@reclaimprotocol/client 0.1.17 → 0.1.20

package/lib/routes.gen.d.ts

@@ -51,6 +51,10 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/admin/sessions";
     };
+    readonly AdminSetUserOrgLimit: {
+        readonly method: "put";
+        readonly path: "/users/{userId}/org-limit";
+    };
     readonly AdminSubscribeOrgPlan: {
         readonly method: "post";
         readonly path: "/admin/orgs/{orgId}/billing/subscribe";
@@ -87,6 +91,14 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/oauth/consent";
     };
+    readonly ConvertOrgToRegular: {
+        readonly method: "post";
+        readonly path: "/orgs/{orgId}/convert";
+    };
+    readonly CreateAgentBrowserSession: {
+        readonly method: "post";
+        readonly path: "/orgs/{orgId}/agent-browser-sessions";
+    };
     readonly CreateBillingCheckoutSession: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/billing/checkout";
@@ -191,6 +203,10 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/discover/websites";
     };
+    readonly DisposeAgentBrowserSession: {
+        readonly method: "delete";
+        readonly path: "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}";
+    };
     readonly DisposeVerificationSession: {
         readonly method: "post";
         readonly path: "/v/{sessionId}/dispose";

package/lib/routes.gen.js

@@ -16,6 +16,7 @@ export const ROUTES = {
     "AdminProviders": { "method": "get", "path": "/admin/providers" },
     "AdminReviews": { "method": "get", "path": "/admin/reviews" },
     "AdminSessions": { "method": "get", "path": "/admin/sessions" },
+    "AdminSetUserOrgLimit": { "method": "put", "path": "/users/{userId}/org-limit" },
     "AdminSubscribeOrgPlan": { "method": "post", "path": "/admin/orgs/{orgId}/billing/subscribe" },
     "AdminThemes": { "method": "get", "path": "/admin/themes" },
     "AdminUsers": { "method": "get", "path": "/admin/users" },
@@ -25,6 +26,8 @@ export const ROUTES = {
     "CancelPublicListingRequest": { "method": "post", "path": "/providers/{providerId}/versions/{version}/cancel-review" },
     "ChangeOrgPlan": { "method": "post", "path": "/orgs/{orgId}/billing/change-plan" },
     "ConsentPage": { "method": "get", "path": "/oauth/consent" },
+    "ConvertOrgToRegular": { "method": "post", "path": "/orgs/{orgId}/convert" },
+    "CreateAgentBrowserSession": { "method": "post", "path": "/orgs/{orgId}/agent-browser-sessions" },
     "CreateBillingCheckoutSession": { "method": "post", "path": "/orgs/{orgId}/billing/checkout" },
     "CreateBillingPortalSession": { "method": "post", "path": "/orgs/{orgId}/billing/portal" },
     "CreateCallbackSubscription": { "method": "post", "path": "/verifications/callback-subscriptions" },
@@ -51,6 +54,7 @@ export const ROUTES = {
     "DiscoverResolve": { "method": "get", "path": "/discover/resolve" },
     "DiscoverTeachAgent": { "method": "get", "path": "/discover/teach" },
     "DiscoverWebsites": { "method": "get", "path": "/discover/websites" },
+    "DisposeAgentBrowserSession": { "method": "delete", "path": "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}" },
     "DisposeVerificationSession": { "method": "post", "path": "/v/{sessionId}/dispose" },
     "Docs": { "method": "get", "path": "/docs" },
     "ExplorePreviewImage": { "method": "get", "path": "/og/explore.png" },

package/lib/types/openapi.gen.d.ts

@@ -12,7 +12,7 @@ export interface paths {
         };
         /**
          * Discover home — search a website to verify
-         * @description Default home page. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search.
+         * @description Default home page. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search, plus tag pills to narrow them.
          */
         get: operations["Index"];
         put?: never;
@@ -179,7 +179,7 @@ export interface paths {
         put?: never;
         /**
          * Mint a SANDBOX test verification session for the selection
-         * @description Creates a real SANDBOX verification session under the signed-in member's personal organization for the selected data points, so they can test the flow on `/v/{sessionId}` without registering a callback subscription. Requires a signed-in member (session cookie); the provider set is recomputed server-side from the selection.
+         * @description Creates a real SANDBOX verification session for the selected data points, so the signed-in member can test the flow on `/v/{sessionId}` without registering a callback subscription. Runs under an organization the member owns (`orgId` in the body; defaults to their personal organization). The provider set is recomputed server-side from the selection.
          */
         post: operations["SiteBuildTry"];
         delete?: never;
@@ -239,7 +239,7 @@ export interface paths {
         put?: never;
         /**
          * Author an AI (llm) provider and go to its build screen
-         * @description Creates an `llm`-verification provider under the signed-in member's personal org, seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
+         * @description Creates an `llm`-verification provider under an organization the signed-in member owns (their personal org by default), seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
          */
         post: operations["SiteAiProvider"];
         delete?: never;
@@ -476,7 +476,7 @@ export interface paths {
         };
         /**
          * Explore verification sessions (admin-only)
-         * @description Admin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
+         * @description Admin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
          */
         get: operations["AdminSessions"];
         put?: never;
@@ -1002,7 +1002,7 @@ export interface paths {
         };
         /**
          * Verification page for an end-user
-         * @description Opens a Popcorn remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session. The session is resolved in-process.
+         * @description Opens a Builder-hosted remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session.
          */
         get: operations["VerificationPage"];
         put?: never;
@@ -1122,7 +1122,7 @@ export interface paths {
         };
         /**
          * Get the OpenAPI specification (YAML)
-         * @description Returns the OpenAPI 3.0 specification document for this API, with external `$ref`s preserved relative to the spec root. Useful for feeding into API tooling and SDK generators.
+         * @description The OpenAPI 3.1 document for this API, self-contained (every `$ref` is internal). Feed it to API tooling and SDK generators. Reclaim staff additionally see the internal tag groups; everyone else gets the integration surface only.
          */
         get: operations["OpenApiSpec"];
         put?: never;
@@ -1142,7 +1142,7 @@ export interface paths {
         };
         /**
          * View the API reference (Scalar UI)
-         * @description Renders an interactive API reference for this service using Scalar, backed by the OpenAPI spec served at `/openapi.yaml`.
+         * @description Interactive API reference rendered by Scalar from `GET /openapi.yaml`, so it shows whichever document the viewer is served.
          */
         get: operations["Docs"];
         put?: never;
@@ -1311,6 +1311,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/users/{userId}/org-limit": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set a user's org-creation limit (admin-only)
+         * @description Admin only. Overrides how many ACTIVE organizations the user may create (the platform default is 3). Restore the default by sending `null` (JSON) or an empty `limit` (form).
+         */
+        put: operations["AdminSetUserOrgLimit"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs": {
         parameters: {
             query?: never;
@@ -1332,6 +1352,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/agent-browser-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a remote browser session for provider authoring
+         * @description Allocates a Builder-managed Popcorn browser for an authenticated agent. The caller must be an active editor of the organization. Creating the browser consumes one use from the seeded Builder verification client's VERIFICATION quota pool, so the organization's normal sandbox, plan, overage, and credit restrictions apply. The live-view URL may be shared with a volunteer; the unrestricted CDP URL is a secret intended only for the authenticated local agent process.
+         */
+        post: operations["CreateAgentBrowserSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Dispose a remote provider-authoring browser
+         * @description Tears down an agent-owned Popcorn browser immediately. Idempotent for a session that was already disposed. The caller must still be an active editor of the owning organization.
+         */
+        delete: operations["DisposeAgentBrowserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}": {
         parameters: {
             query?: never;
@@ -1357,6 +1417,26 @@ export interface paths {
         patch: operations["UpdateOrg"];
         trace?: never;
     };
+    "/orgs/{orgId}/convert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Convert a personal organization to a regular organization
+         * @description Owner only. One-way: flips a `PERSONAL` organization (auto-provisioned at sign-up, sandbox-only, single-member) to a regular `ORG`, unlocking billing, plan & usage, and member invites. All providers, sessions, credentials and themes carry over. `409` when the organization is not `PERSONAL`.
+         */
+        post: operations["ConvertOrgToRegular"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}/members": {
         parameters: {
             query?: never;
@@ -2166,7 +2246,7 @@ export interface paths {
         };
         /**
          * List an organization's verification sessions
-         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
+         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
          *
          *     Note: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.
          */
@@ -2582,6 +2662,23 @@ export interface components {
          * @description Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`.
          */
         SessionID: string;
+        /**
+         * Format: uuid
+         * @description Builder-managed remote browser session id.
+         */
+        AgentBrowserSessionID: string;
+        /** @description A short-lived Popcorn browser allocated for provider authoring. Treat `cdpUrl` and `apiUrl` as credentials: the local agent consumes them and must not display, persist, or share them. `liveViewUrl` is intentionally shareable with the volunteer operating the browser. */
+        AgentBrowserSession: {
+            id: components["schemas"]["AgentBrowserSessionID"];
+            orgId: components["schemas"]["OrgID"];
+            /** Format: uri */
+            liveViewUrl: string;
+            /** Format: uri */
+            readonly cdpUrl: string;
+            /** Format: uri */
+            readonly apiUrl?: string;
+            expiresAt: components["schemas"]["Timestamp"];
+        };
         /**
          * Format: uuid
          * @description Stable id for a callback subscription.
@@ -3762,10 +3859,21 @@ export interface components {
             context?: {
                 [key: string]: string;
             };
+            orgId?: components["schemas"]["OrgID"];
+        };
+        /** @description Body for `POST /site/{domain}/ai-provider`. `orgId` is optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). `url` is required only when `domain` has no existing catalog data — the build page's confirm-URL step supplies it, and the draft is scaffolded under whatever domain that URL actually resolves to (which may differ from `domain`), not the unconfirmed search text the build page was first opened with. */
+        SiteAiProviderBody: {
+            orgId?: components["schemas"]["OrgID"];
+            /** @description Confirmed website URL, for a domain with no existing catalog data. Verified reachable before anything is created. */
+            url?: string;
+        };
+        /** @description Body for `PUT /users/{userId}/org-limit`. An integer sets the limit; `null` (JSON) or an empty string (form) restores the default (3). */
+        AdminSetUserOrgLimitBody: {
+            limit?: number | string | null;
         };
         /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
         SiteTryAiBody: {
-            /** @description The edited extraction prompt for the AI provider. */
+            /** @description The edited extraction prompt for the AI provider. Gated by the prompt guard before it is stored (see docs/prompt-guard.md); the length here documents the same ceiling the guard enforces. */
             prompt?: string;
         };
         /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it, one example provider slug, and one `references` entry per provider describing how that provider proves it (what the site page's source picker offers as selectable options). */
@@ -4110,7 +4218,7 @@ export interface components {
         CreateProviderVersionRequest: {
             /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
@@ -4137,7 +4245,7 @@ export interface components {
             /** Format: uri */
             initialUrl?: string;
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
@@ -4582,7 +4690,12 @@ export type $defs = Record<string, never>;
 export interface operations {
     Index: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Free-text query matched against website domain, data points, brand title, and description. Restores the search box and results on a shared/bookmarked link. */
+                q?: string;
+                /** @description Narrow to websites with at least one visible provider carrying ANY of these tags. Repeat to pass several (OR-combined). */
+                tag?: string[];
+            };
             header?: never;
             path?: never;
             cookie?: never;
@@ -4686,6 +4799,8 @@ export interface operations {
             query?: {
                 /** @description Free-text query matched against website domain, data points, brand title, and description. Omit for the popular-websites list. */
                 q?: string;
+                /** @description Narrow to websites with at least one visible provider carrying ANY of these tags. Repeat to pass several (OR-combined). */
+                tag?: string[];
             };
             header?: never;
             path?: never;
@@ -4991,7 +5106,13 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description Optional: which owned organization to author the provider under. */
+        requestBody?: {
+            content: {
+                "application/x-www-form-urlencoded": components["schemas"]["SiteAiProviderBody"];
+                "application/json": components["schemas"]["SiteAiProviderBody"];
+            };
+        };
         responses: {
             /** @description The AI dialog body (editable prompt + Try with AI). */
             200: {
@@ -5010,6 +5131,8 @@ export interface operations {
             query: {
                 /** @description The AI provider to try. */
                 providerId: components["schemas"]["ProviderID"];
+                /** @description Which owned organization the sandbox session runs under (defaults to the member's personal organization, or their first owned org). Must own the provider. */
+                orgId?: components["schemas"]["OrgID"];
             };
             header?: never;
             path: {
@@ -5366,9 +5489,19 @@ export interface operations {
     AdminSessions: {
         parameters: {
             query?: {
-                /** @description Session id, provider id (UUIDs), or consumer ETH address (`0x…`) — matched exactly. */
-                q?: string;
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
+                /** @description Only return the session matching this claimant client id. */
+                claimantClientId?: string;
+                /** @description Only return sessions belonging to this exact organization id. */
+                orgId?: string;
                 status?: components["schemas"]["VerificationStatus"];
+                /** @description Only return sessions created at or after this time (inclusive). */
+                createdAfter?: string;
+                /** @description Only return sessions created at or before this time (inclusive). */
+                createdBefore?: string;
             };
             header?: never;
             path?: never;
@@ -6530,6 +6663,34 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    AdminSetUserOrgLimit: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userId: components["schemas"]["UserID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AdminSetUserOrgLimitBody"];
+                "application/x-www-form-urlencoded": components["schemas"]["AdminSetUserOrgLimitBody"];
+            };
+        };
+        responses: {
+            /** @description Updated. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     ListOrgs: {
         parameters: {
             query?: {
@@ -6584,6 +6745,57 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Remote authoring browser created. */
+            201: {
+                headers: {
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBrowserSession"];
+                };
+            };
+            402: components["responses"]["ProblemResponse"];
+            403: components["responses"]["ForbiddenResponse"];
+            429: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    DisposeAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+                browserSessionId: components["schemas"]["AgentBrowserSessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Browser disposed or already absent. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetOrg: {
         parameters: {
             query?: {
@@ -6664,6 +6876,31 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    ConvertOrgToRegular: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Converted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Organization"];
+                };
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            409: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     SearchOrgMembers: {
         parameters: {
             query?: {
@@ -8180,8 +8417,10 @@ export interface operations {
     ListOrgVerificationSessions: {
         parameters: {
             query?: {
-                /** @description Only return sessions for this provider. */
-                providerId?: components["schemas"]["ProviderID"];
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
                 /** @description Only return sessions in this status. */
                 status?: components["schemas"]["VerificationStatus"];
                 /** @description Only return sessions resolved to this exact provider version. */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@reclaimprotocol/client",
 	"title": "Reclaim Client",
-	"version": "0.1.17",
+	"version": "0.1.20",
 	"description": "Typed SDK/HTTP client SDK for the Reclaim Protocol — the programmatic way to use Reclaim Protocol to verify **data points** about your users (a follower count, an account balance, an order). Can be directly integrated by apps to request verification for their users using Reclaim Protocol and verify the results.",
 	"type": "module",
 	"sideEffects": false,

package/src/routes.gen.ts

@@ -17,6 +17,7 @@ export const ROUTES = {
 	"AdminProviders": {"method":"get","path":"/admin/providers"},
 	"AdminReviews": {"method":"get","path":"/admin/reviews"},
 	"AdminSessions": {"method":"get","path":"/admin/sessions"},
+	"AdminSetUserOrgLimit": {"method":"put","path":"/users/{userId}/org-limit"},
 	"AdminSubscribeOrgPlan": {"method":"post","path":"/admin/orgs/{orgId}/billing/subscribe"},
 	"AdminThemes": {"method":"get","path":"/admin/themes"},
 	"AdminUsers": {"method":"get","path":"/admin/users"},
@@ -26,6 +27,8 @@ export const ROUTES = {
 	"CancelPublicListingRequest": {"method":"post","path":"/providers/{providerId}/versions/{version}/cancel-review"},
 	"ChangeOrgPlan": {"method":"post","path":"/orgs/{orgId}/billing/change-plan"},
 	"ConsentPage": {"method":"get","path":"/oauth/consent"},
+	"ConvertOrgToRegular": {"method":"post","path":"/orgs/{orgId}/convert"},
+	"CreateAgentBrowserSession": {"method":"post","path":"/orgs/{orgId}/agent-browser-sessions"},
 	"CreateBillingCheckoutSession": {"method":"post","path":"/orgs/{orgId}/billing/checkout"},
 	"CreateBillingPortalSession": {"method":"post","path":"/orgs/{orgId}/billing/portal"},
 	"CreateCallbackSubscription": {"method":"post","path":"/verifications/callback-subscriptions"},
@@ -52,6 +55,7 @@ export const ROUTES = {
 	"DiscoverResolve": {"method":"get","path":"/discover/resolve"},
 	"DiscoverTeachAgent": {"method":"get","path":"/discover/teach"},
 	"DiscoverWebsites": {"method":"get","path":"/discover/websites"},
+	"DisposeAgentBrowserSession": {"method":"delete","path":"/orgs/{orgId}/agent-browser-sessions/{browserSessionId}"},
 	"DisposeVerificationSession": {"method":"post","path":"/v/{sessionId}/dispose"},
 	"Docs": {"method":"get","path":"/docs"},
 	"ExplorePreviewImage": {"method":"get","path":"/og/explore.png"},

package/src/types/openapi.gen.ts

@@ -13,7 +13,7 @@ export interface paths {
         };
         /**
          * Discover home — search a website to verify
-         * @description Default home page. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search.
+         * @description Default home page. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search, plus tag pills to narrow them.
          */
         get: operations["Index"];
         put?: never;
@@ -180,7 +180,7 @@ export interface paths {
         put?: never;
         /**
          * Mint a SANDBOX test verification session for the selection
-         * @description Creates a real SANDBOX verification session under the signed-in member's personal organization for the selected data points, so they can test the flow on `/v/{sessionId}` without registering a callback subscription. Requires a signed-in member (session cookie); the provider set is recomputed server-side from the selection.
+         * @description Creates a real SANDBOX verification session for the selected data points, so the signed-in member can test the flow on `/v/{sessionId}` without registering a callback subscription. Runs under an organization the member owns (`orgId` in the body; defaults to their personal organization). The provider set is recomputed server-side from the selection.
          */
         post: operations["SiteBuildTry"];
         delete?: never;
@@ -240,7 +240,7 @@ export interface paths {
         put?: never;
         /**
          * Author an AI (llm) provider and go to its build screen
-         * @description Creates an `llm`-verification provider under the signed-in member's personal org, seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
+         * @description Creates an `llm`-verification provider under an organization the signed-in member owns (their personal org by default), seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
          */
         post: operations["SiteAiProvider"];
         delete?: never;
@@ -477,7 +477,7 @@ export interface paths {
         };
         /**
          * Explore verification sessions (admin-only)
-         * @description Admin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
+         * @description Admin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
          */
         get: operations["AdminSessions"];
         put?: never;
@@ -1003,7 +1003,7 @@ export interface paths {
         };
         /**
          * Verification page for an end-user
-         * @description Opens a Popcorn remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session. The session is resolved in-process.
+         * @description Opens a Builder-hosted remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session.
          */
         get: operations["VerificationPage"];
         put?: never;
@@ -1123,7 +1123,7 @@ export interface paths {
         };
         /**
          * Get the OpenAPI specification (YAML)
-         * @description Returns the OpenAPI 3.0 specification document for this API, with external `$ref`s preserved relative to the spec root. Useful for feeding into API tooling and SDK generators.
+         * @description The OpenAPI 3.1 document for this API, self-contained (every `$ref` is internal). Feed it to API tooling and SDK generators. Reclaim staff additionally see the internal tag groups; everyone else gets the integration surface only.
          */
         get: operations["OpenApiSpec"];
         put?: never;
@@ -1143,7 +1143,7 @@ export interface paths {
         };
         /**
          * View the API reference (Scalar UI)
-         * @description Renders an interactive API reference for this service using Scalar, backed by the OpenAPI spec served at `/openapi.yaml`.
+         * @description Interactive API reference rendered by Scalar from `GET /openapi.yaml`, so it shows whichever document the viewer is served.
          */
         get: operations["Docs"];
         put?: never;
@@ -1312,6 +1312,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/users/{userId}/org-limit": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * Set a user's org-creation limit (admin-only)
+         * @description Admin only. Overrides how many ACTIVE organizations the user may create (the platform default is 3). Restore the default by sending `null` (JSON) or an empty `limit` (form).
+         */
+        put: operations["AdminSetUserOrgLimit"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs": {
         parameters: {
             query?: never;
@@ -1333,6 +1353,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/agent-browser-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a remote browser session for provider authoring
+         * @description Allocates a Builder-managed Popcorn browser for an authenticated agent. The caller must be an active editor of the organization. Creating the browser consumes one use from the seeded Builder verification client's VERIFICATION quota pool, so the organization's normal sandbox, plan, overage, and credit restrictions apply. The live-view URL may be shared with a volunteer; the unrestricted CDP URL is a secret intended only for the authenticated local agent process.
+         */
+        post: operations["CreateAgentBrowserSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Dispose a remote provider-authoring browser
+         * @description Tears down an agent-owned Popcorn browser immediately. Idempotent for a session that was already disposed. The caller must still be an active editor of the owning organization.
+         */
+        delete: operations["DisposeAgentBrowserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}": {
         parameters: {
             query?: never;
@@ -1358,6 +1418,26 @@ export interface paths {
         patch: operations["UpdateOrg"];
         trace?: never;
     };
+    "/orgs/{orgId}/convert": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Convert a personal organization to a regular organization
+         * @description Owner only. One-way: flips a `PERSONAL` organization (auto-provisioned at sign-up, sandbox-only, single-member) to a regular `ORG`, unlocking billing, plan & usage, and member invites. All providers, sessions, credentials and themes carry over. `409` when the organization is not `PERSONAL`.
+         */
+        post: operations["ConvertOrgToRegular"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}/members": {
         parameters: {
             query?: never;
@@ -2167,7 +2247,7 @@ export interface paths {
         };
         /**
          * List an organization's verification sessions
-         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
+         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
          *
          *     Note: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.
          */
@@ -2583,6 +2663,23 @@ export interface components {
          * @description Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`.
          */
         SessionID: string;
+        /**
+         * Format: uuid
+         * @description Builder-managed remote browser session id.
+         */
+        AgentBrowserSessionID: string;
+        /** @description A short-lived Popcorn browser allocated for provider authoring. Treat `cdpUrl` and `apiUrl` as credentials: the local agent consumes them and must not display, persist, or share them. `liveViewUrl` is intentionally shareable with the volunteer operating the browser. */
+        AgentBrowserSession: {
+            id: components["schemas"]["AgentBrowserSessionID"];
+            orgId: components["schemas"]["OrgID"];
+            /** Format: uri */
+            liveViewUrl: string;
+            /** Format: uri */
+            readonly cdpUrl: string;
+            /** Format: uri */
+            readonly apiUrl?: string;
+            expiresAt: components["schemas"]["Timestamp"];
+        };
         /**
          * Format: uuid
          * @description Stable id for a callback subscription.
@@ -3763,10 +3860,21 @@ export interface components {
             context?: {
                 [key: string]: string;
             };
+            orgId?: components["schemas"]["OrgID"];
+        };
+        /** @description Body for `POST /site/{domain}/ai-provider`. `orgId` is optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). `url` is required only when `domain` has no existing catalog data — the build page's confirm-URL step supplies it, and the draft is scaffolded under whatever domain that URL actually resolves to (which may differ from `domain`), not the unconfirmed search text the build page was first opened with. */
+        SiteAiProviderBody: {
+            orgId?: components["schemas"]["OrgID"];
+            /** @description Confirmed website URL, for a domain with no existing catalog data. Verified reachable before anything is created. */
+            url?: string;
+        };
+        /** @description Body for `PUT /users/{userId}/org-limit`. An integer sets the limit; `null` (JSON) or an empty string (form) restores the default (3). */
+        AdminSetUserOrgLimitBody: {
+            limit?: number | string | null;
         };
         /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
         SiteTryAiBody: {
-            /** @description The edited extraction prompt for the AI provider. */
+            /** @description The edited extraction prompt for the AI provider. Gated by the prompt guard before it is stored (see docs/prompt-guard.md); the length here documents the same ceiling the guard enforces. */
             prompt?: string;
         };
         /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it, one example provider slug, and one `references` entry per provider describing how that provider proves it (what the site page's source picker offers as selectable options). */
@@ -4111,7 +4219,7 @@ export interface components {
         CreateProviderVersionRequest: {
             /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
@@ -4138,7 +4246,7 @@ export interface components {
             /** Format: uri */
             initialUrl?: string;
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
@@ -4583,7 +4691,12 @@ export type $defs = Record<string, never>;
 export interface operations {
     Index: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description Free-text query matched against website domain, data points, brand title, and description. Restores the search box and results on a shared/bookmarked link. */
+                q?: string;
+                /** @description Narrow to websites with at least one visible provider carrying ANY of these tags. Repeat to pass several (OR-combined). */
+                tag?: string[];
+            };
             header?: never;
             path?: never;
             cookie?: never;
@@ -4687,6 +4800,8 @@ export interface operations {
             query?: {
                 /** @description Free-text query matched against website domain, data points, brand title, and description. Omit for the popular-websites list. */
                 q?: string;
+                /** @description Narrow to websites with at least one visible provider carrying ANY of these tags. Repeat to pass several (OR-combined). */
+                tag?: string[];
             };
             header?: never;
             path?: never;
@@ -4992,7 +5107,13 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        /** @description Optional: which owned organization to author the provider under. */
+        requestBody?: {
+            content: {
+                "application/x-www-form-urlencoded": components["schemas"]["SiteAiProviderBody"];
+                "application/json": components["schemas"]["SiteAiProviderBody"];
+            };
+        };
         responses: {
             /** @description The AI dialog body (editable prompt + Try with AI). */
             200: {
@@ -5011,6 +5132,8 @@ export interface operations {
             query: {
                 /** @description The AI provider to try. */
                 providerId: components["schemas"]["ProviderID"];
+                /** @description Which owned organization the sandbox session runs under (defaults to the member's personal organization, or their first owned org). Must own the provider. */
+                orgId?: components["schemas"]["OrgID"];
             };
             header?: never;
             path: {
@@ -5367,9 +5490,19 @@ export interface operations {
     AdminSessions: {
         parameters: {
             query?: {
-                /** @description Session id, provider id (UUIDs), or consumer ETH address (`0x…`) — matched exactly. */
-                q?: string;
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
+                /** @description Only return the session matching this claimant client id. */
+                claimantClientId?: string;
+                /** @description Only return sessions belonging to this exact organization id. */
+                orgId?: string;
                 status?: components["schemas"]["VerificationStatus"];
+                /** @description Only return sessions created at or after this time (inclusive). */
+                createdAfter?: string;
+                /** @description Only return sessions created at or before this time (inclusive). */
+                createdBefore?: string;
             };
             header?: never;
             path?: never;
@@ -6531,6 +6664,34 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    AdminSetUserOrgLimit: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                userId: components["schemas"]["UserID"];
+            };
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["AdminSetUserOrgLimitBody"];
+                "application/x-www-form-urlencoded": components["schemas"]["AdminSetUserOrgLimitBody"];
+            };
+        };
+        responses: {
+            /** @description Updated. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     ListOrgs: {
         parameters: {
             query?: {
@@ -6585,6 +6746,57 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Remote authoring browser created. */
+            201: {
+                headers: {
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBrowserSession"];
+                };
+            };
+            402: components["responses"]["ProblemResponse"];
+            403: components["responses"]["ForbiddenResponse"];
+            429: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    DisposeAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+                browserSessionId: components["schemas"]["AgentBrowserSessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Browser disposed or already absent. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetOrg: {
         parameters: {
             query?: {
@@ -6665,6 +6877,31 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    ConvertOrgToRegular: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Converted */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["Organization"];
+                };
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            409: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     SearchOrgMembers: {
         parameters: {
             query?: {
@@ -8181,8 +8418,10 @@ export interface operations {
     ListOrgVerificationSessions: {
         parameters: {
             query?: {
-                /** @description Only return sessions for this provider. */
-                providerId?: components["schemas"]["ProviderID"];
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
                 /** @description Only return sessions in this status. */
                 status?: components["schemas"]["VerificationStatus"];
                 /** @description Only return sessions resolved to this exact provider version. */