chore(editorial): harden proposer queue and apply-ticket

.gitea/workflows/anno-apply-pr.yml

@@ -41,7 +41,7 @@ jobs:
         run: |
           set -euo pipefail
           export EVENT_JSON="/var/run/act/workflow/event.json"
-          test -f "$EVENT_JSON" || { echo "Missing $EVENT_JSON"; exit 1; }
+          test -f "$EVENT_JSON" || { echo "❌ Missing $EVENT_JSON"; exit 1; }
 
           node --input-type=module - <<'NODE' > /tmp/anno.env
           import fs from "node:fs";
@@ -66,10 +66,7 @@ jobs:
 
           if (!owner || !repo) {
             const m = cloneUrl.match(/[:/](?<o>[^/]+)\/(?<r>[^/]+?)(?:\.git)?$/);
-            if (m?.groups) {
-              owner = owner || m.groups.o;
-              repo = repo || m.groups.r;
-            }
+            if (m?.groups) { owner = owner || m.groups.o; repo = repo || m.groups.r; }
           }
           if (!owner || !repo) throw new Error("Cannot infer owner/repo");
 
@@ -84,6 +81,7 @@ jobs:
             throw new Error("No issue number in event.json or workflow_dispatch input");
           }
 
+          // label name: best-effort (non-bloquant)
           let labelName = "workflow_dispatch";
           const lab = ev?.label;
           if (typeof lab === "string") labelName = lab;
@@ -97,7 +95,7 @@ jobs:
             ? String(process.env.FORGE_API).trim().replace(/\/+$/,"")
             : origin;
 
-          function sh(s) { return JSON.stringify(String(s)); }
+          function sh(s){ return JSON.stringify(String(s)); }
 
           process.stdout.write([
             `CLONE_URL=${sh(cloneUrl)}`,
@@ -110,7 +108,7 @@ jobs:
           ].join("\n") + "\n");
           NODE
 
-          echo "context:"
+          echo "✅ context:"
           sed -n '1,120p' /tmp/anno.env
 
       - name: Early gate (label event fast-skip, but tolerant)
@@ -118,16 +116,18 @@ jobs:
           set -euo pipefail
           source /tmp/anno.env
 
-          echo "event label = $LABEL_NAME"
+          echo "ℹ️ event label = $LABEL_NAME"
 
+          # Fast skip on obvious non-approved label events (avoid noise),
+          # BUT do NOT skip if label payload is weird/unknown.
           if [[ "$LABEL_NAME" != "state/approved" && "$LABEL_NAME" != "workflow_dispatch" && "$LABEL_NAME" != "" && "$LABEL_NAME" != "[object Object]" ]]; then
-            echo "label=$LABEL_NAME => skip early"
+            echo "ℹ️ label=$LABEL_NAME => skip early"
             echo "SKIP=1" >> /tmp/anno.env
             echo "SKIP_REASON=\"label_not_approved_event\"" >> /tmp/anno.env
             exit 0
           fi
 
-          echo "continue to API gating (issue=$ISSUE_NUMBER)"
+          echo "✅ continue to API gating (issue=$ISSUE_NUMBER)"
 
       - name: Fetch issue + hard gate on labels + Type
         env:
@@ -135,9 +135,9 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
-          test -n "${FORGE_TOKEN:-}" || { echo "Missing secret FORGE_TOKEN"; exit 1; }
+          test -n "${FORGE_TOKEN:-}" || { echo "❌ Missing secret FORGE_TOKEN"; exit 1; }
 
           curl -fsS \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -148,12 +148,11 @@ jobs:
           node --input-type=module - <<'NODE' >> /tmp/anno.env
           import fs from "node:fs";
 
-          const issue = JSON.parse(fs.readFileSync("/tmp/issue.json", "utf8"));
+          const issue = JSON.parse(fs.readFileSync("/tmp/issue.json","utf8"));
+          const title = String(issue.title || "");
           const body = String(issue.body || "").replace(/\r\n/g, "\n");
 
-          const labels = Array.isArray(issue.labels)
-            ? issue.labels.map(l => String(l.name || "")).filter(Boolean)
-            : [];
+          const labels = Array.isArray(issue.labels) ? issue.labels.map(l => String(l.name || "")).filter(Boolean) : [];
           const hasApproved = labels.includes("state/approved");
 
           function pickLine(key) {
@@ -165,12 +164,14 @@ jobs:
           const typeRaw = pickLine("Type");
           const type = String(typeRaw || "").trim().toLowerCase();
 
-          const allowedAnno = new Set(["type/media", "type/reference", "type/comment"]);
-          const proposerTypes = new Set(["type/correction", "type/fact-check"]);
+          const allowed = new Set(["type/media","type/reference","type/comment"]);
+          const proposer = new Set(["type/correction","type/fact-check"]);
 
           const out = [];
+          out.push(`ISSUE_TITLE=${JSON.stringify(title)}`);
           out.push(`ISSUE_TYPE=${JSON.stringify(type)}`);
 
+          // HARD gate: must currently have state/approved (avoids depending on event payload)
           if (!hasApproved) {
             out.push(`SKIP=1`);
             out.push(`SKIP_REASON=${JSON.stringify("not_approved_label_present")}`);
@@ -181,23 +182,23 @@ jobs:
           if (!type) {
             out.push(`SKIP=1`);
             out.push(`SKIP_REASON=${JSON.stringify("missing_type")}`);
-          } else if (allowedAnno.has(type)) {
+          } else if (allowed.has(type)) {
             // proceed
-          } else if (proposerTypes.has(type)) {
+          } else if (proposer.has(type)) {
             out.push(`SKIP=1`);
-            out.push(`SKIP_REASON=${JSON.stringify("proposer_type:" + type)}`);
+            out.push(`SKIP_REASON=${JSON.stringify("proposer_type:"+type)}`);
           } else {
             out.push(`SKIP=1`);
-            out.push(`SKIP_REASON=${JSON.stringify("unsupported_type:" + type)}`);
+            out.push(`SKIP_REASON=${JSON.stringify("unsupported_type:"+type)}`);
           }
 
           process.stdout.write(out.join("\n") + "\n");
           NODE
 
-          echo "gating result:"
+          echo "✅ gating result:"
           grep -E '^(ISSUE_TYPE|SKIP|SKIP_REASON)=' /tmp/anno.env || true
 
-      - name: Comment issue if skipped (unsupported / missing Type only)
+      - name: Comment issue if skipped (Proposer / unsupported / missing Type)
         if: ${{ always() }}
         env:
           FORGE_TOKEN: ${{ secrets.FORGE_TOKEN }}
@@ -207,13 +208,9 @@ jobs:
 
           [[ "${SKIP:-0}" == "1" ]] || exit 0
 
+          # IMPORTANT: do NOT comment for "not_approved_label_present" (avoid spam on other label events)
           if [[ "${SKIP_REASON:-}" == "not_approved_label_present" || "${SKIP_REASON:-}" == "label_not_approved_event" ]]; then
-            echo "skip reason=${SKIP_REASON} -> no comment"
-            exit 0
-          fi
-
-          if [[ "${SKIP_REASON:-}" == proposer_type:* ]]; then
-            echo "proposer ticket detected -> anno stays silent"
+            echo "ℹ️ skip reason=${SKIP_REASON} -> no comment"
             exit 0
           fi
 
@@ -222,13 +219,15 @@ jobs:
           REASON="${SKIP_REASON:-}"
           TYPE="${ISSUE_TYPE:-}"
 
-          if [[ "$REASON" == unsupported_type:* ]]; then
-            MSG="Ticket #${ISSUE_NUMBER} ignored: unsupported Type (${TYPE}). Supported types: type/media, type/reference, type/comment."
+          if [[ "$REASON" == proposer_type:* ]]; then
+            MSG="ℹ️ Ticket #${ISSUE_NUMBER} détecté comme **Proposer** (${TYPE}).\n\n- Ce type est **traité manuellement par les editors**.\n✅ Aucun traitement automatique."
+          elif [[ "$REASON" == unsupported_type:* ]]; then
+            MSG="ℹ️ Ticket #${ISSUE_NUMBER} ignoré : Type non supporté par le bot (${TYPE}).\n\nTypes supportés : type/media, type/reference, type/comment."
           else
-            MSG="Ticket #${ISSUE_NUMBER} ignored: missing or unreadable 'Type:'. Expected: type/media|type/reference|type/comment"
+            MSG="ℹ️ Ticket #${ISSUE_NUMBER} ignoré : champ 'Type:' manquant ou illisible.\n\nAjoute : Type: type/media|type/reference|type/comment"
           fi
 
-          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1] || ""}))' "$MSG")"
+          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
           curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -240,7 +239,7 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
           rm -rf .git
           git init -q
@@ -253,16 +252,16 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
           npm ci --no-audit --no-fund
 
       - name: Check apply script exists
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
           test -f scripts/apply-annotation-ticket.mjs || {
-            echo "missing scripts/apply-annotation-ticket.mjs on $DEFAULT_BRANCH"
+            echo "❌ missing scripts/apply-annotation-ticket.mjs on $DEFAULT_BRANCH"
             ls -la scripts | sed -n '1,200p' || true
             exit 1
           }
@@ -271,16 +270,16 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
           npm run build
 
           test -f dist/para-index.json || {
-            echo "missing dist/para-index.json after build"
+            echo "❌ missing dist/para-index.json after build"
             ls -la dist | sed -n '1,200p' || true
             exit 1
           }
-          echo "dist/para-index.json present"
+          echo "✅ dist/para-index.json present"
 
       - name: Apply ticket on bot branch (strict+verify, commit)
         continue-on-error: true
@@ -291,10 +290,10 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
-          test -d .git || { echo "not a git repo (checkout failed)"; echo "APPLY_RC=90" >> /tmp/anno.env; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
+          test -d .git || { echo "❌ not a git repo (checkout failed)"; echo "APPLY_RC=90" >> /tmp/anno.env; exit 0; }
 
-          test -n "${FORGE_TOKEN:-}" || { echo "Missing secret FORGE_TOKEN"; exit 1; }
+          test -n "${FORGE_TOKEN:-}" || { echo "❌ Missing secret FORGE_TOKEN"; exit 1; }
 
           git config user.name  "${BOT_GIT_NAME:-archicratie-bot}"
           git config user.email "${BOT_GIT_EMAIL:-bot@archicratie.local}"
@@ -341,11 +340,11 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/anno.env || true
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
           RC="${APPLY_RC:-0}"
           if [[ "$RC" == "0" ]]; then
-            echo "no failure detected"
+            echo "ℹ️ no failure detected"
             exit 0
           fi
 
@@ -357,8 +356,8 @@ jobs:
             BODY="(no apply log found)"
           fi
 
-          MSG="apply-annotation-ticket failed (rc=${RC}).\n\n\`\`\`\n${BODY}\n\`\`\`\n"
-          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1] || ""}))' "$MSG")"
+          MSG="❌ apply-annotation-ticket a échoué (rc=${RC}).\n\n\`\`\`\n${BODY}\n\`\`\`\n"
+          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
           curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -375,9 +374,9 @@ jobs:
           source /tmp/anno.env || true
           [[ "${SKIP:-0}" != "1" ]] || exit 0
 
-          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "apply failed -> skip push"; exit 0; }
-          [[ "${NOOP:-0}" == "0" ]] || { echo "no-op -> skip push"; exit 0; }
-          test -d .git || { echo "no git repo -> skip push"; exit 0; }
+          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "ℹ️ apply failed -> skip push"; exit 0; }
+          [[ "${NOOP:-0}" == "0" ]] || { echo "ℹ️ no-op -> skip push"; exit 0; }
+          test -d .git || { echo "ℹ️ no git repo -> skip push"; exit 0; }
 
           AUTH_URL="$(node --input-type=module -e '
             const [clone, tok] = process.argv.slice(1);
@@ -399,8 +398,8 @@ jobs:
           source /tmp/anno.env || true
           [[ "${SKIP:-0}" != "1" ]] || exit 0
 
-          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "apply failed -> skip PR"; exit 0; }
-          [[ "${NOOP:-0}" == "0" ]] || { echo "no-op -> skip PR"; exit 0; }
+          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "ℹ️ apply failed -> skip PR"; exit 0; }
+          [[ "${NOOP:-0}" == "0" ]] || { echo "ℹ️ no-op -> skip PR"; exit 0; }
 
           PR_TITLE="anno: apply ticket #${ISSUE_NUMBER}"
           PR_BODY="PR auto depuis ticket #${ISSUE_NUMBER} (state/approved).\n\n- Branche: ${BRANCH}\n- Commit: ${END_SHA}\n\nMerge si CI OK."
@@ -421,10 +420,10 @@ jobs:
             console.log(pr.html_url || pr.url || "");
           ' "$PR_JSON")"
 
-          test -n "$PR_URL" || { echo "PR URL missing. Raw: $PR_JSON"; exit 1; }
+          test -n "$PR_URL" || { echo "❌ PR URL missing. Raw: $PR_JSON"; exit 1; }
 
-          MSG="PR created for ticket #${ISSUE_NUMBER}: ${PR_URL}"
-          C_PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1] || ""}))' "$MSG")"
+          MSG="✅ PR créée pour ticket #${ISSUE_NUMBER} : ${PR_URL}"
+          C_PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
           curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -432,7 +431,7 @@ jobs:
             "$API_BASE/api/v1/repos/$OWNER/$REPO/issues/$ISSUE_NUMBER/comments" \
             --data-binary "$C_PAYLOAD"
 
-          echo "PR: $PR_URL"
+          echo "✅ PR: $PR_URL"
 
       - name: Finalize (fail job if apply failed)
         if: ${{ always() }}
@@ -440,11 +439,11 @@ jobs:
           set -euo pipefail
           source /tmp/anno.env || true
 
-          [[ "${SKIP:-0}" != "1" ]] || { echo "skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
           RC="${APPLY_RC:-0}"
           if [[ "$RC" != "0" ]]; then
-            echo "apply failed (rc=$RC)"
+            echo "❌ apply failed (rc=$RC)"
             exit "$RC"
           fi
-          echo "apply ok"
+          echo "✅ apply ok"

.gitea/workflows/proposer-apply-pr.yml

@@ -45,7 +45,7 @@ jobs:
         run: |
           set -euo pipefail
           export EVENT_JSON="/var/run/act/workflow/event.json"
-          test -f "$EVENT_JSON" || { echo "Missing $EVENT_JSON"; exit 1; }
+          test -f "$EVENT_JSON" || { echo "❌ Missing $EVENT_JSON"; exit 1; }
 
           node --input-type=module - <<'NODE' > /tmp/proposer.env
           import fs from "node:fs";
@@ -55,7 +55,7 @@ jobs:
 
           const cloneUrl =
             repoObj?.clone_url ||
-            (repoObj?.html_url ? (repoObj.html_url.replace(/\/$/, "") + ".git") : "");
+            (repoObj?.html_url ? (repoObj.html_url.replace(/\/$/,"") + ".git") : "");
 
           if (!cloneUrl) throw new Error("No repository clone_url/html_url in event.json");
 
@@ -70,12 +70,8 @@ jobs:
 
           if (!owner || !repo) {
             const m = cloneUrl.match(/[:/](?<o>[^/]+)\/(?<r>[^/]+?)(?:\.git)?$/);
-            if (m?.groups) {
-              owner = owner || m.groups.o;
-              repo = repo || m.groups.r;
-            }
+            if (m?.groups) { owner = owner || m.groups.o; repo = repo || m.groups.r; }
           }
-
           if (!owner || !repo) throw new Error("Cannot infer owner/repo");
 
           const defaultBranch = repoObj?.default_branch || "main";
@@ -98,15 +94,11 @@ jobs:
           const u = new URL(cloneUrl);
           const origin = u.origin;
 
-          const apiBase =
-            (process.env.FORGE_API && String(process.env.FORGE_API).trim())
-              ? String(process.env.FORGE_API).trim().replace(/\/+$/, "")
-              : origin;
-
-          function sh(s) {
-            return JSON.stringify(String(s));
-          }
+          const apiBase = (process.env.FORGE_API && String(process.env.FORGE_API).trim())
+            ? String(process.env.FORGE_API).trim().replace(/\/+$/,"")
+            : origin;
 
+          function sh(s){ return JSON.stringify(String(s)); }
           process.stdout.write([
             `CLONE_URL=${sh(cloneUrl)}`,
             `OWNER=${sh(owner)}`,
@@ -119,7 +111,7 @@ jobs:
           ].join("\n") + "\n");
           NODE
 
-          echo "Context:"
+          echo "✅ context:"
           sed -n '1,200p' /tmp/proposer.env
 
       - name: Early gate
@@ -129,51 +121,14 @@ jobs:
 
           if [[ "$EVENT_NAME" == "issues" ]]; then
             if [[ "$LABEL_NAME" != "state/approved" ]]; then
-              echo "issues/labeled but label=$LABEL_NAME -> skip"
+              echo "ℹ️ issues/labeled but label=$LABEL_NAME -> skip"
               echo 'SKIP=1' >> /tmp/proposer.env
               echo 'SKIP_REASON="label_not_state_approved"' >> /tmp/proposer.env
               exit 0
             fi
           fi
 
-          echo "Proceed"
-
-      - name: Checkout default branch
-        run: |
-          set -euo pipefail
-          source /tmp/proposer.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "Skipped"; exit 0; }
-
-          rm -rf .git
-          git init -q
-          git remote add origin "$CLONE_URL"
-          git fetch --depth 1 origin "$DEFAULT_BRANCH"
-          git -c advice.detachedHead=false checkout -q FETCH_HEAD
-          git log -1 --oneline
-
-      - name: Detect app dir (repo-root vs ./site)
-        run: |
-          set -euo pipefail
-          source /tmp/proposer.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "Skipped"; exit 0; }
-
-          APP_DIR="."
-          if [[ -d "site" && -f "site/package.json" ]]; then
-            APP_DIR="site"
-          fi
-
-          echo "APP_DIR=$APP_DIR" >> /tmp/proposer.env
-          echo "APP_DIR=$APP_DIR"
-
-          test -f "$APP_DIR/package.json" || {
-            echo "package.json missing in APP_DIR=$APP_DIR"
-            exit 1
-          }
-
-          test -d "$APP_DIR/scripts" || {
-            echo "scripts/ missing in APP_DIR=$APP_DIR"
-            exit 1
-          }
+          echo "✅ proceed"
 
       - name: Select next proposer batch (by path)
         env:
@@ -181,25 +136,14 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/proposer.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "Skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
-          test -n "${FORGE_TOKEN:-}" || {
-            echo "Missing secret FORGE_TOKEN"
-            exit 1
-          }
+          test -n "${FORGE_TOKEN:-}" || { echo "❌ Missing secret FORGE_TOKEN"; exit 1; }
 
           export GITEA_OWNER="$OWNER"
           export GITEA_REPO="$REPO"
           export FORGE_API="$API_BASE"
 
-          cd "$APP_DIR"
-
-          test -f scripts/pick-proposer-issue.mjs || {
-            echo "missing scripts/pick-proposer-issue.mjs in APP_DIR=$APP_DIR"
-            ls -la scripts | sed -n '1,200p' || true
-            exit 1
-          }
-
           node scripts/pick-proposer-issue.mjs "${ISSUE_NUMBER:-0}" > /tmp/proposer.pick.env
           cat /tmp/proposer.pick.env >> /tmp/proposer.env
           source /tmp/proposer.pick.env
@@ -207,11 +151,11 @@ jobs:
           if [[ "${TARGET_FOUND:-0}" != "1" ]]; then
             echo 'SKIP=1' >> /tmp/proposer.env
             echo "SKIP_REASON=${TARGET_REASON:-no_target}" >> /tmp/proposer.env
-            echo "No target batch"
+            echo "ℹ️ no target batch"
             exit 0
           fi
 
-          echo "Target batch:"
+          echo "✅ target batch:"
           grep -E '^(TARGET_PRIMARY_ISSUE|TARGET_ISSUES|TARGET_COUNT|TARGET_CHEMIN)=' /tmp/proposer.env
 
       - name: Inspect open proposer PRs
@@ -220,7 +164,7 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/proposer.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "Skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
           curl -fsS \
             -H "Authorization: token $FORGE_TOKEN" \
@@ -233,22 +177,21 @@ jobs:
           node --input-type=module - <<'NODE' >> /tmp/proposer.env
           import fs from "node:fs";
 
-          const pulls = JSON.parse(fs.readFileSync("/tmp/open_pulls.json", "utf8"));
+          const pulls = JSON.parse(fs.readFileSync("/tmp/open_pulls.json","utf8"));
           const issues = String(process.env.TARGET_ISSUES || "")
             .trim()
             .split(/\s+/)
             .filter(Boolean);
 
           const proposerOpen = Array.isArray(pulls)
-            ? pulls.filter((pr) => String(pr?.head?.ref || "").startsWith("bot/proposer-"))
+            ? pulls.filter(pr => String(pr?.head?.ref || "").startsWith("bot/proposer-"))
             : [];
 
           const current = proposerOpen.find((pr) => {
             const ref = String(pr?.head?.ref || "");
             const title = String(pr?.title || "");
             const body = String(pr?.body || "");
-
-            return issues.some((n) =>
+            return issues.some(n =>
               ref.startsWith(`bot/proposer-${n}-`) ||
               title.includes(`#${n}`) ||
               body.includes(`#${n}`) ||
@@ -257,14 +200,13 @@ jobs:
           });
 
           const out = [];
-
           if (current) {
-            out.push("SKIP=1");
+            out.push(`SKIP=1`);
             out.push(`SKIP_REASON=${JSON.stringify("issue_already_has_open_pr")}`);
             out.push(`OPEN_PR_URL=${JSON.stringify(String(current.html_url || current.url || ""))}`);
           } else if (proposerOpen.length > 0) {
             const first = proposerOpen[0];
-            out.push("SKIP=1");
+            out.push(`SKIP=1`);
             out.push(`SKIP_REASON=${JSON.stringify("queue_busy_open_proposer_pr")}`);
             out.push(`OPEN_PR_URL=${JSON.stringify(String(first.html_url || first.url || ""))}`);
             out.push(`OPEN_PR_BRANCH=${JSON.stringify(String(first?.head?.ref || ""))}`);
@@ -294,48 +236,72 @@ jobs:
 
           case "${SKIP_REASON:-}" in
             queue_busy_open_proposer_pr)
-              MSG="Ticket queued in proposer queue. An open proposer PR already exists: ${OPEN_PR_URL:-"(URL unavailable)"}. The workflow will resume after merge on main."
+              MSG="ℹ️ Ticket mis en file d’attente Proposer.\n\nUne PR Proposer est déjà ouverte : ${OPEN_PR_URL:-"(URL indisponible)"}\n\nLe workflow reprendra automatiquement le prochain lot après intégration sur main."
               ;;
             issue_already_has_open_pr)
-              MSG="This ticket already has an open proposer PR: ${OPEN_PR_URL:-"(URL unavailable)"}"
+              MSG="ℹ️ Ce ticket a déjà une PR Proposer ouverte : ${OPEN_PR_URL:-"(URL indisponible)"}"
               ;;
             explicit_issue_missing_chemin)
-              MSG="Proposer Apply: cannot process this ticket automatically because field Chemin is missing or unreadable."
+              MSG="ℹ️ Proposer Apply: impossible de traiter ce ticket automatiquement car le champ **Chemin** est manquant ou illisible."
               ;;
             explicit_issue_missing_type)
-              MSG="Proposer Apply: cannot process this ticket automatically because field Type is missing or unreadable."
+              MSG="ℹ️ Proposer Apply: impossible de traiter ce ticket automatiquement car le champ **Type** est manquant ou illisible."
               ;;
             explicit_issue_not_approved)
-              MSG="Proposer Apply: this ticket is not currently labeled state/approved."
+              MSG="ℹ️ Proposer Apply: ce ticket n’est pas actuellement marqué **state/approved**."
               ;;
             explicit_issue_rejected)
-              MSG="Proposer Apply: this ticket has state/rejected and is not eligible for the proposer queue."
+              MSG="ℹ️ Proposer Apply: ce ticket porte **state/rejected** et n’entre donc pas dans la file Proposer."
               ;;
             no_open_approved_proposer_issue)
-              MSG="No approved proposer ticket is currently waiting."
+              MSG="ℹ️ Aucun ticket Proposer approuvé n’est actuellement en attente."
               ;;
             *)
-              MSG="Proposer Apply: skip - ${SKIP_REASON:-unspecified reason}."
+              MSG="ℹ️ Proposer Apply: skip — ${SKIP_REASON:-raison non précisée}."
               ;;
           esac
 
-          node --input-type=module - <<'NODE' > /tmp/proposer.skip.comment.json
-          const msg = process.env.MSG || "";
-          process.stdout.write(JSON.stringify({ body: msg }));
-          NODE
-
+          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
           curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
             -H "Content-Type: application/json" \
             "$API_BASE/api/v1/repos/$OWNER/$REPO/issues/$ISSUE_TO_COMMENT/comments" \
-            --data-binary @/tmp/proposer.skip.comment.json || true
+            --data-binary "$PAYLOAD" || true
+
+      - name: Checkout default branch
+        run: |
+          set -euo pipefail
+          source /tmp/proposer.env
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
+
+          rm -rf .git
+          git init -q
+          git remote add origin "$CLONE_URL"
+          git fetch --depth 1 origin "$DEFAULT_BRANCH"
+          git -c advice.detachedHead=false checkout -q FETCH_HEAD
+          git log -1 --oneline
+
+      - name: Detect app dir (repo-root vs ./site)
+        run: |
+          set -euo pipefail
+          source /tmp/proposer.env
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
+
+          APP_DIR="."
+          if [[ -d "site" && -f "site/package.json" ]]; then
+            APP_DIR="site"
+          fi
+
+          echo "APP_DIR=$APP_DIR" >> /tmp/proposer.env
+          echo "✅ APP_DIR=$APP_DIR"
+          test -f "$APP_DIR/package.json" || { echo "❌ package.json missing in APP_DIR=$APP_DIR"; exit 1; }
+          test -d "$APP_DIR/scripts" || { echo "❌ scripts/ missing in APP_DIR=$APP_DIR"; exit 1; }
 
       - name: NPM harden
         run: |
           set -euo pipefail
           source /tmp/proposer.env
           [[ "${SKIP:-0}" != "1" ]] || exit 0
-
           cd "$APP_DIR"
           npm config set fetch-retries 5
           npm config set fetch-retry-mintimeout 20000
@@ -347,7 +313,6 @@ jobs:
           set -euo pipefail
           source /tmp/proposer.env
           [[ "${SKIP:-0}" != "1" ]] || exit 0
-
           cd "$APP_DIR"
           npm ci --no-audit --no-fund
 
@@ -356,7 +321,6 @@ jobs:
           set -euo pipefail
           source /tmp/proposer.env
           [[ "${SKIP:-0}" != "1" ]] || exit 0
-
           cd "$APP_DIR"
           npm run build
 
@@ -369,9 +333,9 @@ jobs:
         run: |
           set -euo pipefail
           source /tmp/proposer.env
-          [[ "${SKIP:-0}" != "1" ]] || { echo "Skipped"; exit 0; }
+          [[ "${SKIP:-0}" != "1" ]] || { echo "ℹ️ skipped"; exit 0; }
 
-          git config user.name "${BOT_GIT_NAME:-archicratie-bot}"
+          git config user.name  "${BOT_GIT_NAME:-archicratie-bot}"
           git config user.email "${BOT_GIT_EMAIL:-bot@archicratie.local}"
 
           START_SHA="$(git rev-parse HEAD)"
@@ -389,16 +353,13 @@ jobs:
 
           RC=0
           FAILED_ISSUE=""
-
           for ISSUE in $TARGET_ISSUES; do
-            echo "" >> "$LOG"
-            echo "== ticket #$ISSUE ==" >> "$LOG"
-
+            echo "" >>"$LOG"
+            echo "== ticket #$ISSUE ==" >>"$LOG"
             set +e
-            (cd "$APP_DIR" && node scripts/apply-ticket.mjs "$ISSUE" --alias --commit) >> "$LOG" 2>&1
+            (cd "$APP_DIR" && node scripts/apply-ticket.mjs "$ISSUE" --alias --commit) >>"$LOG" 2>&1
             STEP_RC=$?
             set -e
-
             if [[ "$STEP_RC" -ne 0 ]]; then
               RC="$STEP_RC"
               FAILED_ISSUE="$ISSUE"
@@ -409,11 +370,10 @@ jobs:
           echo "APPLY_RC=$RC" >> /tmp/proposer.env
           echo "FAILED_ISSUE=${FAILED_ISSUE}" >> /tmp/proposer.env
 
-          echo "Apply log (tail):"
+          echo "== apply log (tail) =="
           tail -n 220 "$LOG" || true
 
           END_SHA="$(git rev-parse HEAD)"
-
           if [[ "$RC" -ne 0 ]]; then
             echo "NOOP=0" >> /tmp/proposer.env
             exit 0
@@ -440,7 +400,7 @@ jobs:
           git fetch origin "$DEFAULT_BRANCH"
 
           set +e
-          git rebase "origin/$DEFAULT_BRANCH" >> "$LOG" 2>&1
+          git rebase "origin/$DEFAULT_BRANCH" >>"$LOG" 2>&1
           RC=$?
           set -e
 
@@ -450,7 +410,7 @@ jobs:
 
           echo "REBASE_RC=$RC" >> /tmp/proposer.env
 
-          echo "Rebase log (tail):"
+          echo "== rebase log (tail) =="
           tail -n 220 "$LOG" || true
 
       - name: Comment issues on failure
@@ -466,7 +426,7 @@ jobs:
           REBASE_RC="${REBASE_RC:-0}"
 
           if [[ "$APPLY_RC" == "0" && "$REBASE_RC" == "0" ]]; then
-            echo "No failure detected"
+            echo "ℹ️ no failure detected"
             exit 0
           fi
 
@@ -478,35 +438,20 @@ jobs:
             BODY="(no proposer log found)"
           fi
 
-          export BODY APPLY_RC REBASE_RC FAILED_ISSUE
-
           if [[ "$APPLY_RC" != "0" ]]; then
-            export FAILURE_KIND="apply"
+            MSG="❌ Batch Proposer en échec sur le ticket #${FAILED_ISSUE:-"(inconnu)"} (rc=${APPLY_RC}).\n\n\`\`\`\n${BODY}\n\`\`\`\n"
           else
-            export FAILURE_KIND="rebase"
+            MSG="❌ Rebase Proposer en échec sur main (rc=${REBASE_RC}).\n\n\`\`\`\n${BODY}\n\`\`\`\n"
           fi
 
-          node --input-type=module - <<'NODE' > /tmp/proposer.failure.comment.json
-          const body = process.env.BODY || "";
-          const applyRc = process.env.APPLY_RC || "0";
-          const rebaseRc = process.env.REBASE_RC || "0";
-          const failedIssue = process.env.FAILED_ISSUE || "unknown";
-          const kind = process.env.FAILURE_KIND || "apply";
-
-          const msg =
-            kind === "apply"
-              ? `Batch proposer failed on ticket #${failedIssue} (rc=${applyRc}).\n\n\`\`\`\n${body}\n\`\`\`\n`
-              : `Rebase proposer failed on main (rc=${rebaseRc}).\n\n\`\`\`\n${body}\n\`\`\`\n`;
-
-          process.stdout.write(JSON.stringify({ body: msg }));
-          NODE
+          PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
           for ISSUE in ${TARGET_ISSUES:-}; do
             curl -fsS -X POST \
               -H "Authorization: token $FORGE_TOKEN" \
               -H "Content-Type: application/json" \
               "$API_BASE/api/v1/repos/$OWNER/$REPO/issues/$ISSUE/comments" \
-              --data-binary @/tmp/proposer.failure.comment.json || true
+              --data-binary "$PAYLOAD" || true
           done
 
       - name: Push bot branch
@@ -517,10 +462,10 @@ jobs:
           set -euo pipefail
           source /tmp/proposer.env || true
           [[ "${SKIP:-0}" != "1" ]] || exit 0
-          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "Apply failed -> skip push"; exit 0; }
-          [[ "${REBASE_RC:-0}" == "0" ]] || { echo "Rebase failed -> skip push"; exit 0; }
-          [[ "${NOOP:-0}" == "0" ]] || { echo "No-op -> skip push"; exit 0; }
-          [[ -n "${BRANCH:-}" ]] || { echo "BRANCH unset -> skip push"; exit 0; }
+          [[ "${APPLY_RC:-0}" == "0" ]] || { echo "ℹ️ apply failed -> skip push"; exit 0; }
+          [[ "${REBASE_RC:-0}" == "0" ]] || { echo "ℹ️ rebase failed -> skip push"; exit 0; }
+          [[ "${NOOP:-0}" == "0" ]] || { echo "ℹ️ no-op -> skip push"; exit 0; }
+          [[ -n "${BRANCH:-}" ]] || { echo "ℹ️ BRANCH unset -> skip push"; exit 0; }
 
           AUTH_URL="$(node --input-type=module -e '
             const [clone, tok] = process.argv.slice(1);
@@ -544,7 +489,7 @@ jobs:
           [[ "${APPLY_RC:-0}" == "0" ]] || exit 0
           [[ "${REBASE_RC:-0}" == "0" ]] || exit 0
           [[ "${NOOP:-0}" == "0" ]] || exit 0
-          [[ -n "${BRANCH:-}" ]] || { echo "BRANCH unset -> skip PR"; exit 0; }
+          [[ -n "${BRANCH:-}" ]] || { echo "ℹ️ BRANCH unset -> skip PR"; exit 0; }
 
           if [[ "${TARGET_COUNT:-0}" == "1" ]]; then
             PR_TITLE="proposer: apply ticket #${TARGET_PRIMARY_ISSUE}"
@@ -552,74 +497,64 @@ jobs:
             PR_TITLE="proposer: apply ${TARGET_COUNT} tickets on ${TARGET_CHEMIN}"
           fi
 
-          export TITLE="$PR_TITLE"
-          export CHEMIN="$TARGET_CHEMIN"
-          export ISSUES="$TARGET_ISSUES"
-          export BRANCH="$BRANCH"
-          export END_SHA="${END_SHA:-unknown}"
-          export DEFAULT_BRANCH="$DEFAULT_BRANCH"
-          export OWNER="$OWNER"
+          PR_PAYLOAD="$(
+            TITLE="$PR_TITLE" \
+            CHEMIN="$TARGET_CHEMIN" \
+            ISSUES="$TARGET_ISSUES" \
+            BRANCH="$BRANCH" \
+            END_SHA="${END_SHA:-unknown}" \
+            DEFAULT_BRANCH="$DEFAULT_BRANCH" \
+            OWNER="$OWNER" \
+            node --input-type=module <<'NODE'
+            const issues = String(process.env.ISSUES || "")
+              .trim()
+              .split(/\s+/)
+              .filter(Boolean);
 
-          node --input-type=module - <<'NODE' > /tmp/proposer.pr.json
-          const issues = String(process.env.ISSUES || "")
-            .trim()
-            .split(/\s+/)
-            .filter(Boolean);
+            const body = [
+              `PR auto depuis ticket${issues.length > 1 ? "s" : ""} ${issues.map(n => `#${n}`).join(", ")} (state/approved).`,
+              "",
+              `- Chemin: ${process.env.CHEMIN || "(inconnu)"}`,
+              "- Tickets:",
+              ...issues.map(n => `  - #${n}`),
+              `- Branche: ${process.env.BRANCH}`,
+              `- Commit: ${process.env.END_SHA || "unknown"}`,
+              "",
+              "Merge si CI OK."
+            ].join("\n");
 
-          const body = [
-            `PR auto depuis ticket${issues.length > 1 ? "s" : ""} ${issues.map((n) => `#${n}`).join(", ")} (state/approved).`,
-            "",
-            `- Chemin: ${process.env.CHEMIN || "(inconnu)"}`,
-            "- Tickets:",
-            ...issues.map((n) => `  - #${n}`),
-            `- Branche: ${process.env.BRANCH || ""}`,
-            `- Commit: ${process.env.END_SHA || "unknown"}`,
-            "",
-            "Merge si CI OK."
-          ].join("\n");
-
-          process.stdout.write(JSON.stringify({
-            title: process.env.TITLE || "proposer: apply tickets",
-            body,
-            base: process.env.DEFAULT_BRANCH || "main",
-            head: `${process.env.OWNER}:${process.env.BRANCH}`,
-            allow_maintainer_edit: true
-          }));
+            console.log(JSON.stringify({
+              title: process.env.TITLE,
+              body,
+              base: process.env.DEFAULT_BRANCH,
+              head: `${process.env.OWNER}:${process.env.BRANCH}`,
+              allow_maintainer_edit: true
+            }));
           NODE
+          )"
 
           PR_JSON="$(curl -fsS -X POST \
             -H "Authorization: token $FORGE_TOKEN" \
             -H "Content-Type: application/json" \
             "$API_BASE/api/v1/repos/$OWNER/$REPO/pulls" \
-            --data-binary @/tmp/proposer.pr.json)"
+            --data-binary "$PR_PAYLOAD")"
 
           PR_URL="$(node --input-type=module -e '
             const pr = JSON.parse(process.argv[1] || "{}");
             console.log(pr.html_url || pr.url || "");
           ' "$PR_JSON")"
 
-          test -n "$PR_URL" || {
-            echo "PR URL missing. Raw: $PR_JSON"
-            exit 1
-          }
+          test -n "$PR_URL" || { echo "❌ PR URL missing. Raw: $PR_JSON"; exit 1; }
 
           for ISSUE in $TARGET_ISSUES; do
-            export ISSUE PR_URL
-            node --input-type=module - <<'NODE' > /tmp/proposer.issue.close.comment.json
-            const issue = process.env.ISSUE || "";
-            const url = process.env.PR_URL || "";
-            const msg =
-              `PR proposer created for ticket #${issue}: ${url}\n\n` +
-              `The ticket is closed automatically. Discussion can continue in the PR.`;
-
-            process.stdout.write(JSON.stringify({ body: msg }));
-            NODE
+            MSG="✅ PR Proposer créée pour le ticket #${ISSUE} : ${PR_URL}\n\nLe ticket est clôturé automatiquement ; la discussion peut se poursuivre dans la PR."
+            C_PAYLOAD="$(node --input-type=module -e 'console.log(JSON.stringify({body: process.argv[1]||""}))' "$MSG")"
 
             curl -fsS -X POST \
               -H "Authorization: token $FORGE_TOKEN" \
               -H "Content-Type: application/json" \
               "$API_BASE/api/v1/repos/$OWNER/$REPO/issues/$ISSUE/comments" \
-              --data-binary @/tmp/proposer.issue.close.comment.json
+              --data-binary "$C_PAYLOAD"
 
             curl -fsS -X PATCH \
               -H "Authorization: token $FORGE_TOKEN" \
@@ -628,7 +563,7 @@ jobs:
               --data-binary '{"state":"closed"}'
           done
 
-          echo "PR: $PR_URL"
+          echo "✅ PR: $PR_URL"
 
       - name: Finalize
         if: ${{ always() }}
@@ -638,13 +573,13 @@ jobs:
           [[ "${SKIP:-0}" != "1" ]] || exit 0
 
           if [[ "${APPLY_RC:-0}" != "0" ]]; then
-            echo "Apply failed (rc=${APPLY_RC})"
+            echo "❌ apply failed (rc=${APPLY_RC})"
             exit "${APPLY_RC}"
           fi
 
           if [[ "${REBASE_RC:-0}" != "0" ]]; then
-            echo "Rebase failed (rc=${REBASE_RC})"
+            echo "❌ rebase failed (rc=${REBASE_RC})"
             exit "${REBASE_RC}"
           fi
 
-          echo "Proposer queue OK"
+          echo "✅ proposer queue ok"