@kaminari-ad/mcp 0.23.0 → 0.24.1

package/CHANGELOG.md

@@ -7,6 +7,53 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.24.1] - 2026-10-02
+
+### Fixed
+
+- **`GET /` on the hosted HTTP endpoint redirects to the landing page.** The
+  bare `mcp.kaminari.ad` used to answer `404 Not found`, a dead end for people
+  and crawlers arriving from MCP directories. It now returns `301` to
+  `https://kaminari.ad/mcp` (override with `KAMINARI_AD_MCP_LANDING_URL`). No
+  auth, no API call; `/mcp`, `/healthz` and the OAuth discovery document are
+  unchanged.
+
+## [0.24.0] - 2026-09-30
+
+> Requires the API release with campaign `notifications` and label routing.
+> Until it lands, production ignores the new body fields and omits the new
+> response fields. Do not tag this release ahead of the API.
+
+### Added
+
+- **`notifications` on `create_campaign` and `update_campaign`.** A campaign's
+  alert routing (`mode`, `destination_ids`, `routing_label_key`) is saved in
+  the same request as the campaign. The API validates the block before it
+  writes anything, so an invalid block leaves the campaign untouched. Omit it
+  to keep the current routing (update) or inherit the org defaults (create).
+- **Label routing.** `set_campaign_alert_overrides` accepts
+  `routing_label_key` on top of `inherit` / `override`: each scan also reaches
+  the destinations whose label rule matches its value for that key (one DSP's
+  chat in a shared campaign). `get_campaign_alert_overrides` returns the key,
+  and `list_alert_destinations` returns each destination's rule as
+  `route_label_key` + `route_label_values`. The mode / destination / key
+  combination rules are checked locally before the call.
+
+### Changed
+
+- Regenerated `openapi.ts` / `zod-schemas.ts` from the current API, which also
+  picks up response fields added since the last regen (`ad_formats`,
+  `network_host`, `creative_redirect_chain`).
+- `set_campaign_alert_overrides` now replaces the label routing along with the
+  mode: a call without `routing_label_key` clears a key set earlier. Read
+  `get_campaign_alert_overrides` first to keep it.
+
+### Security
+
+- `brace-expansion` 5.0.12, `fast-uri` 3.1.8 and `axios` 1.20.0 (transitive)
+  for GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-6j4f-fj2g-mc7p,
+  GHSA-hrr3-gc8f-f4qj and the axios 1.19 advisories (GHSA-vh66-26gq-q6x8 et al.).
+
 ## [0.23.0] - 2026-09-29
 
 > Requires the API-side ad-format deploy. Until it lands, production

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { NAME, VERSION, err, ok } from './chunk-6INS6YMW.js';
+import { NAME, VERSION, err, ok } from './chunk-3G2F3FOW.js';
 import process from 'process';
 import { z } from 'zod';
 
@@ -79,7 +79,8 @@ var RawSchema = z.object({
   KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL: z.string().url().default("https://app.kaminari.ad"),
   // Space-separated scope list. We split on /\s+/ post-parse and drop
   // empty tokens so accidental double-spaces don't corrupt the array.
-  KAMINARI_AD_OAUTH_SCOPES: z.string().optional()
+  KAMINARI_AD_OAUTH_SCOPES: z.string().optional(),
+  KAMINARI_AD_MCP_LANDING_URL: z.string().url().default("https://kaminari.ad/mcp")
 });
 function loadConfig(env) {
   const parsed = RawSchema.safeParse(env);
@@ -102,7 +103,8 @@ function loadConfig(env) {
     oauthProtectedResource: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE,
     oauthProtectedResourceMetadataUrl: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE_METADATA_URL,
     oauthAuthorizationServerUrl: raw.KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL,
-    oauthScopes
+    oauthScopes,
+    landingUrl: raw.KAMINARI_AD_MCP_LANDING_URL
   });
 }
 
@@ -160,10 +162,10 @@ async function main() {
   }
   const config = configResult.value;
   if (config.transport === "stdio") {
-    const { bootstrapStdio } = await import('./stdio-bootstrap-M7I2WD5F.js');
+    const { bootstrapStdio } = await import('./stdio-bootstrap-VGOUNXAK.js');
     return bootstrapStdio(config);
   }
-  const { bootstrapHttp } = await import('./http-bootstrap-NSZVATPV.js');
+  const { bootstrapHttp } = await import('./http-bootstrap-6PQSTYXB.js');
   return bootstrapHttp(config);
 }
 main().then(

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/check-node-version.ts","../src/shared/oauth-scope-catalogue.ts","../src/shared/config.ts","../src/bin.ts"],"names":[],"mappings":";;;;;;AAoBO,IAAM,mBAAA,GAAsB,EAAA;AAC5B,IAAM,mBAAA,GAAsB,EAAA;AAU5B,SAAS,iBAAiB,WAAA,EAAgD;AAC/E,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,KAAA,CAAM,GAAG,CAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,IACE,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,KAAA,GAAQ,mBAAA,IACP,KAAA,KAAU,mBAAA,IAAuB,QAAQ,mBAAA,EAC1C;AACA,IAAA,MAAM,QAAA,GAAW,KAAK,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,EAAA,CAAA;AAChF,IAAA,OAAO,GAAA;AAAA,MACL;AAAA,QACE,CAAA,EAAG,IAAI,CAAA,kBAAA,EAAqB,QAAQ,eAAe,WAAW,CAAA,EAAA,CAAA;AAAA,QAC9D,EAAA;AAAA,QACA,8DAAA;AAAA,QACA,0DAAA;AAAA,QACA,4DAAA;AAAA,QACA,oDAAA;AAAA,QACA,EAAA;AAAA,QACA;AAAA,OACF,CAAE,KAAK,IAAI;AAAA,KACb;AAAA,EACF;AACA,EAAA,OAAO,GAAG,MAAS,CAAA;AACrB;;;ACpBO,IAAM,oBAAA,GAA0C,OAAO,MAAA,CAAO;AAAA,EACnE,kBAAA;AAAA,EACA,8BAAA;AAAA,EACA,+BAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA,sBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAC,CAAA;;;AC1CM,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,MAAM,CAAC,CAAA;AAMhD,IAAM,cAAA,GAAiB,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,SAAS,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,OAAO,CAAC,CAAA;AAclF,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,MAAM,CAAC,CAAA;AA4DxD,IAAM,SAAA,GAAY,EAAE,MAAA,CAAO;AAAA,EACzB,qBAAA,EAAuB,eAAA,CAAgB,OAAA,CAAQ,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtD,qBAAqB,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,yBAAyB,CAAA;AAAA,EACvE,qBAAA,EAAuB,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAA;AAAA,EACpD,sBAAA,EAAwB,gBAAgB,QAAA,EAAS;AAAA,EACjD,qBAAA,EAAuB,CAAA,CAAE,MAAA,CAAO,MAAA,GAAS,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,KAAK,CAAA,CAAE,QAAQ,IAAI,CAAA;AAAA,EAC7E,0BAAA,EAA4B,CAAA,CAAE,MAAA,CAAO,MAAA,GAAS,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAM,CAAA,CAAE,QAAQ,GAAG,CAAA;AAAA,EAClF,qBAAqB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA,EAIhD,sCAAsC,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,6BAA6B,CAAA;AAAA,EAC5F,mDAAmD,CAAA,CAChD,MAAA,GACA,GAAA,EAAI,CACJ,QAAQ,8DAA8D,CAAA;AAAA,EACzE,4CAA4C,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,yBAAyB,CAAA;AAAA;AAAA;AAAA,EAG9F,wBAAA,EAA0B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACvC,CAAC,CAAA;AAYM,SAAS,WAAW,GAAA,EAAqD;AAC9E,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,SAAA,CAAU,GAAG,CAAA;AACtC,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO,GAAA,CAAI,EAAE,IAAA,EAAM,SAAA,EAAW,MAAA,EAAQ,OAAO,KAAA,CAAM,OAAA,EAAQ,CAAE,WAAA,EAAa,CAAA;AAAA,EAC5E;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,IAAA;AACnB,EAAA,MAAM,YAAY,GAAA,CAAI,qBAAA;AACtB,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,sBAAA,KAA2B,SAAA,KAAc,UAAU,QAAA,GAAW,MAAA,CAAA;AACpF,EAAA,MAAM,iBAAiB,GAAA,CAAI,wBAAA;AAC3B,EAAA,MAAM,cACJ,cAAA,KAAmB,MAAA,GACf,oBAAA,GACA,MAAA,CAAO,OAAO,cAAA,CAAe,KAAA,CAAM,KAAK,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,EAAA,CAAG;AAAA,IACR,SAAA;AAAA,IACA,YAAY,GAAA,CAAI,mBAAA;AAAA,IAChB,UAAU,GAAA,CAAI,qBAAA;AAAA,IACd,SAAA;AAAA,IACA,UAAU,GAAA,CAAI,qBAAA;AAAA,IACd,cAAc,GAAA,CAAI,0BAAA;AAAA,IAClB,aAAa,GAAA,CAAI,mBAAA;AAAA,IACjB,wBAAwB,GAAA,CAAI,oCAAA;AAAA,IAC5B,mCAAmC,GAAA,CAAI,iDAAA;AAAA,IACvC,6BAA6B,GAAA,CAAI,0CAAA;AAAA,IACjC;AAAA,GACD,CAAA;AACH;;;ACvIA,SAAS,mBAAmB,IAAA,EAAgD;AAC1E,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,GAAA,KAAQ,mBAAA,IAAuB,GAAA,KAAQ,kBAAA,EAAoB;AAC7D,MAAA,OAAO,GAAA,KAAQ,sBAAsB,OAAA,GAAU,MAAA;AAAA,IACjD;AACA,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,cAAc,CAAA,EAAG;AAClC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,MAAM,CAAA;AAC7C,MAAA,IAAI,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,MAAA,EAAQ,OAAO,KAAA;AAAA,IACpD;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,eAAe,IAAA,GAAwB;AACrC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAKjC,EAAA,IAAI,KAAK,QAAA,CAAS,WAAW,KAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG;AACrD,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,IAAI,IAAI,OAAO;AAAA,CAAI,CAAA;AAC3C,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,IAAI,KAAK,QAAA,CAAS,QAAQ,KAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG;AAClD,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb;AAAA,QACE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAAA,QAClB,CAAA,CAAA;AAAA,QACA,CAAA,MAAA,CAAA;AAAA,QACA,CAAA,0CAAA,CAAA;AAAA,QACA,CAAA,CAAA;AAAA,QACA,CAAA,WAAA,CAAA;AAAA,QACA,CAAA,6EAAA,CAAA;AAAA,QACA,CAAA,4FAAA,CAAA;AAAA,QACA,CAAA,CAAA;AAAA,QACA,CAAA,4CAAA,CAAA;AAAA,QACA,CAAA;AAAA,OACF,CAAE,KAAK,IAAI;AAAA,KACb;AACA,IAAA,OAAO,CAAA;AAAA,EACT;AAOA,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AACpD,EAAA,IAAI,KAAA,CAAM,OAAM,EAAG;AACjB,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,KAAA,CAAM,KAAK;AAAA,CAAI,CAAA;AACvC,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,MAAM,YAAA,GAAe,mBAAmB,IAAI,CAAA;AAC5C,EAAA,MAAM,GAAA,GAAyB,eAC3B,EAAE,GAAG,QAAQ,GAAA,EAAK,qBAAA,EAAuB,YAAA,EAAa,GACtD,OAAA,CAAQ,GAAA;AAEZ,EAAA,MAAM,YAAA,GAAe,WAAW,GAAG,CAAA;AACnC,EAAA,IAAI,YAAA,CAAa,OAAM,EAAG;AACxB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,uBAAA,EAA0B,IAAA,CAAK,UAAU,YAAA,CAAa,KAAA,CAAM,MAAM,CAAC;AAAA,CAAI,CAAA;AAC5F,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAS,YAAA,CAAa,KAAA;AAE5B,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,EAAS;AAChC,IAAA,MAAM,EAAE,cAAA,EAAe,GAAI,MAAM,OAAO,+BAAyC,CAAA;AACjF,IAAA,OAAO,eAAe,MAAM,CAAA;AAAA,EAC9B;AACA,EAAA,MAAM,EAAE,aAAA,EAAc,GAAI,MAAM,OAAO,8BAAuC,CAAA;AAC9E,EAAA,OAAO,cAAc,MAAM,CAAA;AAC7B;AAEA,IAAA,EAAK,CAAE,IAAA;AAAA,EACL,CAAC,IAAA,KAAS;AACR,IAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACnB,CAAA;AAAA,EACA,CAAC,KAAA,KAAmB;AAClB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,OAAA,EAAU,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC;AAAA,CAAI,CAAA;AACzF,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF,CAAA","file":"bin.js","sourcesContent":["/**\n * Pure Node-version preflight, extracted from {@link bin.ts} so it\n * can be unit-tested without `process.exit` side effects.\n *\n * Why this exists: `undici@8.x` removed feature probes in v8.0.3 and\n * imports `markAsUncloneable` from `node:worker_threads`\n * unconditionally — that symbol only exists on Node 22.19+. Older\n * Node versions crash at import time with the cryptic message\n * `webidl.util.markAsUncloneable is not a function`. We surface a\n * clean upgrade message instead, BEFORE any dynamic import pulls\n * undici.\n *\n * Keep {@link REQUIRED_NODE_MAJOR} / {@link REQUIRED_NODE_MINOR} in\n * sync with `engines.node` in `package.json` (currently\n * `>=22.19.0`).\n */\n\nimport { err, ok, type Result } from \"./result.js\";\nimport { NAME } from \"./version.js\";\n\nexport const REQUIRED_NODE_MAJOR = 22;\nexport const REQUIRED_NODE_MINOR = 19;\n\n/**\n * Check whether `nodeVersion` (e.g. `\"22.19.0\"`, the value of\n * `process.versions.node`) satisfies the package's runtime floor.\n *\n * Returns `Ok(undefined)` on pass, `Err(message)` with a multi-line\n * upgrade message on fail. The message is plain text ready to be\n * written to stderr verbatim.\n */\nexport function checkNodeVersion(nodeVersion: string): Result<undefined, string> {\n  const parts = nodeVersion.split(\".\");\n  const major = Number(parts[0]);\n  const minor = Number(parts[1]);\n  if (\n    Number.isNaN(major) ||\n    Number.isNaN(minor) ||\n    major < REQUIRED_NODE_MAJOR ||\n    (major === REQUIRED_NODE_MAJOR && minor < REQUIRED_NODE_MINOR)\n  ) {\n    const required = `>=${String(REQUIRED_NODE_MAJOR)}.${String(REQUIRED_NODE_MINOR)}.0`;\n    return err(\n      [\n        `${NAME} requires Node.js ${required} (you have v${nodeVersion}).`,\n        \"\",\n        \"The underlying undici 8.x HTTP client uses markAsUncloneable\",\n        \"from node:worker_threads, available only on Node 22.19+.\",\n        \"Older Node crashes at import time with the cryptic message\",\n        \"`webidl.util.markAsUncloneable is not a function`.\",\n        \"\",\n        \"Please upgrade Node and re-run: https://nodejs.org/en/download\",\n      ].join(\"\\n\")\n    );\n  }\n  return ok(undefined);\n}\n","/**\n * Canonical catalogue of OAuth 2.0 scopes the Kaminari Ad MCP server\n * advertises in its protected-resource metadata (RFC 9728) and\n * `WWW-Authenticate: Bearer scope=\"...\"` challenge.\n *\n * The catalogue is intentionally static and lives in `shared/` because\n * (a) it has no runtime behaviour — it is data — and (b) it is read by\n * both the `protected-resource-metadata-handler` and the\n * `www-authenticate` builder. If a new scope is added on the\n * Authorization Server side, mirror it here in the same release so the\n * Resource Server (this process) advertises it.\n *\n * `offline_access` is part of the catalogue per RFC 6749 §6 because\n * the Authorization Server issues refresh tokens only when the client\n * requests this scope. Anthropic's Claude clients append it\n * automatically when the server advertises it in\n * `scopes_supported`/the `WWW-Authenticate` `scope=` parameter.\n */\n\n/**\n * Default scope catalogue, frozen at build time.\n *\n * MUST stay byte-identical to the Authorization Server's advertised\n * catalogue (`app.oauth_authorization.domain.entities.scope.advertised_scopes()`\n * — i.e. `sorted(KNOWN_SCOPES)`). The order is lexicographic, which\n * happens to yield the desired semantics for free: `:read` sorts before\n * `:write` within a resource, and `offline_access` sorts after every\n * `mcp:` scope.\n *\n * Read scopes grant the resource's view permission; write scopes grant\n * read + the resource's mutating permissions. billing/invoicing/account\n * are read-only over OAuth by design (money-spend / privilege-escalation\n * tools stay API-key only). When the AS catalogue changes, mirror it\n * here in the same release — `tests/unit/shared/oauth-scope-catalogue.test.ts`\n * pins the exact list so drift fails CI.\n */\nexport const DEFAULT_OAUTH_SCOPES: readonly string[] = Object.freeze([\n  \"mcp:account:read\",\n  \"mcp:alert_notifications:read\",\n  \"mcp:alert_notifications:write\",\n  \"mcp:alerts:read\",\n  \"mcp:alerts:write\",\n  \"mcp:billing:read\",\n  \"mcp:campaigns:read\",\n  \"mcp:campaigns:write\",\n  \"mcp:custom_rules:read\",\n  \"mcp:custom_rules:write\",\n  \"mcp:invoicing:read\",\n  \"mcp:policies:read\",\n  \"mcp:policies:write\",\n  \"mcp:scans:read\",\n  \"mcp:scans:write\",\n  \"mcp:tags:read\",\n  \"mcp:tags:write\",\n  \"mcp:taxonomies:read\",\n  \"mcp:taxonomies:write\",\n  \"mcp:webhooks:read\",\n  \"mcp:webhooks:write\",\n  \"offline_access\",\n]);\n","/**\n * Runtime configuration for `@kaminari-ad/mcp`.\n *\n * The single source of truth for all env-var reads. `process.env.X`\n * outside this file is a code-review blocker — every config value flows\n * through the zod-parsed {@link Config} object.\n */\n\nimport { z } from \"zod\";\n\nimport { DEFAULT_OAUTH_SCOPES } from \"./oauth-scope-catalogue.js\";\nimport { err, ok, type Result } from \"./result.js\";\n\n/**\n * MCP transport. `stdio` is for local install (one process per user);\n * `http` is for the hosted multi-tenant endpoint.\n */\nexport const TransportSchema = z.enum([\"stdio\", \"http\"]);\nexport type Transport = z.infer<typeof TransportSchema>;\n\n/**\n * pino log level.\n */\nexport const LogLevelSchema = z.enum([\"trace\", \"debug\", \"info\", \"warn\", \"error\", \"fatal\"]);\nexport type LogLevel = z.infer<typeof LogLevelSchema>;\n\n/**\n * pino log output format.\n *\n * - `pretty` — colorised single-line ANSI output for terminals. Default\n *   in stdio mode (operator reads stderr in their shell).\n * - `json` — newline-delimited JSON, one record per line. Default in\n *   HTTP mode (Docker/k8s log aggregators expect JSON). MCP hosts that\n *   capture stderr from the stdio process (Cursor, Claude Desktop)\n *   parse much better with `json` — flip this when the operator is a\n *   machine, not a human.\n */\nexport const LogFormatSchema = z.enum([\"pretty\", \"json\"]);\nexport type LogFormat = z.infer<typeof LogFormatSchema>;\n\n/**\n * Parsed configuration. All fields are `readonly` — mutation post-load\n * is a bug.\n */\nexport interface Config {\n  readonly transport: Transport;\n  readonly apiBaseUrl: string;\n  readonly logLevel: LogLevel;\n  readonly logFormat: LogFormat;\n  readonly httpPort: number;\n  readonly rateLimitRpm: number;\n  /**\n   * Set only in stdio mode. In HTTP mode the bootstrap MUST assert\n   * this is `undefined` (see CONTRIBUTING.md \"Tenant isolation\" §5).\n   */\n  readonly stdioApiKey: string | undefined;\n  /**\n   * Canonical MCP endpoint URL advertised as the `resource` field of\n   * the RFC 9728 protected-resource metadata document. Anthropic's\n   * Claude clients require this to match the URL the user enters in\n   * Claude exactly (including the path component).\n   */\n  readonly oauthProtectedResource: string;\n  /**\n   * Absolute URL where this server serves the protected-resource\n   * metadata JSON. Advertised back to clients via\n   * `WWW-Authenticate: Bearer resource_metadata=\"…\"` on 401.\n   */\n  readonly oauthProtectedResourceMetadataUrl: string;\n  /**\n   * Issuer URL of the Authorization Server that mints access tokens\n   * accepted by this Resource Server. Advertised as the first (and\n   * only) entry of the metadata's `authorization_servers` array.\n   */\n  readonly oauthAuthorizationServerUrl: string;\n  /**\n   * Scopes the Resource Server advertises in both the metadata's\n   * `scopes_supported` field and the 401 `WWW-Authenticate scope=…`\n   * parameter. Defaults to {@link DEFAULT_OAUTH_SCOPES}; operators\n   * may override via `KAMINARI_AD_OAUTH_SCOPES` (space-separated).\n   */\n  readonly oauthScopes: readonly string[];\n}\n\n/**\n * Every env var carries the `KAMINARI_AD_` namespace prefix.\n *\n * Why: this process inherits the host's full environment (Cursor /\n * Claude Desktop / Docker compose / k8s pod), where `API_BASE_URL` /\n * `LOG_LEVEL` / `HTTP_PORT` are common generic names. Without a\n * namespace, another tool in the same shell trivially poisons our\n * config — e.g. `LOG_LEVEL=debug` set for some app library suddenly\n * makes the MCP server log every secret-redacted-but-still-noisy\n * request to stderr, and the user has no idea why. With the prefix\n * the boundary is explicit and `env | grep KAMINARI_AD_` enumerates\n * exactly what we read.\n */\nconst RawSchema = z.object({\n  KAMINARI_AD_TRANSPORT: TransportSchema.default(\"stdio\"),\n  // `app.kaminari.ad` is the API host; `kaminari.ad` (no subdomain)\n  // is the marketing landing page and does NOT serve /api/v1/*.\n  // Setting this wrong (e.g. the root domain) makes every tool call\n  // fail with HTTP 404 — the symptom that surfaced this default bug\n  // in v0.2.0.\n  KAMINARI_AD_API_URL: z.string().url().default(\"https://app.kaminari.ad\"),\n  KAMINARI_AD_LOG_LEVEL: LogLevelSchema.default(\"info\"),\n  KAMINARI_AD_LOG_FORMAT: LogFormatSchema.optional(),\n  KAMINARI_AD_HTTP_PORT: z.coerce.number().int().min(0).max(65535).default(8080),\n  KAMINARI_AD_RATE_LIMIT_RPM: z.coerce.number().int().min(1).max(10_000).default(120),\n  KAMINARI_AD_API_KEY: z.string().min(8).optional(),\n  // OAuth discovery (RFC 9728 protected-resource + RFC 8414 AS\n  // metadata). All three URLs default to the production deployment;\n  // local/staging operators override per-environment.\n  KAMINARI_AD_OAUTH_PROTECTED_RESOURCE: z.string().url().default(\"https://mcp.kaminari.ad/mcp\"),\n  KAMINARI_AD_OAUTH_PROTECTED_RESOURCE_METADATA_URL: z\n    .string()\n    .url()\n    .default(\"https://mcp.kaminari.ad/.well-known/oauth-protected-resource\"),\n  KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL: z.string().url().default(\"https://app.kaminari.ad\"),\n  // Space-separated scope list. We split on /\\s+/ post-parse and drop\n  // empty tokens so accidental double-spaces don't corrupt the array.\n  KAMINARI_AD_OAUTH_SCOPES: z.string().optional(),\n});\n\n/**\n * Parse and validate environment variables into a {@link Config}.\n *\n * Returns `Err<ConfigError>` on validation failure. Caller (typically\n * `bin.ts`) prints the error and exits non-zero.\n *\n * `KAMINARI_AD_LOG_FORMAT` defaults are transport-dependent: `pretty`\n * for stdio (terminal-facing) and `json` for http (aggregator-facing).\n * If the user sets the env var explicitly, that wins.\n */\nexport function loadConfig(env: NodeJS.ProcessEnv): Result<Config, ConfigError> {\n  const parsed = RawSchema.safeParse(env);\n  if (!parsed.success) {\n    return err({ kind: \"invalid\", issues: parsed.error.flatten().fieldErrors });\n  }\n  const raw = parsed.data;\n  const transport = raw.KAMINARI_AD_TRANSPORT;\n  const logFormat = raw.KAMINARI_AD_LOG_FORMAT ?? (transport === \"stdio\" ? \"pretty\" : \"json\");\n  const oauthScopesRaw = raw.KAMINARI_AD_OAUTH_SCOPES;\n  const oauthScopes: readonly string[] =\n    oauthScopesRaw === undefined\n      ? DEFAULT_OAUTH_SCOPES\n      : Object.freeze(oauthScopesRaw.split(/\\s+/).filter((s) => s.length > 0));\n  return ok({\n    transport,\n    apiBaseUrl: raw.KAMINARI_AD_API_URL,\n    logLevel: raw.KAMINARI_AD_LOG_LEVEL,\n    logFormat,\n    httpPort: raw.KAMINARI_AD_HTTP_PORT,\n    rateLimitRpm: raw.KAMINARI_AD_RATE_LIMIT_RPM,\n    stdioApiKey: raw.KAMINARI_AD_API_KEY,\n    oauthProtectedResource: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE,\n    oauthProtectedResourceMetadataUrl: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE_METADATA_URL,\n    oauthAuthorizationServerUrl: raw.KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL,\n    oauthScopes,\n  });\n}\n\n/**\n * Errors from {@link loadConfig}.\n */\nexport interface ConfigError {\n  readonly kind: \"invalid\";\n  readonly issues: Readonly<Record<string, readonly string[] | undefined>>;\n}\n","/**\n * CLI entrypoint for `@kaminari-ad/mcp`.\n *\n * Dispatches to a transport-specific composition root (stdio or HTTP)\n * based on the `--transport` flag (or `TRANSPORT` env var, with stdio\n * as the default).\n *\n * Wire-up is intentionally minimal — every dependency is constructed\n * inside the chosen bootstrap, never here. This file just parses argv\n * and config, then hands off.\n *\n * Imports policy: the STATIC imports below MUST stay free of any\n * runtime dependency that requires Node >= 22.19 (undici, MCP SDK,\n * pino). Otherwise the Node-version preflight in `main()` runs too\n * late — those modules crash at import time on older Node. The\n * transport bootstraps pull undici / MCP SDK / pino via dynamic\n * `await import()` so the preflight gets to fire first.\n */\n\nimport process from \"node:process\";\n\nimport { checkNodeVersion } from \"./shared/check-node-version.js\";\nimport { loadConfig, type Transport } from \"./shared/config.js\";\nimport { NAME, VERSION } from \"./shared/version.js\";\n\nfunction parseTransportFlag(argv: readonly string[]): Transport | undefined {\n  for (const arg of argv) {\n    if (arg === \"--transport=stdio\" || arg === \"--transport=http\") {\n      return arg === \"--transport=stdio\" ? \"stdio\" : \"http\";\n    }\n    if (arg.startsWith(\"--transport=\")) {\n      const value = arg.slice(\"--transport=\".length);\n      if (value === \"stdio\" || value === \"http\") return value;\n    }\n  }\n  return undefined;\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n\n  // Informational flags handled BEFORE the Node preflight so users on\n  // any Node can confirm the binary resolves and discover the help\n  // text — the only paths that touch zero runtime deps.\n  if (argv.includes(\"--version\") || argv.includes(\"-v\")) {\n    process.stdout.write(`${NAME} ${VERSION}\\n`);\n    return 0;\n  }\n  if (argv.includes(\"--help\") || argv.includes(\"-h\")) {\n    process.stdout.write(\n      [\n        `${NAME} ${VERSION}`,\n        ``,\n        `Usage:`,\n        `  kaminari-ad-mcp [--transport=stdio|http]`,\n        ``,\n        `Transports:`,\n        `  stdio (default)  Local install — auth via KAMINARI_AD_API_KEY env var.`,\n        `  http             Hosted multi-tenant server — auth via incoming Authorization header.`,\n        ``,\n        `Configuration is documented in .env.example.`,\n        ``,\n      ].join(\"\\n\")\n    );\n    return 0;\n  }\n\n  // Preflight: bail with a clean upgrade message BEFORE any dynamic\n  // import pulls undici / MCP SDK / pino — all three require\n  // Node 22.19+ and crash at import time on older Node. Without this\n  // gate users see undici's cryptic\n  // `webidl.util.markAsUncloneable is not a function` instead.\n  const check = checkNodeVersion(process.versions.node);\n  if (check.isErr()) {\n    process.stderr.write(`${check.error}\\n`);\n    return 2;\n  }\n\n  const cliTransport = parseTransportFlag(argv);\n  const env: NodeJS.ProcessEnv = cliTransport\n    ? { ...process.env, KAMINARI_AD_TRANSPORT: cliTransport }\n    : process.env;\n\n  const configResult = loadConfig(env);\n  if (configResult.isErr()) {\n    process.stderr.write(`Invalid configuration: ${JSON.stringify(configResult.error.issues)}\\n`);\n    return 2;\n  }\n  const config = configResult.value;\n\n  if (config.transport === \"stdio\") {\n    const { bootstrapStdio } = await import(\"./presentation/stdio/stdio-bootstrap.js\");\n    return bootstrapStdio(config);\n  }\n  const { bootstrapHttp } = await import(\"./presentation/http/http-bootstrap.js\");\n  return bootstrapHttp(config);\n}\n\nmain().then(\n  (code) => {\n    process.exit(code);\n  },\n  (error: unknown) => {\n    process.stderr.write(`Fatal: ${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exit(1);\n  }\n);\n"]}
+{"version":3,"sources":["../src/shared/check-node-version.ts","../src/shared/oauth-scope-catalogue.ts","../src/shared/config.ts","../src/bin.ts"],"names":[],"mappings":";;;;;;AAoBO,IAAM,mBAAA,GAAsB,EAAA;AAC5B,IAAM,mBAAA,GAAsB,EAAA;AAU5B,SAAS,iBAAiB,WAAA,EAAgD;AAC/E,EAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,KAAA,CAAM,GAAG,CAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,CAAA;AAC7B,EAAA,IACE,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,MAAA,CAAO,KAAA,CAAM,KAAK,CAAA,IAClB,KAAA,GAAQ,mBAAA,IACP,KAAA,KAAU,mBAAA,IAAuB,QAAQ,mBAAA,EAC1C;AACA,IAAA,MAAM,QAAA,GAAW,KAAK,MAAA,CAAO,mBAAmB,CAAC,CAAA,CAAA,EAAI,MAAA,CAAO,mBAAmB,CAAC,CAAA,EAAA,CAAA;AAChF,IAAA,OAAO,GAAA;AAAA,MACL;AAAA,QACE,CAAA,EAAG,IAAI,CAAA,kBAAA,EAAqB,QAAQ,eAAe,WAAW,CAAA,EAAA,CAAA;AAAA,QAC9D,EAAA;AAAA,QACA,8DAAA;AAAA,QACA,0DAAA;AAAA,QACA,4DAAA;AAAA,QACA,oDAAA;AAAA,QACA,EAAA;AAAA,QACA;AAAA,OACF,CAAE,KAAK,IAAI;AAAA,KACb;AAAA,EACF;AACA,EAAA,OAAO,GAAG,MAAS,CAAA;AACrB;;;ACpBO,IAAM,oBAAA,GAA0C,OAAO,MAAA,CAAO;AAAA,EACnE,kBAAA;AAAA,EACA,8BAAA;AAAA,EACA,+BAAA;AAAA,EACA,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,kBAAA;AAAA,EACA,oBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,eAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA,sBAAA;AAAA,EACA,mBAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF,CAAC,CAAA;;;AC1CM,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,MAAM,CAAC,CAAA;AAMhD,IAAM,cAAA,GAAiB,CAAA,CAAE,IAAA,CAAK,CAAC,OAAA,EAAS,SAAS,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,OAAO,CAAC,CAAA;AAclF,IAAM,kBAAkB,CAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,MAAM,CAAC,CAAA;AAkExD,IAAM,SAAA,GAAY,EAAE,MAAA,CAAO;AAAA,EACzB,qBAAA,EAAuB,eAAA,CAAgB,OAAA,CAAQ,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtD,qBAAqB,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,yBAAyB,CAAA;AAAA,EACvE,qBAAA,EAAuB,cAAA,CAAe,OAAA,CAAQ,MAAM,CAAA;AAAA,EACpD,sBAAA,EAAwB,gBAAgB,QAAA,EAAS;AAAA,EACjD,qBAAA,EAAuB,CAAA,CAAE,MAAA,CAAO,MAAA,GAAS,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,KAAK,CAAA,CAAE,QAAQ,IAAI,CAAA;AAAA,EAC7E,0BAAA,EAA4B,CAAA,CAAE,MAAA,CAAO,MAAA,GAAS,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,GAAA,CAAI,GAAM,CAAA,CAAE,QAAQ,GAAG,CAAA;AAAA,EAClF,qBAAqB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,CAAC,EAAE,QAAA,EAAS;AAAA;AAAA;AAAA;AAAA,EAIhD,sCAAsC,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,6BAA6B,CAAA;AAAA,EAC5F,mDAAmD,CAAA,CAChD,MAAA,GACA,GAAA,EAAI,CACJ,QAAQ,8DAA8D,CAAA;AAAA,EACzE,4CAA4C,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,yBAAyB,CAAA;AAAA;AAAA;AAAA,EAG9F,wBAAA,EAA0B,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC9C,6BAA6B,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,QAAQ,yBAAyB;AACjF,CAAC,CAAA;AAYM,SAAS,WAAW,GAAA,EAAqD;AAC9E,EAAA,MAAM,MAAA,GAAS,SAAA,CAAU,SAAA,CAAU,GAAG,CAAA;AACtC,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO,GAAA,CAAI,EAAE,IAAA,EAAM,SAAA,EAAW,MAAA,EAAQ,OAAO,KAAA,CAAM,OAAA,EAAQ,CAAE,WAAA,EAAa,CAAA;AAAA,EAC5E;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,IAAA;AACnB,EAAA,MAAM,YAAY,GAAA,CAAI,qBAAA;AACtB,EAAA,MAAM,SAAA,GAAY,GAAA,CAAI,sBAAA,KAA2B,SAAA,KAAc,UAAU,QAAA,GAAW,MAAA,CAAA;AACpF,EAAA,MAAM,iBAAiB,GAAA,CAAI,wBAAA;AAC3B,EAAA,MAAM,cACJ,cAAA,KAAmB,MAAA,GACf,oBAAA,GACA,MAAA,CAAO,OAAO,cAAA,CAAe,KAAA,CAAM,KAAK,CAAA,CAAE,OAAO,CAAC,CAAA,KAAM,CAAA,CAAE,MAAA,GAAS,CAAC,CAAC,CAAA;AAC3E,EAAA,OAAO,EAAA,CAAG;AAAA,IACR,SAAA;AAAA,IACA,YAAY,GAAA,CAAI,mBAAA;AAAA,IAChB,UAAU,GAAA,CAAI,qBAAA;AAAA,IACd,SAAA;AAAA,IACA,UAAU,GAAA,CAAI,qBAAA;AAAA,IACd,cAAc,GAAA,CAAI,0BAAA;AAAA,IAClB,aAAa,GAAA,CAAI,mBAAA;AAAA,IACjB,wBAAwB,GAAA,CAAI,oCAAA;AAAA,IAC5B,mCAAmC,GAAA,CAAI,iDAAA;AAAA,IACvC,6BAA6B,GAAA,CAAI,0CAAA;AAAA,IACjC,WAAA;AAAA,IACA,YAAY,GAAA,CAAI;AAAA,GACjB,CAAA;AACH;;;AC/IA,SAAS,mBAAmB,IAAA,EAAgD;AAC1E,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,IAAI,GAAA,KAAQ,mBAAA,IAAuB,GAAA,KAAQ,kBAAA,EAAoB;AAC7D,MAAA,OAAO,GAAA,KAAQ,sBAAsB,OAAA,GAAU,MAAA;AAAA,IACjD;AACA,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,cAAc,CAAA,EAAG;AAClC,MAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,cAAA,CAAe,MAAM,CAAA;AAC7C,MAAA,IAAI,KAAA,KAAU,OAAA,IAAW,KAAA,KAAU,MAAA,EAAQ,OAAO,KAAA;AAAA,IACpD;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAEA,eAAe,IAAA,GAAwB;AACrC,EAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAKjC,EAAA,IAAI,KAAK,QAAA,CAAS,WAAW,KAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG;AACrD,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,IAAI,IAAI,OAAO;AAAA,CAAI,CAAA;AAC3C,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,IAAI,KAAK,QAAA,CAAS,QAAQ,KAAK,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG;AAClD,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA;AAAA,MACb;AAAA,QACE,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAAA,QAClB,CAAA,CAAA;AAAA,QACA,CAAA,MAAA,CAAA;AAAA,QACA,CAAA,0CAAA,CAAA;AAAA,QACA,CAAA,CAAA;AAAA,QACA,CAAA,WAAA,CAAA;AAAA,QACA,CAAA,6EAAA,CAAA;AAAA,QACA,CAAA,4FAAA,CAAA;AAAA,QACA,CAAA,CAAA;AAAA,QACA,CAAA,4CAAA,CAAA;AAAA,QACA,CAAA;AAAA,OACF,CAAE,KAAK,IAAI;AAAA,KACb;AACA,IAAA,OAAO,CAAA;AAAA,EACT;AAOA,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,OAAA,CAAQ,QAAA,CAAS,IAAI,CAAA;AACpD,EAAA,IAAI,KAAA,CAAM,OAAM,EAAG;AACjB,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,KAAA,CAAM,KAAK;AAAA,CAAI,CAAA;AACvC,IAAA,OAAO,CAAA;AAAA,EACT;AAEA,EAAA,MAAM,YAAA,GAAe,mBAAmB,IAAI,CAAA;AAC5C,EAAA,MAAM,GAAA,GAAyB,eAC3B,EAAE,GAAG,QAAQ,GAAA,EAAK,qBAAA,EAAuB,YAAA,EAAa,GACtD,OAAA,CAAQ,GAAA;AAEZ,EAAA,MAAM,YAAA,GAAe,WAAW,GAAG,CAAA;AACnC,EAAA,IAAI,YAAA,CAAa,OAAM,EAAG;AACxB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,uBAAA,EAA0B,IAAA,CAAK,UAAU,YAAA,CAAa,KAAA,CAAM,MAAM,CAAC;AAAA,CAAI,CAAA;AAC5F,IAAA,OAAO,CAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAS,YAAA,CAAa,KAAA;AAE5B,EAAA,IAAI,MAAA,CAAO,cAAc,OAAA,EAAS;AAChC,IAAA,MAAM,EAAE,cAAA,EAAe,GAAI,MAAM,OAAO,+BAAyC,CAAA;AACjF,IAAA,OAAO,eAAe,MAAM,CAAA;AAAA,EAC9B;AACA,EAAA,MAAM,EAAE,aAAA,EAAc,GAAI,MAAM,OAAO,8BAAuC,CAAA;AAC9E,EAAA,OAAO,cAAc,MAAM,CAAA;AAC7B;AAEA,IAAA,EAAK,CAAE,IAAA;AAAA,EACL,CAAC,IAAA,KAAS;AACR,IAAA,OAAA,CAAQ,KAAK,IAAI,CAAA;AAAA,EACnB,CAAA;AAAA,EACA,CAAC,KAAA,KAAmB;AAClB,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,OAAA,EAAU,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CAAC;AAAA,CAAI,CAAA;AACzF,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACF,CAAA","file":"bin.js","sourcesContent":["/**\n * Pure Node-version preflight, extracted from {@link bin.ts} so it\n * can be unit-tested without `process.exit` side effects.\n *\n * Why this exists: `undici@8.x` removed feature probes in v8.0.3 and\n * imports `markAsUncloneable` from `node:worker_threads`\n * unconditionally — that symbol only exists on Node 22.19+. Older\n * Node versions crash at import time with the cryptic message\n * `webidl.util.markAsUncloneable is not a function`. We surface a\n * clean upgrade message instead, BEFORE any dynamic import pulls\n * undici.\n *\n * Keep {@link REQUIRED_NODE_MAJOR} / {@link REQUIRED_NODE_MINOR} in\n * sync with `engines.node` in `package.json` (currently\n * `>=22.19.0`).\n */\n\nimport { err, ok, type Result } from \"./result.js\";\nimport { NAME } from \"./version.js\";\n\nexport const REQUIRED_NODE_MAJOR = 22;\nexport const REQUIRED_NODE_MINOR = 19;\n\n/**\n * Check whether `nodeVersion` (e.g. `\"22.19.0\"`, the value of\n * `process.versions.node`) satisfies the package's runtime floor.\n *\n * Returns `Ok(undefined)` on pass, `Err(message)` with a multi-line\n * upgrade message on fail. The message is plain text ready to be\n * written to stderr verbatim.\n */\nexport function checkNodeVersion(nodeVersion: string): Result<undefined, string> {\n  const parts = nodeVersion.split(\".\");\n  const major = Number(parts[0]);\n  const minor = Number(parts[1]);\n  if (\n    Number.isNaN(major) ||\n    Number.isNaN(minor) ||\n    major < REQUIRED_NODE_MAJOR ||\n    (major === REQUIRED_NODE_MAJOR && minor < REQUIRED_NODE_MINOR)\n  ) {\n    const required = `>=${String(REQUIRED_NODE_MAJOR)}.${String(REQUIRED_NODE_MINOR)}.0`;\n    return err(\n      [\n        `${NAME} requires Node.js ${required} (you have v${nodeVersion}).`,\n        \"\",\n        \"The underlying undici 8.x HTTP client uses markAsUncloneable\",\n        \"from node:worker_threads, available only on Node 22.19+.\",\n        \"Older Node crashes at import time with the cryptic message\",\n        \"`webidl.util.markAsUncloneable is not a function`.\",\n        \"\",\n        \"Please upgrade Node and re-run: https://nodejs.org/en/download\",\n      ].join(\"\\n\")\n    );\n  }\n  return ok(undefined);\n}\n","/**\n * Canonical catalogue of OAuth 2.0 scopes the Kaminari Ad MCP server\n * advertises in its protected-resource metadata (RFC 9728) and\n * `WWW-Authenticate: Bearer scope=\"...\"` challenge.\n *\n * The catalogue is intentionally static and lives in `shared/` because\n * (a) it has no runtime behaviour — it is data — and (b) it is read by\n * both the `protected-resource-metadata-handler` and the\n * `www-authenticate` builder. If a new scope is added on the\n * Authorization Server side, mirror it here in the same release so the\n * Resource Server (this process) advertises it.\n *\n * `offline_access` is part of the catalogue per RFC 6749 §6 because\n * the Authorization Server issues refresh tokens only when the client\n * requests this scope. Anthropic's Claude clients append it\n * automatically when the server advertises it in\n * `scopes_supported`/the `WWW-Authenticate` `scope=` parameter.\n */\n\n/**\n * Default scope catalogue, frozen at build time.\n *\n * MUST stay byte-identical to the Authorization Server's advertised\n * catalogue (`app.oauth_authorization.domain.entities.scope.advertised_scopes()`\n * — i.e. `sorted(KNOWN_SCOPES)`). The order is lexicographic, which\n * happens to yield the desired semantics for free: `:read` sorts before\n * `:write` within a resource, and `offline_access` sorts after every\n * `mcp:` scope.\n *\n * Read scopes grant the resource's view permission; write scopes grant\n * read + the resource's mutating permissions. billing/invoicing/account\n * are read-only over OAuth by design (money-spend / privilege-escalation\n * tools stay API-key only). When the AS catalogue changes, mirror it\n * here in the same release — `tests/unit/shared/oauth-scope-catalogue.test.ts`\n * pins the exact list so drift fails CI.\n */\nexport const DEFAULT_OAUTH_SCOPES: readonly string[] = Object.freeze([\n  \"mcp:account:read\",\n  \"mcp:alert_notifications:read\",\n  \"mcp:alert_notifications:write\",\n  \"mcp:alerts:read\",\n  \"mcp:alerts:write\",\n  \"mcp:billing:read\",\n  \"mcp:campaigns:read\",\n  \"mcp:campaigns:write\",\n  \"mcp:custom_rules:read\",\n  \"mcp:custom_rules:write\",\n  \"mcp:invoicing:read\",\n  \"mcp:policies:read\",\n  \"mcp:policies:write\",\n  \"mcp:scans:read\",\n  \"mcp:scans:write\",\n  \"mcp:tags:read\",\n  \"mcp:tags:write\",\n  \"mcp:taxonomies:read\",\n  \"mcp:taxonomies:write\",\n  \"mcp:webhooks:read\",\n  \"mcp:webhooks:write\",\n  \"offline_access\",\n]);\n","/**\n * Runtime configuration for `@kaminari-ad/mcp`.\n *\n * The single source of truth for all env-var reads. `process.env.X`\n * outside this file is a code-review blocker — every config value flows\n * through the zod-parsed {@link Config} object.\n */\n\nimport { z } from \"zod\";\n\nimport { DEFAULT_OAUTH_SCOPES } from \"./oauth-scope-catalogue.js\";\nimport { err, ok, type Result } from \"./result.js\";\n\n/**\n * MCP transport. `stdio` is for local install (one process per user);\n * `http` is for the hosted multi-tenant endpoint.\n */\nexport const TransportSchema = z.enum([\"stdio\", \"http\"]);\nexport type Transport = z.infer<typeof TransportSchema>;\n\n/**\n * pino log level.\n */\nexport const LogLevelSchema = z.enum([\"trace\", \"debug\", \"info\", \"warn\", \"error\", \"fatal\"]);\nexport type LogLevel = z.infer<typeof LogLevelSchema>;\n\n/**\n * pino log output format.\n *\n * - `pretty` — colorised single-line ANSI output for terminals. Default\n *   in stdio mode (operator reads stderr in their shell).\n * - `json` — newline-delimited JSON, one record per line. Default in\n *   HTTP mode (Docker/k8s log aggregators expect JSON). MCP hosts that\n *   capture stderr from the stdio process (Cursor, Claude Desktop)\n *   parse much better with `json` — flip this when the operator is a\n *   machine, not a human.\n */\nexport const LogFormatSchema = z.enum([\"pretty\", \"json\"]);\nexport type LogFormat = z.infer<typeof LogFormatSchema>;\n\n/**\n * Parsed configuration. All fields are `readonly` — mutation post-load\n * is a bug.\n */\nexport interface Config {\n  readonly transport: Transport;\n  readonly apiBaseUrl: string;\n  readonly logLevel: LogLevel;\n  readonly logFormat: LogFormat;\n  readonly httpPort: number;\n  readonly rateLimitRpm: number;\n  /**\n   * Set only in stdio mode. In HTTP mode the bootstrap MUST assert\n   * this is `undefined` (see CONTRIBUTING.md \"Tenant isolation\" §5).\n   */\n  readonly stdioApiKey: string | undefined;\n  /**\n   * Canonical MCP endpoint URL advertised as the `resource` field of\n   * the RFC 9728 protected-resource metadata document. Anthropic's\n   * Claude clients require this to match the URL the user enters in\n   * Claude exactly (including the path component).\n   */\n  readonly oauthProtectedResource: string;\n  /**\n   * Absolute URL where this server serves the protected-resource\n   * metadata JSON. Advertised back to clients via\n   * `WWW-Authenticate: Bearer resource_metadata=\"…\"` on 401.\n   */\n  readonly oauthProtectedResourceMetadataUrl: string;\n  /**\n   * Issuer URL of the Authorization Server that mints access tokens\n   * accepted by this Resource Server. Advertised as the first (and\n   * only) entry of the metadata's `authorization_servers` array.\n   */\n  readonly oauthAuthorizationServerUrl: string;\n  /**\n   * Scopes the Resource Server advertises in both the metadata's\n   * `scopes_supported` field and the 401 `WWW-Authenticate scope=…`\n   * parameter. Defaults to {@link DEFAULT_OAUTH_SCOPES}; operators\n   * may override via `KAMINARI_AD_OAUTH_SCOPES` (space-separated).\n   */\n  readonly oauthScopes: readonly string[];\n  /**\n   * Public landing page for the MCP server. `GET /` on the hosted\n   * endpoint permanently redirects here so the bare subdomain is not a\n   * dead end for people and crawlers.\n   */\n  readonly landingUrl: string;\n}\n\n/**\n * Every env var carries the `KAMINARI_AD_` namespace prefix.\n *\n * Why: this process inherits the host's full environment (Cursor /\n * Claude Desktop / Docker compose / k8s pod), where `API_BASE_URL` /\n * `LOG_LEVEL` / `HTTP_PORT` are common generic names. Without a\n * namespace, another tool in the same shell trivially poisons our\n * config — e.g. `LOG_LEVEL=debug` set for some app library suddenly\n * makes the MCP server log every secret-redacted-but-still-noisy\n * request to stderr, and the user has no idea why. With the prefix\n * the boundary is explicit and `env | grep KAMINARI_AD_` enumerates\n * exactly what we read.\n */\nconst RawSchema = z.object({\n  KAMINARI_AD_TRANSPORT: TransportSchema.default(\"stdio\"),\n  // `app.kaminari.ad` is the API host; `kaminari.ad` (no subdomain)\n  // is the marketing landing page and does NOT serve /api/v1/*.\n  // Setting this wrong (e.g. the root domain) makes every tool call\n  // fail with HTTP 404 — the symptom that surfaced this default bug\n  // in v0.2.0.\n  KAMINARI_AD_API_URL: z.string().url().default(\"https://app.kaminari.ad\"),\n  KAMINARI_AD_LOG_LEVEL: LogLevelSchema.default(\"info\"),\n  KAMINARI_AD_LOG_FORMAT: LogFormatSchema.optional(),\n  KAMINARI_AD_HTTP_PORT: z.coerce.number().int().min(0).max(65535).default(8080),\n  KAMINARI_AD_RATE_LIMIT_RPM: z.coerce.number().int().min(1).max(10_000).default(120),\n  KAMINARI_AD_API_KEY: z.string().min(8).optional(),\n  // OAuth discovery (RFC 9728 protected-resource + RFC 8414 AS\n  // metadata). All three URLs default to the production deployment;\n  // local/staging operators override per-environment.\n  KAMINARI_AD_OAUTH_PROTECTED_RESOURCE: z.string().url().default(\"https://mcp.kaminari.ad/mcp\"),\n  KAMINARI_AD_OAUTH_PROTECTED_RESOURCE_METADATA_URL: z\n    .string()\n    .url()\n    .default(\"https://mcp.kaminari.ad/.well-known/oauth-protected-resource\"),\n  KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL: z.string().url().default(\"https://app.kaminari.ad\"),\n  // Space-separated scope list. We split on /\\s+/ post-parse and drop\n  // empty tokens so accidental double-spaces don't corrupt the array.\n  KAMINARI_AD_OAUTH_SCOPES: z.string().optional(),\n  KAMINARI_AD_MCP_LANDING_URL: z.string().url().default(\"https://kaminari.ad/mcp\"),\n});\n\n/**\n * Parse and validate environment variables into a {@link Config}.\n *\n * Returns `Err<ConfigError>` on validation failure. Caller (typically\n * `bin.ts`) prints the error and exits non-zero.\n *\n * `KAMINARI_AD_LOG_FORMAT` defaults are transport-dependent: `pretty`\n * for stdio (terminal-facing) and `json` for http (aggregator-facing).\n * If the user sets the env var explicitly, that wins.\n */\nexport function loadConfig(env: NodeJS.ProcessEnv): Result<Config, ConfigError> {\n  const parsed = RawSchema.safeParse(env);\n  if (!parsed.success) {\n    return err({ kind: \"invalid\", issues: parsed.error.flatten().fieldErrors });\n  }\n  const raw = parsed.data;\n  const transport = raw.KAMINARI_AD_TRANSPORT;\n  const logFormat = raw.KAMINARI_AD_LOG_FORMAT ?? (transport === \"stdio\" ? \"pretty\" : \"json\");\n  const oauthScopesRaw = raw.KAMINARI_AD_OAUTH_SCOPES;\n  const oauthScopes: readonly string[] =\n    oauthScopesRaw === undefined\n      ? DEFAULT_OAUTH_SCOPES\n      : Object.freeze(oauthScopesRaw.split(/\\s+/).filter((s) => s.length > 0));\n  return ok({\n    transport,\n    apiBaseUrl: raw.KAMINARI_AD_API_URL,\n    logLevel: raw.KAMINARI_AD_LOG_LEVEL,\n    logFormat,\n    httpPort: raw.KAMINARI_AD_HTTP_PORT,\n    rateLimitRpm: raw.KAMINARI_AD_RATE_LIMIT_RPM,\n    stdioApiKey: raw.KAMINARI_AD_API_KEY,\n    oauthProtectedResource: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE,\n    oauthProtectedResourceMetadataUrl: raw.KAMINARI_AD_OAUTH_PROTECTED_RESOURCE_METADATA_URL,\n    oauthAuthorizationServerUrl: raw.KAMINARI_AD_OAUTH_AUTHORIZATION_SERVER_URL,\n    oauthScopes,\n    landingUrl: raw.KAMINARI_AD_MCP_LANDING_URL,\n  });\n}\n\n/**\n * Errors from {@link loadConfig}.\n */\nexport interface ConfigError {\n  readonly kind: \"invalid\";\n  readonly issues: Readonly<Record<string, readonly string[] | undefined>>;\n}\n","/**\n * CLI entrypoint for `@kaminari-ad/mcp`.\n *\n * Dispatches to a transport-specific composition root (stdio or HTTP)\n * based on the `--transport` flag (or `TRANSPORT` env var, with stdio\n * as the default).\n *\n * Wire-up is intentionally minimal — every dependency is constructed\n * inside the chosen bootstrap, never here. This file just parses argv\n * and config, then hands off.\n *\n * Imports policy: the STATIC imports below MUST stay free of any\n * runtime dependency that requires Node >= 22.19 (undici, MCP SDK,\n * pino). Otherwise the Node-version preflight in `main()` runs too\n * late — those modules crash at import time on older Node. The\n * transport bootstraps pull undici / MCP SDK / pino via dynamic\n * `await import()` so the preflight gets to fire first.\n */\n\nimport process from \"node:process\";\n\nimport { checkNodeVersion } from \"./shared/check-node-version.js\";\nimport { loadConfig, type Transport } from \"./shared/config.js\";\nimport { NAME, VERSION } from \"./shared/version.js\";\n\nfunction parseTransportFlag(argv: readonly string[]): Transport | undefined {\n  for (const arg of argv) {\n    if (arg === \"--transport=stdio\" || arg === \"--transport=http\") {\n      return arg === \"--transport=stdio\" ? \"stdio\" : \"http\";\n    }\n    if (arg.startsWith(\"--transport=\")) {\n      const value = arg.slice(\"--transport=\".length);\n      if (value === \"stdio\" || value === \"http\") return value;\n    }\n  }\n  return undefined;\n}\n\nasync function main(): Promise<number> {\n  const argv = process.argv.slice(2);\n\n  // Informational flags handled BEFORE the Node preflight so users on\n  // any Node can confirm the binary resolves and discover the help\n  // text — the only paths that touch zero runtime deps.\n  if (argv.includes(\"--version\") || argv.includes(\"-v\")) {\n    process.stdout.write(`${NAME} ${VERSION}\\n`);\n    return 0;\n  }\n  if (argv.includes(\"--help\") || argv.includes(\"-h\")) {\n    process.stdout.write(\n      [\n        `${NAME} ${VERSION}`,\n        ``,\n        `Usage:`,\n        `  kaminari-ad-mcp [--transport=stdio|http]`,\n        ``,\n        `Transports:`,\n        `  stdio (default)  Local install — auth via KAMINARI_AD_API_KEY env var.`,\n        `  http             Hosted multi-tenant server — auth via incoming Authorization header.`,\n        ``,\n        `Configuration is documented in .env.example.`,\n        ``,\n      ].join(\"\\n\")\n    );\n    return 0;\n  }\n\n  // Preflight: bail with a clean upgrade message BEFORE any dynamic\n  // import pulls undici / MCP SDK / pino — all three require\n  // Node 22.19+ and crash at import time on older Node. Without this\n  // gate users see undici's cryptic\n  // `webidl.util.markAsUncloneable is not a function` instead.\n  const check = checkNodeVersion(process.versions.node);\n  if (check.isErr()) {\n    process.stderr.write(`${check.error}\\n`);\n    return 2;\n  }\n\n  const cliTransport = parseTransportFlag(argv);\n  const env: NodeJS.ProcessEnv = cliTransport\n    ? { ...process.env, KAMINARI_AD_TRANSPORT: cliTransport }\n    : process.env;\n\n  const configResult = loadConfig(env);\n  if (configResult.isErr()) {\n    process.stderr.write(`Invalid configuration: ${JSON.stringify(configResult.error.issues)}\\n`);\n    return 2;\n  }\n  const config = configResult.value;\n\n  if (config.transport === \"stdio\") {\n    const { bootstrapStdio } = await import(\"./presentation/stdio/stdio-bootstrap.js\");\n    return bootstrapStdio(config);\n  }\n  const { bootstrapHttp } = await import(\"./presentation/http/http-bootstrap.js\");\n  return bootstrapHttp(config);\n}\n\nmain().then(\n  (code) => {\n    process.exit(code);\n  },\n  (error: unknown) => {\n    process.stderr.write(`Fatal: ${error instanceof Error ? error.message : String(error)}\\n`);\n    process.exit(1);\n  }\n);\n"]}

package/dist/{chunk-6INS6YMW.js → chunk-3G2F3FOW.js}

@@ -3,8 +3,8 @@ export { err, ok } from 'neverthrow';
 
 // src/shared/version.ts
 var NAME = "@kaminari-ad/mcp";
-var VERSION = "0.23.0";
+var VERSION = "0.24.1";
 
 export { NAME, VERSION };
-//# sourceMappingURL=chunk-6INS6YMW.js.map
-//# sourceMappingURL=chunk-6INS6YMW.js.map
+//# sourceMappingURL=chunk-3G2F3FOW.js.map
+//# sourceMappingURL=chunk-3G2F3FOW.js.map

package/dist/{chunk-6INS6YMW.js.map → chunk-3G2F3FOW.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-6INS6YMW.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.23.0\";\n"]}
+{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-3G2F3FOW.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.24.1\";\n"]}

package/dist/{chunk-XJZE6KTY.js → chunk-LPABQWHJ.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { err, ok } from './chunk-6INS6YMW.js';
+import { err, ok } from './chunk-3G2F3FOW.js';
 import { createHash, randomUUID } from 'crypto';
 import createClient from 'openapi-fetch';
 import { fetch } from 'undici';
@@ -254,12 +254,14 @@ var ProxyTargetRequest = z.object({
   city: z.string().default(""),
   isp: z.string().default("")
 }).partial().passthrough();
+var AdKind = z.enum(["banner", "pop", "video"]);
 var RepeatModeType = z.enum(["isolated", "shared"]);
 z.object({
   url: z.union([z.string(), z.null()]).optional(),
   ad_tag: z.union([z.string(), z.null()]).optional(),
   vast_tag: z.union([z.string(), z.null()]).optional(),
   referrer: z.union([z.string(), z.null()]).optional(),
+  ignore_first_n_domains: z.number().int().gte(0).lte(5).optional().default(0),
   country_code: z.string().min(2).max(2),
   emulator_id: z.string().min(1).max(100),
   proxy: ProxyTargetRequest.optional(),
@@ -267,6 +269,8 @@ z.object({
   campaign_id: z.union([z.string(), z.null()]).optional(),
   run_id: z.union([z.string(), z.null()]).optional(),
   ad_discovery: z.boolean().optional().default(false),
+  max_discovered_ads: z.union([z.number(), z.null()]).optional(),
+  ad_formats: z.union([z.array(AdKind), z.null()]).optional(),
   repeat_count: z.number().int().gte(1).optional().default(1),
   repeat_mode: RepeatModeType.optional(),
   retry_max_attempts: z.number().int().gte(0).optional().default(0)
@@ -367,9 +371,12 @@ var ScanResponse = z.object({
   status: ScanStatus,
   parent_scan_id: z.union([z.string(), z.null()]).optional(),
   ad_discovery: z.boolean().optional().default(false),
+  max_discovered_ads: z.union([z.number(), z.null()]).optional(),
+  ad_formats: z.union([z.array(AdKind), z.null()]).optional(),
   slot_index: z.union([z.number(), z.null()]).optional(),
   ad_kind: z.union([z.string(), z.null()]).optional(),
   network: z.string().optional().default(""),
+  network_host: z.string().optional().default(""),
   offer_url: z.string(),
   redirect_chain: z.array(RedirectHopResponse),
   screenshot_url: z.string().optional().default(""),
@@ -378,6 +385,7 @@ var ScanResponse = z.object({
   ad_tag: z.union([z.string(), z.null()]).optional(),
   vast_tag: z.union([z.string(), z.null()]).optional(),
   referrer: z.union([z.string(), z.null()]).optional(),
+  ignore_first_n_domains: z.number().int().optional().default(0),
   creative_kind: z.enum(["banner", "video"]).optional().default("banner"),
   creative_screenshot_url: z.string().optional().default(""),
   creative_video_url: z.string().optional().default(""),
@@ -385,6 +393,7 @@ var ScanResponse = z.object({
   creative_html_url: z.string().optional().default(""),
   creative_width: z.number().int().optional().default(0),
   creative_height: z.number().int().optional().default(0),
+  creative_redirect_chain: z.array(RedirectHopResponse).optional(),
   video: z.union([VideoMetaResponse, z.null()]).optional(),
   proxy: z.union([ProxyTargetResponse, z.null()]).optional(),
   page_title: z.string(),
@@ -430,6 +439,7 @@ var ScanBriefResponse = z.object({
   slot_index: z.union([z.number(), z.null()]).optional(),
   ad_kind: z.union([z.string(), z.null()]).optional(),
   network: z.string().optional().default(""),
+  network_host: z.string().optional().default(""),
   emulator_display_name: z.string().optional().default(""),
   emulator_category: z.string().optional().default(""),
   repeat_index: z.number().int().optional().default(0),
@@ -450,6 +460,7 @@ z.object({
   ad_tag: z.union([z.string(), z.null()]).optional(),
   vast_tag: z.union([z.string(), z.null()]).optional(),
   referrer: z.union([z.string(), z.null()]).optional(),
+  ignore_first_n_domains: z.number().int().gte(0).lte(5).optional().default(0),
   country_codes: z.array(z.string()).min(1),
   emulator_id: z.string().min(1).max(100),
   proxy: ProxyTargetRequest.optional(),
@@ -510,7 +521,13 @@ var GroupActionResponse = z.object({
   run_ids: z.array(z.string().uuid()).optional(),
   failures: z.array(BulkCampaignFailure).optional()
 }).passthrough();
+var DiscoveryAdFormat = z.enum(["banner", "pop", "video"]);
 var RepeatMode = z.enum(["isolated", "shared"]);
+var CampaignNotificationsRequest = z.object({
+  mode: z.enum(["inherit", "override", "silence"]),
+  destination_ids: z.array(z.string().uuid()).optional(),
+  routing_label_key: z.union([z.string(), z.null()]).optional()
+}).passthrough();
 z.object({
   name: z.string().min(1).max(200),
   campaign_type: z.string().optional().default("url"),
@@ -518,6 +535,9 @@ z.object({
   ad_tag: z.union([z.string(), z.null()]).optional(),
   vast_tag: z.union([z.string(), z.null()]).optional(),
   referrer: z.union([z.string(), z.null()]).optional(),
+  ignore_first_n_domains: z.number().int().gte(0).lte(5).optional().default(0),
+  max_discovered_ads: z.union([z.number(), z.null()]).optional(),
+  ad_formats: z.union([z.array(DiscoveryAdFormat), z.null()]).optional(),
   country_codes: z.array(z.string()).min(1),
   group_id: z.union([z.string(), z.null()]).optional(),
   emulator_categories: z.array(z.string()).optional(),
@@ -536,7 +556,8 @@ z.object({
   schedule_weekly: z.union([z.record(z.array(z.number().int())), z.null()]).optional(),
   schedule_interval_seconds: z.union([z.number(), z.null()]).optional(),
   schedule_enabled: z.union([z.boolean(), z.null()]).optional(),
-  schedule_timezone: z.union([z.string(), z.null()]).optional()
+  schedule_timezone: z.union([z.string(), z.null()]).optional(),
+  notifications: z.union([CampaignNotificationsRequest, z.null()]).optional()
 }).passthrough();
 var EmulatorSelectionResponse = z.object({
   categories: z.array(z.string()),
@@ -551,6 +572,9 @@ var CampaignResponse = z.object({
   ad_tag: z.union([z.string(), z.null()]).optional(),
   vast_tag: z.union([z.string(), z.null()]).optional(),
   referrer: z.union([z.string(), z.null()]).optional(),
+  ignore_first_n_domains: z.number().int().optional().default(0),
+  max_discovered_ads: z.union([z.number(), z.null()]).optional(),
+  ad_formats: z.union([z.array(DiscoveryAdFormat), z.null()]).optional(),
   country_codes: z.array(z.string()),
   group_id: z.string().uuid(),
   emulator_selection: EmulatorSelectionResponse,
@@ -592,6 +616,9 @@ z.object({
   ad_tag: z.union([z.string(), z.null()]),
   vast_tag: z.union([z.string(), z.null()]),
   referrer: z.union([z.string(), z.null()]),
+  ignore_first_n_domains: z.number().int().gte(0).lte(5).default(0),
+  max_discovered_ads: z.union([z.number(), z.null()]),
+  ad_formats: z.union([z.array(DiscoveryAdFormat), z.null()]),
   country_codes: z.union([z.array(z.string()), z.null()]),
   group_id: z.union([z.string(), z.null()]),
   emulator_categories: z.union([z.array(z.string()), z.null()]),
@@ -610,7 +637,8 @@ z.object({
   schedule_weekly: z.union([z.record(z.array(z.number().int())), z.null()]),
   schedule_interval_seconds: z.union([z.number(), z.null()]),
   schedule_enabled: z.union([z.boolean(), z.null()]),
-  schedule_timezone: z.union([z.string(), z.null()])
+  schedule_timezone: z.union([z.string(), z.null()]),
+  notifications: z.union([CampaignNotificationsRequest, z.null()])
 }).partial().passthrough();
 var RunSource = z.enum(["ui", "api"]);
 var RunResponse = z.object({
@@ -1102,6 +1130,8 @@ var AlertNotificationDestinationResponse = z.object({
   email_address: z.union([z.string(), z.null()]),
   included_label_keys: z.array(z.string()),
   included_statuses: z.array(z.string()),
+  route_label_key: z.union([z.string(), z.null()]),
+  route_label_values: z.array(z.string()),
   created_at: z.string().datetime({ offset: true }),
   updated_at: z.string().datetime({ offset: true })
 }).passthrough();
@@ -1110,11 +1140,13 @@ var CampaignOverrideMode = z.enum(["inherit", "override", "silence"]);
 var CampaignOverridesResponse = z.object({
   campaign_id: z.string().uuid(),
   mode: CampaignOverrideMode,
-  destination_ids: z.array(z.string().uuid())
+  destination_ids: z.array(z.string().uuid()),
+  routing_label_key: z.union([z.string(), z.null()])
 }).passthrough();
 z.object({
   mode: CampaignOverrideMode,
-  destination_ids: z.array(z.string().uuid()).optional().default([])
+  destination_ids: z.array(z.string().uuid()).optional().default([]),
+  routing_label_key: z.union([z.string(), z.null()]).optional()
 }).passthrough();
 var InvoiceType = z.enum(["proforma", "final"]);
 z.union([InvoiceType, z.null()]).optional();
@@ -1506,8 +1538,6 @@ var EmulatorSchema = schemas.EmulatorResponse.pick({
 }).strip();
 var EmulatorListSchema = z.array(EmulatorSchema);
 var parseEmulatorList = (raw) => parseWithSchema(EmulatorListSchema, raw, "emulators");
-
-// src/infrastructure/api/parsers/parse-generic.ts
 function parsePageOf(parseItem) {
   return (raw) => {
     if (raw === null || typeof raw !== "object") {
@@ -1694,13 +1724,16 @@ var AlertDestinationSchema = schemas.AlertNotificationDestinationResponse.pick({
   included_label_keys: true,
   created_at: true,
   updated_at: true
+}).extend({
+  route_label_key: z.string().nullable().optional(),
+  route_label_values: z.array(z.string()).optional()
 }).strip();
 var parseAlertDestination = (raw) => parseWithSchema(AlertDestinationSchema, raw, "alert-destination");
 var CampaignOverridesSchema = schemas.CampaignOverridesResponse.pick({
   campaign_id: true,
   mode: true,
   destination_ids: true
-}).strip();
+}).extend({ routing_label_key: z.string().nullable().optional() }).strip();
 var parseCampaignAlertOverrides = (raw) => parseWithSchema(CampaignOverridesSchema, raw, "campaign-overrides");
 var BulkReplaySchema = schemas.BulkReplayResponse.pick({
   replayed: true,
@@ -3247,7 +3280,7 @@ var GetCampaignAlertOverridesInputShape = {
 };
 var getCampaignAlertOverridesTool = {
   name: "get_campaign_alert_overrides",
-  description: "Get the per-campaign override of which alert destinations receive its alerts. `mode` is one of `inherit` (no override \u2014 the campaign follows the org-wide destinations), `override` (alerts go ONLY to the returned `destination_ids`), or `silence` (the campaign sends nothing).",
+  description: "Get the per-campaign override of which alert destinations receive its alerts. `mode` is one of `inherit` (no override \u2014 the campaign follows the org-wide destinations), `override` (alerts go ONLY to the returned `destination_ids`), or `silence` (the campaign sends nothing). `routing_label_key`, when set, adds label routing on top of inherit/override: each scan also reaches the destinations whose label rule on that key matches the scan's value.",
   annotations: {
     title: "Get Campaign Alert Overrides",
     readOnlyHint: true,
@@ -3265,7 +3298,7 @@ var getCampaignAlertOverridesTool = {
 var ListAlertDestinationsInputShape = {};
 var listAlertDestinationsTool = {
   name: "list_alert_destinations",
-  description: "List configured alert-notification destinations (channels): Slack workspaces, Telegram chats, email lists, generic webhooks. Each entry has id, kind, display name, version, and creation timestamp.",
+  description: "List configured alert-notification destinations (channels): Slack workspaces, Telegram chats, email lists, generic webhooks. Each entry has id, kind, display name, version, creation timestamp and, when set, its label routing rule (`route_label_key` + `route_label_values`) used by campaigns that route by that label key.",
   annotations: {
     title: "List Alert Destinations",
     readOnlyHint: true,
@@ -3305,18 +3338,43 @@ var setAlertDestinationVersionTool = {
     return ok({ updated: true });
   }
 };
-var SetCampaignAlertOverridesInputShape = {
-  campaign_id: z.string().uuid().describe("Campaign UUID."),
+var alertRoutingFields = {
   mode: schemas.CampaignOverrideMode.describe(
     "Routing mode: `inherit` (fall back to the org-wide destinations), `override` (route ONLY to `destination_ids`), `silence` (send nothing for this campaign)."
   ),
   destination_ids: z.array(z.string().uuid()).max(50).default([]).describe(
     "Destination UUIDs to route to. Accepted ONLY with `mode: override` \u2014 the API rejects it for `inherit`/`silence`. An empty list with `override` routes nowhere, which is the same outcome as `silence`."
+  ),
+  routing_label_key: z.string().min(1).max(64).nullable().optional().describe(
+    "Scan label key to route by on top of `inherit` or `override` (e.g. `dspName`): each scan also goes to the destinations whose label rule matches the scan's value for this key, as shown by `route_label_key` / `route_label_values` in `list_alert_destinations`. Omit or pass null for no label routing \u2014 the routing is replaced as a whole, so omitting it clears a key already set (read `get_campaign_alert_overrides` first to keep it). Not allowed with `silence`."
   )
 };
+function alertRoutingInputError(input) {
+  if (input.mode !== "override" && input.destination_ids.length > 0) {
+    return {
+      kind: "invalid-input",
+      message: `destination_ids is only accepted with mode "override", got "${input.mode}". Use mode "override" to route to specific destinations.`,
+      fieldErrors: { destination_ids: ["only valid with mode 'override'"] }
+    };
+  }
+  if (input.mode === "silence" && input.routing_label_key) {
+    return {
+      kind: "invalid-input",
+      message: 'routing_label_key cannot be combined with mode "silence". Use "inherit" or "override" to route by a label.',
+      fieldErrors: { routing_label_key: ["not valid with mode 'silence'"] }
+    };
+  }
+  return void 0;
+}
+
+// src/application/tools/alert-notifications/set-campaign-alert-overrides.tool.ts
+var SetCampaignAlertOverridesInputShape = {
+  campaign_id: z.string().uuid().describe("Campaign UUID."),
+  ...alertRoutingFields
+};
 var setCampaignAlertOverridesTool = {
   name: "set_campaign_alert_overrides",
-  description: "REPLACE the per-campaign alert-routing override. `mode=inherit` drops the override so the campaign follows the org-wide destinations; `mode=override` routes its alerts ONLY to `destination_ids`; `mode=silence` sends nothing for the campaign. There is no 'route everywhere except these' mode \u2014 to exclude one destination, pass `override` with the destinations you DO want (see `list_alert_destinations`). To read the new state, follow up with `get_campaign_alert_overrides`.",
+  description: "REPLACE the per-campaign alert-routing override. `mode=inherit` drops the override so the campaign follows the org-wide destinations; `mode=override` routes its alerts ONLY to `destination_ids`; `mode=silence` sends nothing for the campaign. `routing_label_key` adds label routing on top of inherit/override: each scan also reaches the destinations whose label rule matches its value (e.g. one DSP's chat in a shared campaign). There is no 'route everywhere except these' mode \u2014 to exclude one destination, pass `override` with the destinations you DO want (see `list_alert_destinations`). To read the new state, follow up with `get_campaign_alert_overrides`.",
   annotations: {
     title: "Set Campaign Alert Overrides",
     readOnlyHint: false,
@@ -3326,16 +3384,12 @@ var setCampaignAlertOverridesTool = {
   },
   inputSchema: z.object(SetCampaignAlertOverridesInputShape),
   handler: async (input, ctx) => {
-    if (input.mode !== "override" && input.destination_ids.length > 0) {
-      return err({
-        kind: "invalid-input",
-        message: `destination_ids is only accepted with mode "override", got "${input.mode}". Use mode "override" to route to specific destinations.`,
-        fieldErrors: { destination_ids: ["only valid with mode 'override'"] }
-      });
-    }
+    const invalid = alertRoutingInputError(input);
+    if (invalid) return err(invalid);
     const result = await ctx.api.setCampaignAlertOverrides(input.campaign_id, {
       mode: input.mode,
-      destination_ids: input.destination_ids
+      destination_ids: input.destination_ids,
+      routing_label_key: input.routing_label_key ?? null
     });
     if (result.isErr()) return err(mapApiError(result.error));
     return ok({ updated: true });
@@ -4003,6 +4057,17 @@ function pickCampaignConfigBody(input) {
   if (input.schedule_timezone !== void 0) body.schedule_timezone = input.schedule_timezone;
   return body;
 }
+var notificationsBlock = z.object(alertRoutingFields);
+function notificationsBody(input) {
+  return {
+    mode: input.mode,
+    destination_ids: input.destination_ids,
+    routing_label_key: input.routing_label_key ?? null
+  };
+}
+var campaignNotificationsField = notificationsBlock.optional().describe(
+  "Alert routing saved together with the campaign: `mode`, `destination_ids`, `routing_label_key` \u2014 same meaning as in `set_campaign_alert_overrides`. The block REPLACES the whole routing: an omitted `destination_ids` means none and an omitted `routing_label_key` clears it. Omit the block to keep the current routing (update) or inherit the org defaults (create). Needs the alert_notifications.manage permission; the whole request is rejected before anything is written if the block is invalid."
+);
 var campaignReferrerUrl = z.string().url().regex(/^https?:\/\//i, "Must be an http(s) URL.").max(2048);
 var CAMPAIGN_REFERRER_DESCRIPTION = "Optional http(s) page URL every scan of this campaign is checked from. For `ad_tag` and `vast` campaigns this is the publisher page the tag is embedded in \u2014 NOT the creative and NOT its landing page; the browser commits the page document on this URL without fetching the publisher, so the creative renders as if embedded there, and its cross-origin subrequests receive the origin only (https://publisher.example/, no path). For `url` and `ad_discovery` campaigns this is where the visitor came from, sent in full as the Referer of the page request.";
 var campaignReferrerField = campaignReferrerUrl.optional().describe(CAMPAIGN_REFERRER_DESCRIPTION);
@@ -4032,7 +4097,8 @@ var CreateCampaignInputShape = {
   policy_set_id: z.union([z.string().uuid(), z.null()]).optional().describe(
     "Policy set to evaluate every scan against. Omit to bind the organization's default (if any). Pass null for no policy set and no policy alerts."
   ),
-  schedule_enabled: z.boolean().optional().describe("If true, the scheduler runs immediately. Default: false (manual run).")
+  schedule_enabled: z.boolean().optional().describe("If true, the scheduler runs immediately. Default: false (manual run)."),
+  notifications: campaignNotificationsField
 };
 var createCampaignTool = {
   name: "create_campaign",
@@ -4046,6 +4112,8 @@ var createCampaignTool = {
   },
   inputSchema: z.object(CreateCampaignInputShape),
   handler: async (input, ctx) => {
+    const invalid = input.notifications && alertRoutingInputError(input.notifications);
+    if (invalid) return err(invalid);
     const body = {
       name: input.name,
       campaign_type: input.campaign_type,
@@ -4061,6 +4129,7 @@ var createCampaignTool = {
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.policy_set_id !== void 0 ? { policy_set_id: input.policy_set_id } : {},
       ...input.schedule_enabled !== void 0 ? { schedule_enabled: input.schedule_enabled } : {},
+      ...input.notifications !== void 0 ? { notifications: notificationsBody(input.notifications) } : {},
       ...pickCampaignConfigBody(input)
     };
     const result = await ctx.api.createCampaign(body);
@@ -4238,11 +4307,12 @@ var UpdateCampaignInputShape = {
   ...campaignConfigFields,
   labels: z.record(z.string()).optional().describe("Replace the label map."),
   policy_set_id: z.string().uuid().nullable().optional().describe("New policy set UUID; pass null to clear."),
-  schedule_enabled: z.boolean().optional().describe("Pause / resume the scheduler.")
+  schedule_enabled: z.boolean().optional().describe("Pause / resume the scheduler."),
+  notifications: campaignNotificationsField
 };
 var updateCampaignTool = {
   name: "update_campaign",
-  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, `max_discovered_ads` accepts null to go back to the platform ad cap, and `ad_formats` accepts null to go back to checking every ad format. `ignore_first_n_domains` is the exception: it is not nullable, so pass 0 to go back to skipping nothing.",
+  description: "Update one or more fields of a campaign. Fields not supplied are left unchanged. `policy_set_id` accepts null to clear the binding, `referrer` accepts null to clear the publisher page scans are checked from, `max_discovered_ads` accepts null to go back to the platform ad cap, and `ad_formats` accepts null to go back to checking every ad format. `ignore_first_n_domains` is the exception: it is not nullable, so pass 0 to go back to skipping nothing. `notifications` is not merged either: when supplied it replaces the campaign's whole alert routing.",
   annotations: {
     title: "Update Campaign",
     readOnlyHint: false,
@@ -4252,6 +4322,8 @@ var updateCampaignTool = {
   },
   inputSchema: z.object(UpdateCampaignInputShape),
   handler: async (input, ctx) => {
+    const invalid = input.notifications && alertRoutingInputError(input.notifications);
+    if (invalid) return err(invalid);
     const body = {
       ...input.name !== void 0 ? { name: input.name } : {},
       ...input.url !== void 0 ? { url: input.url } : {},
@@ -4266,6 +4338,7 @@ var updateCampaignTool = {
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.policy_set_id !== void 0 ? { policy_set_id: input.policy_set_id } : {},
       ...input.schedule_enabled !== void 0 ? { schedule_enabled: input.schedule_enabled } : {},
+      ...input.notifications !== void 0 ? { notifications: notificationsBody(input.notifications) } : {},
       ...pickCampaignConfigBody(input)
     };
     const result = await ctx.api.updateCampaign(input.campaign_id, body);
@@ -6314,5 +6387,5 @@ function formatToolError(error) {
 }
 
 export { BearerToken, SERVER_INSTRUCTIONS, createHttpApiGateway, createPinoLogger, declareEmptyResourcesAndPrompts, newRequestId, wireToolsIntoMcpServer };
-//# sourceMappingURL=chunk-XJZE6KTY.js.map
-//# sourceMappingURL=chunk-XJZE6KTY.js.map
+//# sourceMappingURL=chunk-LPABQWHJ.js.map
+//# sourceMappingURL=chunk-LPABQWHJ.js.map