@amerged/ohmyhost-cli 0.1.42 → 0.1.44

package/README.md

@@ -1,6 +1,6 @@
 # @amerged/ohmyhost-cli
 
-ohmyho.st cli client, version 0.1.42.
+ohmyho.st cli client, version 0.1.44.
 
 ```sh
 npm install --global @amerged/ohmyhost-cli

package/dist/bin.js

@@ -2,7 +2,7 @@
 import { createRequire as __ohmyhostCreateRequire } from "node:module"; const require = __ohmyhostCreateRequire(import.meta.url);
 import {
   runProductionCli
-} from "./chunk-HBM2X2MV.js";
+} from "./chunk-VJWPDFZ5.js";
 import "./chunk-7D2RFLWM.js";
 
 // apps/product-cli/dist/bin.js

package/dist/{chunk-HBM2X2MV.js → chunk-VJWPDFZ5.js}

@@ -38879,12 +38879,12 @@ var failures = {
     "Do not repeat the write with a new key. Inspect the target data with a read query and retain this operation ID. The same key only reads this receipt."
   ],
   database_compute_failed: [
-    "The database size change failed at the provider.",
-    "Read the current database compute and report this operation ID through feedback. Preserve data; do not reset or redeploy the database to repair its size."
+    "The database provider refused the size change or had no room for it. The database keeps its previous size and keeps running, and no credits are charged for the failed change.",
+    "Read the current size with 'ohmyhost database compute get --project PROJECT_ULID --environment dev|prod --json' or MCP database_compute_get, then repeat the change with a new idempotency key; the old key only returns this failure. If it fails again after a few minutes, start a new deployment of the project, repeat the change and report this operation ID through feedback. Never reset the database to change its size."
   ],
   database_compute_plan_changed: [
-    "Paid access ended before the database size change started.",
-    "Read the organization's plan and current database compute, then confirm a new standard-size request. This operation did not resize the database."
+    "Paid access ended before the database size change started, so it was not sent to the database provider. The database keeps its previous size and keeps running, and no credits are charged for the change.",
+    "Read the organization's plan with 'ohmyhost credits account --organization ORGANIZATION_ULID --json' or MCP organization_account_get. Sizes above 256 MiB need active Paid: ask the organization Owner to activate Paid through billing checkout, then read the current size with database compute get and repeat the change with a new idempotency key."
   ],
   database_compute_rejected: [
     "The database size change could not be started.",
@@ -40055,112 +40055,6 @@ function isSaasCnameTarget(value) {
   return value === "customers.omh.st" || value === "customers.ohmyho.st";
 }
 
-// packages/contracts/dist/credit-pricing.js
-function assertOrganizationCreditUsage(value) {
-  const record7 = (input, keys) => {
-    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
-      throw new TypeError("Invalid usage fields");
-    return input;
-  };
-  const identifier2 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
-  const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
-  const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
-  const report = record7(value, "organization_id,as_of,unit,period,from,projects,days");
-  if (!identifier2(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
-    throw new TypeError("Invalid usage report");
-  let previous = "";
-  for (const input of report["projects"]) {
-    const project = record7(input, "project_id,used_micros");
-    if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
-      throw new TypeError("Invalid usage project");
-    previous = String(project["project_id"]);
-  }
-  let previousDay = "";
-  for (const input of report["days"]) {
-    const day = record7(input, "day,projects");
-    if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
-      throw new TypeError("Invalid usage day");
-    previousDay = day["day"];
-    previous = "";
-    for (const projectInput of day["projects"]) {
-      const project = record7(projectInput, "project_id,meters");
-      if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
-        throw new TypeError("Invalid usage project");
-      previous = String(project["project_id"]);
-      for (const meterInput of project["meters"]) {
-        const meter = record7(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
-        if (meter["environment_id"] !== null && !identifier2(meter["environment_id"]))
-          throw new TypeError("Invalid usage environment");
-        for (const key of ["meter", "unit", "rate_card_id"])
-          if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
-            throw new TypeError("Invalid usage meter");
-        if (typeof meter["quantity"] !== "string" || !/^(0|[1-9][0-9]{0,29})(\.[0-9]{1,12})?$/u.test(meter["quantity"]) || !amount(meter["charged_micros"]))
-          throw new TypeError("Invalid usage amount");
-      }
-    }
-  }
-}
-function assertPublishedCreditRateCards(value) {
-  if (!Array.isArray(value) || value.length > 4)
-    throw new TypeError("Invalid published prices");
-  const ids = /* @__PURE__ */ new Set();
-  for (const input of value) {
-    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== "currency,effective_from,id,published_at,rates")
-      throw new TypeError("Invalid published price fields");
-    const card = input;
-    if (typeof card["id"] !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(card["id"]) || ids.has(card["id"]) || card["currency"] !== "USD")
-      throw new TypeError("Invalid price identity");
-    ids.add(card["id"]);
-    for (const key of ["published_at", "effective_from"]) {
-      const date2 = card[key];
-      if (typeof date2 !== "string" || !Number.isFinite(Date.parse(date2)) || new Date(date2).toISOString() !== date2)
-        throw new TypeError("Invalid price dates");
-    }
-    if (String(card["published_at"]) > String(card["effective_from"]) || !Array.isArray(card["rates"]) || card["rates"].length < 1 || card["rates"].length > 32)
-      throw new TypeError("Invalid price publication");
-    const meters = /* @__PURE__ */ new Set();
-    for (const item of card["rates"]) {
-      if (!item || typeof item !== "object" || Array.isArray(item) || Object.keys(item).sort().join() !== "credit_micros,meter,provider_cost_micros,unit,units_per_charge")
-        throw new TypeError("Invalid rate fields");
-      const rate = item;
-      for (const key of ["meter", "unit"])
-        if (typeof rate[key] !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(String(rate[key])))
-          throw new TypeError("Invalid rate unit");
-      const identity = String(rate["meter"]) + "/" + String(rate["unit"]);
-      if (meters.has(identity))
-        throw new TypeError("Duplicate rate");
-      meters.add(identity);
-      for (const key of ["units_per_charge", "provider_cost_micros", "credit_micros"]) {
-        const amount = rate[key];
-        if (key === "provider_cost_micros" && amount === null && rate["meter"] === "pgcf.memory.active")
-          continue;
-        if (typeof amount !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(amount) || BigInt(amount) > 9223372036854775807n || key === "units_per_charge" && amount === "0")
-          throw new TypeError("Invalid rate amount");
-      }
-    }
-  }
-}
-function assertOrganizationAccount(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "as_of,available_micros,monthly_micros,name,next_expiry,one_time_micros,organization_id,paid_until,plan,plan_source,reserved_micros,workos_organization_id")
-    throw new TypeError("Invalid account fields");
-  const v = value;
-  if (typeof v["organization_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["organization_id"]) || typeof v["name"] !== "string" || v["name"].length > 128 || typeof v["workos_organization_id"] !== "string" || !/^org_[A-Za-z0-9_]+$/u.test(v["workos_organization_id"]) || v["plan"] !== "paid" && v["plan"] !== "free" || !["free", "stripe", "granted", "manual"].includes(String(v["plan_source"])) || v["plan"] === "free" !== (v["plan_source"] === "free"))
-    throw new TypeError("Invalid account scope");
-  for (const field of ["available_micros", "monthly_micros", "one_time_micros", "reserved_micros"])
-    if (typeof v[field] !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(v[field]))
-      throw new TypeError("Invalid account credits");
-  const held = BigInt(String(v["reserved_micros"]));
-  const balance = BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"]));
-  if (BigInt(String(v["available_micros"])) !== (balance > held ? balance - held : 0n))
-    throw new TypeError("Account credit buckets do not balance");
-  for (const field of ["as_of", "paid_until", "next_expiry"]) {
-    if (field !== "as_of" && v[field] === null)
-      continue;
-    if (typeof v[field] !== "string" || !Number.isFinite(Date.parse(v[field])) || new Date(v[field]).toISOString() !== v[field])
-      throw new TypeError("Invalid account timestamp");
-  }
-}
-
 // packages/contracts/dist/problem-policy.js
 var PROBLEM_POLICY = {
   source_generation_conflict: {
@@ -40906,19 +40800,12 @@ function parseOrganizationCredits(value) {
     "available_micros",
     "reserved_micros",
     "grace_started_at",
-    "grace_expires_at",
-    "active_meters",
-    "rate_cards"
+    "grace_expires_at"
   ]);
-  try {
-    assertPublishedCreditRateCards(input["rate_cards"]);
-  } catch {
-    throw new ResponseContractError();
-  }
   const graceStart = input["grace_started_at"], graceEnd = input["grace_expires_at"];
   if (!(graceStart === null && graceEnd === null) && !(isIsoInstant(graceStart) && isIsoInstant(graceEnd) && Date.parse(graceEnd) - Date.parse(graceStart) === 6048e5))
     throw new ResponseContractError();
-  if (!isUlid(input["organization_id"]) || input["unit"] !== "microcredits" || !isIsoInstant(input["as_of"]) || !Array.isArray(input["active_meters"]) || input["active_meters"].some((m) => typeof m !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(m)))
+  if (!isUlid(input["organization_id"]) || input["unit"] !== "microcredits" || !isIsoInstant(input["as_of"]))
     throw new ResponseContractError();
   for (const field of ["available_micros", "reserved_micros"]) {
     const amount = input[field];
@@ -45312,6 +45199,72 @@ function exact3(value, keys) {
   return Object.keys(value).sort().join(",") === [...keys].sort().join(",");
 }
 
+// packages/contracts/dist/credit-pricing.js
+function assertOrganizationCreditUsage(value) {
+  const record7 = (input, keys) => {
+    if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
+      throw new TypeError("Invalid usage fields");
+    return input;
+  };
+  const identifier2 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
+  const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
+  const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
+  const report = record7(value, "organization_id,as_of,unit,period,from,projects,days");
+  if (!identifier2(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
+    throw new TypeError("Invalid usage report");
+  let previous = "";
+  for (const input of report["projects"]) {
+    const project = record7(input, "project_id,used_micros");
+    if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
+      throw new TypeError("Invalid usage project");
+    previous = String(project["project_id"]);
+  }
+  let previousDay = "";
+  for (const input of report["days"]) {
+    const day = record7(input, "day,projects");
+    if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
+      throw new TypeError("Invalid usage day");
+    previousDay = day["day"];
+    previous = "";
+    for (const projectInput of day["projects"]) {
+      const project = record7(projectInput, "project_id,meters");
+      if (!identifier2(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
+        throw new TypeError("Invalid usage project");
+      previous = String(project["project_id"]);
+      for (const meterInput of project["meters"]) {
+        const meter = record7(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
+        if (meter["environment_id"] !== null && !identifier2(meter["environment_id"]))
+          throw new TypeError("Invalid usage environment");
+        for (const key of ["meter", "unit", "rate_card_id"])
+          if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
+            throw new TypeError("Invalid usage meter");
+        if (typeof meter["quantity"] !== "string" || !/^(0|[1-9][0-9]{0,29})(\.[0-9]{1,12})?$/u.test(meter["quantity"]) || !amount(meter["charged_micros"]))
+          throw new TypeError("Invalid usage amount");
+      }
+    }
+  }
+}
+function assertOrganizationAccount(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "as_of,available_micros,monthly_micros,name,next_expiry,one_time_micros,organization_id,paid_until,plan,plan_source,reserved_micros,workos_organization_id")
+    throw new TypeError("Invalid account fields");
+  const v = value;
+  if (typeof v["organization_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["organization_id"]) || typeof v["name"] !== "string" || v["name"].length > 128 || typeof v["workos_organization_id"] !== "string" || !/^org_[A-Za-z0-9_]+$/u.test(v["workos_organization_id"]) || v["plan"] !== "paid" && v["plan"] !== "free" || !["free", "stripe", "granted", "manual"].includes(String(v["plan_source"])) || v["plan"] === "free" !== (v["plan_source"] === "free"))
+    throw new TypeError("Invalid account scope");
+  for (const field of ["available_micros", "monthly_micros", "one_time_micros", "reserved_micros"])
+    if (typeof v[field] !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(v[field]))
+      throw new TypeError("Invalid account credits");
+  const held = BigInt(String(v["reserved_micros"]));
+  const balance = BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"]));
+  if (BigInt(String(v["available_micros"])) !== (balance > held ? balance - held : 0n))
+    throw new TypeError("Account credit buckets do not balance");
+  for (const field of ["as_of", "paid_until", "next_expiry"]) {
+    if (field !== "as_of" && v[field] === null)
+      continue;
+    if (typeof v[field] !== "string" || !Number.isFinite(Date.parse(v[field])) || new Date(v[field]).toISOString() !== v[field])
+      throw new TypeError("Invalid account timestamp");
+  }
+}
+
 // packages/contracts/dist/database-compute.js
 function assertDatabaseCompute(value) {
   if (!record4(value) || !exact4(value, ["data_mode", "database", "environment", "observed_at", "project_id"]) || typeof value["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["project_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["shared", "isolated"].includes(String(value["data_mode"])) || typeof value["observed_at"] !== "string" || !Number.isFinite(Date.parse(value["observed_at"])) || new Date(value["observed_at"]).toISOString() !== value["observed_at"])
@@ -45364,7 +45317,7 @@ function exact4(v, keys) {
 // apps/product-cli/package.json
 var package_default = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.42",
+  version: "0.1.44",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -45716,13 +45669,13 @@ var HELP_USAGE = Object.freeze({
   "database webhook test": "ohmyhost database webhook test --project ULID --environment dev|prod --webhook ID --yes --json (sends one signed test request to the receiver; nothing is stored)",
   "database webhook deliveries": "ohmyhost database webhook deliveries --project ULID [--environment dev|prod] [--webhook ID] [--limit 1..100] [--cursor CURSOR] --json",
   "database webhook replay": "ohmyhost database webhook replay --project ULID --environment dev|prod --delivery ID --yes --json",
-  "database schedule set": "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000)",
+  "database schedule set": "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000). A project whose Stop budget is reached has its schedules disabled automatically, within about an hour of the billed usage reaching the budget: the credit service does this after its hourly pgcf pass, and Continue budgets are never touched. While the budget is reached, schedule set with enabled true and schedule run are refused with project_budget_exceeded (HTTP 402). Re-enabling is manual: raise the budget (or wait for the next UTC month) and run database schedule set --enabled true again with the schedule body (read it with schedule get).",
   "database schedule list": "ohmyhost database schedule list --project ULID [--environment dev|prod] --json (dev when omitted)",
   "database schedule get": "ohmyhost database schedule get --project ULID [--environment dev|prod] --name NAME --json",
   "database schedule delete": "ohmyhost database schedule delete --project ULID --environment dev|prod --name NAME --yes --json",
   "database schedule runs": "ohmyhost database schedule runs --project ULID [--environment dev|prod] --name NAME [--limit 1..50] --json",
-  "database schedule run": "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer)",
-  "database executions": "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; usage counters only, nothing is charged for them until the operator prices them)",
+  "database schedule run": "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer; refused with project_budget_exceeded (HTTP 402) while the project's Stop budget is reached)",
+  "database executions": "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; these are counters only, executions have no price of their own and the awake compute time of the database is what is billed)",
   "database psql": "ohmyhost database psql --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--json] (starts local psql with a temporary credential and revokes it on exit)",
   link: "ohmyhost link --project ULID --repository-owner OWNER --repository-name REPOSITORY --idempotency-key KEY --json (uses the workspace GitHub connection and waits for the source-link operation)",
   "source auto-deploy set": "ohmyhost source auto-deploy set --project ULID --branch BRANCH --enabled true|false --idempotency-key KEY --json",
@@ -55906,9 +55859,9 @@ async function startBridge(raw, hooks = {}) {
 // apps/product-cli/dist/psql-session.js
 var runLocalPsql = async (input) => {
   input.signal.throwIfAborted();
-  if (input.websocketUrl !== void 0 && input.websocketUrl !== `wss://${input.host}/`)
+  if (input.websocketUrl !== `wss://${input.host}/`)
     throw new Error("Invalid PGCF transport");
-  const bridge = input.websocketUrl === void 0 ? null : await startBridge({
+  const bridge = await startBridge({
     endpoint: input.websocketUrl,
     database: input.database,
     user: input.user,
@@ -55918,18 +55871,16 @@ var runLocalPsql = async (input) => {
     input.signal.throwIfAborted();
     const environment = Object.fromEntries(Object.entries(process.env).filter(([key]) => !/^PG[A-Z_]+$/iu.test(key)));
     return await new Promise((resolve7, reject) => {
-      const child = spawn("psql", ["-h", bridge?.host ?? input.host, "-U", input.user, "-d", input.database], {
+      const child = spawn("psql", ["-h", bridge.host, "-U", input.user, "-d", input.database], {
         stdio: "inherit",
         signal: input.signal,
         env: {
           ...environment,
           PGPASSWORD: input.password,
-          PGSSLMODE: bridge ? "disable" : "require",
-          ...bridge ? {
-            PGPORT: String(bridge.port),
-            PGCHANNELBINDING: "disable",
-            PGGSSENCMODE: "disable"
-          } : {}
+          PGSSLMODE: "disable",
+          PGPORT: String(bridge.port),
+          PGCHANNELBINDING: "disable",
+          PGGSSENCMODE: "disable"
         }
       });
       child.once("error", (error) => {
@@ -55940,7 +55891,7 @@ var runLocalPsql = async (input) => {
       });
     });
   } finally {
-    await bridge?.close();
+    await bridge.close();
   }
 };
 

package/dist/index.js

@@ -100,7 +100,7 @@ import {
   selectWorkspace,
   verifiedUserId,
   workspaceOf
-} from "./chunk-HBM2X2MV.js";
+} from "./chunk-VJWPDFZ5.js";
 import {
   CredentialStoreIntegrityError,
   CredentialStoreUnavailableError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amerged/ohmyhost-cli",
-  "version": "0.1.42",
+  "version": "0.1.44",
   "type": "module",
   "engines": {
     "node": ">=22"

package/src/apps/product-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/product-cli",
-  "version": "0.1.42",
+  "version": "0.1.44",
   "private": true,
   "ohmyhost": {
     "deployment": "production",

package/src/apps/product-cli/src/cli.ts

@@ -434,7 +434,7 @@ const HELP_USAGE = Object.freeze({
   "database webhook replay":
     "ohmyhost database webhook replay --project ULID --environment dev|prod --delivery ID --yes --json",
   "database schedule set":
-    "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000)",
+    "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000). A project whose Stop budget is reached has its schedules disabled automatically, within about an hour of the billed usage reaching the budget: the credit service does this after its hourly pgcf pass, and Continue budgets are never touched. While the budget is reached, schedule set with enabled true and schedule run are refused with project_budget_exceeded (HTTP 402). Re-enabling is manual: raise the budget (or wait for the next UTC month) and run database schedule set --enabled true again with the schedule body (read it with schedule get).",
   "database schedule list":
     "ohmyhost database schedule list --project ULID [--environment dev|prod] --json (dev when omitted)",
   "database schedule get":
@@ -444,9 +444,9 @@ const HELP_USAGE = Object.freeze({
   "database schedule runs":
     "ohmyhost database schedule runs --project ULID [--environment dev|prod] --name NAME [--limit 1..50] --json",
   "database schedule run":
-    "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer)",
+    "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer; refused with project_budget_exceeded (HTTP 402) while the project's Stop budget is reached)",
   "database executions":
-    "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; usage counters only, nothing is charged for them until the operator prices them)",
+    "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; these are counters only, executions have no price of their own and the awake compute time of the database is what is billed)",
   "database psql":
     "ohmyhost database psql --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--json] (starts local psql with a temporary credential and revokes it on exit)",
   link: "ohmyhost link --project ULID --repository-owner OWNER --repository-name REPOSITORY --idempotency-key KEY --json (uses the workspace GitHub connection and waits for the source-link operation)",

package/src/apps/product-cli/src/psql-session.ts

@@ -9,21 +9,17 @@ export const runLocalPsql = async (input: {
   readonly user: string;
   readonly password: string;
   readonly database: string;
-  readonly websocketUrl?: string;
+  readonly websocketUrl: string;
   readonly signal: AbortSignal;
 }): Promise<number> => {
   input.signal.throwIfAborted();
-  if (input.websocketUrl !== undefined && input.websocketUrl !== `wss://${input.host}/`)
-    throw new Error("Invalid PGCF transport");
-  const bridge =
-    input.websocketUrl === undefined
-      ? null
-      : await startBridge({
-          endpoint: input.websocketUrl,
-          database: input.database,
-          user: input.user,
-          port: 0,
-        });
+  if (input.websocketUrl !== `wss://${input.host}/`) throw new Error("Invalid PGCF transport");
+  const bridge = await startBridge({
+    endpoint: input.websocketUrl,
+    database: input.database,
+    user: input.user,
+    port: 0,
+  });
   try {
     input.signal.throwIfAborted();
     // A caller's libpq service/hostaddr settings must not redirect this temporary credential.
@@ -31,26 +27,18 @@ export const runLocalPsql = async (input: {
       Object.entries(process.env).filter(([key]) => !/^PG[A-Z_]+$/iu.test(key)),
     );
     return await new Promise<number>((resolve, reject) => {
-      const child = spawn(
-        "psql",
-        ["-h", bridge?.host ?? input.host, "-U", input.user, "-d", input.database],
-        {
-          stdio: "inherit",
-          signal: input.signal,
-          env: {
-            ...environment,
-            PGPASSWORD: input.password,
-            PGSSLMODE: bridge ? "disable" : "require",
-            ...(bridge
-              ? {
-                  PGPORT: String(bridge.port),
-                  PGCHANNELBINDING: "disable",
-                  PGGSSENCMODE: "disable",
-                }
-              : {}),
-          },
+      const child = spawn("psql", ["-h", bridge.host, "-U", input.user, "-d", input.database], {
+        stdio: "inherit",
+        signal: input.signal,
+        env: {
+          ...environment,
+          PGPASSWORD: input.password,
+          PGSSLMODE: "disable",
+          PGPORT: String(bridge.port),
+          PGCHANNELBINDING: "disable",
+          PGGSSENCMODE: "disable",
         },
-      );
+      });
       child.once("error", (error: NodeJS.ErrnoException) => {
         reject(error.code === "ENOENT" ? new PsqlUnavailableError() : error);
       });
@@ -59,6 +47,6 @@ export const runLocalPsql = async (input: {
       });
     });
   } finally {
-    await bridge?.close();
+    await bridge.close();
   }
 };

package/src/apps/product-cli/src/runtime-contract.ts

@@ -23,7 +23,6 @@ import type {
   ProjectCreditBudget,
 } from "@ohmyhost/sdk-ts";
 import { isSaasCnameTarget, type SaasCnameTarget } from "@ohmyhost/contracts/platform-origins";
-import { assertPublishedCreditRateCards } from "@ohmyhost/contracts/credit-pricing";
 import {
   publicOperationFailure,
   publicOperationReconciliation,
@@ -554,14 +553,7 @@ export function parseOrganizationCredits(value: unknown): OrganizationCredits {
     "reserved_micros",
     "grace_started_at",
     "grace_expires_at",
-    "active_meters",
-    "rate_cards",
   ]);
-  try {
-    assertPublishedCreditRateCards(input["rate_cards"]);
-  } catch {
-    throw new ResponseContractError();
-  }
   const graceStart = input["grace_started_at"],
     graceEnd = input["grace_expires_at"];
   if (
@@ -576,11 +568,7 @@ export function parseOrganizationCredits(value: unknown): OrganizationCredits {
   if (
     !isUlid(input["organization_id"]) ||
     input["unit"] !== "microcredits" ||
-    !isIsoInstant(input["as_of"]) ||
-    !Array.isArray(input["active_meters"]) ||
-    input["active_meters"].some(
-      (m: unknown) => typeof m !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(m),
-    )
+    !isIsoInstant(input["as_of"])
   )
     throw new ResponseContractError();
   for (const field of ["available_micros", "reserved_micros"]) {

package/src/packages/contracts/src/credit-pricing.ts

@@ -116,96 +116,6 @@ export function assertOrganizationCreditUsage(
   }
 }
 
-export interface PublishedCreditRateCard {
-  readonly id: string;
-  readonly currency: "USD";
-  readonly published_at: string;
-  readonly effective_from: string;
-  readonly rates: readonly {
-    readonly meter: string;
-    readonly unit: string;
-    readonly units_per_charge: string;
-    readonly provider_cost_micros: string | null;
-    readonly credit_micros: string;
-  }[];
-}
-
-/** Shared wire validation only; clients never recompute accounting decisions. */
-export function assertPublishedCreditRateCards(
-  value: unknown,
-): asserts value is readonly PublishedCreditRateCard[] {
-  if (!Array.isArray(value) || value.length > 4) throw new TypeError("Invalid published prices");
-  const ids = new Set<string>();
-  for (const input of value) {
-    if (
-      !input ||
-      typeof input !== "object" ||
-      Array.isArray(input) ||
-      Object.keys(input).sort().join() !== "currency,effective_from,id,published_at,rates"
-    )
-      throw new TypeError("Invalid published price fields");
-    const card = input as Record<string, unknown>;
-    if (
-      typeof card["id"] !== "string" ||
-      !/^[a-z0-9_.-]{1,128}$/u.test(card["id"]) ||
-      ids.has(card["id"]) ||
-      card["currency"] !== "USD"
-    )
-      throw new TypeError("Invalid price identity");
-    ids.add(card["id"]);
-    for (const key of ["published_at", "effective_from"]) {
-      const date = card[key];
-      if (
-        typeof date !== "string" ||
-        !Number.isFinite(Date.parse(date)) ||
-        new Date(date).toISOString() !== date
-      )
-        throw new TypeError("Invalid price dates");
-    }
-    if (
-      String(card["published_at"]) > String(card["effective_from"]) ||
-      !Array.isArray(card["rates"]) ||
-      card["rates"].length < 1 ||
-      card["rates"].length > 32
-    )
-      throw new TypeError("Invalid price publication");
-    const meters = new Set<string>();
-    for (const item of card["rates"]) {
-      if (
-        !item ||
-        typeof item !== "object" ||
-        Array.isArray(item) ||
-        Object.keys(item).sort().join() !==
-          "credit_micros,meter,provider_cost_micros,unit,units_per_charge"
-      )
-        throw new TypeError("Invalid rate fields");
-      const rate = item as Record<string, unknown>;
-      for (const key of ["meter", "unit"])
-        if (typeof rate[key] !== "string" || !/^[a-z0-9_.-]{1,128}$/u.test(String(rate[key])))
-          throw new TypeError("Invalid rate unit");
-      const identity = String(rate["meter"]) + "/" + String(rate["unit"]);
-      if (meters.has(identity)) throw new TypeError("Duplicate rate");
-      meters.add(identity);
-      for (const key of ["units_per_charge", "provider_cost_micros", "credit_micros"]) {
-        const amount = rate[key];
-        if (
-          key === "provider_cost_micros" &&
-          amount === null &&
-          rate["meter"] === "pgcf.memory.active"
-        )
-          continue;
-        if (
-          typeof amount !== "string" ||
-          !/^(0|[1-9][0-9]{0,18})$/u.test(amount) ||
-          BigInt(amount) > 9223372036854775807n ||
-          (key === "units_per_charge" && amount === "0")
-        )
-          throw new TypeError("Invalid rate amount");
-      }
-    }
-  }
-}
-
 /** Effective feature access and the credit account: the monthly and one-time credit and what the open reservations hold. */
 export function assertOrganizationAccount(value: unknown): void {
   if (

package/src/packages/contracts/src/operation-failure.ts

@@ -34,12 +34,12 @@ const failures = {
     "Do not repeat the write with a new key. Inspect the target data with a read query and retain this operation ID. The same key only reads this receipt.",
   ],
   database_compute_failed: [
-    "The database size change failed at the provider.",
-    "Read the current database compute and report this operation ID through feedback. Preserve data; do not reset or redeploy the database to repair its size.",
+    "The database provider refused the size change or had no room for it. The database keeps its previous size and keeps running, and no credits are charged for the failed change.",
+    "Read the current size with 'ohmyhost database compute get --project PROJECT_ULID --environment dev|prod --json' or MCP database_compute_get, then repeat the change with a new idempotency key; the old key only returns this failure. If it fails again after a few minutes, start a new deployment of the project, repeat the change and report this operation ID through feedback. Never reset the database to change its size.",
   ],
   database_compute_plan_changed: [
-    "Paid access ended before the database size change started.",
-    "Read the organization's plan and current database compute, then confirm a new standard-size request. This operation did not resize the database.",
+    "Paid access ended before the database size change started, so it was not sent to the database provider. The database keeps its previous size and keeps running, and no credits are charged for the change.",
+    "Read the organization's plan with 'ohmyhost credits account --organization ORGANIZATION_ULID --json' or MCP organization_account_get. Sizes above 256 MiB need active Paid: ask the organization Owner to activate Paid through billing checkout, then read the current size with database compute get and repeat the change with a new idempotency key.",
   ],
   database_compute_rejected: [
     "The database size change could not be started.",

package/src/packages/sdk-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ohmyhost/sdk-ts",
-  "version": "0.1.42",
+  "version": "0.1.44",
   "private": true,
   "type": "module",
   "exports": {

package/src/packages/sdk-ts/src/generated/index.ts

@@ -829,7 +829,6 @@ export type {
   PromoteDeploymentResponse,
   PromoteDeploymentResponses,
   ProviderReconciliationAttempt,
-  PublishedCreditRateCard,
   PutEnvironmentSecretData,
   PutEnvironmentSecretError,
   PutEnvironmentSecretErrors,

package/src/packages/sdk-ts/src/generated/sdk.gen.ts

@@ -2192,7 +2192,7 @@ export const configureBillingRecharge = <ThrowOnError extends boolean = true>(
 /**
  * Read the owner's shared organization credit pool
  *
- * Returns the spendable credit and the open reservations, in microcredits (one credit is 1000000 microcredits). available_micros is the monthly credit plus the one-time credit minus the reservations, never below zero. Only the organization Owner may read this balance. active_meters names the currently billed sources; usage that is not billed yet is not included. When the credit is used up, grace_started_at and grace_expires_at name the seven days that keep existing services running. Remains available at zero credit.
+ * Returns the spendable credit and the open reservations, in microcredits (one credit is 1000000 microcredits). available_micros is the monthly credit plus the one-time credit minus the reservations, never below zero. Only the organization Owner may read this balance. It states what is left and never what the credit was spent on; read the recent usage from getOrganizationCreditUsage. When the credit is used up, grace_started_at and grace_expires_at name the seven days that keep existing services running. Remains available at zero credit.
  */
 export const getOrganizationCredits = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -5227,7 +5227,7 @@ export const getProjectDatabaseSchedule = <ThrowOnError extends boolean = true>(
 /**
  * Create or replace one database schedule
  *
- * Creates the named schedule or replaces it. Each run executes the statements as the application's own runtime role, so row-level security applies as for the application. A run that does not finish within timeout_ms is cancelled.
+ * Creates the named schedule or replaces it. Each run executes the statements as the application's own runtime role, so row-level security applies as for the application. A run that does not finish within timeout_ms is cancelled. A reached Stop budget (or exhausted credit past its grace) refuses an enabled schedule with project_budget_exceeded (402); disabling the schedule is never refused.
  */
 export const setProjectDatabaseSchedule = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -5328,7 +5328,7 @@ export const listProjectDatabaseScheduleRuns = <ThrowOnError extends boolean = t
 /**
  * Queue one immediate run of a database schedule
  *
- * Queues one manual run. The run is refused while the schedule is disabled or while a run is already queued.
+ * Queues one manual run. The run is refused while the schedule is disabled or while a run is already queued. A reached Stop budget (or exhausted credit past its grace) refuses the run with project_budget_exceeded (402).
  */
 export const runProjectDatabaseSchedule = <ThrowOnError extends boolean = true>(
   parameters: {
@@ -5374,7 +5374,7 @@ export const runProjectDatabaseSchedule = <ThrowOnError extends boolean = true>(
 /**
  * Read metered database execution usage
  *
- * Returns schedule runs and webhook attempts per time window. Only completed windows are final; the current window may still change. Windows are UTC and at most 31 days long. Rejected, skipped, event and delivery counts are reported but not billed.
+ * Returns schedule runs and webhook attempts per time window. Only completed windows are final; the current window may still change. Windows are UTC and at most 31 days long. The counts are counters only; executions have no price of their own, and the awake compute time of the database is what is billed.
  */
 export const getProjectDatabaseExecutionUsage = <ThrowOnError extends boolean = true>(
   parameters: {

package/src/packages/sdk-ts/src/generated/types.gen.ts

@@ -329,11 +329,6 @@ export type OrganizationCredits = {
    * Seven days after the credit was used up. Existing services and domains are retained during this grace; no automatic data deletion. Explicit project stop budgets are separate.
    */
   grace_expires_at: string | null;
-  active_meters: Array<string>;
-  /**
-   * Published integer prices, newest first. A published rate is not proof of enabled billing; only active_meters names currently billed sources. Builds retain their accepted quote. Provider cost is a list-price basis before platform allowances, not an invoice.
-   */
-  rate_cards: Array<PublishedCreditRateCard>;
 };
 
 /**
@@ -379,23 +374,6 @@ export type OrganizationCreditUsage = {
   }>;
 };
 
-export type PublishedCreditRateCard = {
-  id: string;
-  currency: "USD";
-  published_at: string;
-  effective_from: string;
-  rates: Array<{
-    meter: string;
-    unit: string;
-    units_per_charge: string;
-    /**
-     * Provider list-cost basis for units_per_charge, in USD micro-units (1000000 equals 1 USD), before shared allowances and discounts. Null for the PGCF RAM tariff means node infrastructure costs are tracked separately and are not allocated to this customer rate; null never means zero cost.
-     */
-    provider_cost_micros: string | null;
-    credit_micros: CreditMicros;
-  }>;
-};
-
 export type SetProjectCreditBudgetRequest = {
   /**
    * The monthly budget, at most 9007199254740991 microcredits (about 9 billion credits); null removes it.
@@ -8812,6 +8790,10 @@ export type SetProjectDatabaseScheduleErrors = {
    * The request failed.
    */
   401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  402: ProblemDetails;
   /**
    * The resource does not exist or is not visible to the authenticated principal.
    */
@@ -8946,6 +8928,10 @@ export type RunProjectDatabaseScheduleErrors = {
    * The request failed.
    */
   401: ProblemDetails;
+  /**
+   * The request failed.
+   */
+  402: ProblemDetails;
   /**
    * The resource does not exist or is not visible to the authenticated principal.
    */