feat(node): make the transfer caps settable, node-wide and per group

Step 3 of ~/next/improve-downloads.md. Step 2 built the pools with constants;
this gives them to the operator, in the two scopes they belong to.

**The pools are the machine's.** `[node] max_concurrent_downloads` and
`max_concurrent_uploads`, default 8, on the §2.11 pattern: node.toml for a
fresh install, a roster.db override for immediate effect, editable from the
Node page and from `meshbay-node transfers show|set`, applied live through the
one `set_capacity` step 1 fixed.

**The per-member cap is a group's.** How many transfers one member may run at
once here — on the node like every other group setting (not the hub, which
would have authority over someone else's disk; not node.toml, which is
hand-written and needs a restart), changed by a signed operator instruction
(`OP_TRANSFER_LIMITS`, subject "d=2,u=2" so what is signed names the outcome),
broadcast to the group, and read live by the pools.

That was the one thing step 2's shape could not express: `per_member` was a
single node-wide number. `group_limits` and `member_cap(kind, member)` make it
a lookup — the group's own value if it has one, the node's default otherwise —
and it is deliberately the only dimension that is not node-wide.

Three refusals, each with a test:

- **absent means the default (2), never "unlimited".** A group that predates
  the setting coming back unlimited would leave the node-wide pool as the only
  control, which is the situation slots exist to end;
- **zero is not "unlimited"**, and is not "this member may not transfer"
  either: the floor is one everywhere, and the CLI says to revoke the member
  instead;
- **an unreadable row reads as unset**, not as zero — the same discipline the
  sealed messages follow, where a payload that does not open must never become
  a default state on its own.

`handshake_ack` carries this member's own caps for this group, so the interface
can say "2 of your 2 slots are busy" instead of drawing a bare spinner. Absent
reads as "no limit known" and the hint is not drawn — never as "unlimited",
which would have the interface contradicting the node.

1164 node, 793 hub, 0 failed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HCGdheDLxGReuKHga3BtST

11 files changed, 34 insertions, 0 deletions

diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/de.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/de.js
index 1ebab8b..8ed1ef0 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/de.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/de.js
@@ -739,6 +739,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Max. gleichzeitige Downloads',
+  'node.setting_max_uploads': 'Max. gleichzeitige Uploads',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/en.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/en.js
index d85f51b..285ff7a 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/en.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/en.js
@@ -890,6 +890,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Max concurrent downloads',
+  'node.setting_max_uploads': 'Max concurrent uploads',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/es.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/es.js
index bfe4112..f74c763 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/es.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/es.js
@@ -734,6 +734,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Descargas simultáneas máximas',
+  'node.setting_max_uploads': 'Subidas simultáneas máximas',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/fr.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/fr.js
index 9addec5..0c5103f 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/fr.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/fr.js
@@ -737,6 +737,8 @@ export default {
   'node.setting_pair_ttl': 'Durée du code d\'appairage',
   'node.setting_device_ttl': 'Durée des demandes d\'appareil',
   'node.setting_max_streams': 'Flux vidéo simultanés max',
+  'node.setting_max_downloads': 'Téléchargements simultanés max',
+  'node.setting_max_uploads': 'Téléversements simultanés max',
   'node.setting_transcode': 'Transcoder les vidéos incompatibles',
   'node.setting_unit_hours': 'heures',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/it.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/it.js
index fe76b9e..ebac541 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/it.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/it.js
@@ -736,6 +736,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Download simultanei massimi',
+  'node.setting_max_uploads': 'Caricamenti simultanei massimi',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/ja.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/ja.js
index 272be73..1b49ddb 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/ja.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/ja.js
@@ -724,6 +724,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': '同時ダウンロードの上限',
+  'node.setting_max_uploads': '同時アップロードの上限',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/nl.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/nl.js
index 76f3586..7cf4cd4 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/nl.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/nl.js
@@ -738,6 +738,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Max. gelijktijdige downloads',
+  'node.setting_max_uploads': 'Max. gelijktijdige uploads',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/pl.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/pl.js
index dd05487..6edffd5 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/pl.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/pl.js
@@ -756,6 +756,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Maks. równoczesnych pobierań',
+  'node.setting_max_uploads': 'Maks. równoczesnych wysyłek',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/pt-BR.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/pt-BR.js
index 4632d36..3a6fa22 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/pt-BR.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/pt-BR.js
@@ -735,6 +735,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': 'Máximo de downloads simultâneos',
+  'node.setting_max_uploads': 'Máximo de envios simultâneos',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/locales/zh-CN.js b/packages/meshbay-hub/src/meshbay_hub/static/locales/zh-CN.js
index b6ff3c9..f43ef72 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/locales/zh-CN.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/locales/zh-CN.js
@@ -711,6 +711,8 @@ export default {
   'node.setting_pair_ttl': 'Pairing code TTL',
   'node.setting_device_ttl': 'Device request TTL',
   'node.setting_max_streams': 'Max concurrent streams',
+  'node.setting_max_downloads': '最大同时下载数',
+  'node.setting_max_uploads': '最大同时上传数',
   'node.setting_transcode': 'Transcode incompatible video',
   'node.setting_unit_hours': 'hours',
   'node.setting_unit_minutes': 'min',
diff --git a/packages/meshbay-hub/src/meshbay_hub/static/node-page.js b/packages/meshbay-hub/src/meshbay_hub/static/node-page.js
index 2e216a9..c1d57f9 100644
--- a/packages/meshbay-hub/src/meshbay_hub/static/node-page.js
+++ b/packages/meshbay-hub/src/meshbay_hub/static/node-page.js
@@ -1044,6 +1044,20 @@ export function NodePage({ groups }) {
               </div>
             </label>
             <label class="node-setting">
+              <span class="node-setting-label">${t('node.setting_max_downloads')}</span>
+              <div class="node-setting-input">
+                <input type="number" min="1" value=${editSettings.max_concurrent_downloads}
+                  onInput=${e => setEditSettings(s => ({...s, max_concurrent_downloads: parseInt(e.target.value) || 1}))} />
+              </div>
+            </label>
+            <label class="node-setting">
+              <span class="node-setting-label">${t('node.setting_max_uploads')}</span>
+              <div class="node-setting-input">
+                <input type="number" min="1" value=${editSettings.max_concurrent_uploads}
+                  onInput=${e => setEditSettings(s => ({...s, max_concurrent_uploads: parseInt(e.target.value) || 1}))} />
+              </div>
+            </label>
+            <label class="node-setting">
               <span class="node-setting-label">${t('node.setting_transcode')}</span>
               <div class="node-setting-input">
                 <input type="checkbox" checked=${editSettings.transcode_incompatible_video}