@bongos/core 1.21.106 → 1.21.107

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.21.106",
-  "core_contract": "1.21.106",
-  "source_commit": "63d003496fef090a6f77e6cef260282c0cd52038",
+  "core_version": "1.21.107",
+  "core_contract": "1.21.107",
+  "source_commit": "66864d4729f78666ac0d3cc86772672dad49d007",
   "source_ref": "HEAD",
-  "built_at": "2026-10-09T15:42:26.743Z",
+  "built_at": "2026-10-09T16:17:03.848Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
     "docs_redacted": 592,
     "agent_docs_stubbed": 28,
-    "functional_verbatim": 3023,
+    "functional_verbatim": 3027,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3644,
-  "tree_sha256": "70321783d2b92a25ef3a8ab8844c5ef91e9d1f995c39890d61ef3a830c7731d2",
+  "file_count": 3648,
+  "tree_sha256": "7b88f76244577f7ff0ed046eef50822d8f34efad63453b8257040b942df1708a",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -317,12 +317,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "be92a792c9e31d1e9ed27daa7100b4690d1daf3058696773faa5e027fa1217f9"
+      "sha256": "91c5efc7dccdd2f340a3614b34c2a2819abc13416e960b53d141f1813c1b99db"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "38ce1804582b7c52760bcef0165d8717b12c63ec07458e758c35cfb15cd825cd"
+      "sha256": "69e333da3eb4e9b56be940bcf96a8ea15c9b01743c7a1897a388ce9d12bb7808"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -332,17 +332,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "9c53971b3f18dd7e4bc98e76259909bfc992a382bc6f8d1e771856ae88908aa9"
+      "sha256": "cbcff06b2e51bc07dc9bb86267a163edd59ea3a90410a2a7cf32f54689d6dc11"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "eb0e60d817b14b4e301e0cf1356c2df5b4ee3064b28584cd54552a4db88bdd94"
+      "sha256": "87a3e5f52908abab175b07d614fcfe59ffa2e45905bb48d4aee760412cd571d2"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "04f464358035a3d57a7840319acce0012ec5585cab9393a9a8b7ada8dc08acd9"
+      "sha256": "151e3d04622f5ea4ed18e8994a1e0054250d9cd47dea2d4cc6757fa3430ed7a0"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -2327,12 +2327,12 @@
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "ed7f8d58d6d1524cc80208d6658723d77f78edc612315f7c8e81df8ff77639e6"
+      "sha256": "2664221c9a2b16fde834338979647972cb2ff8d65e223a08edccd90b2427186f"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "e1042de87b32e2c0c4846a1718776d3f9397555c765c1bcbc4d3f0c25df08c9c"
+      "sha256": "5458c8e5fe23d697de50e4fd6317cb8868208e2e6026f6fa74c0f1a291ab586e"
     },
     {
       "path": "docs/architecture.md",
@@ -2872,7 +2872,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "d7a76048114891799ae8461ce0683d4de855db2173562647fa5085ad9d40c5b4"
+      "sha256": "e04eba1f8d62cb1ae1251c701aad1d4108cf1c48c2bd7a71eade2c29d419e80e"
     },
     {
       "path": "docs/modules-contract.md",
@@ -4099,6 +4099,11 @@
       "mode": "0000644",
       "sha256": "48266ddb9168d1240029ecf6e69572010512dddc219d0f0cb4d6b373775752eb"
     },
+    {
+      "path": "migrations/core_275_claims_auto_pickup.sql",
+      "mode": "0000644",
+      "sha256": "75381af0ac96645f2f8fe254f609c75d2fa83bc2fc1f13887c23165fc8eed58e"
+    },
     {
       "path": "modules/agents/CLAUDE.md",
       "mode": "0000644",
@@ -4947,7 +4952,7 @@
     {
       "path": "modules/government/decision-rules.js",
       "mode": "0000644",
-      "sha256": "942304d1b77cc7f428a5f4f2462e28a96accc23de2e081ba7c62d9a8a61f44cf"
+      "sha256": "7e0191b9b20cdbf2f74f6149235b53bb9f4fb9167507c742d8bedc477610c4f4"
     },
     {
       "path": "modules/government/docket-floors.js",
@@ -6824,6 +6829,11 @@
       "mode": "0000644",
       "sha256": "e7c7db8a6faf50f3b75cb26ac33caa8357c462293e64318212ace69b0b654507"
     },
+    {
+      "path": "modules/lifecycle/autopickup.js",
+      "mode": "0000644",
+      "sha256": "e1a135cd31cff98754c3d9eab3c1d8f5e77a18b19b0e6ba6687b58babab4ce49"
+    },
     {
       "path": "modules/lifecycle/cascade.js",
       "mode": "0000644",
@@ -6897,7 +6907,7 @@
     {
       "path": "modules/lifecycle/db-claims.js",
       "mode": "0000644",
-      "sha256": "56e718a165a9f3d126efc91128bd5e41a2bb490e584f35db4a271020f2903a42"
+      "sha256": "bfdaf979059f10ff3d2f94d5d7f9d7fa377f1a2756967c84f7008fb1b68c83eb"
     },
     {
       "path": "modules/lifecycle/db-deps-criteria.js",
@@ -7297,7 +7307,7 @@
     {
       "path": "modules/lifecycle/routes/claims.js",
       "mode": "0000644",
-      "sha256": "08003dc8a2c691a74a6279c17980d21a2406eb302da7546b332083038fcf279e"
+      "sha256": "6b872458c5d872cc84f48b173cb4480da73223c8f3284df886dbf4acb0837467"
     },
     {
       "path": "modules/lifecycle/routes/closeness.js",
@@ -7372,7 +7382,7 @@
     {
       "path": "modules/lifecycle/routes/project-settings.js",
       "mode": "0000644",
-      "sha256": "e892c118488d028f5a0203b5560fb8efa0047e2a4bbac9faafe5ee2132027c54"
+      "sha256": "779b4865cb7792b1d03661d1b6212d9e99aa0691a79664f4bd923a6a5777d5e5"
     },
     {
       "path": "modules/lifecycle/routes/recommendations.js",
@@ -10147,12 +10157,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "67552216995dcf69136a5e6918b5cf8d96d7832af82448473c6f03099d3d72a8"
+      "sha256": "c16dedbb2b09e052499c6ab3e729d3b6398b070d283e5fcd459a722330a9bcd3"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "3a8dfeed7453004aea1343f0b269db0bb7a2d0ac5269b2f7dc42b60e341e45ef"
+      "sha256": "e2deb79f00c230babbea2ba21005f4dcd2d6f2208638c44d2f6b38ba01416fcc"
     },
     {
       "path": "public-docs/index.html",
@@ -10172,7 +10182,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "6a3928b97650616ec0cf2c742e1b596a32ea7e32e7cc9117f59221ddcee75680"
+      "sha256": "6182edd848be32362494da2bc94f8a4c33bca78bf2c6b9a253834d65531853b4"
     },
     {
       "path": "scripts/cron/style_guide_audit.sh",
@@ -10857,7 +10867,7 @@
     {
       "path": "scripts/gds/government-walk.js",
       "mode": "0000644",
-      "sha256": "f7a6091ce0621fdfdf69f667e44e52aaf96f6a1222f52f9e5730ff003e162383"
+      "sha256": "c456509abfc61709bb1613a63493312560014e236ca12a5f022c4cec9e6ad832"
     },
     {
       "path": "scripts/gds/grade-correlation-audit.js",
@@ -11397,7 +11407,7 @@
     {
       "path": "scripts/gds/run-unit-tests.js",
       "mode": "0000644",
-      "sha256": "22dfb39178515162ef7c4f9be943d5b4f520925e8f401a2e38394d363f503173"
+      "sha256": "e9324b2fe5b23acb8b45723ba7d11d708cbdf92b63e70d0387246eb6fd1a5ac9"
     },
     {
       "path": "scripts/gds/runner-drift.js",
@@ -12267,7 +12277,7 @@
     {
       "path": "src/bongos/project-settings.js",
       "mode": "0000644",
-      "sha256": "7b7911f4a301926fa6227cfddab7d5aac41eb79cd3487625c90c3adfb1b46b2b"
+      "sha256": "4a8235d9a6b6dbd4dd876bc8681074fa9dfad36c6ca2f620012b89c27083e910"
     },
     {
       "path": "src/bongos/repo-info.js",
@@ -12447,7 +12457,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "c67059298f9da4994aa855a30dbe99fbabf1d246732bb26614a0d2c4af43357c"
+      "sha256": "468b26045e9d63b3a8f75572e5bccb37517ad08719c7828048c80e4ec40e15dc"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -12989,6 +12999,16 @@
       "mode": "0000644",
       "sha256": "1c1c7b862d134033ef8cdfef8288f989be6a25c25dade657c5b57e4f1bd2c46c"
     },
+    {
+      "path": "tests/autopickup_cap.mjs",
+      "mode": "0000644",
+      "sha256": "c447ac65b59cd60ed0924cf95ce50d56d745fd42d5ad48e468387707ff01188a"
+    },
+    {
+      "path": "tests/autopickup_cap_db.mjs",
+      "mode": "0000644",
+      "sha256": "23833e26b2424ad58e6af3b4bec8c67f938d413b232cde7f2e58b97cf6ec210d"
+    },
     {
       "path": "tests/backfill_sessions.mjs",
       "mode": "0000644",
@@ -14362,7 +14382,7 @@
     {
       "path": "tests/government_act_alone_buildings.mjs",
       "mode": "0000644",
-      "sha256": "22ee46f430e4443cb4946aa27608a442c23599c338602b70f0de602635257f77"
+      "sha256": "c2760e6d0d830de8178bca5a3eead05a799290d241451b5d4a15afbbdc4a4de2"
     },
     {
       "path": "tests/government_board_amendment.mjs",

package/clients/bongos-client/README.md

@@ -5,7 +5,7 @@ A **generated**, zero-dependency typed client for the Bongos API — produced fr
 by hand; it regenerates when the spec changes, so it can never drift from the routes.
 
 - API version: **v1** (served at `/api/bongos/v1`)
-- 539 operations across 76 resource groups
+- 541 operations across 76 resource groups
 
 ## Use it from your project
 

package/clients/bongos-client/bongos-client.global.js

@@ -871,6 +871,10 @@ function createClient(opts = {}) {
       getProjectSettingsShipMode: (args) => request("GET", "/project-settings/ship-mode", { hasBody: false }, args),
       // PATCH /project-settings/ship-mode — rank: metic+archon — PATCH /project-settings/ship-mode
       patchProjectSettingsShipMode: (args) => request("PATCH", "/project-settings/ship-mode", { hasBody: true }, args),
+      // GET /project-settings/tweak-autopickup — rank: any-builder — GET /project-settings/tweak-autopickup
+      getProjectSettingsTweakAutopickup: (args) => request("GET", "/project-settings/tweak-autopickup", { hasBody: false }, args),
+      // PATCH /project-settings/tweak-autopickup — rank: metic+archon — PATCH /project-settings/tweak-autopickup
+      patchProjectSettingsTweakAutopickup: (args) => request("PATCH", "/project-settings/tweak-autopickup", { hasBody: true }, args),
     },
     "projects": {
       // GET /projects — rank: metic+archon — GET /projects

package/clients/bongos-client/index.cjs

@@ -870,6 +870,10 @@ function createClient(opts = {}) {
       getProjectSettingsShipMode: (args) => request("GET", "/project-settings/ship-mode", { hasBody: false }, args),
       // PATCH /project-settings/ship-mode — rank: metic+archon — PATCH /project-settings/ship-mode
       patchProjectSettingsShipMode: (args) => request("PATCH", "/project-settings/ship-mode", { hasBody: true }, args),
+      // GET /project-settings/tweak-autopickup — rank: any-builder — GET /project-settings/tweak-autopickup
+      getProjectSettingsTweakAutopickup: (args) => request("GET", "/project-settings/tweak-autopickup", { hasBody: false }, args),
+      // PATCH /project-settings/tweak-autopickup — rank: metic+archon — PATCH /project-settings/tweak-autopickup
+      patchProjectSettingsTweakAutopickup: (args) => request("PATCH", "/project-settings/tweak-autopickup", { hasBody: true }, args),
     },
     "projects": {
       // GET /projects — rank: metic+archon — GET /projects

package/clients/bongos-client/index.d.ts

@@ -241,6 +241,7 @@ export interface PatchProjectSettingsRotDaysRequest { days: number }
 export interface PatchProjectSettingsRotDaysResponse { ok: boolean; rot_days: unknown; source: unknown; describe: unknown }
 export interface PatchProjectSettingsShipModeRequest { mode: string }
 export interface PatchProjectSettingsShipModeResponse { ok: boolean; mode: unknown; chosen: unknown; source: unknown; sentence: unknown }
+export interface PatchProjectSettingsTweakAutopickupRequest { mode?: string; cap?: number }
 export interface PatchProjectsIdFeaturedRequest { featured: boolean }
 export interface PatchProjectsIdFeaturedResponse { project: unknown }
 export interface PatchProjectsIdStatusRequest { status: string }
@@ -297,7 +298,7 @@ export interface PostClaimsBatchResponse { claims: unknown }
 export interface PostClaimsBatchValidateRequest { task_ids: unknown[] }
 export interface PostClaimsIdReleaseOnBehalfRequest { reason: string }
 export interface PostClaimsIdResolveRequest { outcome: "shipped" | "abandoned" | "partial"; notes_md?: string; value_summary?: string; verification?: Record<string, unknown>; force?: boolean; committed_files?: string[]; sandbox_review?: Record<string, unknown>; resolver_worktree?: string }
-export interface PostClaimsRequest { task_id: StringifiableId; worktree_name?: string; head_sha?: string; bind_session?: boolean; enforce_touches?: boolean }
+export interface PostClaimsRequest { task_id: StringifiableId; worktree_name?: string; head_sha?: string; bind_session?: boolean; enforce_touches?: boolean; auto_pickup?: boolean }
 export interface PostClaimsResponse { claim: unknown; task: unknown; just_unlocked: unknown; overlap_warning: unknown; sibling_overlap_warning: unknown; reward: unknown }
 export interface PostConnectionsIdAcceptResponse { status: unknown }
 export interface PostConnectionsRequest { handle: string; note?: string }
@@ -1380,6 +1381,10 @@ export interface BongosClient {
     getProjectSettingsShipMode(args?: RequestArgs): Promise<GetProjectSettingsShipModeResponse>;
     /** PATCH /project-settings/ship-mode — rank: metic+archon */
     patchProjectSettingsShipMode(args: RequestArgs & { body: PatchProjectSettingsShipModeRequest }): Promise<PatchProjectSettingsShipModeResponse>;
+    /** GET /project-settings/tweak-autopickup — rank: any-builder */
+    getProjectSettingsTweakAutopickup(args?: RequestArgs): Promise<ApiResponse>;
+    /** PATCH /project-settings/tweak-autopickup — rank: metic+archon */
+    patchProjectSettingsTweakAutopickup(args?: RequestArgs & { body?: PatchProjectSettingsTweakAutopickupRequest }): Promise<ApiResponse>;
   };
   "projects": {
     /** GET /projects — rank: metic+archon */

package/clients/bongos-client/index.mjs

@@ -867,6 +867,10 @@ export function createClient(opts = {}) {
       getProjectSettingsShipMode: (args) => request("GET", "/project-settings/ship-mode", { hasBody: false }, args),
       // PATCH /project-settings/ship-mode — rank: metic+archon — PATCH /project-settings/ship-mode
       patchProjectSettingsShipMode: (args) => request("PATCH", "/project-settings/ship-mode", { hasBody: true }, args),
+      // GET /project-settings/tweak-autopickup — rank: any-builder — GET /project-settings/tweak-autopickup
+      getProjectSettingsTweakAutopickup: (args) => request("GET", "/project-settings/tweak-autopickup", { hasBody: false }, args),
+      // PATCH /project-settings/tweak-autopickup — rank: metic+archon — PATCH /project-settings/tweak-autopickup
+      patchProjectSettingsTweakAutopickup: (args) => request("PATCH", "/project-settings/tweak-autopickup", { hasBody: true }, args),
     },
     "projects": {
       // GET /projects — rank: metic+archon — GET /projects

package/docs/api/openapi.json

@@ -15957,6 +15957,80 @@
         ]
       }
     },
+    "/project-settings/tweak-autopickup": {
+      "get": {
+        "operationId": "get_project_settings_tweak_autopickup",
+        "tags": [
+          "project-settings"
+        ],
+        "summary": "GET /project-settings/tweak-autopickup",
+        "description": "**Rank:** `any-builder` — Any authenticated builder (row-level ownership enforced in-handler).",
+        "x-rank": "any-builder",
+        "x-source": "modules/lifecycle/routes/project-settings.js",
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      },
+      "patch": {
+        "operationId": "patch_project_settings_tweak_autopickup",
+        "tags": [
+          "project-settings"
+        ],
+        "summary": "PATCH /project-settings/tweak-autopickup",
+        "description": "PATCH /project-settings/tweak-autopickup — body { mode?: 'off' | 'on', cap?: n }. rank: project.settings.manage (metic+, government_010), the same atom as the other writes on this page. Each field is validated by the resolver's own parser, and both are checked before either is written, so a half-valid body writes nothing.\n\n**Rank:** `metic+archon` — Metic or Archon rank (review/triage powers).\n\n**Permissions:** `project.settings.manage` (all required).",
+        "x-rank": "metic+archon",
+        "x-source": "modules/lifecycle/routes/project-settings.js",
+        "x-permissions": [
+          "project.settings.manage"
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/PatchProjectSettingsTweakAutopickupRequest"
+              }
+            }
+          },
+          "x-validated": true
+        },
+        "responses": {
+          "200": {
+            "description": "Success."
+          },
+          "400": {
+            "$ref": "#/components/responses/ValidationFailed"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        },
+        "security": [
+          {
+            "builderSession": []
+          }
+        ]
+      }
+    },
     "/project/manage-link": {
       "get": {
         "operationId": "get_project_manage_link",
@@ -28398,6 +28472,18 @@
           "sentence"
         ]
       },
+      "PatchProjectSettingsTweakAutopickupRequest": {
+        "type": "object",
+        "properties": {
+          "mode": {
+            "type": "string"
+          },
+          "cap": {
+            "type": "number"
+          }
+        },
+        "additionalProperties": false
+      },
       "PatchProjectsIdFeaturedRequest": {
         "type": "object",
         "properties": {
@@ -29339,6 +29425,9 @@
           },
           "enforce_touches": {
             "type": "boolean"
+          },
+          "auto_pickup": {
+            "type": "boolean"
           }
         },
         "required": [
@@ -34474,8 +34563,8 @@
       "description": "A required dependency/feature is not configured or is temporarily down."
     }
   },
-  "x-endpoint-count": 539,
-  "x-schema-count": 576,
+  "x-endpoint-count": 541,
+  "x-schema-count": 577,
   "x-undocumented-bodies": 12,
   "x-response-schemas": 382,
   "x-generated-by": "scripts/gds/gen-api-docs.js"

package/docs/api-reference.md

@@ -2,7 +2,7 @@
 
 # Bongos API reference
 
-> **Generated from the live route files** — the route file is authoritative. 539 endpoints across 95 route files.
+> **Generated from the live route files** — the route file is authoritative. 541 endpoints across 95 route files.
 > Machine-readable spec: [`docs/api/openapi.json`](api/openapi.json) (OpenAPI 3.1). Rendered docs site: **`/docs`** (e.g. `cloudbongos.com/docs`).
 
 Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust-boundary-server-enforced-permissions.md)): `public` < `any-builder` < `metic+archon` < `archon`.
@@ -143,7 +143,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
-| POST | `/api/bongos/claims` | `any-builder` | `task_id`, `worktree_name`, `head_sha`, `bind_session`, `enforce_touches` | own work (claim a ready task); Xenos additionally filtered to newcomer_friendly rows inside db.claimTask (returns rank_too_low_for_task 4… |
+| POST | `/api/bongos/claims` | `any-builder` | `task_id`, `worktree_name`, `head_sha`, `bind_session`, `enforce_touches`, `auto_pickup` | own work (claim a ready task); Xenos additionally filtered to newcomer_friendly rows inside db.claimTask (returns rank_too_low_for_task 4… |
 | POST | `/api/bongos/claims/:id/release-on-behalf` | `metic+archon` | `reason` | POST /claims/:id/release-on-behalf — V3.R14 (task 238). |
 | POST | `/api/bongos/claims/:id/resolve` | `any-builder` | `outcome`, `notes_md`, `value_summary`, `verification`, `force`, `committed_files`, `sandbox_review`, `resolver_worktree` | resolve own claim (ship/abandon); ownership checked in db.resolveClaim (NOT_YOUR_CLAIM). |
 | POST | `/api/bongos/claims/batch` | `any-builder` | `task_ids`, `worktree_name`, `bind_session` | Atomic multi-claim. |
@@ -616,7 +616,7 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 |---|---|---|---|---|
 | GET | `/api/bongos/project/manage-link` | `archon` | — | GET /project/manage-link — the hub's page for THIS project, where its owner takes it offline or disconnects it (task 1004570). |
 
-## `project-settings` (4)
+## `project-settings` (6)
 
 | Method | Path | Rank | Body | Description |
 |---|---|---|---|---|
@@ -624,6 +624,8 @@ Base path: `/api/bongos`. Ranks (enforced server-side, [ADR 0016](adr/0016-trust
 | PATCH | `/api/bongos/project-settings/rot-days` | `metic+archon` | `days` | PATCH /project-settings/rot-days — body { days }. |
 | GET | `/api/bongos/project-settings/ship-mode` | `any-builder` | — | GET /project-settings/ship-mode — the ship mode alone, for the CLI and the AI. |
 | PATCH | `/api/bongos/project-settings/ship-mode` | `metic+archon` | `mode` | PATCH /project-settings/ship-mode — body { mode: 'auto' \| 'manual' }. |
+| GET | `/api/bongos/project-settings/tweak-autopickup` | `any-builder` | — |  |
+| PATCH | `/api/bongos/project-settings/tweak-autopickup` | `metic+archon` | `mode`, `cap` | PATCH /project-settings/tweak-autopickup — body { mode?: 'off' \| 'on', cap?: n }. |
 
 ## `projects` (8)
 

package/docs/module-api-changelog.md

@@ -3049,5 +3049,7 @@ is load-bearing: the script throws rather than guess if it is missing, and
         landed since 1.21.104 with no explicit bump. run 37941330141. (task 1002620)
   1.21.106 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
         landed since 1.21.105 with no explicit bump. run 37953632231. (task 1002620)
+  1.21.107 — CI auto-patch (publish-on-merge, ADR 0161): carrier for merges
+        landed since 1.21.106 with no explicit bump. run 37957919746. (task 1002620)
 ---------------------------------------------------------------------------
 ```

package/migrations/core_275_claims_auto_pickup.sql

@@ -0,0 +1,24 @@
+-- core_275 a claim can carry the auto_pickup mark
+-- Applied under task 1004677 (BV2.TW19a, ADR 0371 D5/D6).
+--
+-- WHY. The Autobongos tweak lane picks up a submitted page round with nobody at a
+-- terminal, and each pickup costs the project a grade nobody chose to spend. So the
+-- lane claims with a mark, and the SERVER counts marked claims at claim time:
+-- tweak.autopickup_monthly_cap per calendar month, and at most two per round. The
+-- count is read from these rows (the ledger), never from a stored counter.
+--
+-- SHAPE. One nullable boolean. NULL and false both mean "an ordinary claim"; only
+-- true is counted. Nullable with no default, so the column is additive and an
+-- older release that never names it keeps inserting exactly as before.
+--
+-- The partial index serves the two counts (this month's marked claims, and one
+-- round's marked claims), and stays tiny: only marked rows are in it.
+
+ALTER TABLE claims ADD COLUMN IF NOT EXISTS auto_pickup boolean;
+
+CREATE INDEX IF NOT EXISTS idx_claims_auto_pickup
+  ON claims (claimed_at, task_id)
+  WHERE auto_pickup IS TRUE;
+
+INSERT INTO schema_migrations (version) VALUES ('core_275_claims_auto_pickup')
+  ON CONFLICT (version) DO NOTHING;

package/modules/government/decision-rules.js

@@ -66,6 +66,7 @@ const AREAS = Object.freeze([
     today: 'whoever may change the project settings', acts: Object.freeze([
       'PATCH /project-settings/rot-days',
       'PATCH /project-settings/ship-mode',
+      'PATCH /project-settings/tweak-autopickup',
       'PATCH /work-categories/:id',
     ]) }),
   Object.freeze({ key: 'disputes', name: 'Disputes', gate: 'security.report.adjudicate',

package/modules/lifecycle/autopickup.js

@@ -0,0 +1,94 @@
+'use strict';
+
+// modules/lifecycle/autopickup.js — the server's half of tweak auto-pickup
+// (task 1004677 / BV2.TW19a, ADR 0371 D3, D5, D6).
+//
+// The Autobongos tweak lane claims a submitted page round with an `auto_pickup`
+// mark (claims.auto_pickup, migration core_275). The runner is a builder's own
+// process, so the limits on it are NOT left to the runner: claimTask calls
+// autoPickupRefusal inside its transaction and the claim is refused when
+//
+//   - the claim is marked but the task is not a page-tweak round  (AUTO_PICKUP_NOT_A_TWEAK)
+//   - the project has tweak.autopickup off                         (AUTO_PICKUP_OFF)
+//   - this calendar month already holds `cap` marked claims        (AUTO_PICKUP_CAP_REACHED)
+//   - this round already has two marked claims                     (AUTO_PICKUP_ROUND_LIMIT)
+//
+// THE LOCK. The count and the claim insert must not interleave with another
+// runner's, or two runners racing for the last slot both read cap-1 and both
+// insert. So the count runs after pg_advisory_xact_lock('page-tweak/autopickup'),
+// one project-wide key, held to the end of claimTask's transaction (the insert
+// commits under it). Only marked claims take the lock; an ordinary claim never
+// waits on it.
+//
+// COUNTED FROM THE LEDGER, never a counter: a stored number drifts the first time
+// a write fails between the claim and the bump. A released claim still counts —
+// the pickup happened and the grade may already have been spent.
+//
+// The mark is a cost brake on a runner the owner chose to run, not a security
+// boundary: a claim without it is an ordinary claim its builder could make by hand.
+
+const api = require('../../src/module-api');
+
+const PAGE_TWEAK_SOURCE = 'page-tweak';
+const LOCK_KEY = 'page-tweak/autopickup';
+// D6.2: one apply plus one try at the artist's note; a round sent back twice is a
+// disagreement a person should read.
+const MAX_AUTO_APPLIES_PER_ROUND = 2;
+
+// The two counts, on any executor (the claim transaction's client, or the pool).
+// Month boundaries are the database's, so every runner and every reader agree.
+const MONTH_COUNT_SQL = `
+  SELECT count(*)::int AS n
+    FROM claims c JOIN tasks t ON t.id = c.task_id
+   WHERE c.auto_pickup IS TRUE
+     AND t.source = '${PAGE_TWEAK_SOURCE}'
+     AND c.claimed_at >= date_trunc('month', now())`;
+const ROUND_COUNT_SQL = `
+  SELECT count(*)::int AS n FROM claims WHERE task_id = $1 AND auto_pickup IS TRUE`;
+
+async function countThisMonth(exec = api.pool) {
+  const { rows } = await exec.query(MONTH_COUNT_SQL);
+  return Number(rows[0] && rows[0].n) || 0;
+}
+
+async function countForRound(exec, taskId) {
+  const { rows } = await exec.query(ROUND_COUNT_SQL, [taskId]);
+  return Number(rows[0] && rows[0].n) || 0;
+}
+
+// autoPickupRefusal(client, task, settings) — null when the marked claim may
+// proceed, else the refusal object claimTask throws. `settings` is the resolved
+// { mode, cap }, read BEFORE the transaction opens (the claimPermissionsFor
+// precedent: a settings read is not part of the claim's consistency).
+async function autoPickupRefusal(client, task, settings) {
+  if (!task || task.source !== PAGE_TWEAK_SOURCE) {
+    return { code: 'AUTO_PICKUP_NOT_A_TWEAK', message: 'Only a page tweak round can be claimed with the auto_pickup mark.' };
+  }
+  const s = settings || {};
+  if (s.mode !== 'on') {
+    return { code: 'AUTO_PICKUP_OFF', message: 'Tweak auto-pickup is off for this project, so a submitted page waits for a person.' };
+  }
+  await client.query('SELECT pg_advisory_xact_lock(hashtext($1))', [LOCK_KEY]);
+  const forRound = await countForRound(client, task.id);
+  if (forRound >= MAX_AUTO_APPLIES_PER_ROUND) {
+    return {
+      code: 'AUTO_PICKUP_ROUND_LIMIT', applied: forRound, limit: MAX_AUTO_APPLIES_PER_ROUND,
+      message: `This page round was already applied automatically ${forRound} times, so it waits for a person.`,
+    };
+  }
+  const used = await countThisMonth(client);
+  if (used >= s.cap) {
+    return {
+      code: 'AUTO_PICKUP_CAP_REACHED', used, cap: s.cap,
+      message: `Auto-pickup has used this month's ${s.cap} rounds, so submitted pages wait for a person until next month.`,
+    };
+  }
+  return null;
+}
+
+module.exports = {
+  LOCK_KEY,
+  MAX_AUTO_APPLIES_PER_ROUND,
+  countThisMonth,
+  autoPickupRefusal,
+};