@reclaimprotocol/client 0.1.33 → 0.1.34

package/lib/routes.gen.d.ts

@@ -3,10 +3,6 @@ export declare const ROUTES: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/invite";
     };
-    readonly ActivateFixWithAiRepair: {
-        readonly method: "post";
-        readonly path: "/v/{sessionId}/fix-with-ai/activate";
-    };
     readonly AddOrgMember: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/members";
@@ -131,6 +127,10 @@ export declare const ROUTES: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/agent-browser-sessions";
     };
+    readonly CreateAiVerificationSession: {
+        readonly method: "post";
+        readonly path: "/verifications/ai-sessions";
+    };
     readonly CreateBillingCheckoutSession: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/billing/checkout";
@@ -143,6 +143,10 @@ export declare const ROUTES: {
         readonly method: "post";
         readonly path: "/verifications/callback-subscriptions";
     };
+    readonly CreateCardSetupSession: {
+        readonly method: "post";
+        readonly path: "/orgs/{orgId}/billing/card";
+    };
     readonly CreateCreditCheckoutSession: {
         readonly method: "post";
         readonly path: "/orgs/{orgId}/billing/credits/checkout";
@@ -283,6 +287,10 @@ export declare const ROUTES: {
         readonly method: "get";
         readonly path: "/v/{sessionId}/fix-with-ai";
     };
+    readonly GetAiVerificationSession: {
+        readonly method: "get";
+        readonly path: "/verifications/ai-sessions/{sessionId}";
+    };
     readonly GetImage: {
         readonly method: "get";
         readonly path: "/images/{imageId}";

package/lib/routes.gen.js

@@ -1,11 +1,10 @@
 // AUTO-GENERATED by packages/app/scripts/mcp-tools-gen.ts
-// from packages/app/openapi.yaml (spec v0.1.0, source sha256:3e28ff308da3).
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
 // The hash catches drift the version misses (a spec can change without a
 // version bump) — do not remove it as "redundant" with the version.
 // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
 export const ROUTES = {
     "AcceptOrgInvite": { "method": "post", "path": "/orgs/{orgId}/invite" },
-    "ActivateFixWithAiRepair": { "method": "post", "path": "/v/{sessionId}/fix-with-ai/activate" },
     "AddOrgMember": { "method": "post", "path": "/orgs/{orgId}/members" },
     "AddProviderContributionComment": { "method": "post", "path": "/providers/{providerId}/contributions/{campaignId}/comments" },
     "AddStaffMember": { "method": "post", "path": "/admin/staff" },
@@ -37,9 +36,11 @@ export const ROUTES = {
     "ChangeOrgPlan": { "method": "post", "path": "/orgs/{orgId}/billing/change-plan" },
     "ConsentPage": { "method": "get", "path": "/oauth/consent" },
     "CreateAgentBrowserSession": { "method": "post", "path": "/orgs/{orgId}/agent-browser-sessions" },
+    "CreateAiVerificationSession": { "method": "post", "path": "/verifications/ai-sessions" },
     "CreateBillingCheckoutSession": { "method": "post", "path": "/orgs/{orgId}/billing/checkout" },
     "CreateBillingPortalSession": { "method": "post", "path": "/orgs/{orgId}/billing/portal" },
     "CreateCallbackSubscription": { "method": "post", "path": "/verifications/callback-subscriptions" },
+    "CreateCardSetupSession": { "method": "post", "path": "/orgs/{orgId}/billing/card" },
     "CreateCreditCheckoutSession": { "method": "post", "path": "/orgs/{orgId}/billing/credits/checkout" },
     "CreateFeatureFlag": { "method": "post", "path": "/admin/feature-flags" },
     "CreateFetchAuthorization": { "method": "post", "path": "/fetch/authorizations" },
@@ -75,6 +76,7 @@ export const ROUTES = {
     "Docs": { "method": "get", "path": "/docs" },
     "ExplorePreviewImage": { "method": "get", "path": "/og/explore.png" },
     "FixWithAiRecovery": { "method": "get", "path": "/v/{sessionId}/fix-with-ai" },
+    "GetAiVerificationSession": { "method": "get", "path": "/verifications/ai-sessions/{sessionId}" },
     "GetImage": { "method": "get", "path": "/images/{imageId}" },
     "GetMe": { "method": "get", "path": "/me" },
     "GetOrg": { "method": "get", "path": "/orgs/{orgId}" },

package/lib/types/openapi.gen.d.ts

@@ -11,8 +11,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Home — sign-in or Discover
-         * @description Signed in, renders Discover (see `GET /discover`). Signed out, renders the sign-in page; a signed-out link carrying Discover's `q` / `tag` redirects to `/discover` with them.
+         * Home — sign-in or the Dashboard
+         * @description Signed in, redirects to the Dashboard (`GET /orgs/{orgId}`) of the console's selected org, else the viewer's default org. Signed out, renders the sign-in page; a signed-out link carrying Discover's `q` / `tag` redirects to `/discover` with them.
          */
         get: operations["Index"];
         put?: never;
@@ -1110,6 +1110,8 @@ export interface paths {
          *     - `zkfetch` — a static informational page. zkFetch has no claimant
          *       step; nothing ever redirects a browser here by design.
          *
+         *     A session from `POST /verifications/ai-sessions` never redirects for now. While its lookup runs, the page shows a loading state and reloads itself. Then it shows the candidate pages, and asks the user to pick one when there are several (nothing happens after the pick yet). When the lookup failed, the page shows an error and closes itself after 5 seconds. A session that is no longer pending shows that it ended.
+         *     `redirectUrl`, `redirectUrlOptions`, `cancelRedirectUrl`, and `cancelRedirectUrlOptions` in the query are added to the session's `launchOptions`, where every Verification Client can read them, unless the session already has that option: options set at creation, or by an earlier visit, win. They're validated as at creation (`https:` only); an invalid one is a 400. The `portals` redirect carries the session's launch options, and any other query parameters, on to the portal.
          *     Sets `Referrer-Policy: no-referrer`, so a `sessionId` never rides along in a `Referer` header to wherever a client eventually redirects.
          */
         get: operations["SharePage"];
@@ -1235,8 +1237,8 @@ export interface paths {
         get: operations["FixWithAiRecovery"];
         put?: never;
         /**
-         * Create or reopen a billed AI repair session
-         * @description Creates one idempotent repair attempt for the selected failed provider. The source organization is charged only when a new child is created. Repeated requests reopen a pending or successful child. After a child ends in error, rejection, or expiry, a later request creates a new, separately billed attempt. The server derives the exact failed version and repair prompt.
+         * Create a billed AI repair session
+         * @description Creates a verification session that pins the selected failed provider's exact version with `preferAiAgent`, charged to the source organization. Its verification page runs the AI authoring agent instead of the stored recipe. A proven recipe is published for the provider's own organization, or submitted for admin review otherwise. Every request creates a new, separately billed session.
          */
         post: operations["CreateFixWithAiSession"];
         delete?: never;
@@ -1245,26 +1247,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v/{sessionId}/fix-with-ai/activate": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Start a pending AI repair after the verification page loads
-         * @description Idempotently queues a pending repair session. The server derives the claimant country from the request and publishes no browser credentials.
-         */
-        post: operations["ActivateFixWithAiRepair"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/.well-known/jwks.json": {
         parameters: {
             query?: never;
@@ -1776,7 +1758,7 @@ export interface paths {
         get: operations["GetOrgKeypair"];
         /**
          * Set (or rotate) the organization's encryption keypair
-         * @description Upserts the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. Setting overwrites the single row (and creates it for a keyless org). When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
+         * @description Sets the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. The call creates the key for a keyless org and is idempotent for the same key. If the org has a different key, it returns `409` unless `replace` is true. When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
          */
         put: operations["SetOrgKeypair"];
         post?: never;
@@ -2038,6 +2020,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/billing/card": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Save a card for the organization
+         * @description Owner only. Returns a Stripe Checkout URL that only saves a card (no charge), creating the organization's Stripe customer on first use. The saved card becomes the default that plans and overage bill. Stripe returns the owner to the Billing tab with `?billing=card`.
+         */
+        post: operations["CreateCardSetupSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}/billing/subscription": {
         parameters: {
             query?: never;
@@ -2334,7 +2336,7 @@ export interface paths {
         };
         /**
          * Get a specific provider version
-         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization. A member of the organization that paid for a successful AI repair may also read only the exact `fixed` version created by that repair.
+         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization.
          */
         get: operations["GetProviderVersion"];
         put?: never;
@@ -2679,7 +2681,7 @@ export interface paths {
         };
         /**
          * Verification outcomes by day, device, and country
-         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets.
+         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets. A signed-in browser asking for HTML is redirected to the org's Dashboard (`GET /orgs/{orgId}`), which shows these analytics, with the same query.
          */
         get: operations["GetOrgVerificationAnalytics"];
         put?: never;
@@ -2742,6 +2744,118 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/verifications/ai-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start an AI verification session from a prompt
+         * @description Starts a verification from a plain-language prompt, such as "verify
+         *     I'm a student at Manipal University", instead of a list of providers.
+         *     Builder creates the session at once and returns it, as
+         *     `POST /verifications/sessions` does. Send the user to its
+         *     `verificationUrl`. In the background, Builder looks up the
+         *     `candidates` (pages the user opens and signs in to) and the
+         *     `dataPoints` to verify there, usually within a few seconds. Poll
+         *     `GET /verifications/ai-sessions/{sessionId}` until its `status` is
+         *     `ready` or `failed`. The share page at `verificationUrl` shows a
+         *     loading state meanwhile.
+         *
+         *     Builder searches the provider catalog (public providers and your
+         *     organization's own providers) and the web. The web search finds a
+         *     portal the catalog lacks, or one that replaced a stale catalog page.
+         *     Builder caches a web result for a week, or for a day when it finds
+         *     nothing. A URL or domain in the prompt is a hint: pages on it rank
+         *     first.
+         *
+         *     Deterministic checks run before any AI model. Builder rejects a
+         *     prompt that contains a password, card number, or Aadhaar number, that
+         *     contains instructions for the AI, or that makes a sensitive claim,
+         *     without calling a model. Builder withholds personal values the prompt
+         *     states, such as a name, email address, phone number, or student ID,
+         *     from the model and from the cache.
+         *
+         *     Once the lookup is ready, the session's `context` holds the values
+         *     the prompt states, such as the user's name, merged with the `context`
+         *     you send. Your values take precedence.
+         *
+         *     On `201`, the session has no providers: the AI agent works out how to
+         *     verify. The organization needs a callback subscription. The session
+         *     uses one verification from the quota pool of the
+         *     `verificationClientUrl` client. A prompt the checks above reject
+         *     creates no session and is free. If the lookup then fails (the prompt
+         *     isn't a request to verify something about the user, no login page
+         *     is found, or the model or web search stays unavailable), Builder
+         *     refunds the verification, ends the session with status `error`, and
+         *     sends the failure to your `verification_error` callbacks. Builder
+         *     caches lookups, so a repeated prompt resolves faster, even when it
+         *     names a different person.
+         *
+         *         curl -X POST $BASE/verifications/ai-sessions \
+         *           -H "Authorization: Bearer $ORG_TOKEN" \
+         *           -H 'Content-Type: application/json' \
+         *           -d '{"prompt":"verify I am a student at Manipal University"}'
+         *
+         *     Errors:
+         *
+         *     - `400`: Builder rejects the prompt (for example, it targets an
+         *       internal host), `context` contains `attestationNonce` or
+         *       `attestationNonceData`, or `verificationClientUrl` isn't a
+         *       registered client.
+         *     - `409`: The organization has no callback subscription.
+         *     - `429` or `402`: The quota or credits are spent. The body has
+         *       `event: billing_required` and a terminal `sessionId`.
+         *
+         *     A failed lookup isn't an error of this request: it shows in the
+         *     `error` of `GET /verifications/ai-sessions/{sessionId}`.
+         */
+        post: operations["CreateAiVerificationSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/verifications/ai-sessions/{sessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get what an AI verification session's prompt resolved to
+         * @description Returns the lookup that `POST /verifications/ai-sessions` started for
+         *     the session. `status` is `resolving` until it finishes, then `ready`
+         *     with the pages and data points it found, or `failed` with an
+         *     `error`. Poll every second or two while it's `resolving`.
+         *
+         *     `candidates` lists the pages to open, best first, each with a
+         *     `source` of `catalog` or `web`. It usually has one page. It has
+         *     several (up to 3) only when their `confidence` values are within 0.1
+         *     of the best page's value. In that case, the user picks one on the
+         *     session's `verificationUrl`.
+         *
+         *     The `OrgToken` must resolve to the session's organization. To track
+         *     the session's status, call `GET /verifications/sessions/{sessionId}`.
+         *
+         *         curl $BASE/verifications/ai-sessions/$SESSION_ID \
+         *           -H "Authorization: Bearer $ORG_TOKEN"
+         */
+        get: operations["GetAiVerificationSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/verifications/sessions/{sessionId}": {
         parameters: {
             query?: never;
@@ -3240,6 +3354,64 @@ export interface components {
         ProviderID: string;
         /** Format: uuid */
         OrgID: string;
+        /** @description Body for `POST /verifications/ai-sessions`. */
+        CreateAiVerificationSessionRequest: {
+            /** @description What to verify, in plain language, such as "verify I'm a student at Manipal University". Builder rejects a prompt that contains credentials, card numbers, instructions for the AI, or a sensitive claim. */
+            prompt: string;
+            /** @description Values you already know, such as `{"fullName": "Asha Rao"}`. Builder merges them over the values the prompt states and returns the result in `context`. Must not contain `attestationNonce` or `attestationNonceData`; bind those after you create the session. Omit if you have none. */
+            context?: {
+                [key: string]: unknown;
+            };
+            /** @description Base URL of the registered verification client the user verifies with, as for `POST /verifications/sessions`. Builder charges this client's quota pool. If you omit it, Builder uses the default (`portals`) client. */
+            verificationClientUrl?: string;
+            /** @description ISO 3166-1 alpha-2 country code, such as `IN`. Builder searches the web from this country (Google's `gl` parameter), so portals for that country rank first. If you omit it, the search has no country preference. */
+            geoLocation?: string;
+        };
+        /** @description The lookup `POST /verifications/ai-sessions` started for a session: its status, and once `ready`, the pages to open and the data points to verify there. */
+        AiVerificationSession: {
+            /**
+             * Format: uuid
+             * @description ID of the verification session. To track the session, call `GET /verifications/sessions/{sessionId}`.
+             */
+            sessionId: string;
+            /**
+             * @description `resolving` while Builder looks up the pages and data points. `ready` when `candidates` and `dataPoints` are set. `failed` when the lookup failed: `error` says why, the session ended with status `error`, and its verification was refunded.
+             * @enum {string}
+             */
+            status: "resolving" | "ready" | "failed";
+            /** @description Why the lookup failed. Only when `status` is `failed`. Its `status` is 422 when the prompt isn't a request to verify something about the user, 404 when no login page was found, and 503 when the AI model or web search stayed unavailable. */
+            error?: components["schemas"]["Problem"];
+            /** @description Only when `status` is `ready`. The fewest data points that prove the prompt's claim, required data points first. A data point for a value the prompt states is always required. */
+            dataPoints?: {
+                /** @description Short camelCase name, such as `username`. */
+                name: string;
+                /** @description What the value is and why it proves the claim. */
+                description: string;
+                /** @description If `true`, the claim can be proven without this value, as with `isOptional` on a provider's `ResponseMatch`. If absent, the data point is required. */
+                isOptional?: boolean;
+            }[];
+            /** @description Values the signed-in account must show, such as `{"fullName": "Asha Rao"}`. Each key is the `dataPoints` name that the value pins. It combines the values the prompt states with the request's `context`. It's empty if neither has any. It's the session's `context`. If the prompt names a specific page, such as a post, `pageUrl` holds it: the page to open after the user logs in on the candidate's site. */
+            context: {
+                [key: string]: unknown;
+            };
+            /** @description Only when `status` is `ready`. Pages to open, best first. Each is the page that shows the data after the user signs in (it sends the user to sign in first), or else the sign-in page. Usually one page. Several pages appear only when the choice is ambiguous, such as a college with two or three student portals whose `confidence` values are within 0.1 of the best. In that case, the user picks one on the session's `verificationUrl`. At most one page per host. */
+            candidates?: components["schemas"]["ResolvedLoginPage"][];
+        };
+        /** @description A page for the user to open and sign in to. */
+        ResolvedLoginPage: {
+            /**
+             * Format: uri
+             * @description URL of the page to open. For a `web` page, Builder removes the query and fragment.
+             */
+            loginUrl: string;
+            /** @description Estimated likelihood, from 0 to 1, that signing in here shows the claim. Candidates below 0.5 are never returned. */
+            confidence: number;
+            /**
+             * @description Where the page came from. `catalog` is the page of a provider in the catalog (public, or your organization's own). `web` is a page that a web search found; it has no provider yet.
+             * @enum {string}
+             */
+            source: "catalog" | "web";
+        };
         /** @description A verification client id used as a filter. Hyphens are ignored. */
         VerificationClientIDFilter: string;
         /** @description An organization id used as a filter. Hyphens are ignored, so it matches with or without them; an id that matches no organization returns nothing. */
@@ -3744,6 +3916,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Body for `PUT /orgs/{orgId}/keypair`. Carries the org's eth public key as a secp256k1 public JWK. */
         OrgKeypairJwkRequest: {
@@ -3751,6 +3928,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Response of `POST /orgs/{orgId}/token`. The plaintext `orgSecret` is shown **only once** here; the server stores only its HMAC. Use it as `Authorization: Bearer <orgSecret>` (the `OrgToken` scheme). An org may hold several keys; issuing a new one does not affect the others. */
         OrgToken: {
@@ -5710,7 +5892,7 @@ export interface components {
             resolvedVersion: string;
             /** Format: uri */
             initialUrl: string;
-            /** @description Legacy-only preference. Builder clients always run the structured recipe and never enable AI or manual verification from this value. */
+            /** @description Effective AI-agent preference: the session's choice, else whether the version is an `llm` provider. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent: boolean;
             geoLocation?: string;
             jsUserScripts?: string;
@@ -5760,7 +5942,7 @@ export interface components {
             preferredLocale?: string;
             /** @description When the organization-bound legacy TEE nonce context was first stored. The nonce data itself is present in `context` as `attestationNonce` and `attestationNonceData`. */
             teeNonceBoundAt?: components["schemas"]["Timestamp"];
-            /** @description Legacy-only preference echoed for compatibility. Builder-mode clients run the structured recipe and do not enable AI or manual verification. */
+            /** @description The creator's AI-agent preference. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent?: boolean;
             /** @description Whether this session was created with diagnostic mode enabled (see CreateVerificationSessionRequest.diagnostics). Set once at creation and never changes afterward. Gates whether Builder records claimant IP addresses and how much detail diagnostic events carry; the `diag` parameter on `verificationUrl` mirrors this value and is not itself authoritative. */
             diagnostics: boolean;
@@ -5828,7 +6010,7 @@ export interface components {
             themeId?: components["schemas"]["ThemeID"];
             /** @description Optional locale override for this verification session. It takes precedence over the organization theme's preferred locale. */
             preferredLocale?: string;
-            /** @description Legacy-only preference. Builder mode runs the structured recipe and does not enable AI or manual verification. Omit this field for Builder-mode sessions; dual-mode clients may continue to interpret it only on their legacy path. */
+            /** @description When true, the Builder verification page runs the AI authoring agent instead of the providers' structured recipes. A proven recipe is published only for the provider's own organization; for any other provider it is submitted for admin review. Omit it to run the stored recipes. */
             preferAiAgent?: boolean;
             /** @description Optional; omit or send false for a normal session. Opts this session into diagnostic mode. A diagnostic session records more event detail, including personal data such as the claimant's IP addresses (see ClaimantDetails.network). Builder appends `diag=1` to the returned `verificationUrl` for a diagnostic session and strips any `diag` value the Consumer's own `verificationClientUrl` carries, so this field — not the URL — is the only way to turn diagnostics on. Treat a diagnostic verification URL as sensitive, and don't hand it to a claimant by default. */
             diagnostics?: boolean;
@@ -6299,6 +6481,13 @@ export interface operations {
         requestBody?: never;
         responses: {
             200: components["responses"]["HTMLResponse"];
+            /** @description Signed in; redirects to the Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -8013,6 +8202,14 @@ export interface operations {
                 api?: "2";
                 /** @description Backend-derived echo of the session's `diagnostics` field, carried through to the launched destination unchanged. See the same parameter on `VerificationPage`. */
                 diag?: "1";
+                /** @description Added to the session's `launchOptions` if it has none. */
+                redirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                redirectUrlOptions?: string;
+                /** @description Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrlOptions?: string;
             };
             header?: never;
             path: {
@@ -8179,7 +8376,7 @@ export interface operations {
                     "text/html": components["schemas"]["HtmlContent"];
                 };
             };
-            /** @description The new or existing repair session. */
+            /** @description The new repair session. */
             201: {
                 headers: {
                     [name: string]: unknown;
@@ -8191,28 +8388,6 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    ActivateFixWithAiRepair: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                sessionId: components["schemas"]["SessionID"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The repair was queued or was already active. */
-            204: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            409: components["responses"]["ProblemResponse"];
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
     JwksJson: {
         parameters: {
             query?: never;
@@ -8687,6 +8862,8 @@ export interface operations {
                 track?: "agent" | "sdk" | "http";
                 /** @description Integrate tab, agent track only. Which coding agent's install command to show. */
                 agent?: "claude" | "copilot" | "cursor" | "omp" | "opencode" | "codex" | "antigravity" | "others";
+                /** @description Integrate tab, agent track only. What users prove, as typed into the prompt's goal field; kept when another agent is picked. */
+                goal?: string;
                 /** @description Integrate tab: the providers to show in the examples in place of placeholder ids, for example when arriving from a provider page or a build page. Repeat to pass several. Dashboard tab: scopes the report to sessions that ran this provider (the first one); options come from `GET /orgs/{orgId}/providers/used`. */
                 providerId?: components["schemas"]["ProviderID"][];
                 /** @description Integrate tab, HTTP track only. Which Verification Client the create-session example targets. `auto` (the default) leaves `verificationClientUrl` out. */
@@ -8704,7 +8881,7 @@ export interface operations {
                 /** @description Providers tab only. Renders the New provider dialog already open, so a link from another page can land on it. */
                 newProvider?: boolean;
                 /** @description Post-checkout status signal set by Stripe redirect (`success_url` / `cancel_url`), the card-save flow, and the credit top-up. Drives a one-shot notice and deep-links to the Billing tab; nothing else about the page depends on it. */
-                billing?: "success" | "cancelled" | "changed" | "credits";
+                billing?: "success" | "cancelled" | "changed" | "credits" | "card";
             };
             header?: never;
             path: {
@@ -9164,6 +9341,7 @@ export interface operations {
             };
             400: components["responses"]["ProblemResponse"];
             403: components["responses"]["ForbiddenResponse"];
+            409: components["responses"]["ProblemResponse"];
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -9572,6 +9750,33 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateCardSetupSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Checkout session created */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uri */
+                        url: string;
+                    };
+                };
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     CancelBillingSubscription: {
         parameters: {
             query?: never;
@@ -10768,10 +10973,16 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "text/html": components["schemas"]["HtmlContent"];
                     "application/json": components["schemas"]["VerificationAnalytics"];
                 };
             };
+            /** @description A browser; redirects to the org's Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             403: components["responses"]["ForbiddenResponse"];
             default: components["responses"]["ProblemResponse"];
         };
@@ -10837,6 +11048,90 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateAiVerificationSessionRequest"];
+            };
+        };
+        responses: {
+            /** @description Session created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VerificationSession"];
+                };
+            };
+            /** @description Overage is paused: the organization is past its plan allowance, and its prepaid credits and credit-exhaustion allowance are spent (`event: billing_required`). */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The organization has no callback subscription. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The verification quota is exceeded (`event: billing_required` with a terminal `sessionId`). */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    GetAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                sessionId: components["schemas"]["SessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Ok */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AiVerificationSession"];
+                };
+            };
+            /** @description No session with this ID, or the session wasn't created by `POST /verifications/ai-sessions`. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetVerificationSession: {
         parameters: {
             query?: never;

package/lib/types/openapi.gen.js

@@ -1,5 +1,5 @@
 // AUTO-GENERATED by packages/app/scripts/openapi-typegen.ts
-// from packages/app/openapi.yaml (spec v0.1.0, source sha256:3e28ff308da3).
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
 // The hash catches drift the version misses (a spec can change without a
 // version bump) — do not remove it as "redundant" with the version.
 // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@reclaimprotocol/client",
 	"title": "Reclaim Client",
-	"version": "0.1.33",
+	"version": "0.1.34",
 	"description": "Typed SDK/HTTP client SDK for the Reclaim Protocol — the programmatic way to use Reclaim Protocol to verify **data points** about your users (a follower count, an account balance, an order). Can be directly integrated by apps to request verification for their users using Reclaim Protocol and verify the results.",
 	"type": "module",
 	"sideEffects": false,

package/src/routes.gen.ts

@@ -1,12 +1,11 @@
 // AUTO-GENERATED by packages/app/scripts/mcp-tools-gen.ts
-// from packages/app/openapi.yaml (spec v0.1.0, source sha256:3e28ff308da3).
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
 // The hash catches drift the version misses (a spec can change without a
 // version bump) — do not remove it as "redundant" with the version.
 // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
 
 export const ROUTES = {
 	"AcceptOrgInvite": {"method":"post","path":"/orgs/{orgId}/invite"},
-	"ActivateFixWithAiRepair": {"method":"post","path":"/v/{sessionId}/fix-with-ai/activate"},
 	"AddOrgMember": {"method":"post","path":"/orgs/{orgId}/members"},
 	"AddProviderContributionComment": {"method":"post","path":"/providers/{providerId}/contributions/{campaignId}/comments"},
 	"AddStaffMember": {"method":"post","path":"/admin/staff"},
@@ -38,9 +37,11 @@ export const ROUTES = {
 	"ChangeOrgPlan": {"method":"post","path":"/orgs/{orgId}/billing/change-plan"},
 	"ConsentPage": {"method":"get","path":"/oauth/consent"},
 	"CreateAgentBrowserSession": {"method":"post","path":"/orgs/{orgId}/agent-browser-sessions"},
+	"CreateAiVerificationSession": {"method":"post","path":"/verifications/ai-sessions"},
 	"CreateBillingCheckoutSession": {"method":"post","path":"/orgs/{orgId}/billing/checkout"},
 	"CreateBillingPortalSession": {"method":"post","path":"/orgs/{orgId}/billing/portal"},
 	"CreateCallbackSubscription": {"method":"post","path":"/verifications/callback-subscriptions"},
+	"CreateCardSetupSession": {"method":"post","path":"/orgs/{orgId}/billing/card"},
 	"CreateCreditCheckoutSession": {"method":"post","path":"/orgs/{orgId}/billing/credits/checkout"},
 	"CreateFeatureFlag": {"method":"post","path":"/admin/feature-flags"},
 	"CreateFetchAuthorization": {"method":"post","path":"/fetch/authorizations"},
@@ -76,6 +77,7 @@ export const ROUTES = {
 	"Docs": {"method":"get","path":"/docs"},
 	"ExplorePreviewImage": {"method":"get","path":"/og/explore.png"},
 	"FixWithAiRecovery": {"method":"get","path":"/v/{sessionId}/fix-with-ai"},
+	"GetAiVerificationSession": {"method":"get","path":"/verifications/ai-sessions/{sessionId}"},
 	"GetImage": {"method":"get","path":"/images/{imageId}"},
 	"GetMe": {"method":"get","path":"/me"},
 	"GetOrg": {"method":"get","path":"/orgs/{orgId}"},

package/src/types/openapi.gen.ts

@@ -1,5 +1,5 @@
 // AUTO-GENERATED by packages/app/scripts/openapi-typegen.ts
-// from packages/app/openapi.yaml (spec v0.1.0, source sha256:3e28ff308da3).
+// from packages/app/openapi.yaml (spec v0.1.0, source sha256:e2db795ab15c).
 // The hash catches drift the version misses (a spec can change without a
 // version bump) — do not remove it as "redundant" with the version.
 // Run `npm run openapi:gen --workspace=packages/app` to regenerate. Do not edit by hand.
@@ -17,8 +17,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Home — sign-in or Discover
-         * @description Signed in, renders Discover (see `GET /discover`). Signed out, renders the sign-in page; a signed-out link carrying Discover's `q` / `tag` redirects to `/discover` with them.
+         * Home — sign-in or the Dashboard
+         * @description Signed in, redirects to the Dashboard (`GET /orgs/{orgId}`) of the console's selected org, else the viewer's default org. Signed out, renders the sign-in page; a signed-out link carrying Discover's `q` / `tag` redirects to `/discover` with them.
          */
         get: operations["Index"];
         put?: never;
@@ -1116,6 +1116,8 @@ export interface paths {
          *     - `zkfetch` — a static informational page. zkFetch has no claimant
          *       step; nothing ever redirects a browser here by design.
          *
+         *     A session from `POST /verifications/ai-sessions` never redirects for now. While its lookup runs, the page shows a loading state and reloads itself. Then it shows the candidate pages, and asks the user to pick one when there are several (nothing happens after the pick yet). When the lookup failed, the page shows an error and closes itself after 5 seconds. A session that is no longer pending shows that it ended.
+         *     `redirectUrl`, `redirectUrlOptions`, `cancelRedirectUrl`, and `cancelRedirectUrlOptions` in the query are added to the session's `launchOptions`, where every Verification Client can read them, unless the session already has that option: options set at creation, or by an earlier visit, win. They're validated as at creation (`https:` only); an invalid one is a 400. The `portals` redirect carries the session's launch options, and any other query parameters, on to the portal.
          *     Sets `Referrer-Policy: no-referrer`, so a `sessionId` never rides along in a `Referer` header to wherever a client eventually redirects.
          */
         get: operations["SharePage"];
@@ -1241,8 +1243,8 @@ export interface paths {
         get: operations["FixWithAiRecovery"];
         put?: never;
         /**
-         * Create or reopen a billed AI repair session
-         * @description Creates one idempotent repair attempt for the selected failed provider. The source organization is charged only when a new child is created. Repeated requests reopen a pending or successful child. After a child ends in error, rejection, or expiry, a later request creates a new, separately billed attempt. The server derives the exact failed version and repair prompt.
+         * Create a billed AI repair session
+         * @description Creates a verification session that pins the selected failed provider's exact version with `preferAiAgent`, charged to the source organization. Its verification page runs the AI authoring agent instead of the stored recipe. A proven recipe is published for the provider's own organization, or submitted for admin review otherwise. Every request creates a new, separately billed session.
          */
         post: operations["CreateFixWithAiSession"];
         delete?: never;
@@ -1251,26 +1253,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v/{sessionId}/fix-with-ai/activate": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * Start a pending AI repair after the verification page loads
-         * @description Idempotently queues a pending repair session. The server derives the claimant country from the request and publishes no browser credentials.
-         */
-        post: operations["ActivateFixWithAiRepair"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/.well-known/jwks.json": {
         parameters: {
             query?: never;
@@ -1782,7 +1764,7 @@ export interface paths {
         get: operations["GetOrgKeypair"];
         /**
          * Set (or rotate) the organization's encryption keypair
-         * @description Upserts the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. Setting overwrites the single row (and creates it for a keyless org). When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
+         * @description Sets the organization's single Ethereum (secp256k1) encryption keypair. The body carries the org's **eth public key** — as an uncompressed hex string (`0x04`+128 hex) or a secp256k1 public JWK (`{kty:'EC', crv:'secp256k1', x, y}`) — and `canEncryptResult`. The matching private key never leaves the consumer. The call creates the key for a keyless org and is idempotent for the same key. If the org has a different key, it returns `409` unless `replace` is true. When `canEncryptResult` is true, terminal results are delivered as an ECIES ciphertext encrypted to this key; otherwise plaintext. Authenticated by the org's `OrgToken` or a human `BearerAuth` session for an active member of the org.
          */
         put: operations["SetOrgKeypair"];
         post?: never;
@@ -2044,6 +2026,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/orgs/{orgId}/billing/card": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Save a card for the organization
+         * @description Owner only. Returns a Stripe Checkout URL that only saves a card (no charge), creating the organization's Stripe customer on first use. The saved card becomes the default that plans and overage bill. Stripe returns the owner to the Billing tab with `?billing=card`.
+         */
+        post: operations["CreateCardSetupSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/orgs/{orgId}/billing/subscription": {
         parameters: {
             query?: never;
@@ -2340,7 +2342,7 @@ export interface paths {
         };
         /**
          * Get a specific provider version
-         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization. A member of the organization that paid for a successful AI repair may also read only the exact `fixed` version created by that repair.
+         * @description Fetches one exact canonical version. Trunk is public when the provider is public. Non-trunk versions are visible to admins and members of the provider's organization.
          */
         get: operations["GetProviderVersion"];
         put?: never;
@@ -2685,7 +2687,7 @@ export interface paths {
         };
         /**
          * Verification outcomes by day, device, and country
-         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets.
+         * @description Organization-scoped creation cohorts in UTC. Outcomes are current at query time. Unknown device and country values have their own buckets. A signed-in browser asking for HTML is redirected to the org's Dashboard (`GET /orgs/{orgId}`), which shows these analytics, with the same query.
          */
         get: operations["GetOrgVerificationAnalytics"];
         put?: never;
@@ -2748,6 +2750,118 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/verifications/ai-sessions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Start an AI verification session from a prompt
+         * @description Starts a verification from a plain-language prompt, such as "verify
+         *     I'm a student at Manipal University", instead of a list of providers.
+         *     Builder creates the session at once and returns it, as
+         *     `POST /verifications/sessions` does. Send the user to its
+         *     `verificationUrl`. In the background, Builder looks up the
+         *     `candidates` (pages the user opens and signs in to) and the
+         *     `dataPoints` to verify there, usually within a few seconds. Poll
+         *     `GET /verifications/ai-sessions/{sessionId}` until its `status` is
+         *     `ready` or `failed`. The share page at `verificationUrl` shows a
+         *     loading state meanwhile.
+         *
+         *     Builder searches the provider catalog (public providers and your
+         *     organization's own providers) and the web. The web search finds a
+         *     portal the catalog lacks, or one that replaced a stale catalog page.
+         *     Builder caches a web result for a week, or for a day when it finds
+         *     nothing. A URL or domain in the prompt is a hint: pages on it rank
+         *     first.
+         *
+         *     Deterministic checks run before any AI model. Builder rejects a
+         *     prompt that contains a password, card number, or Aadhaar number, that
+         *     contains instructions for the AI, or that makes a sensitive claim,
+         *     without calling a model. Builder withholds personal values the prompt
+         *     states, such as a name, email address, phone number, or student ID,
+         *     from the model and from the cache.
+         *
+         *     Once the lookup is ready, the session's `context` holds the values
+         *     the prompt states, such as the user's name, merged with the `context`
+         *     you send. Your values take precedence.
+         *
+         *     On `201`, the session has no providers: the AI agent works out how to
+         *     verify. The organization needs a callback subscription. The session
+         *     uses one verification from the quota pool of the
+         *     `verificationClientUrl` client. A prompt the checks above reject
+         *     creates no session and is free. If the lookup then fails (the prompt
+         *     isn't a request to verify something about the user, no login page
+         *     is found, or the model or web search stays unavailable), Builder
+         *     refunds the verification, ends the session with status `error`, and
+         *     sends the failure to your `verification_error` callbacks. Builder
+         *     caches lookups, so a repeated prompt resolves faster, even when it
+         *     names a different person.
+         *
+         *         curl -X POST $BASE/verifications/ai-sessions \
+         *           -H "Authorization: Bearer $ORG_TOKEN" \
+         *           -H 'Content-Type: application/json' \
+         *           -d '{"prompt":"verify I am a student at Manipal University"}'
+         *
+         *     Errors:
+         *
+         *     - `400`: Builder rejects the prompt (for example, it targets an
+         *       internal host), `context` contains `attestationNonce` or
+         *       `attestationNonceData`, or `verificationClientUrl` isn't a
+         *       registered client.
+         *     - `409`: The organization has no callback subscription.
+         *     - `429` or `402`: The quota or credits are spent. The body has
+         *       `event: billing_required` and a terminal `sessionId`.
+         *
+         *     A failed lookup isn't an error of this request: it shows in the
+         *     `error` of `GET /verifications/ai-sessions/{sessionId}`.
+         */
+        post: operations["CreateAiVerificationSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/verifications/ai-sessions/{sessionId}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get what an AI verification session's prompt resolved to
+         * @description Returns the lookup that `POST /verifications/ai-sessions` started for
+         *     the session. `status` is `resolving` until it finishes, then `ready`
+         *     with the pages and data points it found, or `failed` with an
+         *     `error`. Poll every second or two while it's `resolving`.
+         *
+         *     `candidates` lists the pages to open, best first, each with a
+         *     `source` of `catalog` or `web`. It usually has one page. It has
+         *     several (up to 3) only when their `confidence` values are within 0.1
+         *     of the best page's value. In that case, the user picks one on the
+         *     session's `verificationUrl`.
+         *
+         *     The `OrgToken` must resolve to the session's organization. To track
+         *     the session's status, call `GET /verifications/sessions/{sessionId}`.
+         *
+         *         curl $BASE/verifications/ai-sessions/$SESSION_ID \
+         *           -H "Authorization: Bearer $ORG_TOKEN"
+         */
+        get: operations["GetAiVerificationSession"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/verifications/sessions/{sessionId}": {
         parameters: {
             query?: never;
@@ -3246,6 +3360,64 @@ export interface components {
         ProviderID: string;
         /** Format: uuid */
         OrgID: string;
+        /** @description Body for `POST /verifications/ai-sessions`. */
+        CreateAiVerificationSessionRequest: {
+            /** @description What to verify, in plain language, such as "verify I'm a student at Manipal University". Builder rejects a prompt that contains credentials, card numbers, instructions for the AI, or a sensitive claim. */
+            prompt: string;
+            /** @description Values you already know, such as `{"fullName": "Asha Rao"}`. Builder merges them over the values the prompt states and returns the result in `context`. Must not contain `attestationNonce` or `attestationNonceData`; bind those after you create the session. Omit if you have none. */
+            context?: {
+                [key: string]: unknown;
+            };
+            /** @description Base URL of the registered verification client the user verifies with, as for `POST /verifications/sessions`. Builder charges this client's quota pool. If you omit it, Builder uses the default (`portals`) client. */
+            verificationClientUrl?: string;
+            /** @description ISO 3166-1 alpha-2 country code, such as `IN`. Builder searches the web from this country (Google's `gl` parameter), so portals for that country rank first. If you omit it, the search has no country preference. */
+            geoLocation?: string;
+        };
+        /** @description The lookup `POST /verifications/ai-sessions` started for a session: its status, and once `ready`, the pages to open and the data points to verify there. */
+        AiVerificationSession: {
+            /**
+             * Format: uuid
+             * @description ID of the verification session. To track the session, call `GET /verifications/sessions/{sessionId}`.
+             */
+            sessionId: string;
+            /**
+             * @description `resolving` while Builder looks up the pages and data points. `ready` when `candidates` and `dataPoints` are set. `failed` when the lookup failed: `error` says why, the session ended with status `error`, and its verification was refunded.
+             * @enum {string}
+             */
+            status: "resolving" | "ready" | "failed";
+            /** @description Why the lookup failed. Only when `status` is `failed`. Its `status` is 422 when the prompt isn't a request to verify something about the user, 404 when no login page was found, and 503 when the AI model or web search stayed unavailable. */
+            error?: components["schemas"]["Problem"];
+            /** @description Only when `status` is `ready`. The fewest data points that prove the prompt's claim, required data points first. A data point for a value the prompt states is always required. */
+            dataPoints?: {
+                /** @description Short camelCase name, such as `username`. */
+                name: string;
+                /** @description What the value is and why it proves the claim. */
+                description: string;
+                /** @description If `true`, the claim can be proven without this value, as with `isOptional` on a provider's `ResponseMatch`. If absent, the data point is required. */
+                isOptional?: boolean;
+            }[];
+            /** @description Values the signed-in account must show, such as `{"fullName": "Asha Rao"}`. Each key is the `dataPoints` name that the value pins. It combines the values the prompt states with the request's `context`. It's empty if neither has any. It's the session's `context`. If the prompt names a specific page, such as a post, `pageUrl` holds it: the page to open after the user logs in on the candidate's site. */
+            context: {
+                [key: string]: unknown;
+            };
+            /** @description Only when `status` is `ready`. Pages to open, best first. Each is the page that shows the data after the user signs in (it sends the user to sign in first), or else the sign-in page. Usually one page. Several pages appear only when the choice is ambiguous, such as a college with two or three student portals whose `confidence` values are within 0.1 of the best. In that case, the user picks one on the session's `verificationUrl`. At most one page per host. */
+            candidates?: components["schemas"]["ResolvedLoginPage"][];
+        };
+        /** @description A page for the user to open and sign in to. */
+        ResolvedLoginPage: {
+            /**
+             * Format: uri
+             * @description URL of the page to open. For a `web` page, Builder removes the query and fragment.
+             */
+            loginUrl: string;
+            /** @description Estimated likelihood, from 0 to 1, that signing in here shows the claim. Candidates below 0.5 are never returned. */
+            confidence: number;
+            /**
+             * @description Where the page came from. `catalog` is the page of a provider in the catalog (public, or your organization's own). `web` is a page that a web search found; it has no provider yet.
+             * @enum {string}
+             */
+            source: "catalog" | "web";
+        };
         /** @description A verification client id used as a filter. Hyphens are ignored. */
         VerificationClientIDFilter: string;
         /** @description An organization id used as a filter. Hyphens are ignored, so it matches with or without them; an id that matches no organization returns nothing. */
@@ -3750,6 +3922,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Body for `PUT /orgs/{orgId}/keypair`. Carries the org's eth public key as a secp256k1 public JWK. */
         OrgKeypairJwkRequest: {
@@ -3757,6 +3934,11 @@ export interface components {
             /** @default false */
             canEncryptResult: boolean;
             label?: string;
+            /**
+             * @description Set to true to replace an existing, different public key. Without it, the call returns 409 when the organization already has another key. Results encrypted to the old key can no longer be decrypted.
+             * @default false
+             */
+            replace: boolean;
         };
         /** @description Response of `POST /orgs/{orgId}/token`. The plaintext `orgSecret` is shown **only once** here; the server stores only its HMAC. Use it as `Authorization: Bearer <orgSecret>` (the `OrgToken` scheme). An org may hold several keys; issuing a new one does not affect the others. */
         OrgToken: {
@@ -5716,7 +5898,7 @@ export interface components {
             resolvedVersion: string;
             /** Format: uri */
             initialUrl: string;
-            /** @description Legacy-only preference. Builder clients always run the structured recipe and never enable AI or manual verification from this value. */
+            /** @description Effective AI-agent preference: the session's choice, else whether the version is an `llm` provider. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent: boolean;
             geoLocation?: string;
             jsUserScripts?: string;
@@ -5766,7 +5948,7 @@ export interface components {
             preferredLocale?: string;
             /** @description When the organization-bound legacy TEE nonce context was first stored. The nonce data itself is present in `context` as `attestationNonce` and `attestationNonceData`. */
             teeNonceBoundAt?: components["schemas"]["Timestamp"];
-            /** @description Legacy-only preference echoed for compatibility. Builder-mode clients run the structured recipe and do not enable AI or manual verification. */
+            /** @description The creator's AI-agent preference. When true, the Builder verification page runs the AI authoring agent instead of the structured recipe. */
             preferAiAgent?: boolean;
             /** @description Whether this session was created with diagnostic mode enabled (see CreateVerificationSessionRequest.diagnostics). Set once at creation and never changes afterward. Gates whether Builder records claimant IP addresses and how much detail diagnostic events carry; the `diag` parameter on `verificationUrl` mirrors this value and is not itself authoritative. */
             diagnostics: boolean;
@@ -5834,7 +6016,7 @@ export interface components {
             themeId?: components["schemas"]["ThemeID"];
             /** @description Optional locale override for this verification session. It takes precedence over the organization theme's preferred locale. */
             preferredLocale?: string;
-            /** @description Legacy-only preference. Builder mode runs the structured recipe and does not enable AI or manual verification. Omit this field for Builder-mode sessions; dual-mode clients may continue to interpret it only on their legacy path. */
+            /** @description When true, the Builder verification page runs the AI authoring agent instead of the providers' structured recipes. A proven recipe is published only for the provider's own organization; for any other provider it is submitted for admin review. Omit it to run the stored recipes. */
             preferAiAgent?: boolean;
             /** @description Optional; omit or send false for a normal session. Opts this session into diagnostic mode. A diagnostic session records more event detail, including personal data such as the claimant's IP addresses (see ClaimantDetails.network). Builder appends `diag=1` to the returned `verificationUrl` for a diagnostic session and strips any `diag` value the Consumer's own `verificationClientUrl` carries, so this field — not the URL — is the only way to turn diagnostics on. Treat a diagnostic verification URL as sensitive, and don't hand it to a claimant by default. */
             diagnostics?: boolean;
@@ -6305,6 +6487,13 @@ export interface operations {
         requestBody?: never;
         responses: {
             200: components["responses"]["HTMLResponse"];
+            /** @description Signed in; redirects to the Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -8019,6 +8208,14 @@ export interface operations {
                 api?: "2";
                 /** @description Backend-derived echo of the session's `diagnostics` field, carried through to the launched destination unchanged. See the same parameter on `VerificationPage`. */
                 diag?: "1";
+                /** @description Added to the session's `launchOptions` if it has none. */
+                redirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                redirectUrlOptions?: string;
+                /** @description Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrl?: string;
+                /** @description JSON `VerificationLaunchRedirectOptions`. Added to the session's `launchOptions` if it has none. */
+                cancelRedirectUrlOptions?: string;
             };
             header?: never;
             path: {
@@ -8185,7 +8382,7 @@ export interface operations {
                     "text/html": components["schemas"]["HtmlContent"];
                 };
             };
-            /** @description The new or existing repair session. */
+            /** @description The new repair session. */
             201: {
                 headers: {
                     [name: string]: unknown;
@@ -8197,28 +8394,6 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
-    ActivateFixWithAiRepair: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                sessionId: components["schemas"]["SessionID"];
-            };
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The repair was queued or was already active. */
-            204: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content?: never;
-            };
-            409: components["responses"]["ProblemResponse"];
-            default: components["responses"]["ProblemResponse"];
-        };
-    };
     JwksJson: {
         parameters: {
             query?: never;
@@ -8693,6 +8868,8 @@ export interface operations {
                 track?: "agent" | "sdk" | "http";
                 /** @description Integrate tab, agent track only. Which coding agent's install command to show. */
                 agent?: "claude" | "copilot" | "cursor" | "omp" | "opencode" | "codex" | "antigravity" | "others";
+                /** @description Integrate tab, agent track only. What users prove, as typed into the prompt's goal field; kept when another agent is picked. */
+                goal?: string;
                 /** @description Integrate tab: the providers to show in the examples in place of placeholder ids, for example when arriving from a provider page or a build page. Repeat to pass several. Dashboard tab: scopes the report to sessions that ran this provider (the first one); options come from `GET /orgs/{orgId}/providers/used`. */
                 providerId?: components["schemas"]["ProviderID"][];
                 /** @description Integrate tab, HTTP track only. Which Verification Client the create-session example targets. `auto` (the default) leaves `verificationClientUrl` out. */
@@ -8710,7 +8887,7 @@ export interface operations {
                 /** @description Providers tab only. Renders the New provider dialog already open, so a link from another page can land on it. */
                 newProvider?: boolean;
                 /** @description Post-checkout status signal set by Stripe redirect (`success_url` / `cancel_url`), the card-save flow, and the credit top-up. Drives a one-shot notice and deep-links to the Billing tab; nothing else about the page depends on it. */
-                billing?: "success" | "cancelled" | "changed" | "credits";
+                billing?: "success" | "cancelled" | "changed" | "credits" | "card";
             };
             header?: never;
             path: {
@@ -9170,6 +9347,7 @@ export interface operations {
             };
             400: components["responses"]["ProblemResponse"];
             403: components["responses"]["ForbiddenResponse"];
+            409: components["responses"]["ProblemResponse"];
             default: components["responses"]["ProblemResponse"];
         };
     };
@@ -9578,6 +9756,33 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateCardSetupSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                orgId: components["schemas"]["OrgID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Checkout session created */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        /** Format: uri */
+                        url: string;
+                    };
+                };
+            };
+            403: components["responses"]["ForbiddenResponse"];
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     CancelBillingSubscription: {
         parameters: {
             query?: never;
@@ -10774,10 +10979,16 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "text/html": components["schemas"]["HtmlContent"];
                     "application/json": components["schemas"]["VerificationAnalytics"];
                 };
             };
+            /** @description A browser; redirects to the org's Dashboard. */
+            302: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
             403: components["responses"]["ForbiddenResponse"];
             default: components["responses"]["ProblemResponse"];
         };
@@ -10843,6 +11054,90 @@ export interface operations {
             default: components["responses"]["ProblemResponse"];
         };
     };
+    CreateAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody: {
+            content: {
+                "application/json": components["schemas"]["CreateAiVerificationSessionRequest"];
+            };
+        };
+        responses: {
+            /** @description Session created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["VerificationSession"];
+                };
+            };
+            /** @description Overage is paused: the organization is past its plan allowance, and its prepaid credits and credit-exhaustion allowance are spent (`event: billing_required`). */
+            402: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The organization has no callback subscription. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            /** @description The verification quota is exceeded (`event: billing_required` with a terminal `sessionId`). */
+            429: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
+    GetAiVerificationSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                sessionId: components["schemas"]["SessionID"];
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Ok */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["AiVerificationSession"];
+                };
+            };
+            /** @description No session with this ID, or the session wasn't created by `POST /verifications/ai-sessions`. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["Problem"];
+                };
+            };
+            default: components["responses"]["ProblemResponse"];
+        };
+    };
     GetVerificationSession: {
         parameters: {
             query?: never;