diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 86f853f..491db96 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,11 +22,25 @@ jobs:
           node-version: '18'
 
       - name: Install dependencies
-        run: |
-          yarn install
+        run: yarn install
 
       - name: Check types
-        run: |
-          yarn build
+        run: ./scripts/lint
+  test:
+    name: test
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: '18'
+
+      - name: Bootstrap
+        run: ./scripts/bootstrap
+
+      - name: Run tests
+        run: ./scripts/test
 
-  
diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml
index 044eb04..575b094 100644
--- a/.github/workflows/publish-npm.yml
+++ b/.github/workflows/publish-npm.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set up Node
         uses: actions/setup-node@v3
diff --git a/.github/workflows/release-doctor.yml b/.github/workflows/release-doctor.yml
index 1f47739..3d8a171 100644
--- a/.github/workflows/release-doctor.yml
+++ b/.github/workflows/release-doctor.yml
@@ -10,7 +10,7 @@ jobs:
     if: github.repository == 'riza-io/riza-api-node' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next')
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Check release environment
         run: |
diff --git a/.gitignore b/.gitignore
index 425a011..9a5858a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,7 @@
 node_modules
 yarn-error.log
 codegen.log
+Brewfile.lock.json
 dist
 /deno
 /*.tgz
diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index 12342be..5375ff4 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.1.0-alpha.5"
+  ".": "0.1.0-alpha.6"
 }
diff --git a/.stats.yml b/.stats.yml
index 7c8fc49..cbc2895 100644
--- a/.stats.yml
+++ b/.stats.yml
@@ -1 +1,2 @@
 configured_endpoints: 1
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/riza%2Friza-api-7e044297a8d3c5c64964532d19e0667b059ef5a121cf3c1e64b806eec55e0767.yml
diff --git a/Brewfile b/Brewfile
new file mode 100644
index 0000000..e4feee6
--- /dev/null
+++ b/Brewfile
@@ -0,0 +1 @@
+brew "node"
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 02f4846..bb01ce0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.1.0-alpha.6 (2024-05-22)
+
+Full Changelog: [v0.1.0-alpha.5...v0.1.0-alpha.6](https://github.com/riza-io/riza-api-node/compare/v0.1.0-alpha.5...v0.1.0-alpha.6)
+
+### Features
+
+* **api:** OpenAPI spec update via Stainless API ([#13](https://github.com/riza-io/riza-api-node/issues/13)) ([8d98f3f](https://github.com/riza-io/riza-api-node/commit/8d98f3f51cb34ac834f890e5125a3d96f586c477))
+* **api:** OpenAPI spec update via Stainless API ([#15](https://github.com/riza-io/riza-api-node/issues/15)) ([d4a0b85](https://github.com/riza-io/riza-api-node/commit/d4a0b85ed5ae047196ba49fcb159abe0fb2eaa38))
+
 ## 0.1.0-alpha.5 (2024-04-23)
 
 Full Changelog: [v0.1.0-alpha.4...v0.1.0-alpha.5](https://github.com/riza-io/riza-api-node/compare/v0.1.0-alpha.4...v0.1.0-alpha.5)
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..3038b1f
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,27 @@
+# Security Policy
+
+## Reporting Security Issues
+
+This SDK is generated by [Stainless Software Inc](http://stainlessapi.com). Stainless takes security seriously, and encourages you to report any security vulnerability promptly so that appropriate action can be taken.
+
+To report a security issue, please contact the Stainless team at security@stainlessapi.com.
+
+## Responsible Disclosure
+
+We appreciate the efforts of security researchers and individuals who help us maintain the security of
+SDKs we generate. If you believe you have found a security vulnerability, please adhere to responsible
+disclosure practices by allowing us a reasonable amount of time to investigate and address the issue
+before making any information public.
+
+## Reporting Non-SDK Related Security Issues
+
+If you encounter security issues that are not directly related to SDKs but pertain to the services
+or products provided by Riza please follow the respective company's security reporting guidelines.
+
+### Riza Terms and Policies
+
+Please contact hello@riza.io for any questions or concerns regarding security of our services.
+
+---
+
+Thank you for helping us keep the SDKs and systems they interact with secure.
diff --git a/bin/check-test-server b/bin/check-test-server
deleted file mode 100755
index a6fa349..0000000
--- a/bin/check-test-server
+++ /dev/null
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[0;33m'
-NC='\033[0m' # No Color
-
-function prism_is_running() {
-  curl --silent "http://localhost:4010" >/dev/null 2>&1
-}
-
-function is_overriding_api_base_url() {
-  [ -n "$TEST_API_BASE_URL" ]
-}
-
-if is_overriding_api_base_url ; then
-  # If someone is running the tests against the live API, we can trust they know
-  # what they're doing and exit early.
-  echo -e "${GREEN}✔ Running tests against ${TEST_API_BASE_URL}${NC}"
-
-  exit 0
-elif prism_is_running ; then
-  echo -e "${GREEN}✔ Mock prism server is running with your OpenAPI spec${NC}"
-  echo
-
-  exit 0
-else
-  echo -e "${RED}ERROR:${NC} The test suite will not run without a mock Prism server"
-  echo -e "running against your OpenAPI spec."
-  echo
-  echo -e "${YELLOW}To fix:${NC}"
-  echo
-  echo -e "1. Install Prism (requires Node 16+):"
-  echo
-  echo -e "  With npm:"
-  echo -e "    \$ ${YELLOW}npm install -g @stoplight/prism-cli${NC}"
-  echo
-  echo -e "  With yarn:"
-  echo -e "    \$ ${YELLOW}yarn global add @stoplight/prism-cli${NC}"
-  echo
-  echo -e "2. Run the mock server"
-  echo
-  echo -e "  To run the server, pass in the path of your OpenAPI"
-  echo -e "  spec to the prism command:"
-  echo
-  echo -e "    \$ ${YELLOW}prism mock path/to/your.openapi.yml${NC}"
-  echo
-
-  exit 1
-fi
diff --git a/jest.config.ts b/jest.config.ts
index de5aa9c..9765fc6 100644
--- a/jest.config.ts
+++ b/jest.config.ts
@@ -17,6 +17,7 @@ const config: JestConfigWithTsJest = {
     '<rootDir>/deno/',
     '<rootDir>/deno_tests/',
   ],
+  testPathIgnorePatterns: ['scripts'],
 };
 
 export default config;
diff --git a/package.json b/package.json
index 1246471..d99e389 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@riza-io/api",
-  "version": "0.1.0-alpha.5",
+  "version": "0.1.0-alpha.6",
   "description": "The official TypeScript library for the Riza API",
   "author": "Riza <hello@riza.io>",
   "types": "dist/index.d.ts",
@@ -14,14 +14,14 @@
   ],
   "private": false,
   "scripts": {
-    "test": "bin/check-test-server && yarn jest",
-    "build": "bash ./build",
+    "test": "./scripts/test",
+    "build": "./scripts/build",
     "prepack": "echo 'to pack, run yarn build && (cd dist; yarn pack)' && exit 1",
     "prepublishOnly": "echo 'to publish, run yarn build && (cd dist; yarn publish)' && exit 1",
     "format": "prettier --write --cache --cache-strategy metadata . !dist",
-    "prepare": "if ./scripts/check-is-in-git-install.sh; then npm run build; fi",
+    "prepare": "if ./scripts/utils/check-is-in-git-install.sh; then ./scripts/build; fi",
     "tsn": "ts-node -r tsconfig-paths/register",
-    "lint": "eslint --ext ts,js .",
+    "lint": "./scripts/lint",
     "fix": "eslint --fix --ext ts,js ."
   },
   "dependencies": {
diff --git a/scripts/bootstrap b/scripts/bootstrap
new file mode 100755
index 0000000..05dd47a
--- /dev/null
+++ b/scripts/bootstrap
@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+
+set -e
+
+cd "$(dirname "$0")/.."
+
+if [ -f "Brewfile" ] && [ "$(uname -s)" = "Darwin" ]; then
+  brew bundle check >/dev/null 2>&1 || {
+    echo "==> Installing Homebrew dependencies…"
+    brew bundle
+  }
+fi
+
+echo "==> Installing Node dependencies…"
+
+PACKAGE_MANAGER=$(command -v yarn >/dev/null 2>&1 && echo "yarn" || echo "npm")
+
+$PACKAGE_MANAGER install
diff --git a/build b/scripts/build
similarity index 85%
rename from build
rename to scripts/build
index 62446cc..c5c7ab8 100755
--- a/build
+++ b/scripts/build
@@ -1,7 +1,10 @@
 #!/usr/bin/env bash
+
 set -exuo pipefail
 
-node scripts/check-version.cjs
+cd "$(dirname "$0")/.."
+
+node scripts/utils/check-version.cjs
 
 # Build into dist and will publish the package from there,
 # so that src/resources/foo.ts becomes <package root>/resources/foo.js
@@ -22,7 +25,7 @@ if [ -e "bin/cli" ]; then
 fi
 # this converts the export map paths for the dist directory
 # and does a few other minor things
-node scripts/make-dist-package-json.cjs > dist/package.json
+node scripts/utils/make-dist-package-json.cjs > dist/package.json
 
 # build to .js/.mjs/.d.ts files
 npm exec tsc-multi
@@ -32,7 +35,7 @@ cp src/_shims/auto/*.{d.ts,js,mjs} dist/_shims/auto
 # we need to add exports = module.exports = Riza Node to index.js;
 # No way to get that from index.ts because it would cause compile errors
 # when building .mjs
-node scripts/fix-index-exports.cjs
+node scripts/utils/fix-index-exports.cjs
 # with "moduleResolution": "nodenext", if ESM resolves to index.d.ts,
 # it'll have TS errors on the default import.  But if it resolves to
 # index.d.mts the default import will work (even though both files have
@@ -40,14 +43,14 @@ node scripts/fix-index-exports.cjs
 cp dist/index.d.ts dist/index.d.mts
 cp tsconfig.dist-src.json dist/src/tsconfig.json
 
-node scripts/postprocess-files.cjs
+node scripts/utils/postprocess-files.cjs
 
 # make sure that nothing crashes when we require the output CJS or
 # import the output ESM
 (cd dist && node -e 'require("@riza-io/api")')
 (cd dist && node -e 'import("@riza-io/api")' --input-type=module)
 
-if command -v deno &> /dev/null && [ -e ./build-deno ]
+if command -v deno &> /dev/null && [ -e ./scripts/build-deno ]
 then
-  ./build-deno
+  ./scripts/build-deno
 fi
diff --git a/scripts/format b/scripts/format
new file mode 100755
index 0000000..d297e76
--- /dev/null
+++ b/scripts/format
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -e
+
+cd "$(dirname "$0")/.."
+
+echo "==> Running eslint --fix"
+./node_modules/.bin/eslint --fix --ext ts,js .
diff --git a/scripts/lint b/scripts/lint
new file mode 100755
index 0000000..6b0e5dc
--- /dev/null
+++ b/scripts/lint
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -e
+
+cd "$(dirname "$0")/.."
+
+echo "==> Running eslint"
+./node_modules/.bin/eslint --ext ts,js .
diff --git a/scripts/mock b/scripts/mock
new file mode 100755
index 0000000..fe89a1d
--- /dev/null
+++ b/scripts/mock
@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+
+set -e
+
+cd "$(dirname "$0")/.."
+
+if [[ -n "$1" && "$1" != '--'* ]]; then
+  URL="$1"
+  shift
+else
+  URL="$(grep 'openapi_spec_url' .stats.yml | cut -d' ' -f2)"
+fi
+
+# Check if the URL is empty
+if [ -z "$URL" ]; then
+  echo "Error: No OpenAPI spec path/url provided or found in .stats.yml"
+  exit 1
+fi
+
+echo "==> Starting mock server with URL ${URL}"
+
+# Run prism mock on the given spec
+if [ "$1" == "--daemon" ]; then
+  npm exec --package=@stoplight/prism-cli@~5.8 -- prism mock "$URL" &> .prism.log &
+
+  # Wait for server to come online
+  echo -n "Waiting for server"
+  while ! grep -q "✖  fatal\|Prism is listening" ".prism.log" ; do
+    echo -n "."
+    sleep 0.1
+  done
+
+  if grep -q "✖  fatal" ".prism.log"; then
+    cat .prism.log
+    exit 1
+  fi
+
+  echo
+else
+  npm exec  --package=@stoplight/prism-cli@~5.8 -- prism mock "$URL"
+fi
diff --git a/scripts/test b/scripts/test
new file mode 100755
index 0000000..2049e31
--- /dev/null
+++ b/scripts/test
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+
+set -e
+
+cd "$(dirname "$0")/.."
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[0;33m'
+NC='\033[0m' # No Color
+
+function prism_is_running() {
+  curl --silent "http://localhost:4010" >/dev/null 2>&1
+}
+
+kill_server_on_port() {
+  pids=$(lsof -t -i tcp:"$1" || echo "")
+  if [ "$pids" != "" ]; then
+    kill "$pids"
+    echo "Stopped $pids."
+  fi
+}
+
+function is_overriding_api_base_url() {
+  [ -n "$TEST_API_BASE_URL" ]
+}
+
+if ! is_overriding_api_base_url && ! prism_is_running ; then
+  # When we exit this script, make sure to kill the background mock server process
+  trap 'kill_server_on_port 4010' EXIT
+
+  # Start the dev server
+  ./scripts/mock --daemon
+fi
+
+if is_overriding_api_base_url ; then
+  echo -e "${GREEN}✔ Running tests against ${TEST_API_BASE_URL}${NC}"
+  echo
+elif ! prism_is_running ; then
+  echo -e "${RED}ERROR:${NC} The test suite will not run without a mock Prism server"
+  echo -e "running against your OpenAPI spec."
+  echo
+  echo -e "To run the server, pass in the path or url of your OpenAPI"
+  echo -e "spec to the prism command:"
+  echo
+  echo -e "  \$ ${YELLOW}npm exec --package=@stoplight/prism-cli@~5.3.2 -- prism mock path/to/your.openapi.yml${NC}"
+  echo
+
+  exit 1
+else
+  echo -e "${GREEN}✔ Mock prism server is running with your OpenAPI spec${NC}"
+  echo
+fi
+
+echo "==> Running tests"
+./node_modules/.bin/jest "$@"
diff --git a/scripts/check-is-in-git-install.sh b/scripts/utils/check-is-in-git-install.sh
similarity index 100%
rename from scripts/check-is-in-git-install.sh
rename to scripts/utils/check-is-in-git-install.sh
diff --git a/scripts/check-version.cjs b/scripts/utils/check-version.cjs
similarity index 82%
rename from scripts/check-version.cjs
rename to scripts/utils/check-version.cjs
index 50a8566..86c56df 100644
--- a/scripts/check-version.cjs
+++ b/scripts/utils/check-version.cjs
@@ -2,14 +2,14 @@ const fs = require('fs');
 const path = require('path');
 
 const main = () => {
-  const pkg = require('../package.json');
+  const pkg = require('../../package.json');
   const version = pkg['version'];
   if (!version) throw 'The version property is not set in the package.json file';
   if (typeof version !== 'string') {
     throw `Unexpected type for the package.json version field; got ${typeof version}, expected string`;
   }
 
-  const versionFile = path.resolve(__dirname, '..', 'src', 'version.ts');
+  const versionFile = path.resolve(__dirname, '..', '..', 'src', 'version.ts');
   const contents = fs.readFileSync(versionFile, 'utf8');
   const output = contents.replace(/(export const VERSION = ')(.*)(')/g, `$1${version}$3`);
   fs.writeFileSync(versionFile, output);
diff --git a/scripts/fix-index-exports.cjs b/scripts/utils/fix-index-exports.cjs
similarity index 86%
rename from scripts/fix-index-exports.cjs
rename to scripts/utils/fix-index-exports.cjs
index b61b2ea..72b0b8f 100644
--- a/scripts/fix-index-exports.cjs
+++ b/scripts/utils/fix-index-exports.cjs
@@ -4,7 +4,7 @@ const path = require('path');
 const indexJs =
   process.env['DIST_PATH'] ?
     path.resolve(process.env['DIST_PATH'], 'index.js')
-  : path.resolve(__dirname, '..', 'dist', 'index.js');
+  : path.resolve(__dirname, '..', '..', 'dist', 'index.js');
 
 let before = fs.readFileSync(indexJs, 'utf8');
 let after = before.replace(
diff --git a/scripts/make-dist-package-json.cjs b/scripts/utils/make-dist-package-json.cjs
similarity index 87%
rename from scripts/make-dist-package-json.cjs
rename to scripts/utils/make-dist-package-json.cjs
index d4a0a69..7c24f56 100644
--- a/scripts/make-dist-package-json.cjs
+++ b/scripts/utils/make-dist-package-json.cjs
@@ -1,4 +1,4 @@
-const pkgJson = require(process.env['PKG_JSON_PATH'] || '../package.json');
+const pkgJson = require(process.env['PKG_JSON_PATH'] || '../../package.json');
 
 function processExportMap(m) {
   for (const key in m) {
diff --git a/scripts/postprocess-files.cjs b/scripts/utils/postprocess-files.cjs
similarity index 97%
rename from scripts/postprocess-files.cjs
rename to scripts/utils/postprocess-files.cjs
index 2281dc2..4087933 100644
--- a/scripts/postprocess-files.cjs
+++ b/scripts/utils/postprocess-files.cjs
@@ -2,12 +2,12 @@ const fs = require('fs');
 const path = require('path');
 const { parse } = require('@typescript-eslint/parser');
 
-const pkgImportPath = process.env['PKG_IMPORT_PATH'] ?? '@riza-io/api/'
+const pkgImportPath = process.env['PKG_IMPORT_PATH'] ?? '@riza-io/api/';
 
 const distDir =
   process.env['DIST_PATH'] ?
     path.resolve(process.env['DIST_PATH'])
-  : path.resolve(__dirname, '..', 'dist');
+  : path.resolve(__dirname, '..', '..', 'dist');
 const distSrcDir = path.join(distDir, 'src');
 
 /**
@@ -103,7 +103,7 @@ async function* walk(dir) {
 }
 
 async function postprocess() {
-  for await (const file of walk(path.resolve(__dirname, '..', 'dist'))) {
+  for await (const file of walk(path.resolve(__dirname, '..', '..', 'dist'))) {
     if (!/\.([cm]?js|(\.d)?[cm]?ts)$/.test(file)) continue;
 
     const code = await fs.promises.readFile(file, 'utf8');
diff --git a/src/resources/command.ts b/src/resources/command.ts
index 0b02113..56e9a91 100644
--- a/src/resources/command.ts
+++ b/src/resources/command.ts
@@ -44,6 +44,11 @@ export interface CommandExecParams {
    */
   language: 'PYTHON' | 'JAVASCRIPT' | 'TYPESCRIPT' | 'RUBY' | 'PHP';
 
+  /**
+   * List of allowed hosts for HTTP requests
+   */
+  allow_http_hosts?: Array<string>;
+
   /**
    * List of command line arguments to pass to the script.
    */
diff --git a/src/version.ts b/src/version.ts
index 66c10e6..9b7cfeb 100644
--- a/src/version.ts
+++ b/src/version.ts
@@ -1 +1 @@
-export const VERSION = '0.1.0-alpha.5'; // x-release-please-version
+export const VERSION = '0.1.0-alpha.6'; // x-release-please-version
diff --git a/tests/api-resources/command.test.ts b/tests/api-resources/command.test.ts
index 7bb05c2..43d0e0a 100644
--- a/tests/api-resources/command.test.ts
+++ b/tests/api-resources/command.test.ts
@@ -24,6 +24,7 @@ describe('resource command', () => {
     const response = await riza.command.exec({
       code: 'print("Hello world!")',
       language: 'PYTHON',
+      allow_http_hosts: ['string', 'string', 'string'],
       args: ['string', 'string', 'string'],
       env: { foo: 'string' },
       stdin: 'string',