@bongos/core 1.24.6 → 1.24.8

package/modules/hall-ui/public/market-watch-rules.js

@@ -0,0 +1,129 @@
+// market-watch-rules.js — the Market Watch rules page (/builders/market-watch-rules,
+// task 1004941). One read, GET /api/bongos/market-watch/rules; the markup is
+// OTBMarketWatchRules's (market-watch-rules-lib.js). Three writes, each checked again on
+// the server: a member's proposal, the owner's approve or decline, and putting a proposal
+// to the government's vote.
+
+(() => {
+  'use strict';
+
+  const lib = window.OTBMarketWatchRules;
+  const esc = (s) => window.OTB.escapeHtml(s);
+  const toast = (m) => window.OTB.toast(m);
+  const API = '/api/bongos/market-watch';
+  const $ = (id) => document.getElementById(id);
+
+  let view = null;
+  let step = 'searches';
+  let at = 0;
+
+  async function send(method, url, body) {
+    const r = await fetch(url, {
+      method,
+      credentials: 'same-origin',
+      headers: body ? { 'content-type': 'application/json' } : {},
+      body: body ? JSON.stringify(body) : undefined,
+    });
+    let data = null;
+    try { data = await r.json(); } catch (_) { /* no body */ }
+    return { ok: r.ok, status: r.status, data };
+  }
+  const codeOf = (data) => (window.OTB.errCode ? window.OTB.errCode(data) : (data && data.error && data.error.code));
+
+  function stopNow() {
+    const s = lib.stops(view);
+    const i = s.findIndex((x) => x.kind === 'now');
+    return i === -1 ? Math.max(0, s.length - 1) : i;
+  }
+
+  function render() {
+    const stops = lib.stops(view);
+    const stop = stops[at] || null;
+    $('mwr-slider').innerHTML = lib.sliderHtml(view, at, esc);
+    $('mwr-pipe').innerHTML = lib.pipelineHtml(view, { open: step, changed: stop ? stop.changed : [] }, esc);
+    $('mwr-panel').innerHTML = lib.panelHtml(view, step, stop, esc);
+    $('mwr-cost').innerHTML = lib.costHtml(view.cost, esc);
+    const slider = $('mwr-v');
+    if (slider) slider.addEventListener('input', () => { at = Number(slider.value); render(); $('mwr-v').focus(); });
+  }
+
+  async function load() {
+    const r = await send('GET', `${API}/rules`);
+    if (!r.ok) {
+      const msg = r.status === 404
+        ? 'Market Watch is off on this project. The owner turns it on in Modules.'
+        : 'Could not load the watch rules. Try reloading the page.';
+      $('mwr-pipe').innerHTML = '';
+      $('mwr-panel').innerHTML = `<p class="mwr-empty">${esc(msg)}</p>`;
+      return;
+    }
+    view = r.data;
+    if (!view.steps || !view.history || !view.history.length) {
+      $('mwr-panel').innerHTML = '<p class="mwr-empty">This project has no watch rules yet.</p>';
+      return;
+    }
+    at = stopNow();
+    render();
+  }
+
+  function openForm(btn) {
+    const slot = $('mwr-form-slot');
+    if (!slot) return;
+    if (slot.firstChild) { slot.innerHTML = ''; btn.setAttribute('aria-expanded', 'false'); return; }
+    slot.innerHTML = lib.formHtml(view, step, esc);
+    btn.setAttribute('aria-expanded', 'true');
+    const form = slot.querySelector('form');
+    const op = form.querySelector('select[name="op"]');
+    if (op) {
+      op.addEventListener('change', () => {
+        form.querySelectorAll('[data-for]').forEach((el) => { el.hidden = el.dataset.for !== op.value; });
+      });
+    }
+    const first = form.querySelector('input, select, textarea');
+    if (first) first.focus();
+  }
+
+  async function submitForm(form) {
+    const fields = Object.fromEntries(new FormData(form).entries());
+    const body = lib.proposalFromForm(form.dataset.step, fields);
+    const btn = form.querySelector('button[type="submit"]');
+    btn.disabled = true;
+    const r = await send('POST', `${API}/rules/proposals`, body);
+    btn.disabled = false;
+    if (!r.ok) return toast(lib.errorText(codeOf(r.data)));
+    toast('proposal sent');
+    await load();
+  }
+
+  async function act(kind, id) {
+    const url = kind === 'vote' ? `${API}/proposals/${id}/vote` : `${API}/proposals/${id}/decide`;
+    const r = await send('POST', url, kind === 'vote' ? undefined : { decision: kind });
+    if (!r.ok) return toast(lib.errorText(codeOf(r.data)));
+    if (kind === 'approve') toast(r.data && r.data.version ? `approved · v${r.data.version.version}` : 'approved');
+    else toast(kind === 'vote' ? 'sent to a vote' : 'declined');
+    await load();
+  }
+
+  document.addEventListener('click', (e) => {
+    if (!view) return;
+    const node = e.target.closest('.mwr-node');
+    if (node) { step = node.dataset.step; render(); return; }
+    const b = e.target.closest('[data-act]');
+    if (!b) return;
+    const what = b.dataset.act;
+    if (what === 'propose') return openForm(b);
+    if (what === 'cancel') { $('mwr-form-slot').innerHTML = ''; return; }
+    if (what === 'approve' || what === 'decline' || what === 'vote') {
+      b.disabled = true;
+      act(what, b.dataset.id).finally(() => { b.disabled = false; });
+    }
+  });
+  document.addEventListener('submit', (e) => {
+    const form = e.target.closest('.mwr-form');
+    if (!form) return;
+    e.preventDefault();
+    submitForm(form);
+  });
+
+  load();
+})();

package/modules/hall-ui/public/market-watch-rules.states.json

@@ -0,0 +1,17 @@
+{
+  "_": "The Market Watch rules page (task 1004941), built to docs/design/mocks/market-watch/rules.html, option C (the pipeline map). One read, GET /market-watch/rules. Against the kit's own stub it 404s, so the page renders its 'Market Watch is off' state, which the floors must hold too. TO SEE IT POPULATED, point the kit at the hall-preview harness: `node scripts/hall-preview/server.js --port 4641 --fixture-me`, then `render.js --page /builders/market-watch-rules --base-in http://builders.localhost:4641 --base-out http://builders.localhost:4641`. The harness answers from fixtures/market-watch__rules.json, built by the real composers (rules-view.buildView over the seed's rules and 60 items, two approved changes and four open proposals). Steps are opened with clickIfVisible because against the stub the nodes do not exist.",
+  "page": "/builders/market-watch-rules",
+  "surface": "hall-ui",
+  "stub": { "prefix": "/builders/" },
+  "modeQuery": false,
+  "ignoreRequests": ["/api/(gds|bongos)/me$", "/api/(gds|bongos)/me/", "/api/(gds|bongos)/goals", "/api/(gds|bongos)/inbox/", "/api/(gds|bongos)/market-watch/", "/api/(gds|bongos)/core-update"],
+  "ignoreConsole": ["/api/(gds|bongos)/", "\\b401\\b", "\\b404\\b", "Unauthorized", "Not Found", "load failed"],
+  "states": {
+    "in": { "auth": true, "actions": [["wait", 700], ["clickIfVisible", "[data-craft-close]"], ["wait", 150]], "expect": { "visible": ["#mwr-panel"] } },
+    "scoring": { "auth": true, "actions": [["wait", 700], ["clickIfVisible", "[data-craft-close]"], ["wait", 150], ["clickIfVisible", ".mwr-node[data-step='scoring']"], ["wait", 200]] },
+    "names": { "auth": true, "actions": [["wait", 700], ["clickIfVisible", "[data-craft-close]"], ["wait", 150], ["clickIfVisible", ".mwr-node[data-step='names']"], ["wait", 200]] },
+    "propose": { "auth": true, "actions": [["wait", 700], ["clickIfVisible", "[data-craft-close]"], ["wait", 150], ["clickIfVisible", ".mwr-node[data-step='sources']"], ["wait", 150], ["clickIfVisible", "[data-act='propose']"], ["wait", 200]] },
+    "out": { "auth": false }
+  },
+  "reducedMotion": { "auth": true, "actions": [["wait", 700], ["clickIfVisible", "[data-craft-close]"], ["wait", 150]] }
+}

package/modules/hall-ui/public/project-settings.html

@@ -4,7 +4,7 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Project settings — {{worldName}}</title>
-  <meta name="description" content="The fundamentals of this project in one place — how tasks ship, the stale timer, the category set, how credits are calculated, why credits are not equity, and whether a credit-weighted pool can pay out.">
+  <meta name="description" content="The fundamentals of this project in one place — how tasks ship, how many tweak rounds a month, the stale timer, the category set, how credits are calculated, why credits are not equity, and whether a credit-weighted pool can pay out.">
   <link rel="icon" href="data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'><text x='16' y='24' font-size='24' text-anchor='middle' font-family='sans-serif'>⌂</text></svg>">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
@@ -38,11 +38,11 @@
         <section class="scroll" id="ps-body" aria-labelledby="ps-body-h" hidden>
           <h2 class="scroll__h" id="ps-body-h">The fundamentals</h2>
           <p class="scroll__lede">
-            Six things every project settles. Three of them are knobs you can turn here;
+            Seven things every project settles. Four of them are knobs you can turn here;
             the other three are decided in committed configuration, and each says which
             file decides it.
           </p>
-          <!-- One mount, six rows, written by project-settings.js. The rows are NOT
+          <!-- One mount, seven rows, written by project-settings.js. The rows are NOT
                authored in this file: each carries a value plus the provenance the
                server resolved it through, and markup that could drift from that is the
                thing this page exists to end. -->
@@ -76,6 +76,6 @@
 <!-- jump palette (Ctrl/Cmd-K). Optional by design: without it the shell's slot stays hidden. -->
 <script src="/builders/palette.js" defer></script>
 <script src="/builders/hall-kit.js"></script>
-<script src="/builders/project-settings.js?v=2026-10-08-ship-mode"></script>
+<script src="/builders/project-settings.js?v=2026-10-29-tweak-cap"></script>
 </body>
 </html>

package/modules/hall-ui/public/project-settings.js

@@ -1,4 +1,4 @@
-// project-settings.js — the five fundamentals of this project, each with the place
+// project-settings.js — the seven fundamentals of this project, each with the place
 // its value came from (task 1003280, goal 1000072, criterion legibility-project-settings).
 //
 // WHAT THIS PAGE IS FOR. Goal 1000072's thesis: the project is legible to Claude and
@@ -148,6 +148,35 @@
       </div>`;
   }
 
+  // The monthly tweak-round cap (task 1005003): the project's number, then one box
+  // per builder rank. The ranks and the bound come from the server; a blank rank box
+  // means that rank follows the project's number.
+  function tweakCapBodyHtml(row) {
+    const v = row.value || {};
+    const ranks = Array.isArray(v.ranks) ? v.ranks : [];
+    const max = escapeHtml(String(v.max));
+    const invalid = row.invalid
+      ? `<p class="ps-invalid">A configured value could not be used: <code>${escapeHtml(String(row.invalid.raw))}</code>
+           — ${escapeHtml(String(row.invalid.reason))}. The limit above is the fallback that is actually in force.</p>`
+      : '';
+    return `
+      ${invalid}
+      <div class="ps-controls">
+        <label for="ps-tweak-cap">Project limit</label>
+        <input type="number" id="ps-tweak-cap" min="1" max="${max}" step="1" value="${escapeHtml(String(v.cap))}">
+        <span>rounds a month (1–${max})</span>
+      </div>
+      ${ranks.map((r) => `
+        <div class="ps-controls">
+          <label for="ps-tweak-rank-${escapeHtml(String(r.rank))}">${escapeHtml(String(r.rank))}</label>
+          <input type="number" class="ps-tweak-rank" id="ps-tweak-rank-${escapeHtml(String(r.rank))}" data-rank="${escapeHtml(String(r.rank))}"
+                 min="1" max="${max}" step="1" value="${r.cap == null ? '' : escapeHtml(String(r.cap))}" placeholder="project limit">
+        </div>`).join('')}
+      <div class="ps-controls">
+        <button type="button" class="btn" id="ps-tweak-save">Save</button>
+      </div>`;
+  }
+
   function catsBodyHtml(row) {
     const v = row.value || {};
     const cats = Array.isArray(v.categories) ? v.categories : [];
@@ -177,6 +206,7 @@
     const mount = $('ps-rows');
     mount.innerHTML = `<ul class="ov-rows">${rows.map((row) => {
       if (row.key === 'ship_mode' && row.editable) return rowHtml(row, shipBodyHtml(row));
+      if (row.key === 'tweak_round_cap' && row.editable) return rowHtml(row, tweakCapBodyHtml(row));
       if (row.key === 'rot_timer' && row.editable) return rowHtml(row, rotBodyHtml(row));
       if (row.key === 'work_categories' && row.editable) return rowHtml(row, catsBodyHtml(row));
       return rowHtml(row, '');
@@ -210,6 +240,26 @@
       });
     }
 
+    const tweakSave = $('ps-tweak-save');
+    if (tweakSave) {
+      tweakSave.addEventListener('click', async () => {
+        const rankCaps = {};
+        document.querySelectorAll('.ps-tweak-rank').forEach((el) => {
+          const raw = String(el.value || '').trim();
+          rankCaps[el.getAttribute('data-rank')] = raw === '' ? null : Number(raw);
+        });
+        setBusy(true);
+        try {
+          const out = await sendJson('PATCH', '/project-settings/tweak-autopickup', { cap: Number($('ps-tweak-cap').value), rank_caps: rankCaps });
+          toast(`Monthly tweak rounds: ${out.cap} for the project.`);
+          await load();
+        } catch (err) {
+          toast(err.message || 'Could not save the limit.');
+          setBusy(false);
+        }
+      });
+    }
+
     const rotSave = $('ps-rot-save');
     if (rotSave) {
       rotSave.addEventListener('click', async () => {

package/modules/lifecycle/autopickup.js

@@ -56,11 +56,26 @@ async function countForRound(exec, taskId) {
   return Number(rows[0] && rows[0].n) || 0;
 }
 
-// autoPickupRefusal(client, task, settings) — null when the marked claim may
+// effectiveCap(settings, rank) — { cap, from: 'rank' | 'project' } (task 1005003).
+// The claimer's rank's own cap when the project set one, else the project cap. The
+// cap is measured against the project's monthly count either way: a rank cap says
+// how far into the month a runner of that rank may still pick up, not a separate
+// allowance per builder, so the ledger count stays one project-wide number. Pure.
+function effectiveCap(settings, rank) {
+  const s = settings || {};
+  const caps = s.rank_caps || {};
+  if (rank && Object.prototype.hasOwnProperty.call(caps, rank) && Number.isInteger(caps[rank])) {
+    return { cap: caps[rank], from: 'rank' };
+  }
+  return { cap: s.cap, from: 'project' };
+}
+
+// autoPickupRefusal(client, task, settings, rank) — null when the marked claim may
 // proceed, else the refusal object claimTask throws. `settings` is the resolved
-// { mode, cap }, read BEFORE the transaction opens (the claimPermissionsFor
-// precedent: a settings read is not part of the claim's consistency).
-async function autoPickupRefusal(client, task, settings) {
+// { mode, cap, rank_caps }, read BEFORE the transaction opens (the
+// claimPermissionsFor precedent: a settings read is not part of the claim's
+// consistency). `rank` is the claimer's rank, read inside it.
+async function autoPickupRefusal(client, task, settings, rank = null) {
   if (!task || task.source !== PAGE_TWEAK_SOURCE) {
     return { code: 'AUTO_PICKUP_NOT_A_TWEAK', message: 'Only a page tweak round can be claimed with the auto_pickup mark.' };
   }
@@ -77,11 +92,12 @@ async function autoPickupRefusal(client, task, settings) {
     };
   }
   const used = await countThisMonth(client);
-  if (used >= s.cap) {
-    return {
-      code: 'AUTO_PICKUP_CAP_REACHED', used, cap: s.cap,
-      message: `Auto-pickup has used this month's ${s.cap} rounds, so submitted pages wait for a person until next month.`,
-    };
+  const { cap, from } = effectiveCap(s, rank);
+  if (used >= cap) {
+    const message = from === 'rank'
+      ? `This month's auto-pickups have reached ${cap}, the limit this project sets for a ${rank} builder's runner, so submitted pages wait for a person until next month.`
+      : `Auto-pickup has used this month's ${cap} rounds, so submitted pages wait for a person until next month.`;
+    return { code: 'AUTO_PICKUP_CAP_REACHED', used, cap, cap_from: from, message };
   }
   return null;
 }
@@ -90,5 +106,6 @@ module.exports = {
   LOCK_KEY,
   MAX_AUTO_APPLIES_PER_ROUND,
   countThisMonth,
+  effectiveCap,
   autoPickupRefusal,
 };

package/modules/lifecycle/db-claims.js

@@ -374,7 +374,7 @@ async function claimTask({ taskId, builderId, worktreeName, headSha, creatorSess
     // limit are counted under a project-wide advisory lock that this transaction
     // holds through the insert below, so two runners cannot both take the last slot.
     if (autoPickup) {
-      const refusal = await autoPickupRefusal(client, task, autoPickupSettings);
+      const refusal = await autoPickupRefusal(client, task, autoPickupSettings, builderRank);
       if (refusal) throw refusal;
     }
 

package/modules/lifecycle/routes/project-settings.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// modules/lifecycle/routes/project-settings.js — the five fundamentals of a project,
+// modules/lifecycle/routes/project-settings.js — the seven fundamentals of a project,
 // in one read, each carrying WHERE its value came from (task 1003280, goal 1000072,
 // criterion legibility-project-settings).
 //
@@ -60,6 +60,33 @@ function shipModeRow(resolved) {
   };
 }
 
+// --- the monthly tweak-round cap (task 1005003) -----------------------------
+//
+// The project cap and one optional cap per builder rank, editable on the settings
+// page. The ranks come from the kernel's live ladder, never re-typed here or on the
+// page; a rank with no number follows the project cap.
+function tweakCapRow(resolved) {
+  const r = resolved || {};
+  const rankCaps = r.rank_caps || {};
+  return {
+    key: 'tweak_round_cap',
+    title: 'Monthly tweak rounds',
+    editable: true,
+    state: 'live',
+    value: {
+      cap: r.cap,
+      max: api.projectSettings.MAX_AUTOPICKUP_CAP,
+      ranks: api.LIVE_RANK_LADDER.map((rank) => ({ rank, cap: Object.prototype.hasOwnProperty.call(rankCaps, rank) ? rankCaps[rank] : null })),
+    },
+    sentence: `Tweak auto-pickup may apply up to ${r.cap} submitted pages a month. A builder rank can have its own limit; `
+      + 'a rank left blank follows the project limit. When the limit is reached, pages wait for a person.',
+    source: r.source ? r.source.cap : 'default',
+    // Only a cap value this row draws; an unusable on/off switch is not this row's.
+    invalid: (r.invalid || []).find((i) => /autopickup_(monthly_cap|rank_cap\.)/.test(String(i && i.where))) || null,
+    reads: { file: 'project_settings[\'tweak.autopickup_monthly_cap\', \'tweak.autopickup_rank_cap.<rank>\']', adr: 'ADR 0371 D5' },
+  };
+}
+
 // callerHolds(builderId, atom) → true | false | null. null means authority could
 // not be established (government port missing or the resolver threw); a reader
 // treats that as unknown, never as a grant.
@@ -264,6 +291,7 @@ module.exports = function buildProjectSettingsRouter() {
       // category the owner cannot see is one they cannot bring back.
       const categories = await goalCategory.listCategories({ includeInactive: true });
       const shipMode = await api.projectSettings.resolveShipMode();
+      const tweak = await api.projectSettings.resolveTweakAutopickup();
 
       // A settings read is a configuration comparison — a cached one is wrong the
       // moment somebody turns a knob (the rot.js precedent).
@@ -271,6 +299,7 @@ module.exports = function buildProjectSettingsRouter() {
       res.json({
         rows: [
           shipModeRow(shipMode),
+          tweakCapRow(tweak),
           {
             key: 'rot_timer',
             title: 'Stale timer',
@@ -443,14 +472,23 @@ module.exports = function buildProjectSettingsRouter() {
   //
   // rank: any signed-in builder. The runner reads it before it tries a round, and
   // the studio shows the count; it carries no reward internals or file paths.
-  async function autopickupBody() {
+  //
+  // cap is the project's; rank_caps the per-rank caps the project set (task
+  // 1005003). my_cap is the one that applies to the CALLER's rank, and
+  // remaining_this_month is measured against it, so a runner reads the number the
+  // claim gate will hold it to.
+  async function autopickupBody(rank = null) {
     const resolved = await api.projectSettings.resolveTweakAutopickup();
     const used = await autopickup.countThisMonth();
+    const mine = autopickup.effectiveCap(resolved, rank);
     return {
       mode: resolved.mode,
       cap: resolved.cap,
+      rank_caps: resolved.rank_caps || {},
+      my_cap: mine.cap,
+      my_cap_from: mine.from,
       used_this_month: used,
-      remaining_this_month: Math.max(0, resolved.cap - used),
+      remaining_this_month: Math.max(0, mine.cap - used),
       per_round_limit: autopickup.MAX_AUTO_APPLIES_PER_ROUND,
       source: resolved.source,
       invalid: resolved.invalid,
@@ -461,32 +499,54 @@ module.exports = function buildProjectSettingsRouter() {
   router.get('/project-settings/tweak-autopickup', api.requireBuilder, async (req, res) => {
     try {
       res.set('Cache-Control', 'no-store');
-      res.json(await autopickupBody());
+      res.json(await autopickupBody(req.builder && req.builder.rank));
     } catch (err) {
       log.error(`GET /project-settings/tweak-autopickup: ${err && err.message}`);
       res.fail('project_settings_read_failed', { status: 500, message: 'internal error' });
     }
   });
 
-  // PATCH /project-settings/tweak-autopickup — body { mode?: 'off' | 'on', cap?: n }.
+  // PATCH /project-settings/tweak-autopickup — body { mode?: 'off' | 'on', cap?: n,
+  // rank_caps?: { <rank>: n | null } }.
   //
   // rank: project.settings.manage (metic+, government_010), the same atom as the
   // other writes on this page. Each field is validated by the resolver's own parser,
-  // and both are checked before either is written, so a half-valid body writes nothing.
+  // and all are checked before any is written, so a half-valid body writes nothing.
+  //
+  // rank_caps (task 1005003) is a PARTIAL update: a rank named with a number gets
+  // that cap, a rank named with null loses its own cap (and follows the project cap
+  // again), and a rank not named is left as it was. A rank must be on the live
+  // ladder; each number goes through parseAutopickupCap, the project cap's parser.
   router.patch('/project-settings/tweak-autopickup', api.requireBuilder, api.requirePermission('project.settings.manage'), api.requireActAlone('rules'), async (req, res) => {
-    if (api.validateOrRespond(req, res, { mode: { type: 'string' }, cap: { type: 'number' } })) return;
+    if (api.validateOrRespond(req, res, { mode: { type: 'string' }, cap: { type: 'number' }, rank_caps: { type: 'object' } })) return;
     const body = req.body || {};
-    if (body.mode == null && body.cap == null) {
-      return res.fail('bad_tweak_autopickup', { status: 400, message: 'send mode, cap, or both' });
+    if (body.mode == null && body.cap == null && body.rank_caps == null) {
+      return res.fail('bad_tweak_autopickup', { status: 400, message: 'send mode, cap, rank_caps, or any of them' });
     }
     const mode = body.mode == null ? null : api.projectSettings.parseAutopickup(body.mode);
     if (mode && !mode.mode) return res.fail('bad_tweak_autopickup', { status: 400, message: `mode: ${mode.reason}` });
     const cap = body.cap == null ? null : api.projectSettings.parseAutopickupCap(body.cap);
     if (cap && cap.cap == null) return res.fail('bad_tweak_autopickup', { status: 400, message: `cap: ${cap.reason}` });
+    const rankEdits = [];
+    for (const [rank, value] of Object.entries(body.rank_caps || {})) {
+      if (!api.LIVE_RANK_LADDER.includes(rank)) {
+        return res.fail('bad_tweak_autopickup', { status: 400, message: `rank_caps: unknown rank '${rank}' (one of ${api.LIVE_RANK_LADDER.join(' | ')})` });
+      }
+      if (value === null) { rankEdits.push([rank, null]); continue; }
+      const got = api.projectSettings.parseAutopickupCap(value);
+      if (got.cap == null) return res.fail('bad_tweak_autopickup', { status: 400, message: `rank_caps.${rank}: ${got.reason}` });
+      rankEdits.push([rank, got.cap]);
+    }
     try {
       if (mode) await api.projectSettings.set(api.projectSettings.KEYS.TWEAK_AUTOPICKUP, mode.mode, req.builder.id);
       if (cap) await api.projectSettings.set(api.projectSettings.KEYS.TWEAK_AUTOPICKUP_CAP, cap.cap, req.builder.id);
-      res.json({ ok: true, ...(await autopickupBody()) });
+      // One row per rank, each a single upsert: no read-modify-write, so two people
+      // editing two ranks at once cannot drop each other's edit. '' clears a rank
+      // (the resolver reads an empty value as "no cap of its own").
+      for (const [rank, n] of rankEdits) {
+        await api.projectSettings.set(`${api.projectSettings.KEYS.TWEAK_AUTOPICKUP_RANK_CAP_PREFIX}${rank}`, n === null ? '' : n, req.builder.id);
+      }
+      res.json({ ok: true, ...(await autopickupBody(req.builder && req.builder.rank)) });
     } catch (err) {
       log.error(`PATCH /project-settings/tweak-autopickup: ${err && err.message}`);
       res.fail('project_settings_write_failed', { status: 500, message: 'internal error' });
@@ -498,3 +558,4 @@ module.exports = function buildProjectSettingsRouter() {
 
 module.exports.settingsDeskRows = settingsDeskRows;
 module.exports.shipModeRow = shipModeRow;
+module.exports.tweakCapRow = tweakCapRow;

package/modules/market-watch/matter-acts.js

@@ -0,0 +1,59 @@
+'use strict';
+
+// modules/market-watch/matter-acts.js — what a PASSED government vote on a Market Watch
+// proposal carries out (task 1004941, goal 1000137).
+//
+// Where the project's government hands its Rules building to a sitting (the
+// decision-rules table, ADR 0363), the owner cannot approve a proposal alone: the decide
+// route refuses with 409 decided_by_sitting, and the proposal is put to a vote instead
+// (POST /market-watch/proposals/:id/vote, which files a Rules matter through the
+// government port). When that sitting passes the matter, the government module calls
+// this act through the 'governor.matterAct' contribution point, after the close commits,
+// and it approves the proposal through the SAME decideProposal the owner's route calls,
+// so a vote can do nothing the owner's approval could not. A returned matter acts on
+// nothing; the proposal stays open for the owner to decline.
+//
+// A module never requires a sibling: the government reaches this only through the
+// contribution, and this reaches the government only through its port.
+
+const api = require('../../src/module-api');
+const proposals = require('./proposals');
+const { projectKey } = require('./seed');
+
+const log = api.logger('market-watch');
+const POINT = 'governor.matterAct';
+const AREA = 'rules';
+const TYPE = 'market_watch_proposal';
+
+// Where the act finds the project and its transaction. A test (and the government walk)
+// replaces these to run the act without a database or branding.
+const runtime = {
+  project: () => projectKey(api.branding().domains.publicOrigin),
+  withTx: (fn) => api.withTx(fn, { pool: api.pool }),
+};
+
+async function approveByVote(action, ctx) {
+  const project = runtime.project();
+  if (!project) return { done: false, reason: 'no_project' };
+  const withTx = runtime.withTx;
+  const out = await proposals.decideProposal({
+    project,
+    id: action.proposal_id,
+    decision: 'approve',
+    decidedBy: ctx && ctx.decidedBy,
+    via: { decided_via: 'vote', matter_id: ctx && ctx.matterId != null ? String(ctx.matterId) : null },
+    withTx,
+  });
+  if (!out.ok) {
+    log.warn(`[market-watch] proposal ${action.proposal_id} passed by vote (matter ${ctx && ctx.matterId}) but was not applied: ${out.reason}`);
+    return { done: false, reason: out.reason };
+  }
+  log.info(`[market-watch] proposal ${action.proposal_id} ${out.status} by vote (matter ${ctx && ctx.matterId})`);
+  return { done: true };
+}
+
+function contributeMarketWatchMatterActs() {
+  api.contribute(POINT, { area: AREA, type: TYPE, act: (action, ctx) => approveByVote(action, ctx) });
+}
+
+module.exports = { approveByVote, contributeMarketWatchMatterActs, runtime };

package/modules/market-watch/module.json

@@ -1,9 +1,9 @@
 {
   "key": "market-watch",
   "title": "Market Watch (a weekly AI watch on a project's market)",
-  "description": "A weekly AI watch on a project's competitors, partners and topics, with a sourced log per tracked item and a weekly question to members (goal 1000137). Its data model (tables, read queries and the hub seed of the 2026-10-28 research) and its weekly run (an hourly poller that researches each tracked item on the project's own Anthropic key, under the monthly cap) are in, and so is the weekly ask card in the hall's attention inbox (task 1004940); the pages are not yet. Off by default, and it cannot be turned on behind an open join door with no payer, because every run will spend the project's AI budget.",
-  "version": "0.3.0",
-  "coreVersion": "^1.19.0",
+  "description": "A weekly AI watch on a project's competitors, partners and topics, with a sourced log per tracked item and a weekly question to members (goal 1000137). Its data model (tables, read queries and the hub seed of the 2026-10-28 research), its weekly run (an hourly poller that researches each tracked item on the project's own Anthropic key, under the monthly cap), the weekly ask card in the hall's attention inbox (task 1004940) and its rules page (the watch rules in plain words, members' proposed changes, and the owner's or the government's decision on each, task 1004941) are in. Off by default, and it cannot be turned on behind an open join door with no payer, because every run will spend the project's AI budget.",
+  "version": "0.4.0",
+  "coreVersion": "^1.22.0",
   "category": {
     "parent": "knowledge"
   },
@@ -14,7 +14,8 @@
   "contributes": {
     "migrations": true,
     "routes": [
-      "ask"
+      "ask",
+      "rules"
     ],
     "pollers": [
       "hub-seed",