@kaminari-ad/mcp 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0] - 2026-07-10
+
+### Added
+
+- **VAST video-ad support.** `create_scan`, `create_bulk_scans`,
+  `create_campaign` (new `vast` campaign type), and `update_campaign` now
+  accept a `vast_tag` — an http(s) URL of a VAST endpoint or raw VAST XML —
+  mutually exclusive with `url` / `ad_tag`. Scan responses surface
+  `creative_kind` (`banner` | `video`) plus a `video` block (duration,
+  media-file URL, VAST version, ad system, VPAID flag, wrapper depth), and the
+  scan-list brief carries `is_vast`. Regenerated the OpenAPI type + zod-schema
+  snapshots against the updated `/api/v1` surface.
+
 ## [0.6.0] - 2026-06-30
 
 ### Changed

package/dist/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { NAME, VERSION, err, ok } from './chunk-CEKRYHCR.js';
+import { NAME, VERSION, err, ok } from './chunk-HZXVKCW3.js';
 import process from 'process';
 import { z } from 'zod';
 
@@ -160,10 +160,10 @@ async function main() {
   }
   const config = configResult.value;
   if (config.transport === "stdio") {
-    const { bootstrapStdio } = await import('./stdio-bootstrap-4UHUIN7N.js');
+    const { bootstrapStdio } = await import('./stdio-bootstrap-KIBN4X7J.js');
     return bootstrapStdio(config);
   }
-  const { bootstrapHttp } = await import('./http-bootstrap-DAPC3LFX.js');
+  const { bootstrapHttp } = await import('./http-bootstrap-5SJGGI5Y.js');
   return bootstrapHttp(config);
 }
 main().then(

package/dist/{chunk-CEKRYHCR.js → chunk-HZXVKCW3.js}

@@ -3,8 +3,8 @@ export { err, ok } from 'neverthrow';
 
 // src/shared/version.ts
 var NAME = "@kaminari-ad/mcp";
-var VERSION = "0.6.0";
+var VERSION = "0.8.0";
 
 export { NAME, VERSION };
-//# sourceMappingURL=chunk-CEKRYHCR.js.map
-//# sourceMappingURL=chunk-CEKRYHCR.js.map
+//# sourceMappingURL=chunk-HZXVKCW3.js.map
+//# sourceMappingURL=chunk-HZXVKCW3.js.map

package/dist/{chunk-CEKRYHCR.js.map → chunk-HZXVKCW3.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-CEKRYHCR.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.6.0\";\n"]}
+{"version":3,"sources":["../src/shared/version.ts"],"names":[],"mappings":";;;;AASO,IAAM,IAAA,GAAO;AACb,IAAM,OAAA,GAAU","file":"chunk-HZXVKCW3.js","sourcesContent":["/**\n * Package version and name. Hard-coded as constants here, asserted to\n * match `package.json` by a unit test.\n *\n * Why not import `package.json`: it would force JSON-module support at\n * runtime and tsup-bundling would inline the entire manifest. Two\n * constants + one assertion test is simpler and gives the same safety.\n */\n\nexport const NAME = \"@kaminari-ad/mcp\";\nexport const VERSION = \"0.8.0\";\n"]}

package/dist/{chunk-AINV7DXM.js → chunk-ZZIYFLWG.js}

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { err, ok } from './chunk-CEKRYHCR.js';
+import { err, ok } from './chunk-HZXVKCW3.js';
 import { createHash, randomUUID } from 'crypto';
 import createClient from 'openapi-fetch';
 import { fetch } from 'undici';
@@ -155,12 +155,16 @@ var OrganizationStatus = z.enum([
   "suspended",
   "rejected"
 ]);
+var OrgTransitionAction = z.enum(["approve", "reject", "suspend", "reactivate"]);
+var OrgTransitionOptionResponse = z.object({ target_status: OrganizationStatus, action: OrgTransitionAction }).passthrough();
 var OrgResponse = z.object({
   id: z.string().uuid(),
   name: z.string(),
-  owner_id: z.string().uuid(),
+  owner_id: z.union([z.string(), z.null()]),
   status: OrganizationStatus,
+  domain: z.union([z.string(), z.null()]).optional(),
   created_at: z.string().datetime({ offset: true }),
+  available_transitions: z.array(OrgTransitionOptionResponse).optional().default([]),
   is_active: z.boolean()
 }).passthrough();
 z.object({ name: z.union([z.string(), z.null()]) }).partial().passthrough();
@@ -190,6 +194,7 @@ var UserResponse = z.object({
   name: z.string(),
   role_id: z.string().uuid(),
   role_name: z.string(),
+  role_scope: z.string().optional().default("org"),
   organization_id: z.string().uuid(),
   organization_name: z.string(),
   is_active: z.boolean(),
@@ -238,6 +243,7 @@ var ProxyTargetRequest = z.object({
 z.object({
   url: z.union([z.string(), z.null()]).optional(),
   ad_tag: z.union([z.string(), z.null()]).optional(),
+  vast_tag: z.union([z.string(), z.null()]).optional(),
   country_code: z.string().min(2).max(2),
   emulator_id: z.string().min(1).max(100),
   proxy: ProxyTargetRequest.optional(),
@@ -251,6 +257,7 @@ var ScanStatus = z.enum([
   "crawled",
   "checking",
   "checking_async",
+  "rechecking",
   "completed",
   "partial",
   "failed",
@@ -276,6 +283,14 @@ var RedirectHopResponse = z.object({
   redirected_from: z.string(),
   sub_requests: z.array(SubRequestResponse)
 }).passthrough();
+var VideoMetaResponse = z.object({
+  duration_ms: z.number().int().default(0),
+  mediafile_url: z.string().default(""),
+  vast_version: z.string().default(""),
+  ad_system: z.string().default(""),
+  is_vpaid: z.boolean().default(false),
+  wrapper_depth: z.number().int().default(0)
+}).partial().passthrough();
 var ProxyTargetResponse = z.object({
   proxy_type: z.string(),
   region: z.string().optional().default(""),
@@ -335,9 +350,12 @@ var ScanResponse = z.object({
   report_url: z.string().optional().default(""),
   public_report_url: z.string().optional().default(""),
   ad_tag: z.union([z.string(), z.null()]).optional(),
+  vast_tag: z.union([z.string(), z.null()]).optional(),
+  creative_kind: z.string().optional().default("banner"),
   creative_screenshot_url: z.string().optional().default(""),
   creative_width: z.number().int().optional().default(0),
   creative_height: z.number().int().optional().default(0),
+  video: z.union([VideoMetaResponse, z.null()]).optional(),
   proxy: z.union([ProxyTargetResponse, z.null()]).optional(),
   page_title: z.string(),
   elapsed_ms: z.number().int(),
@@ -346,6 +364,8 @@ var ScanResponse = z.object({
   classification: z.union([ScanClassificationResponse, z.null()]).optional(),
   campaign_id: z.union([z.string(), z.null()]).optional(),
   campaign_name: z.union([z.string(), z.null()]).optional(),
+  campaign_group_id: z.union([z.string(), z.null()]).optional(),
+  campaign_group_name: z.union([z.string(), z.null()]).optional(),
   created_at: z.string().datetime({ offset: true }),
   completed_at: z.union([z.string(), z.null()]),
   landings: z.array(LandingResponse).optional()
@@ -367,7 +387,10 @@ var ScanBriefResponse = z.object({
   created_at: z.string().datetime({ offset: true }),
   campaign_id: z.union([z.string(), z.null()]).optional(),
   campaign_name: z.union([z.string(), z.null()]).optional(),
-  is_ad_tag: z.boolean().optional().default(false)
+  is_ad_tag: z.boolean().optional().default(false),
+  is_vast: z.boolean().optional().default(false),
+  emulator_display_name: z.string().optional().default(""),
+  emulator_category: z.string().optional().default("")
 }).passthrough();
 z.object({
   items: z.array(ScanBriefResponse),
@@ -379,6 +402,7 @@ z.object({
 z.object({
   url: z.union([z.string(), z.null()]).optional(),
   ad_tag: z.union([z.string(), z.null()]).optional(),
+  vast_tag: z.union([z.string(), z.null()]).optional(),
   country_codes: z.array(z.string()).min(1),
   emulator_id: z.string().min(1).max(100),
   proxy: ProxyTargetRequest.optional(),
@@ -431,6 +455,7 @@ z.object({
   campaign_type: z.string().optional().default("url"),
   url: z.union([z.string(), z.null()]).optional(),
   ad_tag: z.union([z.string(), z.null()]).optional(),
+  vast_tag: z.union([z.string(), z.null()]).optional(),
   country_codes: z.array(z.string()).min(1),
   group_id: z.union([z.string(), z.null()]).optional(),
   emulator_categories: z.array(z.string()).optional(),
@@ -459,6 +484,7 @@ var CampaignResponse = z.object({
   campaign_type: z.string().optional().default("url"),
   url: z.string(),
   ad_tag: z.union([z.string(), z.null()]).optional(),
+  vast_tag: z.union([z.string(), z.null()]).optional(),
   country_codes: z.array(z.string()),
   group_id: z.string().uuid(),
   emulator_selection: EmulatorSelectionResponse,
@@ -488,12 +514,14 @@ var CampaignPickerItem = z.object({
   id: z.string().uuid(),
   name: z.string(),
   group_id: z.string().uuid(),
-  is_archived: z.boolean()
+  is_archived: z.boolean(),
+  policy_set_id: z.union([z.string(), z.null()]).optional()
 }).passthrough();
 z.object({
   name: z.union([z.string(), z.null()]),
   url: z.union([z.string(), z.null()]),
   ad_tag: z.union([z.string(), z.null()]),
+  vast_tag: z.union([z.string(), z.null()]),
   country_codes: z.union([z.array(z.string()), z.null()]),
   group_id: z.union([z.string(), z.null()]),
   emulator_categories: z.union([z.array(z.string()), z.null()]),
@@ -555,6 +583,7 @@ var ScanTagResponse = z.object({
   tag_slug: z.string(),
   detail: z.string(),
   url: z.string().optional().default(""),
+  surface: z.string().optional().default("page"),
   display_name: z.string().optional().default(""),
   category: z.string().optional().default(""),
   severity: z.string().optional().default(""),
@@ -566,12 +595,13 @@ var TagDefinitionWithStatsResponse = z.object({
   source: z.string(),
   display_name: z.string(),
   description: z.string(),
-  is_system: z.boolean(),
+  scope: z.string(),
   organization_id: z.union([z.string(), z.null()]),
   visibility: z.string(),
   severity: z.string(),
   scans_count: z.number().int(),
-  rules_count: z.number().int()
+  rules_count: z.number().int(),
+  archived_at: z.union([z.string(), z.null()]).optional()
 }).passthrough();
 var LinkedRuleResponse = z.object({
   id: z.string().uuid(),
@@ -586,12 +616,13 @@ var TagDefinitionDetailResponse = z.object({
   source: z.string(),
   display_name: z.string(),
   description: z.string(),
-  is_system: z.boolean(),
+  scope: z.string(),
   organization_id: z.union([z.string(), z.null()]),
   visibility: z.string(),
   severity: z.string(),
   scans_count: z.number().int(),
   rules_count: z.number().int(),
+  archived_at: z.union([z.string(), z.null()]).optional(),
   linked_rules: z.array(LinkedRuleResponse).optional()
 }).passthrough();
 var TagVisibility = z.enum(["hidden", "internal", "public"]);
@@ -611,14 +642,15 @@ z.object({
 }).passthrough();
 var CustomRuleResponse = z.object({
   id: z.string().uuid(),
-  organization_id: z.string().uuid(),
+  organization_id: z.union([z.string(), z.null()]),
   name: z.string(),
   tag_slug: z.string(),
   rule_type: z.string(),
   config: z.object({}).partial().passthrough(),
   target: z.string(),
   is_active: z.boolean(),
-  created_at: z.string().datetime({ offset: true })
+  created_at: z.string().datetime({ offset: true }),
+  scope: z.string().optional().default("personal")
 }).passthrough();
 z.object({
   items: z.array(CustomRuleResponse),
@@ -638,7 +670,10 @@ z.object({
   scan_id: z.string().uuid(),
   rule_type: z.string(),
   config: z.object({}).partial().passthrough(),
-  target: z.string().optional().default("page")
+  target: z.string().optional().default("page"),
+  name: z.string().optional().default("Test Rule"),
+  context: z.enum(["isolated", "production"]).optional().default("isolated"),
+  rule_id: z.union([z.string(), z.null()]).optional()
 }).passthrough();
 var RuleTestTagResult = z.object({ tag_slug: z.string(), detail: z.string().optional().default("") }).passthrough();
 var RuleTestResponse = z.object({
@@ -681,7 +716,8 @@ var PolicyEntryRequest = z.object({
 z.object({
   name: z.string().min(1).max(200),
   description: z.string().max(2e3).optional().default(""),
-  entries: z.array(PolicyEntryRequest).min(1).max(500)
+  entries: z.array(PolicyEntryRequest).min(1).max(500),
+  campaign_ids: z.array(z.string().uuid()).max(2e3).optional()
 }).passthrough();
 var PolicyEntryIabV3Response = z.object({
   tier1: z.string(),
@@ -712,6 +748,7 @@ var PolicyEntryResponse = z.object({
   custom_taxonomy: z.union([PolicyEntryCustomTaxonomyResponse, z.null()]).optional(),
   country_codes: z.array(z.string())
 }).passthrough();
+var LinkedCampaignResponse = z.object({ id: z.string().uuid(), name: z.string(), is_archived: z.boolean() }).passthrough();
 var PolicySetResponse = z.object({
   id: z.string().uuid(),
   name: z.string(),
@@ -720,6 +757,8 @@ var PolicySetResponse = z.object({
   visibility: z.string(),
   is_approved: z.boolean(),
   entries: z.array(PolicyEntryResponse),
+  campaigns: z.array(LinkedCampaignResponse).optional(),
+  campaigns_total: z.number().int().optional().default(0),
   created_at: z.string().datetime({ offset: true })
 }).passthrough();
 var VisibilityType = z.enum(["private", "public"]);
@@ -743,9 +782,22 @@ z.object({
 z.object({
   name: z.string().min(1).max(200),
   description: z.string().max(2e3).optional().default(""),
-  entries: z.array(PolicyEntryRequest).min(1).max(500)
+  entries: z.array(PolicyEntryRequest).min(1).max(500),
+  campaign_ids: z.array(z.string().uuid()).max(2e3).optional()
 }).passthrough();
-var AlertStatus = z.enum(["open", "acknowledged", "resolved", "dismissed"]);
+z.object({
+  items: z.array(LinkedCampaignResponse),
+  total: z.number().int(),
+  page: z.number().int(),
+  limit: z.number().int(),
+  pages: z.number().int()
+}).passthrough();
+z.object({ campaign_ids: z.array(z.string().uuid()).min(1).max(500) }).passthrough();
+z.object({
+  campaign_ids: z.array(z.string().uuid()).max(500),
+  detach_all: z.boolean().default(false)
+}).partial().passthrough();
+var AlertStatus = z.enum(["open", "escalated", "resolved", "dismissed"]);
 z.union([AlertStatus, z.null()]).optional();
 var AlertResponse = z.object({
   id: z.string().uuid(),
@@ -756,7 +808,7 @@ var AlertResponse = z.object({
   organization_id: z.string().uuid(),
   tag_slug: z.string(),
   country_code: z.string(),
-  status: z.string(),
+  status: AlertStatus,
   closed_by: z.union([z.string(), z.null()]),
   created_at: z.string().datetime({ offset: true }),
   updated_at: z.union([z.string(), z.null()]),
@@ -774,9 +826,17 @@ z.object({
   pages: z.number().int()
 }).passthrough();
 z.object({ status: AlertStatus }).passthrough();
+z.object({
+  status: AlertStatus,
+  ids: z.union([z.array(z.string().uuid()), z.null()]).optional(),
+  all_matching: z.boolean().optional().default(false),
+  filter_status: z.union([AlertStatus, z.null()]).optional(),
+  filter_campaign_id: z.union([z.string(), z.null()]).optional()
+}).passthrough();
+z.object({ updated: z.number().int(), skipped: z.number().int() }).passthrough();
 var AlertStatsResponse = z.object({
   open: z.number().int(),
-  acknowledged: z.number().int(),
+  escalated: z.number().int(),
   resolved: z.number().int(),
   dismissed: z.number().int()
 }).passthrough();
@@ -846,6 +906,7 @@ var BalanceTransactionResponse = z.object({
   description: z.string(),
   reference_kind: z.union([z.string(), z.null()]),
   reference_id: z.union([z.string(), z.null()]),
+  document_number: z.union([z.string(), z.null()]).optional(),
   actor_user_id: z.union([z.string(), z.null()]),
   created_at: z.string().datetime({ offset: true })
 }).passthrough();
@@ -950,6 +1011,7 @@ var AlertNotificationDestinationResponse = z.object({
   telegram_chat_type: z.union([z.string(), z.null()]),
   email_address: z.union([z.string(), z.null()]),
   included_label_keys: z.array(z.string()),
+  included_statuses: z.array(z.string()),
   created_at: z.string().datetime({ offset: true }),
   updated_at: z.string().datetime({ offset: true })
 }).passthrough();
@@ -974,6 +1036,10 @@ var InvoiceResponse = z.object({
   type: z.string(),
   status: z.string(),
   total_micros: z.number().int(),
+  net_micros: z.number().int(),
+  vat_micros: z.number().int(),
+  vat_rate: z.string(),
+  vat_reason: z.string(),
   currency: z.string(),
   period_start: z.union([z.string(), z.null()]),
   period_end: z.union([z.string(), z.null()]),
@@ -992,7 +1058,6 @@ z.object({
   limit: z.number().int(),
   pages: z.number().int()
 }).passthrough();
-z.object({ url: z.union([z.string(), z.null()]), ready: z.boolean() }).passthrough();
 z.object({
   name: z.string().min(2).max(100),
   email: z.string().email(),
@@ -1224,6 +1289,7 @@ var CampaignSchema = schemas.CampaignResponse.pick({
   campaign_type: true,
   url: true,
   ad_tag: true,
+  vast_tag: true,
   country_codes: true,
   group_id: true,
   emulator_selection: true,
@@ -1460,7 +1526,7 @@ var RuleTestSchema = schemas.RuleTestResponse.pick({
 var parseRuleTest = (raw) => parseWithSchema(RuleTestSchema, raw, "rule-test");
 var AlertStatsSchema = schemas.AlertStatsResponse.pick({
   open: true,
-  acknowledged: true,
+  escalated: true,
   resolved: true,
   dismissed: true
 }).strip();
@@ -1653,6 +1719,9 @@ var ScanSchema = schemas.ScanResponse.pick({
   report_url: true,
   public_report_url: true,
   ad_tag: true,
+  vast_tag: true,
+  creative_kind: true,
+  video: true,
   creative_screenshot_url: true,
   page_title: true,
   elapsed_ms: true,
@@ -1682,6 +1751,7 @@ var ScanBriefSchema = schemas.ScanBriefResponse.pick({
   campaign_id: true,
   campaign_name: true,
   is_ad_tag: true,
+  is_vast: true,
   created_at: true
 }).strip();
 var parseScanPage = (raw) => parsePagedWithItemSchema(ScanBriefSchema, raw, "scans");
@@ -1692,7 +1762,7 @@ var TagDefinitionSchema = schemas.TagDefinitionWithStatsResponse.pick({
   display_name: true,
   description: true,
   severity: true,
-  is_system: true,
+  scope: true,
   organization_id: true,
   visibility: true,
   scans_count: true,
@@ -1711,7 +1781,7 @@ var TagDetailSchema = schemas.TagDefinitionDetailResponse.pick({
   display_name: true,
   description: true,
   severity: true,
-  is_system: true,
+  scope: true,
   organization_id: true,
   visibility: true,
   scans_count: true,
@@ -3032,7 +3102,7 @@ var setCampaignAlertOverridesTool = {
 var GetAlertStatsInputShape = {};
 var getAlertStatsTool = {
   name: "get_alert_stats",
-  description: "Get alert counts grouped by status: open, acknowledged, resolved, dismissed (total is implicit in the sum). Status names match the canonical AlertStatus enum used by `list_alerts` and `update_alert_status`.",
+  description: "Get alert counts grouped by status: open, escalated, resolved, dismissed (total is implicit in the sum). Status names match the canonical AlertStatus enum used by `list_alerts` and `update_alert_status`.",
   annotations: {
     title: "Get Alert Stats",
     readOnlyHint: true,
@@ -3049,8 +3119,8 @@ var getAlertStatsTool = {
 };
 var ListAlertsInputShape = {
   campaign_id: z.string().uuid().optional().describe("Filter to one campaign's alerts."),
-  status: z.enum(["open", "acknowledged", "resolved", "dismissed"]).optional().describe(
-    "Filter by alert status. Open = unhandled; acknowledged = seen by an operator; resolved = closed; dismissed = closed without action."
+  status: z.enum(["open", "escalated", "resolved", "dismissed"]).optional().describe(
+    "Filter by alert status. Open = unhandled; escalated = flagged for attention; resolved = closed; dismissed = closed without action."
   ),
   page: z.number().int().min(1).max(500).default(1).describe("1-indexed page number."),
   limit: z.number().int().min(1).max(200).default(50).describe("Page size.")
@@ -3080,11 +3150,11 @@ var listAlertsTool = {
 };
 var UpdateAlertStatusInputShape = {
   alert_id: z.string().uuid().describe("Alert UUID."),
-  status: z.enum(["open", "acknowledged", "resolved", "dismissed"]).describe("New status: open | acknowledged | resolved | dismissed.")
+  status: z.enum(["open", "escalated", "resolved", "dismissed"]).describe("New status: open | escalated | resolved | dismissed.")
 };
 var updateAlertStatusTool = {
   name: "update_alert_status",
-  description: "Update an alert's status in its lifecycle: open \u2192 acknowledged \u2192 resolved | dismissed. The API enforces valid transitions; an invalid one returns 422.",
+  description: "Update an alert's status in its lifecycle: open \u2192 escalated \u2192 resolved | dismissed. The API enforces valid transitions; an invalid one returns 422.",
   annotations: {
     title: "Update Alert Status",
     readOnlyHint: false,
@@ -3505,9 +3575,14 @@ function pickCampaignConfigBody(input) {
 // src/application/tools/campaigns/create-campaign.tool.ts
 var CreateCampaignInputShape = {
   name: z.string().min(1).max(200).describe("Display name (1-200 chars)."),
-  campaign_type: z.enum(["url", "ad_tag"]).describe("`url` or `ad_tag` \u2014 must match the target field below."),
+  campaign_type: z.enum(["url", "ad_tag", "vast"]).describe("`url`, `ad_tag`, or `vast` \u2014 must match the target field below."),
   url: z.string().url().optional().describe("Target URL (required if campaign_type=url)."),
-  ad_tag: z.string().optional().describe("Ad-tag HTML/JS (required if campaign_type=ad_tag)."),
+  ad_tag: z.string().optional().describe(
+    "Ad-tag HTML/JS or an http(s) URL of a page with the rendered creative (required if campaign_type=ad_tag)."
+  ),
+  vast_tag: z.string().optional().describe(
+    "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (required if campaign_type=vast)."
+  ),
   country_codes: z.array(z.string().length(2)).min(1).describe("ISO 3166-1 alpha-2 codes \u2014 one scan per country per run."),
   group_id: z.string().uuid().optional().describe("Parent group UUID; defaults to the org's default group."),
   ...campaignConfigFields,
@@ -3533,6 +3608,7 @@ var createCampaignTool = {
       country_codes: input.country_codes,
       ...input.url !== void 0 ? { url: input.url } : {},
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
+      ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.policy_set_id !== void 0 ? { policy_set_id: input.policy_set_id } : {},
@@ -3549,7 +3625,7 @@ var GetCampaignInputShape = {
 };
 var getCampaignTool = {
   name: "get_campaign",
-  description: "Get one campaign by UUID: name, type, target URL/ad-tag, countries, schedule status, archive status, parent group.",
+  description: "Get one campaign by UUID: name, type (url|ad_tag|vast), target URL / ad-tag / VAST tag (vast_tag), countries, schedule status, archive status, parent group.",
   annotations: {
     title: "Get Campaign",
     readOnlyHint: true,
@@ -3697,7 +3773,12 @@ var UpdateCampaignInputShape = {
   campaign_id: z.string().uuid().describe("Campaign UUID to update."),
   name: z.string().min(1).max(200).optional().describe("New display name."),
   url: z.string().url().optional().describe("New target URL (url-type campaigns)."),
-  ad_tag: z.string().optional().describe("New ad-tag HTML/JS (ad_tag-type campaigns)."),
+  ad_tag: z.string().optional().describe(
+    "New ad-tag HTML/JS or an http(s) URL of a page with the rendered creative (ad_tag-type campaigns)."
+  ),
+  vast_tag: z.string().optional().describe(
+    "New VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (vast-type campaigns)."
+  ),
   country_codes: z.array(z.string().length(2)).optional().describe("Replace the country list."),
   group_id: z.string().uuid().optional().describe("Move the campaign to another group."),
   ...campaignConfigFields,
@@ -3721,6 +3802,7 @@ var updateCampaignTool = {
       ...input.name !== void 0 ? { name: input.name } : {},
       ...input.url !== void 0 ? { url: input.url } : {},
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
+      ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.country_codes !== void 0 ? { country_codes: input.country_codes } : {},
       ...input.group_id !== void 0 ? { group_id: input.group_id } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
@@ -3738,7 +3820,7 @@ var CreateCustomRuleInputShape = {
     "Display name. For non-LLM rules this also becomes the `display_name` of the auto-registered tag definition (see `tag_slug`)."
   ),
   tag_slug: z.string().max(100).optional().describe(
-    "Tag slug to assign on match. Empty = create-only (advanced). The API auto-registers a custom tag definition for this slug with `display_name = name`. **MUST NOT collide with a built-in system tag slug** (see `list_tags` where `is_system=true`); colliding requests return 422 with code `checking.system_slug_reserved`. For `rule_type='llm'` use `config.tags` keys instead and leave `tag_slug` empty."
+    "Tag slug to assign on match. Empty = create-only (advanced). The API auto-registers a custom tag definition for this slug with `display_name = name`. **MUST NOT collide with a built-in system tag slug** (see `list_tags` where `scope=system`); colliding requests return 422 with code `checking.system_slug_reserved`. For `rule_type='llm'` use `config.tags` keys instead and leave `tag_slug` empty."
   ),
   rule_type: z.string().max(50).describe(
     "Rule engine. One of: `stopword_content`, `stopword_url`, `regexp_content`, `regexp_url`, `blacklist_domain`, `combo`, `llm`. The API validates."
@@ -3838,7 +3920,7 @@ var TestCustomRuleInputShape = {
     "Rule engine type. One of: `stopword_content`, `stopword_url`, `regexp_content`, `regexp_url`, `blacklist_domain`, `combo`, `llm`."
   ),
   config: z.record(z.unknown()).describe(
-    "Rule-type-specific config to test. Same shape as `create_custom_rule`'s `config`. NOTE: `test_custom_rule` evaluates the rule against a scan WITHOUT persisting it, so slug-collision validation does NOT run here \u2014 verify slugs against `list_tags` (`is_system=true`) before promoting to `create_custom_rule`."
+    "Rule-type-specific config to test. Same shape as `create_custom_rule`'s `config`. NOTE: `test_custom_rule` evaluates the rule against a scan WITHOUT persisting it, so slug-collision validation does NOT run here \u2014 verify slugs against `list_tags` (`scope=system`) before promoting to `create_custom_rule`."
   ),
   target: z.string().max(30).describe(
     "Where to apply the rule (e.g. 'page' for landing HTML). See API docs for the full set of valid values."
@@ -3847,7 +3929,7 @@ var TestCustomRuleInputShape = {
 };
 var testCustomRuleTool = {
   name: "test_custom_rule",
-  description: "Preview-test a rule definition against an existing scan WITHOUT persisting the rule. Returns `matched: bool`, evaluation time, and per-tag-slug details. Use to validate config before `create_custom_rule`. NOTE: slug-collision validation does NOT run in preview mode \u2014 verify any `tag_slug` (or LLM `config.tags` keys) against `list_tags` (`is_system=true`) before promoting to `create_custom_rule`, which would otherwise reject the same payload with HTTP 422 / code `checking.system_slug_reserved`.",
+  description: "Preview-test a rule definition against an existing scan WITHOUT persisting the rule. Returns `matched: bool`, evaluation time, and per-tag-slug details. Use to validate config before `create_custom_rule`. NOTE: slug-collision validation does NOT run in preview mode \u2014 verify any `tag_slug` (or LLM `config.tags` keys) against `list_tags` (`scope=system`) before promoting to `create_custom_rule`, which would otherwise reject the same payload with HTTP 422 / code `checking.system_slug_reserved`.",
   annotations: {
     title: "Test Custom Rule",
     readOnlyHint: true,
@@ -3873,7 +3955,7 @@ var UpdateCustomRuleInputShape = {
     "New display name. For non-LLM rules this also becomes the new `display_name` of the auto-registered tag definition."
   ),
   tag_slug: z.string().max(100).optional().describe(
-    "New tag slug to assign on match. **MUST NOT collide with a built-in system tag slug** (see `list_tags` where `is_system=true`); colliding requests return 422 with code `checking.system_slug_reserved`. Re-registering an existing custom slug refreshes its tag definition's `display_name` / `description`."
+    "New tag slug to assign on match. **MUST NOT collide with a built-in system tag slug** (see `list_tags` where `scope=system`); colliding requests return 422 with code `checking.system_slug_reserved`. Re-registering an existing custom slug refreshes its tag definition's `display_name` / `description`."
   ),
   config: z.record(z.unknown()).optional().describe(
     "New rule-type-specific config object. For `rule_type='llm'` the keys of `config.tags` are auto-registered as tag definitions; any key that collides with a system slug returns the same 422 contract."
@@ -4551,8 +4633,13 @@ var scanProxyField = z.object({
 
 // src/application/tools/scans/create-bulk-scans.tool.ts
 var CreateBulkScansInputShape = {
-  url: z.string().url().optional().describe("Direct URL. EITHER `url` OR `ad_tag` is required."),
-  ad_tag: z.string().optional().describe("Raw ad-tag HTML/JS. EITHER `url` OR `ad_tag` is required."),
+  url: z.string().url().optional().describe("Direct URL. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."),
+  ad_tag: z.string().optional().describe(
+    "Raw ad-tag HTML/JS OR an http(s) URL of a page with the creative already rendered. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
+  ),
+  vast_tag: z.string().optional().describe(
+    "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
+  ),
   country_codes: z.array(z.string().length(2)).min(1).max(50).describe("List of ISO 3166-1 alpha-2 country codes; one scan per country is created."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; same for every country in the batch."),
   proxy: scanProxyField,
@@ -4560,7 +4647,7 @@ var CreateBulkScansInputShape = {
 };
 var createBulkScansTool = {
   name: "create_bulk_scans",
-  description: "Queue one new scan per country in a single call (e.g. test the same URL from US + DE + JP). COSTS N CREDITS where N = number of countries. Returns the list of created scans.",
+  description: "Queue one new scan per country in a single call (e.g. test the same URL, ad-tag, or VAST video tag from US + DE + JP). COSTS N CREDITS where N = number of countries. Returns the list of created scans.",
   annotations: {
     title: "Create Bulk Scans",
     readOnlyHint: false,
@@ -4575,6 +4662,7 @@ var createBulkScansTool = {
       emulator_id: input.emulator_id,
       ...input.url !== void 0 ? { url: input.url } : {},
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
+      ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {}
     };
@@ -4584,8 +4672,15 @@ var createBulkScansTool = {
   }
 };
 var CreateScanInputShape = {
-  url: z.string().url().optional().describe("Direct URL of the ad / landing page. EITHER `url` OR `ad_tag` is required."),
-  ad_tag: z.string().optional().describe("Raw HTML/JS ad tag (script, iframe, image). EITHER `url` OR `ad_tag` is required."),
+  url: z.string().url().optional().describe(
+    "Direct URL of the ad / landing page. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
+  ),
+  ad_tag: z.string().optional().describe(
+    "Raw HTML/JS ad tag (script, iframe, image) OR an http(s) URL of a page with the creative already rendered. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
+  ),
+  vast_tag: z.string().optional().describe(
+    "VAST video ad tag: an http(s) URL of a VAST endpoint OR raw VAST XML (a document containing a <VAST> element). Fetched and played in a real browser. Provide exactly one of `url`, `ad_tag`, or `vast_tag`."
+  ),
   country_code: z.string().length(2).describe("ISO 3166-1 alpha-2 country code, e.g. US, DE, JP. Determines proxy geo."),
   emulator_id: z.string().min(1).max(100).describe("Device/OS profile slug; use `list_emulators` to discover valid values."),
   proxy: scanProxyField,
@@ -4595,7 +4690,7 @@ var CreateScanInputShape = {
 };
 var createScanTool = {
   name: "create_scan",
-  description: "Queue a single new scan for a URL or ad-tag against one country. COSTS CREDITS and bills the caller's organization. Returns the newly-created scan record.",
+  description: "Queue a single new scan for a URL, ad-tag, or VAST video tag against one country. COSTS CREDITS and bills the caller's organization. Returns the newly-created scan record.",
   annotations: {
     title: "Create Scan",
     readOnlyHint: false,
@@ -4610,6 +4705,7 @@ var createScanTool = {
       emulator_id: input.emulator_id,
       ...input.url !== void 0 ? { url: input.url } : {},
       ...input.ad_tag !== void 0 ? { ad_tag: input.ad_tag } : {},
+      ...input.vast_tag !== void 0 ? { vast_tag: input.vast_tag } : {},
       ...input.proxy !== void 0 ? { proxy: input.proxy } : {},
       ...input.labels !== void 0 ? { labels: input.labels } : {},
       ...input.campaign_id !== void 0 ? { campaign_id: input.campaign_id } : {},
@@ -4625,7 +4721,7 @@ var GetScanInputShape = {
 };
 var getScanTool = {
   name: "get_scan",
-  description: "Get full detail for one scan by UUID: status, offer URL, absolute screenshot URL, report_url + public_report_url deep-links, timing, labels, and the parent campaign if any. Link users with the returned `report_url` / `public_report_url` \u2014 never construct URLs yourself.",
+  description: "Get full detail for one scan by UUID: status, offer URL, absolute screenshot URL, report_url + public_report_url deep-links, timing, labels, and the parent campaign if any. VAST video scans also carry `vast_tag`, `creative_kind` (banner|video), and a `video` block (duration, media-file URL, VAST version, ad system, VPAID flag, wrapper depth). Link users with the returned `report_url` / `public_report_url` \u2014 never construct URLs yourself.",
   annotations: {
     title: "Get Scan",
     readOnlyHint: true,
@@ -4743,7 +4839,7 @@ var ListScansInputShape = {
 };
 var listScansTool = {
   name: "list_scans",
-  description: "List scans for the caller's organization with optional filters (status, country, URL substring, date range, run/campaign/group, tag, AI/IAB/brand category, dynamic labels). Returns a paginated envelope; each scan carries an absolute screenshot URL plus report_url (auth dashboard) and public_report_url (shareable) deep-links \u2014 link users with those, never hand-build URLs.",
+  description: "List scans for the caller's organization with optional filters (status, country, URL substring, date range, run/campaign/group, tag, AI/IAB/brand category, dynamic labels). Returns a paginated envelope; each brief carries `is_ad_tag` and `is_vast` flags, an absolute screenshot URL plus report_url (auth dashboard) and public_report_url (shareable) deep-links \u2014 link users with those, never hand-build URLs.",
   annotations: {
     title: "List Scans",
     readOnlyHint: true,
@@ -5376,5 +5472,5 @@ function formatToolError(error) {
 }
 
 export { BearerToken, SERVER_INSTRUCTIONS, createHttpApiGateway, createPinoLogger, declareEmptyResourcesAndPrompts, newRequestId, wireToolsIntoMcpServer };
-//# sourceMappingURL=chunk-AINV7DXM.js.map
-//# sourceMappingURL=chunk-AINV7DXM.js.map
+//# sourceMappingURL=chunk-ZZIYFLWG.js.map
+//# sourceMappingURL=chunk-ZZIYFLWG.js.map