@bongos/core 1.24.6 → 1.24.7

package/docs/page-readings.json

@@ -5,7 +5,7 @@
   "adr": "0341 D3",
   "reread": "node scripts/bongos/page-reader.js --stale",
   "how": ["Generated by node scripts/bongos/page-reader.js (BV2.TW04, task 1004315; ADR 0341 D3). Do not hand-edit.","One entry per page of docs/page-inventory.json. Lines are in page order: the default state first, and a line only another state shows sits where that state shows it, with its state named.","placement: placed = a docs/copy-registry.json row renders it (file, line, string_id); shared = shell text every page of the surface carries (top bar, sidebar, footer), with its row when the registry has one; unplaced = the registry cannot place it (a rewrite becomes an engineer task, ADR 0341 D4).","text keeps {…} where the registry row has a hole, or where a value the page read from its API was filled in. A string that is only such data is counted under omitted.data, not listed.","reading_hash is over the non-shared lines (key, section, text); files_hash is over the page's inventory files. --check compares files_hash only and never opens a browser.","Rendered through the hall-preview harness (hall) and the ui-design kit stub (landing, status), at 1280x800 with the clock pinned, so a reading is the fixture world's page."],
-  "counts": {"pages":48,"lines":5464,"placed":1686,"shared":427,"unplaced":3351,"omitted_data":3732},
+  "counts": {"pages":48,"lines":5464,"placed":1687,"shared":427,"unplaced":3350,"omitted_data":3732},
   "pages": [
     {
       "id": "builders:ai-studio",
@@ -2595,9 +2595,9 @@
       "surface": "builders",
       "title": "Project settings",
       "states_read": ["default"],
-      "files_hash": "d2c64d498fd8dd17",
-      "reading_hash": "b95b4a939af237c6",
-      "counts": {"lines":38,"placed":19,"shared":8,"unplaced":11},
+      "files_hash": "39656ae681066cb4",
+      "reading_hash": "4f7a29f2c2f0ad7c",
+      "counts": {"lines":38,"placed":20,"shared":8,"unplaced":10},
       "omitted": {"data":31},
       "notes": [],
       "lines": [
@@ -2609,7 +2609,7 @@
         {"key":"L0006","section":"top bar","text":"Artistry","placement":"shared"},
         {"key":"L0007","section":"top bar","text":"Ideating","placement":"shared"},
         {"key":"L0008","section":"The fundamentals","text":"The fundamentals","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":39,"string_id":"cb7c7879eeba"},
-        {"key":"L0009","section":"The fundamentals","text":"Six things every project settles. Three of them are knobs you can turn here; the other three are decided in committed configuration, and each says which file decides it.","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":40,"string_id":"ce994c34804e"},
+        {"key":"L0009","section":"The fundamentals","text":"Seven things every project settles. Four of them are knobs you can turn here; the other three are decided in committed configuration, and each says which file decides it.","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":40,"string_id":"f7da8748453d"},
         {"key":"L0010","section":"The fundamentals","text":"{…} and {…}","placement":"placed","file":"modules/hall-ui/public/profile-nudge.js","line":77,"string_id":"56b00d773232","occurrences":9},
         {"key":"L0011","section":"The fundamentals","text":"How tasks ship","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":136,"string_id":"76f344dd4727"},
         {"key":"L0012","section":"The fundamentals","text":"Save","placement":"unplaced","occurrences":4},
@@ -2617,14 +2617,14 @@
         {"key":"L0014","section":"The fundamentals","text":"Raise after","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":115,"string_id":"4de232a05888"},
         {"key":"L0015","section":"The fundamentals","text":"days ({…}–{…})","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":115,"string_id":"0e2bef756977"},
         {"key":"L0016","section":"The fundamentals","text":"offered","placement":"unplaced","occurrences":2},
-        {"key":"L0017","section":"The fundamentals","text":"New category label","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":164,"string_id":"87f09d983f6c","attr":"placeholder"},
-        {"key":"L0018","section":"The fundamentals","text":"Add","placement":"unplaced"},
+        {"key":"L0017","section":"The fundamentals","text":"New category label","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":193,"string_id":"87f09d983f6c","attr":"placeholder"},
+        {"key":"L0018","section":"The fundamentals","text":"Add","placement":"placed","file":"modules/hall-ui/public/ai-studio.js","line":469,"string_id":"e4da002ae135"},
         {"key":"L0019","section":"The fundamentals","text":"committed config","placement":"unplaced"},
         {"key":"L0020","section":"The fundamentals","text":"not yet real","placement":"unplaced"},
         {"key":"L0021","section":"The fundamentals","text":"not available ({…})","placement":"unplaced"},
         {"key":"L0022","section":"Danger zone","text":"Danger zone","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":56,"string_id":"13b22e48d9fb"},
-        {"key":"L0023","section":"Danger zone","text":"This project is hosted on {…}, and that is where it is taken offline or removed. Both links below open this project’s page there.","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":300,"string_id":"e97b2d549f10"},
-        {"key":"L0024","section":"Danger zone","text":"Manage this project on {…}","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":301,"string_id":"4e261fd15bd5"},
+        {"key":"L0023","section":"Danger zone","text":"This project is hosted on {…}, and that is where it is taken offline or removed. Both links below open this project’s page there.","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":350,"string_id":"e97b2d549f10"},
+        {"key":"L0024","section":"Danger zone","text":"Manage this project on {…}","placement":"placed","file":"modules/hall-ui/public/project-settings.js","line":351,"string_id":"4e261fd15bd5"},
         {"key":"L0025","section":"Danger zone","text":"Take it offline","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":59,"string_id":"da9da6e866bd"},
         {"key":"L0026","section":"Danger zone","text":"— stops the project and its nightly backups but keeps everything: its database, its backups and your repository on GitHub. You can bring it back.","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":59,"string_id":"61ebc5d684fd"},
         {"key":"L0027","section":"Danger zone","text":"Disconnect from Bongos entirely","placement":"placed","file":"modules/hall-ui/public/project-settings.html","line":60,"string_id":"d3efd513694b"},

package/modules/hall-ui/public/project-settings.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Project settings — {{worldName}}</title>
-  <meta name="description" content="The fundamentals of this project in one place — how tasks ship, the stale timer, the category set, how credits are calculated, why credits are not equity, and whether a credit-weighted pool can pay out.">
+  <meta name="description" content="The fundamentals of this project in one place — how tasks ship, how many tweak rounds a month, the stale timer, the category set, how credits are calculated, why credits are not equity, and whether a credit-weighted pool can pay out.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -38,11 +38,11 @@
         <section class="scroll" id="ps-body" aria-labelledby="ps-body-h" hidden>
           <h2 class="scroll__h" id="ps-body-h">The fundamentals</h2>
           <p class="scroll__lede">
-            Six things every project settles. Three of them are knobs you can turn here;
+            Seven things every project settles. Four of them are knobs you can turn here;
             the other three are decided in committed configuration, and each says which
             file decides it.
           </p>
-          <!-- One mount, six rows, written by project-settings.js. The rows are NOT
+          <!-- One mount, seven rows, written by project-settings.js. The rows are NOT
                authored in this file: each carries a value plus the provenance the
                server resolved it through, and markup that could drift from that is the
                thing this page exists to end. -->
@@ -76,6 +76,6 @@
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/project-settings.js?v=2026-10-08-ship-mode"></script>
+<script src="/builders/project-settings.js?v=2026-10-29-tweak-cap"></script>
 </body>
 </html>

package/modules/hall-ui/public/project-settings.js

@@ -1,4 +1,4 @@
-// project-settings.js — the five fundamentals of this project, each with the place
+// project-settings.js — the seven fundamentals of this project, each with the place
 // its value came from (task 1003280, goal 1000072, criterion legibility-project-settings).
 //
 // WHAT THIS PAGE IS FOR. Goal 1000072's thesis: the project is legible to Claude and
@@ -148,6 +148,35 @@
       </div>`;
   }
 
+  // The monthly tweak-round cap (task 1005003): the project's number, then one box
+  // per builder rank. The ranks and the bound come from the server; a blank rank box
+  // means that rank follows the project's number.
+  function tweakCapBodyHtml(row) {
+    const v = row.value || {};
+    const ranks = Array.isArray(v.ranks) ? v.ranks : [];
+    const max = escapeHtml(String(v.max));
+    const invalid = row.invalid
+      ? `<p class="ps-invalid">A configured value could not be used: <code>${escapeHtml(String(row.invalid.raw))}</code>
+           — ${escapeHtml(String(row.invalid.reason))}. The limit above is the fallback that is actually in force.</p>`
+      : '';
+    return `
+      ${invalid}
+      <div class="ps-controls">
+        <label for="ps-tweak-cap">Project limit</label>
+        <input type="number" id="ps-tweak-cap" min="1" max="${max}" step="1" value="${escapeHtml(String(v.cap))}">
+        <span>rounds a month (1–${max})</span>
+      </div>
+      ${ranks.map((r) => `
+        <div class="ps-controls">
+          <label for="ps-tweak-rank-${escapeHtml(String(r.rank))}">${escapeHtml(String(r.rank))}</label>
+          <input type="number" class="ps-tweak-rank" id="ps-tweak-rank-${escapeHtml(String(r.rank))}" data-rank="${escapeHtml(String(r.rank))}"
+                 min="1" max="${max}" step="1" value="${r.cap == null ? '' : escapeHtml(String(r.cap))}" placeholder="project limit">
+        </div>`).join('')}
+      <div class="ps-controls">
+        <button type="button" class="btn" id="ps-tweak-save">Save</button>
+      </div>`;
+  }
+
   function catsBodyHtml(row) {
     const v = row.value || {};
     const cats = Array.isArray(v.categories) ? v.categories : [];
@@ -177,6 +206,7 @@
     const mount = $('ps-rows');
     mount.innerHTML = `<ul class="ov-rows">${rows.map((row) => {
       if (row.key === 'ship_mode' && row.editable) return rowHtml(row, shipBodyHtml(row));
+      if (row.key === 'tweak_round_cap' && row.editable) return rowHtml(row, tweakCapBodyHtml(row));
       if (row.key === 'rot_timer' && row.editable) return rowHtml(row, rotBodyHtml(row));
       if (row.key === 'work_categories' && row.editable) return rowHtml(row, catsBodyHtml(row));
       return rowHtml(row, '');
@@ -210,6 +240,26 @@
       });
     }
 
+    const tweakSave = $('ps-tweak-save');
+    if (tweakSave) {
+      tweakSave.addEventListener('click', async () => {
+        const rankCaps = {};
+        document.querySelectorAll('.ps-tweak-rank').forEach((el) => {
+          const raw = String(el.value || '').trim();
+          rankCaps[el.getAttribute('data-rank')] = raw === '' ? null : Number(raw);
+        });
+        setBusy(true);
+        try {
+          const out = await sendJson('PATCH', '/project-settings/tweak-autopickup', { cap: Number($('ps-tweak-cap').value), rank_caps: rankCaps });
+          toast(`Monthly tweak rounds: ${out.cap} for the project.`);
+          await load();
+        } catch (err) {
+          toast(err.message || 'Could not save the limit.');
+          setBusy(false);
+        }
+      });
+    }
+
     const rotSave = $('ps-rot-save');
     if (rotSave) {
       rotSave.addEventListener('click', async () => {

package/modules/lifecycle/autopickup.js

@@ -56,11 +56,26 @@ async function countForRound(exec, taskId) {
   return Number(rows[0] && rows[0].n) || 0;
 }
 
-// autoPickupRefusal(client, task, settings) — null when the marked claim may
+// effectiveCap(settings, rank) — { cap, from: 'rank' | 'project' } (task 1005003).
+// The claimer's rank's own cap when the project set one, else the project cap. The
+// cap is measured against the project's monthly count either way: a rank cap says
+// how far into the month a runner of that rank may still pick up, not a separate
+// allowance per builder, so the ledger count stays one project-wide number. Pure.
+function effectiveCap(settings, rank) {
+  const s = settings || {};
+  const caps = s.rank_caps || {};
+  if (rank && Object.prototype.hasOwnProperty.call(caps, rank) && Number.isInteger(caps[rank])) {
+    return { cap: caps[rank], from: 'rank' };
+  }
+  return { cap: s.cap, from: 'project' };
+}
+
+// autoPickupRefusal(client, task, settings, rank) — null when the marked claim may
 // proceed, else the refusal object claimTask throws. `settings` is the resolved
-// { mode, cap }, read BEFORE the transaction opens (the claimPermissionsFor
-// precedent: a settings read is not part of the claim's consistency).
-async function autoPickupRefusal(client, task, settings) {
+// { mode, cap, rank_caps }, read BEFORE the transaction opens (the
+// claimPermissionsFor precedent: a settings read is not part of the claim's
+// consistency). `rank` is the claimer's rank, read inside it.
+async function autoPickupRefusal(client, task, settings, rank = null) {
   if (!task || task.source !== PAGE_TWEAK_SOURCE) {
     return { code: 'AUTO_PICKUP_NOT_A_TWEAK', message: 'Only a page tweak round can be claimed with the auto_pickup mark.' };
   }
@@ -77,11 +92,12 @@ async function autoPickupRefusal(client, task, settings) {
     };
   }
   const used = await countThisMonth(client);
-  if (used >= s.cap) {
-    return {
-      code: 'AUTO_PICKUP_CAP_REACHED', used, cap: s.cap,
-      message: `Auto-pickup has used this month's ${s.cap} rounds, so submitted pages wait for a person until next month.`,
-    };
+  const { cap, from } = effectiveCap(s, rank);
+  if (used >= cap) {
+    const message = from === 'rank'
+      ? `This month's auto-pickups have reached ${cap}, the limit this project sets for a ${rank} builder's runner, so submitted pages wait for a person until next month.`
+      : `Auto-pickup has used this month's ${cap} rounds, so submitted pages wait for a person until next month.`;
+    return { code: 'AUTO_PICKUP_CAP_REACHED', used, cap, cap_from: from, message };
   }
   return null;
 }
@@ -90,5 +106,6 @@ module.exports = {
   LOCK_KEY,
   MAX_AUTO_APPLIES_PER_ROUND,
   countThisMonth,
+  effectiveCap,
   autoPickupRefusal,
 };

package/modules/lifecycle/db-claims.js

@@ -374,7 +374,7 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
     // limit are counted under a project-wide advisory lock that this transaction
     // holds through the insert below, so two runners cannot both take the last slot.
     if (autoPickup) {
-      const refusal = await autoPickupRefusal(client, task, autoPickupSettings);
+      const refusal = await autoPickupRefusal(client, task, autoPickupSettings, builderRank);
       if (refusal) throw refusal;
     }
 

package/modules/lifecycle/routes/project-settings.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// modules/lifecycle/routes/project-settings.js — the five fundamentals of a project,
+// modules/lifecycle/routes/project-settings.js — the seven fundamentals of a project,
 // in one read, each carrying WHERE its value came from (task 1003280, goal 1000072,
 // criterion legibility-project-settings).
 //
@@ -60,6 +60,33 @@ function shipModeRow(resolved) {
   };
 }
 
+// --- the monthly tweak-round cap (task 1005003) -----------------------------
+//
+// The project cap and one optional cap per builder rank, editable on the settings
+// page. The ranks come from the kernel's live ladder, never re-typed here or on the
+// page; a rank with no number follows the project cap.
+function tweakCapRow(resolved) {
+  const r = resolved || {};
+  const rankCaps = r.rank_caps || {};
+  return {
+    key: 'tweak_round_cap',
+    title: 'Monthly tweak rounds',
+    editable: true,
+    state: 'live',
+    value: {
+      cap: r.cap,
+      max: api.projectSettings.MAX_AUTOPICKUP_CAP,
+      ranks: api.LIVE_RANK_LADDER.map((rank) => ({ rank, cap: Object.prototype.hasOwnProperty.call(rankCaps, rank) ? rankCaps[rank] : null })),
+    },
+    sentence: `Tweak auto-pickup may apply up to ${r.cap} submitted pages a month. A builder rank can have its own limit; `
+      + 'a rank left blank follows the project limit. When the limit is reached, pages wait for a person.',
+    source: r.source ? r.source.cap : 'default',
+    // Only a cap value this row draws; an unusable on/off switch is not this row's.
+    invalid: (r.invalid || []).find((i) => /autopickup_(monthly_cap|rank_cap\.)/.test(String(i && i.where))) || null,
+    reads: { file: 'project_settings[\'tweak.autopickup_monthly_cap\', \'tweak.autopickup_rank_cap.<rank>\']', adr: 'ADR 0371 D5' },
+  };
+}
+
 // callerHolds(builderId, atom) → true | false | null. null means authority could
 // not be established (government port missing or the resolver threw); a reader
 // treats that as unknown, never as a grant.
@@ -264,6 +291,7 @@ module.exports = function buildProjectSettingsRouter() {
       // category the owner cannot see is one they cannot bring back.
       const categories = await goalCategory.listCategories({ includeInactive: true });
       const shipMode = await api.projectSettings.resolveShipMode();
+      const tweak = await api.projectSettings.resolveTweakAutopickup();
 
       // A settings read is a configuration comparison — a cached one is wrong the
       // moment somebody turns a knob (the rot.js precedent).
@@ -271,6 +299,7 @@ module.exports = function buildProjectSettingsRouter() {
       res.json({
         rows: [
           shipModeRow(shipMode),
+          tweakCapRow(tweak),
           {
             key: 'rot_timer',
             title: 'Stale timer',
@@ -443,14 +472,23 @@ module.exports = function buildProjectSettingsRouter() {
   //
   // rank: any signed-in builder. The runner reads it before it tries a round, and
   // the studio shows the count; it carries no reward internals or file paths.
-  async function autopickupBody() {
+  //
+  // cap is the project's; rank_caps the per-rank caps the project set (task
+  // 1005003). my_cap is the one that applies to the CALLER's rank, and
+  // remaining_this_month is measured against it, so a runner reads the number the
+  // claim gate will hold it to.
+  async function autopickupBody(rank = null) {
     const resolved = await api.projectSettings.resolveTweakAutopickup();
     const used = await autopickup.countThisMonth();
+    const mine = autopickup.effectiveCap(resolved, rank);
     return {
       mode: resolved.mode,
       cap: resolved.cap,
+      rank_caps: resolved.rank_caps || {},
+      my_cap: mine.cap,
+      my_cap_from: mine.from,
       used_this_month: used,
-      remaining_this_month: Math.max(0, resolved.cap - used),
+      remaining_this_month: Math.max(0, mine.cap - used),
       per_round_limit: autopickup.MAX_AUTO_APPLIES_PER_ROUND,
       source: resolved.source,
       invalid: resolved.invalid,
@@ -461,32 +499,54 @@ module.exports = function buildProjectSettingsRouter() {
   router.get('/project-settings/tweak-autopickup', api.requireBuilder, async (req, res) => {
     try {
       res.set('Cache-Control', 'no-store');
-      res.json(await autopickupBody());
+      res.json(await autopickupBody(req.builder && req.builder.rank));
     } catch (err) {
       log.error(`GET /project-settings/tweak-autopickup: ${err && err.message}`);
       res.fail('project_settings_read_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // PATCH /project-settings/tweak-autopickup — body { mode?: 'off' | 'on', cap?: n }.
+  // PATCH /project-settings/tweak-autopickup — body { mode?: 'off' | 'on', cap?: n,
+  // rank_caps?: { <rank>: n | null } }.
   //
   // rank: project.settings.manage (metic+, government_010), the same atom as the
   // other writes on this page. Each field is validated by the resolver's own parser,
-  // and both are checked before either is written, so a half-valid body writes nothing.
+  // and all are checked before any is written, so a half-valid body writes nothing.
+  //
+  // rank_caps (task 1005003) is a PARTIAL update: a rank named with a number gets
+  // that cap, a rank named with null loses its own cap (and follows the project cap
+  // again), and a rank not named is left as it was. A rank must be on the live
+  // ladder; each number goes through parseAutopickupCap, the project cap's parser.
   router.patch('/project-settings/tweak-autopickup', api.requireBuilder, api.requirePermission('project.settings.manage'), api.requireActAlone('rules'), async (req, res) => {
-    if (api.validateOrRespond(req, res, { mode: { type: 'string' }, cap: { type: 'number' } })) return;
+    if (api.validateOrRespond(req, res, { mode: { type: 'string' }, cap: { type: 'number' }, rank_caps: { type: 'object' } })) return;
     const body = req.body || {};
-    if (body.mode == null && body.cap == null) {
-      return res.fail('bad_tweak_autopickup', { status: 400, message: 'send mode, cap, or both' });
+    if (body.mode == null && body.cap == null && body.rank_caps == null) {
+      return res.fail('bad_tweak_autopickup', { status: 400, message: 'send mode, cap, rank_caps, or any of them' });
     }
     const mode = body.mode == null ? null : api.projectSettings.parseAutopickup(body.mode);
     if (mode && !mode.mode) return res.fail('bad_tweak_autopickup', { status: 400, message: `mode: ${mode.reason}` });
     const cap = body.cap == null ? null : api.projectSettings.parseAutopickupCap(body.cap);
     if (cap && cap.cap == null) return res.fail('bad_tweak_autopickup', { status: 400, message: `cap: ${cap.reason}` });
+    const rankEdits = [];
+    for (const [rank, value] of Object.entries(body.rank_caps || {})) {
+      if (!api.LIVE_RANK_LADDER.includes(rank)) {
+        return res.fail('bad_tweak_autopickup', { status: 400, message: `rank_caps: unknown rank '${rank}' (one of ${api.LIVE_RANK_LADDER.join(' | ')})` });
+      }
+      if (value === null) { rankEdits.push([rank, null]); continue; }
+      const got = api.projectSettings.parseAutopickupCap(value);
+      if (got.cap == null) return res.fail('bad_tweak_autopickup', { status: 400, message: `rank_caps.${rank}: ${got.reason}` });
+      rankEdits.push([rank, got.cap]);
+    }
     try {
       if (mode) await api.projectSettings.set(api.projectSettings.KEYS.TWEAK_AUTOPICKUP, mode.mode, req.builder.id);
       if (cap) await api.projectSettings.set(api.projectSettings.KEYS.TWEAK_AUTOPICKUP_CAP, cap.cap, req.builder.id);
-      res.json({ ok: true, ...(await autopickupBody()) });
+      // One row per rank, each a single upsert: no read-modify-write, so two people
+      // editing two ranks at once cannot drop each other's edit. '' clears a rank
+      // (the resolver reads an empty value as "no cap of its own").
+      for (const [rank, n] of rankEdits) {
+        await api.projectSettings.set(`${api.projectSettings.KEYS.TWEAK_AUTOPICKUP_RANK_CAP_PREFIX}${rank}`, n === null ? '' : n, req.builder.id);
+      }
+      res.json({ ok: true, ...(await autopickupBody(req.builder && req.builder.rank)) });
     } catch (err) {
       log.error(`PATCH /project-settings/tweak-autopickup: ${err && err.message}`);
       res.fail('project_settings_write_failed', { status: 500, message: 'internal error' });
@@ -498,3 +558,4 @@ module.exports = function buildProjectSettingsRouter() {
 
 module.exports.settingsDeskRows = settingsDeskRows;
 module.exports.shipModeRow = shipModeRow;
+module.exports.tweakCapRow = tweakCapRow;

package/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.6",
+  "version": "1.24.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@bongos/core",
-      "version": "1.24.6",
+      "version": "1.24.7",
       "license": "AGPL-3.0-or-later",
       "dependencies": {
         "express": "^4.21.2",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bongos/core",
-  "version": "1.24.6",
+  "version": "1.24.7",
   "description": "Cloud Bongos — the AI-first build platform core (GDS + platform surfaces + module system), installed as a versioned dependency (ADR 0108).",
   "license": "AGPL-3.0-or-later",
   "main": "src/platform-server.js",

package/release-notes.json

@@ -10871,5 +10871,11 @@
       "id": "1004995",
       "text": "On the account page, people can now link GitHub and Google to one account, both ways, so either one opens the same account with the same credits, ranks and history. They can remove one too, but never their last way in. Two exi"
     }
+  ],
+  "1.24.7": [
+    {
+      "id": "1005003",
+      "text": "The automatic tweak limit is now 200 rounds a month, and a project owner can change it, for the whole project and separately for each builder rank, on the project settings page."
+    }
   ]
 }

package/src/bongos/project-settings.js

@@ -52,6 +52,9 @@ const SETTING_KEYS = {
   SHIP_MODE: 'ship.mode',
   TWEAK_AUTOPICKUP: 'tweak.autopickup',
   TWEAK_AUTOPICKUP_CAP: 'tweak.autopickup_monthly_cap',
+  // Per-rank caps (task 1005003): one row per live rank, this prefix + the rank
+  // (rankCapKey). An empty value means the rank follows the project cap.
+  TWEAK_AUTOPICKUP_RANK_CAP_PREFIX: 'tweak.autopickup_rank_cap.',
   SPEND_CAP: 'treasury.spend_cap_usd',
   // Testing new module versions first (task 1003802, ADR 0344 D1): module-testing.js.
   MODULE_TESTER: 'modules.tester',
@@ -292,9 +295,10 @@ function describeShipMode(resolved) {
 // (modules/lifecycle/autopickup.js); this file only resolves the numbers.
 const AUTOPICKUP_MODES = Object.freeze(['off', 'on']);
 const DEFAULT_AUTOPICKUP = 'off';
-// 20 rounds: a grade costs the project a few dollars, so 20 is a bounded, legible
-// monthly spend at about the level of one active artist (ADR 0371 D5).
-const DEFAULT_AUTOPICKUP_CAP = 20;
+// 200 rounds: the owner's decision on task 1004971 (2026-10-29, Q7), raising ADR
+// 0371 D5's first figure of 20. A project can set its own number, and a cap per
+// builder rank (task 1005003); this is only the answer for a project that has not.
+const DEFAULT_AUTOPICKUP_CAP = 200;
 // Past 1000 the cap is an off switch typed as a big number; that should be asked
 // for out loud, the same reasoning as MAX_ROT_DAYS.
 const MAX_AUTOPICKUP_CAP = 1000;
@@ -318,6 +322,16 @@ function parseAutopickupCap(raw) {
 
 // One knob through its parser: { value, source, invalid }. Never throws; an
 // unreadable database answers the default, the resolveShipMode posture.
+// `row` is the already-read row (or undefined); parseRow never touches the DB.
+function parseRow(key, row, parse, pick, fallback) {
+  if (row && row.value != null && row.value !== '') {
+    const got = parse(row.value);
+    if (pick(got) != null) return { value: pick(got), source: 'project_settings', invalid: null };
+    return { value: fallback, source: 'default', invalid: { where: `project_settings['${key}']`, raw: String(row.value), reason: got.reason } };
+  }
+  return { value: fallback, source: 'default', invalid: null };
+}
+
 async function resolveOne(key, parse, pick, fallback) {
   let row = null;
   try {
@@ -326,31 +340,60 @@ async function resolveOne(key, parse, pick, fallback) {
     logger.error(`project_settings read failed; falling back to the default ${key}: ${err && err.message}`);
     return { value: fallback, source: 'default', invalid: null };
   }
-  if (row && row.value != null && row.value !== '') {
-    const got = parse(row.value);
-    if (pick(got) != null) return { value: pick(got), source: 'project_settings', invalid: null };
-    return { value: fallback, source: 'default', invalid: { where: `project_settings['${key}']`, raw: String(row.value), reason: got.reason } };
-  }
-  return { value: fallback, source: 'default', invalid: null };
+  return parseRow(key, row, parse, pick, fallback);
+}
+
+// rankCapKey(rank) — the row holding one rank's own cap (task 1005003). ONE ROW
+// PER RANK, deliberately: setting or clearing a rank is a single upsert, so two
+// people editing two different ranks at once can never overwrite each other (a
+// shared JSON object would be read-modify-write and lose one edit). An empty
+// value means "no cap of its own" (the null-is-meaningful rule above).
+function rankCapKey(rank) {
+  return `${SETTING_KEYS.TWEAK_AUTOPICKUP_RANK_CAP_PREFIX}${rank}`;
 }
 
-// resolveTweakAutopickup() — { mode, cap, source: { mode, cap }, invalid: [...] }.
-// mode is always 'off' or 'on', cap always a usable positive integer.
+// resolveTweakAutopickup() — { mode, cap, rank_caps, source: { mode, cap },
+// invalid: [...] }. mode is always 'off' or 'on', cap always a usable positive
+// integer, rank_caps always an object of live-ladder rank → cap (empty when no rank
+// has its own). Every row is read in ONE query; each rank cap goes through
+// parseAutopickupCap, the project cap's own parser, so the two cannot disagree.
 async function resolveTweakAutopickup() {
-  const m = await resolveOne(SETTING_KEYS.TWEAK_AUTOPICKUP, parseAutopickup, (g) => g.mode, DEFAULT_AUTOPICKUP);
-  const c = await resolveOne(SETTING_KEYS.TWEAK_AUTOPICKUP_CAP, parseAutopickupCap, (g) => g.cap, DEFAULT_AUTOPICKUP_CAP);
+  // Lazy: the ladder is the kernel's one copy (tests/rank_tier_single_source.mjs).
+  const ladder = require('./db-kernel').LIVE_RANK_LADDER;
+  const keys = [SETTING_KEYS.TWEAK_AUTOPICKUP, SETTING_KEYS.TWEAK_AUTOPICKUP_CAP, ...ladder.map(rankCapKey)];
+  let byKey = new Map();
+  try {
+    const { rows } = await pool.query('SELECT key, value FROM project_settings WHERE key = ANY($1::text[])', [keys]);
+    byKey = new Map(rows.map((row) => [row.key, row]));
+  } catch (err) {
+    logger.error(`project_settings read failed; falling back to the default tweak auto-pickup settings: ${err && err.message}`);
+  }
+  const m = parseRow(SETTING_KEYS.TWEAK_AUTOPICKUP, byKey.get(SETTING_KEYS.TWEAK_AUTOPICKUP), parseAutopickup, (g) => g.mode, DEFAULT_AUTOPICKUP);
+  const c = parseRow(SETTING_KEYS.TWEAK_AUTOPICKUP_CAP, byKey.get(SETTING_KEYS.TWEAK_AUTOPICKUP_CAP), parseAutopickupCap, (g) => g.cap, DEFAULT_AUTOPICKUP_CAP);
+  const rankCaps = {};
+  const invalid = [m.invalid, c.invalid];
+  for (const rank of ladder) {
+    const r = parseRow(rankCapKey(rank), byKey.get(rankCapKey(rank)), parseAutopickupCap, (g) => g.cap, null);
+    if (r.value != null) rankCaps[rank] = r.value;
+    invalid.push(r.invalid);
+  }
   return {
     mode: m.value,
     cap: c.value,
+    rank_caps: rankCaps,
     source: { mode: m.source, cap: c.source },
-    invalid: [m.invalid, c.invalid].filter(Boolean),
+    invalid: invalid.filter(Boolean),
   };
 }
 
 function describeTweakAutopickup(resolved) {
   const r = resolved || {};
   if (r.mode !== 'on') return 'Off: a submitted page waits until a person runs /tweak for it.';
-  return `On: a running Autobongos runner applies submitted pages on its own, up to ${r.cap} a month. The artist still approves every one.`;
+  const ranks = Object.entries(r.rank_caps || {});
+  const byRank = ranks.length
+    ? ` Some builder ranks have their own limit: ${ranks.map(([rank, n]) => `${rank} ${n}`).join(', ')}.`
+    : '';
+  return `On: a running Autobongos runner applies submitted pages on its own, up to ${r.cap} a month.${byRank} The artist still approves every one.`;
 }
 
 // THE SPEND CAP (task 1004712, ADR 0379). The owner's ruling: there is NO spend
@@ -416,6 +459,7 @@ module.exports = {
   MAX_AUTOPICKUP_CAP,
   parseAutopickup,
   parseAutopickupCap,
+  rankCapKey,
   resolveTweakAutopickup,
   describeTweakAutopickup,
   MAX_SPEND_CAP_USD,

package/src/module-api.js

@@ -81,7 +81,7 @@ const { sleep } = require('./sleep');
 // MAJOR (see allowBoxScope below): passes the request through untouched.
 function deprecatedNoopMiddleware(_req, _res, next) { next(); }
 
-const CORE_VERSION = '1.24.6'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
+const CORE_VERSION = '1.24.7'; // CI auto-patch carrier (ADR 0161); changelog: docs/module-api-changelog.md
 
 // A namespaced logger so a module's log lines are attributable + consistent.
 // Usage: const log = api.logger('discord'); log.info('mounted');