@cogenta/agents 0.2.1 → 0.5.0

package/dist/tools/core/content-browse.d.ts

@@ -0,0 +1,74 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+/**
+ * `content.collections` / `content.list` — L22 task 3's missing half:
+ * `content.ts`'s `content.read` needs an `id` an agent cannot get any other
+ * way, so nothing before this lot let an agent discover what a site
+ * publishes. Both tools are read-only, both share `content.read`'s
+ * permission (browsing is the same access as reading one entry, not a wider
+ * grant), and both are generically useful beyond the monitoring agent this
+ * task ships them for — an agent choosing where to point a stale link needs
+ * exactly what a future "find thin content" or "suggest internal links"
+ * agent would too.
+ *
+ * `path` on a list item is computed by the caller (`@cogenta/cli`'s
+ * `agent-runtime.ts`, which alone has both the entry's field values and the
+ * collection's route pattern) and is `null` for a collection with no public
+ * route, or a values shape `buildPath` cannot fill — a candidate an agent
+ * must not offer as a redirect target either way.
+ */
+export interface ContentBrowseAccessContext {
+    readonly actor: {
+        readonly id: string | null;
+        readonly roles: readonly string[];
+    };
+}
+export interface ContentCollectionSummaryLike {
+    readonly collection: string;
+    readonly total: number;
+    readonly published: number;
+    readonly routed: boolean;
+}
+export interface ContentListItemLike {
+    readonly id: string;
+    readonly title: string | null;
+    readonly path: string | null;
+    readonly status: string;
+}
+export interface ContentBrowseServiceLike {
+    /** Every collection this actor may read, with the same counts the dashboard's content summary widget uses. */
+    collections(context: ContentBrowseAccessContext): Promise<readonly ContentCollectionSummaryLike[]>;
+    /** `undefined` when `collection` does not exist, or this actor may not read it — never thrown, so the tool can turn it into a normal (non-crashing) tool error. */
+    list(context: ContentBrowseAccessContext, collection: string, options: {
+        readonly limit: number;
+    }): Promise<{
+        readonly items: readonly ContentListItemLike[];
+    } | undefined>;
+}
+declare const CollectionsOutputSchema: z.ZodObject<{
+    collections: z.ZodArray<z.ZodObject<{
+        collection: z.ZodString;
+        total: z.ZodNumber;
+        published: z.ZodNumber;
+        routed: z.ZodBoolean;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type CollectionsOutput = z.infer<typeof CollectionsOutputSchema>;
+export declare function createContentCollectionsTool(service: ContentBrowseServiceLike): ToolDefinition<Record<string, never>, CollectionsOutput>;
+declare const ListInputSchema: z.ZodObject<{
+    collection: z.ZodString;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type ListInput = z.infer<typeof ListInputSchema>;
+declare const ListOutputSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodNullable<z.ZodString>;
+        path: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type ListOutput = z.infer<typeof ListOutputSchema>;
+export declare function createContentListTool(service: ContentBrowseServiceLike): ToolDefinition<ListInput, ListOutput>;
+export {};
+//# sourceMappingURL=content-browse.d.ts.map

package/dist/tools/core/content-browse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-browse.d.ts","sourceRoot":"","sources":["../../../src/tools/core/content-browse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAClF;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,8GAA8G;IAC9G,WAAW,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAAA;IAClG,mKAAmK;IACnK,IAAI,CACF,OAAO,EAAE,0BAA0B,EACnC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAClC,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,mBAAmB,EAAE,CAAA;KAAE,GAAG,SAAS,CAAC,CAAA;CAC3E;AASD,QAAA,MAAM,uBAAuB;;;;;;;iBAS3B,CAAA;AACF,KAAK,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAA;AAEhE,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,GAChC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,iBAAiB,CAAC,CAiB1D;AAED,QAAA,MAAM,eAAe;;;iBAGnB,CAAA;AACF,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEhD,QAAA,MAAM,gBAAgB;;;;;;;iBASpB,CAAA;AACF,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAIlD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,wBAAwB,GAChC,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAmBvC"}

package/dist/tools/core/content-browse.js

@@ -0,0 +1,63 @@
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+function accessContextOf(actor) {
+    return { actor };
+}
+const CollectionsOutputSchema = z.object({
+    collections: z.array(z.object({
+        collection: z.string(),
+        total: z.number(),
+        published: z.number(),
+        routed: z.boolean(),
+    })),
+});
+export function createContentCollectionsTool(service) {
+    return defineTool({
+        name: 'content.collections',
+        version: '1.0.0',
+        description: 'List every content collection this actor may read, with its entry counts and whether it has a public URL — the starting point for finding a page to point somewhere.',
+        input: z.object({}),
+        output: CollectionsOutputSchema,
+        permissions: ['content.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(_input, ctx) {
+            const collections = await service.collections(accessContextOf(ctx.actor));
+            return { collections: [...collections] };
+        },
+    });
+}
+const ListInputSchema = z.object({
+    collection: z.string(),
+    limit: z.number().int().positive().max(50).optional(),
+});
+const ListOutputSchema = z.object({
+    items: z.array(z.object({
+        id: z.string(),
+        title: z.string().nullable(),
+        path: z.string().nullable(),
+        status: z.string(),
+    })),
+});
+const DEFAULT_LIST_LIMIT = 20;
+export function createContentListTool(service) {
+    return defineTool({
+        name: 'content.list',
+        version: '1.0.0',
+        description: 'List published entries of one collection (title, public path, status) — call content.collections first to discover collection names.',
+        input: ListInputSchema,
+        output: ListOutputSchema,
+        permissions: ['content.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            const page = await service.list(accessContextOf(ctx.actor), input.collection, {
+                limit: input.limit ?? DEFAULT_LIST_LIMIT,
+            });
+            return { items: page === undefined ? [] : [...page.items] };
+        },
+    });
+}
+//# sourceMappingURL=content-browse.js.map

package/dist/tools/core/content-browse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-browse.js","sourceRoot":"","sources":["../../../src/tools/core/content-browse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAkDzC,SAAS,eAAe,CAAC,KAGxB;IACC,OAAO,EAAE,KAAK,EAAE,CAAA;AAClB,CAAC;AAED,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,KAAK,CAClB,CAAC,CAAC,MAAM,CAAC;QACP,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;QACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;KACpB,CAAC,CACH;CACF,CAAC,CAAA;AAGF,MAAM,UAAU,4BAA4B,CAC1C,OAAiC;IAEjC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,sKAAsK;QACxK,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,uBAAuB;QAC/B,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG;YACvB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;YACzE,OAAO,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAA;QAC1C,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAA;AAGF,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CACH;CACF,CAAC,CAAA;AAGF,MAAM,kBAAkB,GAAG,EAAE,CAAA;AAE7B,MAAM,UAAU,qBAAqB,CACnC,OAAiC;IAEjC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,sIAAsI;QACxI,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,EAAE;gBAC5E,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,kBAAkB;aACzC,CAAC,CAAA;YACF,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;QAC7D,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/content-schema.d.ts

@@ -0,0 +1,86 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+import type { ContentBrowseAccessContext } from './content-browse.js';
+/**
+ * `content.schema` — the missing half of the browse pair (`content.
+ * collections`/`content.list`, L22 task 3): those answer "what entries
+ * exist", never "what shape does an entry take". `content.write_draft`'s
+ * `values` input is `z.record(z.string(), z.unknown())`, deliberately
+ * schema-blind (contract A's field set is open-ended, and the tool has no
+ * business re-validating what `ContentServiceLike.create`/`update` already
+ * validate) — which leaves an agent with no way to learn a collection's real
+ * field keys short of guessing or reverse-engineering an existing entry, and
+ * no way at all on a fresh collection with zero entries. A live run against
+ * "peux-tu générer un template ?" showed exactly this: the superagent had
+ * nothing to introspect, so it asked the human to specify everything.
+ *
+ * Read-only, and deliberately under the same permission as the browse pair:
+ * `content.read`. Describing a collection's *shape* is not a wider grant
+ * than reading one of its entries (the precedent this file follows is
+ * `content-browse.ts`'s own comment on the same point).
+ *
+ * The block vocabulary half needs no adapter and no permission check beyond
+ * the tool's own: it is contract B, static and site-independent, the same
+ * seventeen blocks on every Cogenta install. It is always present in the
+ * output, regardless of which (if any) collection was asked about, so an
+ * agent building a `blocks`-kind field's value never has to make a second
+ * call to learn what a "hero" block or a "prose" block actually holds.
+ */
+export interface CollectionFieldSummary {
+    readonly key: string;
+    readonly kind: string;
+    readonly label: string | null;
+    readonly required: boolean;
+    readonly options: Readonly<Record<string, unknown>>;
+}
+export interface CollectionSchemaSummary {
+    readonly collection: string;
+    readonly labelSingular: string;
+    readonly labelPlural: string;
+    readonly routed: boolean;
+    readonly fields: readonly CollectionFieldSummary[];
+}
+export interface ContentSchemaServiceLike {
+    /**
+     * Every collection's schema this actor may read, or just `collection`'s
+     * when given — `undefined` in `collection`'s place means "all". An
+     * unreadable or unknown named collection is silently omitted (mirrors
+     * `content-browse.ts`'s own `list()`), never thrown: a tool result says
+     * "nothing here", a thrown error would end the agent's turn over what is,
+     * from the model's point of view, an ordinary "try a different name".
+     */
+    describe(context: ContentBrowseAccessContext, collection?: string): Promise<readonly CollectionSchemaSummary[]>;
+}
+declare const OutputSchema: z.ZodObject<{
+    collections: z.ZodArray<z.ZodObject<{
+        collection: z.ZodString;
+        labelSingular: z.ZodString;
+        labelPlural: z.ZodString;
+        routed: z.ZodBoolean;
+        fields: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodString;
+            label: z.ZodNullable<z.ZodString>;
+            required: z.ZodBoolean;
+            options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    blocks: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        fields: z.ZodArray<z.ZodObject<{
+            key: z.ZodString;
+            kind: z.ZodString;
+            required: z.ZodBoolean;
+            options: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type Output = z.infer<typeof OutputSchema>;
+declare const InputSchema: z.ZodObject<{
+    collection: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type Input = z.infer<typeof InputSchema>;
+export declare function createContentSchemaTool(service: ContentSchemaServiceLike): ToolDefinition<Input, Output>;
+export {};
+//# sourceMappingURL=content-schema.d.ts.map

package/dist/tools/core/content-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-schema.d.ts","sourceRoot":"","sources":["../../../src/tools/core/content-schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAA;AAErE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CACpD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAA;CACnD;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;;;;OAOG;IACH,QAAQ,CACN,OAAO,EAAE,0BAA0B,EACnC,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAA;CAC/C;AA+BD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;iBAGhB,CAAA;AACF,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAE1C,QAAA,MAAM,WAAW;;iBAAkD,CAAA;AACnE,KAAK,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAoBxC,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,wBAAwB,GAChC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAgC/B"}

package/dist/tools/core/content-schema.js

@@ -0,0 +1,83 @@
+import { VOCABULARY } from '@cogenta/blocks';
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const BlockFieldOutputSchema = z.object({
+    key: z.string(),
+    kind: z.string(),
+    required: z.boolean(),
+    options: z.record(z.string(), z.unknown()),
+});
+const BlockOutputSchema = z.object({
+    name: z.string(),
+    version: z.string(),
+    fields: z.array(BlockFieldOutputSchema),
+});
+const CollectionFieldOutputSchema = z.object({
+    key: z.string(),
+    kind: z.string(),
+    label: z.string().nullable(),
+    required: z.boolean(),
+    options: z.record(z.string(), z.unknown()),
+});
+const CollectionSchemaOutputSchema = z.object({
+    collection: z.string(),
+    labelSingular: z.string(),
+    labelPlural: z.string(),
+    routed: z.boolean(),
+    fields: z.array(CollectionFieldOutputSchema),
+});
+const OutputSchema = z.object({
+    collections: z.array(CollectionSchemaOutputSchema),
+    blocks: z.array(BlockOutputSchema),
+});
+const InputSchema = z.object({ collection: z.string().optional() });
+/**
+ * Built once, from `@cogenta/blocks`' own `VOCABULARY` — a plain data
+ * mapping, not a query, so it costs nothing to compute on every call and
+ * needs no caching.
+ */
+function blockVocabularyOutput() {
+    return VOCABULARY.map((block) => ({
+        name: block.name,
+        version: block.version,
+        fields: Object.entries(block.schema).map(([key, field]) => ({
+            key,
+            kind: field.kind,
+            required: field.required,
+            options: field.options,
+        })),
+    }));
+}
+export function createContentSchemaTool(service) {
+    return defineTool({
+        name: 'content.schema',
+        version: '1.0.0',
+        description: "Describe one or every collection's field shape (key, kind, required, label, kind-specific options) and this site's fixed block vocabulary (block type name, version, and its own field shape) — the type/field names a blocks-kind field's array items may use. Call this before content.write_draft to know which field keys and value shapes a collection actually accepts, instead of guessing.",
+        input: InputSchema,
+        output: OutputSchema,
+        permissions: ['content.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input, ctx) {
+            const collections = await service.describe({ actor: ctx.actor }, input.collection);
+            return {
+                collections: collections.map((collection) => ({
+                    collection: collection.collection,
+                    labelSingular: collection.labelSingular,
+                    labelPlural: collection.labelPlural,
+                    routed: collection.routed,
+                    fields: collection.fields.map((field) => ({
+                        key: field.key,
+                        kind: field.kind,
+                        label: field.label,
+                        required: field.required,
+                        options: field.options,
+                    })),
+                })),
+                blocks: blockVocabularyOutput(),
+            };
+        },
+    });
+}
+//# sourceMappingURL=content-schema.js.map

package/dist/tools/core/content-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-schema.js","sourceRoot":"","sources":["../../../src/tools/core/content-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AA6DzC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC3C,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CACxC,CAAC,CAAA;AAEF,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;CAC3C,CAAC,CAAA;AAEF,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC;CAC7C,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;CACnC,CAAC,CAAA;AAGF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;AAGnE;;;;GAIG;AACH,SAAS,qBAAqB;IAC5B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;KACJ,CAAC,CAAC,CAAA;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,OAAiC;IAEjC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,oYAAoY;QACtY,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;YACtB,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;YAClF,OAAO;gBACL,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;oBAC5C,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,aAAa,EAAE,UAAU,CAAC,aAAa;oBACvC,WAAW,EAAE,UAAU,CAAC,WAAW;oBACnC,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACxC,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;wBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;qBACvB,CAAC,CAAC;iBACJ,CAAC,CAAC;gBACH,MAAM,EAAE,qBAAqB,EAAE;aAChC,CAAA;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/deps-scan.d.ts

@@ -0,0 +1,25 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+export interface DepsScanToolOptions {
+    /** Where this site's own `package.json` lives — `create-cogenta` always writes one at the project root. */
+    readonly projectRoot: string;
+    readonly readFileImpl?: (path: string) => Promise<string>;
+}
+declare const DepsScanInputSchema: z.ZodObject<{}, z.core.$strip>;
+type DepsScanInput = z.infer<typeof DepsScanInputSchema>;
+declare const DepsScanOutputSchema: z.ZodObject<{
+    scannedFile: z.ZodString;
+    totalDependencies: z.ZodNumber;
+    unpinned: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        range: z.ZodString;
+        kind: z.ZodEnum<{
+            dependencies: "dependencies";
+            devDependencies: "devDependencies";
+        }>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DepsScanOutput = z.infer<typeof DepsScanOutputSchema>;
+export declare function createDepsScanTool(options: DepsScanToolOptions): ToolDefinition<DepsScanInput, DepsScanOutput>;
+export {};
+//# sourceMappingURL=deps-scan.d.ts.map

package/dist/tools/core/deps-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-scan.d.ts","sourceRoot":"","sources":["../../../src/tools/core/deps-scan.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAsCjD,MAAM,WAAW,mBAAmB;IAClC,2GAA2G;IAC3G,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC1D;AAED,QAAA,MAAM,mBAAmB,gCAAe,CAAA;AACxC,KAAK,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAQxD,QAAA,MAAM,oBAAoB;;;;;;;;;;;iBAIxB,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAOjE,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,GAC3B,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC,CAiC/C"}

package/dist/tools/core/deps-scan.js

@@ -0,0 +1,85 @@
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+/**
+ * `deps.scan` — the built-in Security Scanner agent's (`agents/builtins.ts`)
+ * one real capability, "réutilise... les vérifications déjà documentées dans
+ * AGENTS.md" (L22 task 1 item 5): AGENTS.md's own R9 discipline names an
+ * unpinned/wildcard version as exactly the kind of dependency risk this
+ * project already cares about, so this tool reads the site's own
+ * `package.json` (read-only, no shell exec, no network — zero new
+ * dependency, R9/R10) and flags any dependency whose version specifier is
+ * not pinned in the loose sense semver tooling already treats as "someone
+ * decided this range on purpose": `^`, `~`, an exact version, or
+ * `workspace:*` inside this monorepo itself. `*`, `latest`, `x`, and a bare
+ * tag (`next`) are flagged — a site that ships one of these has no way to
+ * know what it will actually install on the next `npm install`.
+ *
+ * Deliberately narrow: this reads declared ranges, not installed versions or
+ * known CVEs (a real vulnerability database is a service dependency this
+ * tool does not take — R1). "Audit du journal d'audit pour des motifs
+ * suspects" (the other half the lot names for this agent) is not built here;
+ * see this task's closing report for why it is left as a documented
+ * follow-up rather than a second, rushed tool.
+ */
+const UNPINNED_PATTERN = /^(\*|x|latest|next)$/iu;
+function isUnpinned(range) {
+    const trimmed = range.trim();
+    if (trimmed.length === 0)
+        return true;
+    if (trimmed.startsWith('workspace:'))
+        return false;
+    if (UNPINNED_PATTERN.test(trimmed))
+        return true;
+    // A real semver range operator, or an exact version, or a URL/file spec —
+    // none of those are "we don't know what we'll get".
+    if (/^[\^~]?\d/u.test(trimmed))
+        return false;
+    if (/^(git|file|https?):/u.test(trimmed))
+        return false;
+    return true;
+}
+const DepsScanInputSchema = z.object({});
+const DependencyFindingSchema = z.object({
+    name: z.string(),
+    range: z.string(),
+    kind: z.enum(['dependencies', 'devDependencies']),
+});
+const DepsScanOutputSchema = z.object({
+    scannedFile: z.string(),
+    totalDependencies: z.number(),
+    unpinned: z.array(DependencyFindingSchema),
+});
+export function createDepsScanTool(options) {
+    const read = options.readFileImpl ?? ((path) => readFile(path, 'utf8'));
+    const packageJsonPath = join(options.projectRoot, 'package.json');
+    return defineTool({
+        name: 'deps.scan',
+        version: '1.0.0',
+        description: "Scan this site's own package.json for dependencies with an unpinned or wildcard version.",
+        input: DepsScanInputSchema,
+        output: DepsScanOutputSchema,
+        permissions: ['deps.scan'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute() {
+            const raw = await read(packageJsonPath);
+            const parsed = JSON.parse(raw);
+            const groups = ['dependencies', 'devDependencies'];
+            let total = 0;
+            const unpinned = [];
+            for (const kind of groups) {
+                const deps = parsed[kind] ?? {};
+                for (const [name, range] of Object.entries(deps)) {
+                    total += 1;
+                    if (isUnpinned(range))
+                        unpinned.push({ name, range, kind });
+                }
+            }
+            return { scannedFile: packageJsonPath, totalDependencies: total, unpinned };
+        },
+    });
+}
+//# sourceMappingURL=deps-scan.js.map

package/dist/tools/core/deps-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps-scan.js","sourceRoot":"","sources":["../../../src/tools/core/deps-scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,gBAAgB,GAAG,wBAAwB,CAAA;AAEjD,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAA;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,IAAI,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAA;IAClD,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAA;IAC/C,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5C,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACtD,OAAO,IAAI,CAAA;AACb,CAAC;AAQD,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAGxC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;CAClD,CAAC,CAAA;AAEF,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAC3C,CAAC,CAAA;AAQF,MAAM,UAAU,kBAAkB,CAChC,OAA4B;IAE5B,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/E,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,CAAA;IAEjE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,0FAA0F;QAC5F,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,oBAAoB;QAC5B,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO;YACX,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,CAAA;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAA;YAClD,MAAM,MAAM,GAAwC,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAA;YAEvF,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,MAAM,QAAQ,GAA+B,EAAE,CAAA;YAC/C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;gBAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,KAAK,IAAI,CAAC,CAAA;oBACV,IAAI,UAAU,CAAC,KAAK,CAAC;wBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC7D,CAAC;YACH,CAAC;YAED,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;QAC7E,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/media.d.ts

@@ -1,6 +1,22 @@
 import type { MediaAsset, MediaStore } from '@cogenta/core';
 import { z } from 'zod';
 import type { ToolDefinition } from '../types.js';
+/**
+ * `media.read`/`media.write`'s output shape — deliberately **not** the same
+ * type as `@cogenta/core`'s `MediaAsset` any more.
+ *
+ * Fiche 46 added `folderId` to `MediaAsset` (the media library's folder
+ * tree). Contract C (`docs/04-contrats.md`, ADR-0020) treats an existing
+ * tool's signature as figured: growing it — even by an additive field —
+ * needs a governance decision this session cannot make unilaterally (unlike
+ * contract A or D, contract C's own text carries no "additive is minor"
+ * exception for an already-shipped tool). Rather than touch it, `folderId`
+ * is stripped before this shape is built at all, so `media.read`/`.write`'s
+ * wire output is byte-for-byte what it was before this fiche — an agent
+ * asking to move a file between folders needs a new, separate tool, not
+ * this one grown quietly.
+ */
+type MediaToolAsset = Omit<MediaAsset, 'folderId'>;
 declare const ReadInputSchema: z.ZodObject<{
     id: z.ZodString;
 }, z.core.$strip>;
@@ -12,7 +28,7 @@ type ReadInput = z.infer<typeof ReadInputSchema>;
  * actual gate, enforced by the manifest before the call ever reaches the
  * store.
  */
-export declare function createMediaReadTool(store: MediaStore): ToolDefinition<ReadInput, MediaAsset>;
+export declare function createMediaReadTool(store: MediaStore): ToolDefinition<ReadInput, MediaToolAsset>;
 declare const WriteInputSchema: z.ZodObject<{
     id: z.ZodString;
     alt: z.ZodOptional<z.ZodString>;
@@ -33,6 +49,6 @@ type WriteInput = z.infer<typeof WriteInputSchema>;
  * editing an existing asset's accessibility metadata, which is the concrete
  * use case this tool exists for (e.g. an accessibility-review agent).
  */
-export declare function createMediaWriteTool(store: MediaStore): ToolDefinition<WriteInput, MediaAsset>;
+export declare function createMediaWriteTool(store: MediaStore): ToolDefinition<WriteInput, MediaToolAsset>;
 export {};
 //# sourceMappingURL=media.d.ts.map

package/dist/tools/core/media.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,eAAe,CAAA;AAE7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAqBjD,QAAA,MAAM,eAAe;;iBAA+B,CAAA;AACpD,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEhD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,CAuB5F;AAED,QAAA,MAAM,gBAAgB;;;;;;;;;iBAMpB,CAAA;AACF,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAElD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC,UAAU,EAAE,UAAU,CAAC,CAuB9F"}
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,eAAe,CAAA;AAE7E,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD;;;;;;;;;;;;;;GAcG;AACH,KAAK,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;AA0BlD,QAAA,MAAM,eAAe;;iBAA+B,CAAA;AACpD,KAAK,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEhD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,GAAG,cAAc,CAAC,SAAS,EAAE,cAAc,CAAC,CAuBhG;AAED,QAAA,MAAM,gBAAgB;;;;;;;;;iBAMpB,CAAA;AACF,KAAK,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAElD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,UAAU,GAChB,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC,CAuB5C"}

package/dist/tools/core/media.js

@@ -2,6 +2,10 @@ import { CogentaError } from '@cogenta/core';
 import { z } from 'zod';
 import { defineTool } from '../define.js';
 const FocalPointSchema = z.object({ x: z.number(), y: z.number() });
+function toToolAsset(asset) {
+    const { folderId: _folderId, ...rest } = asset;
+    return rest;
+}
 const MediaAssetSchema = z.object({
     id: z.string(),
     kind: z.enum(['image', 'video', 'audio', 'file']),
@@ -15,6 +19,8 @@ const MediaAssetSchema = z.object({
     decorativeJustification: z.string().nullable(),
     focal: FocalPointSchema.nullable(),
     storageKey: z.string(),
+    tags: z.array(z.string()),
+    contentHash: z.string(),
     createdAt: z.string(),
     createdBy: z.string().nullable(),
 });
@@ -46,7 +52,7 @@ export function createMediaReadTool(store) {
                     hint: 'Check the id, or list media to find the right one.',
                 });
             }
-            return asset;
+            return toToolAsset(asset);
         },
     });
 }
@@ -86,7 +92,7 @@ export function createMediaWriteTool(store) {
                     : { decorativeJustification: input.decorativeJustification }),
                 ...(input.focal === undefined ? {} : { focal: input.focal }),
             };
-            return store.update(input.id, update);
+            return toToolAsset(await store.update(input.id, update));
         },
     });
 }

package/dist/tools/core/media.js.map

@@ -1 +1 @@
-{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAEnE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAiC,CAAA;AAElC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAGpD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,2BAA2B,KAAK,CAAC,EAAE,IAAI;oBAChD,IAAI,EAAE,oDAAoD;iBAC3D,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IACpD,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mEAAmE;QAChF,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAqB;gBAC/B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7D,CAAA;YACD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../src/tools/core/media.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAGzC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAmBnE,SAAS,WAAW,CAAC,KAAiB;IACpC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAA;IAC9C,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAqC,CAAA;AAEtC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAGpD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAiB;IACnD,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,eAAe;QACtB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YACvC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,2BAA2B,KAAK,CAAC,EAAE,IAAI;oBAChD,IAAI,EAAE,oDAAoD;iBAC3D,CAAC,CAAA;YACJ,CAAC;YACD,OAAO,WAAW,CAAC,KAAK,CAAC,CAAA;QAC3B,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,KAAK,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAA;AAGF;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAiB;IAEjB,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,mEAAmE;QAChF,KAAK,EAAE,gBAAgB;QACvB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,MAAM,GAAqB;gBAC/B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;aAC7D,CAAA;YACD,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAA;QAC1D,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/tools/core/not-found-log.d.ts

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+import type { ToolDefinition } from '../types.js';
+/**
+ * `logs.read_not_found` — L22 task 3, "le superagent avec accès aux
+ * journaux (jamais au code source)". This is the one log this lot wires an
+ * agent to: the 404 log `@cogenta/schema`'s `NotFoundLogStore` has kept
+ * since fiche 12, never previously reachable from a tool. It carries a path,
+ * a hit count and timestamps — no request body, no header, no IP, no user
+ * agent (the store's own doc comment says why: `AGENTS.md` § Logs forbids
+ * either) — so there is nothing here for R8 to worry about beyond what
+ * `assembleContext`'s `data` channel already does for any external text.
+ *
+ * A narrow structural type, not the full `NotFoundLogStore`, for the same
+ * reason `content.ts`'s `ContentServiceLike` is narrow: this tool only ever
+ * reads.
+ */
+export interface NotFoundLogReader {
+    list(options?: {
+        readonly limit?: number;
+    }): Promise<readonly {
+        readonly path: string;
+        readonly hits: number;
+        readonly firstSeen: number;
+        readonly lastSeen: number;
+        readonly lastReferrer: string | null;
+    }[]>;
+}
+declare const InputSchema: z.ZodObject<{
+    limit: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+type Input = z.infer<typeof InputSchema>;
+declare const OutputSchema: z.ZodObject<{
+    entries: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        hits: z.ZodNumber;
+        firstSeen: z.ZodNumber;
+        lastSeen: z.ZodNumber;
+        lastReferrer: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+type Output = z.infer<typeof OutputSchema>;
+export declare function createNotFoundLogReadTool(store: NotFoundLogReader): ToolDefinition<Input, Output>;
+export {};
+//# sourceMappingURL=not-found-log.d.ts.map

package/dist/tools/core/not-found-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-found-log.d.ts","sourceRoot":"","sources":["../../../src/tools/core/not-found-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAEjD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAClD,SAAS;QACP,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;QACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KACrC,EAAE,CACJ,CAAA;CACF;AAED,QAAA,MAAM,WAAW;;iBAGf,CAAA;AACF,KAAK,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAUxC,QAAA,MAAM,YAAY;;;;;;;;iBAA8C,CAAA;AAChE,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAE1C,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,iBAAiB,GAAG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAiBjG"}

package/dist/tools/core/not-found-log.js

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+import { defineTool } from '../define.js';
+const InputSchema = z.object({
+    /** Highest hit count first, same default and cap as the admin's own `/api/not-found`. */
+    limit: z.number().int().positive().max(200).optional(),
+});
+const EntrySchema = z.object({
+    path: z.string(),
+    hits: z.number(),
+    firstSeen: z.number(),
+    lastSeen: z.number(),
+    lastReferrer: z.string().nullable(),
+});
+const OutputSchema = z.object({ entries: z.array(EntrySchema) });
+export function createNotFoundLogReadTool(store) {
+    return defineTool({
+        name: 'logs.read_not_found',
+        version: '1.0.0',
+        description: "Read this site's log of public URLs that answered a 404, sorted by hit count — the paths worth investigating first.",
+        input: InputSchema,
+        output: OutputSchema,
+        permissions: ['logs.read'],
+        sideEffects: false,
+        reversible: false,
+        cost: 'low',
+        async execute(input) {
+            const entries = await store.list(input.limit === undefined ? {} : { limit: input.limit });
+            return { entries: [...entries] };
+        },
+    });
+}
+//# sourceMappingURL=not-found-log.js.map

package/dist/tools/core/not-found-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"not-found-log.js","sourceRoot":"","sources":["../../../src/tools/core/not-found-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AA6BzC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,yFAAyF;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAA;AAGF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAA;AAEF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;AAGhE,MAAM,UAAU,yBAAyB,CAAC,KAAwB;IAChE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;QAChB,WAAW,EACT,qHAAqH;QACvH,KAAK,EAAE,WAAW;QAClB,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,CAAC,WAAW,CAAC;QAC1B,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,KAAK;QACjB,IAAI,EAAE,KAAK;QACX,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAA;YACzF,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAA;QAClC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}