@kaminari-ad/mcp 0.19.1 → 0.23.0

package/CHANGELOG.md

@@ -7,6 +7,102 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.23.0] - 2026-09-29
+
+> Requires the API-side ad-format deploy. Until it lands, production
+> silently ignores `ad_formats` as an unknown body field: a `['pop']` request
+> checks and bills every format and reads back without the field. Do not tag
+> this release ahead of the API.
+
+### Added
+
+- **`ad_formats` on `create_scan`, `create_campaign` and `update_campaign`.**
+  An ad-discovery run can now be narrowed to some formats: any of
+  `banner`, `video` and `pop` (pop-unders and tab-unders). A format left out
+  is neither captured nor billed, so `['pop']` checks a publisher's pops
+  without screenshotting or clicking every banner on the page. Omit the
+  field to check every format; on `update_campaign`, pass `null` to go back
+  to every format.
+
+  `ScanResponse` and `CampaignResponse` echo the selection (`null` for
+  every format). The read side is parsed as plain strings rather than the
+  request enum, so a format added on the API side cannot fail a whole
+  `get_scan` / `get_campaign` call. The generated schemas were left alone:
+  the field is declared through the port's escape hatch until the next
+  regen against the deployed API, like `max_discovered_ads` before it.
+
+### Security
+
+- `undici` 8.10.0 → 8.11.2 (GHSA-3wwx-pv8p-q78v, WebSocket
+  permessage-deflate DoS) and transitive `ip-address` 10.4.0 → 10.7.2
+  (link-local and NAT64 classification bypasses), which were failing
+  `audit:deps`.
+
+## [0.22.0] - 2026-09-15
+
+### Changed
+
+- **`regexp_request_url` and `regexp_request_body` accept the creative
+  surface.** Both were rejected locally with anything but `target='page'`,
+  which made the rule that catches an exploit kit embedded in a banner
+  unauthorable: that kit is a script inside the creative's own iframe and
+  appears on no landing page's request list. Both now take `'page'`,
+  `'creative'` or `'creative_and_page'` (evaluated on each surface, every
+  match reporting the one it came from), matching what the API validates.
+  Tool descriptions updated with it, since an agent picks the target from
+  them.
+
+  Requires the API-side deploy that widens the same validator. Until it
+  lands, production rejects the two new targets with HTTP 422.
+
+## [0.21.0] - 2026-09-14
+
+> Requires the API-side KAMIAD-177 deploy. Until it lands, production
+> rejects `ignore_first_n_domains` as an unknown body field, so do not tag
+> this release ahead of the API.
+
+### Added
+
+- **`ignore_first_n_domains` on `create_campaign`, `update_campaign`,
+  `create_scan` and `create_bulk_scans`.** A check that enters through the
+  caller's own click or tracking domains used to have those domains rated
+  by every domain checker, so a reputation hit on the caller's own
+  infrastructure tagged the material and raised an alert that said nothing
+  about the offer. The new field (0-5, default 0) drops the first N unique
+  domains of the redirect chain, counted from the entry point, from
+  detection and tagging. Domains fold to their registrable form, so
+  `www.example.com` and `example.com` consume one slot between them, and
+  sub-requests made from a skipped domain are excluded too.
+
+  Deliberately NOT nullable, unlike `referrer` and `max_discovered_ads`
+  next to it: `0` is both the default and the reset, so a nullable variant
+  would only offer an agent a second spelling the API answers with a 422.
+  The shared `.describe()` text warns that a skipped domain is checked by
+  nothing, because the failure mode of guessing high is a hidden finding
+  rather than an error.
+
+  `CampaignResponse` and `ScanResponse` both echo the field, so an agent can
+  read back what a campaign will do and how much of a finished scan's chain
+  was excluded — the latter is the only way to answer that once the campaign
+  behind the scan has been edited. Parsed as optional rather than defaulted
+  to 0: an api that predates the field says nothing, and inventing a 0 would
+  claim the scan skipped nothing when the truth is unknown.
+
+  The generated schemas were left alone: the field is declared through the
+  same port-side intersection `max_discovered_ads` uses, because
+  `gen:api-types` reads the DEPLOYED spec and cannot see an unshipped
+  field. The next regen absorbs it and the intersections can go.
+
+## [0.20.0] - 2026-09-13
+
+### Added
+
+- **`set_default_policy_set`** — mark or clear an owned policy set as
+  the organization's default for new campaigns (`POST /api/v1/policy-sets/{id}/set-default`).
+  `list_policy_sets` / `get_policy_set` now surface `is_default`. Omit
+  `policy_set_id` on `create_campaign` to bind that default; pass
+  `null` to create an unbound campaign.
+
 ## [0.19.1] - 2026-09-10
 
 > Requires the API-side KAMIAD-104 deploy. Until it lands, production

package/README.md

@@ -63,7 +63,7 @@ Add to your MCP client config (Cursor: `~/.cursor/mcp.json`; Claude Desktop: `~/
 }
 ```
 
-Restart your client. You should see `kaminari-ad` in the MCP servers list with 107 tools exposed.
+Restart your client. You should see `kaminari-ad` in the MCP servers list with 108 tools exposed.
 
 ### 2b. Hosted HTTP transport (no install)
 
@@ -113,7 +113,7 @@ which decides which credential type minted it.
 
 ## Tools
 
-107 tools covering the public `/api/v1` surface of Kaminari Ad. Every tool carries MCP behaviour annotations (`title`, `readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`) so MCP clients can warn before destructive actions. The complete list, by domain:
+108 tools covering the public `/api/v1` surface of Kaminari Ad. Every tool carries MCP behaviour annotations (`title`, `readOnlyHint`, `destructiveHint`, `idempotentHint`, `openWorldHint`) so MCP clients can warn before destructive actions. The complete list, by domain:
 
 - **Account** (14) — `get_account`, `update_org`, `list_org_users`, `invite_user`, `update_user_role`, `remove_user`, `transfer_ownership`, `list_org_roles`, `create_custom_role`, `list_account_labels`, `update_account_labels`, `list_api_keys`, `create_api_key`, `revoke_api_key`
 - **Scans** (13) — `list_scans`, `get_scan`, `list_scan_children`, `create_scan`, `create_bulk_scans`, `recheck_scans`, `cancel_scan`, `get_scan_screenshot`, `get_scan_creative_screenshot`, `get_scan_landing_screenshot`, `get_scan_creative_html`, `get_scan_creative_video`, `get_scan_vast_xml`
@@ -123,7 +123,7 @@ which decides which credential type minted it.
 - **Tags** (5) — `list_tags`, `get_tag_definition`, `update_tag_definition`, `delete_tag_definition`, `list_scan_tags`
 - **Custom rules** (6) — `list_custom_rules`, `get_custom_rule`, `create_custom_rule`, `update_custom_rule`, `delete_custom_rule`, `test_custom_rule`
 - **Custom taxonomies** (7) — `list_custom_taxonomies`, `get_custom_taxonomy`, `create_custom_taxonomy`, `update_custom_taxonomy`, `delete_custom_taxonomy`, `restore_custom_taxonomy`, `parse_custom_taxonomy_text`
-- **Policy sets** (10) — `list_policy_sets`, `get_policy_set`, `create_policy_set`, `update_policy_set`, `delete_policy_set`, `request_policy_set_approval`, `unpublish_policy_set`, `list_policy_set_campaigns`, `attach_policy_set_campaigns`, `detach_policy_set_campaigns`
+- **Policy sets** (11) — `list_policy_sets`, `get_policy_set`, `create_policy_set`, `update_policy_set`, `delete_policy_set`, `request_policy_set_approval`, `unpublish_policy_set`, `set_default_policy_set`, `list_policy_set_campaigns`, `attach_policy_set_campaigns`, `detach_policy_set_campaigns`
 - **Alerts** (4) — `list_alerts`, `update_alert_status`, `bulk_update_alert_status`, `get_alert_stats`
 - **Webhooks** (11) — `list_webhooks`, `get_webhook`, `create_webhook`, `update_webhook`, `delete_webhook`, `list_webhook_event_types`, `list_webhook_deliveries`, `test_webhook`, `rotate_webhook_secret`, `replay_webhook_delivery`, `bulk_replay_webhook`
 - **Billing** (4) — `get_billing_summary`, `list_usage`, `get_usage_summary`, `list_balance_history`

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { NAME, VERSION, err, ok } from './chunk-MKBTS4IH.js';
+import { NAME, VERSION, err, ok } from './chunk-6INS6YMW.js';
 import process from 'process';
 import { z } from 'zod';
 
@@ -160,10 +160,10 @@ async function main() {
   }
   const config = configResult.value;
   if (config.transport === "stdio") {
-    const { bootstrapStdio } = await import('./stdio-bootstrap-4PXPX6BD.js');
+    const { bootstrapStdio } = await import('./stdio-bootstrap-M7I2WD5F.js');
     return bootstrapStdio(config);
   }
-  const { bootstrapHttp } = await import('./http-bootstrap-FN4DOOJT.js');
+  const { bootstrapHttp } = await import('./http-bootstrap-NSZVATPV.js');
   return bootstrapHttp(config);
 }
 main().then(

package/dist/{chunk-MKBTS4IH.js → chunk-6INS6YMW.js}

@@ -3,8 +3,8 @@ export { err, ok } from 'neverthrow';
 
 // src/shared/version.ts
 var NAME = "@kaminari-ad/mcp";
-var VERSION = "0.19.1";
+var VERSION = "0.23.0";
 
 export { NAME, VERSION };
-//# sourceMappingURL=chunk-MKBTS4IH.js.map
-//# sourceMappingURL=chunk-MKBTS4IH.js.map
+//# sourceMappingURL=chunk-6INS6YMW.js.map
+//# sourceMappingURL=chunk-6INS6YMW.js.map

package/dist/{chunk-MKBTS4IH.js.map → chunk-6INS6YMW.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-MKBTS4IH.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.19.1\";\n"]}
+{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-6INS6YMW.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.23.0\";\n"]}

package/dist/{chunk-NPSDASQE.js → chunk-XJZE6KTY.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { err, ok } from './chunk-MKBTS4IH.js';
+import { err, ok } from './chunk-6INS6YMW.js';
 import { createHash, randomUUID } from 'crypto';
 import createClient from 'openapi-fetch';
 import { fetch } from 'undici';
@@ -832,6 +832,7 @@ var PolicySetResponse = z.object({
   organization_id: z.string().uuid(),
   visibility: z.string(),
   is_approved: z.boolean(),
+  is_default: z.boolean(),
   entries: z.array(PolicyEntryResponse),
   campaigns: z.array(LinkedCampaignResponse).optional(),
   campaigns_total: z.number().int().optional().default(0),
@@ -846,6 +847,7 @@ var PolicySetListItem = z.object({
   organization_id: z.string().uuid(),
   visibility: z.string(),
   is_approved: z.boolean(),
+  is_default: z.boolean(),
   created_at: z.string().datetime({ offset: true })
 }).passthrough();
 z.object({
@@ -873,6 +875,7 @@ z.object({
   campaign_ids: z.array(z.string().uuid()).max(500),
   detach_all: z.boolean().default(false)
 }).partial().passthrough();
+z.object({ is_default: z.boolean() }).passthrough();
 var AlertStatus = z.enum(["open", "escalated", "resolved", "dismissed"]);
 z.union([AlertStatus, z.null()]).optional();
 var AlertResponse = z.object({
@@ -1377,7 +1380,7 @@ var CampaignSchema = schemas.CampaignResponse.pick({
   is_archived: true,
   created_at: true,
   last_run_at: true
-}).extend({ repeat_mode: schemas.RepeatMode.default("isolated") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).strip();
+}).extend({ repeat_mode: schemas.RepeatMode.default("isolated") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).extend({ ad_formats: z.array(z.string()).nullable().optional() }).extend({ ignore_first_n_domains: z.number().int().optional() }).strip();
 var parseCampaign = (raw) => parseWithSchema(CampaignSchema, raw, "campaign");
 var parseCampaignPage = (raw) => parsePagedWithItemSchema(CampaignSchema, raw, "campaigns");
 
@@ -1747,6 +1750,7 @@ var PolicySetSchema = schemas.PolicySetResponse.pick({
   organization_id: true,
   visibility: true,
   is_approved: true,
+  is_default: true,
   entries: true,
   created_at: true
 }).strip();
@@ -1760,6 +1764,7 @@ var PolicySetListItemSchema = schemas.PolicySetListItem.pick({
   organization_id: true,
   visibility: true,
   is_approved: true,
+  is_default: true,
   created_at: true
 }).strip();
 var parsePolicySetPage = (raw) => parsePagedWithItemSchema(PolicySetListItemSchema, raw, "policy-sets");
@@ -1839,7 +1844,7 @@ var ScanSchema = schemas.ScanResponse.pick({
   repeat_scan_ids: true,
   retry_attempt: true,
   retry_max_attempts: true
-}).extend({ creative_kind: z.string().default("banner") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).extend({ network_host: z.string().optional() }).strip();
+}).extend({ creative_kind: z.string().default("banner") }).extend({ max_discovered_ads: z.number().int().nullable().optional() }).extend({ ad_formats: z.array(z.string()).nullable().optional() }).extend({ network_host: z.string().optional() }).extend({ ignore_first_n_domains: z.number().int().optional() }).strip();
 var ScanArraySchema = z.array(ScanSchema);
 var parseScan = (raw) => parseWithSchema(ScanSchema, raw, "scan");
 var parseScanArray = (raw) => parseWithSchema(ScanArraySchema, raw, "scans");
@@ -2562,6 +2567,14 @@ function createHttpApiGateway(config) {
         parseEmpty
       );
     },
+    async setDefaultPolicySet(id, isDefault) {
+      return call(
+        "POST",
+        "/api/v1/policy-sets/{policy_set_id}/set-default",
+        { params: { path: { policy_set_id: id } }, body: { is_default: isDefault } },
+        parseEmpty
+      );
+    },
     // ── Custom taxonomies ─────────────────────────────────────────
     async listCustomTaxonomies(filters) {
       return call(
@@ -3890,6 +3903,22 @@ var cancelCampaignTool = {
     return ok(result.value);
   }
 };
+var AD_FORMATS_DESCRIPTION = "Which ad formats an ad-discovery run checks: any of `banner`, `video` and `pop` (`pop` covers pop-unders and tab-unders), each at most once. A format left out is neither captured nor billed \u2014 `['pop']` checks the page's pops without screenshotting or clicking a single banner. A tab-under the page forces on its own is still reported as a pop. Only valid on an ad-discovery target \u2014 `ad_discovery: true` on a scan, or `campaign_type: \"ad_discovery\"` on a campaign \u2014 and rejected with 422 anywhere else, as is an empty list.";
+var adFormat = z.enum(["banner", "video", "pop"]);
+var adFormats = z.array(adFormat).min(1).max(adFormat.options.length);
+var adFormatsField = adFormats.optional().describe(`${AD_FORMATS_DESCRIPTION} Omit it to check every format.`);
+var adFormatsUpdateField = adFormats.nullable().optional().describe(
+  `${AD_FORMATS_DESCRIPTION} Omitting the field leaves the campaign's current selection unchanged; pass null to go back to checking every format.`
+);
+var IGNORE_FIRST_N_DOMAINS_DESCRIPTION = "How many leading domains of the redirect chain to exclude from detection and tagging (0-5). Use it when the check enters through the caller's OWN click or tracking domains: without it a reputation hit on one of those tags the material and raises an alert about the caller's infrastructure rather than about the offer. Counting starts at the entry point and follows chain order; domains fold to their registrable form, so www.example.com and example.com consume one slot between them, and any other request to one of those domains is excluded too. A skipped domain is checked by NOTHING, so never set this higher than the number of domains the caller actually owns at the head of the chain \u2014 ask rather than guess. The full redirect chain is still captured and returned either way.";
+var ignoreFirstNDomains = z.number().int().min(0).max(5);
+var ignoreFirstNDomainsField = ignoreFirstNDomains.optional().describe(`${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omit it to skip nothing (0).`);
+var ignoreFirstNDomainsScanField = ignoreFirstNDomains.optional().describe(
+  `${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omit it to skip nothing (0). A scan created directly does NOT inherit this from the campaign named in \`campaign_id\` \u2014 only scans queued by a campaign run do \u2014 so send it explicitly on every direct submission that needs it.`
+);
+var ignoreFirstNDomainsUpdateField = ignoreFirstNDomains.optional().describe(
+  `${IGNORE_FIRST_N_DOMAINS_DESCRIPTION} Omitting the field leaves the campaign's current setting unchanged; pass 0 to go back to skipping nothing. Not nullable \u2014 null is rejected with 422.`
+);
 var MAX_DISCOVERED_ADS_DESCRIPTION = 'How many ad blocks to look for on each publisher page before stopping (1-25). Every ad found becomes its own scan with its own report and is BILLED AS A SEPARATE CHECK, so this multiplies the cost: a page scanned at 25 can cost 26 checks \u2014 one parent plus its children. Only valid on an ad-discovery target \u2014 `ad_discovery: true` on a scan, or `campaign_type: "ad_discovery"` on a campaign \u2014 and rejected with 422 anywhere else.';
 var PLATFORM_DEFAULT_NOTE = "The platform default is 12 unless an operator retuned it.";
 var maxDiscoveredAds = z.number().int().min(1).max(25);
@@ -3993,12 +4022,16 @@ var CreateCampaignInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (required if campaign_type=vast)."
   ),
   referrer: campaignReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsField,
   max_discovered_ads: maxDiscoveredAdsField,
+  ad_formats: adFormatsField,
   country_codes: z.array(z.string().length(2)).min(1).describe("ISO 3166-1 alpha-2 codes \u2014 one scan per country per run."),
   group_id: z.string().uuid().optional().describe("Parent group UUID; defaults to the org's default group."),
   ...campaignConfigFields,
   labels: z.record(z.string()).optional().describe("Arbitrary metadata applied to every queued scan."),
-  policy_set_id: z.string().uuid().optional().describe("Policy set to evaluate every scan against."),
+  policy_set_id: z.union([z.string().uuid(), z.null()]).optional().describe(
+    "Policy set to evaluate every scan against. Omit to bind the organization's default (if any). Pass null for no policy set and no policy alerts."
+  ),
   schedule_enabled: z.boolean().optional().describe("If true, the scheduler runs immediately. Default: false (manual run).")
 };
 var createCampaignTool = {
@@ -4021,7 +4054,9 @@ var createCampaignTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.max_discovered_ads !== void 0 ? { max_discovered_ads: input.max_discovered_ads } : {},
+      ...input.ad_formats !== void 0 ? { ad_formats: input.ad_formats } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.policy_set_id !== void 0 ? { policy_set_id: input.policy_set_id } : {},
@@ -4195,7 +4230,9 @@ var UpdateCampaignInputShape = {
     "New VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (vast-type campaigns)."
   ),
   referrer: campaignReferrerUpdateField,
+  ignore_first_n_domains: ignoreFirstNDomainsUpdateField,
   max_discovered_ads: maxDiscoveredAdsUpdateField,
+  ad_formats: adFormatsUpdateField,
   country_codes: z.array(z.string().length(2)).optional().describe("Replace the country list."),
   group_id: z.string().uuid().optional().describe("Move the campaign to another group."),
   ...campaignConfigFields,
@@ -4205,7 +4242,7 @@ var UpdateCampaignInputShape = {
 };
 var updateCampaignTool = {
   name: "update_campaign",
-  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, and `max_discovered_ads` accepts null to go back to the platform ad cap.",
+  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, `max_discovered_ads` accepts null to go back to the platform ad cap, and `ad_formats` accepts null to go back to checking every ad format. `ignore_first_n_domains` is the exception: it is not nullable, so pass 0 to go back to skipping nothing.",
   annotations: {
     title: "Update Campaign",
     readOnlyHint: false,
@@ -4221,7 +4258,9 @@ var updateCampaignTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.max_discovered_ads !== void 0 ? { max_discovered_ads: input.max_discovered_ads } : {},
+      ...input.ad_formats !== void 0 ? { ad_formats: input.ad_formats } : {},
       ...input.country_codes !== void 0 ? { country_codes: input.country_codes } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
@@ -4235,21 +4274,26 @@ var updateCampaignTool = {
   }
 };
 var PATTERN_RULE_TYPES = ["regexp_request_url", "regexp_request_body"];
+var PATTERN_RULE_TARGETS = ["page", "creative", "creative_and_page"];
 var patternRuleConfigSchema = z.object({
   pattern: z.string().min(1).max(4096).describe("Non-empty regular expression, at most 4,096 characters."),
   flags: z.enum(["", "i"]).optional().describe("Omit or use '' for case-sensitive matching; use 'i' to ignore case.")
 }).strict();
-var PATTERN_RULE_CONFIG_DOC = "For `rule_type='regexp_request_url'` and `rule_type='regexp_request_body'`, `config` must be exactly `{ pattern: string, flags?: '' | 'i' }`: pattern is non-empty and at most 4,096 characters; omit flags or use `''` for case-sensitive matching, or `'i'` for case-insensitive matching. `target` must be `'page'` for both. `regexp_request_url` inspects up to 5,000 captured request URLs on a fresh scan; tests and rechecks of stored scans reconstruct main-frame hops plus up to 200 persisted subrequests with selected resource types omitted, so historical matching is best-effort. `regexp_request_body` inspects the CONTENTS of the page's scripts, fetch/XHR responses and iframe documents \u2014 never images, video, fonts or stylesheets \u2014 capped at 400 resources, 128 KB each and 8 MB per scan. Those contents are kept for ONE DAY, so a test or recheck against an older scan reports no match because there is nothing left to read.";
+var PATTERN_RULE_CONFIG_DOC = "For `rule_type='regexp_request_url'` and `rule_type='regexp_request_body'`, `config` must be exactly `{ pattern: string, flags?: '' | 'i' }`: pattern is non-empty and at most 4,096 characters; omit flags or use `''` for case-sensitive matching, or `'i'` for case-insensitive matching. `target` may be `'page'` (the landing tab), `'creative'` (the ad-tag creative's own traffic) or `'creative_and_page'` (both, reported separately) \u2014 a script inside a banner's iframe is on no landing's request list, so a page-only rule cannot see it. Default `page`. `regexp_request_url` inspects up to 5,000 captured request URLs on a fresh scan; tests and rechecks of stored scans reconstruct main-frame hops plus up to 200 persisted subrequests with selected resource types omitted, so historical matching is best-effort. `regexp_request_body` inspects the CONTENTS of the page's scripts, fetch/XHR responses and iframe documents \u2014 never images, video, fonts or stylesheets \u2014 capped at 400 resources, 128 KB each and 8 MB per scan. Those contents are kept for ONE DAY, so a test or recheck against an older scan reports no match because there is nothing left to read.";
 function isPatternRuleType(ruleType) {
   return PATTERN_RULE_TYPES.some((known) => known === ruleType);
 }
+function isPatternRuleTarget(target) {
+  return PATTERN_RULE_TARGETS.some((known) => known === target);
+}
 function patternRuleInputError(input) {
   if (!isPatternRuleType(input.rule_type)) return null;
-  if (input.target !== void 0 && input.target !== "page") {
+  if (input.target !== void 0 && !isPatternRuleTarget(input.target)) {
+    const allowed = PATTERN_RULE_TARGETS.join(", ");
     return {
       kind: "invalid-input",
-      message: `${input.rule_type} requires target='page'.`,
-      fieldErrors: { target: [`Must be 'page' for ${input.rule_type}.`] }
+      message: `${input.rule_type} accepts target: ${allowed}.`,
+      fieldErrors: { target: [`Must be one of: ${allowed}.`] }
     };
   }
   const parsed = patternRuleConfigSchema.safeParse(input.config);
@@ -4292,12 +4336,12 @@ var CreateCustomRuleInputShape = {
     "Rule-type-specific configuration object. Shape depends on `rule_type`. " + PATTERN_RULE_CONFIG_DOC + " `regexp_url` remains redirect-chain-only. For `rule_type='llm'` the shape is `{ prompt: string, tags: { <tag_slug>: <description>, ... } }`; each key in `config.tags` is auto-registered as a custom tag definition AND must not collide with a system slug (same 422 contract as `tag_slug`). " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).optional().describe(
-    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` require `target='page'`. Default: page. See API docs for the full set of valid values."
+    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` also accept `'creative'` (the ad-tag creative's own traffic) and `'creative_and_page'` (both, reported separately). Default: page. See API docs for the full set of valid values."
   )
 };
 var createCustomRuleTool = {
   name: "create_custom_rule",
-  description: "Define a custom tag-detection rule. Use `rule_type='regexp_request_url'` to match captured network and subresource URLs on the fixed `page` target; fresh scans carry up to 5,000 URLs, while later tests/rechecks use a reduced persisted request tree and are best-effort. Use `rule_type='regexp_request_body'` to match the CONTENTS of those sub-resources instead \u2014 the right choice when the code you want to catch keeps changing its filename; those contents are kept for one day. `rule_type='regexp_url'` remains redirect-chain-only. The API auto-registers a tag definition for each emitted slug and rejects built-in system-slug collisions with HTTP 422 / `checking.system_slug_reserved`. Matches tag future scans; existing scans are untouched until `recheck_scans`.",
+  description: "Define a custom tag-detection rule. Use `rule_type='regexp_request_url'` to match captured network and subresource URLs; fresh scans carry up to 5,000 URLs, while later tests/rechecks use a reduced persisted request tree and are best-effort. Use `rule_type='regexp_request_body'` to match the CONTENTS of those sub-resources instead \u2014 the right choice when the code you want to catch keeps changing its filename; those contents are kept for one day. `rule_type='regexp_url'` remains redirect-chain-only. The API auto-registers a tag definition for each emitted slug and rejects built-in system-slug collisions with HTTP 422 / `checking.system_slug_reserved`. Matches tag future scans; existing scans are untouched until `recheck_scans`.",
   annotations: {
     title: "Create Custom Rule",
     readOnlyHint: false,
@@ -4388,7 +4432,7 @@ var TestCustomRuleInputShape = {
     "Rule-type-specific config to test. Same shape as `create_custom_rule`'s `config`. " + PATTERN_RULE_CONFIG_DOC + " `regexp_url` remains redirect-chain-only. NOTE: `test_custom_rule` evaluates the rule against a scan WITHOUT persisting it, so slug-collision validation does NOT run here \u2014 verify slugs against `list_tags` (`scope=system`) before promoting to `create_custom_rule`. " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).describe(
-    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` require `target='page'`. See API docs for the full set of valid values."
+    "Where to apply the rule (e.g. 'page' for landing HTML). `regexp_request_url` and `regexp_request_body` also accept `'creative'` and `'creative_and_page'`. See API docs for the full set of valid values."
   ),
   scan_id: z.string().uuid().describe("Existing scan UUID to evaluate the rule against.")
 };
@@ -4428,13 +4472,13 @@ var UpdateCustomRuleInputShape = {
     "New rule-type-specific config object. Replaces the stored config wholesale \u2014 resend every key you want to keep, including a combo rule's `match_scope`. For `rule_type='llm'` the keys of `config.tags` are auto-registered as tag definitions; any key that collides with a system slug returns the same 422 contract. " + PATTERN_RULE_CONFIG_DOC + " Read the rule first because `rule_type` is immutable and is not repeated in this update input. " + COMBO_MATCH_SCOPE_DOC
   ),
   target: z.string().max(30).optional().describe(
-    "Where to apply the rule. `regexp_request_url` and `regexp_request_body` are fixed to `page`; do not change it. See API docs for the valid targets of other rule types."
+    "Where to apply the rule. `regexp_request_url` and `regexp_request_body` accept `'page'`, `'creative'` or `'creative_and_page'`. See API docs for the valid targets of other rule types."
   ),
   is_active: z.boolean().optional().describe("Enable/disable the rule.")
 };
 var updateCustomRuleTool = {
   name: "update_custom_rule",
-  description: "Update a custom tag-detection rule. Only supplied fields are sent, but `config` replaces the stored object wholesale; read the rule first and resend every required key. `regexp_request_url` and `regexp_request_body` need a non-empty pattern (max 4,096), flags `''`/`'i'`, and the fixed `page` target. Same-slug GLOBAL rule edits preserve separately managed tag metadata; use `update_tag_definition` to change it. Existing scans are not re-evaluated until `recheck_scans`.",
+  description: "Update a custom tag-detection rule. Only supplied fields are sent, but `config` replaces the stored object wholesale; read the rule first and resend every required key. `regexp_request_url` and `regexp_request_body` need a non-empty pattern (max 4,096), flags `''`/`'i'`, and a target of `'page'`, `'creative'` or `'creative_and_page'`. Same-slug GLOBAL rule edits preserve separately managed tag metadata; use `update_tag_definition` to change it. Existing scans are not re-evaluated until `recheck_scans`.",
   annotations: {
     title: "Update Custom Rule",
     readOnlyHint: false,
@@ -4989,7 +5033,7 @@ var GetPolicySetInputShape = {
 };
 var getPolicySetTool = {
   name: "get_policy_set",
-  description: "Get one policy set by UUID with its complete list of entries (each entry is one of five rule kinds \u2014 tag / iab_v3 / brand / ai_category / custom_taxonomy \u2014 plus applicable country codes).",
+  description: "Get one policy set by UUID with its complete list of entries (each entry is one of five rule kinds \u2014 tag / iab_v3 / brand / ai_category / custom_taxonomy \u2014 plus applicable country codes). `is_default` is true when this owned set is the organization's default for new campaigns.",
   annotations: {
     title: "Get Policy Set",
     readOnlyHint: true,
@@ -5040,7 +5084,7 @@ var ListPolicySetsInputShape = {
 };
 var listPolicySetsTool = {
   name: "list_policy_sets",
-  description: "Paginated list of policy sets: named collections of violation rules (tag / IAB V3 / brand / AI category / custom-taxonomy entries) that define what counts as a violation. Campaigns bind to one policy set. Returns `{items, total, page, limit}`. List items omit `entries` for payload size \u2014 fetch a single set via `get_policy_set` when you need them. Use `visibility=public` to discover Kaminari Ad-curated sets.",
+  description: "Paginated list of policy sets: named collections of violation rules (tag / IAB V3 / brand / AI category / custom-taxonomy entries) that define what counts as a violation. Campaigns bind to one policy set. Returns `{items, total, page, limit}`. List items omit `entries` for payload size \u2014 fetch a single set via `get_policy_set` when you need them. `is_default` is true on the owned set that new campaigns bind when `policy_set_id` is omitted. Use `visibility=public` to discover Kaminari Ad-curated sets.",
   annotations: {
     title: "List Policy Sets",
     readOnlyHint: true,
@@ -5079,6 +5123,29 @@ var requestPolicySetApprovalTool = {
     return ok({ requested: true });
   }
 };
+var SetDefaultPolicySetInputShape = {
+  policy_set_id: z.string().uuid().describe("Owned policy set UUID."),
+  is_default: z.boolean().describe(
+    "True makes this the organization's default for new campaigns (clearing any previous default). False clears the flag on this set and leaves the org without a default."
+  )
+};
+var setDefaultPolicySetTool = {
+  name: "set_default_policy_set",
+  description: "Mark or clear one of your organization's policy sets as the default for new campaigns. At most one owned set may be default. Creating a campaign without `policy_set_id` then binds this set (or stays unbound if none is set). Pass `policy_set_id: null` on create_campaign to opt out of the default. Foreign public sets cannot be made default. The API returns 204; this tool echoes `is_default`.",
+  annotations: {
+    title: "Set Default Policy Set",
+    readOnlyHint: false,
+    destructiveHint: false,
+    idempotentHint: true,
+    openWorldHint: false
+  },
+  inputSchema: z.object(SetDefaultPolicySetInputShape),
+  handler: async (input, ctx) => {
+    const result = await ctx.api.setDefaultPolicySet(input.policy_set_id, input.is_default);
+    if (result.isErr()) return err(mapApiError(result.error));
+    return ok({ is_default: input.is_default });
+  }
+};
 var UnpublishPolicySetInputShape = {
   policy_set_id: z.string().uuid().describe("Policy set UUID.")
 };
@@ -5271,6 +5338,7 @@ var CreateBulkScansInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
   ),
   referrer: scanReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsScanField,
   country_codes: z.array(z.string().length(2)).min(1).max(50).describe("List of ISO 3166-1 alpha-2 country codes; one scan per country is created."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; same for every country in the batch."),
   proxy: scanProxyField,
@@ -5296,6 +5364,7 @@ var createBulkScansTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...pickRepeatRetryBody(input)
@@ -5316,6 +5385,7 @@ var CreateScanInputShape = {
     "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (a document containing a <VAST> element). Fetched and played in a real browser. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
   ),
   referrer: scanReferrerField,
+  ignore_first_n_domains: ignoreFirstNDomainsScanField,
   country_code: z.string().length(2).describe("ISO 3166-1 alpha-2 country code, e.g. US, DE, JP. Determines proxy geo."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; use `list_emulators` to discover valid values."),
   proxy: scanProxyField,
@@ -5323,9 +5393,10 @@ var CreateScanInputShape = {
   campaign_id: z.string().uuid().optional().describe("Optional campaign UUID to attribute the scan to."),
   run_id: z.string().uuid().optional().describe("Optional run UUID inside the campaign."),
   ad_discovery: z.boolean().optional().describe(
-    "Publisher ad discovery: detect ad blocks on the page and spawn one child scan per detected ad (banner/pop). Only valid with `url`. Each child is a separate billed scan; list them with `list_scan_children`."
+    "Publisher ad discovery: detect ad blocks on the page and spawn one child scan per detected ad (banner/video/pop). Only valid with `url`. Each child is a separate billed scan; list them with `list_scan_children`."
   ),
   max_discovered_ads: maxDiscoveredAdsField,
+  ad_formats: adFormatsField,
   ...repeatRetryFields
 };
 var createScanTool = {
@@ -5347,12 +5418,14 @@ var createScanTool = {
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
       ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.referrer !== void 0 ? { referrer: input.referrer } : {},
+      ...input.ignore_first_n_domains !== void 0 ? { ignore_first_n_domains: input.ignore_first_n_domains } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.campaign_id !== void 0 ? { campaign_id: input.campaign_id } : {},
       ...input.run_id !== void 0 ? { run_id: input.run_id } : {},
       ...input.ad_discovery !== void 0 ? { ad_discovery: input.ad_discovery } : {},
       ...input.max_discovered_ads !== void 0 ? { max_discovered_ads: input.max_discovered_ads } : {},
+      ...input.ad_formats !== void 0 ? { ad_formats: input.ad_formats } : {},
       ...pickRepeatRetryBody(input)
     };
     const result = await ctx.api.createScan(body);
@@ -6131,6 +6204,7 @@ function registerAllTools(register) {
   register(deletePolicySetTool);
   register(requestPolicySetApprovalTool);
   register(unpublishPolicySetTool);
+  register(setDefaultPolicySetTool);
   register(listPolicySetCampaignsTool);
   register(attachPolicySetCampaignsTool);
   register(detachPolicySetCampaignsTool);
@@ -6240,5 +6314,5 @@ function formatToolError(error) {
 }
 
 export { BearerToken, SERVER_INSTRUCTIONS, createHttpApiGateway, createPinoLogger, declareEmptyResourcesAndPrompts, newRequestId, wireToolsIntoMcpServer };
-//# sourceMappingURL=chunk-NPSDASQE.js.map
-//# sourceMappingURL=chunk-NPSDASQE.js.map
+//# sourceMappingURL=chunk-XJZE6KTY.js.map
+//# sourceMappingURL=chunk-XJZE6KTY.js.map