@cogenta/agents-builtin 0.1.0

package/dist/security/epss-client.js

@@ -0,0 +1,34 @@
+import { CogentaError } from '@cogenta/core';
+/**
+ * "Croiser CVSS et EPSS (probabilité d'exploitation réelle)." FIRST.org's
+ * EPSS API takes a comma-separated CVE list and returns a score per CVE it
+ * recognises — a CVE it has no data for is simply absent from the result,
+ * not an error.
+ */
+export async function queryEpss(cveIds, options = {}) {
+    if (cveIds.length === 0)
+        return new Map();
+    const doFetch = options.fetchImpl ?? fetch;
+    const baseUrl = options.baseUrl ?? 'https://api.first.org/data/v1/epss';
+    const url = `${baseUrl}?cve=${cveIds.join(',')}`;
+    const response = await doFetch(url);
+    if (!response.ok) {
+        throw new CogentaError({
+            code: 'SECURITY_EPSS_QUERY_FAILED',
+            message: `EPSS query failed with status ${response.status}.`,
+            hint: 'Check network connectivity and https://www.first.org/epss.',
+            details: { status: response.status },
+        });
+    }
+    const body = (await response.json());
+    const scores = new Map();
+    for (const item of body.data ?? []) {
+        scores.set(item.cve, {
+            cve: item.cve,
+            epss: Number.parseFloat(item.epss),
+            percentile: Number.parseFloat(item.percentile),
+        });
+    }
+    return scores;
+}
+//# sourceMappingURL=epss-client.js.map

package/dist/security/epss-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epss-client.js","sourceRoot":"","sources":["../../src/security/epss-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAc5C;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAyB,EACzB,OAAO,GAAqB,EAAE;IAE9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAA;IAEzC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oCAAoC,CAAA;IACvE,MAAM,GAAG,GAAG,GAAG,OAAO,QAAQ,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAEhD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CAAC;YACrB,IAAI,EAAE,4BAA4B;YAClC,OAAO,EAAE,iCAAiC,QAAQ,CAAC,MAAM,GAAG;YAC5D,IAAI,EAAE,4DAA4D;YAClE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;SACrC,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAA;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAA;IAC3C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;YACnB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC;SAC/C,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/security/exploitability.d.ts

@@ -0,0 +1,17 @@
+import type { EpssScore } from './epss-client.js';
+import type { OsvVulnerability } from './osv-client.js';
+export type Urgency = 'low' | 'medium' | 'high' | 'critical';
+export interface ExploitabilityAssessment {
+    readonly cvss?: number;
+    readonly epss?: number;
+    readonly urgency: Urgency;
+}
+/**
+ * "Croiser CVSS et EPSS. Une CVE 9.8 jamais exploitée est moins urgente
+ * qu'une 6.5 activement utilisée." EPSS drives urgency once it is known and
+ * meaningfully non-zero; a high CVSS score with a near-zero EPSS is
+ * downgraded from what its severity alone would suggest, and a merely
+ * moderate CVSS with real-world exploitation activity is not.
+ */
+export declare function assessExploitability(vuln: OsvVulnerability, epss?: EpssScore): ExploitabilityAssessment;
+//# sourceMappingURL=exploitability.d.ts.map

package/dist/security/exploitability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exploitability.d.ts","sourceRoot":"","sources":["../../src/security/exploitability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEvD,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA;AAE5D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAMD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,gBAAgB,EACtB,IAAI,CAAC,EAAE,SAAS,GACf,wBAAwB,CAsB1B"}

package/dist/security/exploitability.js

@@ -0,0 +1,36 @@
+const EPSS_CRITICAL = 0.5;
+const EPSS_HIGH = 0.1;
+const EPSS_DORMANT = 0.01;
+/**
+ * "Croiser CVSS et EPSS. Une CVE 9.8 jamais exploitée est moins urgente
+ * qu'une 6.5 activement utilisée." EPSS drives urgency once it is known and
+ * meaningfully non-zero; a high CVSS score with a near-zero EPSS is
+ * downgraded from what its severity alone would suggest, and a merely
+ * moderate CVSS with real-world exploitation activity is not.
+ */
+export function assessExploitability(vuln, epss) {
+    const cvss = vuln.cvssScore;
+    const epssValue = epss?.epss;
+    let urgency;
+    if (epssValue !== undefined && epssValue >= EPSS_CRITICAL) {
+        urgency = 'critical';
+    }
+    else if (epssValue !== undefined && epssValue >= EPSS_HIGH) {
+        urgency = 'high';
+    }
+    else if (cvss !== undefined && cvss >= 9) {
+        urgency = epssValue !== undefined && epssValue < EPSS_DORMANT ? 'medium' : 'high';
+    }
+    else if (cvss !== undefined && cvss >= 7) {
+        urgency = 'medium';
+    }
+    else {
+        urgency = 'low';
+    }
+    return {
+        ...(cvss === undefined ? {} : { cvss }),
+        ...(epssValue === undefined ? {} : { epss: epssValue }),
+        urgency,
+    };
+}
+//# sourceMappingURL=exploitability.js.map

package/dist/security/exploitability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exploitability.js","sourceRoot":"","sources":["../../src/security/exploitability.ts"],"names":[],"mappings":"AAWA,MAAM,aAAa,GAAG,GAAG,CAAA;AACzB,MAAM,SAAS,GAAG,GAAG,CAAA;AACrB,MAAM,YAAY,GAAG,IAAI,CAAA;AAEzB;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAsB,EACtB,IAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAA;IAC3B,MAAM,SAAS,GAAG,IAAI,EAAE,IAAI,CAAA;IAE5B,IAAI,OAAgB,CAAA;IACpB,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,aAAa,EAAE,CAAC;QAC1D,OAAO,GAAG,UAAU,CAAA;IACtB,CAAC;SAAM,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC7D,OAAO,GAAG,MAAM,CAAA;IAClB,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,GAAG,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAA;IACnF,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QAC3C,OAAO,GAAG,QAAQ,CAAA;IACpB,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,KAAK,CAAA;IACjB,CAAC;IAED,OAAO;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACvC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACvD,OAAO;KACR,CAAA;AACH,CAAC"}

package/dist/security/osv-client.d.ts

@@ -0,0 +1,26 @@
+import type { SbomEntry } from './sbom.js';
+export interface OsvVulnerability {
+    readonly id: string;
+    readonly summary?: string;
+    readonly details?: string;
+    readonly aliases?: readonly string[];
+    /** Normalised 0–10 CVSS base score, when OSV's response carries one — undefined when only a raw vector string (no parseable base score) is available. */
+    readonly cvssScore?: number;
+}
+export interface OsvMatch {
+    readonly entry: SbomEntry;
+    readonly vulnerabilities: readonly OsvVulnerability[];
+}
+export interface QueryOsvOptions {
+    readonly fetchImpl?: typeof fetch;
+    readonly baseUrl?: string;
+}
+/**
+ * "Ne signaler que si le site est réellement concerné : version installée
+ * affectée." OSV's `/v1/query` endpoint already does exactly that matching
+ * — given one concrete package + version, it returns only the
+ * vulnerabilities whose `affected` ranges cover that version, so this
+ * module does not re-implement semver-range matching on top of it.
+ */
+export declare function queryOsv(entries: readonly SbomEntry[], options?: QueryOsvOptions): Promise<readonly OsvMatch[]>;
+//# sourceMappingURL=osv-client.d.ts.map

package/dist/security/osv-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"osv-client.d.ts","sourceRoot":"","sources":["../../src/security/osv-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAA;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,yJAAyJ;IACzJ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,eAAe,EAAE,SAAS,gBAAgB,EAAE,CAAA;CACtD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAC1B;AA4CD;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,SAAS,SAAS,EAAE,EAC7B,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CA4B9B"}

package/dist/security/osv-client.js

@@ -0,0 +1,63 @@
+import { CogentaError } from '@cogenta/core';
+const QUALITATIVE_SEVERITY_SCORE = {
+    CRITICAL: 9.5,
+    HIGH: 7.5,
+    MODERATE: 5.5,
+    MEDIUM: 5.5,
+    LOW: 2.5,
+};
+function extractCvssScore(raw) {
+    for (const entry of raw.severity ?? []) {
+        const asNumber = Number.parseFloat(entry.score);
+        if (!Number.isNaN(asNumber) && asNumber >= 0 && asNumber <= 10)
+            return asNumber;
+    }
+    const qualitative = raw.database_specific?.severity?.toUpperCase();
+    return qualitative === undefined ? undefined : QUALITATIVE_SEVERITY_SCORE[qualitative];
+}
+function normalize(raw) {
+    const cvssScore = extractCvssScore(raw);
+    return {
+        id: raw.id,
+        ...(raw.summary === undefined ? {} : { summary: raw.summary }),
+        ...(raw.details === undefined ? {} : { details: raw.details }),
+        ...(raw.aliases === undefined ? {} : { aliases: raw.aliases }),
+        ...(cvssScore === undefined ? {} : { cvssScore }),
+    };
+}
+/**
+ * "Ne signaler que si le site est réellement concerné : version installée
+ * affectée." OSV's `/v1/query` endpoint already does exactly that matching
+ * — given one concrete package + version, it returns only the
+ * vulnerabilities whose `affected` ranges cover that version, so this
+ * module does not re-implement semver-range matching on top of it.
+ */
+export async function queryOsv(entries, options = {}) {
+    const doFetch = options.fetchImpl ?? fetch;
+    const url = options.baseUrl ?? 'https://api.osv.dev/v1/query';
+    const matches = [];
+    for (const entry of entries) {
+        const response = await doFetch(url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                version: entry.version,
+                package: { name: entry.name, ecosystem: entry.ecosystem },
+            }),
+        });
+        if (!response.ok) {
+            throw new CogentaError({
+                code: 'SECURITY_OSV_QUERY_FAILED',
+                message: `OSV query for "${entry.name}@${entry.version}" failed with status ${response.status}.`,
+                hint: 'Check network connectivity and https://status.osv.dev.',
+                details: { status: response.status, package: entry.name, version: entry.version },
+            });
+        }
+        const body = (await response.json());
+        if (body.vulns !== undefined && body.vulns.length > 0) {
+            matches.push({ entry, vulnerabilities: body.vulns.map(normalize) });
+        }
+    }
+    return matches;
+}
+//# sourceMappingURL=osv-client.js.map

package/dist/security/osv-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"osv-client.js","sourceRoot":"","sources":["../../src/security/osv-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAoC5C,MAAM,0BAA0B,GAAqC;IACnE,QAAQ,EAAE,GAAG;IACb,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,GAAG;IACb,MAAM,EAAE,GAAG;IACX,GAAG,EAAE,GAAG;CACT,CAAA;AAED,SAAS,gBAAgB,CAAC,GAAwB;IAChD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAA;IACjF,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,iBAAiB,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAA;IAClE,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAA;AACxF,CAAC;AAED,SAAS,SAAS,CAAC,GAAwB;IACzC,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACvC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,OAA6B,EAC7B,OAAO,GAAoB,EAAE;IAE7B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,IAAI,8BAA8B,CAAA;IAE7D,MAAM,OAAO,GAAe,EAAE,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE;aAC1D,CAAC;SACH,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC;gBACrB,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,kBAAkB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,wBAAwB,QAAQ,CAAC,MAAM,GAAG;gBAChG,IAAI,EAAE,wDAAwD;gBAC9D,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;aAClF,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+C,CAAA;QAClF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/security/pr-client.d.ts

@@ -0,0 +1,30 @@
+export interface PrFile {
+    readonly path: string;
+    readonly content: string;
+}
+export interface OpenPrOptions {
+    readonly baseBranch: string;
+    readonly branchName: string;
+    readonly title: string;
+    readonly body: string;
+    readonly files: readonly PrFile[];
+}
+export interface PrResult {
+    readonly url: string;
+    readonly number: number;
+}
+/**
+ * "Le correctif est une PR avec les tests joués, jamais une modification
+ * directe." One structural capability — open a branch, commit the given
+ * files, open a PR — hides whichever concrete forge (GitHub, GitLab, a
+ * self-hosted one) actually implements it, the same reasoning
+ * `ContentServiceLike` (L4 task 5) and `EmbeddingProvider` (L4 task 14) use:
+ * `deps.patch` depends on this capability, not on GitHub's REST API shape.
+ * A real GitHub-backed implementation is a separate concern from this tool.
+ */
+export interface PrClient {
+    open(options: OpenPrOptions): Promise<PrResult>;
+    /** The `revert` half — closing the PR without merging it. */
+    close(prNumber: number): Promise<void>;
+}
+//# sourceMappingURL=pr-client.d.ts.map

package/dist/security/pr-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-client.d.ts","sourceRoot":"","sources":["../../src/security/pr-client.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CAClC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,6DAA6D;IAC7D,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACvC"}

package/dist/security/pr-client.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pr-client.js.map

package/dist/security/pr-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-client.js","sourceRoot":"","sources":["../../src/security/pr-client.ts"],"names":[],"mappings":""}

package/dist/security/report.d.ts

@@ -0,0 +1,25 @@
+import type { ExploitabilityAssessment } from './exploitability.js';
+import type { OsvVulnerability } from './osv-client.js';
+export interface SecurityFinding {
+    readonly package: string;
+    readonly version: string;
+    readonly vulnerability: OsvVulnerability;
+    readonly assessment: ExploitabilityAssessment;
+}
+/** "Le rapport suit un format imposé... Aucun jargon brut." Five plain-language sections, always in this order. */
+export interface SecurityReportEntry {
+    readonly finding: SecurityFinding;
+    readonly whatIsAffected: string;
+    readonly whatAnAttackerCouldDo: string;
+    readonly isTheSiteExposed: string;
+    readonly whatIsProposed: string;
+    readonly whatHappensIfNothingIsDone: string;
+}
+export interface SecurityReport {
+    readonly entries: readonly SecurityReportEntry[];
+    readonly generatedAt: string;
+}
+export declare function buildSecurityReport(findings: readonly SecurityFinding[], options?: {
+    readonly now?: () => number;
+}): SecurityReport;
+//# sourceMappingURL=report.d.ts.map

package/dist/security/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/security/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,wBAAwB,EAAW,MAAM,qBAAqB,CAAA;AAC5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAEvD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAA;IACxC,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAA;CAC9C;AAED,mHAAmH;AACnH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAA;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAA;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAA;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AA2BD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,eAAe,EAAE,EACpC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,GACxC,cAAc,CAsBhB"}

package/dist/security/report.js

@@ -0,0 +1,43 @@
+function describeExposure(urgency) {
+    switch (urgency) {
+        case 'critical':
+        case 'high':
+            return 'Oui — la version installée est concernée, et cette vulnérabilité est activement exploitée dans la nature.';
+        case 'medium':
+            return 'Probablement — la version installée est concernée ; aucune exploitation active connue à ce jour.';
+        default:
+            return 'Faible — la version installée est techniquement concernée, mais le risque réel observé est limité.';
+    }
+}
+function describeInaction(urgency) {
+    switch (urgency) {
+        case 'critical':
+            return 'Le site reste exposé à une vulnérabilité activement exploitée — à traiter immédiatement.';
+        case 'high':
+            return 'Le risque d’exploitation reste élevé tant que la mise à jour n’est pas appliquée.';
+        case 'medium':
+            return 'Le risque reste modéré ; une mise à jour lors du prochain cycle de maintenance est raisonnable.';
+        default:
+            return 'Le risque immédiat est faible ; pas d’urgence particulière à agir.';
+    }
+}
+export function buildSecurityReport(findings, options) {
+    const now = options?.now ?? Date.now;
+    const entries = findings.map((finding) => {
+        const aliases = finding.vulnerability.aliases !== undefined && finding.vulnerability.aliases.length > 0
+            ? ` (alias ${finding.vulnerability.aliases.join(', ')})`
+            : '';
+        return {
+            finding,
+            whatIsAffected: `${finding.package}@${finding.version} — ${finding.vulnerability.id}${aliases}.`,
+            whatAnAttackerCouldDo: finding.vulnerability.summary ??
+                finding.vulnerability.details ??
+                'Le détail n’est pas fourni par la source ; se référer à l’avis de sécurité pour l’impact exact.',
+            isTheSiteExposed: describeExposure(finding.assessment.urgency),
+            whatIsProposed: `Mettre à jour ${finding.package} au-delà de la version affectée.`,
+            whatHappensIfNothingIsDone: describeInaction(finding.assessment.urgency),
+        };
+    });
+    return { entries, generatedAt: new Date(now()).toISOString() };
+}
+//# sourceMappingURL=report.js.map

package/dist/security/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/security/report.ts"],"names":[],"mappings":"AAyBA,SAAS,gBAAgB,CAAC,OAAgB;IACxC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU,CAAC;QAChB,KAAK,MAAM;YACT,OAAO,2GAA2G,CAAA;QACpH,KAAK,QAAQ;YACX,OAAO,kGAAkG,CAAA;QAC3G;YACE,OAAO,oGAAoG,CAAA;IAC/G,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,UAAU;YACb,OAAO,0FAA0F,CAAA;QACnG,KAAK,MAAM;YACT,OAAO,mFAAmF,CAAA;QAC5F,KAAK,QAAQ;YACX,OAAO,iGAAiG,CAAA;QAC1G;YACE,OAAO,oEAAoE,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAoC,EACpC,OAAyC;IAEzC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAEpC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAuB,EAAE;QAC5D,MAAM,OAAO,GACX,OAAO,CAAC,aAAa,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACrF,CAAC,CAAC,WAAW,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACxD,CAAC,CAAC,EAAE,CAAA;QACR,OAAO;YACL,OAAO;YACP,cAAc,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,OAAO,GAAG;YAChG,qBAAqB,EACnB,OAAO,CAAC,aAAa,CAAC,OAAO;gBAC7B,OAAO,CAAC,aAAa,CAAC,OAAO;gBAC7B,iGAAiG;YACnG,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAC9D,cAAc,EAAE,iBAAiB,OAAO,CAAC,OAAO,kCAAkC;YAClF,0BAA0B,EAAE,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;SACzE,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAA;AAChE,CAAC"}

package/dist/security/sbom.d.ts

@@ -0,0 +1,15 @@
+export interface SbomEntry {
+    readonly name: string;
+    readonly version: string;
+    /** OSV's ecosystem identifier (e.g. `npm`) — https://ossf.github.io/osv-schema/#affectedpackage-field */
+    readonly ecosystem: string;
+}
+/**
+ * `dependencies` must already be resolved, exact versions (from a lockfile),
+ * not the semver ranges a `package.json` declares — OSV's query API matches
+ * one concrete version, not a range, and resolving a range to what is
+ * actually installed is the caller's job (reading the lockfile), not this
+ * pure function's.
+ */
+export declare function buildSbom(dependencies: Readonly<Record<string, string>>, ecosystem?: string): readonly SbomEntry[];
+//# sourceMappingURL=sbom.d.ts.map

package/dist/security/sbom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sbom.d.ts","sourceRoot":"","sources":["../../src/security/sbom.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,yGAAyG;IACzG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CACvB,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAC9C,SAAS,SAAQ,GAChB,SAAS,SAAS,EAAE,CAEtB"}

package/dist/security/sbom.js

@@ -0,0 +1,11 @@
+/**
+ * `dependencies` must already be resolved, exact versions (from a lockfile),
+ * not the semver ranges a `package.json` declares — OSV's query API matches
+ * one concrete version, not a range, and resolving a range to what is
+ * actually installed is the caller's job (reading the lockfile), not this
+ * pure function's.
+ */
+export function buildSbom(dependencies, ecosystem = 'npm') {
+    return Object.entries(dependencies).map(([name, version]) => ({ name, version, ecosystem }));
+}
+//# sourceMappingURL=sbom.js.map

package/dist/security/sbom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sbom.js","sourceRoot":"","sources":["../../src/security/sbom.ts"],"names":[],"mappings":"AAOA;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CACvB,YAA8C,EAC9C,SAAS,GAAG,KAAK;IAEjB,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;AAC9F,CAAC"}

package/dist/seo/agent.d.ts

@@ -0,0 +1,9 @@
+import { type AgentDeclaration } from '@cogenta/agents';
+/**
+ * "Règle : il propose des brouillons, il ne publie jamais." No `content.publish`
+ * anywhere in `tools` — the runtime cannot grant what was never listed
+ * (L4 task 4's own enforcement point), so this is structural, not a
+ * convention the agent merely follows.
+ */
+export declare const seoAgent: AgentDeclaration;
+//# sourceMappingURL=agent.d.ts.map

package/dist/seo/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/seo/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAe,MAAM,iBAAiB,CAAA;AAEpE;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAE,gBAcrB,CAAA"}

package/dist/seo/agent.js

@@ -0,0 +1,23 @@
+import { defineAgent } from '@cogenta/agents';
+/**
+ * "Règle : il propose des brouillons, il ne publie jamais." No `content.publish`
+ * anywhere in `tools` — the runtime cannot grant what was never listed
+ * (L4 task 4's own enforcement point), so this is structural, not a
+ * convention the agent merely follows.
+ */
+export const seoAgent = defineAgent({
+    name: 'seo',
+    identity: './identity.md',
+    model: { preferred: 'claude-sonnet', fallback: 'local' },
+    tools: ['content.read', 'content.write_draft', 'http.fetch', 'channel.send'],
+    skills: ['seo-audit', 'aeo-geo'],
+    autonomy: { default: 'propose' },
+    budget: { tokensPerDay: 150_000, eurPerMonth: 8, callsPerHour: 30 },
+    memory: { episodic: true, semantic: true, scope: 'site' },
+    triggers: [
+        { on: 'content.before_publish' },
+        { on: 'schedule', cron: '0 6 * * 1' },
+        { on: 'content.structure_changed' },
+    ],
+});
+//# sourceMappingURL=agent.js.map

package/dist/seo/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/seo/agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAEpE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAqB,WAAW,CAAC;IACpD,IAAI,EAAE,KAAK;IACX,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE;IACxD,KAAK,EAAE,CAAC,cAAc,EAAE,qBAAqB,EAAE,YAAY,EAAE,cAAc,CAAC;IAC5E,MAAM,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,QAAQ,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;IAChC,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE;IACnE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;IACzD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,wBAAwB,EAAE;QAChC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE;QACrC,EAAE,EAAE,EAAE,2BAA2B,EAAE;KACpC;CACF,CAAC,CAAA"}

package/dist/seo/audit.d.ts

@@ -0,0 +1,17 @@
+import type { SeoAuditResult, SeoPageInput } from './types.js';
+/**
+ * "Audit à la publication : titres, méta, structure de titres, alt,
+ * maillage interne, canoniques, longueur, lisibilité." Deterministic
+ * checks, not a model's judgement call — the acceptance criterion is a
+ * measured false-positive rate, which a prompt alone cannot guarantee.
+ * JSON-LD, internal-link proposals, cannibalisation and AEO/GEO are task
+ * 6's job, not this one's.
+ *
+ * Deliberately not exposed as a callable tool: the SEO agent's declared
+ * tools are only `content.read`/`content.write_draft`/`http.fetch`/
+ * `channel.send` (per the lot's own agent spec) — this runs as a
+ * deterministic pre-processing step feeding the agent's context, the
+ * model never invokes it directly.
+ */
+export declare function auditSeoPage(page: SeoPageInput): SeoAuditResult;
+//# sourceMappingURL=audit.d.ts.map

package/dist/seo/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/seo/audit.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAc,YAAY,EAAE,MAAM,YAAY,CAAA;AAoK1E;;;;;;;;;;;;;GAaG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAY/D"}

package/dist/seo/audit.js

@@ -0,0 +1,179 @@
+import { countWords, fleschReadingEase } from './readability.js';
+const TITLE_MIN_CHARS = 15;
+const TITLE_MAX_CHARS = 60;
+const META_MIN_CHARS = 50;
+const META_MAX_CHARS = 160;
+const MIN_WORD_COUNT = 300;
+const MIN_READABILITY = 30;
+function checkTitle(page) {
+    const title = page.title.trim();
+    if (title === '') {
+        return [{ check: 'title', severity: 'error', message: 'The page has no title.' }];
+    }
+    if (title.length < TITLE_MIN_CHARS) {
+        return [
+            {
+                check: 'title',
+                severity: 'warning',
+                message: `Title is short (${title.length} characters) — likely too vague for search results.`,
+            },
+        ];
+    }
+    if (title.length > TITLE_MAX_CHARS) {
+        return [
+            {
+                check: 'title',
+                severity: 'warning',
+                message: `Title is long (${title.length} characters) — may be truncated in search results.`,
+            },
+        ];
+    }
+    return [];
+}
+function checkMetaDescription(page) {
+    const description = page.metaDescription?.trim();
+    if (description === undefined || description === '') {
+        return [
+            {
+                check: 'meta_description',
+                severity: 'warning',
+                message: 'No meta description — search engines will generate one, less control over the snippet.',
+            },
+        ];
+    }
+    if (description.length < META_MIN_CHARS) {
+        return [
+            {
+                check: 'meta_description',
+                severity: 'info',
+                message: `Meta description is short (${description.length} characters).`,
+            },
+        ];
+    }
+    if (description.length > META_MAX_CHARS) {
+        return [
+            {
+                check: 'meta_description',
+                severity: 'warning',
+                message: `Meta description is long (${description.length} characters) — likely truncated in search results.`,
+            },
+        ];
+    }
+    return [];
+}
+function checkHeadingStructure(page) {
+    const findings = [];
+    const h1Count = page.headings.filter((heading) => heading.level === 1).length;
+    if (h1Count === 0) {
+        findings.push({
+            check: 'heading_structure',
+            severity: 'error',
+            message: 'No H1 heading found.',
+        });
+    }
+    else if (h1Count > 1) {
+        findings.push({
+            check: 'heading_structure',
+            severity: 'warning',
+            message: `${h1Count} H1 headings found — a page should have exactly one.`,
+        });
+    }
+    let previousLevel = 0;
+    for (const heading of page.headings) {
+        if (previousLevel > 0 && heading.level > previousLevel + 1) {
+            findings.push({
+                check: 'heading_structure',
+                severity: 'warning',
+                message: `Heading level skips from H${previousLevel} to H${heading.level} ("${heading.text}") — do not skip levels.`,
+            });
+        }
+        previousLevel = heading.level;
+    }
+    return findings;
+}
+function checkAltText(page) {
+    const missing = page.images.filter((image) => image.decorative !== true && (image.alt === null || image.alt.trim() === ''));
+    if (missing.length === 0)
+        return [];
+    return [
+        {
+            check: 'alt_text',
+            severity: 'error',
+            message: `${missing.length} image(s) missing alt text.`,
+        },
+    ];
+}
+function checkInternalLinking(page) {
+    if (page.internalLinks.length === 0) {
+        return [
+            {
+                check: 'internal_linking',
+                severity: 'warning',
+                message: 'No internal links — this page risks being an orphan.',
+            },
+        ];
+    }
+    return [];
+}
+function checkCanonical(page) {
+    if (page.canonicalUrl === undefined || page.canonicalUrl.trim() === '') {
+        return [{ check: 'canonical', severity: 'warning', message: 'No canonical URL declared.' }];
+    }
+    return [];
+}
+function checkLength(page) {
+    const wordCount = countWords(page.bodyText);
+    if (wordCount < MIN_WORD_COUNT) {
+        return [
+            {
+                check: 'length',
+                severity: 'warning',
+                message: `Body is thin (${wordCount} words, under ${MIN_WORD_COUNT}).`,
+            },
+        ];
+    }
+    return [];
+}
+function checkReadability(page) {
+    if (page.bodyText.trim() === '')
+        return [];
+    const score = fleschReadingEase(page.bodyText);
+    if (score < MIN_READABILITY) {
+        return [
+            {
+                check: 'readability',
+                severity: 'info',
+                message: `Text may be hard to read (Flesch score ${score.toFixed(1)}).`,
+            },
+        ];
+    }
+    return [];
+}
+/**
+ * "Audit à la publication : titres, méta, structure de titres, alt,
+ * maillage interne, canoniques, longueur, lisibilité." Deterministic
+ * checks, not a model's judgement call — the acceptance criterion is a
+ * measured false-positive rate, which a prompt alone cannot guarantee.
+ * JSON-LD, internal-link proposals, cannibalisation and AEO/GEO are task
+ * 6's job, not this one's.
+ *
+ * Deliberately not exposed as a callable tool: the SEO agent's declared
+ * tools are only `content.read`/`content.write_draft`/`http.fetch`/
+ * `channel.send` (per the lot's own agent spec) — this runs as a
+ * deterministic pre-processing step feeding the agent's context, the
+ * model never invokes it directly.
+ */
+export function auditSeoPage(page) {
+    const findings = [
+        ...checkTitle(page),
+        ...checkMetaDescription(page),
+        ...checkHeadingStructure(page),
+        ...checkAltText(page),
+        ...checkInternalLinking(page),
+        ...checkCanonical(page),
+        ...checkLength(page),
+        ...checkReadability(page),
+    ];
+    return { url: page.url, findings };
+}
+//# sourceMappingURL=audit.js.map

package/dist/seo/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/seo/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGhE,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAA;AAC1B,MAAM,cAAc,GAAG,EAAE,CAAA;AACzB,MAAM,cAAc,GAAG,GAAG,CAAA;AAC1B,MAAM,cAAc,GAAG,GAAG,CAAA;AAC1B,MAAM,eAAe,GAAG,EAAE,CAAA;AAE1B,SAAS,UAAU,CAAC,IAAkB;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,OAAO;YACL;gBACE,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,mBAAmB,KAAK,CAAC,MAAM,qDAAqD;aAC9F;SACF,CAAA;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,OAAO;YACL;gBACE,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,kBAAkB,KAAK,CAAC,MAAM,oDAAoD;aAC5F;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAkB;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;IAChD,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO;YACL;gBACE,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EACL,wFAAwF;aAC3F;SACF,CAAA;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO;YACL;gBACE,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,8BAA8B,WAAW,CAAC,MAAM,eAAe;aACzE;SACF,CAAA;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO;YACL;gBACE,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,6BAA6B,WAAW,CAAC,MAAM,oDAAoD;aAC7G;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAkB;IAC/C,MAAM,QAAQ,GAAiB,EAAE,CAAA;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAA;IAE7E,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB;SAChC,CAAC,CAAA;IACJ,CAAC;SAAM,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,mBAAmB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,GAAG,OAAO,sDAAsD;SAC1E,CAAC,CAAA;IACJ,CAAC;IAED,IAAI,aAAa,GAAG,CAAC,CAAA;IACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,IAAI,aAAa,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,GAAG,aAAa,GAAG,CAAC,EAAE,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,mBAAmB;gBAC1B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,6BAA6B,aAAa,QAAQ,OAAO,CAAC,KAAK,MAAM,OAAO,CAAC,IAAI,0BAA0B;aACrH,CAAC,CAAA;QACJ,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,KAAK,CAAA;IAC/B,CAAC;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,IAAkB;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CACxF,CAAA;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IACnC,OAAO;QACL;YACE,KAAK,EAAE,UAAU;YACjB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,6BAA6B;SACxD;KACF,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAkB;IAC9C,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO;YACL;gBACE,KAAK,EAAE,kBAAkB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,sDAAsD;aAChE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,cAAc,CAAC,IAAkB;IACxC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACvE,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB;IACrC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC3C,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;QAC/B,OAAO;YACL;gBACE,KAAK,EAAE,QAAQ;gBACf,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,iBAAiB,SAAS,iBAAiB,cAAc,IAAI;aACvE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAkB;IAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC9C,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;QAC5B,OAAO;YACL;gBACE,KAAK,EAAE,aAAa;gBACpB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,0CAA0C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;aACxE;SACF,CAAA;IACH,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,IAAkB;IAC7C,MAAM,QAAQ,GAAG;QACf,GAAG,UAAU,CAAC,IAAI,CAAC;QACnB,GAAG,oBAAoB,CAAC,IAAI,CAAC;QAC7B,GAAG,qBAAqB,CAAC,IAAI,CAAC;QAC9B,GAAG,YAAY,CAAC,IAAI,CAAC;QACrB,GAAG,oBAAoB,CAAC,IAAI,CAAC;QAC7B,GAAG,cAAc,CAAC,IAAI,CAAC;QACvB,GAAG,WAAW,CAAC,IAAI,CAAC;QACpB,GAAG,gBAAgB,CAAC,IAAI,CAAC;KAC1B,CAAA;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAA;AACpC,CAAC"}

package/dist/seo/cannibalization.d.ts

@@ -0,0 +1,21 @@
+export interface CannibalizationCandidatePage {
+    readonly url: string;
+    readonly bodyText: string;
+}
+export interface CannibalizationPair {
+    readonly urlA: string;
+    readonly urlB: string;
+    readonly score: number;
+}
+export interface DetectCannibalizationOptions {
+    readonly threshold?: number;
+}
+/**
+ * "Détection de cannibalisation entre pages" — two *different* pages whose
+ * body text is topically near-identical compete for the same search intent
+ * instead of ranking for it together. Same embedding approach as
+ * `proposeInternalLinks`, but the signal here is a pair scoring above a high
+ * threshold, not a ranked list.
+ */
+export declare function detectCannibalization(pages: readonly CannibalizationCandidatePage[], options?: DetectCannibalizationOptions): Promise<readonly CannibalizationPair[]>;
+//# sourceMappingURL=cannibalization.d.ts.map