@reclaimprotocol/client 0.1.2 → 0.1.3

package/README.md

@@ -74,7 +74,7 @@ await reclaim.keypair.set(orgId, {
 
 ```ts
 const session = await reclaim.sessions.create({
-  providerId: 'prov_…',
+  providers: [{ providerId: 'prov_…' }],   // one or more, proved in order → one combined result
   context: { userId: 'abc' },
 })
 console.log('open this:', session.verificationUrl)   // hand to the end-user
@@ -87,8 +87,9 @@ curl -X POST "$BUILDER_URL/verifications/sessions" \
   -H "Authorization: Bearer $RECLAIM_ORG_SECRET" \
   -H 'Content-Type: application/json' \
   -d '{
-        "providerId": "prov_…",
-        "context": { "userId": "abc" }
+        "providers": [{ "providerId": "prov_…" }],
+        "context": { "userId": "abc" },
+        "verificationClientUrl": "https://your.app/v/{sessionId}"
       }'
 # → 201 { "id": "…", "verificationUrl": "…", "status": "pending", "mode": "…", … }
 ```
@@ -140,7 +141,8 @@ Returns a `Reclaim` with four namespaces (`sessions`, `callbacks`, `keypair`, `r
 ### `reclaim.sessions`
 
 ```ts
-reclaim.sessions.create({ providerId, version?, context, verificationClientUrl? })
+reclaim.sessions.create({ providers, context, verificationClientUrl? })
+  // providers: { providerId, version? }[] — proved in order, one combined result; all required.
   // → VerificationSession (has `id`, `verificationUrl`, `status`, `mode`, …)
   // verificationClientUrl defaults to the Builder's own /v/{sessionId} page.
 reclaim.sessions.get(sessionId)         // → VerificationSession
@@ -248,7 +250,7 @@ const client = new ReclaimClient({ baseUrl, token, fetch, headers })
 const { data, response } = await client.call('GetVerificationSession', { params: { sessionId } })
 ```
 
-Errors are thrown as `ProblemError` (RFC 9457). `throwProblemError`, `DEFAULT_BASE_URL`, `USER_AGENT`, encoding helpers (`b64url`, `hexToBytes`, …), and the generated `components` / `operations` types are also exported.
+Errors are thrown as `ProblemError` (RFC 9457). `throwProblemError`, `DEFAULT_BASE_URL`, `USER_AGENT`, and encoding helpers (`b64url`, `base64urlToBytes`, `bytesToHex`, `hexToBytes`) are also exported. The `call` method is fully typed against the generated OpenAPI operations.
 
 ## Security notes
 

package/lib/routes.gen.d.ts

@@ -343,6 +343,10 @@ export declare const ROUTES: {
         readonly method: "post";
         readonly path: "/providers/setup";
     };
+    readonly SiteAiProvider: {
+        readonly method: "post";
+        readonly path: "/site/{domain}/ai-provider";
+    };
     readonly SiteBuild: {
         readonly method: "get";
         readonly path: "/site/{domain}/build";
@@ -371,6 +375,10 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/site/{domain}/panel";
     };
+    readonly SiteTryAi: {
+        readonly method: "post";
+        readonly path: "/site/{domain}/try-ai";
+    };
     readonly SubmitProviderVersionForReview: {
         readonly method: "post";
         readonly path: "/providers/{providerId}/versions/{version}/review";

package/lib/routes.gen.js

@@ -89,6 +89,7 @@ export const ROUTES = {
     "SearchOrgMembers": { "method": "get", "path": "/orgs/{orgId}/members" },
     "SetOrgKeypair": { "method": "put", "path": "/orgs/{orgId}/keypair" },
     "SetupProviderCreate": { "method": "post", "path": "/providers/setup" },
+    "SiteAiProvider": { "method": "post", "path": "/site/{domain}/ai-provider" },
     "SiteBuild": { "method": "get", "path": "/site/{domain}/build" },
     "SiteBuildAlternative": { "method": "get", "path": "/site/{domain}/alternative" },
     "SiteBuildRepair": { "method": "get", "path": "/site/{domain}/repair" },
@@ -96,6 +97,7 @@ export const ROUTES = {
     "Sitemap": { "method": "get", "path": "/sitemap.xml" },
     "SitePage": { "method": "get", "path": "/site/{domain}" },
     "SitePanel": { "method": "get", "path": "/site/{domain}/panel" },
+    "SiteTryAi": { "method": "post", "path": "/site/{domain}/try-ai" },
     "SubmitProviderVersionForReview": { "method": "post", "path": "/providers/{providerId}/versions/{version}/review" },
     "SubmitVerificationResult": { "method": "post", "path": "/verifications/sessions/{sessionId}/result" },
     "TransferProvider": { "method": "post", "path": "/providers/{providerId}/transfer" },

package/lib/types/openapi.gen.d.ts

@@ -51,17 +51,17 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Search verifications
-         * @description Search published Reclaim verifications by domain or data point. A verification is the recipe an end-user follows to prove something about themselves (e.g. "I have N followers on Twitter"). Returns a list of matches. Call this BEFORE `create_provider` — most popular domains already have a public verification you can reuse.
-         *     Catalog page listing all verifications. Returns a paginated list of verifications the caller can see. Public verifications are visible to everyone; private verifications are only visible to org members.
+         * Search providers
+         * @description Search published Reclaim providers by domain or data point. A provider is the recipe an end-user follows to prove something about themselves (e.g. "I have N followers on Twitter"). Returns a list of matches. Call this BEFORE `create_provider` — most popular domains already have a public provider you can reuse.
+         *     Catalog page listing all providers. Returns a paginated list of providers the caller can see. Public providers are visible to everyone; private providers are only visible to org members.
          */
         get: operations["Providers"];
         put?: never;
         /**
-         * Create a verification
-         * @description Create a new Reclaim verification. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.
-         *     Creates a new verification in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go to the go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.
-         *     The server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the verification is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (structured verification, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.
+         * Create a provider
+         * @description Create a new Reclaim provider. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.
+         *     Creates a new provider in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go to the go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.
+         *     The server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the provider is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (a `structured` verificationType, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.
          */
         post: operations["CreateProvider"];
         delete?: never;
@@ -80,7 +80,7 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Suggest verification fields from a domain/URL scrape
+         * Suggest provider fields from a domain/URL scrape
          * @description Pre-flight for `POST /providers`. Accepts a URL or bare
          *     domain, scrapes the page head with a short timeout, and
          *     returns suggested values (`title`, `slug`, `iconUrl`, brand
@@ -89,7 +89,7 @@ export interface paths {
          *
          *     - HTML / HTMX callers receive the step-2 form HTML
          *       pre-filled with the suggestions (swapped into the
-         *       create-verification dialog body).
+         *       create-provider dialog body).
          *     - JSON / SDK / agent callers receive the same suggestions
          *       as a JSON document so they can build their own UI or
          *       submit the create request directly.
@@ -113,7 +113,7 @@ export interface paths {
         };
         /**
          * Suggest websites for the Discover flow
-         * @description Website-first autocomplete that backs the Discover home page (`/`). Returns the distinct websites (one entry per domain) that have at least one verification the caller can see, ranked by relevance to `q`. Each entry carries the aggregated list of data points provable for that website. With no `q`, returns popular websites (most verifications first).
+         * @description Website-first autocomplete that backs the Discover home page (`/`). Returns the distinct websites (one entry per domain) that have at least one provider the caller can see, ranked by relevance to `q`. Each entry carries the aggregated list of data points provable for that website. With no `q`, returns popular websites (most providers first).
          *
          *     HTML / HTMX callers receive a fragment list (swapped into the search dropdown); JSON / SDK callers receive the suggestions document.
          */
@@ -135,7 +135,7 @@ export interface paths {
         };
         /**
          * Website landing & data-point selection page
-         * @description SEO landing page for a website, and the data-point selection step of the Discover flow. Lists every data point Reclaim can currently prove for `{domain}` (aggregated across all verifications the caller can see) so a visitor can pick what to verify and continue. Organic search traffic ("verify github username") and the in-app `/` → website-select flow converge on this single canonical URL.
+         * @description SEO landing page for a website, and the data-point selection step of the Discover flow. Lists every data point Reclaim can currently prove for `{domain}` (aggregated across all providers the caller can see) so a visitor can pick what to verify and continue. Organic search traffic ("verify github username") and the in-app `/` → website-select flow converge on this single canonical URL.
          *
          *     HTML callers receive the full page; when `q` is present and the request is an HTMX request, only the filtered data-point list fragment is returned. JSON / SDK callers receive the website's data points as a document.
          */
@@ -177,7 +177,7 @@ export interface paths {
         };
         /**
          * Build page — providers, try, and integration guide for a selection
-         * @description The step after data-point selection on `/site/{domain}`. Given the selected data points (plus optional pinned sources, provided values, and a resolution `mode`), shows which existing verification providers cover the selection, a member-only "Try verification" action, and a ready-to-paste integration guide. The whole selection travels in the query string so the page is server-rendered and back-navigable.
+         * @description The step after data-point selection on `/site/{domain}`. Given the selected data points (plus optional pinned sources, provided values, and a resolution `mode`), shows which existing providers cover the selection, a member-only "Try verification" action, and a ready-to-paste integration guide. The whole selection travels in the query string so the page is server-rendered and back-navigable.
          */
         get: operations["SiteBuild"];
         put?: never;
@@ -248,6 +248,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/site/{domain}/ai-provider": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Author an AI (llm) provider and go to its build screen
+         * @description Creates an `llm`-verification provider under the signed-in member's personal org, seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
+         */
+        post: operations["SiteAiProvider"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/site/{domain}/try-ai": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mint a SANDBOX test session for an AI (llm) provider
+         * @description Mints a sandbox verification session for the given AI provider's draft and opens it in the verification client. An edited `prompt` in the body is saved as a new draft build first (the "edit prompt / try again" loop). Requires a signed-in member.
+         */
+        post: operations["SiteTryAi"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/discover/teach": {
         parameters: {
             query?: never;
@@ -257,7 +297,7 @@ export interface paths {
         };
         /**
          * “Teach our agent” instructions for a missing website / data point
-         * @description Returns the "Teach our agent" panel shown when a website or data point a user wants does not exist yet: steps to install the Reclaim MCP server plus a ready-to-copy prompt, templated with the requested `domain` and (optionally) `dataPoint`, that instructs an agent to author the missing verification. HTML / HTMX only (a dialog fragment).
+         * @description Returns the "Teach our agent" panel shown when a website or data point a user wants does not exist yet: steps to install the Reclaim MCP server plus a ready-to-copy prompt, templated with the requested `domain` and (optionally) `dataPoint`, that instructs an agent to author the missing provider. HTML / HTMX only (a dialog fragment).
          */
         get: operations["DiscoverTeachAgent"];
         put?: never;
@@ -276,7 +316,7 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Resolve a website + data points to verification providers
+         * Resolve a website + data points to providers
          * @description Provider resolution: given a website and the data points the user wants their users to prove, return the smallest set of existing providers whose data points COVER the selection (greedy combine), the `requiredContext` inputs the consumer must supply, and any `uncovered` points no provider exposes yet (`needsCreation` is true then — author a provider with the agent tools). When the chosen providers can be fused into one (same start page, no clashing page scripts) `merge.mergeable` is true.
          *
          *     Agent flow: pick a website (`GET /discover/data-points` lists what's verifiable there), confirm the data points with the user, call this to get the `providers` + `requiredContext`, collect those context values from the user, then `POST /verifications/sessions` with `providers` (pass every id) and `context` to mint a verification.
@@ -318,8 +358,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get the verification's OG preview image
-         * @description Returns the 1200x630 PNG used in `<meta property="og:image">` for this verification (`Provider.previewImageUrl` points at this route). Rendered server-side on first read, then cached by the standard HTTP cache. The URL is keyed off the verification's preview ETag so it changes whenever the image-affecting fields change (title, iconUrl, effective primaryDataPoint — see `Provider.previewImageUrl`).
+         * Get the provider's OG preview image
+         * @description Returns the 1200x630 PNG used in `<meta property="og:image">` for this provider (`Provider.previewImageUrl` points at this route). Rendered server-side on first read, then cached by the standard HTTP cache. The URL is keyed off the provider's preview ETag so it changes whenever the image-affecting fields change (title, iconUrl, effective primaryDataPoint — see `Provider.previewImageUrl`).
          */
         get: operations["ProviderPreviewImage"];
         put?: never;
@@ -378,8 +418,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * All verifications (admin-only)
-         * @description Admin only. Lists all verifications across all organizations. Supports filtering by visibility, status, and free-text search on title/domain/slug.
+         * All providers (admin-only)
+         * @description Admin only. Lists all providers across all organizations. Supports filtering by visibility, status, and free-text search on title/domain/slug.
          */
         get: operations["AdminProviders"];
         put?: never;
@@ -514,8 +554,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Transfer a verification to a different workspace
-         * @description Admin-only. Moves the verification's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.
+         * Transfer a provider to a different workspace
+         * @description Admin-only. Moves the provider's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.
          */
         post: operations["TransferProvider"];
         delete?: never;
@@ -1178,16 +1218,16 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get a verification
-         * @description Fetch a single Reclaim verification by id. Returns every field needed
+         * Get a provider
+         * @description Fetch a single Reclaim provider by id. Returns every field needed
          *     to integrate it into a flow: domain, the live version (initialUrl + requests),
          *     and the data points it can prove. Use `providers` first if you only
          *     have a query string.
          *
-         *     Returns the verification record.
+         *     Returns the provider record.
          *
          *     **Canonical URL.** For SEO and stable sharing, the canonical
-         *     HTML URL for a verification is `/providers/{providerId}/{slug}`
+         *     HTML URL for a provider is `/providers/{providerId}/{slug}`
          *     (see `GetProviderBySlug`). HTML callers (`Accept: text/html`)
          *     that hit this route — which omits the slug — receive a `301`
          *     redirect to the slugged URL. JSON callers
@@ -1198,16 +1238,16 @@ export interface paths {
         put?: never;
         post?: never;
         /**
-         * Delete a verification
-         * @description Owner of the verification's organization only. Soft-archives the verification (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.
+         * Delete a provider
+         * @description Owner of the provider's organization only. Soft-archives the provider (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.
          */
         delete: operations["DeleteProvider"];
         options?: never;
         head?: never;
         /**
-         * Update a verification
-         * @description Update a Reclaim verification's metadata. Partial PATCH — pass only fields you want to change. The caller must be an active member of the owning organization. To change the verification's recipe (initialUrl, requests, …) cut a new version via the dashboard. Use `seo` to control how the verification appears in search results and social shares; omit a subfield to keep the server default.
-         *     Caller must be a member of the verification's owning organization. `id`, `orgId`, and `slug` are immutable. Supports optimistic concurrency via `If-Match`.
+         * Update a provider
+         * @description Update a Reclaim provider's metadata. Partial PATCH — pass only fields you want to change. The caller must be an active member of the owning organization. To change the provider's recipe (initialUrl, requests, …) cut a new version via the dashboard. Use `seo` to control how the provider appears in search results and social shares; omit a subfield to keep the server default.
+         *     Caller must be a member of the provider's owning organization. `id`, `orgId`, and `slug` are immutable. Supports optimistic concurrency via `If-Match`.
          */
         patch: operations["UpdateProvider"];
         trace?: never;
@@ -1220,14 +1260,14 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get a verification (canonical slugged URL)
-         * @description Canonical HTML URL for a verification. The slug in the path is
+         * Get a provider (canonical slugged URL)
+         * @description Canonical HTML URL for a provider. The slug in the path is
          *     primarily an SEO and link-readability affordance — the
-         *     verification is resolved by `providerId`.
+         *     provider is resolved by `providerId`.
          *
-         *     - If `slug` matches the verification's current slug, returns the
+         *     - If `slug` matches the provider's current slug, returns the
          *       resource (HTML or JSON per `Accept`).
-         *     - If `slug` does not match (e.g. the verification was renamed since
+         *     - If `slug` does not match (e.g. the provider was renamed since
          *       the URL was minted), HTML callers receive a `301` redirect
          *       to this same route with the *current* slug. JSON callers
          *       receive the resource directly with `200` regardless of slug
@@ -1254,22 +1294,22 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List a verification's versions
-         * @description Lists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.
+         * List a provider's versions
+         * @description Lists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the provider's owning organization.
          */
         get: operations["ListProviderVersions"];
         put?: never;
         /**
-         * Create a new verification version
-         * @description Creates a new version of the verification. The starting branch
-         *     depends on the verification's `visibility` and the caller's role:
+         * Create a new provider version
+         * @description Creates a new version of the provider. The starting branch
+         *     depends on the provider's `visibility` and the caller's role:
          *
-         *     - `PRIVATE` verification (any caller): the live channel (no review).
+         *     - `PRIVATE` provider (any caller): the live channel (no review).
          *
-         *     - `PUBLIC` verification, admin caller (Reclaim staff): the live channel
+         *     - `PUBLIC` provider, admin caller (Reclaim staff): the live channel
          *       (no review).
          *
-         *     - `PUBLIC` verification, non-admin caller: `draft` (or `ai` if
+         *     - `PUBLIC` provider, non-admin caller: `draft` (or `ai` if
          *       authored by the AI assistant). Must pass review (see
          *       `POST /providers/{id}/versions/{version}/review`) before
          *       reaching the live channel.
@@ -1288,20 +1328,20 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Get a specific verification version */
+        /** Get a specific provider version */
         get: operations["GetProviderVersion"];
         put?: never;
         post?: never;
         /**
-         * Delete a verification version
-         * @description Soft-archives a version on the `draft`, `ai`, or `rejected` branch — sets `status` to `ARCHIVED` so history is preserved. Trunk (live) and `in_review` versions cannot be archived this way; archive the parent verification instead. Supports optimistic concurrency via `If-Match`.
+         * Delete a provider version
+         * @description Soft-archives a version on the `draft`, `ai`, or `rejected` branch — sets `status` to `ARCHIVED` so history is preserved. Trunk (live) and `in_review` versions cannot be archived this way; archive the parent provider instead. Supports optimistic concurrency via `If-Match`.
          */
         delete: operations["DeleteProviderVersion"];
         options?: never;
         head?: never;
         /**
-         * Update a verification version
-         * @description Mutable only while the version is on the `draft` or `rejected` branch. Versions on `in_review` or the live channel reject all writes here. Caller must be a member of the verification's owning organization. Supports optimistic concurrency via `If-Match`.
+         * Update a provider version
+         * @description Mutable only while the version is on the `draft` or `rejected` branch. Versions on `in_review` or the live channel reject all writes here. Caller must be a member of the provider's owning organization. Supports optimistic concurrency via `If-Match`.
          */
         patch: operations["UpdateProviderVersion"];
         trace?: never;
@@ -1316,8 +1356,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Submit a verification version for review
-         * @description Submits a verification version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the verification's owning org. Meaningful only on `PUBLIC` verifications — on `PRIVATE` verifications new versions go to the live channel directly and never need review.
+         * Submit a provider version for review
+         * @description Submits a provider version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the provider's owning org. Meaningful only on `PUBLIC` providers — on `PRIVATE` providers new versions go to the live channel directly and never need review.
          */
         post: operations["SubmitProviderVersionForReview"];
         delete?: never;
@@ -1336,8 +1376,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Record a decision on a verification version review
-         * @description Admin only (Reclaim staff). Approves or rejects a verification version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.
+         * Record a decision on a provider version review
+         * @description Admin only (Reclaim staff). Approves or rejects a provider version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.
          *     Until RBAC is designed, "admin" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.
          */
         post: operations["DecideProviderVersionReview"];
@@ -1358,7 +1398,7 @@ export interface paths {
         put?: never;
         /**
          * Publish a draft version directly (PRIVATE providers only)
-         * @description Publishes a verification version on the `draft` branch directly to the live channel (trunk). Only allowed for PRIVATE providers — PUBLIC providers must use the review flow (`POST .../review` → admin decision). On success the version's branch transitions from `draft` to `null` (trunk/live).
+         * @description Publishes a provider version on the `draft` branch directly to the live channel (trunk). Only allowed for PRIVATE providers — PUBLIC providers must use the review flow (`POST .../review` → admin decision). On success the version's branch transitions from `draft` to `null` (trunk/live).
          */
         post: operations["PublishProviderVersion"];
         delete?: never;
@@ -2490,7 +2530,7 @@ export interface components {
             primaryDataPoint?: string;
             dataPoints: string[];
         };
-        /** @description One website (distinct domain) in the Discover search results. Aggregates, across every verification the caller can see on that domain, the brand display fields and the union of provable data points. */
+        /** @description One website (distinct domain) in the Discover search results. Aggregates, across every provider the caller can see on that domain, the brand display fields and the union of provable data points. */
         WebsiteSuggestion: {
             /**
              * Format: hostname
@@ -2506,7 +2546,7 @@ export interface components {
             iconUrl?: string;
             /** @description Deduplicated names of every data point provable for this website. */
             dataPoints: string[];
-            /** @description Number of verifications backing this website that the caller can see. */
+            /** @description Number of providers backing this website that the caller can see. */
             providerCount: number;
         };
         /** @description Body for `POST /site/{domain}/try`. Only the verification `context` (values for the resolved providers' `requiredContext` inputs). The selection (dataPoints / mode / pins) travels in the query string. */
@@ -2516,15 +2556,20 @@ export interface components {
                 [key: string]: string;
             };
         };
-        /** @description A single data point selectable on the `/site/{domain}` page, with how many visible verifications expose it and one example verification slug. */
+        /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
+        SiteTryAiBody: {
+            /** @description The edited extraction prompt for the AI provider. */
+            prompt?: string;
+        };
+        /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it and one example provider slug. */
         DataPointItem: {
             /** @description Data-point name (e.g. `username`, `followers_count`). */
             name: string;
             /** @description Human description of the data point, taken from the response match that declares it. Absent when no match supplies one. */
             description?: string;
-            /** @description Number of visible verifications on the domain that expose this data point. */
+            /** @description Number of visible providers on the domain that expose this data point. */
             providerCount: number;
-            /** @description Slug of one verification that exposes this data point. */
+            /** @description Slug of one provider that exposes this data point. */
             exampleProviderSlug?: string;
         };
         InterceptorOptions: {
@@ -2697,9 +2742,9 @@ export interface components {
             /** @default [] */
             allowedJsRequests: components["schemas"]["RequestSelectionTemplate"][];
             /** @default structured */
-            readonly verificationType: components["schemas"]["VerificationType"];
+            verificationType: components["schemas"]["VerificationType"];
             /** @description The prompt used for LLM verification (only when verificationType is "llm"). */
-            readonly prompt?: string;
+            prompt?: string;
             webSettings: components["schemas"]["ProviderWebSettings"];
             requiredContext?: components["schemas"]["ProviderRequiredContext"];
         };
@@ -2791,7 +2836,7 @@ export interface components {
         };
         /** @description `title` is optional — when omitted the dashboard renders `seoSuggestions.title` (server-derived from the scrape result or `derive_brand_name(domain)`). */
         CreateProviderRequest: {
-            /** @description uuid identifier of the organization that will own the verification. */
+            /** @description uuid identifier of the organization that will own the provider. */
             orgId: components["schemas"]["OrgID"];
             /**
              * Format: hostname
@@ -2835,8 +2880,12 @@ export interface components {
             /** @description Author SEO fields. Send `null` for a subfield to clear that override and let `seoSuggestions` win again. */
             seo?: components["schemas"]["ProviderSeo"];
         };
-        /** @description Body for creating a new version of a provider. Every new version starts on the `draft` branch — see `CreateProviderVersion`. The request body never sets `branch` directly; going live is a separate, explicit step (publish for PRIVATE, submit-for-review → approve for PUBLIC). The version's `verificationType` is always `structured` and is not settable here; a `prompt` field is reserved for a future AI authoring flow and is also not accepted on this surface. */
+        /** @description Body for creating a new version of a provider. Every new version starts on the `draft` branch — see `CreateProviderVersion`. The request body never sets `branch` directly; going live is a separate, explicit step (publish for PRIVATE, submit-for-review → approve for PUBLIC). `verificationType` defaults to `structured`; pass `llm` with a `prompt` to author an AI-verification provider. */
         CreateProviderVersionRequest: {
+            /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
+            verificationType?: components["schemas"]["VerificationType"];
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
              * @default {
@@ -2857,10 +2906,13 @@ export interface components {
             /** @description Free-form change note recorded on `createMetadata`. */
             notes?: string;
         };
-        /** @description Partial update of a provider version. Mutable only while the version is on the `draft` or `rejected` branch; versions on `in_review` or the live channel reject all writes here. The semver does not change on update — `build_number` increments instead, giving callers a monotonic revision counter without touching the (major, minor, patch) PK. `verificationType` / `prompt` are not accepted; see `ProviderVersion` for why. */
+        /** @description Partial update of a provider version. Mutable only while the version is on the `draft` or `rejected` branch; versions on `in_review` or the live channel reject all writes here. The semver does not change on update — `build_number` increments instead, giving callers a monotonic revision counter without touching the (major, minor, patch) PK. `verificationType` and `prompt` may be updated; omit either to carry the prior build's value forward. */
         UpdateProviderVersionRequest: {
             /** Format: uri */
             initialUrl?: string;
+            verificationType?: components["schemas"]["VerificationType"];
+            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
             webSettings?: components["schemas"]["ProviderWebSettings"];
@@ -3534,9 +3586,13 @@ export interface operations {
     };
     SiteBuild: {
         parameters: {
-            query: {
-                /** @description Selected data-point names. Repeat to pass several. */
-                dataPoints: string[];
+            query?: {
+                /** @description Selected data-point names. Repeat to pass several. Optional only so the "Build it with AI" entry can open the build page with just a missing `dataPoint`; the normal flow always passes ≥1. */
+                dataPoints?: string[];
+                /** @description When set, auto-opens the "Try with AI" dialog on load (the "Build it with AI" entry from the explore page). */
+                ai?: string;
+                /** @description A specific missing data point to seed the AI prompt with. */
+                dataPoint?: string;
                 /** @description `combine` (default) minimizes to the fewest providers (set-cover); `ai` is a forward-compat alias that currently resolves like combine. */
                 mode?: "combine" | "ai";
                 /** @description Source pins: `pins[<dataPoint>]=id,id`. Maps each data-point name to a comma-joined list of preferred providerIds. Omit for Auto. */
@@ -3705,6 +3761,84 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    SiteAiProvider: {
+        parameters: {
+            query?: {
+                /** @description A specific missing data point to name in the prompt. */
+                dataPoint?: string;
+                /** @description A failed sandbox session whose error seeds the prompt. */
+                sessionId?: components["schemas"]["SessionID"];
+                /** @description A provider to version (when owned + editable) instead of creating one. */
+                fromProviderId?: components["schemas"]["ProviderID"];
+                dataPoints?: string[];
+                mode?: "combine" | "ai";
+                provided?: string[];
+                pins?: {
+                    [key: string]: string;
+                };
+                exclude?: components["schemas"]["ProviderID"][];
+            };
+            header?: never;
+            path: {
+                domain: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The AI dialog body (editable prompt + Try with AI). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": components["schemas"]["HtmlContent"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    SiteTryAi: {
+        parameters: {
+            query: {
+                /** @description The AI provider to try. */
+                providerId: components["schemas"]["ProviderID"];
+            };
+            header?: never;
+            path: {
+                domain: string;
+            };
+            cookie?: never;
+        };
+        /** @description An optional edited extraction prompt to save before trying. */
+        requestBody?: {
+            content: {
+                "application/x-www-form-urlencoded": components["schemas"]["SiteTryAiBody"];
+                "application/json": components["schemas"]["SiteTryAiBody"];
+            };
+        };
+        responses: {
+            /** @description Session created. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VerificationSession"];
+                };
+            };
+            /** @description Sandbox verification quota exceeded. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     DiscoverTeachAgent: {
         parameters: {
             query?: {
@@ -5221,7 +5355,7 @@ export interface operations {
                 };
             };
             301: components["responses"]["CanonicalRedirectResponse"];
-            /** @description Verification not found, or it is `PRIVATE` and the caller is not authorized to see it. */
+            /** @description Provider not found, or it is `PRIVATE` and the caller is not authorized to see it. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -5257,7 +5391,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Precondition Failed. The supplied `If-Match` does not match the verification's current `ETag` — re-fetch and retry. */
+            /** @description Precondition Failed. The supplied `If-Match` does not match the provider's current `ETag` — re-fetch and retry. */
             412: {
                 headers: {
                     [name: string]: unknown;
@@ -5302,7 +5436,7 @@ export interface operations {
                 };
             };
             403: components["responses"]["ForbiddenResponse"];
-            /** @description Precondition Failed. The supplied `If-Match` does not match the verification's current `ETag` — re-fetch and retry. */
+            /** @description Precondition Failed. The supplied `If-Match` does not match the provider's current `ETag` — re-fetch and retry. */
             412: {
                 headers: {
                     [name: string]: unknown;
@@ -5318,7 +5452,7 @@ export interface operations {
             header?: never;
             path: {
                 providerId: components["schemas"]["ProviderID"];
-                /** @description Verification slug. URL-safe identifier; lowercase letters, digits, and hyphens only. If stale, HTML callers get a 301 to the current slug. */
+                /** @description Provider slug. URL-safe identifier; lowercase letters, digits, and hyphens only. If stale, HTML callers get a 301 to the current slug. */
                 slug: string;
             };
             cookie?: never;
@@ -5337,7 +5471,7 @@ export interface operations {
                 };
             };
             301: components["responses"]["CanonicalRedirectResponse"];
-            /** @description Verification not found, or it is `PRIVATE` and the caller is not authorized to see it. */
+            /** @description Provider not found, or it is `PRIVATE` and the caller is not authorized to see it. */
             404: {
                 headers: {
                     [name: string]: unknown;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@reclaimprotocol/client",
 	"title": "Reclaim Client",
-	"version": "0.1.2",
+	"version": "0.1.3",
 	"description": "Typed SDK client for @reclaimprotocol/app. Used by @reclaimprotocol/agent and any other consumer that needs programmatic API access without the full agent.",
 	"type": "module",
 	"sideEffects": false,

package/src/routes.gen.ts

@@ -90,6 +90,7 @@ export const ROUTES = {
 	"SearchOrgMembers": {"method":"get","path":"/orgs/{orgId}/members"},
 	"SetOrgKeypair": {"method":"put","path":"/orgs/{orgId}/keypair"},
 	"SetupProviderCreate": {"method":"post","path":"/providers/setup"},
+	"SiteAiProvider": {"method":"post","path":"/site/{domain}/ai-provider"},
 	"SiteBuild": {"method":"get","path":"/site/{domain}/build"},
 	"SiteBuildAlternative": {"method":"get","path":"/site/{domain}/alternative"},
 	"SiteBuildRepair": {"method":"get","path":"/site/{domain}/repair"},
@@ -97,6 +98,7 @@ export const ROUTES = {
 	"Sitemap": {"method":"get","path":"/sitemap.xml"},
 	"SitePage": {"method":"get","path":"/site/{domain}"},
 	"SitePanel": {"method":"get","path":"/site/{domain}/panel"},
+	"SiteTryAi": {"method":"post","path":"/site/{domain}/try-ai"},
 	"SubmitProviderVersionForReview": {"method":"post","path":"/providers/{providerId}/versions/{version}/review"},
 	"SubmitVerificationResult": {"method":"post","path":"/verifications/sessions/{sessionId}/result"},
 	"TransferProvider": {"method":"post","path":"/providers/{providerId}/transfer"},

package/src/types/openapi.gen.ts

@@ -52,17 +52,17 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Search verifications
-         * @description Search published Reclaim verifications by domain or data point. A verification is the recipe an end-user follows to prove something about themselves (e.g. "I have N followers on Twitter"). Returns a list of matches. Call this BEFORE `create_provider` — most popular domains already have a public verification you can reuse.
-         *     Catalog page listing all verifications. Returns a paginated list of verifications the caller can see. Public verifications are visible to everyone; private verifications are only visible to org members.
+         * Search providers
+         * @description Search published Reclaim providers by domain or data point. A provider is the recipe an end-user follows to prove something about themselves (e.g. "I have N followers on Twitter"). Returns a list of matches. Call this BEFORE `create_provider` — most popular domains already have a public provider you can reuse.
+         *     Catalog page listing all providers. Returns a paginated list of providers the caller can see. Public providers are visible to everyone; private providers are only visible to org members.
          */
         get: operations["Providers"];
         put?: never;
         /**
-         * Create a verification
-         * @description Create a new Reclaim verification. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.
-         *     Creates a new verification in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go to the go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.
-         *     The server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the verification is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (structured verification, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.
+         * Create a provider
+         * @description Create a new Reclaim provider. Use this only after `providers` returned nothing useful for the domain. The caller must be an active member of the target organization.
+         *     Creates a new provider in the specified organization. `visibility` is coerced to `PRIVATE` at creation regardless of what's sent; the author may toggle to `PUBLIC` later via `PATCH /providers/{id}`. While `PRIVATE`, versions go to the go live freely; once `PUBLIC`, non-admin versions need admin review. See `Provider.visibility`.
+         *     The server also seeds an initial `0.1.0` version on the `draft` branch in the same transaction so the provider is immediately editable. Its `initialUrl` defaults to `https://<domain>`; all other version fields fall back to their schema-declared defaults (a `structured` verificationType, empty requests, empty web settings). `Provider.latestVersion` stays `null` until the draft is promoted to the live channel.
          */
         post: operations["CreateProvider"];
         delete?: never;
@@ -81,7 +81,7 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Suggest verification fields from a domain/URL scrape
+         * Suggest provider fields from a domain/URL scrape
          * @description Pre-flight for `POST /providers`. Accepts a URL or bare
          *     domain, scrapes the page head with a short timeout, and
          *     returns suggested values (`title`, `slug`, `iconUrl`, brand
@@ -90,7 +90,7 @@ export interface paths {
          *
          *     - HTML / HTMX callers receive the step-2 form HTML
          *       pre-filled with the suggestions (swapped into the
-         *       create-verification dialog body).
+         *       create-provider dialog body).
          *     - JSON / SDK / agent callers receive the same suggestions
          *       as a JSON document so they can build their own UI or
          *       submit the create request directly.
@@ -114,7 +114,7 @@ export interface paths {
         };
         /**
          * Suggest websites for the Discover flow
-         * @description Website-first autocomplete that backs the Discover home page (`/`). Returns the distinct websites (one entry per domain) that have at least one verification the caller can see, ranked by relevance to `q`. Each entry carries the aggregated list of data points provable for that website. With no `q`, returns popular websites (most verifications first).
+         * @description Website-first autocomplete that backs the Discover home page (`/`). Returns the distinct websites (one entry per domain) that have at least one provider the caller can see, ranked by relevance to `q`. Each entry carries the aggregated list of data points provable for that website. With no `q`, returns popular websites (most providers first).
          *
          *     HTML / HTMX callers receive a fragment list (swapped into the search dropdown); JSON / SDK callers receive the suggestions document.
          */
@@ -136,7 +136,7 @@ export interface paths {
         };
         /**
          * Website landing & data-point selection page
-         * @description SEO landing page for a website, and the data-point selection step of the Discover flow. Lists every data point Reclaim can currently prove for `{domain}` (aggregated across all verifications the caller can see) so a visitor can pick what to verify and continue. Organic search traffic ("verify github username") and the in-app `/` → website-select flow converge on this single canonical URL.
+         * @description SEO landing page for a website, and the data-point selection step of the Discover flow. Lists every data point Reclaim can currently prove for `{domain}` (aggregated across all providers the caller can see) so a visitor can pick what to verify and continue. Organic search traffic ("verify github username") and the in-app `/` → website-select flow converge on this single canonical URL.
          *
          *     HTML callers receive the full page; when `q` is present and the request is an HTMX request, only the filtered data-point list fragment is returned. JSON / SDK callers receive the website's data points as a document.
          */
@@ -178,7 +178,7 @@ export interface paths {
         };
         /**
          * Build page — providers, try, and integration guide for a selection
-         * @description The step after data-point selection on `/site/{domain}`. Given the selected data points (plus optional pinned sources, provided values, and a resolution `mode`), shows which existing verification providers cover the selection, a member-only "Try verification" action, and a ready-to-paste integration guide. The whole selection travels in the query string so the page is server-rendered and back-navigable.
+         * @description The step after data-point selection on `/site/{domain}`. Given the selected data points (plus optional pinned sources, provided values, and a resolution `mode`), shows which existing providers cover the selection, a member-only "Try verification" action, and a ready-to-paste integration guide. The whole selection travels in the query string so the page is server-rendered and back-navigable.
          */
         get: operations["SiteBuild"];
         put?: never;
@@ -249,6 +249,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/site/{domain}/ai-provider": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Author an AI (llm) provider and go to its build screen
+         * @description Creates an `llm`-verification provider under the signed-in member's personal org, seeded with an extraction prompt for the selected/missing data points (and carrying the working response matches from the resolved structured providers). If `fromProviderId` is an editable draft the viewer owns, it versions THAT instead. Returns the build page's AI dialog body (the editable prompt + "Try with AI"). HTML / HTMX fragment.
+         */
+        post: operations["SiteAiProvider"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/site/{domain}/try-ai": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mint a SANDBOX test session for an AI (llm) provider
+         * @description Mints a sandbox verification session for the given AI provider's draft and opens it in the verification client. An edited `prompt` in the body is saved as a new draft build first (the "edit prompt / try again" loop). Requires a signed-in member.
+         */
+        post: operations["SiteTryAi"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/discover/teach": {
         parameters: {
             query?: never;
@@ -258,7 +298,7 @@ export interface paths {
         };
         /**
          * “Teach our agent” instructions for a missing website / data point
-         * @description Returns the "Teach our agent" panel shown when a website or data point a user wants does not exist yet: steps to install the Reclaim MCP server plus a ready-to-copy prompt, templated with the requested `domain` and (optionally) `dataPoint`, that instructs an agent to author the missing verification. HTML / HTMX only (a dialog fragment).
+         * @description Returns the "Teach our agent" panel shown when a website or data point a user wants does not exist yet: steps to install the Reclaim MCP server plus a ready-to-copy prompt, templated with the requested `domain` and (optionally) `dataPoint`, that instructs an agent to author the missing provider. HTML / HTMX only (a dialog fragment).
          */
         get: operations["DiscoverTeachAgent"];
         put?: never;
@@ -277,7 +317,7 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Resolve a website + data points to verification providers
+         * Resolve a website + data points to providers
          * @description Provider resolution: given a website and the data points the user wants their users to prove, return the smallest set of existing providers whose data points COVER the selection (greedy combine), the `requiredContext` inputs the consumer must supply, and any `uncovered` points no provider exposes yet (`needsCreation` is true then — author a provider with the agent tools). When the chosen providers can be fused into one (same start page, no clashing page scripts) `merge.mergeable` is true.
          *
          *     Agent flow: pick a website (`GET /discover/data-points` lists what's verifiable there), confirm the data points with the user, call this to get the `providers` + `requiredContext`, collect those context values from the user, then `POST /verifications/sessions` with `providers` (pass every id) and `context` to mint a verification.
@@ -319,8 +359,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get the verification's OG preview image
-         * @description Returns the 1200x630 PNG used in `<meta property="og:image">` for this verification (`Provider.previewImageUrl` points at this route). Rendered server-side on first read, then cached by the standard HTTP cache. The URL is keyed off the verification's preview ETag so it changes whenever the image-affecting fields change (title, iconUrl, effective primaryDataPoint — see `Provider.previewImageUrl`).
+         * Get the provider's OG preview image
+         * @description Returns the 1200x630 PNG used in `<meta property="og:image">` for this provider (`Provider.previewImageUrl` points at this route). Rendered server-side on first read, then cached by the standard HTTP cache. The URL is keyed off the provider's preview ETag so it changes whenever the image-affecting fields change (title, iconUrl, effective primaryDataPoint — see `Provider.previewImageUrl`).
          */
         get: operations["ProviderPreviewImage"];
         put?: never;
@@ -379,8 +419,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * All verifications (admin-only)
-         * @description Admin only. Lists all verifications across all organizations. Supports filtering by visibility, status, and free-text search on title/domain/slug.
+         * All providers (admin-only)
+         * @description Admin only. Lists all providers across all organizations. Supports filtering by visibility, status, and free-text search on title/domain/slug.
          */
         get: operations["AdminProviders"];
         put?: never;
@@ -515,8 +555,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Transfer a verification to a different workspace
-         * @description Admin-only. Moves the verification's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.
+         * Transfer a provider to a different workspace
+         * @description Admin-only. Moves the provider's `orgId` to the supplied workspace; preserves slug, versions, members. SQL function `builder.transfer_provider` enforces the admin gate and target existence atomically.
          */
         post: operations["TransferProvider"];
         delete?: never;
@@ -1179,16 +1219,16 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get a verification
-         * @description Fetch a single Reclaim verification by id. Returns every field needed
+         * Get a provider
+         * @description Fetch a single Reclaim provider by id. Returns every field needed
          *     to integrate it into a flow: domain, the live version (initialUrl + requests),
          *     and the data points it can prove. Use `providers` first if you only
          *     have a query string.
          *
-         *     Returns the verification record.
+         *     Returns the provider record.
          *
          *     **Canonical URL.** For SEO and stable sharing, the canonical
-         *     HTML URL for a verification is `/providers/{providerId}/{slug}`
+         *     HTML URL for a provider is `/providers/{providerId}/{slug}`
          *     (see `GetProviderBySlug`). HTML callers (`Accept: text/html`)
          *     that hit this route — which omits the slug — receive a `301`
          *     redirect to the slugged URL. JSON callers
@@ -1199,16 +1239,16 @@ export interface paths {
         put?: never;
         post?: never;
         /**
-         * Delete a verification
-         * @description Owner of the verification's organization only. Soft-archives the verification (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.
+         * Delete a provider
+         * @description Owner of the provider's organization only. Soft-archives the provider (sets `status` to `ARCHIVED`) so historical references remain resolvable. Supports optimistic concurrency via `If-Match`.
          */
         delete: operations["DeleteProvider"];
         options?: never;
         head?: never;
         /**
-         * Update a verification
-         * @description Update a Reclaim verification's metadata. Partial PATCH — pass only fields you want to change. The caller must be an active member of the owning organization. To change the verification's recipe (initialUrl, requests, …) cut a new version via the dashboard. Use `seo` to control how the verification appears in search results and social shares; omit a subfield to keep the server default.
-         *     Caller must be a member of the verification's owning organization. `id`, `orgId`, and `slug` are immutable. Supports optimistic concurrency via `If-Match`.
+         * Update a provider
+         * @description Update a Reclaim provider's metadata. Partial PATCH — pass only fields you want to change. The caller must be an active member of the owning organization. To change the provider's recipe (initialUrl, requests, …) cut a new version via the dashboard. Use `seo` to control how the provider appears in search results and social shares; omit a subfield to keep the server default.
+         *     Caller must be a member of the provider's owning organization. `id`, `orgId`, and `slug` are immutable. Supports optimistic concurrency via `If-Match`.
          */
         patch: operations["UpdateProvider"];
         trace?: never;
@@ -1221,14 +1261,14 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get a verification (canonical slugged URL)
-         * @description Canonical HTML URL for a verification. The slug in the path is
+         * Get a provider (canonical slugged URL)
+         * @description Canonical HTML URL for a provider. The slug in the path is
          *     primarily an SEO and link-readability affordance — the
-         *     verification is resolved by `providerId`.
+         *     provider is resolved by `providerId`.
          *
-         *     - If `slug` matches the verification's current slug, returns the
+         *     - If `slug` matches the provider's current slug, returns the
          *       resource (HTML or JSON per `Accept`).
-         *     - If `slug` does not match (e.g. the verification was renamed since
+         *     - If `slug` does not match (e.g. the provider was renamed since
          *       the URL was minted), HTML callers receive a `301` redirect
          *       to this same route with the *current* slug. JSON callers
          *       receive the resource directly with `200` regardless of slug
@@ -1255,22 +1295,22 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List a verification's versions
-         * @description Lists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the verification's owning organization.
+         * List a provider's versions
+         * @description Lists versions visible to the caller. Non-public branches (`ai`, `draft`, `in_review`, `rejected`) are only visible to members of the provider's owning organization.
          */
         get: operations["ListProviderVersions"];
         put?: never;
         /**
-         * Create a new verification version
-         * @description Creates a new version of the verification. The starting branch
-         *     depends on the verification's `visibility` and the caller's role:
+         * Create a new provider version
+         * @description Creates a new version of the provider. The starting branch
+         *     depends on the provider's `visibility` and the caller's role:
          *
-         *     - `PRIVATE` verification (any caller): the live channel (no review).
+         *     - `PRIVATE` provider (any caller): the live channel (no review).
          *
-         *     - `PUBLIC` verification, admin caller (Reclaim staff): the live channel
+         *     - `PUBLIC` provider, admin caller (Reclaim staff): the live channel
          *       (no review).
          *
-         *     - `PUBLIC` verification, non-admin caller: `draft` (or `ai` if
+         *     - `PUBLIC` provider, non-admin caller: `draft` (or `ai` if
          *       authored by the AI assistant). Must pass review (see
          *       `POST /providers/{id}/versions/{version}/review`) before
          *       reaching the live channel.
@@ -1289,20 +1329,20 @@ export interface paths {
             path?: never;
             cookie?: never;
         };
-        /** Get a specific verification version */
+        /** Get a specific provider version */
         get: operations["GetProviderVersion"];
         put?: never;
         post?: never;
         /**
-         * Delete a verification version
-         * @description Soft-archives a version on the `draft`, `ai`, or `rejected` branch — sets `status` to `ARCHIVED` so history is preserved. Trunk (live) and `in_review` versions cannot be archived this way; archive the parent verification instead. Supports optimistic concurrency via `If-Match`.
+         * Delete a provider version
+         * @description Soft-archives a version on the `draft`, `ai`, or `rejected` branch — sets `status` to `ARCHIVED` so history is preserved. Trunk (live) and `in_review` versions cannot be archived this way; archive the parent provider instead. Supports optimistic concurrency via `If-Match`.
          */
         delete: operations["DeleteProviderVersion"];
         options?: never;
         head?: never;
         /**
-         * Update a verification version
-         * @description Mutable only while the version is on the `draft` or `rejected` branch. Versions on `in_review` or the live channel reject all writes here. Caller must be a member of the verification's owning organization. Supports optimistic concurrency via `If-Match`.
+         * Update a provider version
+         * @description Mutable only while the version is on the `draft` or `rejected` branch. Versions on `in_review` or the live channel reject all writes here. Caller must be a member of the provider's owning organization. Supports optimistic concurrency via `If-Match`.
          */
         patch: operations["UpdateProviderVersion"];
         trace?: never;
@@ -1317,8 +1357,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Submit a verification version for review
-         * @description Submits a verification version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the verification's owning org. Meaningful only on `PUBLIC` verifications — on `PRIVATE` verifications new versions go to the live channel directly and never need review.
+         * Submit a provider version for review
+         * @description Submits a provider version (currently on the `draft` or `rejected` branch) for admin review. On success the version's branch transitions to `in_review`. Callable by any authenticated member of the provider's owning org. Meaningful only on `PUBLIC` providers — on `PRIVATE` providers new versions go to the live channel directly and never need review.
          */
         post: operations["SubmitProviderVersionForReview"];
         delete?: never;
@@ -1337,8 +1377,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Record a decision on a verification version review
-         * @description Admin only (Reclaim staff). Approves or rejects a verification version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.
+         * Record a decision on a provider version review
+         * @description Admin only (Reclaim staff). Approves or rejects a provider version currently on the `in_review` branch. `APPROVED` clears the branch tag and promotes the version to the live channel; `REJECTED` moves it to the `rejected` branch where the author can address feedback and resubmit. A rejected version stays rejected — the author either fixes and resubmits, or abandons it.
          *     Until RBAC is designed, "admin" is detected via the user's email domain (`@reclaimprotocol.org`). Non-admin callers receive a 403.
          */
         post: operations["DecideProviderVersionReview"];
@@ -1359,7 +1399,7 @@ export interface paths {
         put?: never;
         /**
          * Publish a draft version directly (PRIVATE providers only)
-         * @description Publishes a verification version on the `draft` branch directly to the live channel (trunk). Only allowed for PRIVATE providers — PUBLIC providers must use the review flow (`POST .../review` → admin decision). On success the version's branch transitions from `draft` to `null` (trunk/live).
+         * @description Publishes a provider version on the `draft` branch directly to the live channel (trunk). Only allowed for PRIVATE providers — PUBLIC providers must use the review flow (`POST .../review` → admin decision). On success the version's branch transitions from `draft` to `null` (trunk/live).
          */
         post: operations["PublishProviderVersion"];
         delete?: never;
@@ -2491,7 +2531,7 @@ export interface components {
             primaryDataPoint?: string;
             dataPoints: string[];
         };
-        /** @description One website (distinct domain) in the Discover search results. Aggregates, across every verification the caller can see on that domain, the brand display fields and the union of provable data points. */
+        /** @description One website (distinct domain) in the Discover search results. Aggregates, across every provider the caller can see on that domain, the brand display fields and the union of provable data points. */
         WebsiteSuggestion: {
             /**
              * Format: hostname
@@ -2507,7 +2547,7 @@ export interface components {
             iconUrl?: string;
             /** @description Deduplicated names of every data point provable for this website. */
             dataPoints: string[];
-            /** @description Number of verifications backing this website that the caller can see. */
+            /** @description Number of providers backing this website that the caller can see. */
             providerCount: number;
         };
         /** @description Body for `POST /site/{domain}/try`. Only the verification `context` (values for the resolved providers' `requiredContext` inputs). The selection (dataPoints / mode / pins) travels in the query string. */
@@ -2517,15 +2557,20 @@ export interface components {
                 [key: string]: string;
             };
         };
-        /** @description A single data point selectable on the `/site/{domain}` page, with how many visible verifications expose it and one example verification slug. */
+        /** @description Body for `POST /site/{domain}/try-ai`. An optional edited extraction prompt, saved as a new draft build before the sandbox session is minted. */
+        SiteTryAiBody: {
+            /** @description The edited extraction prompt for the AI provider. */
+            prompt?: string;
+        };
+        /** @description A single data point selectable on the `/site/{domain}` page, with how many visible providers expose it and one example provider slug. */
         DataPointItem: {
             /** @description Data-point name (e.g. `username`, `followers_count`). */
             name: string;
             /** @description Human description of the data point, taken from the response match that declares it. Absent when no match supplies one. */
             description?: string;
-            /** @description Number of visible verifications on the domain that expose this data point. */
+            /** @description Number of visible providers on the domain that expose this data point. */
             providerCount: number;
-            /** @description Slug of one verification that exposes this data point. */
+            /** @description Slug of one provider that exposes this data point. */
             exampleProviderSlug?: string;
         };
         InterceptorOptions: {
@@ -2698,9 +2743,9 @@ export interface components {
             /** @default [] */
             allowedJsRequests: components["schemas"]["RequestSelectionTemplate"][];
             /** @default structured */
-            readonly verificationType: components["schemas"]["VerificationType"];
+            verificationType: components["schemas"]["VerificationType"];
             /** @description The prompt used for LLM verification (only when verificationType is "llm"). */
-            readonly prompt?: string;
+            prompt?: string;
             webSettings: components["schemas"]["ProviderWebSettings"];
             requiredContext?: components["schemas"]["ProviderRequiredContext"];
         };
@@ -2792,7 +2837,7 @@ export interface components {
         };
         /** @description `title` is optional — when omitted the dashboard renders `seoSuggestions.title` (server-derived from the scrape result or `derive_brand_name(domain)`). */
         CreateProviderRequest: {
-            /** @description uuid identifier of the organization that will own the verification. */
+            /** @description uuid identifier of the organization that will own the provider. */
             orgId: components["schemas"]["OrgID"];
             /**
              * Format: hostname
@@ -2836,8 +2881,12 @@ export interface components {
             /** @description Author SEO fields. Send `null` for a subfield to clear that override and let `seoSuggestions` win again. */
             seo?: components["schemas"]["ProviderSeo"];
         };
-        /** @description Body for creating a new version of a provider. Every new version starts on the `draft` branch — see `CreateProviderVersion`. The request body never sets `branch` directly; going live is a separate, explicit step (publish for PRIVATE, submit-for-review → approve for PUBLIC). The version's `verificationType` is always `structured` and is not settable here; a `prompt` field is reserved for a future AI authoring flow and is also not accepted on this surface. */
+        /** @description Body for creating a new version of a provider. Every new version starts on the `draft` branch — see `CreateProviderVersion`. The request body never sets `branch` directly; going live is a separate, explicit step (publish for PRIVATE, submit-for-review → approve for PUBLIC). `verificationType` defaults to `structured`; pass `llm` with a `prompt` to author an AI-verification provider. */
         CreateProviderVersionRequest: {
+            /** @description Defaults to `structured` server-side when omitted; pass `llm` (with a `prompt`) to author an AI-verification provider. */
+            verificationType?: components["schemas"]["VerificationType"];
+            /** @description Extraction prompt, used (and required) when `verificationType` is `llm`. */
+            prompt?: string;
             /**
              * @description The version of this Provider upon creation. Clients typically omit this and let the dashboard's bump-suggestion compute it. When omitted, defaults to `0.1.0` for the very first version; otherwise the caller is expected to pass a value higher than the latest existing version.
              * @default {
@@ -2858,10 +2907,13 @@ export interface components {
             /** @description Free-form change note recorded on `createMetadata`. */
             notes?: string;
         };
-        /** @description Partial update of a provider version. Mutable only while the version is on the `draft` or `rejected` branch; versions on `in_review` or the live channel reject all writes here. The semver does not change on update — `build_number` increments instead, giving callers a monotonic revision counter without touching the (major, minor, patch) PK. `verificationType` / `prompt` are not accepted; see `ProviderVersion` for why. */
+        /** @description Partial update of a provider version. Mutable only while the version is on the `draft` or `rejected` branch; versions on `in_review` or the live channel reject all writes here. The semver does not change on update — `build_number` increments instead, giving callers a monotonic revision counter without touching the (major, minor, patch) PK. `verificationType` and `prompt` may be updated; omit either to carry the prior build's value forward. */
         UpdateProviderVersionRequest: {
             /** Format: uri */
             initialUrl?: string;
+            verificationType?: components["schemas"]["VerificationType"];
+            /** @description Extraction prompt, used when `verificationType` is `llm`. */
+            prompt?: string;
             requests?: components["schemas"]["RequestSelection"][];
             allowedJsRequests?: components["schemas"]["RequestSelectionTemplate"][];
             webSettings?: components["schemas"]["ProviderWebSettings"];
@@ -3535,9 +3587,13 @@ export interface operations {
     };
     SiteBuild: {
         parameters: {
-            query: {
-                /** @description Selected data-point names. Repeat to pass several. */
-                dataPoints: string[];
+            query?: {
+                /** @description Selected data-point names. Repeat to pass several. Optional only so the "Build it with AI" entry can open the build page with just a missing `dataPoint`; the normal flow always passes ≥1. */
+                dataPoints?: string[];
+                /** @description When set, auto-opens the "Try with AI" dialog on load (the "Build it with AI" entry from the explore page). */
+                ai?: string;
+                /** @description A specific missing data point to seed the AI prompt with. */
+                dataPoint?: string;
                 /** @description `combine` (default) minimizes to the fewest providers (set-cover); `ai` is a forward-compat alias that currently resolves like combine. */
                 mode?: "combine" | "ai";
                 /** @description Source pins: `pins[<dataPoint>]=id,id`. Maps each data-point name to a comma-joined list of preferred providerIds. Omit for Auto. */
@@ -3706,6 +3762,84 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    SiteAiProvider: {
+        parameters: {
+            query?: {
+                /** @description A specific missing data point to name in the prompt. */
+                dataPoint?: string;
+                /** @description A failed sandbox session whose error seeds the prompt. */
+                sessionId?: components["schemas"]["SessionID"];
+                /** @description A provider to version (when owned + editable) instead of creating one. */
+                fromProviderId?: components["schemas"]["ProviderID"];
+                dataPoints?: string[];
+                mode?: "combine" | "ai";
+                provided?: string[];
+                pins?: {
+                    [key: string]: string;
+                };
+                exclude?: components["schemas"]["ProviderID"][];
+            };
+            header?: never;
+            path: {
+                domain: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The AI dialog body (editable prompt + Try with AI). */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "text/html": components["schemas"]["HtmlContent"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    SiteTryAi: {
+        parameters: {
+            query: {
+                /** @description The AI provider to try. */
+                providerId: components["schemas"]["ProviderID"];
+            };
+            header?: never;
+            path: {
+                domain: string;
+            };
+            cookie?: never;
+        };
+        /** @description An optional edited extraction prompt to save before trying. */
+        requestBody?: {
+            content: {
+                "application/x-www-form-urlencoded": components["schemas"]["SiteTryAiBody"];
+                "application/json": components["schemas"]["SiteTryAiBody"];
+            };
+        };
+        responses: {
+            /** @description Session created. */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VerificationSession"];
+                };
+            };
+            /** @description Sandbox verification quota exceeded. */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     DiscoverTeachAgent: {
         parameters: {
             query?: {
@@ -5222,7 +5356,7 @@ export interface operations {
                 };
             };
             301: components["responses"]["CanonicalRedirectResponse"];
-            /** @description Verification not found, or it is `PRIVATE` and the caller is not authorized to see it. */
+            /** @description Provider not found, or it is `PRIVATE` and the caller is not authorized to see it. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -5258,7 +5392,7 @@ export interface operations {
                 };
                 content?: never;
             };
-            /** @description Precondition Failed. The supplied `If-Match` does not match the verification's current `ETag` — re-fetch and retry. */
+            /** @description Precondition Failed. The supplied `If-Match` does not match the provider's current `ETag` — re-fetch and retry. */
             412: {
                 headers: {
                     [name: string]: unknown;
@@ -5303,7 +5437,7 @@ export interface operations {
                 };
             };
             403: components["responses"]["ForbiddenResponse"];
-            /** @description Precondition Failed. The supplied `If-Match` does not match the verification's current `ETag` — re-fetch and retry. */
+            /** @description Precondition Failed. The supplied `If-Match` does not match the provider's current `ETag` — re-fetch and retry. */
             412: {
                 headers: {
                     [name: string]: unknown;
@@ -5319,7 +5453,7 @@ export interface operations {
             header?: never;
             path: {
                 providerId: components["schemas"]["ProviderID"];
-                /** @description Verification slug. URL-safe identifier; lowercase letters, digits, and hyphens only. If stale, HTML callers get a 301 to the current slug. */
+                /** @description Provider slug. URL-safe identifier; lowercase letters, digits, and hyphens only. If stale, HTML callers get a 301 to the current slug. */
                 slug: string;
             };
             cookie?: never;
@@ -5338,7 +5472,7 @@ export interface operations {
                 };
             };
             301: components["responses"]["CanonicalRedirectResponse"];
-            /** @description Verification not found, or it is `PRIVATE` and the caller is not authorized to see it. */
+            /** @description Provider not found, or it is `PRIVATE` and the caller is not authorized to see it. */
             404: {
                 headers: {
                     [name: string]: unknown;