@reclaimprotocol/client 0.1.18 → 0.1.21

package/lib/routes.gen.d.ts

@@ -95,6 +95,10 @@ export declare const ROUTES: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/convert";
     };
+    readonly CreateAgentBrowserSession: {
+        readonly method: "post";
+        readonly path: "/orgs/{orgId}/agent-browser-sessions";
+    };
     readonly CreateBillingCheckoutSession: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/billing/checkout";
@@ -199,6 +203,10 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/discover/websites";
     };
+    readonly DisposeAgentBrowserSession: {
+        readonly method: "delete";
+        readonly path: "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}";
+    };
     readonly DisposeVerificationSession: {
         readonly method: "post";
         readonly path: "/v/{sessionId}/dispose";

package/lib/routes.gen.js

@@ -27,6 +27,7 @@ export const ROUTES = {
     "ChangeOrgPlan": { "method": "post", "path": "/orgs/{orgId}/billing/change-plan" },
     "ConsentPage": { "method": "get", "path": "/oauth/consent" },
     "ConvertOrgToRegular": { "method": "post", "path": "/orgs/{orgId}/convert" },
+    "CreateAgentBrowserSession": { "method": "post", "path": "/orgs/{orgId}/agent-browser-sessions" },
     "CreateBillingCheckoutSession": { "method": "post", "path": "/orgs/{orgId}/billing/checkout" },
     "CreateBillingPortalSession": { "method": "post", "path": "/orgs/{orgId}/billing/portal" },
     "CreateCallbackSubscription": { "method": "post", "path": "/verifications/callback-subscriptions" },
@@ -53,6 +54,7 @@ export const ROUTES = {
     "DiscoverResolve": { "method": "get", "path": "/discover/resolve" },
     "DiscoverTeachAgent": { "method": "get", "path": "/discover/teach" },
     "DiscoverWebsites": { "method": "get", "path": "/discover/websites" },
+    "DisposeAgentBrowserSession": { "method": "delete", "path": "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}" },
     "DisposeVerificationSession": { "method": "post", "path": "/v/{sessionId}/dispose" },
     "Docs": { "method": "get", "path": "/docs" },
     "ExplorePreviewImage": { "method": "get", "path": "/og/explore.png" },

package/lib/types/openapi.gen.d.ts

@@ -476,7 +476,7 @@ export interface paths {
         };
         /**
          * Explore verification sessions (admin-only)
-         * @description Admin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
+         * @description Admin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
          */
         get: operations["AdminSessions"];
         put?: never;
@@ -1002,7 +1002,7 @@ export interface paths {
         };
         /**
          * Verification page for an end-user
-         * @description Opens a Popcorn remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session. The session is resolved in-process.
+         * @description Opens a Builder-hosted remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session.
          */
         get: operations["VerificationPage"];
         put?: never;
@@ -1122,7 +1122,7 @@ export interface paths {
         };
         /**
          * Get the OpenAPI specification (YAML)
-         * @description Returns the OpenAPI 3.0 specification document for this API, with external `$ref`s preserved relative to the spec root. Useful for feeding into API tooling and SDK generators.
+         * @description The OpenAPI 3.1 document for this API, self-contained (every `$ref` is internal). Feed it to API tooling and SDK generators. Reclaim staff additionally see the internal tag groups; everyone else gets the integration surface only.
          */
         get: operations["OpenApiSpec"];
         put?: never;
@@ -1142,7 +1142,7 @@ export interface paths {
         };
         /**
          * View the API reference (Scalar UI)
-         * @description Renders an interactive API reference for this service using Scalar, backed by the OpenAPI spec served at `/openapi.yaml`.
+         * @description Interactive API reference rendered by Scalar from `GET /openapi.yaml`, so it shows whichever document the viewer is served.
          */
         get: operations["Docs"];
         put?: never;
@@ -1352,6 +1352,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/agent-browser-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a remote browser session for provider authoring
+         * @description Allocates a Builder-managed Popcorn browser for an authenticated agent. The caller must be an active editor of the organization. Creating the browser consumes one use from the seeded Builder verification client's VERIFICATION quota pool, so the organization's normal sandbox, plan, overage, and credit restrictions apply. The live-view URL may be shared with a volunteer; the unrestricted CDP URL is a secret intended only for the authenticated local agent process.
+         */
+        post: operations["CreateAgentBrowserSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Dispose a remote provider-authoring browser
+         * @description Tears down an agent-owned Popcorn browser immediately. Idempotent for a session that was already disposed. The caller must still be an active editor of the owning organization.
+         */
+        delete: operations["DisposeAgentBrowserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}": {
         parameters: {
             query?: never;
@@ -2206,7 +2246,7 @@ export interface paths {
         };
         /**
          * List an organization's verification sessions
-         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
+         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
          *
          *     Note: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.
          */
@@ -2622,6 +2662,23 @@ export interface components {
          * @description Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`.
          */
         SessionID: string;
+        /**
+         * Format: uuid
+         * @description Builder-managed remote browser session id.
+         */
+        AgentBrowserSessionID: string;
+        /** @description A short-lived Popcorn browser allocated for provider authoring. Treat `cdpUrl` and `apiUrl` as credentials: the local agent consumes them and must not display, persist, or share them. `liveViewUrl` is intentionally shareable with the volunteer operating the browser. */
+        AgentBrowserSession: {
+            id: components["schemas"]["AgentBrowserSessionID"];
+            orgId: components["schemas"]["OrgID"];
+            /** Format: uri */
+            liveViewUrl: string;
+            /** Format: uri */
+            readonly cdpUrl: string;
+            /** Format: uri */
+            readonly apiUrl?: string;
+            expiresAt: components["schemas"]["Timestamp"];
+        };
         /**
          * Format: uuid
          * @description Stable id for a callback subscription.
@@ -3804,9 +3861,11 @@ export interface components {
             };
             orgId?: components["schemas"]["OrgID"];
         };
-        /** @description Body for `POST /site/{domain}/ai-provider`. Optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). */
+        /** @description Body for `POST /site/{domain}/ai-provider`. `orgId` is optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). `url` is required only when `domain` has no existing catalog data — the build page's confirm-URL step supplies it, and the draft is scaffolded under whatever domain that URL actually resolves to (which may differ from `domain`), not the unconfirmed search text the build page was first opened with. */
         SiteAiProviderBody: {
             orgId?: components["schemas"]["OrgID"];
+            /** @description Confirmed website URL, for a domain with no existing catalog data. Verified reachable before anything is created. */
+            url?: string;
         };
         /** @description Body for `PUT /users/{userId}/org-limit`. An integer sets the limit; `null` (JSON) or an empty string (form) restores the default (3). */
         AdminSetUserOrgLimitBody: {
@@ -3814,7 +3873,7 @@ export interface components {
         };
         /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
         SiteTryAiBody: {
-            /** @description The edited extraction prompt for the AI provider. */
+            /** @description The edited extraction prompt for the AI provider. Gated by the prompt guard before it is stored (see docs/prompt-guard.md); the length here documents the same ceiling the guard enforces. */
             prompt?: string;
         };
         /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it, one example provider slug, and one `references` entry per provider describing how that provider proves it (what the site page's source picker offers as selectable options). */
@@ -4159,7 +4218,7 @@ export interface components {
         CreateProviderVersionRequest: {
             /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
@@ -4186,7 +4245,7 @@ export interface components {
             /** Format: uri */
             initialUrl?: string;
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
@@ -5430,9 +5489,19 @@ export interface operations {
     AdminSessions: {
         parameters: {
             query?: {
-                /** @description Session id, provider id (UUIDs), or consumer ETH address (`0x…`) — matched exactly. */
-                q?: string;
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
+                /** @description Only return the session matching this claimant client id. */
+                claimantClientId?: string;
+                /** @description Only return sessions belonging to this exact organization id. */
+                orgId?: string;
                 status?: components["schemas"]["VerificationStatus"];
+                /** @description Only return sessions created at or after this time (inclusive). */
+                createdAfter?: string;
+                /** @description Only return sessions created at or before this time (inclusive). */
+                createdBefore?: string;
             };
             header?: never;
             path?: never;
@@ -6676,6 +6745,57 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Remote authoring browser created. */
+            201: {
+                headers: {
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBrowserSession"];
+                };
+            };
+            402: components["responses"]["ProblemResponse"];
+            403: components["responses"]["ForbiddenResponse"];
+            429: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    DisposeAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+                browserSessionId: components["schemas"]["AgentBrowserSessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Browser disposed or already absent. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetOrg: {
         parameters: {
             query?: {
@@ -8297,8 +8417,10 @@ export interface operations {
     ListOrgVerificationSessions: {
         parameters: {
             query?: {
-                /** @description Only return sessions for this provider. */
-                providerId?: components["schemas"]["ProviderID"];
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
                 /** @description Only return sessions in this status. */
                 status?: components["schemas"]["VerificationStatus"];
                 /** @description Only return sessions resolved to this exact provider version. */

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@reclaimprotocol/client",
 	"title": "Reclaim Client",
-	"version": "0.1.18",
+	"version": "0.1.21",
 	"description": "Typed SDK/HTTP client SDK for the Reclaim Protocol — the programmatic way to use Reclaim Protocol to verify **data points** about your users (a follower count, an account balance, an order). Can be directly integrated by apps to request verification for their users using Reclaim Protocol and verify the results.",
 	"type": "module",
 	"sideEffects": false,

package/src/routes.gen.ts

@@ -28,6 +28,7 @@ export const ROUTES = {
 	"ChangeOrgPlan": {"method":"post","path":"/orgs/{orgId}/billing/change-plan"},
 	"ConsentPage": {"method":"get","path":"/oauth/consent"},
 	"ConvertOrgToRegular": {"method":"post","path":"/orgs/{orgId}/convert"},
+	"CreateAgentBrowserSession": {"method":"post","path":"/orgs/{orgId}/agent-browser-sessions"},
 	"CreateBillingCheckoutSession": {"method":"post","path":"/orgs/{orgId}/billing/checkout"},
 	"CreateBillingPortalSession": {"method":"post","path":"/orgs/{orgId}/billing/portal"},
 	"CreateCallbackSubscription": {"method":"post","path":"/verifications/callback-subscriptions"},
@@ -54,6 +55,7 @@ export const ROUTES = {
 	"DiscoverResolve": {"method":"get","path":"/discover/resolve"},
 	"DiscoverTeachAgent": {"method":"get","path":"/discover/teach"},
 	"DiscoverWebsites": {"method":"get","path":"/discover/websites"},
+	"DisposeAgentBrowserSession": {"method":"delete","path":"/orgs/{orgId}/agent-browser-sessions/{browserSessionId}"},
 	"DisposeVerificationSession": {"method":"post","path":"/v/{sessionId}/dispose"},
 	"Docs": {"method":"get","path":"/docs"},
 	"ExplorePreviewImage": {"method":"get","path":"/og/explore.png"},

package/src/types/openapi.gen.ts

@@ -477,7 +477,7 @@ export interface paths {
         };
         /**
          * Explore verification sessions (admin-only)
-         * @description Admin only. Search verification sessions across all organizations — paste a session id, provider id, or consumer ETH address into `q`, optionally filter by `status`. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
+         * @description Admin only. Search verification sessions across all organizations — filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `claimantClientId`, `orgId` (all exact match), `status`, and a `createdAfter`/`createdBefore` time range. Rows link to the org-scoped session detail page (admins can open any org's pages). Capped at 100, newest first.
          */
         get: operations["AdminSessions"];
         put?: never;
@@ -1003,7 +1003,7 @@ export interface paths {
         };
         /**
          * Verification page for an end-user
-         * @description Opens a Popcorn remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session. The session is resolved in-process.
+         * @description Opens a Builder-hosted remote-browser session, embeds its live view in an iframe, and kicks off the capture → prove → submit run for this verification session.
          */
         get: operations["VerificationPage"];
         put?: never;
@@ -1123,7 +1123,7 @@ export interface paths {
         };
         /**
          * Get the OpenAPI specification (YAML)
-         * @description Returns the OpenAPI 3.0 specification document for this API, with external `$ref`s preserved relative to the spec root. Useful for feeding into API tooling and SDK generators.
+         * @description The OpenAPI 3.1 document for this API, self-contained (every `$ref` is internal). Feed it to API tooling and SDK generators. Reclaim staff additionally see the internal tag groups; everyone else gets the integration surface only.
          */
         get: operations["OpenApiSpec"];
         put?: never;
@@ -1143,7 +1143,7 @@ export interface paths {
         };
         /**
          * View the API reference (Scalar UI)
-         * @description Renders an interactive API reference for this service using Scalar, backed by the OpenAPI spec served at `/openapi.yaml`.
+         * @description Interactive API reference rendered by Scalar from `GET /openapi.yaml`, so it shows whichever document the viewer is served.
          */
         get: operations["Docs"];
         put?: never;
@@ -1353,6 +1353,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/agent-browser-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Create a remote browser session for provider authoring
+         * @description Allocates a Builder-managed Popcorn browser for an authenticated agent. The caller must be an active editor of the organization. Creating the browser consumes one use from the seeded Builder verification client's VERIFICATION quota pool, so the organization's normal sandbox, plan, overage, and credit restrictions apply. The live-view URL may be shared with a volunteer; the unrestricted CDP URL is a secret intended only for the authenticated local agent process.
+         */
+        post: operations["CreateAgentBrowserSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/orgs/{orgId}/agent-browser-sessions/{browserSessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Dispose a remote provider-authoring browser
+         * @description Tears down an agent-owned Popcorn browser immediately. Idempotent for a session that was already disposed. The caller must still be an active editor of the owning organization.
+         */
+        delete: operations["DisposeAgentBrowserSession"];
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}": {
         parameters: {
             query?: never;
@@ -2207,7 +2247,7 @@ export interface paths {
         };
         /**
          * List an organization's verification sessions
-         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
+         * @description Returns verification sessions created under the organization, newest first. Optionally filter by `sessionId` (prefix match, at least 5 characters), `providerId`, `status`, `resolvedVersion`, `claimantClientId`, and a `createdAfter`/`createdBefore` time range. Caller must be an active member of the org. Opaque cursor pagination.
          *
          *     Note: `status` filters on the stored column. A session that has passed `expiresAt` but has not yet been swept is reported as `expired` in its body while still stored as `pending`, so `status=expired` may not match such sessions until the sweep runs.
          */
@@ -2623,6 +2663,23 @@ export interface components {
          * @description Verification session id (UUID v7 when supported). Also echoed in the result payload as `reclaimSessionId`.
          */
         SessionID: string;
+        /**
+         * Format: uuid
+         * @description Builder-managed remote browser session id.
+         */
+        AgentBrowserSessionID: string;
+        /** @description A short-lived Popcorn browser allocated for provider authoring. Treat `cdpUrl` and `apiUrl` as credentials: the local agent consumes them and must not display, persist, or share them. `liveViewUrl` is intentionally shareable with the volunteer operating the browser. */
+        AgentBrowserSession: {
+            id: components["schemas"]["AgentBrowserSessionID"];
+            orgId: components["schemas"]["OrgID"];
+            /** Format: uri */
+            liveViewUrl: string;
+            /** Format: uri */
+            readonly cdpUrl: string;
+            /** Format: uri */
+            readonly apiUrl?: string;
+            expiresAt: components["schemas"]["Timestamp"];
+        };
         /**
          * Format: uuid
          * @description Stable id for a callback subscription.
@@ -3805,9 +3862,11 @@ export interface components {
             };
             orgId?: components["schemas"]["OrgID"];
         };
-        /** @description Body for `POST /site/{domain}/ai-provider`. Optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). */
+        /** @description Body for `POST /site/{domain}/ai-provider`. `orgId` is optional: which owned organization the AI provider is authored under (defaults to the member's personal organization, or their first owned org). `url` is required only when `domain` has no existing catalog data — the build page's confirm-URL step supplies it, and the draft is scaffolded under whatever domain that URL actually resolves to (which may differ from `domain`), not the unconfirmed search text the build page was first opened with. */
         SiteAiProviderBody: {
             orgId?: components["schemas"]["OrgID"];
+            /** @description Confirmed website URL, for a domain with no existing catalog data. Verified reachable before anything is created. */
+            url?: string;
         };
         /** @description Body for `PUT /users/{userId}/org-limit`. An integer sets the limit; `null` (JSON) or an empty string (form) restores the default (3). */
         AdminSetUserOrgLimitBody: {
@@ -3815,7 +3874,7 @@ export interface components {
         };
         /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
         SiteTryAiBody: {
-            /** @description The edited extraction prompt for the AI provider. */
+            /** @description The edited extraction prompt for the AI provider. Gated by the prompt guard before it is stored (see docs/prompt-guard.md); the length here documents the same ceiling the guard enforces. */
             prompt?: string;
         };
         /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it, one example provider slug, and one `references` entry per provider describing how that provider proves it (what the site page's source picker offers as selectable options). */
@@ -4160,7 +4219,7 @@ export interface components {
         CreateProviderVersionRequest: {
             /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
@@ -4187,7 +4246,7 @@ export interface components {
             /** Format: uri */
             initialUrl?: string;
             verificationType?: components["schemas"]["VerificationType"];
-            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            /** @description Extraction prompt, used when `verificationType` is `llm`. Gated by the prompt guard before it is stored (docs/prompt-guard.md). */
             prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
@@ -5431,9 +5490,19 @@ export interface operations {
     AdminSessions: {
         parameters: {
             query?: {
-                /** @description Session id, provider id (UUIDs), or consumer ETH address (`0x…`) — matched exactly. */
-                q?: string;
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
+                /** @description Only return the session matching this claimant client id. */
+                claimantClientId?: string;
+                /** @description Only return sessions belonging to this exact organization id. */
+                orgId?: string;
                 status?: components["schemas"]["VerificationStatus"];
+                /** @description Only return sessions created at or after this time (inclusive). */
+                createdAfter?: string;
+                /** @description Only return sessions created at or before this time (inclusive). */
+                createdBefore?: string;
             };
             header?: never;
             path?: never;
@@ -6677,6 +6746,57 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Remote authoring browser created. */
+            201: {
+                headers: {
+                    "Cache-Control"?: string;
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AgentBrowserSession"];
+                };
+            };
+            402: components["responses"]["ProblemResponse"];
+            403: components["responses"]["ForbiddenResponse"];
+            429: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    DisposeAgentBrowserSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+                browserSessionId: components["schemas"]["AgentBrowserSessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Browser disposed or already absent. */
+            204: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            404: components["responses"]["ProblemResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetOrg: {
         parameters: {
             query?: {
@@ -8298,8 +8418,10 @@ export interface operations {
     ListOrgVerificationSessions: {
         parameters: {
             query?: {
-                /** @description Only return sessions for this provider. */
-                providerId?: components["schemas"]["ProviderID"];
+                /** @description Only return sessions whose id starts with this value (matched at least 5 characters). */
+                sessionId?: string;
+                /** @description Only return sessions for this exact provider id. */
+                providerId?: string;
                 /** @description Only return sessions in this status. */
                 status?: components["schemas"]["VerificationStatus"];
                 /** @description Only return sessions resolved to this exact provider version. */