;
+  }
+
+  // Never throws except to hand a sign-in redirect back to boot(); a failed focus read
+  // just means no star is lit.
+  async function loadFocus() {
+    try {
+      const f = await getJSON(`${API}/versions/focus`);
+      focus.id = f.focus_version_id || null;
+      focus.canSet = f.can_set === true;
+    } catch (err) {
+      if (err && err.message === 'redirecting to auth') throw err;
+      focus.id = null; focus.canSet = false;
+    }
+  }
+
+  // Flip the stars in place: the PUT already answered with the new focus, so there is
+  // nothing to refetch.
+  function paintStars() {
+    document.querySelectorAll('.rm-star').forEach((el) => {
+      const tmp = document.createElement('div');
+      tmp.innerHTML = starHtml({ id: el.dataset.vid });
+      el.replaceWith(tmp.firstElementChild);
+    });
+  }
+
+  async function toggleFocus(vid) {
+    const next = focus.id === vid ? null : vid;
+    const res = await api.request('PUT', `${API}/versions/focus`, { body: { version_id: next } });
+    if (!res.ok) {
+      const e = res.data && res.data.error;
+      toast((e && e.message) || FOCUS_FAIL);
+      return;
+    }
+    focus.id = res.data.focus_version_id || null;
+    paintStars();
+  }
+
   // ---- card renderers -------------------------------------------------------
 
   function featCard(v) {
@@ -155,7 +208,7 @@
         <div class="rm-featgrid__l">
           <div class="rm-feat-top">
             <div class="rt">
-              <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span></div>
+              <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span>${starHtml(v)}</div>
               <h3 class="rm-name">${escapeHtml(v.name)}</h3>
               <p class="rm-desc rm-desc--clamp">${escapeHtml(v.desc)}</p>
             </div>
@@ -176,7 +229,7 @@
     return `<article class="rm-card">
       <div class="rm-feat-top">
         <div class="rt">
-          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span></div>
+          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span>${starHtml(v)}</div>
           <h3 class="rm-name">${escapeHtml(v.name)}</h3>
           <p class="rm-desc rm-desc--clamp">${escapeHtml(v.desc)}</p>
         </div>
@@ -218,7 +271,7 @@
     return `<article class="rm-card rm-card--staged" style="grid-column:1 / -1">
       <div class="rm-featgrid">
         <div class="rm-featgrid__l">
-          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span></div>
+          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span>${starHtml(v)}</div>
           <h3 class="rm-name">${escapeHtml(v.name)}</h3>
           <p class="rm-desc rm-desc--clamp">${escapeHtml(v.desc)}</p>
           <div class="rm-staged-state">
@@ -236,7 +289,7 @@
     return `<article class="rm-card rm-card--parked" style="grid-column:1 / -1">
       <div class="rm-feat-top">
         <div class="rt">
-          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span></div>
+          <div class="rm-row">${phase(v)}<span class="rm-id">${escapeHtml(v.id)}</span>${starHtml(v)}</div>
           <h3 class="rm-name">${escapeHtml(v.name)}</h3>
           <p class="rm-desc rm-desc--clamp">${escapeHtml(v.desc)}</p>
         </div>
@@ -381,9 +434,10 @@
   async function render() {
     const root = $('#rm-root');
     const [progress, versions] = await Promise.all([
+      loadFocus(),
       getJSON(`${API}/public/progress`).then((d) => d.progress || []),
       getJSON(`${API}/public/versions`).then((d) => d.versions || []).catch(() => []),
-    ]);
+    ]).then(([, p, v]) => [p, v]);
     const all = mergeVersions(progress, versions);
 
     // Goal summaries only for versions we actually show goals on (everything but
@@ -442,5 +496,10 @@
     }
   }
 
+  document.addEventListener('click', (e) => {
+    const b = e.target.closest && e.target.closest('button.rm-star');
+    if (b) toggleFocus(b.dataset.vid).catch(() => toast(FOCUS_FAIL));
+  });
+
   boot();
 })();

package/modules/lifecycle/routes/versions.js

@@ -45,6 +45,26 @@ module.exports = function buildVersionsRouter() {
     res.json({ versions: all.slice(offset, offset + limit), page: api.pageMeta(limit, offset, all.length) });
   });
 
+  // The project's focus version (task 1004551) — the one the Roadmap stars. Read: any signed-in builder. Write: Archon only,
+  // enforced here on the server, not just by the button hiding. No row = no focus.
+  // rank: any-builder — read-only; returns { focus_version_id: string|null, can_set }.
+  // can_set tells the page whether to draw a button — a hint only; PUT is the gate.
+  router.get('/versions/focus', auth.requireBuilder, asyncHandler('GET /versions/focus', async (req, res) => {
+    const rank = String((req.builder && req.builder.rank) || '').toLowerCase();
+    res.json({ focus_version_id: await api.projectSettings.getFocusVersionId(), can_set: rank === 'archon' });
+  }, { message: false }));
+
+  // rank: archon (atom version.focus.set, system) — body { version_id } sets the focus; { version_id: null } clears it.
+  // An unknown version id is refused rather than stored.
+  router.put('/versions/focus', auth.requireBuilder, auth.requirePermission('version.focus.set'), asyncHandler('PUT /versions/focus', async (req, res) => {
+    if (validateOrRespond(req, res, { version_id: { type: 'string', maxLength: 64 } })) return;
+    const raw = (req.body || {}).version_id;
+    if (raw === undefined || (raw !== null && !raw.trim())) return res.fail('bad_version_id', { status: 400, message: 'Pick a version to star, or send null to clear the focus.' });
+    if (raw !== null && !(await db.getVersion(raw.trim()))) return res.fail('unknown_version', { status: 404, message: `There is no version "${raw.trim()}" to star.` });
+    const focus = await api.projectSettings.setFocusVersionId(raw === null ? null : raw.trim(), req.builder && req.builder.id);
+    res.json({ ok: true, focus_version_id: focus });
+  }, { message: false }));
+
   // rank: public — read-only progress aggregate; mirrors /public/progress.
   router.get('/versions/progress', async (_req, res) => {
     const progress = await db.versionProgress();

package/modules/public-landing/public/projects-hall-live.states.json

@@ -99,14 +99,6 @@
           "wait",
           700
         ],
-        [
-          "click",
-          "#reviewRows .setRow[data-row=\"code\"] [data-row-ok]"
-        ],
-        [
-          "wait",
-          200
-        ],
         [
           "click",
           "#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"
@@ -135,39 +127,7 @@
         ],
         [
           "click",
-          "#reviewRows .setRow[data-row=\"address\"] [data-row-use]"
-        ],
-        [
-          "wait",
-          200
-        ],
-        [
-          "click",
-          "#reviewRows .setRow[data-row=\"app\"] [data-row-ok]"
-        ],
-        [
-          "wait",
-          150
-        ],
-        [
-          "click",
-          "#reviewRows .setRow[data-row=\"extras\"] [data-row-ok]"
-        ],
-        [
-          "wait",
-          150
-        ],
-        [
-          "click",
-          "#reviewRows .setRow[data-row=\"team\"] [data-row-ok]"
-        ],
-        [
-          "wait",
-          150
-        ],
-        [
-          "click",
-          "#reviewRows .setRow[data-row=\"run\"] [data-row-ok]"
+          "#reviewRows .setRow[data-row=\"address\"] [data-row-chg]"
         ],
         [
           "wait",

package/modules/public-landing/public/projects.html

@@ -269,12 +269,13 @@ h1[tabindex="-1"]:focus:not(:focus-visible){outline:none;}
 .fillOffer{margin:0 0 12px;}
 .wizRecap{margin:22px 0 0;font-size:15px;line-height:1.5;color:var(--ink-soft);}
 #view-new .doorPill .btn[disabled]{opacity:.35;cursor:default;}
-/* the review: one hairline ledger of rows. Each row is its label, its value with one
-   plain line under it, and two actions — Looks right (the accent, softly) and Change.
-   A confirmed row settles to a quiet tick; an open row shows the old step's own controls
-   under its value, and Continue below stays locked until every row is confirmed. */
+/* the review: one hairline ledger of rows (task 1004550). Each row is its label, its
+   value with one plain line under it, and one action — Edit, which reads Done while the
+   row is open over the old step's own controls. One "Looks right, continue" under the
+   ledger confirms them all. Inside an open row the choices are compact toggles, not the
+   full-width hairline cards the question screens use. */
 .setRows{margin:24px 0 0;border-top:1px solid var(--rule);}
-.setRow{display:grid;grid-template-columns:120px minmax(0,1fr) auto;gap:0 16px;align-items:start;padding:16px 0;border-bottom:1px solid var(--rule);}
+.setRow{display:grid;grid-template-columns:120px minmax(0,1fr) auto;gap:0 16px;align-items:start;padding:14px 0;border-bottom:1px solid var(--rule);}
 .setRow[hidden]{display:none;}
 .setRow .k{font-size:13px;line-height:22px;color:var(--ink-faint);padding-top:2px;}
 .setRow .v{min-width:0;}
@@ -283,16 +284,31 @@ h1[tabindex="-1"]:focus:not(:focus-visible){outline:none;}
 .setRow .rowS:empty{display:none;}
 .setRow .acts{display:flex;gap:6px;flex:none;}
 .setRow .acts button{min-height:34px;padding:0 14px;border-radius:999px;font:inherit;font-size:13px;white-space:nowrap;cursor:pointer;}
-.setRow [data-row-ok]{border:1px solid color-mix(in srgb,var(--accent) 55%,transparent);background:color-mix(in srgb,var(--accent) 14%,transparent);color:var(--ink);}
 .setRow [data-row-chg]{border:1px solid var(--glass-edge);background:var(--glass);color:var(--ink-soft);}
 .setRow [data-row-chg]:hover{color:var(--ink);}
 .setRow [data-row-chg][hidden]{display:none;}
-.setRow.done .rowV{color:var(--ink-soft);}
-.setRow.done [data-row-ok]{border-color:transparent;background:none;color:var(--accent);cursor:default;}
-.setRow.done [data-row-ok]::before{content:"✓ ";}
-.setRow.open [data-row-ok]{display:none;}
-.setRow .opts{margin-top:14px;}
-.setRow .opts .rowUse{margin-top:6px;}
+.setRow.open [data-row-chg]{border-color:color-mix(in srgb,var(--accent) 55%,transparent);background:color-mix(in srgb,var(--accent) 14%,transparent);color:var(--ink);}
+.setRow .opts{margin-top:12px;}
+.setRow .opts .wizField{margin-bottom:12px;}
+.setRow .opts .hint:empty{display:none;}
+/* compact toggles: the repo choice and every short pill group in an open row */
+.setRow .opts .choices,
+.setRow .opts .typeCards.physCells:not(.physSuiteGrid),
+.setRow .opts #teamCards{display:inline-flex;flex-wrap:wrap;gap:0;border:1px solid var(--rule);border-radius:999px;padding:3px;margin:0 8px 12px 0;vertical-align:top;}
+.setRow .opts .choices .choice,
+.setRow .opts .typeCards.physCells:not(.physSuiteGrid) .tpill,
+.setRow .opts #teamCards .tpill{display:inline-flex;align-items:center;gap:6px;min-height:32px;padding:0 14px;border:0;border-radius:999px;font-size:14px;font-weight:500;color:var(--ink-soft);background:none;}
+.setRow .opts .choices .choice b{margin:0;font-size:14px;color:inherit;}
+.setRow .opts .choices .choice b::before,
+.setRow .opts .typeCards.physCells:not(.physSuiteGrid) .tpill::before,
+.setRow .opts #teamCards .tpill::before{display:none;}
+.setRow .opts .choices .choice p{display:none;}
+.setRow .opts .reassure{font-size:13px;margin:0 0 12px;}
+.setRow .opts .choices .choice[aria-pressed=true],
+.setRow .opts .typeCards.physCells:not(.physSuiteGrid) .tpill[aria-pressed=true],
+.setRow .opts #teamCards .tpill[aria-pressed=true]{background:color-mix(in srgb,var(--accent) 18%,transparent);color:var(--ink);}
+/* a reason for a question the table hides explains nothing on screen */
+.physExisting[hidden] + .physWhy{display:none;}
 @media (max-width:560px){
   .setRow{grid-template-columns:minmax(0,1fr);gap:6px 0;}
   .setRow .k{padding-top:0;}
@@ -1600,14 +1616,15 @@ summary{min-height:24px;padding:3px 0;}
             </div>
           </section>
 
-          <!-- 4 · check what we set up: every prefilled answer is a row the founder
-               confirms ("Looks right") or changes in place. Change opens the step's own
-               controls, moved here whole, so every handler and id is the one it always was;
-               "Use this" checks the row the way its old step did and confirms it. Continue
-               stays locked until every row that applies is confirmed. -->
+          <!-- 4 · check what we set up: every prefilled answer is a one-line row the
+               founder reads, and changes in place if it is wrong (task 1004550). Edit opens
+               the step's own controls, moved here whole, so every handler and id is the one
+               it always was; Done checks the row the way its old step did. One "Looks right,
+               continue" confirms every row at once, and stops on the first row that fails
+               its check, opened with its reason. -->
           <section class="panel" id="panel-review" aria-labelledby="rev-h">
             <h1 id="rev-h">Check what we set up.</h1>
-            <p class="lede">We filled these in from your answers. Confirm each one, or change it.</p>
+            <p class="lede">We filled these in from your answers. Change anything that’s wrong.</p>
             <form data-next="5" id="reviewForm">
               <div class="setRows" id="reviewRows">
 
@@ -1628,15 +1645,15 @@ summary{min-height:24px;padding:3px 0;}
                       <p class="physWhy" data-why="existing_work" hidden></p>
                       <div class="choices" role="group" aria-label="Starting point">
                         <button type="button" class="choice" id="c-green" aria-pressed="true">
-                          <b>A new GitHub repo</b>
-                          <p>An empty <strong>public</strong> repo, set up for you.</p>
+                          <b>A new repo</b>
+                          <p>Public, set up for you</p>
                         </button>
                         <button type="button" class="choice" id="c-adopt" aria-pressed="false">
-                          <b>A repo I already have</b>
-                          <p>Public or private, we never change it.</p>
+                          <b>A repo I have</b>
+                          <p>Public or private</p>
                         </button>
                       </div>
-                      <div class="reassure" id="adoptNote">Nothing is overwritten. You see any conflicts first, and your open issues become tasks.</div>
+                      <div class="reassure" id="adoptNote">Nothing is overwritten. You see conflicts first, and open issues become tasks.</div>
                       <!-- GitHub-integrated repo picker (adopt) + auto-create (fresh) — task 1002099.
                            Without repo access we fall back to the manual owner/repo inputs
                            (#manualHome), which stay authoritative. -->
@@ -1652,14 +1669,14 @@ summary{min-height:24px;padding:3px 0;}
                         <div id="ghList" class="ghlist" role="group" aria-label="Your repositories"></div>
                         <div class="hint" id="ghAdoptHint">&nbsp;</div>
                         <!-- visibility stated on EVERY repo path (task 1002721) -->
-                        <div class="hint">We never change a repo’s visibility — public stays public, private stays private.</div>
+                        <div class="hint">We never change it: public stays public, private stays private.</div>
                       </div>
                       <div id="ghFresh" class="wizField" hidden>
                         <span>New repository name</span>
                         <input type="text" id="ghNewName" placeholder="moonbase" autocomplete="off" maxlength="100" aria-label="New repository name">
                         <!-- visibility is stated on EVERY repo path (task 1002721); updateFreshPreview()
                              replaces this floor with the same claim plus the resolved repo URL -->
-                        <div class="hint" id="ghFreshHint">We’ll create an empty <strong>public</strong> repo — projects here are open by design. Want private code? Create the repo yourself on GitHub and “adopt” it instead — a private repository gets its own read-only deploy key automatically.</div>
+                        <div class="hint" id="ghFreshHint">A new <strong>public</strong> repo. For private code, pick “A repo I have”.</div>
                       </div>
                       <div class="row2" id="manualHome">
                         <label class="wizField"><span>GitHub owner <small>(user or org)</small></span>
@@ -1669,13 +1686,12 @@ summary{min-height:24px;padding:3px 0;}
                           <input type="text" id="f-repo" placeholder="moonbase" autocomplete="off" maxlength="120">
                         </label>
                         <!-- visibility stated BEFORE GitHub's own radio is the first place it appears (task 1002721) -->
-                        <div class="hint" style="grid-column:1 / -1;">Creating the repo yourself on GitHub? Public or private is your choice there — both work here, and we never change it.</div>
+                        <div class="hint" style="grid-column:1 / -1;">Public or private both work, and we never change it.</div>
                       </div>
                       <div class="hint" id="h-home">&nbsp;</div>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- the address (tasks 1002704, 1002898 N8, PS19): the assigned address is
@@ -1705,10 +1721,9 @@ summary{min-height:24px;padding:3px 0;}
                           <span>No address yet. Sign-in can’t be switched on until it has one.</span>
                         </label>
                       </div>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- where the app runs (tasks 1004351, 1004352; ADR 0345): the hall is ours to
@@ -1731,9 +1746,9 @@ summary{min-height:24px;padding:3px 0;}
                             <span id="appRenderWhat">We set it up on your own Render account. Render bills you directly.</span></span>
                         </label>
                       </fieldset>
-                      <p class="renderWhy" id="renderLater" role="status" hidden>Your new repo has no app yet, so there is nothing for Render to run. Once your builders write it, set it up from your project’s page. Nothing is created on Render now.</p>
+                      <p class="renderWhy" id="renderLater" role="status" hidden>Your new repo has no app yet, so nothing is created on Render now. Set it up from your project’s page once there is one.</p>
                       <div class="renderSetup" id="renderSetup" hidden>
-                        <p class="renderWhy">Your Render key is used once, to create your app on your own Render account, and then thrown away — it is not kept, not even in this browser. Render bills you directly. A key can act on your whole Render account, so only paste it here. <a href="https://dashboard.render.com/u/settings#api-keys" target="_blank" rel="noopener noreferrer">Create a key in Render</a></p>
+                        <p class="renderWhy">Used once to create your app on your Render account, then thrown away — not kept, not even in this browser. A key can act on your whole Render account. Render bills you directly. <a href="https://dashboard.render.com/u/settings#api-keys" target="_blank" rel="noopener noreferrer">Create a key in Render</a></p>
                         <div class="renderKeyRow">
                           <label class="wizField"><span>Render API key</span>
                             <input type="password" id="f-renderKey" autocomplete="off" spellcheck="false" maxlength="200" placeholder="rnd_…" aria-describedby="h-renderKey">
@@ -1775,10 +1790,9 @@ summary{min-height:24px;padding:3px 0;}
                         </div>
                         <div class="hint" id="h-render" role="status">&nbsp;</div>
                       </div>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- the extras (tasks 1002339, 1002340): the type's suggested set until the
@@ -1796,10 +1810,9 @@ summary{min-height:24px;padding:3px 0;}
                       </div>
                       <div class="modWhy" id="modWhy" aria-live="polite"></div>
                       <div class="reassure" id="modCoreNote"></div>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- team size (question 5, task 1004419): one person, or a team with a count
@@ -1832,10 +1845,9 @@ summary{min-height:24px;padding:3px 0;}
                           </div>
                         </div>
                       </div>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- rewards (question 6): intent only, never asked of a founder building
@@ -1851,10 +1863,9 @@ summary{min-height:24px;padding:3px 0;}
                         <button type="button" class="tpill" data-phys="reward_intents" data-val="future-payouts" aria-pressed="false">Future payouts</button>
                       </div>
                       <ul class="physWhyList" data-why-list="reward_intents" hidden></ul>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
 
                 <!-- how much we run (question 7): a hybrid or local framing opens its suite -->
@@ -1885,16 +1896,15 @@ summary{min-height:24px;padding:3px 0;}
                         </div>
                         <ul class="physWhyList" data-why-list="services" hidden></ul>
                       </fieldset>
-                      <button type="button" class="btn small rowUse" data-row-use>Use this</button>
                     </div>
                   </div>
-                  <span class="acts"><button type="button" class="rowOk" data-row-ok>Looks right</button><button type="button" class="rowChg" data-row-chg aria-expanded="false">Change</button></span>
+                  <span class="acts"><button type="button" class="rowChg" data-row-chg aria-expanded="false">Edit</button></span>
                 </div>
               </div>
               <div class="hint" id="h-review">&nbsp;</div>
               <div class="nav">
                 <span></span>
-                <button type="submit" class="btn" id="reviewGo" disabled>Confirm 7 more</button>
+                <button type="submit" class="btn" id="reviewGo">Looks right, continue</button>
               </div>
             </form>
           </section>
@@ -5335,7 +5345,7 @@ summary{min-height:24px;padding:3px 0;}
         /* Visibility stated up front (task 1002694 / idea 1000684): repos WE create are
            public by design (github-repos.js — open-source, capture-resistant); the
            private path is adopting a private repo the owner makes themselves. */
-        hint.className = 'hint'; hint.innerHTML = 'We’ll create an empty <strong>public</strong> repo at <code style="font-family:var(--font-mono)">github.com/' + esc(myLogin()) + '/' + esc(state.repo || 'name') + '</code> — projects here are open by design. Want private code? Create the repo yourself on GitHub and “adopt” it instead — a private repository gets its own read-only deploy key automatically.';
+        hint.className = 'hint'; hint.innerHTML = 'A new <strong>public</strong> repo at <code style="font-family:var(--font-mono)">github.com/' + esc(myLogin()) + '/' + esc(state.repo || 'name') + '</code>. For private code, make the repo on GitHub and pick “A repo I have”.';
       }
     }
     $('ghNewName').addEventListener('input', function () { state.repo = this.value.trim(); updateFreshPreview(); saveDraft(); });
@@ -5978,12 +5988,8 @@ summary{min-height:24px;padding:3px 0;}
       }
       /* the quick checks walk to the review themselves, after the server's screen */
       if (step === 3) return checksAdvance();
-      /* the review: every row that applies confirmed, each still true */
-      if (step === 4) {
-        var open = unconfirmedRows();
-        if (open.length) { openRow(open[0]); return false; }
-        return true;
-      }
+      /* the review: every row that applies confirmed at once, each still true */
+      if (step === 4) return confirmAllRows();
       return true;
     }
 
@@ -6157,7 +6163,9 @@ summary{min-height:24px;padding:3px 0;}
       if (!row || rowFixed(key)) return;
       row.classList.add('open');
       row.querySelector('.opts').hidden = false;
-      row.querySelector('[data-row-chg]').setAttribute('aria-expanded', 'true');
+      var chg = row.querySelector('[data-row-chg]');
+      chg.setAttribute('aria-expanded', 'true');
+      chg.textContent = 'Done';
       if (key === 'address') { checkSlugAvailable(); renderAddrPanel(); }
       if (key === 'extras') renderModules();
       if (key === 'code') syncHome();
@@ -6167,11 +6175,14 @@ summary{min-height:24px;padding:3px 0;}
       var row = rowEl(key);
       row.classList.remove('open');
       row.querySelector('.opts').hidden = true;
-      row.querySelector('[data-row-chg]').setAttribute('aria-expanded', 'false');
-    }
-    /* Looks right, or Use this: the row's own checks first — a row that fails opens
-       with its reason showing — then it is the founder's answer. The extras row turns
-       "the suggested set" into an answer given, a different fact from never asked. */
+      var chg = row.querySelector('[data-row-chg]');
+      chg.setAttribute('aria-expanded', 'false');
+      chg.textContent = 'Edit';
+    }
+    /* Done on an open row, or the page's one "Looks right, continue": the row's own
+       checks first — a row that fails stays open with its reason showing — then it is
+       the founder's answer. The extras row turns "the suggested set" into an answer
+       given, a different fact from never asked. */
     function confirmRow(key) {
       if (!rowValid(key)) { openRow(key); return false; }
       /* only once the catalog is here: without it the suggested set is unknown, and an
@@ -6181,21 +6192,54 @@ summary{min-height:24px;padding:3px 0;}
       closeRow(key);
       saveDraft();
       paintSetup();
-      var next = unconfirmedRows()[0];
-      var go = next ? rowEl(next).querySelector('[data-row-ok]') : $('reviewGo');
-      if (go && !go.disabled) go.focus({ preventScroll: true });
       return true;
     }
+    /* the page's one confirmation (task 1004550): every row that applies, in order,
+       through its own check; the first that fails opens with its reason and stops it */
+    function confirmAllRows() {
+      var rows = unconfirmedRows();
+      for (var i = 0; i < rows.length; i++) {
+        if (!confirmRow(rows[i])) {
+          var row = rowEl(rows[i]);
+          if (row && row.scrollIntoView) row.scrollIntoView({ block: 'center' });
+          $('h-review').textContent = 'Fix the row that’s open, then continue.';
+          $('h-review').className = 'hint err';
+          return false;
+        }
+      }
+      $('h-review').textContent = '\u00a0'; $('h-review').className = 'hint';
+      return true;
+    }
+    /* back to the review from a later screen with rows left to confirm: show the first
+       one that fails its check opened, and confirm nothing on the founder's behalf */
+    function reopenReview() {
+      show(4, true);
+      var bad = unconfirmedRows().filter(function (k) { return !rowValid(k); })[0];
+      if (bad) openRow(bad);
+    }
     $('reviewRows').addEventListener('click', function (ev) {
-      var t = ev.target.closest && ev.target.closest('[data-row-ok], [data-row-chg], [data-row-use]');
+      var t = ev.target.closest && ev.target.closest('[data-row-chg]');
       if (!t) return;
       var key = t.closest('.setRow').getAttribute('data-row');
-      if (t.hasAttribute('data-row-chg')) {
-        if (rowEl(key).classList.contains('open')) closeRow(key);
-        else { delete confirmedRows()[key]; openRow(key); paintSetup(); }
+      /* Done: the row's check, then closed — or left open with its reason */
+      if (rowEl(key).classList.contains('open')) {
+        if (confirmRow(key)) t.focus({ preventScroll: true });
         return;
       }
-      confirmRow(key);
+      /* Edit: one row open at a time — another open row closes if its answer holds */
+      ROWS.forEach(function (k) { if (k !== key && rowEl(k).classList.contains('open') && rowValid(k)) confirmRow(k); });
+      delete confirmedRows()[key]; openRow(key); paintSetup();
+    });
+    /* an open row's value line follows what is typed or picked under it, live — the
+       controls' own handlers run first (they are on the targets), then the row repaints */
+    ['input', 'change'].forEach(function (type) {
+      $('reviewRows').addEventListener(type, function (ev) {
+        if (ev.target.closest && ev.target.closest('.setRow.open .opts')) {
+          var row = ev.target.closest('.setRow'), t = rowText(row.getAttribute('data-row'));
+          row.querySelector('[data-row-v]').textContent = t.v;
+          row.querySelector('[data-row-s]').textContent = t.s;
+        }
+      });
     });
 
     /* what each row says: its value and one plain line under it */
@@ -6280,15 +6324,8 @@ summary{min-height:24px;padding:3px 0;}
         row.classList.toggle('done', !!c[key]);
         row.querySelector('[data-row-v]').textContent = t.v;
         row.querySelector('[data-row-s]').textContent = t.s;
-        var ok = row.querySelector('[data-row-ok]');
-        ok.textContent = c[key] ? 'Confirmed' : 'Looks right';
-        ok.disabled = !!c[key];
         row.querySelector('[data-row-chg]').hidden = rowFixed(key);
       });
-      var left = unconfirmedRows().length;
-      var go = $('reviewGo');
-      go.disabled = left > 0;
-      go.textContent = left ? 'Confirm ' + left + ' more' : 'Continue';
     }
     /* screen 5's one line: what Create is about to make */
     function renderRecap() {
@@ -6382,7 +6419,7 @@ summary{min-height:24px;padding:3px 0;}
          project (task 1004417) */
       if (!state.termsAck) { show(1, true); validateStep(1); return; }
       /* nothing is created before every row of the review is confirmed */
-      if (unconfirmedRows().length) { show(4, true); validateStep(4); return; }
+      if (unconfirmedRows().length) { reopenReview(); return; }
       btn.disabled = true; btn.textContent = 'Raising it into the sky…';
       ensureFreshRepo().then(function () {
         return fetch(API + '/provisioning/instances', {