@amerged/ohmyhost-cli 0.1.41 → 0.1.43

package/dist/{chunk-SB6RMO3M.js → chunk-5TO5I2HF.js}

@@ -9012,17 +9012,17 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
     var VARIABLE_NAME_REGEX = /^[A-Za-z][A-Za-z-]*$/;
     var VARIABLE_VALUE_COMMENT_REGEX = /^(.*?)( *[#;].*)$/;
     var extractSectionLine = (line) => {
-      const matches = SECTION_LINE_REGEX.exec(line);
-      if (matches != null) {
-        const [section, subsection] = matches.slice(1);
+      const matches2 = SECTION_LINE_REGEX.exec(line);
+      if (matches2 != null) {
+        const [section, subsection] = matches2.slice(1);
         return [section, subsection];
       }
       return null;
     };
     var extractVariableLine = (line) => {
-      const matches = VARIABLE_LINE_REGEX.exec(line);
-      if (matches != null) {
-        const [name, rawValue = "true"] = matches.slice(1);
+      const matches2 = VARIABLE_LINE_REGEX.exec(line);
+      if (matches2 != null) {
+        const [name, rawValue = "true"] = matches2.slice(1);
         const valueWithoutComments = removeComments(rawValue);
         const valueWithoutQuotes = removeQuotes(valueWithoutComments);
         return [name, valueWithoutQuotes];
@@ -10641,14 +10641,14 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
        * @param {string} short
        * @param {string[]} matches
        */
-      constructor(nouns, short, matches) {
+      constructor(nouns, short, matches2) {
         super(
-          `Found multiple ${nouns} matching "${short}" (${matches.join(
+          `Found multiple ${nouns} matching "${short}" (${matches2.join(
             ", "
           )}). Use a longer abbreviation length to disambiguate them.`
         );
         this.code = this.name = _AmbiguousError.code;
-        this.data = { nouns, short, matches };
+        this.data = { nouns, short, matches: matches2 };
       }
     };
     AmbiguousError.code = "AmbiguousError";
@@ -11021,9 +11021,9 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
       IndexResetError,
       NoCommitError
     });
-    function formatAuthor({ name, email, timestamp: timestamp6, timezoneOffset }) {
+    function formatAuthor({ name, email, timestamp: timestamp7, timezoneOffset }) {
       timezoneOffset = formatTimezoneOffset(timezoneOffset);
-      return `${name} <${email}> ${timestamp6} ${timezoneOffset}`;
+      return `${name} <${email}> ${timestamp7} ${timezoneOffset}`;
     }
     function formatTimezoneOffset(minutes) {
       const sign = simpleSign(negateExceptForZero(minutes));
@@ -11049,13 +11049,13 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
       return str;
     }
     function parseAuthor(author) {
-      const [, name, email, timestamp6, offset] = author.match(
+      const [, name, email, timestamp7, offset] = author.match(
         /^(.*) <(.*)> (.*) (.*)$/
       );
       return {
         name,
         email,
-        timestamp: Number(timestamp6),
+        timestamp: Number(timestamp7),
         timezoneOffset: parseTimezoneOffset(offset)
       };
     }
@@ -12395,13 +12395,13 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       return target;
     }
     async function normalizeAuthorObject({ fs: fs3, gitdir, author, commit: commit3 }) {
-      const timestamp6 = Math.floor(Date.now() / 1e3);
+      const timestamp7 = Math.floor(Date.now() / 1e3);
       const defaultAuthor = {
         name: await _getConfig({ fs: fs3, gitdir, path: "user.name" }),
         email: await _getConfig({ fs: fs3, gitdir, path: "user.email" }) || "",
         // author.email is allowed to be empty string
-        timestamp: timestamp6,
-        timezoneOffset: new Date(timestamp6 * 1e3).getTimezoneOffset()
+        timestamp: timestamp7,
+        timezoneOffset: new Date(timestamp7 * 1e3).getTimezoneOffset()
       };
       const normalizedAuthor = assignDefined(
         {},
@@ -12421,13 +12421,13 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       committer,
       commit: commit3
     }) {
-      const timestamp6 = Math.floor(Date.now() / 1e3);
+      const timestamp7 = Math.floor(Date.now() / 1e3);
       const defaultCommitter = {
         name: await _getConfig({ fs: fs3, gitdir, path: "user.name" }),
         email: await _getConfig({ fs: fs3, gitdir, path: "user.email" }) || "",
         // committer.email is allowed to be empty string
-        timestamp: timestamp6,
-        timezoneOffset: new Date(timestamp6 * 1e3).getTimezoneOffset()
+        timestamp: timestamp7,
+        timezoneOffset: new Date(timestamp7 * 1e3).getTimezoneOffset()
       };
       const normalizedCommitter = assignDefined(
         {},
@@ -14894,18 +14894,18 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
           address: url
         };
       }
-      const matches = url.match(/(\w+)(:\/\/|::)(.*)/);
-      if (matches === null) return;
-      if (matches[2] === "://") {
+      const matches2 = url.match(/(\w+)(:\/\/|::)(.*)/);
+      if (matches2 === null) return;
+      if (matches2[2] === "://") {
         return {
-          transport: matches[1],
-          address: matches[0]
+          transport: matches2[1],
+          address: matches2[0]
         };
       }
-      if (matches[2] === "::") {
+      if (matches2[2] === "::") {
         return {
-          transport: matches[1],
-          address: matches[3]
+          transport: matches2[1],
+          address: matches2[3]
         };
       }
     }
@@ -15530,12 +15530,12 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
         forAwait(lines, async (line) => {
           if (onMessage) await onMessage(line);
           if (onProgress) {
-            const matches = line.match(/([^:]*).*\((\d+?)\/(\d+?)\)/);
-            if (matches) {
+            const matches2 = line.match(/([^:]*).*\((\d+?)\/(\d+?)\)/);
+            if (matches2) {
               await onProgress({
-                phase: matches[1].trim(),
-                loaded: parseInt(matches[2], 10),
-                total: parseInt(matches[3], 10)
+                phase: matches2[1].trim(),
+                loaded: parseInt(matches2[2], 10),
+                total: parseInt(matches2[3], 10)
               });
             }
           }
@@ -18604,9 +18604,9 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       static createStashReflogEntry(author, stashCommit, message) {
         const nameNoSpace = author.name.replace(/\s/g, "");
         const z40 = "0000000000000000000000000000000000000000";
-        const timestamp6 = Math.floor(Date.now() / 1e3);
+        const timestamp7 = Math.floor(Date.now() / 1e3);
         const timezoneOffset = _GitRefStash.timezoneOffsetForRefLogEntry;
-        return `${z40} ${stashCommit} ${nameNoSpace} ${author.email} ${timestamp6} ${timezoneOffset}	${message}
+        return `${z40} ${stashCommit} ${nameNoSpace} ${author.email} ${timestamp7} ${timezoneOffset}	${message}
 `;
       }
       static getStashReflogEntry(reflogString, parsed = false) {
@@ -22487,11 +22487,11 @@ var require_validate = __commonJS({
         jsonPointer = $data;
         data = names_1.default.rootData;
       } else {
-        const matches = RELATIVE_JSON_POINTER.exec($data);
-        if (!matches)
+        const matches2 = RELATIVE_JSON_POINTER.exec($data);
+        if (!matches2)
           throw new Error(`Invalid JSON-pointer: ${$data}`);
-        const up = +matches[1];
-        jsonPointer = matches[2];
+        const up = +matches2[1];
+        jsonPointer = matches2[2];
         if (jsonPointer === "#") {
           if (up >= dataLevel)
             throw new Error(errorMsg("property/index", up));
@@ -23410,11 +23410,11 @@ var require_schemes = __commonJS({
         urnComponent.error = "URN can not be parsed";
         return urnComponent;
       }
-      const matches = urnComponent.path.match(URN_REG);
-      if (matches && matches[0] === urnComponent.path) {
+      const matches2 = urnComponent.path.match(URN_REG);
+      if (matches2 && matches2[0] === urnComponent.path) {
         const scheme = options.scheme || urnComponent.scheme || "urn";
-        urnComponent.nid = matches[1].toLowerCase();
-        urnComponent.nss = matches[2];
+        urnComponent.nid = matches2[1].toLowerCase();
+        urnComponent.nss = matches2[2];
         const urnScheme = `${scheme}:${options.nid || urnComponent.nid}`;
         const schemeHandler = getSchemeHandler(urnScheme);
         urnComponent.path = void 0;
@@ -23735,8 +23735,8 @@ var require_fast_uri = __commonJS({
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
     var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
-    function getParseError(parsed, matches) {
-      if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
+    function getParseError(parsed, matches2) {
+      if (matches2[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
       }
       if (typeof parsed.port === "number" && (parsed.port < 0 || parsed.port > 65535)) {
@@ -23758,9 +23758,9 @@ var require_fast_uri = __commonJS({
     function isIPLiteral(host2) {
       return host2[0] === "[" && host2[host2.length - 1] === "]";
     }
-    function hasMalformedComponentPercentEncoding(matches) {
-      const host2 = matches[4];
-      return hasMalformedPercentEncoding(matches[3]) || host2 !== void 0 && !isIPLiteral(host2) && hasMalformedPercentEncoding(host2) || hasMalformedPercentEncoding(matches[6]) || hasMalformedPercentEncoding(matches[7]) || hasMalformedPercentEncoding(matches[8]);
+    function hasMalformedComponentPercentEncoding(matches2) {
+      const host2 = matches2[4];
+      return hasMalformedPercentEncoding(matches2[3]) || host2 !== void 0 && !isIPLiteral(host2) && hasMalformedPercentEncoding(host2) || hasMalformedPercentEncoding(matches2[6]) || hasMalformedPercentEncoding(matches2[7]) || hasMalformedPercentEncoding(matches2[8]);
     }
     function canonicalizeHost(parsed, options, schemeHandler, isIP) {
       if (hasForbiddenDomainHost(parsed, options, schemeHandler, isIP)) {
@@ -23835,15 +23835,15 @@ var require_fast_uri = __commonJS({
           }
         }
       }
-      const matches = uri.match(URI_PARSE);
-      if (matches) {
-        parsed.scheme = matches[1];
-        parsed.userinfo = matches[3];
-        parsed.host = matches[4];
-        parsed.port = parseInt(matches[5], 10);
-        parsed.path = matches[6] || "";
-        parsed.query = matches[7];
-        parsed.fragment = matches[8];
+      const matches2 = uri.match(URI_PARSE);
+      if (matches2) {
+        parsed.scheme = matches2[1];
+        parsed.userinfo = matches2[3];
+        parsed.host = matches2[4];
+        parsed.port = parseInt(matches2[5], 10);
+        parsed.path = matches2[6] || "";
+        parsed.query = matches2[7];
+        parsed.fragment = matches2[8];
         if (parsed.scheme !== void 0) {
           if (VALID_SCHEME.test(parsed.scheme)) {
             parsed.scheme = parsed.scheme.toLowerCase();
@@ -23852,14 +23852,14 @@ var require_fast_uri = __commonJS({
             malformedScheme = true;
           }
         }
-        malformedPercentEncoding = hasMalformedComponentPercentEncoding(matches);
+        malformedPercentEncoding = hasMalformedComponentPercentEncoding(matches2);
         if (malformedPercentEncoding) {
           parsed.error = parsed.error || "URI contains malformed percent-encoding.";
         }
         if (isNaN(parsed.port)) {
-          parsed.port = matches[5];
+          parsed.port = matches2[5];
         }
-        const parseError = getParseError(parsed, matches);
+        const parseError = getParseError(parsed, matches2);
         if (parseError !== void 0) {
           parsed.error = parsed.error || parseError;
           malformedAuthorityOrPort = true;
@@ -26645,7 +26645,7 @@ var require_discriminator = __commonJS({
       error,
       code(cxt) {
         const { gen, data, schema, parentSchema, it } = cxt;
-        const { oneOf } = parentSchema;
+        const { oneOf: oneOf2 } = parentSchema;
         if (!it.opts.discriminator) {
           throw new Error("discriminator: requires discriminator option");
         }
@@ -26654,7 +26654,7 @@ var require_discriminator = __commonJS({
           throw new Error("discriminator: requires propertyName");
         if (schema.mapping)
           throw new Error("discriminator: mapping is not supported");
-        if (!oneOf)
+        if (!oneOf2)
           throw new Error("discriminator: requires oneOf keyword");
         const valid = gen.let("valid", false);
         const tag = gen.const("tag", (0, codegen_1._)`${data}${(0, codegen_1.getProperty)(tagName)}`);
@@ -26682,8 +26682,8 @@ var require_discriminator = __commonJS({
           const oneOfMapping = {};
           const topRequired = hasRequired(parentSchema);
           let tagRequired = true;
-          for (let i = 0; i < oneOf.length; i++) {
-            let sch = oneOf[i];
+          for (let i = 0; i < oneOf2.length; i++) {
+            let sch = oneOf2[i];
             if ((sch === null || sch === void 0 ? void 0 : sch.$ref) && !(0, util_1.schemaHasRulesButRef)(sch, it.self.RULES)) {
               const ref = sch.$ref;
               sch = compile_1.resolveRef.call(it.self, it.schemaEnv.root, it.baseId, ref);
@@ -30277,7 +30277,7 @@ var require_timestamp = __commonJS({
       resolve: (str) => parseSexagesimal(str, false),
       stringify: stringifySexagesimal
     };
-    var timestamp6 = {
+    var timestamp7 = {
       identify: (value) => value instanceof Date,
       default: true,
       tag: "tag:yaml.org,2002:timestamp",
@@ -30286,7 +30286,7 @@ var require_timestamp = __commonJS({
       // assumed to be 00:00:00Z (start of day, UTC).
       test: RegExp("^([0-9]{4})-([0-9]{1,2})-([0-9]{1,2})(?:(?:t|T|[ \\t]+)([0-9]{1,2}):([0-9]{1,2}):([0-9]{1,2}(\\.[0-9]+)?)(?:[ \\t]*(Z|[-+][012]?[0-9](?::[0-9]{2})?))?)?$"),
       resolve(str) {
-        const match = str.match(timestamp6.test);
+        const match = str.match(timestamp7.test);
         if (!match)
           throw new Error("!!timestamp expects a date, starting with yyyy-mm-dd");
         const [, year, month, day, hour, minute, second] = match.map(Number);
@@ -30305,7 +30305,7 @@ var require_timestamp = __commonJS({
     };
     exports.floatTime = floatTime;
     exports.intTime = intTime;
-    exports.timestamp = timestamp6;
+    exports.timestamp = timestamp7;
   }
 });
 
@@ -30325,7 +30325,7 @@ var require_schema4 = __commonJS({
     var omap = require_omap();
     var pairs = require_pairs();
     var set = require_set();
-    var timestamp6 = require_timestamp();
+    var timestamp7 = require_timestamp();
     var schema = [
       map.map,
       seq.seq,
@@ -30345,9 +30345,9 @@ var require_schema4 = __commonJS({
       omap.omap,
       pairs.pairs,
       set.set,
-      timestamp6.intTime,
-      timestamp6.floatTime,
-      timestamp6.timestamp
+      timestamp7.intTime,
+      timestamp7.floatTime,
+      timestamp7.timestamp
     ];
     exports.schema = schema;
   }
@@ -30372,7 +30372,7 @@ var require_tags = __commonJS({
     var pairs = require_pairs();
     var schema$2 = require_schema4();
     var set = require_set();
-    var timestamp6 = require_timestamp();
+    var timestamp7 = require_timestamp();
     var schemas = /* @__PURE__ */ new Map([
       ["core", schema.schema],
       ["failsafe", [map.map, seq.seq, string.string]],
@@ -30386,11 +30386,11 @@ var require_tags = __commonJS({
       float: float.float,
       floatExp: float.floatExp,
       floatNaN: float.floatNaN,
-      floatTime: timestamp6.floatTime,
+      floatTime: timestamp7.floatTime,
       int: int.int,
       intHex: int.intHex,
       intOct: int.intOct,
-      intTime: timestamp6.intTime,
+      intTime: timestamp7.intTime,
       map: map.map,
       merge: merge.merge,
       null: _null.nullTag,
@@ -30398,7 +30398,7 @@ var require_tags = __commonJS({
       pairs: pairs.pairs,
       seq: seq.seq,
       set: set.set,
-      timestamp: timestamp6.timestamp
+      timestamp: timestamp7.timestamp
     };
     var coreKnownTags = {
       "tag:yaml.org,2002:binary": binary.binary,
@@ -30406,7 +30406,7 @@ var require_tags = __commonJS({
       "tag:yaml.org,2002:omap": omap.omap,
       "tag:yaml.org,2002:pairs": pairs.pairs,
       "tag:yaml.org,2002:set": set.set,
-      "tag:yaml.org,2002:timestamp": timestamp6.timestamp
+      "tag:yaml.org,2002:timestamp": timestamp7.timestamp
     };
     function getTags(customTags, schemaName, addMergeTag) {
       const schemaTags = schemas.get(schemaName);
@@ -38396,11 +38396,11 @@ function resolvePackageManager(input) {
 }
 function resolveFrameworkConfig(basename2, files) {
   const supported = [`${basename2}.js`, `${basename2}.mjs`, `${basename2}.ts`];
-  const matches = supported.filter((candidate) => files.includes(candidate));
-  if (matches.length > 1) {
-    throw new FrameworkAdmissionError("ambiguous_config", matches[0]);
+  const matches2 = supported.filter((candidate) => files.includes(candidate));
+  if (matches2.length > 1) {
+    throw new FrameworkAdmissionError("ambiguous_config", matches2[0]);
   }
-  return matches[0] ?? null;
+  return matches2[0] ?? null;
 }
 var STABLE_VERSION_SOURCE = "(?:0|[1-9][0-9]{0,5})\\.(?:0|[1-9][0-9]{0,5})\\.(?:0|[1-9][0-9]{0,5})";
 var VERSION_RANGE = new RegExp(`^([~^])(${STABLE_VERSION_SOURCE})$`, "u");
@@ -38776,14 +38776,14 @@ function isFrameworkConversionDiagnosticCode(value) {
 function parseFrameworkConversionDiagnostic(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     return null;
-  const record6 = value;
-  const code = Object.hasOwn(record6, "code") ? record6["code"] : void 0;
-  const path2 = Object.hasOwn(record6, "path") ? record6["path"] : void 0;
+  const record7 = value;
+  const code = Object.hasOwn(record7, "code") ? record7["code"] : void 0;
+  const path2 = Object.hasOwn(record7, "path") ? record7["path"] : void 0;
   if (!isFrameworkConversionDiagnosticCode(code) || typeof path2 !== "string")
     return null;
   const definition = DETAIL_DEFINITIONS[code];
-  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record6, name) ? record6[name] : void 0]);
-  if (Object.keys(record6).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
+  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record7, name) ? record7[name] : void 0]);
+  if (Object.keys(record7).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
     return null;
   return Object.freeze(Object.fromEntries([
     ["code", code],
@@ -39301,8 +39301,8 @@ function ulid(value) {
   if (typeof value !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value))
     invalid();
 }
-function commit(value, nullable = false) {
-  if (nullable && value === null)
+function commit(value, nullable2 = false) {
+  if (nullable2 && value === null)
     return;
   if (typeof value !== "string" || !/^[a-f0-9]{40}$/u.test(value))
     invalid();
@@ -40055,112 +40055,6 @@ function isSaasCnameTarget(value) {
   return value === "customers.omh.st" || value === "customers.ohmyho.st";
 }
 
-// packages/contracts/dist/credit-pricing.js
-function assertOrganizationCreditUsage(value) {
-  const record6 = (input, keys) => {
-    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
-      throw new TypeError("Invalid usage fields");
-    return input;
-  };
-  const identifier2 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
-  const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
-  const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
-  const report = record6(value, "organization_id,as_of,unit,period,from,projects,days");
-  if (!identifier2(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
-    throw new TypeError("Invalid usage report");
-  let previous = "";
-  for (const input of report["projects"]) {
-    const project = record6(input, "project_id,used_micros");
-    if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
-      throw new TypeError("Invalid usage project");
-    previous = String(project["project_id"]);
-  }
-  let previousDay = "";
-  for (const input of report["days"]) {
-    const day = record6(input, "day,projects");
-    if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
-      throw new TypeError("Invalid usage day");
-    previousDay = day["day"];
-    previous = "";
-    for (const projectInput of day["projects"]) {
-      const project = record6(projectInput, "project_id,meters");
-      if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
-        throw new TypeError("Invalid usage project");
-      previous = String(project["project_id"]);
-      for (const meterInput of project["meters"]) {
-        const meter = record6(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
-        if (meter["environment_id"] !== null && !identifier2(meter["environment_id"]))
-          throw new TypeError("Invalid usage environment");
-        for (const key of ["meter", "unit", "rate_card_id"])
-          if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
-            throw new TypeError("Invalid usage meter");
-        if (typeof meter["quantity"] !== "string" || !/^(0|[1-9][0-9]{0,29})(\.[0-9]{1,12})?$/u.test(meter["quantity"]) || !amount(meter["charged_micros"]))
-          throw new TypeError("Invalid usage amount");
-      }
-    }
-  }
-}
-function assertPublishedCreditRateCards(value) {
-  if (!Array.isArray(value) || value.length > 4)
-    throw new TypeError("Invalid published prices");
-  const ids = /* @__PURE__ */ new Set();
-  for (const input of value) {
-    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== "currency,effective_from,id,published_at,rates")
-      throw new TypeError("Invalid published price fields");
-    const card = input;
-    if (typeof card["id"] !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(card["id"]) || ids.has(card["id"]) || card["currency"] !== "USD")
-      throw new TypeError("Invalid price identity");
-    ids.add(card["id"]);
-    for (const key of ["published_at", "effective_from"]) {
-      const date2 = card[key];
-      if (typeof date2 !== "string" || !Number.isFinite(Date.parse(date2)) || new Date(date2).toISOString() !== date2)
-        throw new TypeError("Invalid price dates");
-    }
-    if (String(card["published_at"]) > String(card["effective_from"]) || !Array.isArray(card["rates"]) || card["rates"].length < 1 || card["rates"].length > 32)
-      throw new TypeError("Invalid price publication");
-    const meters = /* @__PURE__ */ new Set();
-    for (const item of card["rates"]) {
-      if (!item || typeof item !== "object" || Array.isArray(item) || Object.keys(item).sort().join() !== "credit_micros,meter,provider_cost_micros,unit,units_per_charge")
-        throw new TypeError("Invalid rate fields");
-      const rate = item;
-      for (const key of ["meter", "unit"])
-        if (typeof rate[key] !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(String(rate[key])))
-          throw new TypeError("Invalid rate unit");
-      const identity = String(rate["meter"]) + "/" + String(rate["unit"]);
-      if (meters.has(identity))
-        throw new TypeError("Duplicate rate");
-      meters.add(identity);
-      for (const key of ["units_per_charge", "provider_cost_micros", "credit_micros"]) {
-        const amount = rate[key];
-        if (key === "provider_cost_micros" && amount === null && rate["meter"] === "pgcf.memory.active")
-          continue;
-        if (typeof amount !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(amount) || BigInt(amount) > 9223372036854775807n || key === "units_per_charge" && amount === "0")
-          throw new TypeError("Invalid rate amount");
-      }
-    }
-  }
-}
-function assertOrganizationAccount(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "as_of,available_micros,monthly_micros,name,next_expiry,one_time_micros,organization_id,paid_until,plan,plan_source,reserved_micros,workos_organization_id")
-    throw new TypeError("Invalid account fields");
-  const v = value;
-  if (typeof v["organization_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["organization_id"]) || typeof v["name"] !== "string" || v["name"].length > 128 || typeof v["workos_organization_id"] !== "string" || !/^org_[A-Za-z0-9_]+$/u.test(v["workos_organization_id"]) || v["plan"] !== "paid" && v["plan"] !== "free" || !["free", "stripe", "granted", "manual"].includes(String(v["plan_source"])) || v["plan"] === "free" !== (v["plan_source"] === "free"))
-    throw new TypeError("Invalid account scope");
-  for (const field of ["available_micros", "monthly_micros", "one_time_micros", "reserved_micros"])
-    if (typeof v[field] !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(v[field]))
-      throw new TypeError("Invalid account credits");
-  const held = BigInt(String(v["reserved_micros"]));
-  const balance = BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"]));
-  if (BigInt(String(v["available_micros"])) !== (balance > held ? balance - held : 0n))
-    throw new TypeError("Account credit buckets do not balance");
-  for (const field of ["as_of", "paid_until", "next_expiry"]) {
-    if (field !== "as_of" && v[field] === null)
-      continue;
-    if (typeof v[field] !== "string" || !Number.isFinite(Date.parse(v[field])) || new Date(v[field]).toISOString() !== v[field])
-      throw new TypeError("Invalid account timestamp");
-  }
-}
-
 // packages/contracts/dist/problem-policy.js
 var PROBLEM_POLICY = {
   source_generation_conflict: {
@@ -40301,6 +40195,30 @@ var PROBLEM_POLICY = {
     action: "List the project's database credentials and revoke one you no longer need, then request access again.",
     title: "Database access limit reached"
   },
+  database_webhook_limit: {
+    status: 409,
+    retryable: false,
+    action: "List the project's database webhooks for this environment and delete one you no longer need, then create the webhook again.",
+    title: "Database webhook limit reached"
+  },
+  database_schedule_limit: {
+    status: 409,
+    retryable: false,
+    action: "List the project's database schedules for this environment and delete one you no longer need, then set the schedule again.",
+    title: "Database schedule limit reached"
+  },
+  database_schedule_not_runnable: {
+    status: 409,
+    retryable: false,
+    action: "Read the schedule and its runs. Enable a disabled schedule, or wait until the run already queued has finished, then request the run again.",
+    title: "Database schedule cannot run now"
+  },
+  database_webhook_delivery_pending: {
+    status: 409,
+    retryable: false,
+    action: "The platform is still retrying this webhook delivery. Read the delivery in the delivery list; replay it only if it ends dead_lettered or the receiver needs the event again.",
+    title: "Webhook delivery still pending"
+  },
   project_notes_conflict: {
     status: 409,
     retryable: false,
@@ -40882,19 +40800,12 @@ function parseOrganizationCredits(value) {
     "available_micros",
     "reserved_micros",
     "grace_started_at",
-    "grace_expires_at",
-    "active_meters",
-    "rate_cards"
+    "grace_expires_at"
   ]);
-  try {
-    assertPublishedCreditRateCards(input["rate_cards"]);
-  } catch {
-    throw new ResponseContractError();
-  }
   const graceStart = input["grace_started_at"], graceEnd = input["grace_expires_at"];
   if (!(graceStart === null && graceEnd === null) && !(isIsoInstant(graceStart) && isIsoInstant(graceEnd) && Date.parse(graceEnd) - Date.parse(graceStart) === 6048e5))
     throw new ResponseContractError();
-  if (!isUlid(input["organization_id"]) || input["unit"] !== "microcredits" || !isIsoInstant(input["as_of"]) || !Array.isArray(input["active_meters"]) || input["active_meters"].some((m) => typeof m !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(m)))
+  if (!isUlid(input["organization_id"]) || input["unit"] !== "microcredits" || !isIsoInstant(input["as_of"]))
     throw new ResponseContractError();
   for (const field of ["available_micros", "reserved_micros"]) {
     const amount = input[field];
@@ -41443,8 +41354,8 @@ var isPaidValidationRecord = (value) => {
   if (typeof value !== "object" || value === null || Array.isArray(value) || Object.keys(value).sort().join(",") !== "content,name,purpose,type") {
     return false;
   }
-  const record6 = value;
-  return (record6["type"] === "CNAME" || record6["type"] === "TXT") && boundedString(record6["name"], 1, 253) && boundedString(record6["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record6["purpose"]));
+  const record7 = value;
+  return (record7["type"] === "CNAME" || record7["type"] === "TXT") && boundedString(record7["name"], 1, 253) && boundedString(record7["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record7["purpose"]));
 };
 var isHttpsUrlValue = (value) => typeof value === "string" && isHttpsUrl(value);
 
@@ -41589,7 +41500,7 @@ async function prepareLocalSourcePublication(input) {
     request = { ...request, expected_commit_sha: link2.source.last_confirmed_commit_sha };
   }
   parseManagedSourceRequest("upload", request);
-  const record6 = {
+  const record7 = {
     version: 1,
     ...scope,
     operation_id: null,
@@ -41598,16 +41509,16 @@ async function prepareLocalSourcePublication(input) {
     request
   };
   if (original !== null) {
-    assertSameAttempt(original, record6);
+    assertSameAttempt(original, record7);
   } else
-    await writePending(record6, true);
+    await writePending(record7, true);
   return {
     request,
     accepted: async (operation) => {
       const current = await readPending(scope, replay);
       if (current === null)
         throw new LocalSourcePublicationError("source_publication_missing");
-      assertSameAttempt(current, record6);
+      assertSameAttempt(current, record7);
       if (current.operation_id !== null && current.operation_id !== operation.id)
         throw new ResponseContractError();
       if (!replay)
@@ -41626,7 +41537,7 @@ async function prepareLocalSourcePublication(input) {
         const current = await readPending(scope);
         if (current === null || current.operation_id !== null)
           return;
-        assertSameAttempt(current, record6);
+        assertSameAttempt(current, record7);
       } catch (error2) {
         if (error2 instanceof LocalSourcePublicationError && (error2.code === "source_publication_scope_mismatch" || error2.code === "source_publication_pending"))
           return;
@@ -41829,12 +41740,12 @@ async function readRecord(path2) {
     await handle?.close();
   }
 }
-async function writePending(record6, create, completed = false) {
-  const parent = join3(record6.directory, ".ohmyhost");
+async function writePending(record7, create, completed = false) {
+  const parent = join3(record7.directory, ".ohmyhost");
   for (const directory of [
     parent,
-    record6.metadata_directory,
-    join3(record6.metadata_directory, "publications")
+    record7.metadata_directory,
+    join3(record7.metadata_directory, "publications")
   ]) {
     try {
       await fs2.mkdir(directory, { mode: 448 });
@@ -41845,10 +41756,10 @@ async function writePending(record6, create, completed = false) {
     await checkedDirectory(directory);
     await fs2.chmod(directory, 448);
   }
-  const target = completed ? completedPath(record6) : pendingPath(record6);
+  const target = completed ? completedPath(record7) : pendingPath(record7);
   const temporary = create ? target : `${target}.${randomUUID()}.tmp`;
   try {
-    await fs2.writeFile(temporary, `${JSON.stringify(record6)}
+    await fs2.writeFile(temporary, `${JSON.stringify(record7)}
 `, { mode: 384, flag: "wx" });
     if (!create)
       await fs2.rename(temporary, target);
@@ -42468,6 +42379,350 @@ function isUserSecretName(value, action = "set") {
   return action === "delete" ? !INSTALLED_PLATFORM_KEYS.has(value) : !value.startsWith("OHMYHOST_") && !FIXED_PLATFORM_NAMES.has(value);
 }
 
+// packages/contracts/dist/database-events.js
+var DATABASE_WEBHOOK_EVENT_TYPES = [
+  "database.created",
+  "database.ready",
+  "database.woke",
+  "database.slept",
+  "database.suspended",
+  "database.resized",
+  "database.deleted"
+];
+var DATABASE_WEBHOOK_MAX_EVENT_TYPES = 16;
+var DATABASE_WEBHOOK_MAX_HEADERS = 8;
+var DATABASE_WEBHOOK_URL_MAX_LENGTH = 2048;
+var DATABASE_SCHEDULE_MIN_EVERY_SECONDS = 60;
+var DATABASE_SCHEDULE_MAX_EVERY_SECONDS = 31 * 86400;
+var DATABASE_SCHEDULE_CRON_MIN_LENGTH = 9;
+var DATABASE_SCHEDULE_CRON_MAX_LENGTH = 120;
+var DATABASE_SCHEDULE_MAX_STATEMENTS = 20;
+var DATABASE_SCHEDULE_STATEMENT_MAX_BYTES = 16 * 1024;
+var DATABASE_SCHEDULE_STATEMENTS_MAX_BYTES = 64 * 1024;
+var DATABASE_SCHEDULE_MIN_TIMEOUT_MS = 1e3;
+var DATABASE_SCHEDULE_DEFAULT_TIMEOUT_MS = 1e4;
+var DATABASE_SCHEDULE_MAX_TIMEOUT_MS = 3e4;
+var DATABASE_SCHEDULE_OUTCOMES = [
+  "succeeded",
+  "failed",
+  "timed_out",
+  "outcome_unknown",
+  "rejected",
+  "skipped_capacity",
+  "skipped_suspended",
+  "skipped_deleted",
+  "skipped_missed"
+];
+var DATABASE_EXECUTION_METRICS = [
+  "schedule_runs_succeeded",
+  "schedule_runs_failed",
+  "schedule_runs_timed_out",
+  "schedule_runs_outcome_unknown",
+  "schedule_runs_rejected",
+  "schedule_runs_skipped",
+  "events_emitted",
+  "event_bytes",
+  "webhook_attempts",
+  "webhook_deliveries_delivered",
+  "webhook_deliveries_dead_lettered"
+];
+var DATABASE_PAGE_MAX_ITEMS = 100;
+var USAGE_HOUR_MS = 36e5;
+var USAGE_MAX_RANGE_MS = 31 * 24 * USAGE_HOUR_MS;
+var WEBHOOK_KEYS = ["id", "environment", "url", "event_types", "header_names", "created_at"];
+var WEBHOOK_ID_PATTERN = /^whk_[a-z0-9]{20}$/u;
+var DELIVERY_ID_PATTERN = /^dlv_[0-9a-f]{20}$/u;
+var EVENT_ID_PATTERN = /^evt_[0-9a-f]{20}$/u;
+var SCHEDULE_NAME_PATTERN = /^[a-z][a-z0-9_-]{0,62}$/u;
+var CURSOR_PATTERN = /^[A-Za-z0-9._|:=+/-]{1,200}$/u;
+var HEADER_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9-]{0,63}$/u;
+var HEADER_VALUE_PATTERN = /^[\x21-\x7e]([\x20-\x7e]*[\x21-\x7e])?$/u;
+var HEADER_FORBIDDEN_NAMES = [
+  "host",
+  "content-length",
+  "content-type",
+  "connection",
+  "transfer-encoding",
+  "user-agent",
+  "te",
+  "upgrade",
+  "expect"
+];
+var HEADER_FORBIDDEN_PREFIXES = ["pgcf-", "cf-", "x-forwarded-"];
+function parseDatabaseWebhookId(value) {
+  if (!matches(value, WEBHOOK_ID_PATTERN))
+    throw new TypeError("Invalid database webhook id");
+  return value;
+}
+function parseDatabaseDeliveryId(value) {
+  if (!matches(value, DELIVERY_ID_PATTERN))
+    throw new TypeError("Invalid database delivery id");
+  return value;
+}
+function parseDatabaseScheduleName(value) {
+  if (!matches(value, SCHEDULE_NAME_PATTERN))
+    throw new TypeError("Invalid database schedule name");
+  return value;
+}
+function parseDatabaseListLimit(value, max, fallback) {
+  if (value === void 0)
+    return fallback;
+  const limit = typeof value === "string" && /^[1-9][0-9]{0,3}$/u.test(value) ? Number(value) : value;
+  if (typeof limit !== "number" || !Number.isSafeInteger(limit) || limit < 1 || limit > max)
+    throw new TypeError("Invalid database list limit");
+  return limit;
+}
+function parseDatabaseCursor(value) {
+  if (value === void 0 || value === null)
+    return null;
+  if (!matches(value, CURSOR_PATTERN))
+    throw new TypeError("Invalid database cursor");
+  return value;
+}
+function parseDatabaseUsageWindow(from, to, granularity) {
+  if (!timestamp2(from) || !timestamp2(to) || !oneOf(["hour", "day"], granularity))
+    throw new TypeError("Invalid database usage window");
+  const start = Date.parse(from), end = Date.parse(to), unit = granularity === "hour" ? USAGE_HOUR_MS : 24 * USAGE_HOUR_MS;
+  if (end <= start || end - start > USAGE_MAX_RANGE_MS || start % unit !== 0 || end % unit !== 0)
+    throw new TypeError("Invalid database usage window");
+  return { from, to, granularity };
+}
+function parseDatabaseWebhookCreateRequest(value) {
+  if (!record2(value) || !onlyKeys(value, ["url", "event_types", "headers"]))
+    throw new TypeError("Invalid database webhook request");
+  return {
+    url: parseHttpsUrl(value["url"]),
+    event_types: parseEventTypes(value["event_types"]),
+    headers: value["headers"] === void 0 ? {} : parseHeaders(value["headers"])
+  };
+}
+function parseDatabaseScheduleSetRequest(value) {
+  if (!record2(value) || !onlyKeys(value, ["cron", "every_seconds", "statements", "timeout_ms", "enabled", "confirm"]) || value["confirm"] !== true || value["cron"] === void 0 === (value["every_seconds"] === void 0))
+    throw new TypeError("Invalid database schedule request");
+  const enabled = value["enabled"] === void 0 ? true : value["enabled"];
+  if (typeof enabled !== "boolean")
+    throw new TypeError("Invalid database schedule request");
+  return {
+    cron: value["cron"] === void 0 ? null : parseCron(value["cron"]),
+    every_seconds: value["every_seconds"] === void 0 ? null : parseEverySeconds(value["every_seconds"]),
+    statements: parseStatements(value["statements"]),
+    timeout_ms: value["timeout_ms"] === void 0 ? DATABASE_SCHEDULE_DEFAULT_TIMEOUT_MS : parseTimeout(value["timeout_ms"]),
+    enabled
+  };
+}
+function assertDatabaseWebhook(value) {
+  if (!record2(value) || !exact2(value, WEBHOOK_KEYS))
+    throw new TypeError("Invalid database webhook");
+  assertWebhookFields(value);
+}
+function assertDatabaseWebhookCreated(value) {
+  if (!record2(value) || !exact2(value, [...WEBHOOK_KEYS, "secret"]) || typeof value["secret"] !== "string" || value["secret"].length === 0)
+    throw new TypeError("Invalid database webhook");
+  assertWebhookFields(value);
+}
+function assertDatabaseWebhookPage(value) {
+  if (!record2(value) || !exact2(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database webhook page");
+  for (const item of value["items"])
+    assertDatabaseWebhook(item);
+}
+function assertDatabaseWebhookDeleted(value) {
+  if (!record2(value) || !exact2(value, ["id", "deleted"]) || !matches(value["id"], WEBHOOK_ID_PATTERN) || value["deleted"] !== true)
+    throw new TypeError("Invalid database webhook deletion");
+}
+function assertDatabaseWebhookDelivery(value) {
+  if (!record2(value) || !exact2(value, [
+    "id",
+    "event_id",
+    "event_type",
+    "webhook_id",
+    "state",
+    "attempts",
+    "created_at",
+    "next_attempt_at",
+    "delivered_at",
+    "last_status",
+    "last_error"
+  ]) || !matches(value["id"], DELIVERY_ID_PATTERN) || !matches(value["event_id"], EVENT_ID_PATTERN) || !oneOf(DATABASE_WEBHOOK_EVENT_TYPES, value["event_type"]) || !matches(value["webhook_id"], WEBHOOK_ID_PATTERN) || !oneOf(["pending", "delivered", "dead_lettered"], value["state"]) || !nonNegativeInteger(value["attempts"]) || !timestamp2(value["created_at"]) || !nullable(value["next_attempt_at"], timestamp2) || !nullable(value["delivered_at"], timestamp2) || !nullable(value["last_status"], Number.isSafeInteger) || !nullable(value["last_error"], (error) => oneOf(["timeout", "network", "http", "expired", "permanent"], error)))
+    throw new TypeError("Invalid database webhook delivery");
+}
+function assertDatabaseWebhookDeliveryPage(value) {
+  if (!record2(value) || !exact2(value, ["items", "next_cursor"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database webhook delivery page");
+  for (const item of value["items"])
+    assertDatabaseWebhookDelivery(item);
+  if (!nullable(value["next_cursor"], isCursor))
+    throw new TypeError("Invalid database webhook delivery page");
+}
+function assertDatabaseWebhookTest(value) {
+  if (!record2(value) || !exact2(value, ["delivered", "status", "error", "duration_ms"]) || typeof value["delivered"] !== "boolean" || !nullable(value["status"], Number.isSafeInteger) || !nullable(value["error"], (error) => oneOf(["timeout", "network", "http"], error)) || !nonNegativeInteger(value["duration_ms"]))
+    throw new TypeError("Invalid database webhook test result");
+}
+function assertDatabaseWebhookReplayAccepted(value) {
+  if (!record2(value) || !exact2(value, ["delivery_id", "state"]) || !matches(value["delivery_id"], DELIVERY_ID_PATTERN) || value["state"] !== "pending")
+    throw new TypeError("Invalid database webhook replay");
+}
+function assertDatabaseSchedule(value) {
+  if (!record2(value) || !exact2(value, [
+    "name",
+    "environment",
+    "cron",
+    "every_seconds",
+    "statements",
+    "timeout_ms",
+    "enabled",
+    "next_run_at",
+    "created_at"
+  ]) || !matches(value["name"], SCHEDULE_NAME_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || value["cron"] === null === (value["every_seconds"] === null) || !nullable(value["cron"], isCronText) || !nullable(value["every_seconds"], isEverySeconds) || !Array.isArray(value["statements"]) || value["statements"].length > DATABASE_SCHEDULE_MAX_STATEMENTS || !value["statements"].every((statement) => typeof statement === "string") || !isTimeout(value["timeout_ms"]) || typeof value["enabled"] !== "boolean" || !nullable(value["next_run_at"], timestamp2) || !timestamp2(value["created_at"]))
+    throw new TypeError("Invalid database schedule");
+}
+function assertDatabaseSchedulePage(value) {
+  if (!record2(value) || !exact2(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database schedule page");
+  for (const item of value["items"])
+    assertDatabaseSchedule(item);
+}
+function assertDatabaseScheduleDeleted(value) {
+  if (!record2(value) || !exact2(value, ["name", "deleted"]) || !matches(value["name"], SCHEDULE_NAME_PATTERN) || value["deleted"] !== true)
+    throw new TypeError("Invalid database schedule deletion");
+}
+function assertDatabaseScheduleRunPage(value) {
+  if (!record2(value) || !exact2(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database schedule run page");
+  for (const item of value["items"])
+    assertDatabaseScheduleRun(item);
+}
+function assertDatabaseScheduleRunAccepted(value) {
+  if (!record2(value) || !exact2(value, ["schedule", "state"]) || !matches(value["schedule"], SCHEDULE_NAME_PATTERN) || value["state"] !== "queued")
+    throw new TypeError("Invalid database schedule run");
+}
+function assertDatabaseExecutionUsagePage(value) {
+  if (!record2(value) || !exact2(value, ["items", "next_cursor"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database execution usage page");
+  for (const row of value["items"])
+    assertUsageRow(row);
+  if (!nullable(value["next_cursor"], isCursor))
+    throw new TypeError("Invalid database execution usage page");
+}
+function assertDatabaseScheduleRun(value) {
+  if (!record2(value) || !exact2(value, [
+    "id",
+    "schedule",
+    "scheduled_at",
+    "started_at",
+    "finished_at",
+    "outcome",
+    "sqlstate",
+    "attempts",
+    "manual"
+  ]) || !nonNegativeInteger(value["id"]) || !matches(value["schedule"], SCHEDULE_NAME_PATTERN) || !timestamp2(value["scheduled_at"]) || !nullable(value["started_at"], timestamp2) || !timestamp2(value["finished_at"]) || !oneOf(DATABASE_SCHEDULE_OUTCOMES, value["outcome"]) || !nullable(value["sqlstate"], (state) => typeof state === "string") || !nonNegativeInteger(value["attempts"]) || typeof value["manual"] !== "boolean")
+    throw new TypeError("Invalid database schedule run");
+}
+function assertUsageRow(value) {
+  if (!record2(value) || !exact2(value, ["start", "end", "final", "metrics"]) || !timestamp2(value["start"]) || !timestamp2(value["end"]) || typeof value["final"] !== "boolean" || !record2(value["metrics"]) || !exact2(value["metrics"], DATABASE_EXECUTION_METRICS))
+    throw new TypeError("Invalid database execution usage row");
+  const metrics = value["metrics"];
+  if (!DATABASE_EXECUTION_METRICS.every((metric) => nonNegativeInteger(metrics[metric])))
+    throw new TypeError("Invalid database execution usage row");
+}
+function assertWebhookFields(value) {
+  if (!matches(value["id"], WEBHOOK_ID_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || !isHttpsUrl2(value["url"]) || !Array.isArray(value["event_types"]) || value["event_types"].length < 1 || value["event_types"].length > DATABASE_WEBHOOK_MAX_EVENT_TYPES || !value["event_types"].every((type) => oneOf(DATABASE_WEBHOOK_EVENT_TYPES, type)) || !Array.isArray(value["header_names"]) || value["header_names"].length > DATABASE_WEBHOOK_MAX_HEADERS || !value["header_names"].every((name) => matches(name, HEADER_NAME_PATTERN)) || !timestamp2(value["created_at"]))
+    throw new TypeError("Invalid database webhook");
+}
+function parseHttpsUrl(value) {
+  if (!isHttpsUrl2(value))
+    throw new TypeError("Invalid database webhook url");
+  return value;
+}
+function isHttpsUrl2(value) {
+  if (typeof value !== "string" || value.length > DATABASE_WEBHOOK_URL_MAX_LENGTH)
+    return false;
+  try {
+    return new URL(value).protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function parseEventTypes(value) {
+  if (!Array.isArray(value) || value.length < 1 || value.length > DATABASE_WEBHOOK_MAX_EVENT_TYPES || !value.every((type) => oneOf(DATABASE_WEBHOOK_EVENT_TYPES, type)) || new Set(value).size !== value.length)
+    throw new TypeError("Invalid database webhook event types");
+  return value;
+}
+function parseHeaders(value) {
+  if (!record2(value) || Object.keys(value).length > DATABASE_WEBHOOK_MAX_HEADERS || new Set(Object.keys(value).map((name) => name.toLowerCase())).size !== Object.keys(value).length)
+    throw new TypeError("Invalid database webhook headers");
+  const headers = {};
+  for (const [name, headerValue] of Object.entries(value)) {
+    const lower = name.toLowerCase();
+    if (!HEADER_NAME_PATTERN.test(name) || HEADER_FORBIDDEN_NAMES.includes(lower) || HEADER_FORBIDDEN_PREFIXES.some((prefix) => lower.startsWith(prefix)) || typeof headerValue !== "string" || headerValue.length > 512 || !HEADER_VALUE_PATTERN.test(headerValue))
+      throw new TypeError("Invalid database webhook headers");
+    headers[name] = headerValue;
+  }
+  return headers;
+}
+function parseCron(value) {
+  if (!isCronText(value))
+    throw new TypeError("Invalid database schedule cron");
+  return value;
+}
+function isCronText(value) {
+  return typeof value === "string" && value.length >= DATABASE_SCHEDULE_CRON_MIN_LENGTH && value.length <= DATABASE_SCHEDULE_CRON_MAX_LENGTH;
+}
+function parseEverySeconds(value) {
+  if (!isEverySeconds(value))
+    throw new TypeError("Invalid database schedule interval");
+  return value;
+}
+function isEverySeconds(value) {
+  return Number.isSafeInteger(value) && value >= DATABASE_SCHEDULE_MIN_EVERY_SECONDS && value <= DATABASE_SCHEDULE_MAX_EVERY_SECONDS;
+}
+function parseTimeout(value) {
+  if (!isTimeout(value))
+    throw new TypeError("Invalid database schedule timeout");
+  return value;
+}
+function isTimeout(value) {
+  return Number.isSafeInteger(value) && value >= DATABASE_SCHEDULE_MIN_TIMEOUT_MS && value <= DATABASE_SCHEDULE_MAX_TIMEOUT_MS;
+}
+function parseStatements(value) {
+  if (!Array.isArray(value) || value.length < 1 || value.length > DATABASE_SCHEDULE_MAX_STATEMENTS || !value.every((statement) => typeof statement === "string" && statement.trim().length > 0 && !statement.includes("\0") && new TextEncoder().encode(statement).byteLength <= DATABASE_SCHEDULE_STATEMENT_MAX_BYTES) || new TextEncoder().encode(value.join("")).byteLength > DATABASE_SCHEDULE_STATEMENTS_MAX_BYTES)
+    throw new TypeError("Invalid database schedule statements");
+  return value;
+}
+function isCursor(value) {
+  return matches(value, CURSOR_PATTERN);
+}
+function pageItems(value) {
+  return Array.isArray(value) && value.length <= DATABASE_PAGE_MAX_ITEMS;
+}
+function nonNegativeInteger(value) {
+  return Number.isSafeInteger(value) && value >= 0;
+}
+function nullable(value, check) {
+  return value === null || check(value);
+}
+function matches(value, pattern) {
+  return typeof value === "string" && pattern.test(value);
+}
+function oneOf(allowed, value) {
+  return typeof value === "string" && allowed.includes(value);
+}
+function timestamp2(value) {
+  if (typeof value !== "string")
+    return false;
+  const time3 = Date.parse(value);
+  return Number.isFinite(time3) && new Date(time3).toISOString() === value;
+}
+function record2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function onlyKeys(value, allowed) {
+  return Object.keys(value).every((key) => allowed.includes(key));
+}
+function exact2(value, keys) {
+  return Object.keys(value).sort().join(",") === [...keys].sort().join(",");
+}
+
 // packages/contracts/dist/database-sizes.js
 var DATABASE_SIZES = Object.freeze([
   Object.freeze({
@@ -42828,6 +43083,38 @@ var recognizedCommandLabel = (argv) => {
       if (values[1] === "revoke")
         return "database access revoke";
     }
+    if (value === "database" && values[0] === "webhook") {
+      if (values[1] === "create")
+        return "database webhook create";
+      if (values[1] === "list")
+        return "database webhook list";
+      if (values[1] === "get")
+        return "database webhook get";
+      if (values[1] === "delete")
+        return "database webhook delete";
+      if (values[1] === "test")
+        return "database webhook test";
+      if (values[1] === "deliveries")
+        return "database webhook deliveries";
+      if (values[1] === "replay")
+        return "database webhook replay";
+    }
+    if (value === "database" && values[0] === "schedule") {
+      if (values[1] === "set")
+        return "database schedule set";
+      if (values[1] === "list")
+        return "database schedule list";
+      if (values[1] === "get")
+        return "database schedule get";
+      if (values[1] === "delete")
+        return "database schedule delete";
+      if (values[1] === "runs")
+        return "database schedule runs";
+      if (values[1] === "run")
+        return "database schedule run";
+    }
+    if (value === "database" && values[0] === "executions")
+      return "database executions";
     if (value === "database" && values[0] === "psql")
       return "database psql";
     if (value === "link" || value === "plan" || value === "deploy" || value === "logs")
@@ -42928,6 +43215,7 @@ var recognizedCommandLabel = (argv) => {
   }
   return "unknown";
 };
+var SCHEDULE_RUNS_MAX_ITEMS = 50;
 var parseProductCliCommand = (argv) => {
   const values = [...argv];
   removeFlag(values, "--json");
@@ -42935,9 +43223,11 @@ var parseProductCliCommand = (argv) => {
   if (values.length === 1 && values[0] === "help" || values.length === 0) {
     return { kind: "help" };
   }
+  if (values[0] === "help")
+    return parseProductCliCommand([...values.slice(1), "--help"]);
   if (help) {
-    const topic = recognizedCommandLabel(values);
-    if (topic === "unknown" || topic === "version" || topic !== values.join(" "))
+    const topic = values.join(" ");
+    if (!/^[a-z][a-z0-9 -]*$/u.test(topic) || topic === "version")
       throw new InvalidCommandError();
     return { kind: "help", topic };
   }
@@ -43642,6 +43932,251 @@ var parseProductCliCommand = (argv) => {
     }
     throw new InvalidCommandError();
   }
+  if (first === "database" && values[0] === "webhook") {
+    values.shift();
+    const subcommand = values.shift();
+    if (subcommand === "create") {
+      if (!yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, [
+        "--project",
+        "--environment",
+        "--url",
+        "--event-types",
+        "--headers-file",
+        "--idempotency-key"
+      ]);
+      const projectId = options["--project"], environment = options["--environment"], url = options["--url"], eventTypes = options["--event-types"], headersFile = options["--headers-file"], idempotencyKey = options["--idempotency-key"];
+      if (!isValue(projectId) || !isValue(idempotencyKey) || !isValue(url) || !isValue(eventTypes) || headersFile !== void 0 && !isValue(headersFile) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      const request = contractValue(() => parseDatabaseWebhookCreateRequest({ url, event_types: eventTypes.split(",") }));
+      return {
+        kind: "database-webhook-create",
+        projectId,
+        environment,
+        url: request.url,
+        eventTypes: request.event_types,
+        headersFile: headersFile ?? null,
+        idempotencyKey,
+        yes: true,
+        credentialStore
+      };
+    }
+    if (subcommand === "list") {
+      if (yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment"]);
+      const projectId = options["--project"], environment = options["--environment"] ?? "dev";
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      return { kind: "database-webhook-list", projectId, environment, credentialStore };
+    }
+    if (subcommand === "get") {
+      if (yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment", "--webhook"]);
+      const projectId = options["--project"], environment = options["--environment"] ?? "dev", webhookId = options["--webhook"];
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      return {
+        kind: "database-webhook-get",
+        projectId,
+        environment,
+        webhookId: contractValue(() => parseDatabaseWebhookId(webhookId)),
+        credentialStore
+      };
+    }
+    if (subcommand === "delete" || subcommand === "test") {
+      if (!yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment", "--webhook"]);
+      const projectId = options["--project"], environment = options["--environment"], webhookId = options["--webhook"];
+      if (!isValue(projectId))
+        throw new InvalidCommandError();
+      if (environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      const target = contractValue(() => parseDatabaseWebhookId(webhookId));
+      if (subcommand === "delete")
+        return {
+          kind: "database-webhook-delete",
+          projectId,
+          environment,
+          webhookId: target,
+          yes: true,
+          credentialStore
+        };
+      return {
+        kind: "database-webhook-test",
+        projectId,
+        environment,
+        webhookId: target,
+        yes: true,
+        credentialStore
+      };
+    }
+    if (subcommand === "deliveries") {
+      if (yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, [
+        "--project",
+        "--environment",
+        "--webhook",
+        "--limit",
+        "--cursor"
+      ]);
+      const projectId = options["--project"], environment = options["--environment"] ?? "dev", webhookId = options["--webhook"], limit = options["--limit"], cursor = options["--cursor"];
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      return {
+        kind: "database-webhook-deliveries",
+        projectId,
+        environment,
+        webhookId: webhookId === void 0 ? null : contractValue(() => parseDatabaseWebhookId(webhookId)),
+        limit: limit === void 0 ? null : contractValue(() => parseDatabaseListLimit(limit, DATABASE_PAGE_MAX_ITEMS, DATABASE_PAGE_MAX_ITEMS)),
+        cursor: contractValue(() => parseDatabaseCursor(cursor)),
+        credentialStore
+      };
+    }
+    if (subcommand === "replay") {
+      if (!yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment", "--delivery"]);
+      const projectId = options["--project"], environment = options["--environment"], deliveryId = options["--delivery"];
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      return {
+        kind: "database-webhook-replay",
+        projectId,
+        environment,
+        deliveryId: contractValue(() => parseDatabaseDeliveryId(deliveryId)),
+        yes: true,
+        credentialStore
+      };
+    }
+    throw new InvalidCommandError();
+  }
+  if (first === "database" && values[0] === "schedule") {
+    values.shift();
+    const subcommand = values.shift();
+    if (subcommand === "set") {
+      if (!yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, [
+        "--project",
+        "--environment",
+        "--name",
+        "--cron",
+        "--every-seconds",
+        "--statements-file",
+        "--timeout-ms",
+        "--enabled"
+      ]);
+      const projectId = options["--project"], environment = options["--environment"], name = options["--name"], cron = options["--cron"], everySeconds = options["--every-seconds"], statementsFile = options["--statements-file"], timeoutMs = options["--timeout-ms"], enabled = options["--enabled"];
+      if (!isValue(projectId) || !isValue(statementsFile) || environment !== "dev" && environment !== "prod" || cron === void 0 === (everySeconds === void 0) || everySeconds !== void 0 && !/^[0-9]{1,9}$/u.test(everySeconds) || timeoutMs !== void 0 && !/^[0-9]{1,6}$/u.test(timeoutMs) || enabled !== void 0 && enabled !== "true" && enabled !== "false")
+        throw new InvalidCommandError();
+      return {
+        kind: "database-schedule-set",
+        projectId,
+        environment,
+        name: contractValue(() => parseDatabaseScheduleName(name)),
+        cron: cron ?? null,
+        everySeconds: everySeconds === void 0 ? null : Number(everySeconds),
+        statementsFile,
+        timeoutMs: timeoutMs === void 0 ? null : Number(timeoutMs),
+        enabled: enabled === void 0 ? null : enabled === "true",
+        yes: true,
+        credentialStore
+      };
+    }
+    if (subcommand === "list") {
+      if (yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment"]);
+      const projectId = options["--project"], environment = options["--environment"] ?? "dev";
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      return { kind: "database-schedule-list", projectId, environment, credentialStore };
+    }
+    if (subcommand === "get" || subcommand === "runs") {
+      if (yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, subcommand === "get" ? ["--project", "--environment", "--name"] : ["--project", "--environment", "--name", "--limit"]);
+      const projectId = options["--project"], environment = options["--environment"] ?? "dev", name = options["--name"], limit = options["--limit"];
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      const scheduleName = contractValue(() => parseDatabaseScheduleName(name));
+      if (subcommand === "get")
+        return {
+          kind: "database-schedule-get",
+          projectId,
+          environment,
+          name: scheduleName,
+          credentialStore
+        };
+      return {
+        kind: "database-schedule-runs",
+        projectId,
+        environment,
+        name: scheduleName,
+        limit: limit === void 0 ? null : contractValue(() => parseDatabaseListLimit(limit, SCHEDULE_RUNS_MAX_ITEMS, SCHEDULE_RUNS_MAX_ITEMS)),
+        credentialStore
+      };
+    }
+    if (subcommand === "delete" || subcommand === "run") {
+      if (!yes || wait || follow || revoke || stdin)
+        throw new InvalidCommandError();
+      const options = parseOptionalOptions(values, ["--project", "--environment", "--name"]);
+      const projectId = options["--project"], environment = options["--environment"];
+      if (!isValue(projectId) || environment !== "dev" && environment !== "prod")
+        throw new InvalidCommandError();
+      const name = contractValue(() => parseDatabaseScheduleName(options["--name"]));
+      return subcommand === "delete" ? {
+        kind: "database-schedule-delete",
+        projectId,
+        environment,
+        name,
+        yes: true,
+        credentialStore
+      } : {
+        kind: "database-schedule-run",
+        projectId,
+        environment,
+        name,
+        yes: true,
+        credentialStore
+      };
+    }
+    throw new InvalidCommandError();
+  }
+  if (first === "database" && values[0] === "executions") {
+    values.shift();
+    if (yes || wait || follow || revoke || stdin)
+      throw new InvalidCommandError();
+    const options = parseOptionalOptions(values, [
+      "--project",
+      "--environment",
+      "--from",
+      "--to",
+      "--granularity",
+      "--limit",
+      "--cursor"
+    ]);
+    const projectId = options["--project"], environment = options["--environment"] ?? "dev", from = options["--from"], to = options["--to"], granularity = options["--granularity"], limit = options["--limit"], cursor = options["--cursor"];
+    if (!isValue(projectId) || environment !== "dev" && environment !== "prod" || !isValue(from) || !isValue(to) || granularity !== "hour" && granularity !== "day")
+      throw new InvalidCommandError();
+    const window = contractValue(() => parseDatabaseUsageWindow(from, to, granularity));
+    return {
+      kind: "database-executions",
+      projectId,
+      environment,
+      from: window.from,
+      to: window.to,
+      granularity: window.granularity,
+      limit: limit === void 0 ? null : contractValue(() => parseDatabaseListLimit(limit, DATABASE_PAGE_MAX_ITEMS, DATABASE_PAGE_MAX_ITEMS)),
+      cursor: contractValue(() => parseDatabaseCursor(cursor)),
+      credentialStore
+    };
+  }
   if (first === "database" && values[0] === "psql") {
     values.shift();
     if (yes || wait || follow || revoke || stdin)
@@ -44262,6 +44797,13 @@ var handedAccount = (userId, organizationId) => {
   return { userId, organizationId };
 };
 var isValue = (value) => value !== void 0 && value.length > 0 && !value.startsWith("--");
+var contractValue = (parse) => {
+  try {
+    return parse();
+  } catch {
+    throw new InvalidCommandError();
+  }
+};
 var validGithubBranchName = (value) => !(value.length < 1 || value.length > 1024 || !/^[A-Za-z0-9]/u.test(value) || value.startsWith("-") || value.startsWith("/") || value.endsWith("/") || value.endsWith(".") || value.includes("//") || value.includes("..") || value.includes("@{") || [...value].some((character) => {
   const code = character.codePointAt(0) ?? 0;
   return code <= 32 || code === 127 || "\\~^:?*[]".includes(character);
@@ -44536,7 +45078,7 @@ import { join as join5, resolve as resolve4 } from "node:path";
 
 // packages/contracts/dist/database-access.js
 function parseProjectDatabaseWrite(value) {
-  if (!record2(value) || !exact2(value, ["environment", "statement", "parameters"]) || !["dev", "prod"].includes(String(value["environment"])) || typeof value["statement"] !== "string" || !/^\s*(?:insert|update|delete)\b/iu.test(value["statement"]) || new TextEncoder().encode(value["statement"]).byteLength > 65536 || value["statement"].includes("\0") || !Array.isArray(value["parameters"]) || value["parameters"].length > 100)
+  if (!record3(value) || !exact3(value, ["environment", "statement", "parameters"]) || !["dev", "prod"].includes(String(value["environment"])) || typeof value["statement"] !== "string" || !/^\s*(?:insert|update|delete)\b/iu.test(value["statement"]) || new TextEncoder().encode(value["statement"]).byteLength > 65536 || value["statement"].includes("\0") || !Array.isArray(value["parameters"]) || value["parameters"].length > 100)
     throw new TypeError("Invalid database write");
   const budget = { nodes: 0 };
   for (const parameter of value["parameters"])
@@ -44550,7 +45092,7 @@ function parseProjectDatabaseWrite(value) {
   };
 }
 function assertProjectDatabaseWriteReceipt(value) {
-  if (!record2(value) || !exact2(value, ["operation_id", "environment", "state", "command", "affected_rows", "error"]) || typeof value["operation_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["operation_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["running", "succeeded", "failed"].includes(String(value["state"])))
+  if (!record3(value) || !exact3(value, ["operation_id", "environment", "state", "command", "affected_rows", "error"]) || typeof value["operation_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["operation_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["running", "succeeded", "failed"].includes(String(value["state"])))
     throw new TypeError("Invalid database write receipt");
   if (value["state"] === "succeeded") {
     if (!["INSERT", "UPDATE", "DELETE"].includes(String(value["command"])) || !Number.isSafeInteger(value["affected_rows"]) || Number(value["affected_rows"]) < 0 || Number(value["affected_rows"]) > 1e3 || value["error"] !== null)
@@ -44563,7 +45105,7 @@ function assertProjectDatabaseWriteReceipt(value) {
         throw new TypeError("Invalid database write result");
     } else {
       const error = value["error"];
-      if (!record2(error) || typeof error["code"] !== "string" || !error["code"].startsWith("database_write_") || JSON.stringify(error) !== JSON.stringify(publicOperationFailure(error["code"])))
+      if (!record3(error) || typeof error["code"] !== "string" || !error["code"].startsWith("database_write_") || JSON.stringify(error) !== JSON.stringify(publicOperationFailure(error["code"])))
         throw new TypeError("Invalid database write error");
     }
   }
@@ -44574,6 +45116,9 @@ var ACCESS_KEYS = [
   "mode",
   "role_name",
   "host",
+  "provider",
+  "transport",
+  "websocket_url",
   "database",
   "label",
   "state",
@@ -44584,16 +45129,16 @@ var ACCESS_KEYS = [
 ];
 var ACCESS_ROLE_PATTERN = /^ohmyho_da_[0-7][0-9a-hjkmnp-tv-z]{25}_[0-9a-z]{8}$/u;
 function assertProjectDatabaseAccess(value) {
-  if (!record2(value) || !exact2(value, accessKeys(value)))
+  if (!record3(value) || !exact3(value, ACCESS_KEYS))
     throw new TypeError("Invalid database access");
   assertAccessFields(value);
 }
 function assertProjectDatabaseAccessCredential(value) {
-  if (!record2(value) || !exact2(value, [...accessKeys(value), "connection_uri", "psql_command"]))
+  if (!record3(value) || !exact3(value, [...ACCESS_KEYS, "connection_uri", "psql_command"]))
     throw new TypeError("Invalid database access credential");
   assertAccessFields(value);
   const uri = value["connection_uri"];
-  if (typeof uri !== "string" || (value["provider"] === "pgcf" ? typeof value["psql_command"] !== "string" || !new RegExp(`^ohmyhost database psql --project [0-7][0-9A-HJKMNP-TV-Z]{25} --environment ${value["environment"]} --mode ${value["mode"]}$`, "u").test(value["psql_command"]) : value["psql_command"] !== `psql '${uri}'`))
+  if (typeof uri !== "string" || typeof value["psql_command"] !== "string" || !new RegExp(`^ohmyhost database psql --project [0-7][0-9A-HJKMNP-TV-Z]{25} --environment ${value["environment"]} --mode ${value["mode"]}$`, "u").test(value["psql_command"]))
     throw new TypeError("Invalid database access credential");
   let parsed;
   try {
@@ -44601,21 +45146,18 @@ function assertProjectDatabaseAccessCredential(value) {
   } catch {
     throw new TypeError("Invalid database access credential");
   }
-  if ((value["provider"] === "pgcf" ? !["postgres:", "postgresql:"].includes(parsed.protocol) : parsed.protocol !== "postgresql:") || decodeURIComponent(parsed.username) !== value["role_name"] || parsed.password === "" || parsed.hostname !== value["host"] || (value["provider"] === "pgcf" ? parsed.port !== "" && parsed.port !== "5432" : parsed.host !== value["host"]) || decodeURIComponent(parsed.pathname.slice(1)) !== value["database"] || parsed.hash !== "" || (value["provider"] === "pgcf" ? !["", "?sslmode=require", "?sslmode=verify-full"].includes(parsed.search) : parsed.search !== "?sslmode=require"))
+  if (!["postgres:", "postgresql:"].includes(parsed.protocol) || decodeURIComponent(parsed.username) !== value["role_name"] || parsed.password === "" || parsed.hostname !== value["host"] || parsed.port !== "" && parsed.port !== "5432" || decodeURIComponent(parsed.pathname.slice(1)) !== value["database"] || parsed.hash !== "" || !["", "?sslmode=require", "?sslmode=verify-full"].includes(parsed.search))
     throw new TypeError("Invalid database access credential");
 }
 function assertProjectDatabaseAccessPage(value) {
-  if (!record2(value) || !exact2(value, ["items"]) || !Array.isArray(value["items"]) || value["items"].length > 50)
+  if (!record3(value) || !exact3(value, ["items"]) || !Array.isArray(value["items"]) || value["items"].length > 50)
     throw new TypeError("Invalid database access page");
   for (const item of value["items"])
     assertProjectDatabaseAccess(item);
 }
-function accessKeys(value) {
-  return value["provider"] === "pgcf" ? [...ACCESS_KEYS, "provider", "transport", "websocket_url"] : ACCESS_KEYS;
-}
 function assertAccessFields(value) {
   const revoked = value["revoked_at"], reason = value["revocation_reason"];
-  if (typeof value["access_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["access_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["read", "write"].includes(String(value["mode"])) || typeof value["role_name"] !== "string" || !ACCESS_ROLE_PATTERN.test(value["role_name"]) || typeof value["host"] !== "string" || !/^[a-z0-9]([a-z0-9.-]{0,251}[a-z0-9])?$/u.test(value["host"]) || (value["provider"] === "pgcf" ? typeof value["database"] !== "string" || !/^[a-z][a-z0-9]{19}$/u.test(value["database"]) || value["transport"] !== "wss" || value["websocket_url"] !== `wss://${value["host"]}/` : value["database"] !== "neondb") || value["label"] !== null && accessLabel(value["label"]) !== value["label"] || !["active", "expired", "revoked"].includes(String(value["state"])) || !timestamp2(value["issued_at"]) || !timestamp2(value["expires_at"]) || Date.parse(String(value["expires_at"])) <= Date.parse(String(value["issued_at"])) || revoked !== null && !timestamp2(revoked) || revoked === null !== (reason === null) || reason !== null && !["principal", "expired", "budget", "creation_failed", "data_change"].includes(String(reason)) || value["state"] === "revoked" !== (revoked !== null))
+  if (typeof value["access_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["access_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["read", "write"].includes(String(value["mode"])) || typeof value["role_name"] !== "string" || !ACCESS_ROLE_PATTERN.test(value["role_name"]) || typeof value["host"] !== "string" || !/^[a-z0-9]([a-z0-9.-]{0,251}[a-z0-9])?$/u.test(value["host"]) || value["provider"] !== "pgcf" || value["transport"] !== "wss" || value["websocket_url"] !== `wss://${value["host"]}/` || typeof value["database"] !== "string" || !/^[a-z][a-z0-9]{19}$/u.test(value["database"]) || value["label"] !== null && accessLabel(value["label"]) !== value["label"] || !["active", "expired", "revoked"].includes(String(value["state"])) || !timestamp3(value["issued_at"]) || !timestamp3(value["expires_at"]) || Date.parse(String(value["expires_at"])) <= Date.parse(String(value["issued_at"])) || revoked !== null && !timestamp3(revoked) || revoked === null !== (reason === null) || reason !== null && !["principal", "expired", "budget", "creation_failed", "data_change"].includes(String(reason)) || value["state"] === "revoked" !== (revoked !== null))
     throw new TypeError("Invalid database access");
 }
 function accessLabel(value) {
@@ -44628,7 +45170,7 @@ function accessLabel(value) {
     throw new TypeError("Invalid database access label");
   return label;
 }
-function timestamp2(value) {
+function timestamp3(value) {
   return typeof value === "string" && new Date(value).toISOString() === value;
 }
 function json(value, depth, budget) {
@@ -44643,32 +45185,98 @@ function json(value, depth, budget) {
       json(entry, depth + 1, budget);
     return;
   }
-  if (record2(value)) {
+  if (record3(value)) {
     for (const entry of Object.values(value))
       json(entry, depth + 1, budget);
     return;
   }
   throw new TypeError("Invalid database parameter");
 }
-function record2(value) {
+function record3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function exact2(value, keys) {
+function exact3(value, keys) {
   return Object.keys(value).sort().join(",") === [...keys].sort().join(",");
 }
 
+// packages/contracts/dist/credit-pricing.js
+function assertOrganizationCreditUsage(value) {
+  const record7 = (input, keys) => {
+    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
+      throw new TypeError("Invalid usage fields");
+    return input;
+  };
+  const identifier2 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
+  const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
+  const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
+  const report = record7(value, "organization_id,as_of,unit,period,from,projects,days");
+  if (!identifier2(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
+    throw new TypeError("Invalid usage report");
+  let previous = "";
+  for (const input of report["projects"]) {
+    const project = record7(input, "project_id,used_micros");
+    if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
+      throw new TypeError("Invalid usage project");
+    previous = String(project["project_id"]);
+  }
+  let previousDay = "";
+  for (const input of report["days"]) {
+    const day = record7(input, "day,projects");
+    if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
+      throw new TypeError("Invalid usage day");
+    previousDay = day["day"];
+    previous = "";
+    for (const projectInput of day["projects"]) {
+      const project = record7(projectInput, "project_id,meters");
+      if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
+        throw new TypeError("Invalid usage project");
+      previous = String(project["project_id"]);
+      for (const meterInput of project["meters"]) {
+        const meter = record7(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
+        if (meter["environment_id"] !== null && !identifier2(meter["environment_id"]))
+          throw new TypeError("Invalid usage environment");
+        for (const key of ["meter", "unit", "rate_card_id"])
+          if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
+            throw new TypeError("Invalid usage meter");
+        if (typeof meter["quantity"] !== "string" || !/^(0|[1-9][0-9]{0,29})(\.[0-9]{1,12})?$/u.test(meter["quantity"]) || !amount(meter["charged_micros"]))
+          throw new TypeError("Invalid usage amount");
+      }
+    }
+  }
+}
+function assertOrganizationAccount(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "as_of,available_micros,monthly_micros,name,next_expiry,one_time_micros,organization_id,paid_until,plan,plan_source,reserved_micros,workos_organization_id")
+    throw new TypeError("Invalid account fields");
+  const v = value;
+  if (typeof v["organization_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["organization_id"]) || typeof v["name"] !== "string" || v["name"].length > 128 || typeof v["workos_organization_id"] !== "string" || !/^org_[A-Za-z0-9_]+$/u.test(v["workos_organization_id"]) || v["plan"] !== "paid" && v["plan"] !== "free" || !["free", "stripe", "granted", "manual"].includes(String(v["plan_source"])) || v["plan"] === "free" !== (v["plan_source"] === "free"))
+    throw new TypeError("Invalid account scope");
+  for (const field of ["available_micros", "monthly_micros", "one_time_micros", "reserved_micros"])
+    if (typeof v[field] !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(v[field]))
+      throw new TypeError("Invalid account credits");
+  const held = BigInt(String(v["reserved_micros"]));
+  const balance = BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"]));
+  if (BigInt(String(v["available_micros"])) !== (balance > held ? balance - held : 0n))
+    throw new TypeError("Account credit buckets do not balance");
+  for (const field of ["as_of", "paid_until", "next_expiry"]) {
+    if (field !== "as_of" && v[field] === null)
+      continue;
+    if (typeof v[field] !== "string" || !Number.isFinite(Date.parse(v[field])) || new Date(v[field]).toISOString() !== v[field])
+      throw new TypeError("Invalid account timestamp");
+  }
+}
+
 // packages/contracts/dist/database-compute.js
 function assertDatabaseCompute(value) {
-  if (!record3(value) || !exact3(value, ["data_mode", "database", "environment", "observed_at", "project_id"]) || typeof value["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["project_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["shared", "isolated"].includes(String(value["data_mode"])) || typeof value["observed_at"] !== "string" || !Number.isFinite(Date.parse(value["observed_at"])) || new Date(value["observed_at"]).toISOString() !== value["observed_at"])
+  if (!record4(value) || !exact4(value, ["data_mode", "database", "environment", "observed_at", "project_id"]) || typeof value["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["project_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["shared", "isolated"].includes(String(value["data_mode"])) || typeof value["observed_at"] !== "string" || !Number.isFinite(Date.parse(value["observed_at"])) || new Date(value["observed_at"]).toISOString() !== value["observed_at"])
     throw new TypeError("Invalid database compute report");
   const db = value["database"];
   if (db === null)
     return;
-  if (record3(db) && db["provider"] === "pgcf") {
+  if (record4(db) && db["provider"] === "pgcf") {
     assertPgcfCompute(db);
     return;
   }
-  if (!record3(db) || !exact3(db, [
+  if (!record4(db) || !exact4(db, [
     "disabled",
     "max_cu",
     "max_memory_gb",
@@ -44684,7 +45292,7 @@ function assertDatabaseCompute(value) {
 function assertPgcfCompute(db) {
   const size = databaseSizeForClass(db["size_class_id"]);
   const states = ["provisioning", "cold", "warm", "suspended", "error"];
-  if (!exact3(db, [
+  if (!exact4(db, [
     "cpu_millicores",
     "disabled",
     "max_connections",
@@ -44699,17 +45307,17 @@ function assertPgcfCompute(db) {
   ]) || db["memory_mib"] !== size.memoryMiB || db["cpu_millicores"] !== size.cpuMillicores || db["storage_mib"] !== size.storageMiB || db["max_connections"] !== size.maxConnections || !Number.isSafeInteger(db["suspend_timeout_seconds"]) || Number(db["suspend_timeout_seconds"]) < 60 || Number(db["suspend_timeout_seconds"]) > 900 || !states.includes(String(db["state"])) || db["pending_state"] !== null && !states.includes(String(db["pending_state"])) || typeof db["disabled"] !== "boolean" || !["us", "eu"].includes(String(db["region"])))
     throw new TypeError("Invalid fixed database compute configuration");
 }
-function record3(v) {
+function record4(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
-function exact3(v, keys) {
+function exact4(v, keys) {
   return Object.keys(v).sort().join(",") === keys.join(",");
 }
 
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.41",
+  version: "0.1.43",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -44756,32 +45364,32 @@ var package_default = {
 };
 
 // packages/contracts/dist/project-context.js
-var record4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var timestamp3 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
+var record5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var timestamp4 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
 var version = (v) => Number.isInteger(v) && Number(v) >= 0 && Number(v) <= 2147483647;
 var bounded = (v, lines, bytes) => typeof v === "string" && !/[\r\u2028\u2029]/u.test(v) && !new RegExp("\\p{Cc}", "u").test(v.replace(/[\n\t]/gu, "")) && v.split("\n").length <= lines && new TextEncoder().encode(v).length <= bytes;
 function assertProjectNotesReceipt(v) {
-  if (!record4(v) || Object.keys(v).sort().join(",") !== "updated_at,version" || !version(v["version"]) || v["version"] === 0 || !timestamp3(v["updated_at"]))
+  if (!record5(v) || Object.keys(v).sort().join(",") !== "updated_at,version" || !version(v["version"]) || v["version"] === 0 || !timestamp4(v["updated_at"]))
     throw new TypeError("Invalid project notes receipt");
 }
 function assertProjectContext(v) {
-  if (!record4(v) || Object.keys(v).sort().join(",") !== "credit_access,generated_at,markdown,notes,project_id" || typeof v["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["project_id"]) || !timestamp3(v["generated_at"]) || !["included", "not_authorized"].includes(String(v["credit_access"])) || !bounded(v["markdown"], 500, 32768))
+  if (!record5(v) || Object.keys(v).sort().join(",") !== "credit_access,generated_at,markdown,notes,project_id" || typeof v["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["project_id"]) || !timestamp4(v["generated_at"]) || !["included", "not_authorized"].includes(String(v["credit_access"])) || !bounded(v["markdown"], 500, 32768))
     throw new TypeError("Invalid project context");
   const notes = v["notes"];
-  if (!record4(notes) || Object.keys(notes).sort().join(",") !== "markdown,updated_at,version" || !version(notes["version"]) || !bounded(notes["markdown"], 250, 16384) || (notes["version"] === 0 ? notes["updated_at"] !== null || notes["markdown"] !== "" : !timestamp3(notes["updated_at"])))
+  if (!record5(notes) || Object.keys(notes).sort().join(",") !== "markdown,updated_at,version" || !version(notes["version"]) || !bounded(notes["markdown"], 250, 16384) || (notes["version"] === 0 ? notes["updated_at"] !== null || notes["markdown"] !== "" : !timestamp4(notes["updated_at"])))
     throw new TypeError("Invalid project notes");
 }
 
 // packages/contracts/dist/project-exports.js
 function assertProjectExport(value) {
-  if (!record5(value) || Object.keys(value).sort().join(",") !== "archive,error,id,next_poll_after_seconds,next_request_at,project_id,requested_at,state" || typeof value["id"] !== "string" || !id.test(value["id"]) || typeof value["project_id"] !== "string" || !id.test(value["project_id"]) || !["queued", "running", "succeeded", "failed", "cancelled"].includes(String(value["state"])) || !timestamp4(value["requested_at"]) || !timestamp4(value["next_request_at"]))
+  if (!record6(value) || Object.keys(value).sort().join(",") !== "archive,error,id,next_poll_after_seconds,next_request_at,project_id,requested_at,state" || typeof value["id"] !== "string" || !id.test(value["id"]) || typeof value["project_id"] !== "string" || !id.test(value["project_id"]) || !["queued", "running", "succeeded", "failed", "cancelled"].includes(String(value["state"])) || !timestamp5(value["requested_at"]) || !timestamp5(value["next_request_at"]))
     invalid4();
   const active = value["state"] === "queued" || value["state"] === "running";
   if (value["next_poll_after_seconds"] !== (active ? 5 : null))
     invalid4();
   if (value["state"] === "failed") {
     const error = value["error"];
-    if (!record5(error) || Object.keys(error).sort().join(",") !== "code,message,retryable,suggested_action" || typeof error["code"] !== "string")
+    if (!record6(error) || Object.keys(error).sort().join(",") !== "code,message,retryable,suggested_action" || typeof error["code"] !== "string")
       invalid4();
     const expected = publicOperationFailure(error["code"]);
     for (const key of Object.keys(expected))
@@ -44795,14 +45403,14 @@ function assertProjectExport(value) {
       invalid4();
     return;
   }
-  if (value["state"] !== "succeeded" || !record5(archive) || Object.keys(archive).sort().join(",") !== "bytes,captured_at,download_expires_at,download_url,expires_at,sha256,sql_files" || !Number.isSafeInteger(archive["bytes"]) || Number(archive["bytes"]) < 1 || Number(archive["bytes"]) > 536870912 || typeof archive["sha256"] !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(archive["sha256"]) || !['["dev.sql"]', '["prod.sql"]', '["dev.sql","prod.sql"]', '["shared.sql"]'].includes(JSON.stringify(archive["sql_files"])) || !timestamp4(archive["captured_at"]) || !timestamp4(archive["expires_at"]))
+  if (value["state"] !== "succeeded" || !record6(archive) || Object.keys(archive).sort().join(",") !== "bytes,captured_at,download_expires_at,download_url,expires_at,sha256,sql_files" || !Number.isSafeInteger(archive["bytes"]) || Number(archive["bytes"]) < 1 || Number(archive["bytes"]) > 536870912 || typeof archive["sha256"] !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(archive["sha256"]) || !['["dev.sql"]', '["prod.sql"]', '["dev.sql","prod.sql"]', '["shared.sql"]'].includes(JSON.stringify(archive["sql_files"])) || !timestamp5(archive["captured_at"]) || !timestamp5(archive["expires_at"]))
     invalid4();
   if (archive["download_url"] === null) {
     if (archive["download_expires_at"] !== null)
       invalid4();
     return;
   }
-  if (typeof archive["download_url"] !== "string" || !timestamp4(archive["download_expires_at"]) || Date.parse(archive["download_expires_at"]) > Date.parse(archive["expires_at"]))
+  if (typeof archive["download_url"] !== "string" || !timestamp5(archive["download_expires_at"]) || Date.parse(archive["download_expires_at"]) > Date.parse(archive["expires_at"]))
     invalid4();
   let url;
   try {
@@ -44814,10 +45422,10 @@ function assertProjectExport(value) {
     invalid4();
 }
 var id = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
-function record5(value) {
+function record6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function timestamp4(value) {
+function timestamp5(value) {
   return typeof value === "string" && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
 }
 function invalid4() {
@@ -44835,11 +45443,11 @@ function assertBillingTaxIssue(value) {
     "billing_tax_location_required",
     "billing_tax_calculation_failed",
     "billing_tax_configuration_required"
-  ].includes(String(v["code"])) || typeof v["invoice_id"] !== "string" || !/^in_[A-Za-z0-9_]{1,253}$/u.test(v["invoice_id"]) || !timestamp5(v["observed_at"]) || v["required_action"] !== (v["code"] === "billing_tax_location_required" ? "open_billing_portal" : "contact_support"))
+  ].includes(String(v["code"])) || typeof v["invoice_id"] !== "string" || !/^in_[A-Za-z0-9_]{1,253}$/u.test(v["invoice_id"]) || !timestamp6(v["observed_at"]) || v["required_action"] !== (v["code"] === "billing_tax_location_required" ? "open_billing_portal" : "contact_support"))
     throw new Error("billing_response_invalid");
 }
 var ulid4 = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
-var timestamp5 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
+var timestamp6 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
 function stripeUrl(value, host2) {
   if (typeof value !== "string" || value.length > 8192)
     return false;
@@ -44854,7 +45462,7 @@ function assertBillingCheckout(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("billing_response_invalid");
   const v = value;
-  if (Object.keys(v).sort().join(",") !== "billing_issue,checkout_id,credited_micros,expires_at,offer,organization_id,packs,paid_until,payment_confirmed,required_action,revoked_micros,state,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || typeof v["checkout_id"] !== "string" || !ulid4.test(v["checkout_id"]) || typeof v["offer"] !== "string" || !["topup", "paid"].includes(v["offer"]) || typeof v["state"] !== "string" || !["open", "complete", "expired"].includes(v["state"]) || typeof v["payment_confirmed"] !== "boolean" || typeof v["required_action"] !== "string" || !["none", "complete_checkout", "open_billing_portal", "contact_support"].includes(v["required_action"]) || v["url"] !== null && !stripeUrl(v["url"], "checkout.stripe.com") || !timestamp5(v["expires_at"]) || v["paid_until"] !== null && !timestamp5(v["paid_until"]) || !Number.isInteger(v["packs"]) || Number(v["packs"]) < 1 || Number(v["packs"]) > 100 || v["offer"] === "paid" && v["packs"] !== 1 || ![v["credited_micros"], v["revoked_micros"]].every((x) => typeof x === "string" && /^(0|[1-9][0-9]{0,18})$/u.test(x)))
+  if (Object.keys(v).sort().join(",") !== "billing_issue,checkout_id,credited_micros,expires_at,offer,organization_id,packs,paid_until,payment_confirmed,required_action,revoked_micros,state,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || typeof v["checkout_id"] !== "string" || !ulid4.test(v["checkout_id"]) || typeof v["offer"] !== "string" || !["topup", "paid"].includes(v["offer"]) || typeof v["state"] !== "string" || !["open", "complete", "expired"].includes(v["state"]) || typeof v["payment_confirmed"] !== "boolean" || typeof v["required_action"] !== "string" || !["none", "complete_checkout", "open_billing_portal", "contact_support"].includes(v["required_action"]) || v["url"] !== null && !stripeUrl(v["url"], "checkout.stripe.com") || !timestamp6(v["expires_at"]) || v["paid_until"] !== null && !timestamp6(v["paid_until"]) || !Number.isInteger(v["packs"]) || Number(v["packs"]) < 1 || Number(v["packs"]) > 100 || v["offer"] === "paid" && v["packs"] !== 1 || ![v["credited_micros"], v["revoked_micros"]].every((x) => typeof x === "string" && /^(0|[1-9][0-9]{0,18})$/u.test(x)))
     throw new Error("billing_response_invalid");
   assertBillingTaxIssue(v["billing_issue"]);
 }
@@ -44862,7 +45470,7 @@ function assertBillingPortal(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("billing_response_invalid");
   const v = value;
-  if (Object.keys(v).sort().join(",") !== "created_at,organization_id,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || !timestamp5(v["created_at"]) || !stripeUrl(v["url"], "billing.stripe.com"))
+  if (Object.keys(v).sort().join(",") !== "created_at,organization_id,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || !timestamp6(v["created_at"]) || !stripeUrl(v["url"], "billing.stripe.com"))
     throw new Error("billing_response_invalid");
 }
 function assertRecharge(value) {
@@ -45054,6 +45662,20 @@ var HELP_USAGE = Object.freeze({
   "database access create": "ohmyhost database access create --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--label TEXT] --yes --json\n  The connection URI is shown once. Use it immediately, never store it in files, notes or source, and revoke it when finished.",
   "database access list": "ohmyhost database access list --project ULID [--environment dev|prod] --json",
   "database access revoke": "ohmyhost database access revoke --project ULID --access ULID --yes --json",
+  "database webhook create": "ohmyhost database webhook create --project ULID --environment dev|prod --url HTTPS_URL --event-types TYPE[,TYPE] [--headers-file PATH] --idempotency-key KEY --yes --json (the signing secret is shown once in this answer; types: database.created, database.ready, database.woke, database.slept, database.suspended, database.resized, database.deleted; the headers file is a UTF-8 JSON object of at most 8 KiB)",
+  "database webhook list": "ohmyhost database webhook list --project ULID [--environment dev|prod] --json (dev when omitted; the secret is never listed)",
+  "database webhook get": "ohmyhost database webhook get --project ULID [--environment dev|prod] --webhook ID --json",
+  "database webhook delete": "ohmyhost database webhook delete --project ULID --environment dev|prod --webhook ID --yes --json",
+  "database webhook test": "ohmyhost database webhook test --project ULID --environment dev|prod --webhook ID --yes --json (sends one signed test request to the receiver; nothing is stored)",
+  "database webhook deliveries": "ohmyhost database webhook deliveries --project ULID [--environment dev|prod] [--webhook ID] [--limit 1..100] [--cursor CURSOR] --json",
+  "database webhook replay": "ohmyhost database webhook replay --project ULID --environment dev|prod --delivery ID --yes --json",
+  "database schedule set": "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000)",
+  "database schedule list": "ohmyhost database schedule list --project ULID [--environment dev|prod] --json (dev when omitted)",
+  "database schedule get": "ohmyhost database schedule get --project ULID [--environment dev|prod] --name NAME --json",
+  "database schedule delete": "ohmyhost database schedule delete --project ULID --environment dev|prod --name NAME --yes --json",
+  "database schedule runs": "ohmyhost database schedule runs --project ULID [--environment dev|prod] --name NAME [--limit 1..50] --json",
+  "database schedule run": "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer)",
+  "database executions": "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; usage counters only, nothing is charged for them until the operator prices them)",
   "database psql": "ohmyhost database psql --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--json] (starts local psql with a temporary credential and revokes it on exit)",
   link: "ohmyhost link --project ULID --repository-owner OWNER --repository-name REPOSITORY --idempotency-key KEY --json (uses the workspace GitHub connection and waits for the source-link operation)",
   "source auto-deploy set": "ohmyhost source auto-deploy set --project ULID --branch BRANCH --enabled true|false --idempotency-key KEY --json",
@@ -45120,12 +45742,19 @@ var HELP_USAGE = Object.freeze({
   "mail domain delete": "ohmyhost mail domain delete --project ULID --environment ULID --idempotency-key KEY --yes --json"
 });
 var HELP_COMMANDS = Object.freeze(Object.entries(HELP_USAGE).map(([command, usage]) => Object.freeze({ command, usage })));
+var helpEntries = (topic) => {
+  if (topic === void 0)
+    return HELP_COMMANDS;
+  const exact7 = HELP_COMMANDS.filter((entry) => entry.command === topic);
+  return exact7.length > 0 ? exact7 : HELP_COMMANDS.filter((entry) => entry.command.startsWith(`${topic} `));
+};
+var helpTopicKnown = (topic) => helpEntries(topic).length > 0;
 var cliMetadataResult = (kind, topic) => kind === "help" ? success("help", {
   status: "succeeded",
   cli_version: CLI_VERSION,
   usage: "ohmyhost <command> [options] [--profile-name NAME] --json",
   environment: "OHMYHOST_ENVIRONMENT=development|production (default: production); OHMYHOST_PROFILE=NAME binds this process to one saved login",
-  commands: HELP_COMMANDS.filter((entry) => !topic || entry.command === topic)
+  commands: helpEntries(topic)
 }) : success("version", { status: "succeeded", cli_version: CLI_VERSION });
 var invalidCommandAction = (argv, commandPrefix) => {
   const label = recognizedCommandLabel(argv);
@@ -45142,11 +45771,22 @@ var invalidCommandAction = (argv, commandPrefix) => {
   const linkable = /(?:^|\s)--project ULID/u.test(usage) && !argv.includes("--project");
   return `The arguments of '${label}' are invalid or incomplete; nothing was sent. Usage: ${usage}.${linkable ? ` --project may be omitted only inside a directory linked with '${commandPrefix} link' for this OHMYHOST_ENVIRONMENT; otherwise pass --project ULID.` : ""}`;
 };
-var INTERNAL_ERROR_ACTION = "The ohmyhost client stopped on an unexpected error; the stderr line starting with [ohmyhost: identifies it. Compare 'ohmyhost --version' with https://ohmyho.st/client-release.json and install the published client if it is older, then run the same command again with the same --idempotency-key. If the current client fails the same way, report it with feedback submit (kind bug, error code internal_error) and quote that stderr line.";
+var retryAdvice = (command) => {
+  const usage = Object.hasOwn(HELP_USAGE, command) ? HELP_USAGE[command] : "";
+  if (usage.includes("--idempotency-key"))
+    return "run the same command again with the same --idempotency-key; the change may already have been applied, and a new key could apply it twice";
+  if (usage.includes("--yes"))
+    return "this command has no idempotency key and the change may already have been applied; check its current state first with the matching list or get command (for example database access list --project ULID --json), and run the command again only if the change is not there";
+  return "run the same command again; this command has no idempotency key, so check its current state first if it may have changed anything";
+};
+var internalErrorAction = (command) => `The ohmyhost client stopped on an unexpected error; the stderr line starting with [ohmyhost: identifies it. Compare 'ohmyhost --version' with https://ohmyho.st/client-release.json and install the published client if it is older, then ${retryAdvice(command)}. If the current client fails the same way, report it with feedback submit (kind bug, error code internal_error) and quote that stderr line.`;
 var CREDENTIAL_STORE_UNAVAILABLE_ACTION = "This computer's credential store (for example macOS Keychain or Windows Credential Manager) or the saved-login list in ~/.ohmyhost/profiles could not be read or written; nothing was changed. If the agent runs in a sandbox, run the command with access to them before asking the customer to sign in again. If the store is locked, ask the customer to unlock it, then run the command again. On a server, container or CI runner without a credential store, do not run login: load OHMYHOST_TOKEN from a private env file with a token from the portal's API Tokens page.";
-var RESPONSE_CONTRACT_INVALID_ACTION = "The ohmyho.st API answered in a form this client version does not accept, usually because the client is older than the service. Compare 'ohmyhost --version' with https://ohmyho.st/client-release.json; if it is older, install the published CLI and MCP and reload MCP. Then run the same command again with the same --idempotency-key: the change may already have been applied. If the current version answers this too, report it with feedback submit (kind bug, error code response_contract_invalid).";
-var REQUEST_TIMEOUT_ACTION = "The ohmyho.st API did not answer within 30 seconds. Run the same command again with the same --idempotency-key; the change may already be under way, and a new key could apply it twice.";
+var responseContractAction = (command) => `The ohmyho.st API answered in a form this client version does not accept, usually because the client is older than the service. Compare 'ohmyhost --version' with https://ohmyho.st/client-release.json; if it is older, install the published CLI and MCP and reload MCP. Then ${retryAdvice(command)}. If the current version answers this too, report it with feedback submit (kind bug, error code response_contract_invalid).`;
+var requestTimeoutAction = (command) => `The ohmyho.st API did not answer within 30 seconds; ${retryAdvice(command)}.`;
 var LOGOUT_UNCONFIRMED_ACTION = "The saved login was removed from this computer, but ohmyho.st did not confirm that its session ended. Running logout again cannot retry this, because the login is gone; do not sign in again just to revoke it. Tell the customer the session end was not confirmed.";
+var HEADERS_FILE_INVALID_ACTION = "Put one JSON object of header names and values in the file named by --headers-file: UTF-8, at most 8 KiB, unique names, values of visible ASCII characters. Names such as content-type, host, content-length, connection, transfer-encoding, user-agent, te, upgrade and expect, and names starting with pgcf-, cf- or x-forwarded-, are refused. Nothing was sent; fix the file and run the command again.";
+var SCHEDULE_STATEMENTS_FILE_INVALID_ACTION = "Put one JSON array of 1 to 20 non-empty SQL strings in the file named by --statements-file: UTF-8, at most 64 KiB in total and 16 KiB per statement, without NUL characters. Nothing was saved; fix the file and run the command again.";
+var SCHEDULE_INVALID_ACTION = "Check the schedule request: --cron takes five fields in UTC (9 to 120 characters), or --every-seconds takes 60 to 2678400, never both; --timeout-ms takes 1000 to 30000; the statements file must hold 1 to 20 non-blank SQL strings of at most 16 KiB each and 64 KiB in total. Nothing was saved; fix it and run the command again.";
 var STATEMENT_FILE_INVALID_ACTION = "Put one INSERT, UPDATE or DELETE statement that starts with that keyword (no leading comment or WITH), UTF-8, at most 64 KiB, in the file named by --statement-file, then rerun with the same --idempotency-key.";
 var signInCommand = (commandPrefix, profile) => profile === void 0 ? `${commandPrefix} login --json` : `${commandPrefix} login${profile.organizationId === null ? "" : ` --organization ${profile.organizationId}`} --user ${profile.userId} --profile-name ${profile.name} --json`;
 var endedLoginAction = (commandPrefix, profile) => `The sign-in of ${profile === void 0 ? "this computer's saved login" : `saved login ${profile.name} (user ${profile.userId}${profile.organizationId === null ? "" : `, organization ${profile.organizationId}`})`} ended and it was removed. Run '${signInCommand(commandPrefix, profile)}' to sign it in again.`;
@@ -45179,6 +45819,8 @@ var ProductCli = class {
     let command;
     try {
       command = parseProductCliCommand(argv);
+      if (command.kind === "help" && command.topic !== void 0 && !helpTopicKnown(command.topic))
+        throw new InvalidCommandError();
     } catch (error) {
       if (error instanceof InvalidCommandError) {
         return failure(recognizedCommandLabel(argv), 2, "invalid_command", false, invalidCommandAction(argv, this.dependencies.commandPrefix));
@@ -45188,7 +45830,7 @@ var ProductCli = class {
         subsystem: "parser",
         errorKind: "unexpected"
       });
-      return failure(recognizedCommandLabel(argv), 1, "internal_error", false, INTERNAL_ERROR_ACTION);
+      return failure(recognizedCommandLabel(argv), 1, "internal_error", false, internalErrorAction(recognizedCommandLabel(argv)));
     }
     return this.runCommand(command, signal);
   }
@@ -45511,6 +46153,34 @@ var ProductCli = class {
         return await this.listDatabaseAccess(command, signal);
       if (command.kind === "database-access-revoke")
         return await this.revokeDatabaseAccess(command, signal);
+      if (command.kind === "database-webhook-create")
+        return await this.createDatabaseWebhook(command, signal);
+      if (command.kind === "database-webhook-list")
+        return await this.listDatabaseWebhooks(command, signal);
+      if (command.kind === "database-webhook-get")
+        return await this.getDatabaseWebhook(command, signal);
+      if (command.kind === "database-webhook-delete")
+        return await this.deleteDatabaseWebhook(command, signal);
+      if (command.kind === "database-webhook-test")
+        return await this.testDatabaseWebhook(command, signal);
+      if (command.kind === "database-webhook-deliveries")
+        return await this.listDatabaseWebhookDeliveries(command, signal);
+      if (command.kind === "database-webhook-replay")
+        return await this.replayDatabaseWebhookDelivery(command, signal);
+      if (command.kind === "database-schedule-set")
+        return await this.setDatabaseSchedule(command, signal);
+      if (command.kind === "database-schedule-list")
+        return await this.listDatabaseSchedules(command, signal);
+      if (command.kind === "database-schedule-get")
+        return await this.getDatabaseSchedule(command, signal);
+      if (command.kind === "database-schedule-delete")
+        return await this.deleteDatabaseSchedule(command, signal);
+      if (command.kind === "database-schedule-runs")
+        return await this.listDatabaseScheduleRuns(command, signal);
+      if (command.kind === "database-schedule-run")
+        return await this.runDatabaseSchedule(command, signal);
+      if (command.kind === "database-executions")
+        return await this.getDatabaseExecutionUsage(command, signal);
       if (command.kind === "database-psql")
         return await this.runProjectPsql(command, signal);
       if (command.kind === "link")
@@ -45860,7 +46530,7 @@ var ProductCli = class {
       if (revocationError instanceof ProviderCapabilityBlockedError) {
         throw new ProductCliFailure(9, "blocked_prerequisite", false, "Remote token revocation is not available in this release.");
       }
-      if (isTimeout(revocationError)) {
+      if (isTimeout2(revocationError)) {
         throw new ProductCliFailure(8, "request_timeout", false, LOGOUT_UNCONFIRMED_ACTION);
       }
       if (revocationError instanceof LifecycleTransportError) {
@@ -46014,6 +46684,153 @@ var ProductCli = class {
     assertProjectDatabaseAccess(access);
     return success("database access revoke", { status: "succeeded", access });
   }
+  /** The signing secret is returned by create only; every other answer carries no secret. */
+  async createDatabaseWebhook(command, signal) {
+    const request = await webhookCreateRequest(command);
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const webhook = await api.createProjectDatabaseWebhook({
+      projectId: command.projectId,
+      environment: command.environment,
+      idempotencyKey: command.idempotencyKey,
+      url: request.url,
+      eventTypes: request.event_types,
+      headers: request.headers
+    });
+    return success("database webhook create", { status: "succeeded", webhook });
+  }
+  async listDatabaseWebhooks(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const page = await api.listProjectDatabaseWebhooks({
+      projectId: command.projectId,
+      environment: command.environment
+    });
+    return success("database webhook list", { status: "succeeded", webhook: page.items });
+  }
+  async getDatabaseWebhook(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const webhook = await api.getProjectDatabaseWebhook({
+      projectId: command.projectId,
+      environment: command.environment,
+      webhookId: command.webhookId
+    });
+    return success("database webhook get", { status: "succeeded", webhook });
+  }
+  async deleteDatabaseWebhook(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const deleted = await api.deleteProjectDatabaseWebhook({
+      projectId: command.projectId,
+      environment: command.environment,
+      webhookId: command.webhookId
+    });
+    return success("database webhook delete", { status: "succeeded", deleted });
+  }
+  async testDatabaseWebhook(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const result = await api.testProjectDatabaseWebhook({
+      projectId: command.projectId,
+      environment: command.environment,
+      webhookId: command.webhookId
+    });
+    return success("database webhook test", { status: "succeeded", result });
+  }
+  async listDatabaseWebhookDeliveries(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const page = await api.listProjectDatabaseWebhookDeliveries({
+      projectId: command.projectId,
+      environment: command.environment,
+      ...command.webhookId === null ? {} : { webhookId: command.webhookId },
+      ...command.limit === null ? {} : { limit: command.limit },
+      ...command.cursor === null ? {} : { cursor: command.cursor }
+    });
+    return success("database webhook deliveries", {
+      status: "succeeded",
+      delivery: page.items,
+      next_cursor: page.next_cursor
+    });
+  }
+  async replayDatabaseWebhookDelivery(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const replay = await api.replayProjectDatabaseWebhookDelivery({
+      projectId: command.projectId,
+      environment: command.environment,
+      deliveryId: command.deliveryId
+    });
+    return success("database webhook replay", { status: "succeeded", replay });
+  }
+  /** The statements file and the schedule fields are checked before any request is sent. */
+  async setDatabaseSchedule(command, signal) {
+    const request = await scheduleSetRequest(command);
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const schedule = await api.setProjectDatabaseSchedule({
+      projectId: command.projectId,
+      environment: command.environment,
+      name: command.name,
+      request
+    });
+    return success("database schedule set", { status: "succeeded", schedule });
+  }
+  async listDatabaseSchedules(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const page = await api.listProjectDatabaseSchedules({
+      projectId: command.projectId,
+      environment: command.environment
+    });
+    return success("database schedule list", { status: "succeeded", schedule: page.items });
+  }
+  async getDatabaseSchedule(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const schedule = await api.getProjectDatabaseSchedule({
+      projectId: command.projectId,
+      environment: command.environment,
+      name: command.name
+    });
+    return success("database schedule get", { status: "succeeded", schedule });
+  }
+  async deleteDatabaseSchedule(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const deleted = await api.deleteProjectDatabaseSchedule({
+      projectId: command.projectId,
+      environment: command.environment,
+      name: command.name
+    });
+    return success("database schedule delete", { status: "succeeded", deleted });
+  }
+  async listDatabaseScheduleRuns(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const page = await api.listProjectDatabaseScheduleRuns({
+      projectId: command.projectId,
+      environment: command.environment,
+      name: command.name,
+      ...command.limit === null ? {} : { limit: command.limit }
+    });
+    return success("database schedule runs", { status: "succeeded", schedule_run: page.items });
+  }
+  async runDatabaseSchedule(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const run = await api.runProjectDatabaseSchedule({
+      projectId: command.projectId,
+      environment: command.environment,
+      name: command.name
+    });
+    return success("database schedule run", { status: "succeeded", run });
+  }
+  async getDatabaseExecutionUsage(command, signal) {
+    const api = await this.authenticatedApi(command.credentialStore, signal);
+    const page = await api.getProjectDatabaseExecutionUsage({
+      projectId: command.projectId,
+      environment: command.environment,
+      from: command.from,
+      to: command.to,
+      granularity: command.granularity,
+      ...command.limit === null ? {} : { limit: command.limit },
+      ...command.cursor === null ? {} : { cursor: command.cursor }
+    });
+    return success("database executions", {
+      status: "succeeded",
+      usage: page.items,
+      next_cursor: page.next_cursor
+    });
+  }
   /** psql receives the password through its own environment; the URI is never printed. */
   async runProjectPsql(command, signal) {
     const spawnPsql = this.dependencies.spawnPsql;
@@ -46037,7 +46854,7 @@ var ProductCli = class {
         host: credential.host,
         user: credential.role_name,
         password: decodeURIComponent(new URL(credential.connection_uri).password),
-        ...credential.provider === "pgcf" ? { websocketUrl: credential.websocket_url } : {},
+        websocketUrl: credential.websocket_url,
         database: credential.database,
         mode: credential.mode,
         signal
@@ -46572,8 +47389,8 @@ var ProductCli = class {
       if (error instanceof ProviderCapabilityBlockedError) {
         throw new ProductCliFailure(9, "blocked_prerequisite", false, "Token refresh is not available in this release; run 'ohmyhost login'.");
       }
-      if (isTimeout(error)) {
-        throw new ProductCliFailure(8, "request_timeout", true, REQUEST_TIMEOUT_ACTION);
+      if (isTimeout2(error)) {
+        throw new ProductCliFailure(8, "request_timeout", true, requestTimeoutAction("unknown"));
       }
       if (error instanceof LifecycleTransportError) {
         throw new ProductCliFailure(5, "token_refresh_failed", true, refreshFailedAction(this.dependencies.commandPrefix, this.#profile));
@@ -46621,10 +47438,13 @@ var classifyFailure = (command, error, signal, actingAs) => {
   if (error instanceof SourceWorkspaceError)
     return failure(command, 2, error.code, error.code === "source_snapshot_changed", error.message);
   if (signal.aborted || isCancellation(error)) {
-    return failure(command, 130, "command_cancelled", true, "The command was stopped by an interrupt or termination signal, for example the shell's command timeout, before it finished. Run it again with the same --idempotency-key; a change may already be under way. Give login and commands with --wait or --follow several minutes, or run them in the background.");
+    return failure(command, 130, "command_cancelled", true, `The command was stopped by an interrupt or termination signal, for example the shell's command timeout, before it finished; ${retryAdvice(command)}. Give login and commands with --wait or --follow several minutes, or run them in the background.`);
   }
-  if (isTimeout(error)) {
-    return failure(command, 8, "request_timeout", true, REQUEST_TIMEOUT_ACTION);
+  if (isTimeout2(error)) {
+    return failure(command, 8, "request_timeout", true, requestTimeoutAction(command));
+  }
+  if (error instanceof ProductCliFailure && error.code === "request_timeout" && error.retryable) {
+    return failure(command, 8, "request_timeout", true, requestTimeoutAction(command));
   }
   if (error instanceof ProductCliFailure) {
     return failure(command, error.exitCode, error.code, error.retryable, error.suggestedAction, error.operation);
@@ -46645,7 +47465,7 @@ var classifyFailure = (command, error, signal, actingAs) => {
     return failure(command, 3, "credential_store_unavailable", false, CREDENTIAL_STORE_UNAVAILABLE_ACTION);
   }
   if (error instanceof ResponseContractError) {
-    return failure(command, 7, "response_contract_invalid", false, RESPONSE_CONTRACT_INVALID_ACTION);
+    return failure(command, 7, "response_contract_invalid", false, responseContractAction(command));
   }
   if (error instanceof PublicResponseTooLargeError) {
     return failure(command, 7, "response_too_large", false, "Retry only after the remote response is repaired.");
@@ -46655,16 +47475,16 @@ var classifyFailure = (command, error, signal, actingAs) => {
       const problem = parseSafeProblem(error);
       return failure(command, 7, problem.code, problem.retryable, problem.suggestedAction, void 0, problem.retryAfterSeconds, problem.requestId, problem.docsUrl, ACCOUNT_SENSITIVE_PROBLEMS.has(problem.code) ? actingAs : void 0, problem.message);
     } catch {
-      return failure(command, 7, "response_contract_invalid", false, RESPONSE_CONTRACT_INVALID_ACTION);
+      return failure(command, 7, "response_contract_invalid", false, responseContractAction(command));
     }
   }
   if (looksLikeRemoteObject(error)) {
-    return failure(command, 7, "response_contract_invalid", false, RESPONSE_CONTRACT_INVALID_ACTION);
+    return failure(command, 7, "response_contract_invalid", false, responseContractAction(command));
   }
   if (error instanceof NetworkTransportError) {
-    return failure(command, 8, "network_error", true, "The request did not reach the ohmyho.st API, or its answer was cut off. If the agent runs in a sandbox without network access, run the command with network access. Otherwise run the same command again with the same --idempotency-key; the change may already have been applied, and a new key could apply it twice.");
+    return failure(command, 8, "network_error", true, `The request did not reach the ohmyho.st API, or its answer was cut off. If the agent runs in a sandbox without network access, run the command with network access. Otherwise ${retryAdvice(command)}.`);
   }
-  return failure(command, 1, "internal_error", false, INTERNAL_ERROR_ACTION);
+  return failure(command, 1, "internal_error", false, internalErrorAction(command));
 };
 var reusedKeyProblem = (error) => {
   if (!looksLikeProblem(error))
@@ -46677,19 +47497,19 @@ var reusedKeyProblem = (error) => {
   }
 };
 var OPERATION_STREAM_CONNECTIONS = 4;
-var readStatementFile = async (path2) => {
-  const invalid7 = () => new ProductCliFailure(2, "statement_file_invalid", false, STATEMENT_FILE_INVALID_ACTION);
+var readStatementFile = (path2) => readBoundedUtf8File(path2, 65536, () => new ProductCliFailure(2, "statement_file_invalid", false, STATEMENT_FILE_INVALID_ACTION));
+var readBoundedUtf8File = async (path2, maxBytes, refusal) => {
   let file;
   try {
     file = await open3(path2, "r");
   } catch {
-    throw invalid7();
+    throw refusal();
   }
-  const buffer = Buffer.alloc(65537);
+  const buffer = Buffer.alloc(maxBytes + 1);
   try {
     const stat3 = await file.stat();
-    if (!stat3.isFile() || stat3.size > 65536)
-      throw invalid7();
+    if (!stat3.isFile() || stat3.size > maxBytes)
+      throw refusal();
     let length = 0;
     while (length < buffer.length) {
       const read = await file.read(buffer, length, buffer.length - length, null);
@@ -46697,18 +47517,64 @@ var readStatementFile = async (path2) => {
         break;
       length += read.bytesRead;
     }
-    if (length > 65536)
-      throw invalid7();
+    if (length > maxBytes)
+      throw refusal();
     return new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, length));
   } catch (error) {
     if (error instanceof ProductCliFailure)
       throw error;
-    throw invalid7();
+    throw refusal();
   } finally {
     buffer.fill(0);
     await file.close();
   }
 };
+var webhookCreateRequest = async (command) => {
+  const headersFailure = () => new ProductCliFailure(2, "headers_file_invalid", false, HEADERS_FILE_INVALID_ACTION);
+  const headers = command.headersFile === null ? void 0 : await readBoundedUtf8File(command.headersFile, 8192, headersFailure).then((text) => {
+    try {
+      return JSON.parse(text);
+    } catch {
+      throw headersFailure();
+    }
+  });
+  try {
+    return parseDatabaseWebhookCreateRequest({
+      url: command.url,
+      event_types: command.eventTypes,
+      headers
+    });
+  } catch {
+    throw headersFailure();
+  }
+};
+var scheduleSetRequest = async (command) => {
+  const statementsFailure = () => new ProductCliFailure(2, "statements_file_invalid", false, SCHEDULE_STATEMENTS_FILE_INVALID_ACTION);
+  const statements = await readBoundedUtf8File(command.statementsFile, 65536, statementsFailure).then((text) => {
+    try {
+      return JSON.parse(text);
+    } catch {
+      throw statementsFailure();
+    }
+  });
+  try {
+    parseDatabaseScheduleSetRequest({ every_seconds: 60, statements, confirm: true });
+  } catch {
+    throw statementsFailure();
+  }
+  try {
+    return parseDatabaseScheduleSetRequest({
+      ...command.cron === null ? {} : { cron: command.cron },
+      ...command.everySeconds === null ? {} : { every_seconds: command.everySeconds },
+      statements,
+      ...command.timeoutMs === null ? {} : { timeout_ms: command.timeoutMs },
+      ...command.enabled === null ? {} : { enabled: command.enabled },
+      confirm: true
+    });
+  } catch {
+    throw new ProductCliFailure(2, "schedule_invalid", false, SCHEDULE_INVALID_ACTION);
+  }
+};
 var psqlUnavailable = () => failure("database psql", 9, "psql_unavailable", false, "Install the PostgreSQL client (psql) and make it available on PATH, or run 'ohmyhost database access create' and connect with your own SQL client.");
 var success = (command, body) => ({
   exitCode: 0,
@@ -46848,6 +47714,34 @@ var parsedCommandName = (command) => {
     return "database access revoke";
   if (command.kind === "database-psql")
     return "database psql";
+  if (command.kind === "database-webhook-create")
+    return "database webhook create";
+  if (command.kind === "database-webhook-list")
+    return "database webhook list";
+  if (command.kind === "database-webhook-get")
+    return "database webhook get";
+  if (command.kind === "database-webhook-delete")
+    return "database webhook delete";
+  if (command.kind === "database-webhook-test")
+    return "database webhook test";
+  if (command.kind === "database-webhook-deliveries")
+    return "database webhook deliveries";
+  if (command.kind === "database-webhook-replay")
+    return "database webhook replay";
+  if (command.kind === "database-schedule-set")
+    return "database schedule set";
+  if (command.kind === "database-schedule-list")
+    return "database schedule list";
+  if (command.kind === "database-schedule-get")
+    return "database schedule get";
+  if (command.kind === "database-schedule-delete")
+    return "database schedule delete";
+  if (command.kind === "database-schedule-runs")
+    return "database schedule runs";
+  if (command.kind === "database-schedule-run")
+    return "database schedule run";
+  if (command.kind === "database-executions")
+    return "database executions";
   if (command.kind === "source-auto-deploy-set")
     return "source auto-deploy set";
   if (command.kind === "source-auto-deploy-status")
@@ -46918,14 +47812,14 @@ var throwIfAborted = (signal) => {
     throw signal.reason;
 };
 var isCancellation = (error) => error instanceof DOMException && error.name === "AbortError";
-var isTimeout = (error) => error instanceof DOMException && error.name === "TimeoutError";
+var isTimeout2 = (error) => error instanceof DOMException && error.name === "TimeoutError";
 var looksLikeProblem = (error) => typeof error === "object" && error !== null && ("code" in error || "status" in error || "suggested_action" in error);
 var looksLikeRemoteObject = (error) => typeof error === "object" && error !== null && !(error instanceof Error);
 var diagnosticDescriptor = (error, signal) => {
   if (signal.aborted || isCancellation(error)) {
     return { category: "cancelled", subsystem: "runtime", errorKind: "cancelled" };
   }
-  if (isTimeout(error)) {
+  if (isTimeout2(error)) {
     return { category: "timeout", subsystem: "runtime", errorKind: "timeout" };
   }
   if (error instanceof CredentialStoreUnavailableError) {
@@ -47042,12 +47936,12 @@ function buildClientParams(args, fields) {
   };
   const map = buildKeyMap(fields);
   function writeSlot(slot, key, value) {
-    let record6 = params[slot];
-    if (record6 === void 0) {
-      record6 = /* @__PURE__ */ Object.create(null);
-      params[slot] = record6;
+    let record7 = params[slot];
+    if (record7 === void 0) {
+      record7 = /* @__PURE__ */ Object.create(null);
+      params[slot] = record7;
     }
-    record6[key] = value;
+    record7[key] = value;
   }
   let config;
   for (const [index, arg] of args.entries()) {
@@ -47324,9 +48218,9 @@ var serializeObjectParam = ({ allowReserved, explode, name, style, value, valueO
 var PATH_PARAM_RE = /\{[^{}]+\}/g;
 var defaultPathSerializer = ({ path: path2, url: _url }) => {
   let url = _url;
-  const matches = _url.match(PATH_PARAM_RE);
-  if (matches) {
-    for (const match of matches) {
+  const matches2 = _url.match(PATH_PARAM_RE);
+  if (matches2) {
+    for (const match of matches2) {
       let explode = false;
       let name = match.substring(1, match.length - 1);
       let style = "simple";
@@ -49692,6 +50586,289 @@ var revokeProjectDatabaseAccess = (parameters, options) => {
     ...params
   });
 };
+var listProjectDatabaseWebhooks = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks",
+    ...options,
+    ...params
+  });
+};
+var createProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { key: "databaseWebhookCreateRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var deleteProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}",
+    ...options,
+    ...params
+  });
+};
+var testProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}/test",
+    ...options,
+    ...params
+  });
+};
+var listProjectDatabaseWebhookDeliveries = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "webhook_id" },
+        { in: "query", key: "limit" },
+        { in: "query", key: "cursor" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhook-deliveries",
+    ...options,
+    ...params
+  });
+};
+var replayProjectDatabaseWebhookDelivery = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "delivery_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhook-deliveries/{delivery_id}/replay",
+    ...options,
+    ...params
+  });
+};
+var listProjectDatabaseSchedules = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules",
+    ...options,
+    ...params
+  });
+};
+var deleteProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params
+  });
+};
+var setProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" },
+        { key: "databaseScheduleSetRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).put({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var listProjectDatabaseScheduleRuns = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "limit" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}/runs",
+    ...options,
+    ...params
+  });
+};
+var runProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}/run",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseExecutionUsage = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "from" },
+        { in: "query", key: "to" },
+        { in: "query", key: "granularity" },
+        { in: "query", key: "limit" },
+        { in: "query", key: "cursor" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/execution-usage",
+    ...options,
+    ...params
+  });
+};
 var planDeploymentRollback = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -50143,7 +51320,7 @@ var ULID3 = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
 function assertManagedMailResponse(value, input) {
   const r = object2(value);
   if (input.action === "configure" || input.action === "status" || input.action === "webhook_verify") {
-    exact4(r, [
+    exact5(r, [
       "domain_id",
       "domain",
       "environment_id",
@@ -50173,14 +51350,14 @@ function assertManagedMailResponse(value, input) {
       invalid5();
     if (r["webhook"] !== null) {
       const hook = object2(r["webhook"]);
-      exact4(hook, ["url", "verified"]);
+      exact5(hook, ["url", "verified"]);
       https(hook["url"]);
       if (typeof hook["verified"] !== "boolean")
         invalid5();
     }
     if (r["dns"] !== void 0) {
       const dns = object2(r["dns"]);
-      exact4(dns, ["status", "records"]);
+      exact5(dns, ["status", "records"]);
       if (!["configured", "action_required", "conflict"].includes(String(dns["status"])))
         invalid5();
       records(dns["records"]);
@@ -50188,19 +51365,19 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "webhook_set") {
-    exact4(r, ["url", "signing_secret", "status"]);
+    exact5(r, ["url", "signing_secret", "status"]);
     if (r["url"] !== input.url || r["status"] !== "verification_required" || typeof r["signing_secret"] !== "string" || !/^whsec_[A-Za-z0-9+/]{43}=$/u.test(r["signing_secret"]))
       invalid5();
     return;
   }
   if (input.action === "webhook_disable") {
-    exact4(r, ["status"]);
+    exact5(r, ["status"]);
     if (r["status"] !== "disabled")
       invalid5();
     return;
   }
   if (input.action === "domain_delete") {
-    exact4(r, ["status", "domain", "dns_records"]);
+    exact5(r, ["status", "domain", "dns_records"]);
     if (r["status"] !== "deleted")
       invalid5();
     domain(r["domain"]);
@@ -50208,12 +51385,12 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "messages_list") {
-    exact4(r, ["items"]);
+    exact5(r, ["items"]);
     if (!Array.isArray(r["items"]) || r["items"].length > 50)
       invalid5();
     for (const value2 of r["items"]) {
       const item = object2(value2);
-      exact4(item, ["message_id", "received_at", "state", "attempts"]);
+      exact5(item, ["message_id", "received_at", "state", "attempts"]);
       id2(item["message_id"]);
       time(item["received_at"]);
       if (!["pending", "delivering", "delivered", "delivery_failed", "expired"].includes(String(item["state"])) || !Number.isInteger(item["attempts"]) || Number(item["attempts"]) < 0 || Number(item["attempts"]) > 4)
@@ -50222,7 +51399,7 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "message_retry") {
-    exact4(r, ["attempted"], ["delivered"]);
+    exact5(r, ["attempted"], ["delivered"]);
     if (typeof r["attempted"] !== "boolean" || r["delivered"] !== void 0 && typeof r["delivered"] !== "boolean")
       invalid5();
     return;
@@ -50230,10 +51407,10 @@ function assertManagedMailResponse(value, input) {
   if (input.action !== "message_get")
     invalid5();
   if (r["status"] === "expired") {
-    exact4(r, ["status"]);
+    exact5(r, ["status"]);
     return;
   }
-  exact4(r, [
+  exact5(r, [
     "id",
     "domain",
     "received_at",
@@ -50265,7 +51442,7 @@ function assertManagedMailResponse(value, input) {
     invalid5();
   for (const value2 of r["attachments"]) {
     const a = object2(value2);
-    exact4(a, ["id", "filename", "content_type", "download_path"]);
+    exact5(a, ["id", "filename", "content_type", "download_path"]);
     if (typeof a["id"] !== "string" || !/^[A-Za-z0-9_-]{1,128}$/u.test(a["id"]) || a["filename"] !== null && typeof a["filename"] !== "string" || typeof a["content_type"] !== "string" || a["download_path"] !== `/v1/projects/${input.projectId}/environments/${input.environmentId}/mail/messages/${input.messageId}/attachments/${a["id"]}`)
       invalid5();
   }
@@ -50275,7 +51452,7 @@ function object2(v) {
     invalid5();
   return v;
 }
-function exact4(v, required, optional = []) {
+function exact5(v, required, optional = []) {
   if (required.some((k) => !(k in v)) || Object.keys(v).some((k) => !required.includes(k) && !optional.includes(k)))
     invalid5();
 }
@@ -50300,7 +51477,7 @@ function records(v) {
     invalid5();
   for (const value of v) {
     const r = object2(value);
-    exact4(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
+    exact5(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
     if (!["TXT", "CNAME", "MX"].includes(String(r["type"])) || ["name", "value", "purpose", "status"].some((k) => typeof r[k] !== "string") || r["type"] === "MX" && (!Number.isInteger(r["priority"]) || Number(r["priority"]) < 0 || Number(r["priority"]) > 65535))
       invalid5();
   }
@@ -50357,7 +51534,7 @@ var HOST = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}
 function assertSharedMailResponse(value, input) {
   const v = object3(value);
   if (input.action === "domains_list") {
-    exact5(v, ["items"]);
+    exact6(v, ["items"]);
     if (!Array.isArray(v["items"]) || v["items"].length > 100)
       invalid6();
     for (const item of v["items"])
@@ -50369,7 +51546,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["domain_get", "domain_create", "domain_retire"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "domain_id",
       "organization_id",
       "domain",
@@ -50402,7 +51579,7 @@ function assertSharedMailResponse(value, input) {
       invalid6();
     for (const entry of v["dns_records"]) {
       const r = object3(entry);
-      exact5(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
+      exact6(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
       member(r["type"], ["TXT", "MX", "CNAME"]);
       for (const k of ["name", "value", "purpose", "status"])
         if (typeof r[k] !== "string" || /[\r\n\0]/u.test(r[k]))
@@ -50415,7 +51592,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["binding_get", "binding_set", "binding_detach"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "mail_domain_id",
       "organization_id",
       "project_id",
@@ -50449,7 +51626,7 @@ function assertSharedMailResponse(value, input) {
       invalid6();
     if (v["application_domain_identity"] !== null) {
       const identity = object3(v["application_domain_identity"]);
-      exact5(identity, ["hostname", "registrable_domain", "revision", "status"]);
+      exact6(identity, ["hostname", "registrable_domain", "revision", "status"]);
       host(identity["hostname"]);
       host(identity["registrable_domain"]);
       positive(identity["revision"]);
@@ -50458,7 +51635,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["identity_get", "identity_declare", "identity_verify", "identity_revoke"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "organization_id",
       "project_id",
       "hostname",
@@ -50478,7 +51655,7 @@ function assertSharedMailResponse(value, input) {
     positive(v["revision"]);
     member(v["status"], ["pending", "verified", "expired", "revoked"]);
     const challenge = object3(v["challenge"]);
-    exact5(challenge, ["type", "name", "value"]);
+    exact6(challenge, ["type", "name", "value"]);
     if (challenge["type"] !== "TXT" || typeof challenge["name"] !== "string" || challenge["name"] !== `_omh-project.${v["hostname"]}` || typeof challenge["value"] !== "string" || challenge["value"].length < 16 || challenge["value"].length > 255 || /[\r\n\0]/u.test(challenge["value"]))
       invalid6();
     if (v["verified_at"] !== null)
@@ -50487,14 +51664,14 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (input.action === "domain_dns_authorize" || input.action === "identity_authorize") {
-    exact5(v, ["authorization_id", "authorization_url", "expires_at"]);
+    exact6(v, ["authorization_id", "authorization_url", "expires_at"]);
     id3(v["authorization_id"]);
     time2(v["expires_at"]);
     if (typeof v["authorization_url"] !== "string" || !/^https:\/\/dash\.cloudflare\.com\/oauth2\/auth\?/u.test(v["authorization_url"]))
       invalid6();
     return;
   }
-  exact5(v, ["status", "zone", "scopes", "expires_at"]);
+  exact6(v, ["status", "zone", "scopes", "expires_at"]);
   member(v["status"], ["not_authorized", "pending", "authorized", "expired", "revoked"]);
   if (!Array.isArray(v["scopes"]) || v["scopes"].length > 2 || new Set(v["scopes"]).size !== v["scopes"].length || v["scopes"].some((s) => s !== "dns.write" && s !== "zone.read"))
     invalid6();
@@ -50510,7 +51687,7 @@ function object3(v) {
     invalid6();
   return v;
 }
-function exact5(v, required, optional = []) {
+function exact6(v, required, optional = []) {
   if (required.some((k) => !(k in v)) || Object.keys(v).some((k) => !required.includes(k) && !optional.includes(k)))
     invalid6();
 }
@@ -50781,6 +51958,8 @@ function checkedResponse(kind, value) {
 }
 
 // apps/product-cli/dist/product-api.js
+var WEBHOOK_SCOPE_MISMATCH = "Webhook response scope mismatch";
+var SCHEDULE_SCOPE_MISMATCH = "Schedule response scope mismatch";
 var GeneratedSdkProductApi = class {
   #client;
   managedSource;
@@ -50977,6 +52156,159 @@ var GeneratedSdkProductApi = class {
     assertProjectDatabaseAccess(value);
     return value;
   }
+  /** The signing secret exists only in this answer; the CLI prints it once and stores nothing. */
+  async createProjectDatabaseWebhook(input) {
+    const value = await createProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseWebhookCreateRequest: {
+        url: input.url,
+        event_types: [...input.eventTypes],
+        headers: { ...input.headers }
+      }
+    }, { client: this.#client });
+    assertDatabaseWebhookCreated(value);
+    if (value.environment !== input.environment)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseWebhooks(input) {
+    const value = await listProjectDatabaseWebhooks({ project_id: input.projectId, environment: input.environment }, { client: this.#client });
+    assertDatabaseWebhookPage(value);
+    if (value.items.some((item) => item.environment !== input.environment))
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseWebhook(input) {
+    const value = await getProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhook(value);
+    if (value.id !== input.webhookId || value.environment !== input.environment)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async deleteProjectDatabaseWebhook(input) {
+    const value = await deleteProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookDeleted(value);
+    if (value.id !== input.webhookId)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async testProjectDatabaseWebhook(input) {
+    const value = await testProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookTest(value);
+    return value;
+  }
+  async listProjectDatabaseWebhookDeliveries(input) {
+    const value = await listProjectDatabaseWebhookDeliveries({
+      project_id: input.projectId,
+      environment: input.environment,
+      ...input.webhookId === void 0 ? {} : { webhook_id: input.webhookId },
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseWebhookDeliveryPage(value);
+    if (input.webhookId !== void 0 && value.items.some((item) => item.webhook_id !== input.webhookId))
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async replayProjectDatabaseWebhookDelivery(input) {
+    const value = await replayProjectDatabaseWebhookDelivery({
+      project_id: input.projectId,
+      environment: input.environment,
+      delivery_id: input.deliveryId
+    }, { client: this.#client });
+    assertDatabaseWebhookReplayAccepted(value);
+    if (value.delivery_id !== input.deliveryId)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  /** A schedule runs the statements as the application's runtime role; the request confirms it. */
+  async setProjectDatabaseSchedule(input) {
+    const request = input.request;
+    const value = await setProjectDatabaseSchedule({
+      project_id: input.projectId,
+      environment: input.environment,
+      name: input.name,
+      databaseScheduleSetRequest: {
+        ...request.cron === null ? {} : { cron: request.cron },
+        ...request.every_seconds === null ? {} : { every_seconds: request.every_seconds },
+        statements: [...request.statements],
+        timeout_ms: request.timeout_ms,
+        enabled: request.enabled,
+        confirm: true
+      }
+    }, { client: this.#client });
+    assertDatabaseSchedule(value);
+    if (value.name !== input.name || value.environment !== input.environment)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseSchedules(input) {
+    const value = await listProjectDatabaseSchedules({ project_id: input.projectId, environment: input.environment }, { client: this.#client });
+    assertDatabaseSchedulePage(value);
+    if (value.items.some((item) => item.environment !== input.environment))
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseSchedule(input) {
+    const value = await getProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseSchedule(value);
+    if (value.name !== input.name || value.environment !== input.environment)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async deleteProjectDatabaseSchedule(input) {
+    const value = await deleteProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseScheduleDeleted(value);
+    if (value.name !== input.name)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseScheduleRuns(input) {
+    const value = await listProjectDatabaseScheduleRuns({
+      project_id: input.projectId,
+      environment: input.environment,
+      name: input.name,
+      ...input.limit === void 0 ? {} : { limit: input.limit }
+    }, { client: this.#client });
+    assertDatabaseScheduleRunPage(value);
+    if (value.items.some((item) => item.schedule !== input.name))
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async runProjectDatabaseSchedule(input) {
+    const value = await runProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseScheduleRunAccepted(value);
+    if (value.schedule !== input.name)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseExecutionUsage(input) {
+    const value = await getProjectDatabaseExecutionUsage({
+      project_id: input.projectId,
+      environment: input.environment,
+      from: input.from,
+      to: input.to,
+      granularity: input.granularity,
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseExecutionUsagePage(value);
+    return value;
+  }
   async planPaidDomain(input) {
     return planPaidProjectDomain({ project_id: input.projectId, paidDomainRequest: { hostname: input.hostname } }, { client: this.#client });
   }
@@ -52430,8 +53762,8 @@ function pnpmLockedVersion(document2, packageName) {
   }
   return null;
 }
-function ownValue(record6, key) {
-  return isRecord4(record6) && Object.hasOwn(record6, key) ? record6[key] : void 0;
+function ownValue(record7, key) {
+  return isRecord4(record7) && Object.hasOwn(record7, key) ? record7[key] : void 0;
 }
 function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -54482,10 +55814,6 @@ async function startBridge(raw, hooks = {}) {
         finish();
     });
     upstream.on("ping", (data) => {
-      if (upstream.bufferedAmount >= STREAM_BYTES) {
-        finish();
-        return;
-      }
       upstream.pong(data, true, (error) => {
         if (error)
           finish();
@@ -54531,9 +55859,9 @@ async function startBridge(raw, hooks = {}) {
 // apps/product-cli/dist/psql-session.js
 var runLocalPsql = async (input) => {
   input.signal.throwIfAborted();
-  if (input.websocketUrl !== void 0 && input.websocketUrl !== `wss://${input.host}/`)
+  if (input.websocketUrl !== `wss://${input.host}/`)
     throw new Error("Invalid PGCF transport");
-  const bridge = input.websocketUrl === void 0 ? null : await startBridge({
+  const bridge = await startBridge({
     endpoint: input.websocketUrl,
     database: input.database,
     user: input.user,
@@ -54543,18 +55871,16 @@ var runLocalPsql = async (input) => {
     input.signal.throwIfAborted();
     const environment = Object.fromEntries(Object.entries(process.env).filter(([key]) => !/^PG[A-Z_]+$/iu.test(key)));
     return await new Promise((resolve7, reject) => {
-      const child = spawn("psql", ["-h", bridge?.host ?? input.host, "-U", input.user, "-d", input.database], {
+      const child = spawn("psql", ["-h", bridge.host, "-U", input.user, "-d", input.database], {
         stdio: "inherit",
         signal: input.signal,
         env: {
           ...environment,
           PGPASSWORD: input.password,
-          PGSSLMODE: bridge ? "disable" : "require",
-          ...bridge ? {
-            PGPORT: String(bridge.port),
-            PGCHANNELBINDING: "disable",
-            PGGSSENCMODE: "disable"
-          } : {}
+          PGSSLMODE: "disable",
+          PGPORT: String(bridge.port),
+          PGCHANNELBINDING: "disable",
+          PGGSSENCMODE: "disable"
         }
       });
       child.once("error", (error) => {
@@ -54565,7 +55891,7 @@ var runLocalPsql = async (input) => {
       });
     });
   } finally {
-    await bridge?.close();
+    await bridge.close();
   }
 };
 
@@ -54851,7 +56177,7 @@ var runProductionCli = async (argv, environment, io, signal, overrides = {}) =>
       return written(errorDocument(recognizedCommandLabel(args), 2, "linked_project_selection_required", false, `This directory is linked to projects of several organizations (${error.organizationIds.join(", ")}). Pass --project ULID, or choose the login with --profile-name NAME; '${resolveProductCliEnvironment(environment).commandPrefix} profile list --json' shows the saved logins.`));
     if (error instanceof CredentialStoreUnavailableError)
       return written(errorDocument(recognizedCommandLabel(args), 3, "credential_store_unavailable", false, CREDENTIAL_STORE_UNAVAILABLE_ACTION));
-    const result = error instanceof InvalidCommandError ? invalidCommandFailure(args, environment) : errorDocument(recognizedCommandLabel(args), 1, "internal_error", false, INTERNAL_ERROR_ACTION);
+    const result = error instanceof InvalidCommandError ? invalidCommandFailure(args, environment) : errorDocument(recognizedCommandLabel(args), 1, "internal_error", false, internalErrorAction(recognizedCommandLabel(args)));
     if (!(error instanceof InvalidCommandError)) {
       diagnostics.record({
         correlationId: randomUUID3(),
@@ -54880,6 +56206,8 @@ var runProductionCli = async (argv, environment, io, signal, overrides = {}) =>
       return written(error instanceof SourceWorkspaceError || error instanceof LocalSourcePublicationError ? errorDocument("source inspect", 2, error.code, false, error.message) : classifyCliFailure("source inspect", error, signal));
     }
   }
+  if (command.kind === "help" && command.topic !== void 0 && !helpTopicKnown(command.topic))
+    return written(invalidCommandFailure(args, environment));
   if (command.kind === "help" || command.kind === "version") {
     return written(cliMetadataResult(command.kind, command.kind === "help" ? command.topic : void 0));
   }
@@ -55157,7 +56485,7 @@ var runOfflineInit = async (command, io, diagnostics) => {
     });
     const code = error instanceof RepositoryInitBlockedError ? "repository_init_blocked" : error instanceof RepositoryInitConflictError ? "repository_configuration_exists" : known ? error.code : "internal_error";
     const exitCode = error instanceof RepositoryInitBlockedError ? 9 : known ? 2 : 1;
-    const result = errorDocument("init", exitCode, code, false, known ? initFailureAction(error) : INTERNAL_ERROR_ACTION);
+    const result = errorDocument("init", exitCode, code, false, known ? initFailureAction(error) : internalErrorAction("init"));
     io.writeStdout(result.stdout);
     return result.exitCode;
   }
@@ -55617,9 +56945,10 @@ export {
   SecretInputError,
   PublicResponseTooLargeError,
   PsqlUnavailableError,
+  helpTopicKnown,
   cliMetadataResult,
   invalidCommandAction,
-  INTERNAL_ERROR_ACTION,
+  internalErrorAction,
   CREDENTIAL_STORE_UNAVAILABLE_ACTION,
   endedLoginAction,
   refreshFailedAction,