@canonry/canonry 4.117.1 → 4.118.0

package/dist/{chunk-BMBHUFMI.js → chunk-75UBTCKS.js}

@@ -3,6 +3,14 @@ import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   DISCOVERY_MAX_PROBES_CAP,
   DISCOVERY_PROBE_CONCURRENCY_CAP,
+  adsAdCreateRequestSchema,
+  adsAdGroupCreateRequestSchema,
+  adsAdGroupUpdateRequestSchema,
+  adsAdUpdateRequestSchema,
+  adsCampaignCreateRequestSchema,
+  adsCampaignUpdateRequestSchema,
+  adsImageUploadRequestSchema,
+  adsPauseRequestSchema,
   backlinkSourceSchema,
   competitorBatchRequestSchema,
   discoveryBucketSchema,
@@ -25,7 +33,7 @@ import {
   trafficConnectVercelRequestSchema,
   trafficConnectWordpressRequestSchema,
   trafficEventKindSchema
-} from "./chunk-IAJ5TQ4S.js";
+} from "./chunk-KEZWLP4O.js";
 
 // src/config.ts
 import fs from "fs";
@@ -1506,6 +1514,18 @@ var getApiV1ProjectsByNameHistory = (options) => {
     ...options
   });
 };
+var getApiV1History = (options) => {
+  return (options?.client ?? client).get({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/history",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameSnapshots = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -2310,18 +2330,34 @@ var getApiV1ProjectsByNameAdsStatus = (options) => {
     ...options
   });
 };
-var postApiV1ProjectsByNameAdsSync = (options) => {
-  return (options.client ?? client).post({
+var getApiV1ProjectsByNameAdsOperationsByOperationKey = (options) => {
+  return (options.client ?? client).get({
     security: [
       {
         scheme: "bearer",
         type: "http"
       }
     ],
-    url: "/api/v1/projects/{name}/ads/sync",
+    url: "/api/v1/projects/{name}/ads/operations/{operationKey}",
     ...options
   });
 };
+var postApiV1ProjectsByNameAdsFiles = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/files",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
 var getApiV1ProjectsByNameAdsCampaigns = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -2334,6 +2370,162 @@ var getApiV1ProjectsByNameAdsCampaigns = (options) => {
     ...options
   });
 };
+var postApiV1ProjectsByNameAdsCampaigns = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/campaigns",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAdGroups = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ad-groups",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAds = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ads",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsCampaignsById = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/campaigns/{id}",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAdGroupsById = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ad-groups/{id}",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAdsById = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ads/{id}",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsCampaignsByIdPause = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/campaigns/{id}/pause",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAdGroupsByIdPause = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ad-groups/{id}/pause",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsAdsByIdPause = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/ads/{id}/pause",
+    ...options,
+    headers: {
+      "Content-Type": "application/json",
+      ...options.headers
+    }
+  });
+};
+var postApiV1ProjectsByNameAdsSync = (options) => {
+  return (options.client ?? client).post({
+    security: [
+      {
+        scheme: "bearer",
+        type: "http"
+      }
+    ],
+    url: "/api/v1/projects/{name}/ads/sync",
+    ...options
+  });
+};
 var getApiV1ProjectsByNameAdsInsights = (options) => {
   return (options.client ?? client).get({
     security: [
@@ -3961,6 +4153,47 @@ var ApiClient = class {
       })
     );
   }
+  /** Download the versioned historical answer-engine results attachment. */
+  async downloadResultsExport(project, opts) {
+    await this.probeBasePath();
+    const params = new URLSearchParams({ format: opts.format });
+    if (opts.since) params.set("since", opts.since);
+    if (opts.until) params.set("until", opts.until);
+    if (opts.includeProbes) params.set("includeProbes", "true");
+    const url = `${this.originUrl}/api/v1/projects/${encodeURIComponent(project)}/results/export?${params.toString()}`;
+    let res;
+    try {
+      res = await fetch(url, {
+        headers: { Authorization: `Bearer ${this.apiKey}` }
+      });
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      if (message.includes("fetch failed") || message.includes("ECONNREFUSED") || message.includes("connect ECONNREFUSED")) {
+        throw new CliError({
+          code: "CONNECTION_ERROR",
+          message: `Could not connect to canonry server at ${this.originUrl}. Start it with "canonry serve".`,
+          exitCode: EXIT_SYSTEM_ERROR
+        });
+      }
+      throw new CliError({ code: "CONNECTION_ERROR", message, exitCode: EXIT_SYSTEM_ERROR });
+    }
+    if (!res.ok) {
+      let body = null;
+      try {
+        body = await res.json();
+      } catch {
+      }
+      const error = body && typeof body === "object" && "error" in body ? body.error : void 0;
+      throw new CliError({
+        code: error?.code ?? "API_ERROR",
+        message: error?.message ?? `HTTP ${res.status}: ${res.statusText}`,
+        exitCode: res.status >= 500 ? EXIT_SYSTEM_ERROR : EXIT_USER_ERROR,
+        details: { ...error?.details ?? {}, httpStatus: res.status }
+      });
+    }
+    const filename = /filename\s*=\s*"?([^";]+)"?/i.exec(res.headers.get("content-disposition") ?? "")?.[1] ?? `canonry-results-${project}.${opts.format}`;
+    return { content: await res.text(), filename };
+  }
   // ── Queries / keywords / competitors ────────────────────────────────────
   async putQueries(project, queries) {
     await this.invoke(
@@ -4083,14 +4316,19 @@ var ApiClient = class {
   async cancelRun(id) {
     return this.invoke(() => postApiV1RunsByIdCancel({ client: this.heyClient, path: { id } }));
   }
-  async getTimeline(project, location) {
+  async getTimeline(project, location, limit) {
     return this.invoke(
-      () => getApiV1ProjectsByNameTimeline({ client: this.heyClient, path: { name: project }, query: { location } })
+      () => getApiV1ProjectsByNameTimeline({ client: this.heyClient, path: { name: project }, query: { location, limit } })
     );
   }
-  async getHistory(project) {
+  async getHistory(project, opts) {
     return this.invoke(
-      () => getApiV1ProjectsByNameHistory({ client: this.heyClient, path: { name: project } })
+      () => getApiV1ProjectsByNameHistory({ client: this.heyClient, path: { name: project }, query: opts })
+    );
+  }
+  async getGlobalHistory(opts) {
+    return this.invoke(
+      () => getApiV1History({ client: this.heyClient, query: opts })
     );
   }
   async getSnapshots(project, opts) {
@@ -4386,6 +4624,88 @@ var ApiClient = class {
       () => getApiV1ProjectsByNameAdsSummary({ client: this.heyClient, path: { name: project } })
     );
   }
+  async getAdsOperation(project, operationKey) {
+    return this.invoke(
+      () => getApiV1ProjectsByNameAdsOperationsByOperationKey({
+        client: this.heyClient,
+        path: { name: project, operationKey }
+      })
+    );
+  }
+  async uploadAdsImage(project, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsFiles({ client: this.heyClient, path: { name: project }, body })
+    );
+  }
+  async createAdsCampaign(project, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsCampaigns({ client: this.heyClient, path: { name: project }, body })
+    );
+  }
+  async updateAdsCampaign(project, campaignId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsCampaignsById({
+        client: this.heyClient,
+        path: { name: project, id: campaignId },
+        body
+      })
+    );
+  }
+  async pauseAdsCampaign(project, campaignId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsCampaignsByIdPause({
+        client: this.heyClient,
+        path: { name: project, id: campaignId },
+        body
+      })
+    );
+  }
+  async createAdsAdGroup(project, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAdGroups({ client: this.heyClient, path: { name: project }, body })
+    );
+  }
+  async updateAdsAdGroup(project, adGroupId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAdGroupsById({
+        client: this.heyClient,
+        path: { name: project, id: adGroupId },
+        body
+      })
+    );
+  }
+  async pauseAdsAdGroup(project, adGroupId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAdGroupsByIdPause({
+        client: this.heyClient,
+        path: { name: project, id: adGroupId },
+        body
+      })
+    );
+  }
+  async createAdsAd(project, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAds({ client: this.heyClient, path: { name: project }, body })
+    );
+  }
+  async updateAdsAd(project, adId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAdsById({
+        client: this.heyClient,
+        path: { name: project, id: adId },
+        body
+      })
+    );
+  }
+  async pauseAdsAd(project, adId, body) {
+    return this.invoke(
+      () => postApiV1ProjectsByNameAdsAdsByIdPause({
+        client: this.heyClient,
+        path: { name: project, id: adId },
+        body
+      })
+    );
+  }
   async listGbpMetrics(project, opts) {
     return this.invoke(
       () => getApiV1ProjectsByNameGbpMetrics({
@@ -4871,9 +5191,9 @@ var ApiClient = class {
     );
   }
   // ── Technical AEO (site-audit) ──────────────────────────────────────────
-  async getTechnicalAeoScore(project) {
+  async getTechnicalAeoScore(project, opts) {
     return this.invoke(
-      () => getApiV1ProjectsByNameTechnicalAeo({ client: this.heyClient, path: { name: project } })
+      () => getApiV1ProjectsByNameTechnicalAeo({ client: this.heyClient, path: { name: project }, query: { runId: opts?.runId } })
     );
   }
   async getTechnicalAeoPages(project, opts) {
@@ -4882,6 +5202,7 @@ var ApiClient = class {
         client: this.heyClient,
         path: { name: project },
         query: {
+          runId: opts?.runId,
           status: opts?.status,
           sort: opts?.sort,
           limit: opts?.limit !== void 0 ? String(opts.limit) : void 0,
@@ -5379,8 +5700,19 @@ var runGetInputSchema = z2.object({
 });
 var timelineInputSchema = z2.object({
   project: projectNameSchema,
-  location: z2.string().optional().describe("Location label. Use an empty string for locationless results.")
+  location: z2.string().optional().describe("Location label. Use an empty string for locationless results."),
+  limit: z2.number().int().positive().max(100).optional().describe("Restrict history to the most recent N project runs.")
 });
+var historyFilterShape = {
+  limit: z2.number().int().positive().max(500).optional(),
+  offset: z2.number().int().nonnegative().optional(),
+  since: z2.string().optional().describe("ISO 8601 lower bound."),
+  action: z2.string().optional().describe("Exact audit action filter."),
+  actor: z2.string().optional().describe("Exact actor filter."),
+  entityType: z2.string().optional().describe("Exact entity type filter.")
+};
+var projectHistoryInputSchema = z2.object({ project: projectNameSchema, ...historyFilterShape });
+var globalHistoryInputSchema = z2.object(historyFilterShape);
 var snapshotsListInputSchema = z2.object({
   project: projectNameSchema,
   limit: z2.number().int().positive().max(500).optional(),
@@ -5484,6 +5816,56 @@ var adsInsightsInputSchema = z2.object({
   from: z2.string().optional(),
   to: z2.string().optional()
 });
+var adsOperationInputSchema = z2.object({
+  project: projectNameSchema,
+  operationKey: z2.string().min(8).max(128)
+});
+var adsImageUploadInputSchema = z2.object({
+  project: projectNameSchema,
+  request: adsImageUploadRequestSchema
+});
+var adsCampaignCreateInputSchema = z2.object({
+  project: projectNameSchema,
+  request: adsCampaignCreateRequestSchema
+});
+var adsCampaignUpdateInputSchema = z2.object({
+  project: projectNameSchema,
+  campaignId: z2.string().min(1),
+  request: adsCampaignUpdateRequestSchema
+});
+var adsCampaignPauseInputSchema = z2.object({
+  project: projectNameSchema,
+  campaignId: z2.string().min(1),
+  request: adsPauseRequestSchema
+});
+var adsAdGroupCreateInputSchema = z2.object({
+  project: projectNameSchema,
+  request: adsAdGroupCreateRequestSchema
+});
+var adsAdGroupUpdateInputSchema = z2.object({
+  project: projectNameSchema,
+  adGroupId: z2.string().min(1),
+  request: adsAdGroupUpdateRequestSchema
+});
+var adsAdGroupPauseInputSchema = z2.object({
+  project: projectNameSchema,
+  adGroupId: z2.string().min(1),
+  request: adsPauseRequestSchema
+});
+var adsAdCreateInputSchema = z2.object({
+  project: projectNameSchema,
+  request: adsAdCreateRequestSchema
+});
+var adsAdUpdateInputSchema = z2.object({
+  project: projectNameSchema,
+  adId: z2.string().min(1),
+  request: adsAdUpdateRequestSchema
+});
+var adsAdPauseInputSchema = z2.object({
+  project: projectNameSchema,
+  adId: z2.string().min(1),
+  request: adsPauseRequestSchema
+});
 var keywordsInputSchema = z2.object({
   project: projectNameSchema,
   request: keywordBatchRequestSchema
@@ -5631,10 +6013,12 @@ var discoveryPromoteInputSchema = z2.object({
   }).optional()
 });
 var technicalAeoScoreInputSchema = z2.object({
-  project: projectNameSchema
+  project: projectNameSchema,
+  runId: runIdSchema.optional().describe("Historical site-audit run ID. Omit for the latest audit.")
 });
 var technicalAeoPagesInputSchema = z2.object({
   project: projectNameSchema,
+  runId: runIdSchema.optional().describe("Historical site-audit run ID. Omit for the latest audit."),
   status: z2.enum(["success", "error"]).optional().describe("Filter to successfully-audited or errored pages."),
   sort: z2.enum(["score-asc", "score-desc", "url"]).optional().describe("Sort order. Defaults to score-asc (worst pages first)."),
   limit: z2.number().int().positive().max(500).optional(),
@@ -5793,10 +6177,28 @@ var canonryMcpTools = [
     description: "Get audit history for a Canonry project.",
     access: "read",
     tier: "monitoring",
-    inputSchema: projectInputSchema,
+    inputSchema: projectHistoryInputSchema,
     annotations: readAnnotations(),
     openApiOperations: ["GET /api/v1/projects/{name}/history"],
-    handler: (client2, input) => client2.getHistory(input.project)
+    handler: (client2, input) => client2.getHistory(input.project, {
+      limit: input.limit,
+      offset: input.offset,
+      since: input.since,
+      action: input.action,
+      actor: input.actor,
+      entityType: input.entityType
+    })
+  }),
+  defineTool({
+    name: "canonry_history_global",
+    title: "Get instance history",
+    description: "Get the instance-wide audit trail, including retained entries whose project was deleted. Full-instance keys only; project-scoped keys remain limited to their project.",
+    access: "read",
+    tier: "monitoring",
+    inputSchema: globalHistoryInputSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/history"],
+    handler: (client2, input) => client2.getGlobalHistory(input)
   }),
   defineTool({
     name: "canonry_runs_list",
@@ -5840,7 +6242,7 @@ var canonryMcpTools = [
     inputSchema: timelineInputSchema,
     annotations: readAnnotations(),
     openApiOperations: ["GET /api/v1/projects/{name}/timeline"],
-    handler: (client2, input) => client2.getTimeline(input.project, input.location)
+    handler: (client2, input) => client2.getTimeline(input.project, input.location, input.limit)
   }),
   defineTool({
     name: "canonry_snapshots_list",
@@ -6953,7 +7355,7 @@ var canonryMcpTools = [
     inputSchema: technicalAeoScoreInputSchema,
     annotations: readAnnotations(),
     openApiOperations: ["GET /api/v1/projects/{name}/technical-aeo"],
-    handler: (client2, input) => client2.getTechnicalAeoScore(input.project)
+    handler: (client2, input) => client2.getTechnicalAeoScore(input.project, { runId: input.runId })
   }),
   defineTool({
     name: "canonry_technical_aeo_pages",
@@ -6965,6 +7367,7 @@ var canonryMcpTools = [
     annotations: readAnnotations(),
     openApiOperations: ["GET /api/v1/projects/{name}/technical-aeo/pages"],
     handler: (client2, input) => client2.getTechnicalAeoPages(input.project, {
+      runId: input.runId,
       status: input.status,
       sort: input.sort,
       limit: input.limit,
@@ -7041,6 +7444,127 @@ var canonryMcpTools = [
     openApiOperations: ["GET /api/v1/projects/{name}/ads/summary"],
     handler: (client2, input) => client2.getAdsSummary(input.project)
   }),
+  defineTool({
+    name: "canonry_ads_operation_get",
+    title: "Get an ads mutation receipt",
+    description: "Read the durable receipt for an OpenAI Ads mutation by its caller-supplied operation key. A pending or unknown receipt must be reconciled by a human; never retry it with a new key because the upstream request may already have succeeded.",
+    access: "read",
+    tier: "ads",
+    inputSchema: adsOperationInputSchema,
+    annotations: readAnnotations(),
+    openApiOperations: ["GET /api/v1/projects/{name}/ads/operations/{operationKey}"],
+    handler: (client2, input) => client2.getAdsOperation(input.project, input.operationKey)
+  }),
+  defineTool({
+    name: "canonry_ads_image_upload",
+    title: "Upload an ads image from URL",
+    description: "Upload a public HTTPS image URL to the connected OpenAI ad account. The operation key makes a repeated identical request replay its receipt without another upstream upload. Save the returned file entityId for chat-card creation.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsImageUploadInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/files"],
+    handler: (client2, input) => client2.uploadAdsImage(input.project, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_campaign_create",
+    title: "Create a paused ads campaign",
+    description: "Create an OpenAI Ads campaign PAUSED with an explicit lifetime spend limit and location allowlist. The server ignores any status concept and always sends paused. Inspect the receipt, then create paused ad groups and ads. Activation is deliberately human-only for the beta.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsCampaignCreateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/campaigns"],
+    handler: (client2, input) => client2.createAdsCampaign(input.project, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_campaign_update",
+    title: "Update an ads campaign",
+    description: "Update a PAUSED campaign copy, dates, lifetime spend limit, or locations without changing status. Active campaigns fail closed: pause first, sync, and use the refreshed upstreamUpdatedAt. A human must reactivate after reviewing the change. Uses a durable operation key.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsCampaignUpdateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, destructiveHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/campaigns/{id}"],
+    handler: (client2, input) => client2.updateAdsCampaign(input.project, input.campaignId, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_campaign_pause",
+    title: "Pause an ads campaign",
+    description: "Pause a campaign immediately. Use this first when spend, conversion tracking, landing-page behavior, or policy status is unsafe. The operation is idempotent through its durable operation key.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsCampaignPauseInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/campaigns/{id}/pause"],
+    handler: (client2, input) => client2.pauseAdsCampaign(input.project, input.campaignId, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_group_create",
+    title: "Create a paused ads ad group",
+    description: "Create a PAUSED ad group under a reviewed campaign. Context hints describe when the audit offer is useful; maxBidMicros is an impression bid. The server fixes the billing event to impression.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdGroupCreateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ad-groups"],
+    handler: (client2, input) => client2.createAdsAdGroup(input.project, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_group_update",
+    title: "Update an ads ad group",
+    description: "Update a PAUSED ad group name, description, context hints, or impression bid without changing status. Active ad groups fail closed: pause first, sync, and use the refreshed upstreamUpdatedAt. A human must reactivate after review. Uses a durable operation key.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdGroupUpdateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, destructiveHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ad-groups/{id}"],
+    handler: (client2, input) => client2.updateAdsAdGroup(input.project, input.adGroupId, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_group_pause",
+    title: "Pause an ads ad group",
+    description: "Pause an ad group through a durable idempotent operation receipt.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdGroupPauseInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ad-groups/{id}/pause"],
+    handler: (client2, input) => client2.pauseAdsAdGroup(input.project, input.adGroupId, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_create",
+    title: "Create a paused chat-card ad",
+    description: "Create a PAUSED ChatGPT chat-card ad using a previously uploaded file entityId and an HTTPS destination. Title is 3-50 characters and body is at most 100. Activation is deliberately human-only for the beta.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdCreateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ads"],
+    handler: (client2, input) => client2.createAdsAd(input.project, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_update",
+    title: "Update a chat-card ad",
+    description: "Update a PAUSED ad name or full chat-card creative without changing status. Active ads fail closed: pause first, sync, and use the refreshed upstreamUpdatedAt. A human must reactivate after review. Uses a durable operation key.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdUpdateInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, destructiveHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ads/{id}"],
+    handler: (client2, input) => client2.updateAdsAd(input.project, input.adId, input.request)
+  }),
+  defineTool({
+    name: "canonry_ads_ad_pause",
+    title: "Pause a chat-card ad",
+    description: "Pause an individual ad through a durable idempotent operation receipt.",
+    access: "write",
+    tier: "ads",
+    inputSchema: adsAdPauseInputSchema,
+    annotations: writeAnnotations({ idempotentHint: true, openWorldHint: true }),
+    openApiOperations: ["POST /api/v1/projects/{name}/ads/ads/{id}/pause"],
+    handler: (client2, input) => client2.pauseAdsAd(input.project, input.adId, input.request)
+  }),
   defineTool({
     name: "canonry_ads_sync",
     title: "Trigger ads sync",