@ogygie/mcp 0.19.0 → 0.21.0

package/dist/server.js

@@ -199,104 +199,64 @@ function createFilesystemRepoAdapter(rootDir) {
   };
 }
 
-// src/github-client.ts
-function createGithubWriteClient(deps, github) {
-  const apiBase = deps.apiBase ?? "https://api.github.com";
-  const repoUrl = `${apiBase}/repos/${github.owner}/${github.repo}`;
-  async function request(method, url, body, allowNotFound) {
-    let response;
-    try {
-      response = await deps.fetchImpl(url, {
-        method,
-        headers: {
-          authorization: `Bearer ${deps.token}`,
-          accept: "application/vnd.github+json",
-          "x-github-api-version": "2022-11-28",
-          "user-agent": "ogygie-mcp",
-          ...body === void 0 ? {} : { "content-type": "application/json" }
-        },
-        ...body === void 0 ? {} : { body: JSON.stringify(body) }
-      });
-    } catch (thrown) {
-      return throwOgygieError({
-        code: "GITHUB_UNAVAILABLE",
-        message: `GitHub could not be reached for ${github.owner}/${github.repo}.`,
-        file: null,
-        cause: thrown instanceof Error ? thrown.message : String(thrown),
-        suggestedFix: "Retry once the network is back \u2014 nothing was written, nothing is queued."
-      });
-    }
-    if (response.status === 404 && allowNotFound) return null;
-    if (!response.ok) {
-      return throwOgygieError({
-        code: "GITHUB_UNAVAILABLE",
-        message: `GitHub answered ${response.status} for ${method} ${url.replace(apiBase, "")}.`,
-        file: null,
-        cause: `status=${response.status}`,
-        suggestedFix: response.status === 401 || response.status === 403 ? "Check OGYGIE_MCP_GITHUB_TOKEN: it must grant contents and pull requests on this repo." : "Retry later \u2014 nothing was written, nothing is queued."
-      });
+// ../ogygie-core/src/proposal.ts
+import { z as z5 } from "zod";
+
+// ../ogygie-core/src/decision-refs.ts
+var DECISION_REFERENCE = /(?<![A-Za-z0-9])D(\d+)(?![A-Za-z0-9])/g;
+var DECISION_HEADING = /^##\s+D(\d+)\b/;
+function parseKnownDecisionIds(decisionsMarkdown) {
+  const ids = [];
+  for (const line of decisionsMarkdown.split("\n")) {
+    const heading = DECISION_HEADING.exec(line);
+    if (heading !== null) ids.push(`D${heading[1]}`);
+  }
+  return ids;
+}
+function extractDecisionSection(decisionsMarkdown, decisionId) {
+  const lines = decisionsMarkdown.split("\n");
+  const trimTrailingBlanks = (section) => {
+    while (section.length > 0 && (section[section.length - 1] ?? "").trim() === "") section.pop();
+    return section.join("\n");
+  };
+  let start = -1;
+  for (let index = 0; index < lines.length; index += 1) {
+    const heading = DECISION_HEADING.exec(lines[index] ?? "");
+    if (heading === null) continue;
+    if (start === -1) {
+      if (`D${heading[1]}` === decisionId) start = index;
+      continue;
     }
-    return await response.json();
+    return trimTrailingBlanks(lines.slice(start, index));
   }
-  return {
-    async getBranchHead(branch) {
-      const ref = await request(
-        "GET",
-        `${repoUrl}/git/ref/heads/${encodeURIComponent(branch)}`,
-        void 0,
-        true
-      );
-      return ref?.object.sha ?? null;
-    },
-    async readFileAtRef(path, ref) {
-      const file = await request(
-        "GET",
-        `${repoUrl}/contents/${path}?ref=${encodeURIComponent(ref)}`,
-        void 0,
-        true
-      );
-      if (file === null) return null;
-      return { content: Buffer.from(file.content, "base64").toString("utf8"), sha: file.sha };
-    },
-    async createBranch(branch, fromSha) {
-      await request("POST", `${repoUrl}/git/refs`, { ref: `refs/heads/${branch}`, sha: fromSha }, false);
-    },
-    async commitFile(input) {
-      const result = await request(
-        "PUT",
-        `${repoUrl}/contents/${input.path}`,
-        {
-          message: input.message,
-          content: Buffer.from(input.content, "utf8").toString("base64"),
-          branch: input.branch,
-          ...input.expectedSha === null ? {} : { sha: input.expectedSha }
-        },
-        false
-      );
-      return { commitSha: result?.commit.sha ?? "" };
-    },
-    async findOpenPullRequest(branch) {
-      const pulls = await request(
-        "GET",
-        `${repoUrl}/pulls?state=open&head=${encodeURIComponent(`${github.owner}:${branch}`)}`,
-        void 0,
-        false
-      );
-      const first = pulls?.[0];
-      return first === void 0 ? null : { number: first.number, url: first.html_url };
-    },
-    async openPullRequest(input) {
-      const pull = await request(
-        "POST",
-        `${repoUrl}/pulls`,
-        { title: input.title, body: input.body, head: input.branch, base: input.base },
-        false
-      );
-      return { number: pull?.number ?? 0, url: pull?.html_url ?? "" };
+  return start === -1 ? null : trimTrailingBlanks(lines.slice(start));
+}
+function findDecisionReferences(text) {
+  const references = [];
+  const lines = text.split("\n");
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index] ?? "";
+    for (const match of line.matchAll(DECISION_REFERENCE)) {
+      references.push({ decision: `D${match[1]}`, line: index + 1 });
     }
-  };
+  }
+  return references;
+}
+function findUnknownDecisionReferences(text, knownDecisionIds) {
+  const known = new Set(knownDecisionIds);
+  const unknown = [];
+  const alreadyReported = /* @__PURE__ */ new Set();
+  for (const reference of findDecisionReferences(text)) {
+    if (known.has(reference.decision) || alreadyReported.has(reference.decision)) continue;
+    alreadyReported.add(reference.decision);
+    unknown.push(reference);
+  }
+  return unknown;
 }
 
+// ../ogygie-core/src/spec.schema.ts
+import { z as z4 } from "zod";
+
 // ../ogygie-core/src/manifest.schema.ts
 import { z as z3 } from "zod";
 var FeatureNameSchema = z3.string().regex(/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/, "kebab-case required");
@@ -577,11 +537,7 @@ var OgygieManifestSchema = z3.object({
   });
 });
 
-// src/schemas.ts
-import { z as z5 } from "zod";
-
 // ../ogygie-core/src/spec.schema.ts
-import { z as z4 } from "zod";
 var DeferredBehaviorSchema = z4.string().regex(
   /^.+ blockedBy:[a-z][a-z0-9]*(-[a-z0-9]+)*$/,
   'Expected "<behavior> blockedBy:<feature-name>" (feature name in kebab-case)'
@@ -687,152 +643,507 @@ function parseSpecFrontmatter(text) {
   }
   return { value, problems };
 }
+var FRONTMATTER_BLOCK = /^---\n([\s\S]*?)\n---/;
+function parseSpecDocument(content) {
+  const match = FRONTMATTER_BLOCK.exec(content);
+  if (match === null || match[1] === void 0) {
+    return {
+      frontmatter: null,
+      problems: ["file does not start with a --- ... --- frontmatter block"],
+      body: content
+    };
+  }
+  const body = content.slice(match[0].length);
+  const parsed = parseSpecFrontmatter(match[1]);
+  if (parsed.problems.length > 0) {
+    return { frontmatter: null, problems: parsed.problems, body };
+  }
+  const checked = SpecFrontmatterSchema.safeParse(parsed.value);
+  if (!checked.success) {
+    return {
+      frontmatter: null,
+      problems: checked.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`),
+      body
+    };
+  }
+  return { frontmatter: checked.data, problems: [], body };
+}
 
-// src/schemas.ts
-var RepoIdSchema = z5.string().regex(/^[a-z0-9-]+$/);
-var FeatureNameSchema2 = z5.string().regex(/^[a-z0-9-]+$/);
-var SpecIdSchema = FeatureNameSchema2;
-var DecisionIdSchema = z5.string().regex(/^D\d+$/);
-var SpecStatusSchema = z5.enum(["draft", "validated", "implemented"]);
-var GovernanceFileSchema = z5.enum([
-  "AGENTS.md",
-  "AGENTS.product.md",
-  "FAILURES.md"
-]);
-var MAX_FILE_BYTES = 2e5;
+// ../ogygie-core/src/proposal.ts
 var DECISION_FILES = ["DECISIONS.md", "DECISIONS.product.md"];
 var GithubCoordinatesSchema = z5.object({
   owner: z5.string().min(1),
   repo: z5.string().min(1),
   defaultBranch: z5.string().min(1).default("main")
 });
-var RepoRegistrySchema = z5.object({
-  repos: z5.array(
-    z5.object({
-      id: RepoIdSchema,
-      rootPath: z5.string().min(1),
-      github: GithubCoordinatesSchema.optional()
-    })
-  ).min(1)
-});
-var ProvenanceSchema = z5.object({
-  repo: RepoIdSchema,
-  path: z5.string(),
-  /** HEAD SHA — null when the served root is not a git clone. */
-  ref: z5.string().nullable()
-});
-var ReadManifestInput = { repo: RepoIdSchema };
-var ListSpecsInput = { repo: RepoIdSchema, status: SpecStatusSchema.optional() };
-var ReadSpecInput = { repo: RepoIdSchema, id: SpecIdSchema };
-var ReadDecisionsInput = { repo: RepoIdSchema, decision: DecisionIdSchema.optional() };
-var ReadGovernanceInput = { repo: RepoIdSchema, file: GovernanceFileSchema };
-var ImpactInput = { repo: RepoIdSchema, feature: FeatureNameSchema2 };
-var ReadFeatureInput = {
-  repo: RepoIdSchema,
-  feature: FeatureNameSchema2,
-  file: z5.string().optional()
-};
 var ProposablePathSchema = z5.union([
   z5.string().regex(/^specs\/(?!_)[a-z][a-z0-9]*(-[a-z0-9]+)*\.spec\.md$/),
   z5.literal("DECISIONS.md"),
   z5.literal("DECISIONS.product.md")
 ]);
-var ProposeChangeInput = {
-  repo: RepoIdSchema,
-  path: z5.string(),
-  content: z5.string().min(1).max(MAX_FILE_BYTES),
-  message: z5.string().min(10).max(2e3)
-};
 var ProposalSchema = z5.object({
-  repo: RepoIdSchema,
+  repo: z5.string(),
   path: ProposablePathSchema,
   branch: z5.string(),
   baseSha: z5.string(),
   commitSha: z5.string(),
   pullRequestNumber: z5.number().int().positive(),
-  pullRequestUrl: z5.string().url(),
+  pullRequestUrl: z5.url(),
   /** false when an open pull request was updated instead of created. */
   created: z5.boolean()
 });
-var DEFAULT_WRITE_RATE_LIMIT = 20;
-var RepoInfoSchema = z5.object({
-  id: RepoIdSchema,
-  /** null when the manifest declares none — the framework's own repo does not. */
-  ogygieVersion: z5.string().nullable(),
-  ref: z5.string().nullable()
-});
-var SpecSummarySchema = z5.object({
-  id: SpecIdSchema,
-  status: SpecStatusSchema,
-  priority: z5.enum(["P0", "P1", "P2"]),
-  dependsOn: z5.array(SpecIdSchema),
-  deferred: z5.array(z5.string())
-});
-var SpecListingSchema = z5.object({
-  specs: z5.array(SpecSummarySchema),
-  invalid: z5.array(z5.object({ id: SpecIdSchema, problems: z5.array(z5.string()) }))
-});
-var SpecDocumentSchema = z5.object({
-  frontmatter: SpecFrontmatterSchema.nullable(),
-  frontmatterProblems: z5.array(z5.string()),
-  body: z5.string(),
-  provenance: ProvenanceSchema
-});
-var TextDocumentSchema = z5.object({
-  content: z5.string(),
-  provenance: ProvenanceSchema
-});
-var FeatureListingSchema = z5.object({
-  feature: FeatureNameSchema2,
-  files: z5.array(z5.object({ path: z5.string(), sizeBytes: z5.number().int().nonnegative() })),
-  provenance: ProvenanceSchema
-});
-var McpErrorCodeSchema = z5.enum([
-  "REGISTRY_INVALID",
-  "REPO_NOT_OGYGIE",
-  "REPO_VERSION_UNSUPPORTED",
-  "REPO_UNKNOWN",
-  "MANIFEST_INVALID",
-  "SPEC_NOT_FOUND",
-  "DECISION_NOT_FOUND",
-  "FEATURE_NOT_FOUND",
-  "FILE_TOO_LARGE",
-  "FILE_NOT_TEXT",
-  "PATH_OUTSIDE_REPO",
-  "UNAUTHORIZED",
-  "TOKEN_MISSING",
-  // v2 — write by proposal (B10, D17)
-  "GITHUB_TOKEN_MISSING",
-  "WRITE_NOT_CONFIGURED",
-  "WRITE_PATH_FORBIDDEN",
-  "SPEC_INVALID",
-  "SPEC_STATUS_FORBIDDEN",
-  "DECISION_INVALID",
-  "UNKNOWN_DECISION_REFERENCE",
-  "REMOTE_CONFLICT",
-  "WRITE_RATE_LIMITED",
-  "GITHUB_UNAVAILABLE"
-]);
-var MIN_TOKEN_LENGTH = 32;
-
-// src/registry.ts
-var MANIFEST_PATH = "ogygie.manifest.json";
-function parseRegistry(raw) {
-  const parsed = RepoRegistrySchema.safeParse(raw);
+function assertProposablePath(path) {
+  const parsed = ProposablePathSchema.safeParse(path);
   if (!parsed.success) {
     return throwOgygieError({
-      code: "REGISTRY_INVALID",
-      message: "The MCP repo registry does not match RepoRegistrySchema.",
-      file: null,
-      cause: parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join(" ; "),
-      suggestedFix: 'Write { "repos": [{ "id": "<kebab-case>", "rootPath": "<path>" }] } with at least one entry.'
+      code: "WRITE_PATH_FORBIDDEN",
+      message: `"${path}" is outside what a proposal may touch.`,
+      file: path,
+      cause: "the perimeter is specs/<id>.spec.md (not the template), DECISIONS.md, DECISIONS.product.md",
+      suggestedFix: "Propose a spec or a decisions file; code, manifest, governed files and FAILURES.md are out of reach (D17)."
     });
   }
   return parsed.data;
 }
-function isNewerThan(candidate, reference) {
-  const toParts = (version) => version.split(".").map((part) => Number.parseInt(part, 10) || 0);
-  const left = toParts(candidate);
+function createGithubWriteClient(deps, github) {
+  const apiBase = deps.apiBase ?? "https://api.github.com";
+  const repoUrl = `${apiBase}/repos/${github.owner}/${github.repo}`;
+  const credential = deps.credentialHint ?? "the GitHub token";
+  async function request(method, url, body, allowNotFound) {
+    let response;
+    try {
+      response = await deps.fetchImpl(url, {
+        method,
+        headers: {
+          authorization: `Bearer ${deps.token}`,
+          accept: "application/vnd.github+json",
+          "x-github-api-version": "2022-11-28",
+          "user-agent": deps.userAgent ?? "ogygie-core",
+          ...body === void 0 ? {} : { "content-type": "application/json" }
+        },
+        ...body === void 0 ? {} : { body: JSON.stringify(body) }
+      });
+    } catch (thrown) {
+      return throwOgygieError({
+        code: "GITHUB_UNAVAILABLE",
+        message: `GitHub could not be reached for ${github.owner}/${github.repo}.`,
+        file: null,
+        cause: thrown instanceof Error ? thrown.message : String(thrown),
+        suggestedFix: "Retry once the network is back \u2014 nothing was written, nothing is queued."
+      });
+    }
+    if (response.status === 404 && allowNotFound) return null;
+    if (!response.ok) {
+      return throwOgygieError({
+        code: "GITHUB_UNAVAILABLE",
+        message: `GitHub answered ${response.status} for ${method} ${url.replace(apiBase, "")}.`,
+        file: null,
+        cause: `status=${response.status}`,
+        suggestedFix: response.status === 401 || response.status === 403 ? `Check ${credential}: it must grant contents and pull requests on this repo.` : "Retry later \u2014 nothing was written, nothing is queued."
+      });
+    }
+    return await response.json();
+  }
+  return {
+    async getBranchHead(branch) {
+      const ref = await request(
+        "GET",
+        `${repoUrl}/git/ref/heads/${encodeURIComponent(branch)}`,
+        void 0,
+        true
+      );
+      return ref?.object.sha ?? null;
+    },
+    async readFileAtRef(path, ref) {
+      const file = await request(
+        "GET",
+        `${repoUrl}/contents/${path}?ref=${encodeURIComponent(ref)}`,
+        void 0,
+        true
+      );
+      if (file === null) return null;
+      return { content: Buffer.from(file.content, "base64").toString("utf8"), sha: file.sha };
+    },
+    async createBranch(branch, fromSha) {
+      await request("POST", `${repoUrl}/git/refs`, { ref: `refs/heads/${branch}`, sha: fromSha }, false);
+    },
+    async commitFile(input) {
+      const result = await request(
+        "PUT",
+        `${repoUrl}/contents/${input.path}`,
+        {
+          message: input.message,
+          content: Buffer.from(input.content, "utf8").toString("base64"),
+          branch: input.branch,
+          ...input.expectedSha === null ? {} : { sha: input.expectedSha },
+          ...input.author === void 0 ? {} : { author: input.author }
+        },
+        false
+      );
+      return { commitSha: result?.commit.sha ?? "" };
+    },
+    async findOpenPullRequest(branch) {
+      const pulls = await request(
+        "GET",
+        `${repoUrl}/pulls?state=open&head=${encodeURIComponent(`${github.owner}:${branch}`)}`,
+        void 0,
+        false
+      );
+      const first = pulls?.[0];
+      return first === void 0 ? null : { number: first.number, url: first.html_url };
+    },
+    async openPullRequest(input) {
+      const pull = await request(
+        "POST",
+        `${repoUrl}/pulls`,
+        { title: input.title, body: input.body, head: input.branch, base: input.base },
+        false
+      );
+      return { number: pull?.number ?? 0, url: pull?.html_url ?? "" };
+    }
+  };
+}
+var HOUR_MS = 36e5;
+var DECISION_HEADING2 = /^## D(\d+) — \d{4}-\d{2}-\d{2} — \S/;
+var DECISION_BULLETS = ["**D\xE9cision**", "**Motivation**", "**Exclut**"];
+function specIdOfPath(path) {
+  return path.replace(/^specs\//, "").replace(/\.spec\.md$/, "");
+}
+function assertSpecProposable(path, content) {
+  const parsed = parseSpecDocument(content);
+  const problems = [...parsed.problems];
+  if (parsed.frontmatter !== null && parsed.frontmatter.id !== specIdOfPath(path)) {
+    problems.push(`id "${parsed.frontmatter.id}" differs from the file name "${specIdOfPath(path)}"`);
+  }
+  let cursor = 0;
+  for (const section of SECTIONS_SPEC_OBLIGATOIRES) {
+    const position = parsed.body.indexOf(`
+${section}
+`, cursor);
+    if (position === -1) problems.push(`section "${section}" missing or out of order`);
+    else cursor = position + section.length;
+  }
+  if (problems.length > 0) {
+    throwOgygieError({
+      code: "SPEC_INVALID",
+      message: `The proposed spec would fail verify-specs (${problems.length} problem(s)).`,
+      file: path,
+      cause: problems.join(" ; "),
+      suggestedFix: "Fix the frontmatter (id, status, depends_on, priority, refs) and keep the six canonical sections in order."
+    });
+  }
+  if (parsed.frontmatter?.status === "implemented") {
+    throwOgygieError({
+      code: "SPEC_STATUS_FORBIDDEN",
+      message: "A proposal may not declare a spec implemented.",
+      file: path,
+      cause: "status=implemented",
+      suggestedFix: "Propose the spec as draft or validated \u2014 the repo's manifest and CI say when it is implemented."
+    });
+  }
+}
+function assertDecisionsProposable(path, content, baseSame, baseOther) {
+  const problems = [];
+  for (const line of content.split("\n")) {
+    if (line.startsWith("## ") && !DECISION_HEADING2.test(line)) {
+      problems.push(`heading "${line}" is not "## D<n> \u2014 AAAA-MM-JJ \u2014 <titre>"`);
+    }
+  }
+  const proposedIds = parseKnownDecisionIds(content);
+  const otherIds = parseKnownDecisionIds(baseOther ?? "");
+  const previousIds = parseKnownDecisionIds(baseSame ?? "");
+  for (const id of previousIds) {
+    if (!proposedIds.includes(id)) problems.push(`${id} was declared and is removed or renumbered`);
+  }
+  const all = [...proposedIds, ...otherIds];
+  const seen = /* @__PURE__ */ new Set();
+  for (const id of all) {
+    if (seen.has(id)) problems.push(`${id} is declared twice across the decision files`);
+    seen.add(id);
+  }
+  const numbers = [...seen].map((id) => Number.parseInt(id.slice(1), 10)).sort((a, b) => a - b);
+  numbers.forEach((value, index) => {
+    if (value !== index + 1) problems.push(`numbering has a gap: expected D${index + 1}, found D${value}`);
+  });
+  for (const id of proposedIds.filter((candidate) => !previousIds.includes(candidate))) {
+    const section = extractDecisionSection(content, id) ?? "";
+    for (const bullet of DECISION_BULLETS) {
+      if (!section.includes(bullet)) problems.push(`${id} lacks its ${bullet} bullet`);
+    }
+  }
+  if (problems.length > 0) {
+    throwOgygieError({
+      code: "DECISION_INVALID",
+      message: `The proposed decisions file breaks the D<n> contract (${problems.length} problem(s)).`,
+      file: path,
+      cause: problems.join(" ; "),
+      suggestedFix: "Keep every existing decision, number the new one right after the last across both files, and give it its D\xE9cision / Motivation / Exclut bullets."
+    });
+  }
+}
+function assertDecisionReferencesKnown(path, content, known) {
+  const unknown = findUnknownDecisionReferences(content, known);
+  if (unknown.length > 0) {
+    throwOgygieError({
+      code: "UNKNOWN_DECISION_REFERENCE",
+      message: `The proposal cites ${unknown.length} decision(s) the repo does not declare.`,
+      file: path,
+      cause: unknown.map((reference) => `${reference.decision} (line ${reference.line})`).join(", "),
+      suggestedFix: `Cite only declared decisions (${known.join(", ") || "<none>"}), or propose the decision first.`
+    });
+  }
+}
+function branchSlug(path) {
+  return path.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
+}
+function defaultBranchFor(target, path) {
+  return `mcp/${target.id}/${branchSlug(path)}`;
+}
+async function withGithub(action) {
+  try {
+    return await action();
+  } catch (thrown) {
+    if (thrown instanceof OgygieFailure) throw thrown;
+    return throwOgygieError({
+      code: "GITHUB_UNAVAILABLE",
+      message: "The GitHub client failed outside its contract.",
+      file: null,
+      cause: thrown instanceof Error ? thrown.message : String(thrown),
+      suggestedFix: "Retry \u2014 nothing was written, nothing is queued."
+    });
+  }
+}
+async function proposeChange(target, deps, input) {
+  const path = assertProposablePath(input.path);
+  const github = target.github;
+  const now = deps.now();
+  const recent = (deps.recentProposals.get(target.id) ?? []).filter((at) => now - at < HOUR_MS);
+  if (recent.length >= deps.rateLimitPerHour) {
+    const retryAfterSeconds = Math.ceil(((recent[0] ?? now) + HOUR_MS - now) / 1e3);
+    throwOgygieError({
+      code: "WRITE_RATE_LIMITED",
+      message: `Repo "${target.id}" already received ${recent.length} proposals this hour.`,
+      file: null,
+      cause: `limit=${deps.rateLimitPerHour}/hour`,
+      suggestedFix: `Retry in ${retryAfterSeconds} s, or merge or close the open proposals first.`
+    });
+  }
+  const client = deps.clientFor(github);
+  const baseSha = await withGithub(() => client.getBranchHead(github.defaultBranch));
+  if (baseSha === null) {
+    return throwOgygieError({
+      code: "GITHUB_UNAVAILABLE",
+      message: `Branch "${github.defaultBranch}" does not exist on ${github.owner}/${github.repo}.`,
+      file: null,
+      cause: "default branch head not found",
+      suggestedFix: "Fix `defaultBranch` in the GitHub coordinates of that repo."
+    });
+  }
+  const baseFiles = /* @__PURE__ */ new Map();
+  for (const decisionsPath of DECISION_FILES) {
+    const file = await withGithub(() => client.readFileAtRef(decisionsPath, baseSha));
+    baseFiles.set(decisionsPath, file?.content ?? null);
+  }
+  if (path.startsWith("specs/")) {
+    assertSpecProposable(path, input.content);
+    const known = DECISION_FILES.flatMap((file) => parseKnownDecisionIds(baseFiles.get(file) ?? ""));
+    assertDecisionReferencesKnown(path, input.content, known);
+  } else {
+    const other = DECISION_FILES.find((file) => file !== path) ?? DECISION_FILES[1];
+    assertDecisionsProposable(path, input.content, baseFiles.get(path) ?? null, baseFiles.get(other) ?? null);
+    const known = [...parseKnownDecisionIds(input.content), ...parseKnownDecisionIds(baseFiles.get(other) ?? "")];
+    assertDecisionReferencesKnown(path, input.content, known);
+  }
+  let branch = (deps.branchFor ?? defaultBranchFor)(target, path);
+  let branchHead = await withGithub(() => client.getBranchHead(branch));
+  let openPull = branchHead === null ? null : await withGithub(() => client.findOpenPullRequest(branch));
+  if (branchHead !== null && openPull === null) {
+    branch = `${branch}-${baseSha.slice(0, 7)}`;
+    branchHead = await withGithub(() => client.getBranchHead(branch));
+    openPull = branchHead === null ? null : await withGithub(() => client.findOpenPullRequest(branch));
+  }
+  const headOfBranch = branchHead;
+  const baseFile = await withGithub(() => client.readFileAtRef(path, baseSha));
+  const branchFile = headOfBranch === null ? null : await withGithub(() => client.readFileAtRef(path, headOfBranch));
+  const readsBranch = deps.readFrom === "branch" && headOfBranch !== null;
+  const compared = readsBranch ? branchFile : baseFile;
+  const comparedName = readsBranch ? branch : github.defaultBranch;
+  const local = await target.adapter.exists(path) ? await target.adapter.readFile(path) : null;
+  if ((compared?.content ?? null) !== local) {
+    throwOgygieError({
+      code: "REMOTE_CONFLICT",
+      message: `"${path}" changed on ${comparedName} since it was read.`,
+      file: path,
+      cause: `head sha=${compared?.sha ?? "<absent>"}, the read copy ${local === null ? "has no such file" : "differs"}`,
+      suggestedFix: "Re-read the file (details.headContent is the current head), reapply your change and propose again.",
+      details: { headSha: compared?.sha ?? null, headContent: compared?.content ?? null }
+    });
+  }
+  recent.push(now);
+  deps.recentProposals.set(target.id, recent);
+  const expectedSha = headOfBranch === null ? baseFile?.sha ?? null : branchFile?.sha ?? null;
+  if (headOfBranch === null) {
+    await withGithub(() => client.createBranch(branch, baseSha));
+  }
+  const author = deps.authorOf?.();
+  const commit = await withGithub(
+    () => client.commitFile({
+      branch,
+      path,
+      content: input.content,
+      message: input.message,
+      expectedSha,
+      ...author === void 0 ? {} : { author }
+    })
+  );
+  const pull = openPull ?? await withGithub(
+    () => client.openPullRequest({
+      branch,
+      base: github.defaultBranch,
+      title: (input.message.split("\n")[0] ?? input.message).slice(0, 72),
+      body: `${input.message}
+
+---
+${deps.originOf(path)}`
+    })
+  );
+  return {
+    repo: target.id,
+    path,
+    branch,
+    baseSha,
+    commitSha: commit.commitSha,
+    pullRequestNumber: pull.number,
+    pullRequestUrl: pull.url,
+    created: openPull === null
+  };
+}
+
+// src/schemas.ts
+import { z as z6 } from "zod";
+var RepoIdSchema = z6.string().regex(/^[a-z0-9-]+$/);
+var FeatureNameSchema2 = z6.string().regex(/^[a-z0-9-]+$/);
+var SpecIdSchema = FeatureNameSchema2;
+var DecisionIdSchema = z6.string().regex(/^D\d+$/);
+var SpecStatusSchema = z6.enum(["draft", "validated", "implemented"]);
+var GovernanceFileSchema = z6.enum([
+  "AGENTS.md",
+  "AGENTS.product.md",
+  "FAILURES.md"
+]);
+var MAX_FILE_BYTES = 2e5;
+var RepoRegistrySchema = z6.object({
+  repos: z6.array(
+    z6.object({
+      id: RepoIdSchema,
+      rootPath: z6.string().min(1),
+      github: GithubCoordinatesSchema.optional()
+    })
+  ).min(1)
+});
+var ProvenanceSchema = z6.object({
+  repo: RepoIdSchema,
+  path: z6.string(),
+  /** HEAD SHA — null when the served root is not a git clone. */
+  ref: z6.string().nullable()
+});
+var ReadManifestInput = { repo: RepoIdSchema };
+var ListSpecsInput = { repo: RepoIdSchema, status: SpecStatusSchema.optional() };
+var ReadSpecInput = { repo: RepoIdSchema, id: SpecIdSchema };
+var ReadDecisionsInput = { repo: RepoIdSchema, decision: DecisionIdSchema.optional() };
+var ReadGovernanceInput = { repo: RepoIdSchema, file: GovernanceFileSchema };
+var ImpactInput = { repo: RepoIdSchema, feature: FeatureNameSchema2 };
+var ReadFeatureInput = {
+  repo: RepoIdSchema,
+  feature: FeatureNameSchema2,
+  file: z6.string().optional()
+};
+var ProposalSchema2 = ProposalSchema.extend({ repo: RepoIdSchema });
+var ProposeChangeInput = {
+  repo: RepoIdSchema,
+  path: z6.string(),
+  content: z6.string().min(1).max(MAX_FILE_BYTES),
+  message: z6.string().min(10).max(2e3)
+};
+var DEFAULT_WRITE_RATE_LIMIT = 20;
+var RepoInfoSchema = z6.object({
+  id: RepoIdSchema,
+  /** null when the manifest declares none — the framework's own repo does not. */
+  ogygieVersion: z6.string().nullable(),
+  ref: z6.string().nullable()
+});
+var SpecSummarySchema = z6.object({
+  id: SpecIdSchema,
+  status: SpecStatusSchema,
+  priority: z6.enum(["P0", "P1", "P2"]),
+  dependsOn: z6.array(SpecIdSchema),
+  deferred: z6.array(z6.string())
+});
+var SpecListingSchema = z6.object({
+  specs: z6.array(SpecSummarySchema),
+  invalid: z6.array(z6.object({ id: SpecIdSchema, problems: z6.array(z6.string()) }))
+});
+var SpecDocumentSchema = z6.object({
+  frontmatter: SpecFrontmatterSchema.nullable(),
+  frontmatterProblems: z6.array(z6.string()),
+  body: z6.string(),
+  provenance: ProvenanceSchema
+});
+var TextDocumentSchema = z6.object({
+  content: z6.string(),
+  provenance: ProvenanceSchema
+});
+var FeatureListingSchema = z6.object({
+  feature: FeatureNameSchema2,
+  files: z6.array(z6.object({ path: z6.string(), sizeBytes: z6.number().int().nonnegative() })),
+  provenance: ProvenanceSchema
+});
+var McpErrorCodeSchema = z6.enum([
+  "REGISTRY_INVALID",
+  "REPO_NOT_OGYGIE",
+  "REPO_VERSION_UNSUPPORTED",
+  "REPO_UNKNOWN",
+  "MANIFEST_INVALID",
+  "SPEC_NOT_FOUND",
+  "DECISION_NOT_FOUND",
+  "FEATURE_NOT_FOUND",
+  "FILE_TOO_LARGE",
+  "FILE_NOT_TEXT",
+  "PATH_OUTSIDE_REPO",
+  "UNAUTHORIZED",
+  "TOKEN_MISSING",
+  // v2 — write by proposal (B10, D17)
+  "GITHUB_TOKEN_MISSING",
+  "WRITE_NOT_CONFIGURED",
+  "WRITE_PATH_FORBIDDEN",
+  "SPEC_INVALID",
+  "SPEC_STATUS_FORBIDDEN",
+  "DECISION_INVALID",
+  "UNKNOWN_DECISION_REFERENCE",
+  "REMOTE_CONFLICT",
+  "WRITE_RATE_LIMITED",
+  "GITHUB_UNAVAILABLE"
+]);
+var MIN_TOKEN_LENGTH = 32;
+
+// src/registry.ts
+var MANIFEST_PATH = "ogygie.manifest.json";
+function parseRegistry(raw) {
+  const parsed = RepoRegistrySchema.safeParse(raw);
+  if (!parsed.success) {
+    return throwOgygieError({
+      code: "REGISTRY_INVALID",
+      message: "The MCP repo registry does not match RepoRegistrySchema.",
+      file: null,
+      cause: parsed.error.issues.map((issue) => `${issue.path.join(".")}: ${issue.message}`).join(" ; "),
+      suggestedFix: 'Write { "repos": [{ "id": "<kebab-case>", "rootPath": "<path>" }] } with at least one entry.'
+    });
+  }
+  return parsed.data;
+}
+function isNewerThan(candidate, reference) {
+  const toParts = (version) => version.split(".").map((part) => Number.parseInt(part, 10) || 0);
+  const left = toParts(candidate);
   const right = toParts(reference);
   for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
     const a = left[index] ?? 0;
@@ -895,84 +1206,58 @@ async function openRepos(registry, deps) {
         message: `Repo "${declared.id}" pins Ogygie ${repo.ogygieVersion}, newer than this server (${deps.serverVersion}).`,
         file: MANIFEST_PATH,
         cause: `ogygieVersion=${repo.ogygieVersion} > server=${deps.serverVersion}`,
-        suggestedFix: `Update the server to a version \u2265 ${repo.ogygieVersion}: pnpm update @ogygie/mcp@${repo.ogygieVersion}`
-      });
-    }
-    opened.push(repo);
-  }
-  return opened;
-}
-function repoOf(repos, repoId) {
-  const found = repos.find((candidate) => candidate.id === repoId);
-  if (found === void 0) {
-    return throwOgygieError({
-      code: "REPO_UNKNOWN",
-      message: `No repo "${repoId}" is registered on this server.`,
-      file: null,
-      cause: `known repos: ${repos.map((repo) => repo.id).join(", ") || "<none>"}`,
-      suggestedFix: "Call ogygie_list_repos to see what this server serves."
-    });
-  }
-  return found;
-}
-
-// src/server.ts
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-
-// ../ogygie-core/src/decision-refs.ts
-var DECISION_REFERENCE = /(?<![A-Za-z0-9])D(\d+)(?![A-Za-z0-9])/g;
-var DECISION_HEADING = /^##\s+D(\d+)\b/;
-function parseKnownDecisionIds(decisionsMarkdown) {
-  const ids = [];
-  for (const line of decisionsMarkdown.split("\n")) {
-    const heading = DECISION_HEADING.exec(line);
-    if (heading !== null) ids.push(`D${heading[1]}`);
-  }
-  return ids;
-}
-function extractDecisionSection(decisionsMarkdown, decisionId) {
-  const lines = decisionsMarkdown.split("\n");
-  const trimTrailingBlanks = (section) => {
-    while (section.length > 0 && (section[section.length - 1] ?? "").trim() === "") section.pop();
-    return section.join("\n");
-  };
-  let start = -1;
-  for (let index = 0; index < lines.length; index += 1) {
-    const heading = DECISION_HEADING.exec(lines[index] ?? "");
-    if (heading === null) continue;
-    if (start === -1) {
-      if (`D${heading[1]}` === decisionId) start = index;
-      continue;
-    }
-    return trimTrailingBlanks(lines.slice(start, index));
-  }
-  return start === -1 ? null : trimTrailingBlanks(lines.slice(start));
-}
-function findDecisionReferences(text) {
-  const references = [];
-  const lines = text.split("\n");
-  for (let index = 0; index < lines.length; index += 1) {
-    const line = lines[index] ?? "";
-    for (const match of line.matchAll(DECISION_REFERENCE)) {
-      references.push({ decision: `D${match[1]}`, line: index + 1 });
+        suggestedFix: `Update the server to a version \u2265 ${repo.ogygieVersion}: pnpm update @ogygie/mcp@${repo.ogygieVersion}`
+      });
     }
+    opened.push(repo);
   }
-  return references;
+  return opened;
 }
-function findUnknownDecisionReferences(text, knownDecisionIds) {
-  const known = new Set(knownDecisionIds);
-  const unknown = [];
-  const alreadyReported = /* @__PURE__ */ new Set();
-  for (const reference of findDecisionReferences(text)) {
-    if (known.has(reference.decision) || alreadyReported.has(reference.decision)) continue;
-    alreadyReported.add(reference.decision);
-    unknown.push(reference);
+function repoOf(repos, repoId) {
+  const found = repos.find((candidate) => candidate.id === repoId);
+  if (found === void 0) {
+    return throwOgygieError({
+      code: "REPO_UNKNOWN",
+      message: `No repo "${repoId}" is registered on this server.`,
+      file: null,
+      cause: `known repos: ${repos.map((repo) => repo.id).join(", ") || "<none>"}`,
+      suggestedFix: "Call ogygie_list_repos to see what this server serves."
+    });
   }
-  return unknown;
+  return found;
+}
+
+// src/server.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+
+// src/proposals.ts
+async function proposeChange2(repo, deps, input) {
+  assertProposablePath(input.path);
+  const github = repo.github;
+  if (github === void 0) {
+    return throwOgygieError({
+      code: "WRITE_NOT_CONFIGURED",
+      message: `Repo "${repo.id}" declares no GitHub coordinates: it is read-only.`,
+      file: null,
+      cause: "registry entry without a `github` block",
+      suggestedFix: 'Add `"github": { "owner": "\u2026", "repo": "\u2026", "defaultBranch": "main" }` to that repo in the registry.'
+    });
+  }
+  return proposeChange(
+    { id: repo.id, github, adapter: repo.adapter },
+    {
+      clientFor: deps.clientFor,
+      now: deps.now,
+      rateLimitPerHour: deps.rateLimitPerHour,
+      recentProposals: deps.recentProposals,
+      originOf: (path) => `Propos\xE9 via @ogygie/mcp par ${deps.clientName()} (repo \`${repo.id}\`, chemin \`${path}\`).`
+    },
+    input
+  );
 }
 
 // ../ogygie-core/src/impact.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 
 // ../ogygie-core/src/manifest-owners.ts
 var ADVANCEMENT = ["skeleton", "in-progress", "delivered"];
@@ -1091,35 +1376,35 @@ function dbTableNamesOf(feature) {
 }
 
 // ../ogygie-core/src/impact.ts
-var MapEntryKindSchema = z6.enum(["feature", "package", "framework-package"]);
-var ImpactScopeSchema = z6.object({
-  scannedFolders: z6.array(z6.string()),
-  coveredKinds: z6.array(MapEntryKindSchema),
-  outOfReach: z6.array(z6.string())
+var MapEntryKindSchema = z7.enum(["feature", "package", "framework-package"]);
+var ImpactScopeSchema = z7.object({
+  scannedFolders: z7.array(z7.string()),
+  coveredKinds: z7.array(MapEntryKindSchema),
+  outOfReach: z7.array(z7.string())
 });
-var ImpactReportSchema = z6.object({
-  target: z6.object({
-    name: z6.string(),
+var ImpactReportSchema = z7.object({
+  target: z7.object({
+    name: z7.string(),
     kind: MapEntryKindSchema,
-    folder: z6.string()
+    folder: z7.string()
   }),
-  dependents: z6.array(
-    z6.object({
-      name: z6.string(),
+  dependents: z7.array(
+    z7.object({
+      name: z7.string(),
       kind: MapEntryKindSchema,
-      importedSymbols: z6.array(z6.string()),
-      viaIndexOnly: z6.boolean()
+      importedSymbols: z7.array(z7.string()),
+      viaIndexOnly: z7.boolean()
     })
   ),
-  routes: z6.array(
-    z6.object({ method: z6.string(), path: z6.string(), description: z6.string() })
+  routes: z7.array(
+    z7.object({ method: z7.string(), path: z7.string(), description: z7.string() })
   ),
-  ownedTables: z6.array(z6.string()),
-  tableReadersOutsideOwner: z6.array(
-    z6.object({ table: z6.string(), feature: z6.string(), file: z6.string() })
+  ownedTables: z7.array(z7.string()),
+  tableReadersOutsideOwner: z7.array(
+    z7.object({ table: z7.string(), feature: z7.string(), file: z7.string() })
   ),
-  findings: z6.array(OgygieErrorSchema),
-  testCommand: z6.string(),
+  findings: z7.array(OgygieErrorSchema),
+  testCommand: z7.string(),
   scope: ImpactScopeSchema
 });
 var SOURCE_EXTENSIONS = [".ts", ".tsx"];
@@ -1387,38 +1672,11 @@ async function specFileNames(repo) {
   const entries = await repo.adapter.listDirectory(SPECS_DIR);
   return entries.map((entry) => entry.path).filter((path) => !path.includes("/") && path.endsWith(".spec.md") && !path.startsWith("_")).sort();
 }
-var FRONTMATTER_BLOCK = /^---\n([\s\S]*?)\n---/;
-function parseSpecFile(content) {
-  const match = FRONTMATTER_BLOCK.exec(content);
-  if (match === null || match[1] === void 0) {
-    return {
-      frontmatter: null,
-      problems: ["file does not start with a --- ... --- frontmatter block"],
-      body: content
-    };
-  }
-  const body = content.slice(match[0].length);
-  const parsed = parseSpecFrontmatter(match[1]);
-  if (parsed.problems.length > 0) {
-    return { frontmatter: null, problems: parsed.problems, body };
-  }
-  const checked = SpecFrontmatterSchema.safeParse(parsed.value);
-  if (!checked.success) {
-    return {
-      frontmatter: null,
-      problems: checked.error.issues.map(
-        (issue) => `${issue.path.join(".")}: ${issue.message}`
-      ),
-      body
-    };
-  }
-  return { frontmatter: checked.data, problems: [], body };
-}
 async function listSpecs(repo, input) {
   const specs = [];
   const invalid = [];
   for (const fileName of await specFileNames(repo)) {
-    const parsed = parseSpecFile(await readDocument(repo, `${SPECS_DIR}/${fileName}`));
+    const parsed = parseSpecDocument(await readDocument(repo, `${SPECS_DIR}/${fileName}`));
     if (parsed.frontmatter === null) {
       invalid.push({ id: specIdOf2(fileName), problems: parsed.problems });
       continue;
@@ -1446,7 +1704,7 @@ async function readSpec(repo, input) {
       suggestedFix: `Existing specs: ${known.join(", ") || "<none>"}.`
     });
   }
-  const parsed = parseSpecFile(await readDocument(repo, path));
+  const parsed = parseSpecDocument(await readDocument(repo, path));
   return {
     frontmatter: parsed.frontmatter,
     frontmatterProblems: parsed.problems,
@@ -1524,228 +1782,6 @@ async function readFeature(repo, input) {
   };
 }
 
-// src/proposals.ts
-var HOUR_MS = 36e5;
-var DECISION_HEADING2 = /^## D(\d+) — \d{4}-\d{2}-\d{2} — \S/;
-var DECISION_BULLETS = ["**D\xE9cision**", "**Motivation**", "**Exclut**"];
-function specIdOfPath(path) {
-  return path.replace(/^specs\//, "").replace(/\.spec\.md$/, "");
-}
-function validateSpec(path, content) {
-  const parsed = parseSpecFile(content);
-  const problems = [...parsed.problems];
-  if (parsed.frontmatter !== null && parsed.frontmatter.id !== specIdOfPath(path)) {
-    problems.push(`id "${parsed.frontmatter.id}" differs from the file name "${specIdOfPath(path)}"`);
-  }
-  let cursor = 0;
-  for (const section of SECTIONS_SPEC_OBLIGATOIRES) {
-    const position = parsed.body.indexOf(`
-${section}
-`, cursor);
-    if (position === -1) problems.push(`section "${section}" missing or out of order`);
-    else cursor = position + section.length;
-  }
-  if (problems.length > 0) {
-    throwOgygieError({
-      code: "SPEC_INVALID",
-      message: `The proposed spec would fail verify-specs (${problems.length} problem(s)).`,
-      file: path,
-      cause: problems.join(" ; "),
-      suggestedFix: "Fix the frontmatter (id, status, depends_on, priority, refs) and keep the six canonical sections in order."
-    });
-  }
-  if (parsed.frontmatter?.status === "implemented") {
-    throwOgygieError({
-      code: "SPEC_STATUS_FORBIDDEN",
-      message: "A proposal may not declare a spec implemented.",
-      file: path,
-      cause: "status=implemented",
-      suggestedFix: "Propose the spec as draft or validated \u2014 the repo's manifest and CI say when it is implemented."
-    });
-  }
-}
-function validateDecisions(path, content, baseSame, baseOther) {
-  const problems = [];
-  for (const line of content.split("\n")) {
-    if (line.startsWith("## ") && !DECISION_HEADING2.test(line)) {
-      problems.push(`heading "${line}" is not "## D<n> \u2014 AAAA-MM-JJ \u2014 <titre>"`);
-    }
-  }
-  const proposedIds = parseKnownDecisionIds(content);
-  const otherIds = parseKnownDecisionIds(baseOther ?? "");
-  const previousIds = parseKnownDecisionIds(baseSame ?? "");
-  for (const id of previousIds) {
-    if (!proposedIds.includes(id)) problems.push(`${id} was declared and is removed or renumbered`);
-  }
-  const all = [...proposedIds, ...otherIds];
-  const seen = /* @__PURE__ */ new Set();
-  for (const id of all) {
-    if (seen.has(id)) problems.push(`${id} is declared twice across the decision files`);
-    seen.add(id);
-  }
-  const numbers = [...seen].map((id) => Number.parseInt(id.slice(1), 10)).sort((a, b) => a - b);
-  numbers.forEach((value, index) => {
-    if (value !== index + 1) problems.push(`numbering has a gap: expected D${index + 1}, found D${value}`);
-  });
-  for (const id of proposedIds.filter((candidate) => !previousIds.includes(candidate))) {
-    const section = extractDecisionSection(content, id) ?? "";
-    for (const bullet of DECISION_BULLETS) {
-      if (!section.includes(bullet)) problems.push(`${id} lacks its ${bullet} bullet`);
-    }
-  }
-  if (problems.length > 0) {
-    throwOgygieError({
-      code: "DECISION_INVALID",
-      message: `The proposed decisions file breaks the D<n> contract (${problems.length} problem(s)).`,
-      file: path,
-      cause: problems.join(" ; "),
-      suggestedFix: "Keep every existing decision, number the new one right after the last across both files, and give it its D\xE9cision / Motivation / Exclut bullets."
-    });
-  }
-}
-function checkDecisionReferences(path, content, known) {
-  const unknown = findUnknownDecisionReferences(content, known);
-  if (unknown.length > 0) {
-    throwOgygieError({
-      code: "UNKNOWN_DECISION_REFERENCE",
-      message: `The proposal cites ${unknown.length} decision(s) the repo does not declare.`,
-      file: path,
-      cause: unknown.map((reference) => `${reference.decision} (line ${reference.line})`).join(", "),
-      suggestedFix: `Cite only declared decisions (${known.join(", ") || "<none>"}), or propose the decision first.`
-    });
-  }
-}
-function branchSlug(path) {
-  return path.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
-}
-async function withGithub(action) {
-  try {
-    return await action();
-  } catch (thrown) {
-    if (thrown instanceof OgygieFailure) throw thrown;
-    return throwOgygieError({
-      code: "GITHUB_UNAVAILABLE",
-      message: "The GitHub client failed outside its contract.",
-      file: null,
-      cause: thrown instanceof Error ? thrown.message : String(thrown),
-      suggestedFix: "Retry \u2014 nothing was written, nothing is queued."
-    });
-  }
-}
-async function proposeChange(repo, deps, input) {
-  const path = ProposablePathSchema.safeParse(input.path);
-  if (!path.success) {
-    throwOgygieError({
-      code: "WRITE_PATH_FORBIDDEN",
-      message: `"${input.path}" is outside what a proposal may touch.`,
-      file: input.path,
-      cause: "the perimeter is specs/<id>.spec.md (not the template), DECISIONS.md, DECISIONS.product.md",
-      suggestedFix: "Propose a spec or a decisions file; code, manifest, governed files and FAILURES.md are out of reach (D17)."
-    });
-  }
-  const github = repo.github;
-  if (github === void 0) {
-    return throwOgygieError({
-      code: "WRITE_NOT_CONFIGURED",
-      message: `Repo "${repo.id}" declares no GitHub coordinates: it is read-only.`,
-      file: null,
-      cause: "registry entry without a `github` block",
-      suggestedFix: 'Add `"github": { "owner": "\u2026", "repo": "\u2026", "defaultBranch": "main" }` to that repo in the registry.'
-    });
-  }
-  const now = deps.now();
-  const recent = (deps.recentProposals.get(repo.id) ?? []).filter((at) => now - at < HOUR_MS);
-  if (recent.length >= deps.rateLimitPerHour) {
-    const retryAfterSeconds = Math.ceil(((recent[0] ?? now) + HOUR_MS - now) / 1e3);
-    throwOgygieError({
-      code: "WRITE_RATE_LIMITED",
-      message: `Repo "${repo.id}" already received ${recent.length} proposals this hour.`,
-      file: null,
-      cause: `limit=${deps.rateLimitPerHour}/hour`,
-      suggestedFix: `Retry in ${retryAfterSeconds} s, or merge or close the open proposals first.`
-    });
-  }
-  const client = deps.clientFor(github);
-  const baseSha = await withGithub(() => client.getBranchHead(github.defaultBranch));
-  if (baseSha === null) {
-    return throwOgygieError({
-      code: "GITHUB_UNAVAILABLE",
-      message: `Branch "${github.defaultBranch}" does not exist on ${github.owner}/${github.repo}.`,
-      file: null,
-      cause: "default branch head not found",
-      suggestedFix: "Fix `defaultBranch` in the registry entry of that repo."
-    });
-  }
-  const baseFiles = /* @__PURE__ */ new Map();
-  for (const decisionsPath of DECISION_FILES) {
-    const file = await withGithub(() => client.readFileAtRef(decisionsPath, baseSha));
-    baseFiles.set(decisionsPath, file?.content ?? null);
-  }
-  if (input.path.startsWith("specs/")) {
-    validateSpec(input.path, input.content);
-    const known = DECISION_FILES.flatMap((file) => parseKnownDecisionIds(baseFiles.get(file) ?? ""));
-    checkDecisionReferences(input.path, input.content, known);
-  } else {
-    const other = DECISION_FILES.find((file) => file !== input.path) ?? DECISION_FILES[1];
-    validateDecisions(input.path, input.content, baseFiles.get(input.path) ?? null, baseFiles.get(other) ?? null);
-    const known = [...parseKnownDecisionIds(input.content), ...parseKnownDecisionIds(baseFiles.get(other) ?? "")];
-    checkDecisionReferences(input.path, input.content, known);
-  }
-  const headFile = await withGithub(() => client.readFileAtRef(input.path, baseSha));
-  const local = await repo.adapter.exists(input.path) ? await repo.adapter.readFile(input.path) : null;
-  if ((headFile?.content ?? null) !== local) {
-    throwOgygieError({
-      code: "REMOTE_CONFLICT",
-      message: `"${input.path}" changed on ${github.defaultBranch} since the served clone was read.`,
-      file: input.path,
-      cause: `head sha=${headFile?.sha ?? "<absent>"}, served clone ${local === null ? "has no such file" : "differs"}`,
-      suggestedFix: "Re-read the file (details.headContent is the current head), reapply your change and propose again.",
-      details: { headSha: headFile?.sha ?? null, headContent: headFile?.content ?? null }
-    });
-  }
-  let branch = `mcp/${repo.id}/${branchSlug(input.path)}`;
-  let branchHead = await withGithub(() => client.getBranchHead(branch));
-  let openPull = branchHead === null ? null : await withGithub(() => client.findOpenPullRequest(branch));
-  if (branchHead !== null && openPull === null) {
-    branch = `${branch}-${baseSha.slice(0, 7)}`;
-    branchHead = await withGithub(() => client.getBranchHead(branch));
-    openPull = branchHead === null ? null : await withGithub(() => client.findOpenPullRequest(branch));
-  }
-  recent.push(now);
-  deps.recentProposals.set(repo.id, recent);
-  let expectedSha = headFile?.sha ?? null;
-  if (branchHead === null) {
-    await withGithub(() => client.createBranch(branch, baseSha));
-  } else {
-    const onBranch = await withGithub(() => client.readFileAtRef(input.path, branchHead ?? baseSha));
-    expectedSha = onBranch?.sha ?? null;
-  }
-  const commit = await withGithub(
-    () => client.commitFile({ branch, path: input.path, content: input.content, message: input.message, expectedSha })
-  );
-  const pull = openPull ?? await withGithub(
-    () => client.openPullRequest({
-      branch,
-      base: github.defaultBranch,
-      title: (input.message.split("\n")[0] ?? input.message).slice(0, 72),
-      body: `${input.message}
-
----
-Propos\xE9 via @ogygie/mcp par ${deps.clientName()} (repo \`${repo.id}\`, chemin \`${input.path}\`).`
-    })
-  );
-  return {
-    repo: repo.id,
-    path: path.data,
-    branch,
-    baseSha,
-    commitSha: commit.commitSha,
-    pullRequestNumber: pull.number,
-    pullRequestUrl: pull.url,
-    created: openPull === null
-  };
-}
-
 // src/server.ts
 function asText(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
@@ -1851,7 +1887,7 @@ function createOgygieMcpServer(deps) {
       "ogygie_propose_change",
       "Proposes a spec (specs/<id>.spec.md) or a decisions file (DECISIONS.md, DECISIONS.product.md) as a commit on a mcp/ branch plus a pull request \u2014 never a file on the host. Validated like verify-specs first; refuses status implemented.",
       ProposeChangeInput,
-      async (input) => proposeChange(
+      async (input) => proposeChange2(
         repoOf(deps.repos, input.repo),
         {
           ...write,
@@ -2047,7 +2083,10 @@ async function startOgygieMcp(options) {
   }
   const githubToken = options.githubToken;
   const write = githubToken === void 0 ? void 0 : {
-    clientFor: (github) => createGithubWriteClient({ token: githubToken, fetchImpl: fetch }, github),
+    clientFor: (github) => createGithubWriteClient(
+      { token: githubToken, fetchImpl: fetch, userAgent: "ogygie-mcp", credentialHint: "OGYGIE_MCP_GITHUB_TOKEN" },
+      github
+    ),
     now: () => Date.now(),
     rateLimitPerHour: parsed.writeRateLimit,
     recentProposals: /* @__PURE__ */ new Map()