@drawcall/market 0.9.3 → 0.9.4

package/dist/skill.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill.generated.d.ts","sourceRoot":"","sources":["../src/skill.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc,6pHAConH,CAAA;AAC/oH,eAAO,MAAM,cAAc,4mGACglG,CAAA"}
+{"version":3,"file":"skill.generated.d.ts","sourceRoot":"","sources":["../src/skill.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc,ipHACwmH,CAAA;AACnoH,eAAO,MAAM,cAAc,4mGACglG,CAAA"}

package/dist/skill.generated.js

@@ -1,4 +1,4 @@
 // Generated from skill/SKILL.template.md.
-export const cliMarketSkill = '---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## CLI transport\n\nRun commands as `npx @drawcall/market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx @drawcall/market skill` when these instructions are not already available.\n\nDiscover the current vocabulary and choose an asset:\n\n```sh\nnpx @drawcall/market types\nnpx @drawcall/market search "<query>" --type <type> --limit 3\nnpx @drawcall/market preview <name@version> --out /tmp/<name>.png\nnpx @drawcall/market urls <name@version>\n```\n\n`urls` prints one base URL, file subpaths, and a preview URL without changing the project. Install exact refs together when the project needs local files:\n\n```sh\nnpx @drawcall/market install <name@range...> --cwd "$PWD"\n```\n\nInstall records `assetDependencies` in the nearest `package.json`. `list --cwd "$PWD"` reads that inventory without network access. Run `sync --cwd "$PWD"` after moving installed files so aliases continue to resolve. Use `--force` only with permission to overwrite changed files.\n\nGenerate and install one asset with:\n\n```sh\nnpx @drawcall/market generate --type <type> "<description>"\n```\n\nIf it returns a continuation, run the printed `generate install <jobId>` command. The Market agent can source a coherent set of assets from a broader goal:\n\n```sh\nnpx @drawcall/market agent "<goal>"\n```\n\nPublish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx @drawcall/market login`.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account\'s `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n';
+export const cliMarketSkill = '---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## CLI transport\n\nRun commands as `npx drawcall market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx drawcall market skill` when these instructions are not already available.\n\nDiscover the current vocabulary and choose an asset:\n\n```sh\nnpx drawcall market types\nnpx drawcall market search "<query>" --type <type> --limit 3\nnpx drawcall market preview <name@version> --out /tmp/<name>.png\nnpx drawcall market urls <name@version>\n```\n\n`urls` prints one base URL, file subpaths, and a preview URL without changing the project. Install exact refs together when the project needs local files:\n\n```sh\nnpx drawcall market install <name@range...> --cwd "$PWD"\n```\n\nInstall records `assetDependencies` in the nearest `package.json`. `list --cwd "$PWD"` reads that inventory without network access. Run `sync --cwd "$PWD"` after moving installed files so aliases continue to resolve. Use `--force` only with permission to overwrite changed files.\n\nGenerate and install one asset with:\n\n```sh\nnpx drawcall market generate --type <type> "<description>"\n```\n\nIf it returns a continuation, run the printed `generate install <jobId>` command. The Market agent can source a coherent set of assets from a broader goal:\n\n```sh\nnpx drawcall market agent "<goal>"\n```\n\nPublish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx drawcall auth login`.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account\'s `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n';
 export const mcpMarketSkill = "---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## MCP transport\n\nMCP tools are the only Market transport in this environment. Do not invoke the CLI, make direct API requests, or switch transports after a failed call.\n\nUse the same conceptual workflow as the Market CLI:\n\n```text\nlist_market_asset_types\nsearch_market\nget_market_asset\nget_market_asset_preview\n```\n\n`search_market` requires an asset type and returns exact `name@version` references. Inspect the exact manifest with `get_market_asset`; request its preview only when visual evidence matters. Remote MCP tools return immutable references and fetch-ready URLs. They do not install files into the caller's local project.\n\nWhen generation is available, call `generate_market_asset`. If it returns a `jobId`, continue with `get_market_asset_generation`. Do not start the same generation again.\n\nWhen the Market agent is available, call `start_market_agent_run` with the full goal and continue its returned `runId` with `get_market_agent_run`.\n\nUse an exact Market reference with `create_design_frame` when the selected asset belongs in Drawcall Design.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account's `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n";
 //# sourceMappingURL=skill.generated.js.map

package/dist/skill.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill.generated.js","sourceRoot":"","sources":["../src/skill.generated.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,MAAM,CAAC,MAAM,cAAc,GACzB,6oHAA6oH,CAAA;AAC/oH,MAAM,CAAC,MAAM,cAAc,GACzB,ymGAAymG,CAAA"}
+{"version":3,"file":"skill.generated.js","sourceRoot":"","sources":["../src/skill.generated.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,MAAM,CAAC,MAAM,cAAc,GACzB,ioHAAioH,CAAA;AACnoH,MAAM,CAAC,MAAM,cAAc,GACzB,ymGAAymG,CAAA"}

package/dist/v1/client.d.ts

@@ -5,6 +5,11 @@ export interface MarketV1ClientOptions {
     baseUrl?: string;
     fetch?: typeof globalThis.fetch;
     authToken?: string;
+    source?: {
+        surface: 'cli' | 'mcp' | 'sdk' | 'web';
+        distinctId?: string;
+        analyticsDisabled?: boolean;
+    };
 }
 /**
  * A typed client for the v1 REST surface (`/api/v1`). Same call shapes as the legacy RPC client —

package/dist/v1/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/v1/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAEzD,MAAM,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;AAa7D,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AA4BD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,GAAE,qBAA0B,GAAG,cAAc,CAO7E"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/v1/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAA;AAC1D,OAAO,EAAY,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAEzD,MAAM,MAAM,cAAc,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;AAa7D,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE;QACP,OAAO,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAA;QACtC,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;CACF;AA4BD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,GAAE,qBAA0B,GAAG,cAAc,CAa7E"}

package/dist/v1/client.js

@@ -43,10 +43,19 @@ function resilientReads(baseFetch) {
  * they are curl-able, shareable and cacheable.
  */
 export function createClient(opts = {}) {
+    const headers = {};
+    if (opts.authToken)
+        headers.authorization = `Bearer ${opts.authToken}`;
+    if (opts.source)
+        headers['x-market-surface'] = opts.source.surface;
+    if (opts.source?.distinctId)
+        headers['x-posthog-distinct-id'] = opts.source.distinctId;
+    if (opts.source?.analyticsDisabled)
+        headers['x-market-analytics-disabled'] = 'true';
     const link = new OpenAPILink(contract, {
         url: new URL('/api/v1', opts.baseUrl ?? DEFAULT_BASE_URL).href,
         fetch: resilientReads(opts.fetch ?? ((input, init) => globalThis.fetch(input, init))),
-        headers: opts.authToken ? { authorization: `Bearer ${opts.authToken}` } : undefined,
+        headers,
     });
     return createORPCClient(link);
 }

package/dist/v1/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/v1/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,EAAE,QAAQ,EAAmB,MAAM,eAAe,CAAA;AAIzD,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAQrD;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAkC;IACxD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAChG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAExE,IAAI,SAAkB,CAAA;QACtB,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAC/E,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAA;gBACjB,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,KAAK,qBAAqB,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAA;gBACtF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAA;IACjB,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAA8B,EAAE;IAC3D,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,IAAI;QAC9D,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC,CAAA;IACF,OAAO,gBAAgB,CAAiB,IAAI,CAAC,CAAA;AAC/C,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/v1/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAA;AAExD,OAAO,EAAE,QAAQ,EAAmB,MAAM,eAAe,CAAA;AAIzD,MAAM,gBAAgB,GAAG,4BAA4B,CAAA;AAErD;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAarD;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAkC;IACxD,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAC3B,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAChG,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAExE,IAAI,SAAkB,CAAA;QACtB,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;YAC9C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;YAC/E,IAAI,CAAC;gBACH,OAAO,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAA;gBACjB,IAAI,IAAI,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,KAAK,qBAAqB,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,KAAK,CAAA;gBACtF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAA;YAChF,CAAC;QACH,CAAC;QACD,MAAM,SAAS,CAAA;IACjB,CAAC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,OAA8B,EAAE;IAC3D,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,SAAS,EAAE,CAAA;IACtE,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;IAClE,IAAI,IAAI,CAAC,MAAM,EAAE,UAAU;QAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAA;IACtF,IAAI,IAAI,CAAC,MAAM,EAAE,iBAAiB;QAAE,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAA;IAEnF,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,QAAQ,EAAE;QACrC,GAAG,EAAE,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,IAAI;QAC9D,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrF,OAAO;KACR,CAAC,CAAA;IACF,OAAO,gBAAgB,CAAiB,IAAI,CAAC,CAAA;AAC/C,CAAC"}

package/dist/v1/contract.d.ts

@@ -37,6 +37,15 @@ export interface AssetQueryResult {
     total: number;
     assets: AssetSearchResult[];
 }
+export declare const installReceiptSchema: z.ZodObject<{
+    assetCount: z.ZodNumber;
+    assetTypes: z.ZodArray<z.ZodString>;
+    fileCount: z.ZodNumber;
+    npmDependencyCount: z.ZodNumber;
+    redirectedFileCount: z.ZodNumber;
+    skillDependencyCount: z.ZodNumber;
+    warningCount: z.ZodNumber;
+}, z.core.$strip>;
 /**
  * The v1 contract: the same procedure tree as the legacy RPC surface (so call sites migrate by
  * swapping only the client), with HTTP routes attached — served as plain REST under `/api/v1`.
@@ -186,6 +195,19 @@ export declare const contract: {
             }, z.core.$strip>], "status">, Record<never, never>, Record<never, never>>;
         };
     };
+    installation: {
+        complete: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            assetCount: z.ZodNumber;
+            assetTypes: z.ZodArray<z.ZodString>;
+            fileCount: z.ZodNumber;
+            npmDependencyCount: z.ZodNumber;
+            redirectedFileCount: z.ZodNumber;
+            skillDependencyCount: z.ZodNumber;
+            warningCount: z.ZodNumber;
+        }, z.core.$strip>, z.ZodObject<{
+            accepted: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    };
     user: {
         getProfile: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodCustom<User | null, User | null>, Record<never, never>, Record<never, never>>;
         updateProfile: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{

package/dist/v1/contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/v1/contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,IAAI,EACL,MAAM,gBAAgB,CAAA;AAgBvB;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;CACf;AAED;0FAC0F;AAC1F,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAED;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAaa,gBAAgB,EAAE;;qBAAlB,gBAAgB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAkDnB,MAAM;uBAAa,IAAI;;oBAAvB,MAAM;uBAAa,IAAI;;;;;;;CAMvD,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAA"}
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/v1/contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,KAAK,EACV,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,IAAI,EACL,MAAM,gBAAgB,CAAA;AAgBvB;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,QAAQ,EAAE,OAAO,CAAA;IACjB,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC5B,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACvC,iBAAiB,EAAE,iBAAiB,CAAA;IACpC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzC,KAAK,EAAE,cAAc,EAAE,CAAA;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;CACf;AAED;0FAC0F;AAC1F,MAAM,WAAW,aAAc,SAAQ,oBAAoB;IACzD,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,CAAA;CACjC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,iBAAiB,EAAE,CAAA;CAC5B;AAED,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAA;AAEF;;;;GAIG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAaa,gBAAgB,EAAE;;qBAAlB,gBAAgB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oBAyDnB,MAAM;uBAAa,IAAI;;oBAAvB,MAAM;uBAAa,IAAI;;;;;;;CAMvD,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,QAAQ,CAAA"}

package/dist/v1/contract.js

@@ -1,6 +1,15 @@
 import { oc } from '@orpc/contract';
 import { z } from 'zod';
 import { MAX_UPLOAD_ZIP_SIZE_BYTES, agentRunStatusSchema, agentStartSchema, agentStatusSchema, assetCollectionReadSchema, assetQueriesSchema, generateAssetSchema, generateJobStatusSchema, generateResponseSchema, generateStatusInputSchema, updateProfileSchema, uploadZipSchema, } from '../schemas.js';
+export const installReceiptSchema = z.object({
+    assetCount: z.number().int().nonnegative(),
+    assetTypes: z.array(z.string().min(1).max(64)).max(64),
+    fileCount: z.number().int().nonnegative(),
+    npmDependencyCount: z.number().int().nonnegative(),
+    redirectedFileCount: z.number().int().nonnegative(),
+    skillDependencyCount: z.number().int().nonnegative(),
+    warningCount: z.number().int().nonnegative(),
+});
 /**
  * The v1 contract: the same procedure tree as the legacy RPC surface (so call sites migrate by
  * swapping only the client), with HTTP routes attached — served as plain REST under `/api/v1`.
@@ -50,6 +59,12 @@ export const contract = {
                 .output(agentRunStatusSchema),
         },
     },
+    installation: {
+        complete: oc
+            .route({ method: 'POST', path: '/installs' })
+            .input(installReceiptSchema)
+            .output(z.object({ accepted: z.literal(true) })),
+    },
     user: {
         getProfile: oc.route({ method: 'GET', path: '/me' }).output(z.custom()),
         updateProfile: oc

package/dist/v1/contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/v1/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAUvB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,GAChB,MAAM,eAAe,CAAA;AA0CtB;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,KAAK,EAAE;QACL,6EAA6E;QAC7E,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aACzC,KAAK,CAAC,yBAAyB,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAsD,CAAC;QAEzE,KAAK,EAAE,EAAE;aACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aAC1C,KAAK,CAAC,kBAAkB,CAAC;aACzB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAmC,CAAC;QAEtD,SAAS,EAAE,EAAE;aACV,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;aAC1D,KAAK,CACJ,eAAe;aACZ,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,yBAAyB,EAAE;YAC7D,OAAO,EAAE,sCAAsC;YAC/C,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CACL;aACA,MAAM,CAAC,CAAC,CAAC,MAAM,EAAgB,CAAC;QAEnC,eAAe,EAAE,EAAE;aAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAwC,CAAC;QAE3D,QAAQ,EAAE,EAAE;aACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC/C,KAAK,CAAC,mBAAmB,CAAC;aAC1B,MAAM,CAAC,sBAAsB,CAAC;QAEjC,cAAc,EAAE,EAAE;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;aACtD,KAAK,CAAC,yBAAyB,CAAC;aAChC,MAAM,CAAC,uBAAuB,CAAC;QAElC,KAAK,EAAE;YACL,KAAK,EAAE,EAAE;iBACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;iBAC9C,KAAK,CAAC,gBAAgB,CAAC;iBACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,EAAE,EAAE;iBACP,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;iBACrD,KAAK,CAAC,iBAAiB,CAAC;iBACxB,MAAM,CAAC,oBAAoB,CAAC;SAChC;KACF;IAED,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAe,CAAC;QAEpF,aAAa,EAAE,EAAE;aACd,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;aACvC,KAAK,CAAC,mBAAmB,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,EAAQ,CAAC;QAE3B,YAAY,EAAE,EAAE;aACb,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aAChD,MAAM,CAAC,CAAC,CAAC,MAAM,EAA8C,CAAC;QAEjE,eAAe,EAAE,EAAE;aAChB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KAC/D;CACF,CAAA"}
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/v1/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAA;AACnC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAUvB,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,eAAe,GAChB,MAAM,eAAe,CAAA;AA0CtB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC7C,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,KAAK,EAAE;QACL,6EAA6E;QAC7E,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aACzC,KAAK,CAAC,yBAAyB,CAAC;aAChC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAsD,CAAC;QAEzE,KAAK,EAAE,EAAE;aACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;aAC1C,KAAK,CAAC,kBAAkB,CAAC;aACzB,MAAM,CAAC,CAAC,CAAC,MAAM,EAAmC,CAAC;QAEtD,SAAS,EAAE,EAAE;aACV,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;aAC1D,KAAK,CACJ,eAAe;aACZ,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;aACnC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,yBAAyB,EAAE;YAC7D,OAAO,EAAE,sCAAsC;YAC/C,IAAI,EAAE,CAAC,KAAK,CAAC;SACd,CAAC,CACL;aACA,MAAM,CAAC,CAAC,CAAC,MAAM,EAAgB,CAAC;QAEnC,eAAe,EAAE,EAAE;aAChB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAwC,CAAC;QAE3D,QAAQ,EAAE,EAAE;aACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;aAC/C,KAAK,CAAC,mBAAmB,CAAC;aAC1B,MAAM,CAAC,sBAAsB,CAAC;QAEjC,cAAc,EAAE,EAAE;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;aACtD,KAAK,CAAC,yBAAyB,CAAC;aAChC,MAAM,CAAC,uBAAuB,CAAC;QAElC,KAAK,EAAE;YACL,KAAK,EAAE,EAAE;iBACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;iBAC9C,KAAK,CAAC,gBAAgB,CAAC;iBACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,EAAE,EAAE;iBACP,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC;iBACrD,KAAK,CAAC,iBAAiB,CAAC;iBACxB,MAAM,CAAC,oBAAoB,CAAC;SAChC;KACF;IAED,YAAY,EAAE;QACZ,QAAQ,EAAE,EAAE;aACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;aAC5C,KAAK,CAAC,oBAAoB,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACnD;IAED,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAe,CAAC;QAEpF,aAAa,EAAE,EAAE;aACd,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;aACvC,KAAK,CAAC,mBAAmB,CAAC;aAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,EAAQ,CAAC;QAE3B,YAAY,EAAE,EAAE;aACb,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aAChD,MAAM,CAAC,CAAC,CAAC,MAAM,EAA8C,CAAC;QAEjE,eAAe,EAAE,EAAE;aAChB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KAC/D;CACF,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drawcall/market",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/drawcall-ai/market",

package/skills/market/SKILL.md

@@ -7,21 +7,21 @@ description: Find, inspect, generate, and use Drawcall Market assets from a codi
 
 ## CLI transport
 
-Run commands as `npx @drawcall/market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx @drawcall/market skill` when these instructions are not already available.
+Run commands as `npx drawcall market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx drawcall market skill` when these instructions are not already available.
 
 Discover the current vocabulary and choose an asset:
 
 ```sh
-npx @drawcall/market types
-npx @drawcall/market search "<query>" --type <type> --limit 3
-npx @drawcall/market preview <name@version> --out /tmp/<name>.png
-npx @drawcall/market urls <name@version>
+npx drawcall market types
+npx drawcall market search "<query>" --type <type> --limit 3
+npx drawcall market preview <name@version> --out /tmp/<name>.png
+npx drawcall market urls <name@version>
 ```
 
 `urls` prints one base URL, file subpaths, and a preview URL without changing the project. Install exact refs together when the project needs local files:
 
 ```sh
-npx @drawcall/market install <name@range...> --cwd "$PWD"
+npx drawcall market install <name@range...> --cwd "$PWD"
 ```
 
 Install records `assetDependencies` in the nearest `package.json`. `list --cwd "$PWD"` reads that inventory without network access. Run `sync --cwd "$PWD"` after moving installed files so aliases continue to resolve. Use `--force` only with permission to overwrite changed files.
@@ -29,16 +29,16 @@ Install records `assetDependencies` in the nearest `package.json`. `list --cwd "
 Generate and install one asset with:
 
 ```sh
-npx @drawcall/market generate --type <type> "<description>"
+npx drawcall market generate --type <type> "<description>"
 ```
 
 If it returns a continuation, run the printed `generate install <jobId>` command. The Market agent can source a coherent set of assets from a broader goal:
 
 ```sh
-npx @drawcall/market agent "<goal>"
+npx drawcall market agent "<goal>"
 ```
 
-Publish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx @drawcall/market login`.
+Publish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx drawcall auth login`.
 
 ## Choose assets
 

package/src/auth.ts

@@ -9,6 +9,7 @@ import { logout } from './commands/logout.js'
 import { clearConfig, saveConfig } from './config.js'
 import { loginResult } from './output.js'
 import { createClient } from './v1/client.js'
+import { getCliSource } from './installation-id.js'
 
 const DEFAULT_BASE_URL = 'https://market.drawcall.ai'
 
@@ -24,7 +25,7 @@ export function createLoginCommand(): Command {
     .action(async (options: { api?: string }) => {
       const baseUrl = options.api ?? DEFAULT_BASE_URL
       const token = await runDeviceLogin()
-      const client = createClient({ baseUrl, authToken: token })
+      const client = createClient({ baseUrl, authToken: token, source: await getCliSource() })
       const profile = await client.user.getProfile()
       if (!profile) throw new Error('The Market API did not accept the auth token.')
 

package/src/cli-client.ts

@@ -2,12 +2,13 @@ import type { MarketClient } from './client.js'
 import { getAuthToken } from '@drawcall/auth'
 import { createClient as createV1Client } from './v1/client.js'
 import { loadConfig } from './config.js'
+import { getCliSource } from './installation-id.js'
 
 const DEFAULT_BASE_URL = 'https://market.drawcall.ai'
 
 export class NotLoggedInError extends Error {
   constructor() {
-    super('Not logged in. Run `market login` first.')
+    super('Not logged in. Run `npx drawcall auth login` first.')
     this.name = 'NotLoggedInError'
   }
 }
@@ -25,6 +26,14 @@ export interface CliClient {
   authToken: string | undefined
 }
 
+export interface AuthenticatedCliClient extends CliClient {
+  authToken: string
+}
+
+export function getCliClient(
+  opts: CliClientOptions & { requireAuth: true },
+): Promise<AuthenticatedCliClient>
+export function getCliClient(opts?: CliClientOptions): Promise<CliClient>
 export async function getCliClient(opts: CliClientOptions = {}): Promise<CliClient> {
   const authToken = await getAuthToken()
   const config = await loadConfig()
@@ -37,7 +46,11 @@ export async function getCliClient(opts: CliClientOptions = {}): Promise<CliClie
   return {
     // The v1 client has the same call shapes as the legacy `MarketClient`, so every CLI command
     // and library consumer of `getCliClient` speaks /api/v1 without a signature change.
-    client: createV1Client({ baseUrl, authToken }),
+    client: createV1Client({
+      baseUrl,
+      authToken,
+      source: await getCliSource(),
+    }),
     baseUrl,
     authToken,
   }

package/src/commands/agent.ts

@@ -43,7 +43,9 @@ function printResult(result: AgentResult, asJson: boolean): void {
       const note = asset.notes ? ` — ${asset.notes}` : ''
       console.log(`- ${assetVersionRef(asset.name, asset.version)}${note}`)
     }
-    console.log(`Install: market install ${assets.map((asset) => asset.name).join(' ')}`)
+    console.log(
+      `Install: npx drawcall market install ${assets.map((asset) => asset.name).join(' ')}`,
+    )
   }
   if (notes) {
     console.log(`Notes: ${notes}`)

package/src/commands/install.ts

@@ -2,7 +2,12 @@ import * as fs from 'fs/promises'
 import * as path from 'path'
 import ora from 'ora'
 import { resolve } from '../resolve.js'
-import { findInstallRoot, install as runInstall, type InstallRootRequest } from '../install.js'
+import {
+  findInstallRoot,
+  install as runInstall,
+  type InstallResult,
+  type InstallRootRequest,
+} from '../install.js'
 import { packageJsonAssetDependencies } from '../package-json.js'
 import { assetDependencyRange, assetNameSchema, type AssetDependencies } from '../schemas.js'
 import { getCliClient } from '../cli-client.js'
@@ -57,18 +62,41 @@ export async function installCommand(args: string[], opts: InstallCommandOptions
 
     spinner.stop()
     console.log(installResult(result, metadata))
+    await reportCompletedInstall(client, result)
   } catch (err) {
     spinner.stop()
     throw err
   }
 }
 
+async function reportCompletedInstall(client: MarketClient, result: InstallResult): Promise<void> {
+  try {
+    await client.installation.complete({
+      assetCount: result.assets.length,
+      assetTypes: [...new Set(result.assets.map((asset) => asset.type))],
+      fileCount: result.assets.reduce((count, asset) => count + asset.files.length, 0),
+      npmDependencyCount: Object.keys(result.npmDependencies).length,
+      redirectedFileCount: result.assets.reduce(
+        (count, asset) => count + asset.redirectedFiles.length,
+        0,
+      ),
+      skillDependencyCount: Object.keys(result.skillDependencies).length,
+      warningCount: result.warnings.length,
+    })
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error)
+    console.warn(
+      `Assets installed, but the Market could not record the completed install: ${message}`,
+    )
+  }
+}
+
 /**
  * Resolve a single `name` or `name@range` argument to an exact asset request.
  * Asset names are globally unique, so the name fully determines the asset — no
  * `--type` is needed. install never fuzzy-searches or generates: it points the
- * caller at `market search` / `market generate` instead, which keeps behavior
- * predictable for agents.
+ * caller at `npx drawcall market search` / `npx drawcall market generate`
+ * instead, which keeps behavior predictable for agents.
  */
 export async function resolveArg(
   client: MarketClient,
@@ -79,7 +107,7 @@ export async function resolveArg(
   const parsed = parseNameAndRange(arg)
   if (!parsed) {
     throw new Error(
-      `Invalid asset name "${arg}". Use \`market search --type <type> <query>\` to find assets.`,
+      `Invalid asset name "${arg}". Use \`npx drawcall market search --type <type> <query>\` to find assets.`,
     )
   }
 
@@ -108,8 +136,8 @@ export async function resolveArg(
   }
 
   throw new Error(
-    `Asset "${parsed.name}" not found. Use \`market search\` to find assets or ` +
-      `\`market generate --type <type>\` to create one.`,
+    `Asset "${parsed.name}" not found. Use \`npx drawcall market search\` to find assets or ` +
+      `\`npx drawcall market generate --type <type>\` to create one.`,
   )
 }
 

package/src/commands/reference-images.ts

@@ -1,3 +1,4 @@
+import { Buffer } from 'node:buffer'
 import { readFile } from 'node:fs/promises'
 import { extname } from 'node:path'
 
@@ -12,7 +13,7 @@ export function loadReferenceImages(refs: string[]): Promise<string[]> {
 async function loadReferenceImage(ref: string): Promise<string> {
   if (ref.startsWith('http://') || ref.startsWith('https://')) return ref
   const data = await readFile(ref)
-  return `data:${mimeFor(ref)};base64,${data.toString('base64')}`
+  return `data:${mimeFor(ref)};base64,${Buffer.from(data).toString('base64')}`
 }
 
 function mimeFor(path: string): string {

package/src/commands/upload.ts

@@ -74,7 +74,7 @@ export async function uploadCommand(
     for (const line of packWarnings(packed)) console.warn(line)
     const profile = await client.user.getProfile()
     if (!profile) {
-      throw new Error('Not logged in. Run `market login` first.')
+      throw new Error('Not logged in. Run `npx drawcall auth login` first.')
     }
     const [existing] = await lookupAssets(client.asset, [{ name: parsedName }], {
       includeUnapproved: true,

package/src/config.ts

@@ -13,7 +13,7 @@ export interface Config {
   baseUrl?: string
 }
 
-function configDir(): string {
+export function getConfigDir(): string {
   if (process.platform === 'win32' && process.env.APPDATA) {
     return path.join(process.env.APPDATA, 'drawcall-market')
   }
@@ -22,7 +22,7 @@ function configDir(): string {
 }
 
 function configPath(): string {
-  return path.join(configDir(), 'config.json')
+  return path.join(getConfigDir(), 'config.json')
 }
 
 export async function loadConfig(): Promise<Config | null> {
@@ -35,7 +35,7 @@ export async function loadConfig(): Promise<Config | null> {
 }
 
 export async function saveConfig(config: Config): Promise<void> {
-  const dir = configDir()
+  const dir = getConfigDir()
   await fs.mkdir(dir, { recursive: true })
   // `mode` on writeFile/mkdir only applies when the path is created, so chmod
   // explicitly to protect a pre-existing (possibly world-readable) token file

package/src/install-entry.ts

@@ -1,6 +1,6 @@
 export type { MarketClient, MarketClientOptions } from './client.js'
 export { getCliClient, NotLoggedInError } from './cli-client.js'
-export type { CliClient, CliClientOptions } from './cli-client.js'
+export type { AuthenticatedCliClient, CliClient, CliClientOptions } from './cli-client.js'
 
 export { resolve, ResolutionError } from './resolve.js'
 export type { ResolvedAsset, ResolveResult } from './resolve.js'

package/src/install.ts

@@ -40,7 +40,7 @@ export interface InstallOptions {
   rootRequests?: InstallRootRequest[]
   /** Asset-type install policy from the Market API. */
   installMetadata?: Record<string, AssetInstallMetadata>
-  /** Capability key of a shared private asset (`market install <asset> --key <key>`). */
+  /** Capability key of a shared private asset (`npx drawcall market install <asset> --key <key>`). */
   key?: string
   /** Log progress */
   onProgress?: (message: string) => void

package/src/installation-id.ts

@@ -0,0 +1,44 @@
+import * as fs from 'fs/promises'
+import * as path from 'path'
+import { z } from 'zod'
+import { getConfigDir } from './config.js'
+import type { MarketV1ClientOptions } from './v1/client.js'
+
+const installationIdSchema = z.string().uuid()
+
+function installationIdPath(): string {
+  return path.join(getConfigDir(), 'installation-id')
+}
+
+export async function getInstallationId(): Promise<string> {
+  try {
+    return installationIdSchema.parse((await fs.readFile(installationIdPath(), 'utf-8')).trim())
+  } catch (error) {
+    if (!isMissingFile(error)) throw error
+  }
+
+  const dir = getConfigDir()
+  const installationId = crypto.randomUUID()
+  await fs.mkdir(dir, { recursive: true })
+  await fs.chmod(dir, 0o700)
+  await fs.writeFile(installationIdPath(), `${installationId}\n`, {
+    encoding: 'utf-8',
+    flag: 'wx',
+    mode: 0o600,
+  })
+  return installationId
+}
+
+export async function getCliSource(): Promise<NonNullable<MarketV1ClientOptions['source']>> {
+  const analyticsDisabled =
+    process.env.DO_NOT_TRACK === '1' || process.env.MARKET_TELEMETRY_DISABLED === '1'
+  return {
+    surface: 'cli',
+    distinctId: analyticsDisabled ? undefined : await getInstallationId(),
+    analyticsDisabled,
+  }
+}
+
+function isMissingFile(error: unknown): boolean {
+  return error instanceof Error && 'code' in error && error.code === 'ENOENT'
+}

package/src/output.ts

@@ -189,7 +189,7 @@ export function generationRunningResult(jobId: string): string {
 }
 
 function generationInstallCommand(jobId: string): string {
-  return `npx @drawcall/market@latest generate install ${jobId} --cwd "$PWD"`
+  return `npx drawcall market generate install ${jobId} --cwd "$PWD"`
 }
 
 export function uploadResult(name: string, version: string): string {

package/src/pack.ts

@@ -616,7 +616,7 @@ export interface AssetDependencySync {
 
 /**
  * Update the aliases in package.json `assetDependencies` to match where each dependency's files
- * currently live — the standalone form of what pack does before omitting (`market sync`). Renamed
+ * currently live — the standalone form of what pack does before omitting (`npx drawcall market sync`). Renamed
  * files gain an alias, files back at their canonical path lose theirs, and dependencies whose
  * manifest cannot be fetched are reported as skipped rather than blindly rewritten.
  */

package/src/skill.generated.ts

@@ -1,5 +1,5 @@
 // Generated from skill/SKILL.template.md.
 export const cliMarketSkill =
-  '---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## CLI transport\n\nRun commands as `npx @drawcall/market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx @drawcall/market skill` when these instructions are not already available.\n\nDiscover the current vocabulary and choose an asset:\n\n```sh\nnpx @drawcall/market types\nnpx @drawcall/market search "<query>" --type <type> --limit 3\nnpx @drawcall/market preview <name@version> --out /tmp/<name>.png\nnpx @drawcall/market urls <name@version>\n```\n\n`urls` prints one base URL, file subpaths, and a preview URL without changing the project. Install exact refs together when the project needs local files:\n\n```sh\nnpx @drawcall/market install <name@range...> --cwd "$PWD"\n```\n\nInstall records `assetDependencies` in the nearest `package.json`. `list --cwd "$PWD"` reads that inventory without network access. Run `sync --cwd "$PWD"` after moving installed files so aliases continue to resolve. Use `--force` only with permission to overwrite changed files.\n\nGenerate and install one asset with:\n\n```sh\nnpx @drawcall/market generate --type <type> "<description>"\n```\n\nIf it returns a continuation, run the printed `generate install <jobId>` command. The Market agent can source a coherent set of assets from a broader goal:\n\n```sh\nnpx @drawcall/market agent "<goal>"\n```\n\nPublish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx @drawcall/market login`.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account\'s `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n'
+  '---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## CLI transport\n\nRun commands as `npx drawcall market <command>`; do not assume a global `market` binary or switch to MCP after a CLI failure. Use `npx drawcall market skill` when these instructions are not already available.\n\nDiscover the current vocabulary and choose an asset:\n\n```sh\nnpx drawcall market types\nnpx drawcall market search "<query>" --type <type> --limit 3\nnpx drawcall market preview <name@version> --out /tmp/<name>.png\nnpx drawcall market urls <name@version>\n```\n\n`urls` prints one base URL, file subpaths, and a preview URL without changing the project. Install exact refs together when the project needs local files:\n\n```sh\nnpx drawcall market install <name@range...> --cwd "$PWD"\n```\n\nInstall records `assetDependencies` in the nearest `package.json`. `list --cwd "$PWD"` reads that inventory without network access. Run `sync --cwd "$PWD"` after moving installed files so aliases continue to resolve. Use `--force` only with permission to overwrite changed files.\n\nGenerate and install one asset with:\n\n```sh\nnpx drawcall market generate --type <type> "<description>"\n```\n\nIf it returns a continuation, run the printed `generate install <jobId>` command. The Market agent can source a coherent set of assets from a broader goal:\n\n```sh\nnpx drawcall market agent "<goal>"\n```\n\nPublish only when asked. `pack <source> --out <zip>` creates a Market archive and `upload <name> <source> "<description>" --type <type>` publishes it. Use command help for dependency and visibility options. If authentication is required, ask before running `npx drawcall auth login`.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account\'s `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n'
 export const mcpMarketSkill =
   "---\nname: market\ndescription: Find, inspect, generate, and use Drawcall Market assets from a coding agent.\n---\n\n# Drawcall Market\n\n## MCP transport\n\nMCP tools are the only Market transport in this environment. Do not invoke the CLI, make direct API requests, or switch transports after a failed call.\n\nUse the same conceptual workflow as the Market CLI:\n\n```text\nlist_market_asset_types\nsearch_market\nget_market_asset\nget_market_asset_preview\n```\n\n`search_market` requires an asset type and returns exact `name@version` references. Inspect the exact manifest with `get_market_asset`; request its preview only when visual evidence matters. Remote MCP tools return immutable references and fetch-ready URLs. They do not install files into the caller's local project.\n\nWhen generation is available, call `generate_market_asset`. If it returns a `jobId`, continue with `get_market_asset_generation`. Do not start the same generation again.\n\nWhen the Market agent is available, call `start_market_agent_run` with the full goal and continue its returned `runId` with `get_market_agent_run`.\n\nUse an exact Market reference with `create_design_frame` when the selected asset belongs in Drawcall Design.\n\n## Choose assets\n\nSearch one concrete need at a time. Use one result for an exact lookup and up to three when the user should choose. If nothing fits, try one broader noun phrase before generating a replacement.\n\nThe exact `name@version` returned by Market is authoritative. Copy it verbatim. Generated identifiers can legitimately end mid-word at the catalog limit; never expand, normalize, or reconstruct one from its description.\n\nPreview a finalist when appearance determines whether it fits. File, preview, and zip URLs returned by Market are opaque. Capability-bearing private URLs are secrets; never derive a URL from an asset name or preview metadata.\n\n## Generate\n\nGeneration creates one Market asset from a description. The description is provider input, not the eventual asset name. A fast provider may return the asset immediately; a slow provider returns a continuation ID for the matching status operation. Resume that job instead of starting the same generation again.\n\nReference images must be direct fetchable image URLs or image data, never webpage URLs. The current asset-type metadata says which types support references and how many they accept.\n\nA generated humanoid model is one expressive, animation-ready biped: one head, two arms, two legs, open empty hands, and no companions or scene. Describe identity, theme, silhouette, clothing, colors, and materials. Express topology outside the shared skeleton as costume or body-surface design so the result remains riggable.\n\nRequest public or private access only when visibility matters. Private generation requires the account's `market:private` entitlement.\n\n## Failures\n\nAn error means the operation did not happen. Correct invalid inputs, refresh an exact reference after a not-found response, and retry one upstream failure once. Never repeat an unchanged failed generation. Use unapproved assets only when the user explicitly requests and accepts them.\n"

package/src/v1/client.ts

@@ -20,6 +20,11 @@ export interface MarketV1ClientOptions {
   baseUrl?: string
   fetch?: typeof globalThis.fetch
   authToken?: string
+  source?: {
+    surface: 'cli' | 'mcp' | 'sdk' | 'web'
+    distinctId?: string
+    analyticsDisabled?: boolean
+  }
 }
 
 /**
@@ -54,10 +59,16 @@ function resilientReads(baseFetch: typeof globalThis.fetch): typeof globalThis.f
  * they are curl-able, shareable and cacheable.
  */
 export function createClient(opts: MarketV1ClientOptions = {}): MarketV1Client {
+  const headers: Record<string, string> = {}
+  if (opts.authToken) headers.authorization = `Bearer ${opts.authToken}`
+  if (opts.source) headers['x-market-surface'] = opts.source.surface
+  if (opts.source?.distinctId) headers['x-posthog-distinct-id'] = opts.source.distinctId
+  if (opts.source?.analyticsDisabled) headers['x-market-analytics-disabled'] = 'true'
+
   const link = new OpenAPILink(contract, {
     url: new URL('/api/v1', opts.baseUrl ?? DEFAULT_BASE_URL).href,
     fetch: resilientReads(opts.fetch ?? ((input, init) => globalThis.fetch(input, init))),
-    headers: opts.authToken ? { authorization: `Bearer ${opts.authToken}` } : undefined,
+    headers,
   })
   return createORPCClient<MarketV1Client>(link)
 }

package/src/v1/contract.ts

@@ -64,6 +64,16 @@ export interface AssetQueryResult {
   assets: AssetSearchResult[]
 }
 
+export const installReceiptSchema = z.object({
+  assetCount: z.number().int().nonnegative(),
+  assetTypes: z.array(z.string().min(1).max(64)).max(64),
+  fileCount: z.number().int().nonnegative(),
+  npmDependencyCount: z.number().int().nonnegative(),
+  redirectedFileCount: z.number().int().nonnegative(),
+  skillDependencyCount: z.number().int().nonnegative(),
+  warningCount: z.number().int().nonnegative(),
+})
+
 /**
  * The v1 contract: the same procedure tree as the legacy RPC surface (so call sites migrate by
  * swapping only the client), with HTTP routes attached — served as plain REST under `/api/v1`.
@@ -122,6 +132,13 @@ export const contract = {
     },
   },
 
+  installation: {
+    complete: oc
+      .route({ method: 'POST', path: '/installs' })
+      .input(installReceiptSchema)
+      .output(z.object({ accepted: z.literal(true) })),
+  },
+
   user: {
     getProfile: oc.route({ method: 'GET', path: '/me' }).output(z.custom<User | null>()),