@reclaimprotocol/client 0.1.32 → 0.1.34

package/src/types/openapi.gen.ts

@@ -1,5 +1,5 @@
 // AUTO-GENERATED by packages/app/scripts/openapi-typegen.ts
-// from packages/app/openapi.yaml (spec v0.1.0, source sha256:099a5bcf4fba).
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
 // The hash catches drift the version misses (a spec can change without a
 // version bump) — do not remove it as "redundant" with the version.
 // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
@@ -17,8 +17,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Discover home — search a website to verify
-         * @description Default home page. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search, plus tag pills to narrow them.
+         * Home — sign-in or the Dashboard
+         * @description Signed in, redirects to the Dashboard (`GET /orgs/{orgId}`) of the console's selected org, else the viewer's default org. Signed out, renders the sign-in page; a signed-out link carrying Discover's `q` / `tag` redirects to `/discover` with them.
          */
         get: operations["Index"];
         put?: never;
@@ -29,6 +29,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/discover": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Discover — search a website to verify
+         * @description The Catalog. A website-first search: the visitor types a website and picks one to continue to `/site/{domain}`, where they choose what data to prove. Renders popular websites below the search, plus tag pills to narrow them.
+         */
+        get: operations["Discover"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/providers": {
         parameters: {
             query?: never;
@@ -218,7 +238,7 @@ export interface paths {
         put?: never;
         /**
          * Mint a SANDBOX test verification session for the selection
-         * @description Creates a real SANDBOX verification session for the selected data points, so the signed-in member can test the flow on `/v/{sessionId}` without registering a callback subscription. Runs under an organization the member owns (`orgId` in the body; defaults to their personal organization). The provider set is recomputed server-side from the selection.
+         * @description Creates a real SANDBOX verification session for the selected data points, so the signed-in member can test the flow on `/v/{sessionId}` without registering a callback subscription. Runs under an organization the member owns (`orgId` in the body; defaults to their default organization). The provider set is recomputed server-side from the selection.
          */
         post: operations["SiteBuildTry"];
         delete?: never;
@@ -227,26 +247,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/site/{domain}/repair": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Failure-aware "Repair with an AI coding agent" wizard fragment
-         * @description Body of the build page's repair dialog, lazy-loaded after a sandbox Try fails so the agent prompt includes the REAL failure (which provider(s) failed + the error reason, read from the session's event log) and the resolved provider set. HTML / HTMX fragment.
-         */
-        get: operations["SiteBuildRepair"];
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/site/{domain}/alternative": {
         parameters: {
             query?: never;
@@ -267,7 +267,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/discover/teach": {
+    "/integrate": {
         parameters: {
             query?: never;
             header?: never;
@@ -275,10 +275,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * “Teach our agent” instructions for a missing website / data point
-         * @description Returns the "Teach our agent" panel shown when a website or data point a user wants does not exist yet: steps to install the Reclaim MCP server plus a ready-to-copy prompt, templated with the requested `domain` and (optionally) `dataPoint`, that instructs an agent to author the missing provider. HTML / HTMX only (a dialog fragment).
+         * Go to the Integrate page
+         * @description Where the "Build it with an agent" links lead, from pages that don't know the viewer's organization. Signed in, redirects to the Integrate page of the console's selected organization (else the viewer's default organization), on its coding-agent track. Signed out, redirects to sign-in and back here.
          */
-        get: operations["DiscoverTeachAgent"];
+        get: operations["OpenIntegrate"];
         put?: never;
         post?: never;
         delete?: never;
@@ -287,26 +287,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/discover/agent-wizard": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Setup and prompt for the coding agent picked in the wizard
-         * @description Returns the last step of the "Build with an AI coding agent" wizard for the picked `agent`: how to attach the Reclaim MCP server, and the `basePrompt` with the optional `building` description appended. HTML / HTMX only (a fragment swapped into the open wizard).
-         */
-        post: operations["DiscoverAgentWizard"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/discover/resolve": {
         parameters: {
             query?: never;
@@ -1136,6 +1116,8 @@ export interface paths {
          *     - `zkfetch` — a static informational page. zkFetch has no claimant
          *       step; nothing ever redirects a browser here by design.
          *
+         *     A session from `POST /verifications/ai-sessions` never redirects for now. While its lookup runs, the page shows a loading state and reloads itself. Then it shows the candidate pages, and asks the user to pick one when there are several (nothing happens after the pick yet). When the lookup failed, the page shows an error and closes itself after 5 seconds. A session that is no longer pending shows that it ended.
+         *     `redirectUrl`, `redirectUrlOptions`, `cancelRedirectUrl`, and `cancelRedirectUrlOptions` in the query are added to the session's `launchOptions`, where every Verification Client can read them, unless the session already has that option: options set at creation, or by an earlier visit, win. They're validated as at creation (`https:` only); an invalid one is a 400. The `portals` redirect carries the session's launch options, and any other query parameters, on to the portal.
          *     Sets `Referrer-Policy: no-referrer`, so a `sessionId` never rides along in a `Referer` header to wherever a client eventually redirects.
          */
         get: operations["SharePage"];
@@ -1261,8 +1243,8 @@ export interface paths {
         get: operations["FixWithAiRecovery"];
         put?: never;
         /**
-         * Create or reopen a billed AI repair session
-         * @description Creates one idempotent repair attempt for the selected failed provider. The source organization is charged only when a new child is created. Repeated requests reopen a pending or successful child. After a child ends in error, rejection, or expiry, a later request creates a new, separately billed attempt. The server derives the exact failed version and repair prompt.
+         * Create a billed AI repair session
+         * @description Creates a verification session that pins the selected failed provider's exact version with `preferAiAgent`, charged to the source organization. Its verification page runs the AI authoring agent instead of the stored recipe. A proven recipe is published for the provider's own organization, or submitted for admin review otherwise. Every request creates a new, separately billed session.
          */
         post: operations["CreateFixWithAiSession"];
         delete?: never;
@@ -1271,26 +1253,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v/{sessionId}/fix-with-ai/activate": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Start a pending AI repair after the verification page loads
-         * @description Idempotently queues a pending repair session. The server derives the claimant country from the request and publishes no browser credentials.
-         */
-        post: operations["ActivateFixWithAiRepair"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/.well-known/jwks.json": {
         parameters: {
             query?: never;
@@ -1581,7 +1543,7 @@ export interface paths {
         put?: never;
         /**
          * Create an organization
-         * @description Creates a new `ORG`-kind organization with the caller as its first `OWNER`. The personal org is created automatically at user signup and is not created via this endpoint.
+         * @description Creates a new `ORG`-kind organization with the caller as its first `OWNER`. Every user gets a default organization at sign-up, and it counts toward their org-creation limit (1 active organization unless Reclaim support raises it). Past the limit this returns `409`; contact support@reclaimprotocol.org to raise the limit or archive an organization.
          */
         post: operations["CreateOrg"];
         delete?: never;
@@ -1642,8 +1604,8 @@ export interface paths {
         put?: never;
         post?: never;
         /**
-         * Delete a shared organization
-         * @description Owner only. `PERSONAL` organizations cannot be deleted independently of their owning user; deleting a personal org happens implicitly via `DELETE /me`.
+         * Archive an organization
+         * @description Reclaim staff only; owners ask support@reclaimprotocol.org to archive. Archives the organization, which frees a slot under its creator's org-creation limit. `403` for anyone else.
          */
         delete: operations["DeleteOrg"];
         options?: never;
@@ -1655,26 +1617,6 @@ export interface paths {
         patch: operations["UpdateOrg"];
         trace?: never;
     };
-    "/orgs/{orgId}/convert": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Convert a personal organization to a regular organization
-         * @description Owner only. One-way: flips a `PERSONAL` organization (auto-provisioned at sign-up, sandbox-only, single-member) to a regular `ORG`, unlocking billing, plan & usage, and member invites. All providers, sessions, credentials and themes carry over. `409` when the organization is not `PERSONAL`.
-         */
-        post: operations["ConvertOrgToRegular"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/orgs/{orgId}/members": {
         parameters: {
             query?: never;
@@ -1690,7 +1632,7 @@ export interface paths {
         put?: never;
         /**
          * Invite a member to an organization
-         * @description Owner only. Invites a user to the organization by email. The invitee does **not** need to be a registered user — an invite is created in either case, and an invite email with an accept link is dispatched. The new row is returned with `status: PENDING`; it flips to `ACTIVE` only when the invitee explicitly accepts via `POST /orgs/{orgId}/invite`. `PERSONAL` organizations reject this call (409).
+         * @description Owner only. Invites a user to the organization by email. The invitee does **not** need to be a registered user — an invite is created in either case, and an invite email with an accept link is dispatched. The new row is returned with `status: PENDING`; it flips to `ACTIVE` only when the invitee explicitly accepts via `POST /orgs/{orgId}/invite`.
          */
         post: operations["AddOrgMember"];
         delete?: never;
@@ -1822,7 +1764,7 @@ export interface paths {
         get: operations["GetOrgKeypair"];
         /**
          * Set (or rotate) the organization's encryption keypair
-         * @description Upserts the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. Setting overwrites the single row (and creates it for a keyless org). When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
+         * @description Sets the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. The call creates the key for a keyless org and is idempotent for the same key. If the org has a different key, it returns `409` unless `replace` is true. When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
          */
         put: operations["SetOrgKeypair"];
         post?: never;
@@ -2084,6 +2026,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/billing/card": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Save a card for the organization
+         * @description Owner only. Returns a Stripe Checkout URL that only saves a card (no charge), creating the organization's Stripe customer on first use. The saved card becomes the default that plans and overage bill. Stripe returns the owner to the Billing tab with `?billing=card`.
+         */
+        post: operations["CreateCardSetupSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}/billing/subscription": {
         parameters: {
             query?: never;
@@ -2380,7 +2342,7 @@ export interface paths {
         };
         /**
          * Get a specific provider version
-         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization. A member of the organization that paid for a successful AI repair may also read only the exact `fixed` version created by that repair.
+         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization.
          */
         get: operations["GetProviderVersion"];
         put?: never;
@@ -2725,7 +2687,7 @@ export interface paths {
         };
         /**
          * Verification outcomes by day, device, and country
-         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets.
+         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets. A signed-in browser asking for HTML is redirected to the org's Dashboard (`GET /orgs/{orgId}`), which shows these analytics, with the same query.
          */
         get: operations["GetOrgVerificationAnalytics"];
         put?: never;
@@ -2748,16 +2710,32 @@ export interface paths {
         /**
          * Create a verification session
          * @description Creates a verification session for an end-user to complete.
+         *
+         *     **The response's `verificationUrl` is the one thing you need.** Send
+         *     your end user to it (redirect, link, or QR code): that is where they
+         *     verify. Everything else in the response is for tracking the session.
+         *
          *     Authenticated by the consumer's `OrgToken`; the session is scoped to
          *     the resolved organization. The request carries no callback URLs —
          *     results are delivered to the org's pre-registered callback
          *     subscriptions.
          *
+         *     `verificationClientUrl` picks where the user verifies. Omit it to use
+         *     the Reclaim Portal. The built-in clients are:
+         *
+         *     | Client | `verificationClientUrl` |
+         *     | --- | --- |
+         *     | Reclaim Portal (default) | `https://build.reclaimprotocol.org/share/portals` |
+         *     | Verifier app | `https://build.reclaimprotocol.org/share/verifier-app` |
+         *     | Browser extension | `https://build.reclaimprotocol.org/share/reclaim-browser-extension` |
+         *     | Builder browser | `https://build.reclaimprotocol.org/share/builder` |
+         *     | In-app SDK | `https://build.reclaimprotocol.org/share/inapp-sdk` |
+         *
          *         curl -X POST $BASE/verifications/sessions \
          *           -H "Authorization: Bearer $ORG_TOKEN" \
          *           -H 'Content-Type: application/json' \
          *           -d '{"providers":[{"providerId":"…","version":"^1.2.0"}],"context":{},
-         *                "verificationClientUrl":"https://verify.example.com/"}'
+         *                "verificationClientUrl":"https://build.reclaimprotocol.org/share/portals"}'
          *
          *     Fails with `409 Conflict` if the organization has no callback
          *     subscription (there would be nowhere to deliver the result).
@@ -2772,6 +2750,118 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/verifications/ai-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start an AI verification session from a prompt
+         * @description Starts a verification from a plain-language prompt, such as "verify
+         *     I'm a student at Manipal University", instead of a list of providers.
+         *     Builder creates the session at once and returns it, as
+         *     `POST /verifications/sessions` does. Send the user to its
+         *     `verificationUrl`. In the background, Builder looks up the
+         *     `candidates` (pages the user opens and signs in to) and the
+         *     `dataPoints` to verify there, usually within a few seconds. Poll
+         *     `GET /verifications/ai-sessions/{sessionId}` until its `status` is
+         *     `ready` or `failed`. The share page at `verificationUrl` shows a
+         *     loading state meanwhile.
+         *
+         *     Builder searches the provider catalog (public providers and your
+         *     organization's own providers) and the web. The web search finds a
+         *     portal the catalog lacks, or one that replaced a stale catalog page.
+         *     Builder caches a web result for a week, or for a day when it finds
+         *     nothing. A URL or domain in the prompt is a hint: pages on it rank
+         *     first.
+         *
+         *     Deterministic checks run before any AI model. Builder rejects a
+         *     prompt that contains a password, card number, or Aadhaar number, that
+         *     contains instructions for the AI, or that makes a sensitive claim,
+         *     without calling a model. Builder withholds personal values the prompt
+         *     states, such as a name, email address, phone number, or student ID,
+         *     from the model and from the cache.
+         *
+         *     Once the lookup is ready, the session's `context` holds the values
+         *     the prompt states, such as the user's name, merged with the `context`
+         *     you send. Your values take precedence.
+         *
+         *     On `201`, the session has no providers: the AI agent works out how to
+         *     verify. The organization needs a callback subscription. The session
+         *     uses one verification from the quota pool of the
+         *     `verificationClientUrl` client. A prompt the checks above reject
+         *     creates no session and is free. If the lookup then fails (the prompt
+         *     isn't a request to verify something about the user, no login page
+         *     is found, or the model or web search stays unavailable), Builder
+         *     refunds the verification, ends the session with status `error`, and
+         *     sends the failure to your `verification_error` callbacks. Builder
+         *     caches lookups, so a repeated prompt resolves faster, even when it
+         *     names a different person.
+         *
+         *         curl -X POST $BASE/verifications/ai-sessions \
+         *           -H "Authorization: Bearer $ORG_TOKEN" \
+         *           -H 'Content-Type: application/json' \
+         *           -d '{"prompt":"verify I am a student at Manipal University"}'
+         *
+         *     Errors:
+         *
+         *     - `400`: Builder rejects the prompt (for example, it targets an
+         *       internal host), `context` contains `attestationNonce` or
+         *       `attestationNonceData`, or `verificationClientUrl` isn't a
+         *       registered client.
+         *     - `409`: The organization has no callback subscription.
+         *     - `429` or `402`: The quota or credits are spent. The body has
+         *       `event: billing_required` and a terminal `sessionId`.
+         *
+         *     A failed lookup isn't an error of this request: it shows in the
+         *     `error` of `GET /verifications/ai-sessions/{sessionId}`.
+         */
+        post: operations["CreateAiVerificationSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/verifications/ai-sessions/{sessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get what an AI verification session's prompt resolved to
+         * @description Returns the lookup that `POST /verifications/ai-sessions` started for
+         *     the session. `status` is `resolving` until it finishes, then `ready`
+         *     with the pages and data points it found, or `failed` with an
+         *     `error`. Poll every second or two while it's `resolving`.
+         *
+         *     `candidates` lists the pages to open, best first, each with a
+         *     `source` of `catalog` or `web`. It usually has one page. It has
+         *     several (up to 3) only when their `confidence` values are within 0.1
+         *     of the best page's value. In that case, the user picks one on the
+         *     session's `verificationUrl`.
+         *
+         *     The `OrgToken` must resolve to the session's organization. To track
+         *     the session's status, call `GET /verifications/sessions/{sessionId}`.
+         *
+         *         curl $BASE/verifications/ai-sessions/$SESSION_ID \
+         *           -H "Authorization: Bearer $ORG_TOKEN"
+         */
+        get: operations["GetAiVerificationSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/verifications/sessions/{sessionId}": {
         parameters: {
             query?: never;
@@ -3065,8 +3155,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get the stored encrypted result(s) for a session
-         * @description Returns the stored Builder-signed result payloads for this session — one item per callback subscription. Readable only by the consumer that created the session. The consumer's `OrgToken` must resolve to the session's organization. A pull-based companion to push delivery: when the organization enables encryption, Builder returns an ECIES ciphertext (base64url) that the holder of the matching private key decrypts client-side, else plaintext. Empty `items` until the session reaches a terminal state and a result has been submitted. Treat every returned payload as untrusted until `verifyResultFull` succeeds with the Builder issuer and JWKS URL.
+         * Get the stored result(s) for a session
+         * @description Returns the session's callback deliveries with their payloads — one item per callback subscription and event. Readable only by the consumer that created the session. The consumer's `OrgToken` must resolve to the session's organization. A recovery companion to push delivery, not a replacement for the callback: a signed result's `payload` (which can carry proofs) is kept only until its callback is delivered, or for 7 days while undelivered, then becomes `null`. When the organization enables encryption, a signed result is an ECIES ciphertext (base64url) that the holder of the matching private key decrypts client-side, else plaintext. Empty `items` until the session reaches a terminal state and a result has been submitted. Treat every returned payload as untrusted until `verifyResultFull` succeeds with the Builder issuer and JWKS URL.
          */
         get: operations["GetVerificationResult"];
         put?: never;
@@ -3088,7 +3178,7 @@ export interface paths {
         put?: never;
         /**
          * Re-enqueue callback delivery for a session
-         * @description Re-enqueues delivery of a session's stored result to its callback subscriptions. Use this after `list_verification_deliveries` shows a `failed` or dead-lettered delivery, once the consumer's callback endpoint is reachable again and answers 2xx — it re-attempts every not-yet-delivered callback for the session. Usable by the session creator (authenticated by the consumer's `OrgToken`) to recover from a transient consumer-side outage.
+         * @description Re-enqueues delivery of a session's stored result to its callback subscriptions. Use this after `list_verification_deliveries` shows a `failed` or dead-lettered delivery, once the consumer's callback endpoint is reachable again and answers 2xx — it re-attempts every not-yet-delivered callback for the session. Usable by the session creator (authenticated by the consumer's `OrgToken`) to recover from a transient consumer-side outage. A result left undelivered for 7 days is purged and can no longer be retried.
          */
         post: operations["RetryVerificationCallback"];
         delete?: never;
@@ -3128,7 +3218,7 @@ export interface paths {
         put?: never;
         /**
          * Retry a dead-lettered callback (admin-only)
-         * @description Admin only. Re-enqueues a specific DLQ entry for delivery.
+         * @description Admin only. Re-enqueues a specific DLQ entry for delivery. 410 when the result was undelivered for 7 days and has been purged.
          */
         post: operations["RetryCallbackDlq"];
         delete?: never;
@@ -3270,6 +3360,64 @@ export interface components {
         ProviderID: string;
         /** Format: uuid */
         OrgID: string;
+        /** @description Body for `POST /verifications/ai-sessions`. */
+        CreateAiVerificationSessionRequest: {
+            /** @description What to verify, in plain language, such as "verify I'm a student at Manipal University". Builder rejects a prompt that contains credentials, card numbers, instructions for the AI, or a sensitive claim. */
+            prompt: string;
+            /** @description Values you already know, such as `{"fullName": "Asha Rao"}`. Builder merges them over the values the prompt states and returns the result in `context`. Must not contain `attestationNonce` or `attestationNonceData`; bind those after you create the session. Omit if you have none. */
+            context?: {
+                [key: string]: unknown;
+            };
+            /** @description Base URL of the registered verification client the user verifies with, as for `POST /verifications/sessions`. Builder charges this client's quota pool. If you omit it, Builder uses the default (`portals`) client. */
+            verificationClientUrl?: string;
+            /** @description ISO 3166-1 alpha-2 country code, such as `IN`. Builder searches the web from this country (Google's `gl` parameter), so portals for that country rank first. If you omit it, the search has no country preference. */
+            geoLocation?: string;
+        };
+        /** @description The lookup `POST /verifications/ai-sessions` started for a session: its status, and once `ready`, the pages to open and the data points to verify there. */
+        AiVerificationSession: {
+            /**
+             * Format: uuid
+             * @description ID of the verification session. To track the session, call `GET /verifications/sessions/{sessionId}`.
+             */
+            sessionId: string;
+            /**
+             * @description `resolving` while Builder looks up the pages and data points. `ready` when `candidates` and `dataPoints` are set. `failed` when the lookup failed: `error` says why, the session ended with status `error`, and its verification was refunded.
+             * @enum {string}
+             */
+            status: "resolving" | "ready" | "failed";
+            /** @description Why the lookup failed. Only when `status` is `failed`. Its `status` is 422 when the prompt isn't a request to verify something about the user, 404 when no login page was found, and 503 when the AI model or web search stayed unavailable. */
+            error?: components["schemas"]["Problem"];
+            /** @description Only when `status` is `ready`. The fewest data points that prove the prompt's claim, required data points first. A data point for a value the prompt states is always required. */
+            dataPoints?: {
+                /** @description Short camelCase name, such as `username`. */
+                name: string;
+                /** @description What the value is and why it proves the claim. */
+                description: string;
+                /** @description If `true`, the claim can be proven without this value, as with `isOptional` on a provider's `ResponseMatch`. If absent, the data point is required. */
+                isOptional?: boolean;
+            }[];
+            /** @description Values the signed-in account must show, such as `{"fullName": "Asha Rao"}`. Each key is the `dataPoints` name that the value pins. It combines the values the prompt states with the request's `context`. It's empty if neither has any. It's the session's `context`. If the prompt names a specific page, such as a post, `pageUrl` holds it: the page to open after the user logs in on the candidate's site. */
+            context: {
+                [key: string]: unknown;
+            };
+            /** @description Only when `status` is `ready`. Pages to open, best first. Each is the page that shows the data after the user signs in (it sends the user to sign in first), or else the sign-in page. Usually one page. Several pages appear only when the choice is ambiguous, such as a college with two or three student portals whose `confidence` values are within 0.1 of the best. In that case, the user picks one on the session's `verificationUrl`. At most one page per host. */
+            candidates?: components["schemas"]["ResolvedLoginPage"][];
+        };
+        /** @description A page for the user to open and sign in to. */
+        ResolvedLoginPage: {
+            /**
+             * Format: uri
+             * @description URL of the page to open. For a `web` page, Builder removes the query and fragment.
+             */
+            loginUrl: string;
+            /** @description Estimated likelihood, from 0 to 1, that signing in here shows the claim. Candidates below 0.5 are never returned. */
+            confidence: number;
+            /**
+             * @description Where the page came from. `catalog` is the page of a provider in the catalog (public, or your organization's own). `web` is a page that a web search found; it has no provider yet.
+             * @enum {string}
+             */
+            source: "catalog" | "web";
+        };
         /** @description A verification client id used as a filter. Hyphens are ignored. */
         VerificationClientIDFilter: string;
         /** @description An organization id used as a filter. Hyphens are ignored, so it matches with or without them; an id that matches no organization returns nothing. */
@@ -3397,11 +3545,9 @@ export interface components {
          */
         EntityStatus: "ACTIVE" | "ARCHIVED";
         /**
-         * @description - `PERSONAL`: Auto-provisioned at user signup. Exactly one
-         *       `OWNER`, no other members.
-         *
-         *     - `ORG`: Explicitly created via `POST /orgs`. Multiple
-         *       members, always ≥ 1 active `OWNER`.
+         * @description - `ORG`: A user's organization: the default one made at sign-up,
+         *       or one created via `POST /orgs`. Multiple members, always ≥ 1
+         *       active `OWNER`.
          *
          *     - `ANONYMOUS`: System-managed, member-less org auto-created to
          *       anchor an unaffiliated ETH credential's org-level settings
@@ -3410,7 +3556,7 @@ export interface components {
          *       created or named by clients; has no members.
          * @enum {string}
          */
-        OrganizationKind: "PERSONAL" | "ORG" | "ANONYMOUS";
+        OrganizationKind: "ORG" | "ANONYMOUS";
         /** @description A free-form label attached to an entity for grouping and filtering in listings. Must start and end with an alphanumeric character; only ASCII letters, digits, spaces, and hyphens are allowed between. */
         Tag: string;
         ActorMetadata: {
@@ -3419,7 +3565,7 @@ export interface components {
             /** @description Free-form notes from actor describing this change */
             notes?: string;
         };
-        /** @description A registered user of the platform. Every newly created user is automatically granted a personal organization (see `Organization.kind = PERSONAL`) whose id is exposed here as `personalOrgId`. */
+        /** @description A registered user of the platform. Every newly created user gets a default organization, whose id is exposed here as `defaultOrgId`. */
         User: {
             id: components["schemas"]["UserID"];
             /**
@@ -3441,13 +3587,13 @@ export interface components {
              * @enum {string}
              */
             role?: "user" | "admin";
-            /** @description ID of the user's auto-created personal organization. This organization is provisioned the moment the user is created and cannot be deleted independently of the user. */
-            personalOrgId: components["schemas"]["OrgID"];
+            /** @description ID of the organization created for the user at sign-up. It is a regular organization and counts toward the user's org-creation limit. */
+            defaultOrgId: components["schemas"]["OrgID"];
             createMetadata: components["schemas"]["ActorMetadata"];
             updateMetadata: components["schemas"]["ActorMetadata"];
         };
         /**
-         * @description Role a user holds in an organization. `OWNER` can invite, promote, demote, and remove members, and delete the org. `MEMBER` has read/write access to resources owned by the org but cannot manage membership. `PERSONAL` orgs have exactly one `OWNER` and reject all member-mutating operations.
+         * @description Role a user holds in an organization. `OWNER` can invite, promote, demote, and remove members, and delete the org. `MEMBER` has read/write access to resources owned by the org but cannot manage membership.
          * @enum {string}
          */
         OrganizationMemberRole: "OWNER" | "MEMBER";
@@ -3482,12 +3628,12 @@ export interface components {
             /** @description Timestamp the invite was accepted. Absent while `status` is `PENDING`. */
             joinedAt?: components["schemas"]["Timestamp"];
         };
-        /** @description A workspace that owns providers and other resources. Every user gets exactly one `PERSONAL` organization on signup; additional `ORG` organizations can be created and have multiple members. System-managed `ANONYMOUS` organizations have no members (see `OrganizationKind`). */
+        /** @description A workspace that owns providers and other resources. Every user gets a default `ORG` organization on signup; more can be created up to the user's org-creation limit, and any can have multiple members. System-managed `ANONYMOUS` organizations have no members (see `OrganizationKind`). */
         Organization: {
             id: components["schemas"]["OrgID"];
-            /** @description Display name of the organization. For `PERSONAL` orgs this defaults to the owner's name and may be edited by the owner. */
+            /** @description Display name of the organization. A user's default org starts with their name and may be renamed by an owner. */
             name: string;
-            /** @description Whether this is a user's personal org or a shared org. */
+            /** @description Whether this is a user's org or a system-managed anonymous one. */
             kind: components["schemas"]["OrganizationKind"];
             /**
              * Format: uri
@@ -3496,7 +3642,7 @@ export interface components {
             iconUrl?: string;
             /** @description Marker for system-managed singleton orgs. `'reclaim-staff'` identifies the auto-membership org that every `@reclaimprotocol.org` user is enrolled into on login (PRD-1 §3). Absent on normal user-created orgs. Names, status, and lifecycle of system-managed orgs are server-protected — clients cannot rename, archive, or delete them. */
             readonly systemId?: string;
-            /** @description All users with a role in this organization. `PERSONAL` and `ORG` orgs always contain at least one active `OWNER` (`PERSONAL` orgs contain exactly one member); `ANONYMOUS` orgs have no members, so this array is empty for them. */
+            /** @description All users with a role in this organization. `ORG` orgs always contain at least one active `OWNER`; `ANONYMOUS` orgs have no members, so this array is empty for them. */
             members: components["schemas"]["OrganizationMember"][];
             /** @description Providers owned by this organization. */
             providers?: components["schemas"]["ProviderListItem"][];
@@ -3776,6 +3922,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Body for `PUT /orgs/{orgId}/keypair`. Carries the org's eth public key as a secp256k1 public JWK. */
         OrgKeypairJwkRequest: {
@@ -3783,6 +3934,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Response of `POST /orgs/{orgId}/token`. The plaintext `orgSecret` is shown **only once** here; the server stores only its HMAC. Use it as `Authorization: Bearer <orgSecret>` (the `OrgToken` scheme). An org may hold several keys; issuing a new one does not affect the others. */
         OrgToken: {
@@ -5235,7 +5391,7 @@ export interface components {
             webSettings: components["schemas"]["ProviderWebSettings"];
             requiredContext?: components["schemas"]["ProviderRequiredContext"];
         };
-        /** @description Body for `POST /orgs` — just a name. Every org is created keyless, like auto-provisioned personal orgs; its Ethereum (secp256k1) key pair is published separately via `PUT /orgs/{orgId}/keypair`, which is also where `canEncryptResult` is set. Creation deliberately collects nothing else so it never blocks on generating and safeguarding a private key. */
+        /** @description Body for `POST /orgs` — just a name. Every org is created keyless, like each user's default org; its Ethereum (secp256k1) key pair is published separately via `PUT /orgs/{orgId}/keypair`, which is also where `canEncryptResult` is set. Creation deliberately collects nothing else so it never blocks on generating and safeguarding a private key. */
         CreateOrgRequest: {
             name: string;
         };
@@ -5742,7 +5898,7 @@ export interface components {
             resolvedVersion: string;
             /** Format: uri */
             initialUrl: string;
-            /** @description Legacy-only preference. Builder clients always run the structured recipe and never enable AI or manual verification from this value. */
+            /** @description Effective AI-agent preference: the session's choice, else whether the version is an `llm` provider. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent: boolean;
             geoLocation?: string;
             jsUserScripts?: string;
@@ -5792,7 +5948,7 @@ export interface components {
             preferredLocale?: string;
             /** @description When the organization-bound legacy TEE nonce context was first stored. The nonce data itself is present in `context` as `attestationNonce` and `attestationNonceData`. */
             teeNonceBoundAt?: components["schemas"]["Timestamp"];
-            /** @description Legacy-only preference echoed for compatibility. Builder-mode clients run the structured recipe and do not enable AI or manual verification. */
+            /** @description The creator's AI-agent preference. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent?: boolean;
             /** @description Whether this session was created with diagnostic mode enabled (see CreateVerificationSessionRequest.diagnostics). Set once at creation and never changes afterward. Gates whether Builder records claimant IP addresses and how much detail diagnostic events carry; the `diag` parameter on `verificationUrl` mirrors this value and is not itself authoritative. */
             diagnostics: boolean;
@@ -5816,7 +5972,7 @@ export interface components {
              * @description Id of the registered verification client whose base URL was used (see `verification_clients`).
              */
             verificationClientId: string;
-            /** @description Ready-to-share URL: the registered base URL with the session id attached by the Builder — substituted into a `{sessionId}` placeholder, or appended as a `?sessionId=…` query parameter. It always includes `api=2`, which selects Builder mode in dual-mode Verification Clients. The Consumer may append its own redirect query fields before opening the URL for the claimant; the Builder does not store or execute those redirects. */
+            /** @description The URL to send your end user to: this is where they verify. Ready-to-share: the registered base URL with the session id attached by the Builder — substituted into a `{sessionId}` placeholder, or appended as a `?sessionId=…` query parameter. It always includes `api=2`, which selects Builder mode in dual-mode Verification Clients. The Consumer may append its own redirect query fields before opening the URL for the claimant; the Builder does not store or execute those redirects. */
             verificationUrl: string;
             createdAt: components["schemas"]["Timestamp"];
             /** @description When the session stops being completable. After this, a still- `pending` session becomes `expired` on the next sweep and the end-user can no longer finish it. */
@@ -5847,13 +6003,20 @@ export interface components {
             context: {
                 [key: string]: unknown;
             };
-            /** @description Optional. Must exactly equal the base URL of a registered verification client (see the `verification_clients` registry / `/admin/verification-clients`). Omit to use the default (`portals`) client. The Builder resolves and stores the registered client UUID, then returns the ready-to-share `verificationUrl` with the session id and `api=2`. A URL that is not a registered client's base is rejected with 400. Consumers append any client-owned redirect parameters after receiving the URL; Builder does not manage them. */
+            /**
+             * @description Optional. Must exactly equal the base URL of a registered verification client (see the `verification_clients` registry / `/admin/verification-clients`). Omit to use the default (`portals`) client. The Builder resolves and stores the registered client UUID, then returns the ready-to-share `verificationUrl` with the session id and `api=2`. A URL that is not a registered client's base is rejected with 400. Consumers append any client-owned redirect parameters after receiving the URL; Builder does not manage them. The built-in clients are `{origin}/share/{name}`, listed in the examples.
+             * @example https://build.reclaimprotocol.org/share/portals
+             * @example https://build.reclaimprotocol.org/share/verifier-app
+             * @example https://build.reclaimprotocol.org/share/reclaim-browser-extension
+             * @example https://build.reclaimprotocol.org/share/builder
+             * @example https://build.reclaimprotocol.org/share/inapp-sdk
+             */
             verificationClientUrl?: string;
             /** @description Optional active theme owned by the organization. When omitted, Builder snapshots the organization's most recently updated active theme. If the organization has no active theme, the Verification Client uses its default presentation. */
             themeId?: components["schemas"]["ThemeID"];
             /** @description Optional locale override for this verification session. It takes precedence over the organization theme's preferred locale. */
             preferredLocale?: string;
-            /** @description Legacy-only preference. Builder mode runs the structured recipe and does not enable AI or manual verification. Omit this field for Builder-mode sessions; dual-mode clients may continue to interpret it only on their legacy path. */
+            /** @description When true, the Builder verification page runs the AI authoring agent instead of the providers' structured recipes. A proven recipe is published only for the provider's own organization; for any other provider it is submitted for admin review. Omit it to run the stored recipes. */
             preferAiAgent?: boolean;
             /** @description Optional; omit or send false for a normal session. Opts this session into diagnostic mode. A diagnostic session records more event detail, including personal data such as the claimant's IP addresses (see ClaimantDetails.network). Builder appends `diag=1` to the returned `verificationUrl` for a diagnostic session and strips any `diag` value the Consumer's own `verificationClientUrl` carries, so this field — not the URL — is the only way to turn diagnostics on. Treat a diagnostic verification URL as sensitive, and don't hand it to a claimant by default. */
             diagnostics?: boolean;
@@ -6310,6 +6473,31 @@ export interface components {
 export type $defs = Record<string, never>;
 export interface operations {
     Index: {
+        parameters: {
+            query?: {
+                /** @description Free-text query matched against website domain, data points, brand title, and description. Restores the search box and results on a shared/bookmarked link. */
+                q?: string;
+                /** @description Narrow to websites with at least one visible provider carrying ANY of these tags. Repeat to pass several (OR-combined). */
+                tag?: string[];
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            200: components["responses"]["HTMLResponse"];
+            /** @description Signed in; redirects to the Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    Discover: {
         parameters: {
             query?: {
                 /** @description Free-text query matched against website domain, data points, brand title, and description. Restores the search box and results on a shared/bookmarked link. */
@@ -6678,40 +6866,6 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    SiteBuildRepair: {
-        parameters: {
-            query: {
-                /** @description The failing sandbox session whose analytics seed the prompt. */
-                sessionId: components["schemas"]["SessionID"];
-                dataPoints?: string[];
-                mode?: components["schemas"]["ResolveMode"];
-                provided?: string[];
-                /** @description Source pins: `pins[<dataPoint>]=<providerId>`. Pins the provider that must prove that data point; a pinned provider is taken first and is never pruned. Omit (or send empty) for Auto. A comma-separated list is also accepted — the first id that covers the point wins. */
-                pins?: {
-                    [key: string]: string;
-                };
-                exclude?: components["schemas"]["ProviderID"][];
-            };
-            header?: never;
-            path: {
-                domain: string;
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The repair wizard fragment. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "text/html": components["schemas"]["HtmlContent"];
-                };
-            };
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
     SiteBuildAlternative: {
         parameters: {
             query: {
@@ -6753,49 +6907,22 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    DiscoverTeachAgent: {
+    OpenIntegrate: {
         parameters: {
-            query?: {
-                /** @description Website the user wanted to verify data from. */
-                domain?: string;
-                /** @description Specific data point the user could not find. */
-                dataPoint?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            200: components["responses"]["HTMLResponse"];
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
-    DiscoverAgentWizard: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody: {
-            content: {
-                "application/x-www-form-urlencoded": {
-                    /** @description The wizard's ready-to-paste task prompt. */
-                    basePrompt: string;
-                    /** @description Prefix of the wizard's element ids, so copy targets stay unique. */
-                    idPrefix: string;
-                    /** @description Picked coding agent; unknown values fall back to the first. */
-                    agent?: string;
-                    /** @description What the user is building, appended to the prompt. */
-                    building?: string;
-                    /** @description Label for `building` in the prompt. Defaults to "What I'm building". */
-                    lead?: string;
+            /** @description Redirect to the Integrate page, or to sign-in. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
                 };
+                content?: never;
             };
-        };
-        responses: {
-            200: components["responses"]["HTMLResponse"];
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -7077,7 +7204,7 @@ export interface operations {
     AdminUsers: {
         parameters: {
             query?: {
-                /** @description Matches email, name, user id, or personal organization id (hyphens optional in ids). */
+                /** @description Matches email, name, user id, or default organization id (hyphens optional in ids). */
                 q?: string;
             };
             header?: never;
@@ -8081,6 +8208,14 @@ export interface operations {
                 api?: "2";
                 /** @description Backend-derived echo of the session's `diagnostics` field, carried through to the launched destination unchanged. See the same parameter on `VerificationPage`. */
                 diag?: "1";
+                /** @description Added to the session's `launchOptions` if it has none. */
+                redirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                redirectUrlOptions?: string;
+                /** @description Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrlOptions?: string;
             };
             header?: never;
             path: {
@@ -8247,7 +8382,7 @@ export interface operations {
                     "text/html": components["schemas"]["HtmlContent"];
                 };
             };
-            /** @description The new or existing repair session. */
+            /** @description The new repair session. */
             201: {
                 headers: {
                     [name: string]: unknown;
@@ -8259,28 +8394,6 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    ActivateFixWithAiRepair: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                sessionId: components["schemas"]["SessionID"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The repair was queued or was already active. */
-            204: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            409: components["responses"]["ProblemResponse"];
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
     JwksJson: {
         parameters: {
             query?: never;
@@ -8754,9 +8867,11 @@ export interface operations {
                 /** @description Integrate tab only. Which integration path to show: a coding agent over MCP, the client package, or plain HTTP. */
                 track?: "agent" | "sdk" | "http";
                 /** @description Integrate tab, agent track only. Which coding agent's install command to show. */
-                agent?: "claude" | "cursor" | "opencode" | "codex" | "others";
-                /** @description Dashboard tab only. Scopes the report to sessions that ran this provider. Options come from `GET /orgs/{orgId}/providers/used`. */
-                providerId?: components["schemas"]["ProviderID"];
+                agent?: "claude" | "copilot" | "cursor" | "omp" | "opencode" | "codex" | "antigravity" | "others";
+                /** @description Integrate tab, agent track only. What users prove, as typed into the prompt's goal field; kept when another agent is picked. */
+                goal?: string;
+                /** @description Integrate tab: the providers to show in the examples in place of placeholder ids, for example when arriving from a provider page or a build page. Repeat to pass several. Dashboard tab: scopes the report to sessions that ran this provider (the first one); options come from `GET /orgs/{orgId}/providers/used`. */
+                providerId?: components["schemas"]["ProviderID"][];
                 /** @description Integrate tab, HTTP track only. Which Verification Client the create-session example targets. `auto` (the default) leaves `verificationClientUrl` out. */
                 client?: "auto" | "portals" | "verifier-app" | "reclaim-browser-extension" | "builder" | "inapp-sdk";
                 /** @description Dashboard tab only. Start of the reporting period; defaults to 30 days before `to`. */
@@ -8772,7 +8887,7 @@ export interface operations {
                 /** @description Providers tab only. Renders the New provider dialog already open, so a link from another page can land on it. */
                 newProvider?: boolean;
                 /** @description Post-checkout status signal set by Stripe redirect (`success_url` / `cancel_url`), the card-save flow, and the credit top-up. Drives a one-shot notice and deep-links to the Billing tab; nothing else about the page depends on it. */
-                billing?: "success" | "cancelled" | "changed" | "credits";
+                billing?: "success" | "cancelled" | "changed" | "credits" | "card";
             };
             header?: never;
             path: {
@@ -8846,31 +8961,6 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    ConvertOrgToRegular: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                orgId: components["schemas"]["OrgID"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Converted */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["Organization"];
-                };
-            };
-            403: components["responses"]["ForbiddenResponse"];
-            409: components["responses"]["ProblemResponse"];
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
     SearchOrgMembers: {
         parameters: {
             query?: {
@@ -9257,6 +9347,7 @@ export interface operations {
             };
             400: components["responses"]["ProblemResponse"];
             403: components["responses"]["ForbiddenResponse"];
+            409: components["responses"]["ProblemResponse"];
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -9665,6 +9756,33 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateCardSetupSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Checkout session created */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uri */
+                        url: string;
+                    };
+                };
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     CancelBillingSubscription: {
         parameters: {
             query?: never;
@@ -10861,10 +10979,16 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "text/html": components["schemas"]["HtmlContent"];
                     "application/json": components["schemas"]["VerificationAnalytics"];
                 };
             };
+            /** @description A browser; redirects to the org's Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             403: components["responses"]["ForbiddenResponse"];
             default: components["responses"]["ProblemResponse"];
         };
@@ -10930,6 +11054,90 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateAiVerificationSessionRequest"];
+            };
+        };
+        responses: {
+            /** @description Session created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VerificationSession"];
+                };
+            };
+            /** @description Overage is paused: the organization is past its plan allowance, and its prepaid credits and credit-exhaustion allowance are spent (`event: billing_required`). */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The organization has no callback subscription. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The verification quota is exceeded (`event: billing_required` with a terminal `sessionId`). */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    GetAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                sessionId: components["schemas"]["SessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Ok */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AiVerificationSession"];
+                };
+            };
+            /** @description No session with this ID, or the session wasn't created by `POST /verifications/ai-sessions`. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetVerificationSession: {
         parameters: {
             query?: never;
@@ -11275,8 +11483,8 @@ export interface operations {
                             /** Format: uuid */
                             subscriptionId: string;
                             event: components["schemas"]["VerificationEvent"];
-                            /** @description The result payload, as raw text: an ECIES ciphertext (base64url) wrapping the signed result JWS when the org's `canEncryptResult` is enabled, else the plaintext signed JWS JSON. */
-                            payload: string;
+                            /** @description The payload, as raw text. For a signed result: an ECIES ciphertext (base64url) wrapping the signed result JWS when the org's `canEncryptResult` is enabled, else the plaintext signed JWS JSON. For an event notification: `{event, eventData}` JSON. `null` once a signed result was delivered, or after 7 days undelivered. */
+                            payload: string | null;
                             deliveryStatus: components["schemas"]["CallbackDeliveryStatus"];
                             createdAt: components["schemas"]["Timestamp"];
                         }[];
@@ -11353,6 +11561,7 @@ export interface operations {
             };
             403: components["responses"]["ForbiddenResponse"];
             404: components["responses"]["ProblemResponse"];
+            410: components["responses"]["ProblemResponse"];
             default: components["responses"]["ProblemResponse"];
         };
     };