@kaminari-ad/mcp 0.18.0 → 0.22.0

package/CHANGELOG.md

@@ -7,6 +7,142 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.22.0] - 2026-09-15
+
+### Changed
+
+- **`regexp_request_url` and `regexp_request_body` accept the creative
+  surface.** Both were rejected locally with anything but `target='page'`,
+  which made the rule that catches an exploit kit embedded in a banner
+  unauthorable: that kit is a script inside the creative's own iframe and
+  appears on no landing page's request list. Both now take `'page'`,
+  `'creative'` or `'creative_and_page'` (evaluated on each surface, every
+  match reporting the one it came from), matching what the API validates.
+  Tool descriptions updated with it, since an agent picks the target from
+  them.
+
+  Requires the API-side deploy that widens the same validator. Until it
+  lands, production rejects the two new targets with HTTP 422.
+
+## [0.21.0] - 2026-09-14
+
+> Requires the API-side KAMIAD-177 deploy. Until it lands, production
+> rejects `ignore_first_n_domains` as an unknown body field, so do not tag
+> this release ahead of the API.
+
+### Added
+
+- **`ignore_first_n_domains` on `create_campaign`, `update_campaign`,
+  `create_scan` and `create_bulk_scans`.** A check that enters through the
+  caller's own click or tracking domains used to have those domains rated
+  by every domain checker, so a reputation hit on the caller's own
+  infrastructure tagged the material and raised an alert that said nothing
+  about the offer. The new field (0-5, default 0) drops the first N unique
+  domains of the redirect chain, counted from the entry point, from
+  detection and tagging. Domains fold to their registrable form, so
+  `www.example.com` and `example.com` consume one slot between them, and
+  sub-requests made from a skipped domain are excluded too.
+
+  Deliberately NOT nullable, unlike `referrer` and `max_discovered_ads`
+  next to it: `0` is both the default and the reset, so a nullable variant
+  would only offer an agent a second spelling the API answers with a 422.
+  The shared `.describe()` text warns that a skipped domain is checked by
+  nothing, because the failure mode of guessing high is a hidden finding
+  rather than an error.
+
+  `CampaignResponse` and `ScanResponse` both echo the field, so an agent can
+  read back what a campaign will do and how much of a finished scan's chain
+  was excluded — the latter is the only way to answer that once the campaign
+  behind the scan has been edited. Parsed as optional rather than defaulted
+  to 0: an api that predates the field says nothing, and inventing a 0 would
+  claim the scan skipped nothing when the truth is unknown.
+
+  The generated schemas were left alone: the field is declared through the
+  same port-side intersection `max_discovered_ads` uses, because
+  `gen:api-types` reads the DEPLOYED spec and cannot see an unshipped
+  field. The next regen absorbs it and the intersections can go.
+
+## [0.20.0] - 2026-09-13
+
+### Added
+
+- **`set_default_policy_set`** — mark or clear an owned policy set as
+  the organization's default for new campaigns (`POST /api/v1/policy-sets/{id}/set-default`).
+  `list_policy_sets` / `get_policy_set` now surface `is_default`. Omit
+  `policy_set_id` on `create_campaign` to bind that default; pass
+  `null` to create an unbound campaign.
+
+## [0.19.1] - 2026-09-10
+
+> Requires the API-side KAMIAD-104 deploy. Until it lands, production
+> rejects `invoice_payment_adjustment` as an unknown query enum (422,
+> surfaced as an `invalid_input` tool error), so do not tag this release
+> ahead of the API.
+
+### Fixed
+
+- **`list_balance_history` can filter on `invoice_payment_adjustment`.**
+  The API gained this `BalanceTransactionType` upstream (KAMIAD-104):
+  correcting an already-settled invoice appends a signed correction row
+  rather than editing the original `invoice_settlement`. Once the API
+  ships, an unfiltered call will return such rows without a parser change
+  — the response schema holds `type` as a plain string — but the filter
+  enum rejected the value, so an agent could neither select nor exclude
+  corrections. Same class of gap as `card_top_up` in 0.13.0, hence a
+  patch. No tool signature changed.
+
+  The two generated schemas were hand-edited rather than regenerated,
+  because `gen:api-types` defaults to the production spec and would drag
+  in unrelated drift that is not on this branch. Each hunk was verified
+  byte-equivalent to what a regen against the branch spec produces.
+
+### Security
+
+- Cleared the three advisory clusters that `audit:deps` flagged, taking
+  `npm audit` from 9 findings (5 high, 4 moderate) to zero. `vitest` and
+  its `@vitest/*` siblings 4.1.6 → 4.1.11 (GHSA-82fw-gwwq-j7x9) and the
+  `js-yaml` override 4.3.1 → 4.3.2 (GHSA-2883-xcg3-v3hh) are both
+  dev-only. The new `hono` override (`^4.13.7`, three advisories) is
+  **not**: `hono` reaches the runtime tree through
+  `@modelcontextprotocol/sdk`, on the streamable-HTTP transport's request
+  path, so this changes what the HTTP deployment resolves. The published
+  bundle is unaffected — the SDK stays external — and npm `overrides` do
+  not propagate to consumers, so a consumer pinning a vulnerable `hono`
+  needs its own bump.
+
+## [0.19.0] - 2026-09-08
+
+### Changed
+
+- **`network` on a discovered ad is now the ad network's NAME, and its
+  domain moved to `network_host`.** The API used to put whichever ad host
+  matched first into `network`, so an agent reading it got
+  `cdn.tsyndicate.com` where a name belongs — and sometimes
+  `www.googletagmanager.com`, which is not an ad network at all. Upstream
+  (KAMIAD-133) `network` became a display name resolved from a domain
+  catalog and is **empty when the ad server is not recognised**, while the
+  observed domain travels in the new `network_host`.
+
+  Both fields are exposed on every tool that returns a scan shape:
+  `get_scan`, `list_scans`, `list_scan_children`, `create_scan` and
+  `create_bulk_scans`. (`list_run_scans` returns the slim run tile, which
+  carries no network fields at all.) An
+  agent that identified networks by `network` should read `network_host`
+  when `network` is empty; one that treated `network` as a hostname needs
+  to stop. Scans created before the upstream release keep a hostname in
+  `network` and have an empty `network_host`, so a network breakdown is
+  only sound over scans created after it.
+
+  Ads served from infrastructure (tag managers, analytics, measurement,
+  DMPs) and from a publisher's own creative CDN are still found, scanned
+  and billed exactly as before — they simply no longer claim a network
+  name.
+
+  `network_host` is declared on the port rather than picked from the
+  generated types, the same escape hatch `max_discovered_ads` uses: the
+  generated files are regenerated off the DEPLOYED spec, and this field
+  ships in the release it describes. The next regen absorbs it.
+
 ## [0.17.1] - 2026-09-03
 
 ### Fixed

package/README.md

@@ -63,7 +63,7 @@ Add to your MCP client config (Cursor: `~/.cursor/mcp.json`; Claude Desktop: `~/
 }
 ```
 
-Restart your client. You should see `kaminari-ad` in the MCP servers list with 107 tools exposed.
+Restart your client. You should see `kaminari-ad` in the MCP servers list with 108 tools exposed.
 
 ### 2b. Hosted HTTP transport (no install)
 
@@ -113,7 +113,7 @@ which decides which credential type minted it.
 
 ## Tools
 
-107 tools covering the public `/api/v1` surface of Kaminari Ad. Every tool carries MCP behaviour annotations (`title`, `readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`) so MCP clients can warn before destructive actions. The complete list, by domain:
+108 tools covering the public `/api/v1` surface of Kaminari Ad. Every tool carries MCP behaviour annotations (`title`, `readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`) so MCP clients can warn before destructive actions. The complete list, by domain:
 
 - **Account** (14) — `get_account`, `update_org`, `list_org_users`, `invite_user`, `update_user_role`, `remove_user`, `transfer_ownership`, `list_org_roles`, `create_custom_role`, `list_account_labels`, `update_account_labels`, `list_api_keys`, `create_api_key`, `revoke_api_key`
 - **Scans** (13) — `list_scans`, `get_scan`, `list_scan_children`, `create_scan`, `create_bulk_scans`, `recheck_scans`, `cancel_scan`, `get_scan_screenshot`, `get_scan_creative_screenshot`, `get_scan_landing_screenshot`, `get_scan_creative_html`, `get_scan_creative_video`, `get_scan_vast_xml`
@@ -123,7 +123,7 @@ which decides which credential type minted it.
 - **Tags** (5) — `list_tags`, `get_tag_definition`, `update_tag_definition`, `delete_tag_definition`, `list_scan_tags`
 - **Custom rules** (6) — `list_custom_rules`, `get_custom_rule`, `create_custom_rule`, `update_custom_rule`, `delete_custom_rule`, `test_custom_rule`
 - **Custom taxonomies** (7) — `list_custom_taxonomies`, `get_custom_taxonomy`, `create_custom_taxonomy`, `update_custom_taxonomy`, `delete_custom_taxonomy`, `restore_custom_taxonomy`, `parse_custom_taxonomy_text`
-- **Policy sets** (10) — `list_policy_sets`, `get_policy_set`, `create_policy_set`, `update_policy_set`, `delete_policy_set`, `request_policy_set_approval`, `unpublish_policy_set`, `list_policy_set_campaigns`, `attach_policy_set_campaigns`, `detach_policy_set_campaigns`
+- **Policy sets** (11) — `list_policy_sets`, `get_policy_set`, `create_policy_set`, `update_policy_set`, `delete_policy_set`, `request_policy_set_approval`, `unpublish_policy_set`, `set_default_policy_set`, `list_policy_set_campaigns`, `attach_policy_set_campaigns`, `detach_policy_set_campaigns`
 - **Alerts** (4) — `list_alerts`, `update_alert_status`, `bulk_update_alert_status`, `get_alert_stats`
 - **Webhooks** (11) — `list_webhooks`, `get_webhook`, `create_webhook`, `update_webhook`, `delete_webhook`, `list_webhook_event_types`, `list_webhook_deliveries`, `test_webhook`, `rotate_webhook_secret`, `replay_webhook_delivery`, `bulk_replay_webhook`
 - **Billing** (4) — `get_billing_summary`, `list_usage`, `get_usage_summary`, `list_balance_history`

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { NAME, VERSION, err, ok } from './chunk-KCQ55TRV.js';
+import { NAME, VERSION, err, ok } from './chunk-J6SALJR4.js';
 import process from 'process';
 import { z } from 'zod';
 
@@ -160,10 +160,10 @@ async function main() {
   }
   const config = configResult.value;
   if (config.transport === "stdio") {
-    const { bootstrapStdio } = await import('./stdio-bootstrap-ZWMO4KXK.js');
+    const { bootstrapStdio } = await import('./stdio-bootstrap-6PXVYXHT.js');
     return bootstrapStdio(config);
   }
-  const { bootstrapHttp } = await import('./http-bootstrap-WTWLW2LP.js');
+  const { bootstrapHttp } = await import('./http-bootstrap-JX5RQALF.js');
   return bootstrapHttp(config);
 }
 main().then(

package/dist/{chunk-KCQ55TRV.js → chunk-J6SALJR4.js}

@@ -3,8 +3,8 @@ export { err, ok } from 'neverthrow';
 
 // src/shared/version.ts
 var NAME = "@kaminari-ad/mcp";
-var VERSION = "0.18.0";
+var VERSION = "0.22.0";
 
 export { NAME, VERSION };
-//# sourceMappingURL=chunk-KCQ55TRV.js.map
-//# sourceMappingURL=chunk-KCQ55TRV.js.map
+//# sourceMappingURL=chunk-J6SALJR4.js.map
+//# sourceMappingURL=chunk-J6SALJR4.js.map

package/dist/{chunk-KCQ55TRV.js.map → chunk-J6SALJR4.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-KCQ55TRV.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.18.0\";\n"]}
+{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-J6SALJR4.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.22.0\";\n"]}

package/dist/{chunk-MYBWPFWG.js → chunk-VEPJEI3S.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { err, ok } from './chunk-KCQ55TRV.js';
+import { err, ok } from './chunk-J6SALJR4.js';
 import { createHash, randomUUID } from 'crypto';
 import createClient from 'openapi-fetch';
 import { fetch } from 'undici';
@@ -832,6 +832,7 @@ var PolicySetResponse = z.object({
   organization_id: z.string().uuid(),
   visibility: z.string(),
   is_approved: z.boolean(),
+  is_default: z.boolean(),
   entries: z.array(PolicyEntryResponse),
   campaigns: z.array(LinkedCampaignResponse).optional(),
   campaigns_total: z.number().int().optional().default(0),
@@ -846,6 +847,7 @@ var PolicySetListItem = z.object({
   organization_id: z.string().uuid(),
   visibility: z.string(),
   is_approved: z.boolean(),
+  is_default: z.boolean(),
   created_at: z.string().datetime({ offset: true })
 }).passthrough();
 z.object({
@@ -873,6 +875,7 @@ z.object({
   campaign_ids: z.array(z.string().uuid()).max(500),
   detach_all: z.boolean().default(false)
 }).partial().passthrough();
+z.object({ is_default: z.boolean() }).passthrough();
 var AlertStatus = z.enum(["open", "escalated", "resolved", "dismissed"]);
 z.union([AlertStatus, z.null()]).optional();
 var AlertResponse = z.object({
@@ -978,6 +981,7 @@ var BalanceTransactionType = z.enum([
   "admin_adjustment",
   "refund",
   "invoice_settlement",
+  "invoice_payment_adjustment",
   "crypto_top_up",
   "card_top_up"
 ]);
@@ -1376,7 +1380,7 @@ var CampaignSchema = schemas.CampaignResponse.pick({
   is_archived: true,
   created_at: true,
   last_run_at: true
-}).extend({ repeat_mode: schemas.RepeatMode.default("isolated") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).strip();
+}).extend({ repeat_mode: schemas.RepeatMode.default("isolated") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).extend({ ignore_first_n_domains: z.number().int().optional() }).strip();
 var parseCampaign = (raw) => parseWithSchema(CampaignSchema, raw, "campaign");
 var parseCampaignPage = (raw) => parsePagedWithItemSchema(CampaignSchema, raw, "campaigns");
 
@@ -1746,6 +1750,7 @@ var PolicySetSchema = schemas.PolicySetResponse.pick({
   organization_id: true,
   visibility: true,
   is_approved: true,
+  is_default: true,
   entries: true,
   created_at: true
 }).strip();
@@ -1759,6 +1764,7 @@ var PolicySetListItemSchema = schemas.PolicySetListItem.pick({
   organization_id: true,
   visibility: true,
   is_approved: true,
+  is_default: true,
   created_at: true
 }).strip();
 var parsePolicySetPage = (raw) => parsePagedWithItemSchema(PolicySetListItemSchema, raw, "policy-sets");
@@ -1838,12 +1844,10 @@ var ScanSchema = schemas.ScanResponse.pick({
   repeat_scan_ids: true,
   retry_attempt: true,
   retry_max_attempts: true
-}).extend({ creative_kind: z.string().default("banner") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).strip();
+}).extend({ creative_kind: z.string().default("banner") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).extend({ network_host: z.string().optional() }).extend({ ignore_first_n_domains: z.number().int().optional() }).strip();
 var ScanArraySchema = z.array(ScanSchema);
 var parseScan = (raw) => parseWithSchema(ScanSchema, raw, "scan");
 var parseScanArray = (raw) => parseWithSchema(ScanArraySchema, raw, "scans");
-
-// src/infrastructure/api/parsers/parse-scan-page.ts
 var ScanBriefSchema = schemas.ScanBriefResponse.pick({
   id: true,
   url: true,
@@ -1870,7 +1874,7 @@ var ScanBriefSchema = schemas.ScanBriefResponse.pick({
   repeat_session_id: true,
   retry_attempt: true,
   retry_max_attempts: true
-}).strip();
+}).extend({ network_host: z.string().optional() }).strip();
 var parseScanPage = (raw) => parsePagedWithItemSchema(ScanBriefSchema, raw, "scans");
 var TagDefinitionSchema = schemas.TagDefinitionWithStatsResponse.pick({
   slug: true,
@@ -2563,6 +2567,14 @@ function createHttpApiGateway(config) {
         parseEmpty
       );
     },
+    async setDefaultPolicySet(id, isDefault) {
+      return call(
+        "POST",
+        "/api/v1/policy-sets/{policy_set_id}/set-default",
+        { params: { path: { policy_set_id: id } }, body: { is_default: isDefault } },
+        parseEmpty
+      );
+    },
     // ── Custom taxonomies ─────────────────────────────────────────
     async listCustomTaxonomies(filters) {
       return call(
@@ -3550,6 +3562,7 @@ var TransactionTypeEnum = z.enum([
   "admin_adjustment",
   "refund",
   "invoice_settlement",
+  "invoice_payment_adjustment",
   "crypto_top_up",
   "card_top_up"
 ]);
@@ -3557,14 +3570,14 @@ var ListBalanceHistoryInputShape = {
   date_from: z.string().date().optional().describe("ISO date, inclusive."),
   date_to: z.string().date().optional().describe("ISO date, inclusive."),
   type: z.array(TransactionTypeEnum).max(TransactionTypeEnum.options.length).optional().describe(
-    "Filter by transaction kind. Pass several values to OR them (e.g. ['top_up_manual','crypto_top_up','card_top_up'] for credits-only)."
+    "Filter by transaction kind. Pass several values to OR them (e.g. ['top_up_manual','crypto_top_up','card_top_up','invoice_settlement'] for every way a balance is funded). Note `invoice_payment_adjustment` is signed: a correction to an already-settled invoice can be either a credit or a debit."
   ),
   page: z.number().int().min(1).max(500).default(1).describe("1-indexed page."),
   limit: z.number().int().min(1).max(200).default(50).describe("Page size.")
 };
 var listBalanceHistoryTool = {
   name: "list_balance_history",
-  description: "List ledger transactions (charges, refunds, top-ups, invoice settlements) on the organization's balance. Each row: type, amount in micros, description, timestamp. Filter by `type` (multi-select) and / or date range.",
+  description: "List ledger transactions (charges, refunds, top-ups, invoice settlements and their corrections) on the organization's balance. Each row: type, amount in micros, description, timestamp. Filter by `type` (multi-select) and / or date range.",
   annotations: {
     title: "List Balance History",
     readOnlyHint: true,
@@ -3890,6 +3903,15 @@ var cancelCampaignTool = {
     return ok(result.value);
   }
 };
+var IGNORE_FIRST_N_DOMAINS_DESCRIPTION = "How many leading domains of the redirect chain to exclude from detection and tagging (0-5). Use it when the check enters through the caller's OWN click or tracking domains: without it a reputation hit on one of those tags the material and raises an alert about the caller's infrastructure rather than about the offer. Counting starts at the entry point and follows chain order; domains fold to their registrable form, so www.example.com and example.com consume one slot between them, and any other request to one of those domains is excluded too. A skipped domain is checked by NOTHING, so never set this higher than the number of domains the caller actually owns at the head of the chain \u2014 ask rather than guess. The full redirect chain is still captured and returned either way.";
+var ignoreFirstNDomains = z.number().int().min(0).max(5);
+var ignoreFirstNDomainsField = ignoreFirstNDomains.optional().describe(`${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omit it to skip nothing (0).`);
+var ignoreFirstNDomainsScanField = ignoreFirstNDomains.optional().describe(
+  `${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omit it to skip nothing (0). A scan created directly does NOT inherit this from the campaign named in \`campaign_id\` \u2014 only scans queued by a campaign run do \u2014 so send it explicitly on every direct submission that needs it.`
+);
+var ignoreFirstNDomainsUpdateField = ignoreFirstNDomains.optional().describe(
+  `${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omitting the field leaves the campaign's current setting unchanged; pass 0 to go back to skipping nothing. Not nullable \u2014 null is rejected with 422.`
+);
 var MAX_DISCOVERED_ADS_DESCRIPTION = 'How many ad blocks to look for on each publisher page before stopping (1-25). Every ad found becomes its own scan with its own report and is BILLED AS A SEPARATE CHECK, so this multiplies the cost: a page scanned at 25 can cost 26 checks \u2014 one parent plus its children. Only valid on an ad-discovery target \u2014 `ad_discovery: true` on a scan, or `campaign_type: "ad_discovery"` on a campaign \u2014 and rejected with 422 anywhere else.';
 var PLATFORM_DEFAULT_NOTE = "The platform default is 12 unless an operator retuned it.";
 var maxDiscoveredAds = z.number().int().min(1).max(25);
@@ -3993,12 +4015,15 @@ var CreateCampaignInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (required if campaign_type=vast)."
   ),
   referrer: campaignReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsField,
   max_discovered_ads: maxDiscoveredAdsField,
   country_codes: z.array(z.string().length(2)).min(1).describe("ISO 3166-1 alpha-2 codes \u2014 one scan per country per run."),
   group_id: z.string().uuid().optional().describe("Parent group UUID; defaults to the org's default group."),
   ...campaignConfigFields,
   labels: z.record(z.string()).optional().describe("Arbitrary metadata applied to every queued scan."),
-  policy_set_id: z.string().uuid().optional().describe("Policy set to evaluate every scan against."),
+  policy_set_id: z.union([z.string().uuid(), z.null()]).optional().describe(
+    "Policy set to evaluate every scan against. Omit to bind the organization's default (if any). Pass null for no policy set and no policy alerts."
+  ),
   schedule_enabled: z.boolean().optional().describe("If true, the scheduler runs immediately. Default: false (manual run).")
 };
 var createCampaignTool = {
@@ -4021,6 +4046,7 @@ var createCampaignTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.max_discovered_ads !== void 0 ? { max_discovered_ads: input.max_discovered_ads } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
@@ -4195,6 +4221,7 @@ var UpdateCampaignInputShape = {
     "New VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (vast-type campaigns)."
   ),
   referrer: campaignReferrerUpdateField,
+  ignore_first_n_domains: ignoreFirstNDomainsUpdateField,
   max_discovered_ads: maxDiscoveredAdsUpdateField,
   country_codes: z.array(z.string().length(2)).optional().describe("Replace the country list."),
   group_id: z.string().uuid().optional().describe("Move the campaign to another group."),
@@ -4205,7 +4232,7 @@ var UpdateCampaignInputShape = {
 };
 var updateCampaignTool = {
   name: "update_campaign",
-  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, and `max_discovered_ads` accepts null to go back to the platform ad cap.",
+  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, and `max_discovered_ads` accepts null to go back to the platform ad cap. `ignore_first_n_domains` is the exception: it is not nullable, so pass 0 to go back to skipping nothing.",
   annotations: {
     title: "Update Campaign",
     readOnlyHint: false,
@@ -4221,6 +4248,7 @@ var updateCampaignTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.max_discovered_ads !== void 0 ? { max_discovered_ads: input.max_discovered_ads } : {},
       ...input.country_codes !== void 0 ? { country_codes: input.country_codes } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
@@ -4235,21 +4263,26 @@ var updateCampaignTool = {
   }
 };
 var PATTERN_RULE_TYPES = ["regexp_request_url", "regexp_request_body"];
+var PATTERN_RULE_TARGETS = ["page", "creative", "creative_and_page"];
 var patternRuleConfigSchema = z.object({
   pattern: z.string().min(1).max(4096).describe("Non-empty regular expression, at most 4,096 characters."),
   flags: z.enum(["", "i"]).optional().describe("Omit or use '' for case-sensitive matching; use 'i' to ignore case.")
 }).strict();
-var PATTERN_RULE_CONFIG_DOC = "For `rule_type='regexp_request_url'` and `rule_type='regexp_request_body'`, `config` must be exactly `{ pattern: string, flags?: '' | 'i' }`: pattern is non-empty and at most 4,096 characters; omit flags or use `''` for case-sensitive matching, or `'i'` for case-insensitive matching. `target` must be `'page'` for both. `regexp_request_url` inspects up to 5,000 captured request URLs on a fresh scan; tests and rechecks of stored scans reconstruct main-frame hops plus up to 200 persisted subrequests with selected resource types omitted, so historical matching is best-effort. `regexp_request_body` inspects the CONTENTS of the page's scripts, fetch/XHR responses and iframe documents \u2014 never images, video, fonts or stylesheets \u2014 capped at 400 resources, 128 KB each and 8 MB per scan. Those contents are kept for ONE DAY, so a test or recheck against an older scan reports no match because there is nothing left to read.";
+var PATTERN_RULE_CONFIG_DOC = "For `rule_type='regexp_request_url'` and `rule_type='regexp_request_body'`, `config` must be exactly `{ pattern: string, flags?: '' | 'i' }`: pattern is non-empty and at most 4,096 characters; omit flags or use `''` for case-sensitive matching, or `'i'` for case-insensitive matching. `target` may be `'page'` (the landing tab), `'creative'` (the ad-tag creative's own traffic) or `'creative_and_page'` (both, reported separately) \u2014 a script inside a banner's iframe is on no landing's request list, so a page-only rule cannot see it. Default `page`. `regexp_request_url` inspects up to 5,000 captured request URLs on a fresh scan; tests and rechecks of stored scans reconstruct main-frame hops plus up to 200 persisted subrequests with selected resource types omitted, so historical matching is best-effort. `regexp_request_body` inspects the CONTENTS of the page's scripts, fetch/XHR responses and iframe documents \u2014 never images, video, fonts or stylesheets \u2014 capped at 400 resources, 128 KB each and 8 MB per scan. Those contents are kept for ONE DAY, so a test or recheck against an older scan reports no match because there is nothing left to read.";
 function isPatternRuleType(ruleType) {
   return PATTERN_RULE_TYPES.some((known) => known === ruleType);
 }
+function isPatternRuleTarget(target) {
+  return PATTERN_RULE_TARGETS.some((known) => known === target);
+}
 function patternRuleInputError(input) {
   if (!isPatternRuleType(input.rule_type)) return null;
-  if (input.target !== void 0 && input.target !== "page") {
+  if (input.target !== void 0 && !isPatternRuleTarget(input.target)) {
+    const allowed = PATTERN_RULE_TARGETS.join(", ");
     return {
       kind: "invalid-input",
-      message: `${input.rule_type} requires target='page'.`,
-      fieldErrors: { target: [`Must be 'page' for ${input.rule_type}.`] }
+      message: `${input.rule_type} accepts target: ${allowed}.`,
+      fieldErrors: { target: [`Must be one of: ${allowed}.`] }
     };
   }
   const parsed = patternRuleConfigSchema.safeParse(input.config);
@@ -4292,12 +4325,12 @@ var CreateCustomRuleInputShape = {
     "Rule-type-specific configuration object. Shape depends on `rule_type`. " + PATTERN_RULE_CONFIG_DOC + " `regexp_url` remains redirect-chain-only. For `rule_type='llm'` the shape is `{ prompt: string, tags: { <tag_slug>: <description>, ... } }`; each key in `config.tags` is auto-registered as a custom tag definition AND must not collide with a system slug (same 422 contract as `tag_slug`). " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).optional().describe(
-    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` require `target='page'`. Default: page. See API docs for the full set of valid values."
+    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` also accept `'creative'` (the ad-tag creative's own traffic) and `'creative_and_page'` (both, reported separately). Default: page. See API docs for the full set of valid values."
   )
 };
 var createCustomRuleTool = {
   name: "create_custom_rule",
-  description: "Define a custom tag-detection rule. Use `rule_type='regexp_request_url'` to match captured network and subresource URLs on the fixed `page` target; fresh scans carry up to 5,000 URLs, while later tests/rechecks use a reduced persisted request tree and are best-effort. Use `rule_type='regexp_request_body'` to match the CONTENTS of those sub-resources instead \u2014 the right choice when the code you want to catch keeps changing its filename; those contents are kept for one day. `rule_type='regexp_url'` remains redirect-chain-only. The API auto-registers a tag definition for each emitted slug and rejects built-in system-slug collisions with HTTP 422 / `checking.system_slug_reserved`. Matches tag future scans; existing scans are untouched until `recheck_scans`.",
+  description: "Define a custom tag-detection rule. Use `rule_type='regexp_request_url'` to match captured network and subresource URLs; fresh scans carry up to 5,000 URLs, while later tests/rechecks use a reduced persisted request tree and are best-effort. Use `rule_type='regexp_request_body'` to match the CONTENTS of those sub-resources instead \u2014 the right choice when the code you want to catch keeps changing its filename; those contents are kept for one day. `rule_type='regexp_url'` remains redirect-chain-only. The API auto-registers a tag definition for each emitted slug and rejects built-in system-slug collisions with HTTP 422 / `checking.system_slug_reserved`. Matches tag future scans; existing scans are untouched until `recheck_scans`.",
   annotations: {
     title: "Create Custom Rule",
     readOnlyHint: false,
@@ -4388,7 +4421,7 @@ var TestCustomRuleInputShape = {
     "Rule-type-specific config to test. Same shape as `create_custom_rule`'s `config`. " + PATTERN_RULE_CONFIG_DOC + " `regexp_url` remains redirect-chain-only. NOTE: `test_custom_rule` evaluates the rule against a scan WITHOUT persisting it, so slug-collision validation does NOT run here \u2014 verify slugs against `list_tags` (`scope=system`) before promoting to `create_custom_rule`. " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).describe(
-    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` require `target='page'`. See API docs for the full set of valid values."
+    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` also accept `'creative'` and `'creative_and_page'`. See API docs for the full set of valid values."
   ),
   scan_id: z.string().uuid().describe("Existing scan UUID to evaluate the rule against.")
 };
@@ -4428,13 +4461,13 @@ var UpdateCustomRuleInputShape = {
     "New rule-type-specific config object. Replaces the stored config wholesale \u2014 resend every key you want to keep, including a combo rule's `match_scope`. For `rule_type='llm'` the keys of `config.tags` are auto-registered as tag definitions; any key that collides with a system slug returns the same 422 contract. " + PATTERN_RULE_CONFIG_DOC + " Read the rule first because `rule_type` is immutable and is not repeated in this update input. " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).optional().describe(
-    "Where to apply the rule. `regexp_request_url` and `regexp_request_body` are fixed to `page`; do not change it. See API docs for the valid targets of other rule types."
+    "Where to apply the rule. `regexp_request_url` and `regexp_request_body` accept `'page'`, `'creative'` or `'creative_and_page'`. See API docs for the valid targets of other rule types."
   ),
   is_active: z.boolean().optional().describe("Enable/disable the rule.")
 };
 var updateCustomRuleTool = {
   name: "update_custom_rule",
-  description: "Update a custom tag-detection rule. Only supplied fields are sent, but `config` replaces the stored object wholesale; read the rule first and resend every required key. `regexp_request_url` and `regexp_request_body` need a non-empty pattern (max 4,096), flags `''`/`'i'`, and the fixed `page` target. Same-slug GLOBAL rule edits preserve separately managed tag metadata; use `update_tag_definition` to change it. Existing scans are not re-evaluated until `recheck_scans`.",
+  description: "Update a custom tag-detection rule. Only supplied fields are sent, but `config` replaces the stored object wholesale; read the rule first and resend every required key. `regexp_request_url` and `regexp_request_body` need a non-empty pattern (max 4,096), flags `''`/`'i'`, and a target of `'page'`, `'creative'` or `'creative_and_page'`. Same-slug GLOBAL rule edits preserve separately managed tag metadata; use `update_tag_definition` to change it. Existing scans are not re-evaluated until `recheck_scans`.",
   annotations: {
     title: "Update Custom Rule",
     readOnlyHint: false,
@@ -4989,7 +5022,7 @@ var GetPolicySetInputShape = {
 };
 var getPolicySetTool = {
   name: "get_policy_set",
-  description: "Get one policy set by UUID with its complete list of entries (each entry is one of five rule kinds \u2014 tag / iab_v3 / brand / ai_category / custom_taxonomy \u2014 plus applicable country codes).",
+  description: "Get one policy set by UUID with its complete list of entries (each entry is one of five rule kinds \u2014 tag / iab_v3 / brand / ai_category / custom_taxonomy \u2014 plus applicable country codes). `is_default` is true when this owned set is the organization's default for new campaigns.",
   annotations: {
     title: "Get Policy Set",
     readOnlyHint: true,
@@ -5040,7 +5073,7 @@ var ListPolicySetsInputShape = {
 };
 var listPolicySetsTool = {
   name: "list_policy_sets",
-  description: "Paginated list of policy sets: named collections of violation rules (tag / IAB V3 / brand / AI category / custom-taxonomy entries) that define what counts as a violation. Campaigns bind to one policy set. Returns `{items, total, page, limit}`. List items omit `entries` for payload size \u2014 fetch a single set via `get_policy_set` when you need them. Use `visibility=public` to discover Kaminari Ad-curated sets.",
+  description: "Paginated list of policy sets: named collections of violation rules (tag / IAB V3 / brand / AI category / custom-taxonomy entries) that define what counts as a violation. Campaigns bind to one policy set. Returns `{items, total, page, limit}`. List items omit `entries` for payload size \u2014 fetch a single set via `get_policy_set` when you need them. `is_default` is true on the owned set that new campaigns bind when `policy_set_id` is omitted. Use `visibility=public` to discover Kaminari Ad-curated sets.",
   annotations: {
     title: "List Policy Sets",
     readOnlyHint: true,
@@ -5079,6 +5112,29 @@ var requestPolicySetApprovalTool = {
     return ok({ requested: true });
   }
 };
+var SetDefaultPolicySetInputShape = {
+  policy_set_id: z.string().uuid().describe("Owned policy set UUID."),
+  is_default: z.boolean().describe(
+    "True makes this the organization's default for new campaigns (clearing any previous default). False clears the flag on this set and leaves the org without a default."
+  )
+};
+var setDefaultPolicySetTool = {
+  name: "set_default_policy_set",
+  description: "Mark or clear one of your organization's policy sets as the default for new campaigns. At most one owned set may be default. Creating a campaign without `policy_set_id` then binds this set (or stays unbound if none is set). Pass `policy_set_id: null` on create_campaign to opt out of the default. Foreign public sets cannot be made default. The API returns 204; this tool echoes `is_default`.",
+  annotations: {
+    title: "Set Default Policy Set",
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  inputSchema: z.object(SetDefaultPolicySetInputShape),
+  handler: async (input, ctx) => {
+    const result = await ctx.api.setDefaultPolicySet(input.policy_set_id, input.is_default);
+    if (result.isErr()) return err(mapApiError(result.error));
+    return ok({ is_default: input.is_default });
+  }
+};
 var UnpublishPolicySetInputShape = {
   policy_set_id: z.string().uuid().describe("Policy set UUID.")
 };
@@ -5271,6 +5327,7 @@ var CreateBulkScansInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
   ),
   referrer: scanReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsScanField,
   country_codes: z.array(z.string().length(2)).min(1).max(50).describe("List of ISO 3166-1 alpha-2 country codes; one scan per country is created."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; same for every country in the batch."),
   proxy: scanProxyField,
@@ -5296,6 +5353,7 @@ var createBulkScansTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...pickRepeatRetryBody(input)
@@ -5316,6 +5374,7 @@ var CreateScanInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (a document containing a <VAST> element). Fetched and played in a real browser. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
   ),
   referrer: scanReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsScanField,
   country_code: z.string().length(2).describe("ISO 3166-1 alpha-2 country code, e.g. US, DE, JP. Determines proxy geo."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; use `list_emulators` to discover valid values."),
   proxy: scanProxyField,
@@ -5347,6 +5406,7 @@ var createScanTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.campaign_id !== void 0 ? { campaign_id: input.campaign_id } : {},
@@ -5532,7 +5592,7 @@ var ListScanChildrenInputShape = {
 };
 var listScanChildrenTool = {
   name: "list_scan_children",
-  description: "List the discovered-ad child scans of a publisher ad-discovery scan \u2014 one per detected ad block on the page. Each child brief carries ad_kind (banner|pop), the attributed ad network, and slot_index. The repeat / retry fields are present but never meaningful here: a child is always its own group of one (`repeat_index` 0, `repeat_total` 1, `repeat_session_id` null) and is never re-crawled, because repeats and retries apply to the publisher scan \u2014 repeating an ad-discovery scan gives you several parents, each with its own children. Returns a paginated envelope with screenshot + report deep-links; link users with those, never hand-build URLs.",
+  description: "List the discovered-ad child scans of a publisher ad-discovery scan \u2014 one per detected ad block on the page. Each child brief carries ad_kind (banner|pop), slot_index, and the ad's attribution split in two: network is the ad network's NAME and is empty when the ad server is unrecognised, network_host is the domain observed \u2014 so read network first and fall back to network_host. Both are empty when the ad came from infrastructure that is not an ad network (tag manager, analytics) or from the publisher's own creative CDN; a pop carries a network but no host, because pop networks rotate their serving domains. The repeat / retry fields are present but never meaningful here: a child is always its own group of one (`repeat_index` 0, `repeat_total` 1, `repeat_session_id` null) and is never re-crawled, because repeats and retries apply to the publisher scan \u2014 repeating an ad-discovery scan gives you several parents, each with its own children. Returns a paginated envelope with screenshot + report deep-links; link users with those, never hand-build URLs.",
   annotations: {
     title: "List Scan Children",
     readOnlyHint: true,
@@ -6131,6 +6191,7 @@ function registerAllTools(register) {
   register(deletePolicySetTool);
   register(requestPolicySetApprovalTool);
   register(unpublishPolicySetTool);
+  register(setDefaultPolicySetTool);
   register(listPolicySetCampaignsTool);
   register(attachPolicySetCampaignsTool);
   register(detachPolicySetCampaignsTool);
@@ -6240,5 +6301,5 @@ function formatToolError(error) {
 }
 
 export { BearerToken, SERVER_INSTRUCTIONS, createHttpApiGateway, createPinoLogger, declareEmptyResourcesAndPrompts, newRequestId, wireToolsIntoMcpServer };
-//# sourceMappingURL=chunk-MYBWPFWG.js.map
-//# sourceMappingURL=chunk-MYBWPFWG.js.map
+//# sourceMappingURL=chunk-VEPJEI3S.js.map
+//# sourceMappingURL=chunk-VEPJEI3S.js.map