@amerged/ohmyhost-mcp 0.1.40 → 0.1.42

package/dist/stdio-main.js

@@ -30,7 +30,7 @@ import {
   serverIdentityOf,
   setNegotiatedProtocolVersion,
   validateEnvelopeMeta
-} from "./chunk-OW4IDEWK.js";
+} from "./chunk-OD4R3WMQ.js";
 
 // node_modules/.pnpm/ignore@7.0.12/node_modules/ignore/index.js
 var require_ignore = __commonJS({
@@ -9034,17 +9034,17 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
     var VARIABLE_NAME_REGEX = /^[A-Za-z][A-Za-z-]*$/;
     var VARIABLE_VALUE_COMMENT_REGEX = /^(.*?)( *[#;].*)$/;
     var extractSectionLine = (line) => {
-      const matches = SECTION_LINE_REGEX.exec(line);
-      if (matches != null) {
-        const [section, subsection] = matches.slice(1);
+      const matches2 = SECTION_LINE_REGEX.exec(line);
+      if (matches2 != null) {
+        const [section, subsection] = matches2.slice(1);
         return [section, subsection];
       }
       return null;
     };
     var extractVariableLine = (line) => {
-      const matches = VARIABLE_LINE_REGEX.exec(line);
-      if (matches != null) {
-        const [name, rawValue = "true"] = matches.slice(1);
+      const matches2 = VARIABLE_LINE_REGEX.exec(line);
+      if (matches2 != null) {
+        const [name, rawValue = "true"] = matches2.slice(1);
         const valueWithoutComments = removeComments(rawValue);
         const valueWithoutQuotes = removeQuotes(valueWithoutComments);
         return [name, valueWithoutQuotes];
@@ -10663,14 +10663,14 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
        * @param {string} short
        * @param {string[]} matches
        */
-      constructor(nouns, short, matches) {
+      constructor(nouns, short, matches2) {
         super(
-          `Found multiple ${nouns} matching "${short}" (${matches.join(
+          `Found multiple ${nouns} matching "${short}" (${matches2.join(
             ", "
           )}). Use a longer abbreviation length to disambiguate them.`
         );
         this.code = this.name = _AmbiguousError.code;
-        this.data = { nouns, short, matches };
+        this.data = { nouns, short, matches: matches2 };
       }
     };
     AmbiguousError.code = "AmbiguousError";
@@ -11043,9 +11043,9 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
       IndexResetError,
       NoCommitError
     });
-    function formatAuthor({ name, email, timestamp: timestamp6, timezoneOffset }) {
+    function formatAuthor({ name, email, timestamp: timestamp7, timezoneOffset }) {
       timezoneOffset = formatTimezoneOffset(timezoneOffset);
-      return `${name} <${email}> ${timestamp6} ${timezoneOffset}`;
+      return `${name} <${email}> ${timestamp7} ${timezoneOffset}`;
     }
     function formatTimezoneOffset(minutes) {
       const sign = simpleSign(negateExceptForZero(minutes));
@@ -11071,13 +11071,13 @@ If you're a developer and you believe this is a bug in isomorphic-git, please fi
       return str;
     }
     function parseAuthor(author) {
-      const [, name, email, timestamp6, offset] = author.match(
+      const [, name, email, timestamp7, offset] = author.match(
         /^(.*) <(.*)> (.*) (.*)$/
       );
       return {
         name,
         email,
-        timestamp: Number(timestamp6),
+        timestamp: Number(timestamp7),
         timezoneOffset: parseTimezoneOffset(offset)
       };
     }
@@ -12417,13 +12417,13 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       return target;
     }
     async function normalizeAuthorObject({ fs: fs3, gitdir, author, commit: commit3 }) {
-      const timestamp6 = Math.floor(Date.now() / 1e3);
+      const timestamp7 = Math.floor(Date.now() / 1e3);
       const defaultAuthor = {
         name: await _getConfig({ fs: fs3, gitdir, path: "user.name" }),
         email: await _getConfig({ fs: fs3, gitdir, path: "user.email" }) || "",
         // author.email is allowed to be empty string
-        timestamp: timestamp6,
-        timezoneOffset: new Date(timestamp6 * 1e3).getTimezoneOffset()
+        timestamp: timestamp7,
+        timezoneOffset: new Date(timestamp7 * 1e3).getTimezoneOffset()
       };
       const normalizedAuthor = assignDefined(
         {},
@@ -12443,13 +12443,13 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       committer,
       commit: commit3
     }) {
-      const timestamp6 = Math.floor(Date.now() / 1e3);
+      const timestamp7 = Math.floor(Date.now() / 1e3);
       const defaultCommitter = {
         name: await _getConfig({ fs: fs3, gitdir, path: "user.name" }),
         email: await _getConfig({ fs: fs3, gitdir, path: "user.email" }) || "",
         // committer.email is allowed to be empty string
-        timestamp: timestamp6,
-        timezoneOffset: new Date(timestamp6 * 1e3).getTimezoneOffset()
+        timestamp: timestamp7,
+        timezoneOffset: new Date(timestamp7 * 1e3).getTimezoneOffset()
       };
       const normalizedCommitter = assignDefined(
         {},
@@ -14916,18 +14916,18 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
           address: url
         };
       }
-      const matches = url.match(/(\w+)(:\/\/|::)(.*)/);
-      if (matches === null) return;
-      if (matches[2] === "://") {
+      const matches2 = url.match(/(\w+)(:\/\/|::)(.*)/);
+      if (matches2 === null) return;
+      if (matches2[2] === "://") {
         return {
-          transport: matches[1],
-          address: matches[0]
+          transport: matches2[1],
+          address: matches2[0]
         };
       }
-      if (matches[2] === "::") {
+      if (matches2[2] === "::") {
         return {
-          transport: matches[1],
-          address: matches[3]
+          transport: matches2[1],
+          address: matches2[3]
         };
       }
     }
@@ -15552,12 +15552,12 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
         forAwait(lines, async (line) => {
           if (onMessage) await onMessage(line);
           if (onProgress) {
-            const matches = line.match(/([^:]*).*\((\d+?)\/(\d+?)\)/);
-            if (matches) {
+            const matches2 = line.match(/([^:]*).*\((\d+?)\/(\d+?)\)/);
+            if (matches2) {
               await onProgress({
-                phase: matches[1].trim(),
-                loaded: parseInt(matches[2], 10),
-                total: parseInt(matches[3], 10)
+                phase: matches2[1].trim(),
+                loaded: parseInt(matches2[2], 10),
+                total: parseInt(matches2[3], 10)
               });
             }
           }
@@ -18626,9 +18626,9 @@ ${obj.gpgsig ? obj.gpgsig : ""}`;
       static createStashReflogEntry(author, stashCommit, message) {
         const nameNoSpace = author.name.replace(/\s/g, "");
         const z40 = "0000000000000000000000000000000000000000";
-        const timestamp6 = Math.floor(Date.now() / 1e3);
+        const timestamp7 = Math.floor(Date.now() / 1e3);
         const timezoneOffset = _GitRefStash.timezoneOffsetForRefLogEntry;
-        return `${z40} ${stashCommit} ${nameNoSpace} ${author.email} ${timestamp6} ${timezoneOffset}	${message}
+        return `${z40} ${stashCommit} ${nameNoSpace} ${author.email} ${timestamp7} ${timezoneOffset}	${message}
 `;
       }
       static getStashReflogEntry(reflogString, parsed = false) {
@@ -24293,14 +24293,14 @@ function isFrameworkConversionDiagnosticCode(value) {
 function parseFrameworkConversionDiagnostic(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     return null;
-  const record7 = value;
-  const code = Object.hasOwn(record7, "code") ? record7["code"] : void 0;
-  const path2 = Object.hasOwn(record7, "path") ? record7["path"] : void 0;
+  const record8 = value;
+  const code = Object.hasOwn(record8, "code") ? record8["code"] : void 0;
+  const path2 = Object.hasOwn(record8, "path") ? record8["path"] : void 0;
   if (!isFrameworkConversionDiagnosticCode(code) || typeof path2 !== "string")
     return null;
   const definition = DETAIL_DEFINITIONS[code];
-  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record7, name) ? record7[name] : void 0]);
-  if (Object.keys(record7).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
+  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record8, name) ? record8[name] : void 0]);
+  if (Object.keys(record8).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
     return null;
   return Object.freeze(Object.fromEntries([
     ["code", code],
@@ -24803,8 +24803,8 @@ function ulid(value) {
   if (typeof value !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value))
     invalid();
 }
-function commit(value, nullable = false) {
-  if (nullable && value === null)
+function commit(value, nullable2 = false) {
+  if (nullable2 && value === null)
     return;
   if (typeof value !== "string" || !/^[a-f0-9]{40}$/u.test(value))
     invalid();
@@ -25410,38 +25410,48 @@ function isSaasCnameTarget(value) {
 
 // packages/contracts/dist/credit-pricing.js
 function assertOrganizationCreditUsage(value) {
-  const record7 = (input, keys) => {
+  const record8 = (input, keys) => {
     if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
       throw new TypeError("Invalid usage fields");
     return input;
   };
   const identifier3 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
   const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
-  const report = record7(value, "organization_id,month,as_of,unit,data,next_cursor");
-  if (!identifier3(report["organization_id"]) || typeof report["month"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["month"]) || typeof report["as_of"] !== "string" || !Number.isFinite(Date.parse(report["as_of"])) || new Date(report["as_of"]).toISOString() !== report["as_of"] || report["unit"] !== "microcredits" || !Array.isArray(report["data"]) || report["data"].length > 20 || report["next_cursor"] !== null && !identifier3(report["next_cursor"]))
+  const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
+  const report = record8(value, "organization_id,as_of,unit,period,from,projects,days");
+  if (!identifier3(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
     throw new TypeError("Invalid usage report");
   let previous = "";
-  for (const input of report["data"]) {
-    const project = record7(input, "project_id,reserved_micros,meters");
-    if (!identifier3(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["reserved_micros"]) || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
+  for (const input of report["projects"]) {
+    const project = record8(input, "project_id,used_micros");
+    if (!identifier3(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
       throw new TypeError("Invalid usage project");
     previous = String(project["project_id"]);
-    for (const input2 of project["meters"]) {
-      const meter = record7(input2, "environment_id,meter,unit,rate_card_id,quantity,charged_micros,funded_micros,platform_overrun_micros");
-      if (meter["environment_id"] !== null && !identifier3(meter["environment_id"]))
-        throw new TypeError("Invalid usage environment");
-      for (const key of ["meter", "unit", "rate_card_id"])
-        if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
-          throw new TypeError("Invalid usage meter");
-      for (const key of ["quantity", "charged_micros", "funded_micros", "platform_overrun_micros"])
-        if (!amount(meter[key]))
+  }
+  let previousDay = "";
+  for (const input of report["days"]) {
+    const day = record8(input, "day,projects");
+    if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
+      throw new TypeError("Invalid usage day");
+    previousDay = day["day"];
+    previous = "";
+    for (const projectInput of day["projects"]) {
+      const project = record8(projectInput, "project_id,meters");
+      if (!identifier3(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
+        throw new TypeError("Invalid usage project");
+      previous = String(project["project_id"]);
+      for (const meterInput of project["meters"]) {
+        const meter = record8(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
+        if (meter["environment_id"] !== null && !identifier3(meter["environment_id"]))
+          throw new TypeError("Invalid usage environment");
+        for (const key of ["meter", "unit", "rate_card_id"])
+          if (typeof meter[key] !== "string" || !/^[A-Za-z0-9_.:/-]{1,128}$/u.test(meter[key]))
+            throw new TypeError("Invalid usage meter");
+        if (typeof meter["quantity"] !== "string" || !/^(0|[1-9][0-9]{0,29})(\.[0-9]{1,12})?$/u.test(meter["quantity"]) || !amount(meter["charged_micros"]))
           throw new TypeError("Invalid usage amount");
-      if (BigInt(String(meter["charged_micros"])) !== BigInt(String(meter["funded_micros"])) + BigInt(String(meter["platform_overrun_micros"])))
-        throw new TypeError("Inconsistent usage charge");
+      }
     }
   }
-  if (report["next_cursor"] !== null && report["next_cursor"] !== previous)
-    throw new TypeError("Invalid usage cursor");
 }
 function assertOrganizationAccount(value) {
   if (!value || typeof value !== "object" || Array.isArray(value) || Object.keys(value).sort().join(",") !== "as_of,available_micros,monthly_micros,name,next_expiry,one_time_micros,organization_id,paid_until,plan,plan_source,reserved_micros,workos_organization_id")
@@ -25452,7 +25462,9 @@ function assertOrganizationAccount(value) {
   for (const field of ["available_micros", "monthly_micros", "one_time_micros", "reserved_micros"])
     if (typeof v[field] !== "string" || !/^(0|[1-9][0-9]{0,18})$/u.test(v[field]))
       throw new TypeError("Invalid account credits");
-  if (BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"])) !== BigInt(String(v["available_micros"])))
+  const held = BigInt(String(v["reserved_micros"]));
+  const balance = BigInt(String(v["monthly_micros"])) + BigInt(String(v["one_time_micros"]));
+  if (BigInt(String(v["available_micros"])) !== (balance > held ? balance - held : 0n))
     throw new TypeError("Account credit buckets do not balance");
   for (const field of ["as_of", "paid_until", "next_expiry"]) {
     if (field !== "as_of" && v[field] === null)
@@ -25602,6 +25614,30 @@ var PROBLEM_POLICY = {
     action: "List the project's database credentials and revoke one you no longer need, then request access again.",
     title: "Database access limit reached"
   },
+  database_webhook_limit: {
+    status: 409,
+    retryable: false,
+    action: "List the project's database webhooks for this environment and delete one you no longer need, then create the webhook again.",
+    title: "Database webhook limit reached"
+  },
+  database_schedule_limit: {
+    status: 409,
+    retryable: false,
+    action: "List the project's database schedules for this environment and delete one you no longer need, then set the schedule again.",
+    title: "Database schedule limit reached"
+  },
+  database_schedule_not_runnable: {
+    status: 409,
+    retryable: false,
+    action: "Read the schedule and its runs. Enable a disabled schedule, or wait until the run already queued has finished, then request the run again.",
+    title: "Database schedule cannot run now"
+  },
+  database_webhook_delivery_pending: {
+    status: 409,
+    retryable: false,
+    action: "The platform is still retrying this webhook delivery. Read the delivery in the delivery list; replay it only if it ends dead_lettered or the receiver needs the event again.",
+    title: "Webhook delivery still pending"
+  },
   project_notes_conflict: {
     status: 409,
     retryable: false,
@@ -26285,8 +26321,8 @@ var isPaidValidationRecord = (value) => {
   if (typeof value !== "object" || value === null || Array.isArray(value) || Object.keys(value).sort().join(",") !== "content,name,purpose,type") {
     return false;
   }
-  const record7 = value;
-  return (record7["type"] === "CNAME" || record7["type"] === "TXT") && boundedString(record7["name"], 1, 253) && boundedString(record7["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record7["purpose"]));
+  const record8 = value;
+  return (record8["type"] === "CNAME" || record8["type"] === "TXT") && boundedString(record8["name"], 1, 253) && boundedString(record8["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record8["purpose"]));
 };
 
 // apps/product-cli/dist/source-publisher.js
@@ -26556,7 +26592,7 @@ async function prepareLocalSourcePublication(input) {
     request = { ...request, expected_commit_sha: link2.source.last_confirmed_commit_sha };
   }
   parseManagedSourceRequest("upload", request);
-  const record7 = {
+  const record8 = {
     version: 1,
     ...scope,
     operation_id: null,
@@ -26565,16 +26601,16 @@ async function prepareLocalSourcePublication(input) {
     request
   };
   if (original !== null) {
-    assertSameAttempt(original, record7);
+    assertSameAttempt(original, record8);
   } else
-    await writePending(record7, true);
+    await writePending(record8, true);
   return {
     request,
     accepted: async (operation) => {
       const current = await readPending(scope, replay);
       if (current === null)
         throw new LocalSourcePublicationError("source_publication_missing");
-      assertSameAttempt(current, record7);
+      assertSameAttempt(current, record8);
       if (current.operation_id !== null && current.operation_id !== operation.id)
         throw new ResponseContractError();
       if (!replay)
@@ -26593,7 +26629,7 @@ async function prepareLocalSourcePublication(input) {
         const current = await readPending(scope);
         if (current === null || current.operation_id !== null)
           return;
-        assertSameAttempt(current, record7);
+        assertSameAttempt(current, record8);
       } catch (error2) {
         if (error2 instanceof LocalSourcePublicationError && (error2.code === "source_publication_scope_mismatch" || error2.code === "source_publication_pending"))
           return;
@@ -26796,12 +26832,12 @@ async function readRecord(path2) {
     await handle?.close();
   }
 }
-async function writePending(record7, create, completed = false) {
-  const parent = join3(record7.directory, ".ohmyhost");
+async function writePending(record8, create, completed = false) {
+  const parent = join3(record8.directory, ".ohmyhost");
   for (const directory of [
     parent,
-    record7.metadata_directory,
-    join3(record7.metadata_directory, "publications")
+    record8.metadata_directory,
+    join3(record8.metadata_directory, "publications")
   ]) {
     try {
       await fs2.mkdir(directory, { mode: 448 });
@@ -26812,10 +26848,10 @@ async function writePending(record7, create, completed = false) {
     await checkedDirectory(directory);
     await fs2.chmod(directory, 448);
   }
-  const target = completed ? completedPath(record7) : pendingPath(record7);
+  const target = completed ? completedPath(record8) : pendingPath(record8);
   const temporary = create ? target : `${target}.${randomUUID()}.tmp`;
   try {
-    await fs2.writeFile(temporary, `${JSON.stringify(record7)}
+    await fs2.writeFile(temporary, `${JSON.stringify(record8)}
 `, { mode: 384, flag: "wx" });
     if (!create)
       await fs2.rename(temporary, target);
@@ -26879,6 +26915,9 @@ var ACCESS_KEYS = [
   "mode",
   "role_name",
   "host",
+  "provider",
+  "transport",
+  "websocket_url",
   "database",
   "label",
   "state",
@@ -26889,16 +26928,16 @@ var ACCESS_KEYS = [
 ];
 var ACCESS_ROLE_PATTERN = /^ohmyho_da_[0-7][0-9a-hjkmnp-tv-z]{25}_[0-9a-z]{8}$/u;
 function assertProjectDatabaseAccess(value) {
-  if (!record2(value) || !exact2(value, accessKeys(value)))
+  if (!record2(value) || !exact2(value, ACCESS_KEYS))
     throw new TypeError("Invalid database access");
   assertAccessFields(value);
 }
 function assertProjectDatabaseAccessCredential(value) {
-  if (!record2(value) || !exact2(value, [...accessKeys(value), "connection_uri", "psql_command"]))
+  if (!record2(value) || !exact2(value, [...ACCESS_KEYS, "connection_uri", "psql_command"]))
     throw new TypeError("Invalid database access credential");
   assertAccessFields(value);
   const uri = value["connection_uri"];
-  if (typeof uri !== "string" || (value["provider"] === "pgcf" ? typeof value["psql_command"] !== "string" || !new RegExp(`^ohmyhost database psql --project [0-7][0-9A-HJKMNP-TV-Z]{25} --environment ${value["environment"]} --mode ${value["mode"]}$`, "u").test(value["psql_command"]) : value["psql_command"] !== `psql '${uri}'`))
+  if (typeof uri !== "string" || typeof value["psql_command"] !== "string" || !new RegExp(`^ohmyhost database psql --project [0-7][0-9A-HJKMNP-TV-Z]{25} --environment ${value["environment"]} --mode ${value["mode"]}$`, "u").test(value["psql_command"]))
     throw new TypeError("Invalid database access credential");
   let parsed;
   try {
@@ -26906,7 +26945,7 @@ function assertProjectDatabaseAccessCredential(value) {
   } catch {
     throw new TypeError("Invalid database access credential");
   }
-  if ((value["provider"] === "pgcf" ? !["postgres:", "postgresql:"].includes(parsed.protocol) : parsed.protocol !== "postgresql:") || decodeURIComponent(parsed.username) !== value["role_name"] || parsed.password === "" || parsed.hostname !== value["host"] || (value["provider"] === "pgcf" ? parsed.port !== "" && parsed.port !== "5432" : parsed.host !== value["host"]) || decodeURIComponent(parsed.pathname.slice(1)) !== value["database"] || parsed.hash !== "" || (value["provider"] === "pgcf" ? !["", "?sslmode=require", "?sslmode=verify-full"].includes(parsed.search) : parsed.search !== "?sslmode=require"))
+  if (!["postgres:", "postgresql:"].includes(parsed.protocol) || decodeURIComponent(parsed.username) !== value["role_name"] || parsed.password === "" || parsed.hostname !== value["host"] || parsed.port !== "" && parsed.port !== "5432" || decodeURIComponent(parsed.pathname.slice(1)) !== value["database"] || parsed.hash !== "" || !["", "?sslmode=require", "?sslmode=verify-full"].includes(parsed.search))
     throw new TypeError("Invalid database access credential");
 }
 function assertProjectDatabaseAccessPage(value) {
@@ -26915,12 +26954,9 @@ function assertProjectDatabaseAccessPage(value) {
   for (const item of value["items"])
     assertProjectDatabaseAccess(item);
 }
-function accessKeys(value) {
-  return value["provider"] === "pgcf" ? [...ACCESS_KEYS, "provider", "transport", "websocket_url"] : ACCESS_KEYS;
-}
 function assertAccessFields(value) {
   const revoked = value["revoked_at"], reason = value["revocation_reason"];
-  if (typeof value["access_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["access_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["read", "write"].includes(String(value["mode"])) || typeof value["role_name"] !== "string" || !ACCESS_ROLE_PATTERN.test(value["role_name"]) || typeof value["host"] !== "string" || !/^[a-z0-9]([a-z0-9.-]{0,251}[a-z0-9])?$/u.test(value["host"]) || (value["provider"] === "pgcf" ? typeof value["database"] !== "string" || !/^[a-z][a-z0-9]{19}$/u.test(value["database"]) || value["transport"] !== "wss" || value["websocket_url"] !== `wss://${value["host"]}/` : value["database"] !== "neondb") || value["label"] !== null && accessLabel(value["label"]) !== value["label"] || !["active", "expired", "revoked"].includes(String(value["state"])) || !timestamp2(value["issued_at"]) || !timestamp2(value["expires_at"]) || Date.parse(String(value["expires_at"])) <= Date.parse(String(value["issued_at"])) || revoked !== null && !timestamp2(revoked) || revoked === null !== (reason === null) || reason !== null && !["principal", "expired", "budget", "creation_failed", "data_change"].includes(String(reason)) || value["state"] === "revoked" !== (revoked !== null))
+  if (typeof value["access_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(value["access_id"]) || !["dev", "prod"].includes(String(value["environment"])) || !["read", "write"].includes(String(value["mode"])) || typeof value["role_name"] !== "string" || !ACCESS_ROLE_PATTERN.test(value["role_name"]) || typeof value["host"] !== "string" || !/^[a-z0-9]([a-z0-9.-]{0,251}[a-z0-9])?$/u.test(value["host"]) || value["provider"] !== "pgcf" || value["transport"] !== "wss" || value["websocket_url"] !== `wss://${value["host"]}/` || typeof value["database"] !== "string" || !/^[a-z][a-z0-9]{19}$/u.test(value["database"]) || value["label"] !== null && accessLabel(value["label"]) !== value["label"] || !["active", "expired", "revoked"].includes(String(value["state"])) || !timestamp2(value["issued_at"]) || !timestamp2(value["expires_at"]) || Date.parse(String(value["expires_at"])) <= Date.parse(String(value["issued_at"])) || revoked !== null && !timestamp2(revoked) || revoked === null !== (reason === null) || reason !== null && !["principal", "expired", "budget", "creation_failed", "data_change"].includes(String(reason)) || value["state"] === "revoked" !== (revoked !== null))
     throw new TypeError("Invalid database access");
 }
 function accessLabel(value) {
@@ -27047,10 +27083,234 @@ function exact3(v, keys) {
   return Object.keys(v).sort().join(",") === keys.join(",");
 }
 
+// packages/contracts/dist/database-events.js
+var DATABASE_WEBHOOK_EVENT_TYPES = [
+  "database.created",
+  "database.ready",
+  "database.woke",
+  "database.slept",
+  "database.suspended",
+  "database.resized",
+  "database.deleted"
+];
+var DATABASE_WEBHOOK_MAX_EVENT_TYPES = 16;
+var DATABASE_WEBHOOK_MAX_HEADERS = 8;
+var DATABASE_WEBHOOK_URL_MAX_LENGTH = 2048;
+var DATABASE_SCHEDULE_MIN_EVERY_SECONDS = 60;
+var DATABASE_SCHEDULE_MAX_EVERY_SECONDS = 31 * 86400;
+var DATABASE_SCHEDULE_CRON_MIN_LENGTH = 9;
+var DATABASE_SCHEDULE_CRON_MAX_LENGTH = 120;
+var DATABASE_SCHEDULE_MAX_STATEMENTS = 20;
+var DATABASE_SCHEDULE_STATEMENT_MAX_BYTES = 16 * 1024;
+var DATABASE_SCHEDULE_STATEMENTS_MAX_BYTES = 64 * 1024;
+var DATABASE_SCHEDULE_MIN_TIMEOUT_MS = 1e3;
+var DATABASE_SCHEDULE_MAX_TIMEOUT_MS = 3e4;
+var DATABASE_SCHEDULE_OUTCOMES = [
+  "succeeded",
+  "failed",
+  "timed_out",
+  "outcome_unknown",
+  "rejected",
+  "skipped_capacity",
+  "skipped_suspended",
+  "skipped_deleted",
+  "skipped_missed"
+];
+var DATABASE_EXECUTION_METRICS = [
+  "schedule_runs_succeeded",
+  "schedule_runs_failed",
+  "schedule_runs_timed_out",
+  "schedule_runs_outcome_unknown",
+  "schedule_runs_rejected",
+  "schedule_runs_skipped",
+  "events_emitted",
+  "event_bytes",
+  "webhook_attempts",
+  "webhook_deliveries_delivered",
+  "webhook_deliveries_dead_lettered"
+];
+var DATABASE_PAGE_MAX_ITEMS = 100;
+var USAGE_HOUR_MS = 36e5;
+var USAGE_MAX_RANGE_MS = 31 * 24 * USAGE_HOUR_MS;
+var WEBHOOK_KEYS = ["id", "environment", "url", "event_types", "header_names", "created_at"];
+var WEBHOOK_ID_PATTERN = /^whk_[a-z0-9]{20}$/u;
+var DELIVERY_ID_PATTERN = /^dlv_[0-9a-f]{20}$/u;
+var EVENT_ID_PATTERN = /^evt_[0-9a-f]{20}$/u;
+var SCHEDULE_NAME_PATTERN = /^[a-z][a-z0-9_-]{0,62}$/u;
+var CURSOR_PATTERN = /^[A-Za-z0-9._|:=+/-]{1,200}$/u;
+var HEADER_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9-]{0,63}$/u;
+function assertDatabaseWebhook(value) {
+  if (!record4(value) || !exact4(value, WEBHOOK_KEYS))
+    throw new TypeError("Invalid database webhook");
+  assertWebhookFields(value);
+}
+function assertDatabaseWebhookCreated(value) {
+  if (!record4(value) || !exact4(value, [...WEBHOOK_KEYS, "secret"]) || typeof value["secret"] !== "string" || value["secret"].length === 0)
+    throw new TypeError("Invalid database webhook");
+  assertWebhookFields(value);
+}
+function assertDatabaseWebhookPage(value) {
+  if (!record4(value) || !exact4(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database webhook page");
+  for (const item of value["items"])
+    assertDatabaseWebhook(item);
+}
+function assertDatabaseWebhookDeleted(value) {
+  if (!record4(value) || !exact4(value, ["id", "deleted"]) || !matches(value["id"], WEBHOOK_ID_PATTERN) || value["deleted"] !== true)
+    throw new TypeError("Invalid database webhook deletion");
+}
+function assertDatabaseWebhookDelivery(value) {
+  if (!record4(value) || !exact4(value, [
+    "id",
+    "event_id",
+    "event_type",
+    "webhook_id",
+    "state",
+    "attempts",
+    "created_at",
+    "next_attempt_at",
+    "delivered_at",
+    "last_status",
+    "last_error"
+  ]) || !matches(value["id"], DELIVERY_ID_PATTERN) || !matches(value["event_id"], EVENT_ID_PATTERN) || !oneOf(DATABASE_WEBHOOK_EVENT_TYPES, value["event_type"]) || !matches(value["webhook_id"], WEBHOOK_ID_PATTERN) || !oneOf(["pending", "delivered", "dead_lettered"], value["state"]) || !nonNegativeInteger(value["attempts"]) || !timestamp3(value["created_at"]) || !nullable(value["next_attempt_at"], timestamp3) || !nullable(value["delivered_at"], timestamp3) || !nullable(value["last_status"], Number.isSafeInteger) || !nullable(value["last_error"], (error) => oneOf(["timeout", "network", "http", "expired", "permanent"], error)))
+    throw new TypeError("Invalid database webhook delivery");
+}
+function assertDatabaseWebhookDeliveryPage(value) {
+  if (!record4(value) || !exact4(value, ["items", "next_cursor"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database webhook delivery page");
+  for (const item of value["items"])
+    assertDatabaseWebhookDelivery(item);
+  if (!nullable(value["next_cursor"], isCursor))
+    throw new TypeError("Invalid database webhook delivery page");
+}
+function assertDatabaseWebhookTest(value) {
+  if (!record4(value) || !exact4(value, ["delivered", "status", "error", "duration_ms"]) || typeof value["delivered"] !== "boolean" || !nullable(value["status"], Number.isSafeInteger) || !nullable(value["error"], (error) => oneOf(["timeout", "network", "http"], error)) || !nonNegativeInteger(value["duration_ms"]))
+    throw new TypeError("Invalid database webhook test result");
+}
+function assertDatabaseWebhookReplayAccepted(value) {
+  if (!record4(value) || !exact4(value, ["delivery_id", "state"]) || !matches(value["delivery_id"], DELIVERY_ID_PATTERN) || value["state"] !== "pending")
+    throw new TypeError("Invalid database webhook replay");
+}
+function assertDatabaseSchedule(value) {
+  if (!record4(value) || !exact4(value, [
+    "name",
+    "environment",
+    "cron",
+    "every_seconds",
+    "statements",
+    "timeout_ms",
+    "enabled",
+    "next_run_at",
+    "created_at"
+  ]) || !matches(value["name"], SCHEDULE_NAME_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || value["cron"] === null === (value["every_seconds"] === null) || !nullable(value["cron"], isCronText) || !nullable(value["every_seconds"], isEverySeconds) || !Array.isArray(value["statements"]) || value["statements"].length > DATABASE_SCHEDULE_MAX_STATEMENTS || !value["statements"].every((statement) => typeof statement === "string") || !isTimeout(value["timeout_ms"]) || typeof value["enabled"] !== "boolean" || !nullable(value["next_run_at"], timestamp3) || !timestamp3(value["created_at"]))
+    throw new TypeError("Invalid database schedule");
+}
+function assertDatabaseSchedulePage(value) {
+  if (!record4(value) || !exact4(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database schedule page");
+  for (const item of value["items"])
+    assertDatabaseSchedule(item);
+}
+function assertDatabaseScheduleDeleted(value) {
+  if (!record4(value) || !exact4(value, ["name", "deleted"]) || !matches(value["name"], SCHEDULE_NAME_PATTERN) || value["deleted"] !== true)
+    throw new TypeError("Invalid database schedule deletion");
+}
+function assertDatabaseScheduleRunPage(value) {
+  if (!record4(value) || !exact4(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database schedule run page");
+  for (const item of value["items"])
+    assertDatabaseScheduleRun(item);
+}
+function assertDatabaseScheduleRunAccepted(value) {
+  if (!record4(value) || !exact4(value, ["schedule", "state"]) || !matches(value["schedule"], SCHEDULE_NAME_PATTERN) || value["state"] !== "queued")
+    throw new TypeError("Invalid database schedule run");
+}
+function assertDatabaseExecutionUsagePage(value) {
+  if (!record4(value) || !exact4(value, ["items", "next_cursor"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database execution usage page");
+  for (const row of value["items"])
+    assertUsageRow(row);
+  if (!nullable(value["next_cursor"], isCursor))
+    throw new TypeError("Invalid database execution usage page");
+}
+function assertDatabaseScheduleRun(value) {
+  if (!record4(value) || !exact4(value, [
+    "id",
+    "schedule",
+    "scheduled_at",
+    "started_at",
+    "finished_at",
+    "outcome",
+    "sqlstate",
+    "attempts",
+    "manual"
+  ]) || !nonNegativeInteger(value["id"]) || !matches(value["schedule"], SCHEDULE_NAME_PATTERN) || !timestamp3(value["scheduled_at"]) || !nullable(value["started_at"], timestamp3) || !timestamp3(value["finished_at"]) || !oneOf(DATABASE_SCHEDULE_OUTCOMES, value["outcome"]) || !nullable(value["sqlstate"], (state) => typeof state === "string") || !nonNegativeInteger(value["attempts"]) || typeof value["manual"] !== "boolean")
+    throw new TypeError("Invalid database schedule run");
+}
+function assertUsageRow(value) {
+  if (!record4(value) || !exact4(value, ["start", "end", "final", "metrics"]) || !timestamp3(value["start"]) || !timestamp3(value["end"]) || typeof value["final"] !== "boolean" || !record4(value["metrics"]) || !exact4(value["metrics"], DATABASE_EXECUTION_METRICS))
+    throw new TypeError("Invalid database execution usage row");
+  const metrics = value["metrics"];
+  if (!DATABASE_EXECUTION_METRICS.every((metric) => nonNegativeInteger(metrics[metric])))
+    throw new TypeError("Invalid database execution usage row");
+}
+function assertWebhookFields(value) {
+  if (!matches(value["id"], WEBHOOK_ID_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || !isHttpsUrl2(value["url"]) || !Array.isArray(value["event_types"]) || value["event_types"].length < 1 || value["event_types"].length > DATABASE_WEBHOOK_MAX_EVENT_TYPES || !value["event_types"].every((type) => oneOf(DATABASE_WEBHOOK_EVENT_TYPES, type)) || !Array.isArray(value["header_names"]) || value["header_names"].length > DATABASE_WEBHOOK_MAX_HEADERS || !value["header_names"].every((name) => matches(name, HEADER_NAME_PATTERN)) || !timestamp3(value["created_at"]))
+    throw new TypeError("Invalid database webhook");
+}
+function isHttpsUrl2(value) {
+  if (typeof value !== "string" || value.length > DATABASE_WEBHOOK_URL_MAX_LENGTH)
+    return false;
+  try {
+    return new URL(value).protocol === "https:";
+  } catch {
+    return false;
+  }
+}
+function isCronText(value) {
+  return typeof value === "string" && value.length >= DATABASE_SCHEDULE_CRON_MIN_LENGTH && value.length <= DATABASE_SCHEDULE_CRON_MAX_LENGTH;
+}
+function isEverySeconds(value) {
+  return Number.isSafeInteger(value) && value >= DATABASE_SCHEDULE_MIN_EVERY_SECONDS && value <= DATABASE_SCHEDULE_MAX_EVERY_SECONDS;
+}
+function isTimeout(value) {
+  return Number.isSafeInteger(value) && value >= DATABASE_SCHEDULE_MIN_TIMEOUT_MS && value <= DATABASE_SCHEDULE_MAX_TIMEOUT_MS;
+}
+function isCursor(value) {
+  return matches(value, CURSOR_PATTERN);
+}
+function pageItems(value) {
+  return Array.isArray(value) && value.length <= DATABASE_PAGE_MAX_ITEMS;
+}
+function nonNegativeInteger(value) {
+  return Number.isSafeInteger(value) && value >= 0;
+}
+function nullable(value, check) {
+  return value === null || check(value);
+}
+function matches(value, pattern) {
+  return typeof value === "string" && pattern.test(value);
+}
+function oneOf(allowed, value) {
+  return typeof value === "string" && allowed.includes(value);
+}
+function timestamp3(value) {
+  if (typeof value !== "string")
+    return false;
+  const time3 = Date.parse(value);
+  return Number.isFinite(time3) && new Date(time3).toISOString() === value;
+}
+function record4(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function exact4(value, keys) {
+  return Object.keys(value).sort().join(",") === [...keys].sort().join(",");
+}
+
 // apps/product-cli/package.json
 var package_default2 = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.40",
+  version: "0.1.42",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -27120,32 +27380,32 @@ function isUserSecretName(value, action = "set") {
 }
 
 // packages/contracts/dist/project-context.js
-var record4 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
-var timestamp3 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
+var record5 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
+var timestamp4 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
 var version = (v) => Number.isInteger(v) && Number(v) >= 0 && Number(v) <= 2147483647;
 var bounded = (v, lines, bytes) => typeof v === "string" && !/[\r\u2028\u2029]/u.test(v) && !new RegExp("\\p{Cc}", "u").test(v.replace(/[\n\t]/gu, "")) && v.split("\n").length <= lines && new TextEncoder().encode(v).length <= bytes;
 function assertProjectNotesReceipt(v) {
-  if (!record4(v) || Object.keys(v).sort().join(",") !== "updated_at,version" || !version(v["version"]) || v["version"] === 0 || !timestamp3(v["updated_at"]))
+  if (!record5(v) || Object.keys(v).sort().join(",") !== "updated_at,version" || !version(v["version"]) || v["version"] === 0 || !timestamp4(v["updated_at"]))
     throw new TypeError("Invalid project notes receipt");
 }
 function assertProjectContext(v) {
-  if (!record4(v) || Object.keys(v).sort().join(",") !== "credit_access,generated_at,markdown,notes,project_id" || typeof v["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["project_id"]) || !timestamp3(v["generated_at"]) || !["included", "not_authorized"].includes(String(v["credit_access"])) || !bounded(v["markdown"], 500, 32768))
+  if (!record5(v) || Object.keys(v).sort().join(",") !== "credit_access,generated_at,markdown,notes,project_id" || typeof v["project_id"] !== "string" || !/^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(v["project_id"]) || !timestamp4(v["generated_at"]) || !["included", "not_authorized"].includes(String(v["credit_access"])) || !bounded(v["markdown"], 500, 32768))
     throw new TypeError("Invalid project context");
   const notes = v["notes"];
-  if (!record4(notes) || Object.keys(notes).sort().join(",") !== "markdown,updated_at,version" || !version(notes["version"]) || !bounded(notes["markdown"], 250, 16384) || (notes["version"] === 0 ? notes["updated_at"] !== null || notes["markdown"] !== "" : !timestamp3(notes["updated_at"])))
+  if (!record5(notes) || Object.keys(notes).sort().join(",") !== "markdown,updated_at,version" || !version(notes["version"]) || !bounded(notes["markdown"], 250, 16384) || (notes["version"] === 0 ? notes["updated_at"] !== null || notes["markdown"] !== "" : !timestamp4(notes["updated_at"])))
     throw new TypeError("Invalid project notes");
 }
 
 // packages/contracts/dist/project-exports.js
 function assertProjectExport(value) {
-  if (!record5(value) || Object.keys(value).sort().join(",") !== "archive,error,id,next_poll_after_seconds,next_request_at,project_id,requested_at,state" || typeof value["id"] !== "string" || !id.test(value["id"]) || typeof value["project_id"] !== "string" || !id.test(value["project_id"]) || !["queued", "running", "succeeded", "failed", "cancelled"].includes(String(value["state"])) || !timestamp4(value["requested_at"]) || !timestamp4(value["next_request_at"]))
+  if (!record6(value) || Object.keys(value).sort().join(",") !== "archive,error,id,next_poll_after_seconds,next_request_at,project_id,requested_at,state" || typeof value["id"] !== "string" || !id.test(value["id"]) || typeof value["project_id"] !== "string" || !id.test(value["project_id"]) || !["queued", "running", "succeeded", "failed", "cancelled"].includes(String(value["state"])) || !timestamp5(value["requested_at"]) || !timestamp5(value["next_request_at"]))
     invalid4();
   const active = value["state"] === "queued" || value["state"] === "running";
   if (value["next_poll_after_seconds"] !== (active ? 5 : null))
     invalid4();
   if (value["state"] === "failed") {
     const error = value["error"];
-    if (!record5(error) || Object.keys(error).sort().join(",") !== "code,message,retryable,suggested_action" || typeof error["code"] !== "string")
+    if (!record6(error) || Object.keys(error).sort().join(",") !== "code,message,retryable,suggested_action" || typeof error["code"] !== "string")
       invalid4();
     const expected = publicOperationFailure(error["code"]);
     for (const key of Object.keys(expected))
@@ -27159,14 +27419,14 @@ function assertProjectExport(value) {
       invalid4();
     return;
   }
-  if (value["state"] !== "succeeded" || !record5(archive) || Object.keys(archive).sort().join(",") !== "bytes,captured_at,download_expires_at,download_url,expires_at,sha256,sql_files" || !Number.isSafeInteger(archive["bytes"]) || Number(archive["bytes"]) < 1 || Number(archive["bytes"]) > 536870912 || typeof archive["sha256"] !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(archive["sha256"]) || !['["dev.sql"]', '["prod.sql"]', '["dev.sql","prod.sql"]', '["shared.sql"]'].includes(JSON.stringify(archive["sql_files"])) || !timestamp4(archive["captured_at"]) || !timestamp4(archive["expires_at"]))
+  if (value["state"] !== "succeeded" || !record6(archive) || Object.keys(archive).sort().join(",") !== "bytes,captured_at,download_expires_at,download_url,expires_at,sha256,sql_files" || !Number.isSafeInteger(archive["bytes"]) || Number(archive["bytes"]) < 1 || Number(archive["bytes"]) > 536870912 || typeof archive["sha256"] !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(archive["sha256"]) || !['["dev.sql"]', '["prod.sql"]', '["dev.sql","prod.sql"]', '["shared.sql"]'].includes(JSON.stringify(archive["sql_files"])) || !timestamp5(archive["captured_at"]) || !timestamp5(archive["expires_at"]))
     invalid4();
   if (archive["download_url"] === null) {
     if (archive["download_expires_at"] !== null)
       invalid4();
     return;
   }
-  if (typeof archive["download_url"] !== "string" || !timestamp4(archive["download_expires_at"]) || Date.parse(archive["download_expires_at"]) > Date.parse(archive["expires_at"]))
+  if (typeof archive["download_url"] !== "string" || !timestamp5(archive["download_expires_at"]) || Date.parse(archive["download_expires_at"]) > Date.parse(archive["expires_at"]))
     invalid4();
   let url;
   try {
@@ -27178,10 +27438,10 @@ function assertProjectExport(value) {
     invalid4();
 }
 var id = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
-function record5(value) {
+function record6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function timestamp4(value) {
+function timestamp5(value) {
   return typeof value === "string" && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
 }
 function invalid4() {
@@ -27420,11 +27680,11 @@ function assertBillingTaxIssue(value) {
     "billing_tax_location_required",
     "billing_tax_calculation_failed",
     "billing_tax_configuration_required"
-  ].includes(String(v["code"])) || typeof v["invoice_id"] !== "string" || !/^in_[A-Za-z0-9_]{1,253}$/u.test(v["invoice_id"]) || !timestamp5(v["observed_at"]) || v["required_action"] !== (v["code"] === "billing_tax_location_required" ? "open_billing_portal" : "contact_support"))
+  ].includes(String(v["code"])) || typeof v["invoice_id"] !== "string" || !/^in_[A-Za-z0-9_]{1,253}$/u.test(v["invoice_id"]) || !timestamp6(v["observed_at"]) || v["required_action"] !== (v["code"] === "billing_tax_location_required" ? "open_billing_portal" : "contact_support"))
     throw new Error("billing_response_invalid");
 }
 var ulid4 = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
-var timestamp5 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
+var timestamp6 = (v) => typeof v === "string" && Number.isFinite(Date.parse(v)) && new Date(v).toISOString() === v;
 function stripeUrl(value, host2) {
   if (typeof value !== "string" || value.length > 8192)
     return false;
@@ -27439,7 +27699,7 @@ function assertBillingCheckout(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("billing_response_invalid");
   const v = value;
-  if (Object.keys(v).sort().join(",") !== "billing_issue,checkout_id,credited_micros,expires_at,offer,organization_id,packs,paid_until,payment_confirmed,required_action,revoked_micros,state,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || typeof v["checkout_id"] !== "string" || !ulid4.test(v["checkout_id"]) || typeof v["offer"] !== "string" || !["topup", "paid"].includes(v["offer"]) || typeof v["state"] !== "string" || !["open", "complete", "expired"].includes(v["state"]) || typeof v["payment_confirmed"] !== "boolean" || typeof v["required_action"] !== "string" || !["none", "complete_checkout", "open_billing_portal", "contact_support"].includes(v["required_action"]) || v["url"] !== null && !stripeUrl(v["url"], "checkout.stripe.com") || !timestamp5(v["expires_at"]) || v["paid_until"] !== null && !timestamp5(v["paid_until"]) || !Number.isInteger(v["packs"]) || Number(v["packs"]) < 1 || Number(v["packs"]) > 100 || v["offer"] === "paid" && v["packs"] !== 1 || ![v["credited_micros"], v["revoked_micros"]].every((x) => typeof x === "string" && /^(0|[1-9][0-9]{0,18})$/u.test(x)))
+  if (Object.keys(v).sort().join(",") !== "billing_issue,checkout_id,credited_micros,expires_at,offer,organization_id,packs,paid_until,payment_confirmed,required_action,revoked_micros,state,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || typeof v["checkout_id"] !== "string" || !ulid4.test(v["checkout_id"]) || typeof v["offer"] !== "string" || !["topup", "paid"].includes(v["offer"]) || typeof v["state"] !== "string" || !["open", "complete", "expired"].includes(v["state"]) || typeof v["payment_confirmed"] !== "boolean" || typeof v["required_action"] !== "string" || !["none", "complete_checkout", "open_billing_portal", "contact_support"].includes(v["required_action"]) || v["url"] !== null && !stripeUrl(v["url"], "checkout.stripe.com") || !timestamp6(v["expires_at"]) || v["paid_until"] !== null && !timestamp6(v["paid_until"]) || !Number.isInteger(v["packs"]) || Number(v["packs"]) < 1 || Number(v["packs"]) > 100 || v["offer"] === "paid" && v["packs"] !== 1 || ![v["credited_micros"], v["revoked_micros"]].every((x) => typeof x === "string" && /^(0|[1-9][0-9]{0,18})$/u.test(x)))
     throw new Error("billing_response_invalid");
   assertBillingTaxIssue(v["billing_issue"]);
 }
@@ -27447,7 +27707,7 @@ function assertBillingPortal(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     throw new Error("billing_response_invalid");
   const v = value;
-  if (Object.keys(v).sort().join(",") !== "created_at,organization_id,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || !timestamp5(v["created_at"]) || !stripeUrl(v["url"], "billing.stripe.com"))
+  if (Object.keys(v).sort().join(",") !== "created_at,organization_id,url" || typeof v["organization_id"] !== "string" || !ulid4.test(v["organization_id"]) || !timestamp6(v["created_at"]) || !stripeUrl(v["url"], "billing.stripe.com"))
     throw new Error("billing_response_invalid");
 }
 function assertRecharge(value) {
@@ -28128,7 +28388,7 @@ var HELP_USAGE = Object.freeze({
   "billing checkout": "ohmyhost billing checkout --organization ULID --offer topup|paid [--packs 1] --idempotency-key KEY --json (returns a human payment URL; never auto-pays)",
   "billing status": "ohmyhost billing status --organization ULID --checkout ULID --json",
   "billing portal": "ohmyhost billing portal --organization ULID --json (short-lived human URL; request fresh after expiry)",
-  "credits usage": "ohmyhost credits usage --organization ULID --month YYYY-MM [--cursor ULID] --json",
+  "credits usage": "ohmyhost credits usage --organization ULID --json (billed usage of the last up to 14 UTC days by day, project and meter, and each project's use this UTC month)",
   "budget get": "ohmyhost budget get --project ULID --json",
   "budget set": "ohmyhost budget set --project ULID --credits NUMBER|none [--mode continue|stop] --idempotency-key KEY --json",
   "organization create": "ohmyhost organization create --name NAME --idempotency-key KEY [--source SOURCE] --json (SOURCE is optional attribution from a link's r value; a login without organization is bound to the new workspace, another login keeps its own)",
@@ -28164,6 +28424,20 @@ var HELP_USAGE = Object.freeze({
   "database access create": "ohmyhost database access create --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--label TEXT] --yes --json\n  The connection URI is shown once. Use it immediately, never store it in files, notes or source, and revoke it when finished.",
   "database access list": "ohmyhost database access list --project ULID [--environment dev|prod] --json",
   "database access revoke": "ohmyhost database access revoke --project ULID --access ULID --yes --json",
+  "database webhook create": "ohmyhost database webhook create --project ULID --environment dev|prod --url HTTPS_URL --event-types TYPE[,TYPE] [--headers-file PATH] --idempotency-key KEY --yes --json (the signing secret is shown once in this answer; types: database.created, database.ready, database.woke, database.slept, database.suspended, database.resized, database.deleted; the headers file is a UTF-8 JSON object of at most 8 KiB)",
+  "database webhook list": "ohmyhost database webhook list --project ULID [--environment dev|prod] --json (dev when omitted; the secret is never listed)",
+  "database webhook get": "ohmyhost database webhook get --project ULID [--environment dev|prod] --webhook ID --json",
+  "database webhook delete": "ohmyhost database webhook delete --project ULID --environment dev|prod --webhook ID --yes --json",
+  "database webhook test": "ohmyhost database webhook test --project ULID --environment dev|prod --webhook ID --yes --json (sends one signed test request to the receiver; nothing is stored)",
+  "database webhook deliveries": "ohmyhost database webhook deliveries --project ULID [--environment dev|prod] [--webhook ID] [--limit 1..100] [--cursor CURSOR] --json",
+  "database webhook replay": "ohmyhost database webhook replay --project ULID --environment dev|prod --delivery ID --yes --json",
+  "database schedule set": "ohmyhost database schedule set --project ULID --environment dev|prod --name NAME (--cron EXPR | --every-seconds N) --statements-file PATH [--timeout-ms N] [--enabled true|false] --yes --json (runs the statements in the file, a UTF-8 JSON array of 1 to 20 SQL strings, as the runtime role of the application; cron has five fields in UTC; every-seconds is 60 to 2678400; timeout-ms is 1000 to 30000, default 10000)",
+  "database schedule list": "ohmyhost database schedule list --project ULID [--environment dev|prod] --json (dev when omitted)",
+  "database schedule get": "ohmyhost database schedule get --project ULID [--environment dev|prod] --name NAME --json",
+  "database schedule delete": "ohmyhost database schedule delete --project ULID --environment dev|prod --name NAME --yes --json",
+  "database schedule runs": "ohmyhost database schedule runs --project ULID [--environment dev|prod] --name NAME [--limit 1..50] --json",
+  "database schedule run": "ohmyhost database schedule run --project ULID --environment dev|prod --name NAME --yes --json (queues one run now, in addition to the timer)",
+  "database executions": "ohmyhost database executions --project ULID [--environment dev|prod] --from ISO --to ISO --granularity hour|day [--limit 1..100] [--cursor CURSOR] --json (UTC timestamps like 2026-10-30T00:00:00.000Z aligned to the granularity, at most 31 days; counts schedule runs, webhook attempts and events per hour or day; usage counters only, nothing is charged for them until the operator prices them)",
   "database psql": "ohmyhost database psql --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--json] (starts local psql with a temporary credential and revokes it on exit)",
   link: "ohmyhost link --project ULID --repository-owner OWNER --repository-name REPOSITORY --idempotency-key KEY --json (uses the workspace GitHub connection and waits for the source-link operation)",
   "source auto-deploy set": "ohmyhost source auto-deploy set --project ULID --branch BRANCH --enabled true|false --idempotency-key KEY --json",
@@ -28292,12 +28566,12 @@ function buildClientParams(args, fields) {
   };
   const map = buildKeyMap(fields);
   function writeSlot(slot, key, value) {
-    let record7 = params[slot];
-    if (record7 === void 0) {
-      record7 = /* @__PURE__ */ Object.create(null);
-      params[slot] = record7;
+    let record8 = params[slot];
+    if (record8 === void 0) {
+      record8 = /* @__PURE__ */ Object.create(null);
+      params[slot] = record8;
     }
-    record7[key] = value;
+    record8[key] = value;
   }
   let config;
   for (const [index, arg] of args.entries()) {
@@ -28574,9 +28848,9 @@ var serializeObjectParam = ({ allowReserved, explode, name, style, value, valueO
 var PATH_PARAM_RE = /\{[^{}]+\}/g;
 var defaultPathSerializer = ({ path: path2, url: _url }) => {
   let url = _url;
-  const matches = _url.match(PATH_PARAM_RE);
-  if (matches) {
-    for (const match of matches) {
+  const matches2 = _url.match(PATH_PARAM_RE);
+  if (matches2) {
+    for (const match of matches2) {
       let explode = false;
       let name = match.substring(1, match.length - 1);
       let style = "simple";
@@ -29791,9 +30065,7 @@ var getOrganizationCreditUsage = (parameters, options) => {
     {
       args: [
         { in: "headers", key: "X-Request-Id" },
-        { in: "path", key: "organization_id" },
-        { in: "query", key: "month" },
-        { in: "query", key: "cursor" }
+        { in: "path", key: "organization_id" }
       ]
     }
   ]);
@@ -30946,6 +31218,289 @@ var revokeProjectDatabaseAccess = (parameters, options) => {
     ...params
   });
 };
+var listProjectDatabaseWebhooks = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks",
+    ...options,
+    ...params
+  });
+};
+var createProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { key: "databaseWebhookCreateRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var deleteProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}",
+    ...options,
+    ...params
+  });
+};
+var testProjectDatabaseWebhook = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "webhook_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhooks/{webhook_id}/test",
+    ...options,
+    ...params
+  });
+};
+var listProjectDatabaseWebhookDeliveries = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "webhook_id" },
+        { in: "query", key: "limit" },
+        { in: "query", key: "cursor" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhook-deliveries",
+    ...options,
+    ...params
+  });
+};
+var replayProjectDatabaseWebhookDelivery = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "delivery_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/webhook-deliveries/{delivery_id}/replay",
+    ...options,
+    ...params
+  });
+};
+var listProjectDatabaseSchedules = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules",
+    ...options,
+    ...params
+  });
+};
+var deleteProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params
+  });
+};
+var setProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" },
+        { key: "databaseScheduleSetRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).put({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var listProjectDatabaseScheduleRuns = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "limit" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}/runs",
+    ...options,
+    ...params
+  });
+};
+var runProjectDatabaseSchedule = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "name" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/schedules/{name}/run",
+    ...options,
+    ...params
+  });
+};
+var getProjectDatabaseExecutionUsage = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" },
+        { in: "query", key: "from" },
+        { in: "query", key: "to" },
+        { in: "query", key: "granularity" },
+        { in: "query", key: "limit" },
+        { in: "query", key: "cursor" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/execution-usage",
+    ...options,
+    ...params
+  });
+};
 var planDeploymentRollback = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -31397,7 +31952,7 @@ var ULID3 = /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u;
 function assertManagedMailResponse(value, input) {
   const r = object2(value);
   if (input.action === "configure" || input.action === "status" || input.action === "webhook_verify") {
-    exact4(r, [
+    exact5(r, [
       "domain_id",
       "domain",
       "environment_id",
@@ -31427,14 +31982,14 @@ function assertManagedMailResponse(value, input) {
       invalid5();
     if (r["webhook"] !== null) {
       const hook = object2(r["webhook"]);
-      exact4(hook, ["url", "verified"]);
+      exact5(hook, ["url", "verified"]);
       https(hook["url"]);
       if (typeof hook["verified"] !== "boolean")
         invalid5();
     }
     if (r["dns"] !== void 0) {
       const dns = object2(r["dns"]);
-      exact4(dns, ["status", "records"]);
+      exact5(dns, ["status", "records"]);
       if (!["configured", "action_required", "conflict"].includes(String(dns["status"])))
         invalid5();
       records(dns["records"]);
@@ -31442,19 +31997,19 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "webhook_set") {
-    exact4(r, ["url", "signing_secret", "status"]);
+    exact5(r, ["url", "signing_secret", "status"]);
     if (r["url"] !== input.url || r["status"] !== "verification_required" || typeof r["signing_secret"] !== "string" || !/^whsec_[A-Za-z0-9+/]{43}=$/u.test(r["signing_secret"]))
       invalid5();
     return;
   }
   if (input.action === "webhook_disable") {
-    exact4(r, ["status"]);
+    exact5(r, ["status"]);
     if (r["status"] !== "disabled")
       invalid5();
     return;
   }
   if (input.action === "domain_delete") {
-    exact4(r, ["status", "domain", "dns_records"]);
+    exact5(r, ["status", "domain", "dns_records"]);
     if (r["status"] !== "deleted")
       invalid5();
     domain(r["domain"]);
@@ -31462,12 +32017,12 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "messages_list") {
-    exact4(r, ["items"]);
+    exact5(r, ["items"]);
     if (!Array.isArray(r["items"]) || r["items"].length > 50)
       invalid5();
     for (const value2 of r["items"]) {
       const item = object2(value2);
-      exact4(item, ["message_id", "received_at", "state", "attempts"]);
+      exact5(item, ["message_id", "received_at", "state", "attempts"]);
       id2(item["message_id"]);
       time(item["received_at"]);
       if (!["pending", "delivering", "delivered", "delivery_failed", "expired"].includes(String(item["state"])) || !Number.isInteger(item["attempts"]) || Number(item["attempts"]) < 0 || Number(item["attempts"]) > 4)
@@ -31476,7 +32031,7 @@ function assertManagedMailResponse(value, input) {
     return;
   }
   if (input.action === "message_retry") {
-    exact4(r, ["attempted"], ["delivered"]);
+    exact5(r, ["attempted"], ["delivered"]);
     if (typeof r["attempted"] !== "boolean" || r["delivered"] !== void 0 && typeof r["delivered"] !== "boolean")
       invalid5();
     return;
@@ -31484,10 +32039,10 @@ function assertManagedMailResponse(value, input) {
   if (input.action !== "message_get")
     invalid5();
   if (r["status"] === "expired") {
-    exact4(r, ["status"]);
+    exact5(r, ["status"]);
     return;
   }
-  exact4(r, [
+  exact5(r, [
     "id",
     "domain",
     "received_at",
@@ -31519,7 +32074,7 @@ function assertManagedMailResponse(value, input) {
     invalid5();
   for (const value2 of r["attachments"]) {
     const a = object2(value2);
-    exact4(a, ["id", "filename", "content_type", "download_path"]);
+    exact5(a, ["id", "filename", "content_type", "download_path"]);
     if (typeof a["id"] !== "string" || !/^[A-Za-z0-9_-]{1,128}$/u.test(a["id"]) || a["filename"] !== null && typeof a["filename"] !== "string" || typeof a["content_type"] !== "string" || a["download_path"] !== `/v1/projects/${input.projectId}/environments/${input.environmentId}/mail/messages/${input.messageId}/attachments/${a["id"]}`)
       invalid5();
   }
@@ -31529,7 +32084,7 @@ function object2(v) {
     invalid5();
   return v;
 }
-function exact4(v, required, optional = []) {
+function exact5(v, required, optional = []) {
   if (required.some((k) => !(k in v)) || Object.keys(v).some((k) => !required.includes(k) && !optional.includes(k)))
     invalid5();
 }
@@ -31554,7 +32109,7 @@ function records(v) {
     invalid5();
   for (const value of v) {
     const r = object2(value);
-    exact4(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
+    exact5(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
     if (!["TXT", "CNAME", "MX"].includes(String(r["type"])) || ["name", "value", "purpose", "status"].some((k) => typeof r[k] !== "string") || r["type"] === "MX" && (!Number.isInteger(r["priority"]) || Number(r["priority"]) < 0 || Number(r["priority"]) > 65535))
       invalid5();
   }
@@ -31611,7 +32166,7 @@ var HOST = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z]{2,63}
 function assertSharedMailResponse(value, input) {
   const v = object3(value);
   if (input.action === "domains_list") {
-    exact5(v, ["items"]);
+    exact6(v, ["items"]);
     if (!Array.isArray(v["items"]) || v["items"].length > 100)
       invalid6();
     for (const item of v["items"])
@@ -31623,7 +32178,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["domain_get", "domain_create", "domain_retire"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "domain_id",
       "organization_id",
       "domain",
@@ -31656,7 +32211,7 @@ function assertSharedMailResponse(value, input) {
       invalid6();
     for (const entry of v["dns_records"]) {
       const r = object3(entry);
-      exact5(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
+      exact6(r, ["type", "name", "value", "purpose", "status"], ["priority"]);
       member(r["type"], ["TXT", "MX", "CNAME"]);
       for (const k of ["name", "value", "purpose", "status"])
         if (typeof r[k] !== "string" || /[\r\n\0]/u.test(r[k]))
@@ -31669,7 +32224,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["binding_get", "binding_set", "binding_detach"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "mail_domain_id",
       "organization_id",
       "project_id",
@@ -31703,7 +32258,7 @@ function assertSharedMailResponse(value, input) {
       invalid6();
     if (v["application_domain_identity"] !== null) {
       const identity = object3(v["application_domain_identity"]);
-      exact5(identity, ["hostname", "registrable_domain", "revision", "status"]);
+      exact6(identity, ["hostname", "registrable_domain", "revision", "status"]);
       host(identity["hostname"]);
       host(identity["registrable_domain"]);
       positive(identity["revision"]);
@@ -31712,7 +32267,7 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (["identity_get", "identity_declare", "identity_verify", "identity_revoke"].includes(input.action)) {
-    exact5(v, [
+    exact6(v, [
       "organization_id",
       "project_id",
       "hostname",
@@ -31732,7 +32287,7 @@ function assertSharedMailResponse(value, input) {
     positive(v["revision"]);
     member(v["status"], ["pending", "verified", "expired", "revoked"]);
     const challenge = object3(v["challenge"]);
-    exact5(challenge, ["type", "name", "value"]);
+    exact6(challenge, ["type", "name", "value"]);
     if (challenge["type"] !== "TXT" || typeof challenge["name"] !== "string" || challenge["name"] !== `_omh-project.${v["hostname"]}` || typeof challenge["value"] !== "string" || challenge["value"].length < 16 || challenge["value"].length > 255 || /[\r\n\0]/u.test(challenge["value"]))
       invalid6();
     if (v["verified_at"] !== null)
@@ -31741,14 +32296,14 @@ function assertSharedMailResponse(value, input) {
     return;
   }
   if (input.action === "domain_dns_authorize" || input.action === "identity_authorize") {
-    exact5(v, ["authorization_id", "authorization_url", "expires_at"]);
+    exact6(v, ["authorization_id", "authorization_url", "expires_at"]);
     id3(v["authorization_id"]);
     time2(v["expires_at"]);
     if (typeof v["authorization_url"] !== "string" || !/^https:\/\/dash\.cloudflare\.com\/oauth2\/auth\?/u.test(v["authorization_url"]))
       invalid6();
     return;
   }
-  exact5(v, ["status", "zone", "scopes", "expires_at"]);
+  exact6(v, ["status", "zone", "scopes", "expires_at"]);
   member(v["status"], ["not_authorized", "pending", "authorized", "expired", "revoked"]);
   if (!Array.isArray(v["scopes"]) || v["scopes"].length > 2 || new Set(v["scopes"]).size !== v["scopes"].length || v["scopes"].some((s) => s !== "dns.write" && s !== "zone.read"))
     invalid6();
@@ -31764,7 +32319,7 @@ function object3(v) {
     invalid6();
   return v;
 }
-function exact5(v, required, optional = []) {
+function exact6(v, required, optional = []) {
   if (required.some((k) => !(k in v)) || Object.keys(v).some((k) => !required.includes(k) && !optional.includes(k)))
     invalid6();
 }
@@ -32066,6 +32621,8 @@ function checkedResponse(kind, value) {
 }
 
 // apps/product-cli/dist/product-api.js
+var WEBHOOK_SCOPE_MISMATCH = "Webhook response scope mismatch";
+var SCHEDULE_SCOPE_MISMATCH = "Schedule response scope mismatch";
 var GeneratedSdkProductApi = class {
   #client;
   managedSource;
@@ -32175,12 +32732,8 @@ var GeneratedSdkProductApi = class {
   createBillingPortal(organizationId) {
     return createBillingPortal({ organization_id: organizationId, body: {} }, { client: this.#client });
   }
-  getOrganizationCreditUsage(input) {
-    return getOrganizationCreditUsage({
-      organization_id: input.organizationId,
-      month: input.month,
-      ...input.cursor ? { cursor: input.cursor } : {}
-    }, { client: this.#client });
+  getOrganizationCreditUsage(organizationId) {
+    return getOrganizationCreditUsage({ organization_id: organizationId }, { client: this.#client });
   }
   getProjectCreditBudget(projectId) {
     return getProjectCreditBudget({ project_id: projectId }, { client: this.#client });
@@ -32266,6 +32819,159 @@ var GeneratedSdkProductApi = class {
     assertProjectDatabaseAccess(value);
     return value;
   }
+  /** The signing secret exists only in this answer; the CLI prints it once and stores nothing. */
+  async createProjectDatabaseWebhook(input) {
+    const value = await createProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseWebhookCreateRequest: {
+        url: input.url,
+        event_types: [...input.eventTypes],
+        headers: { ...input.headers }
+      }
+    }, { client: this.#client });
+    assertDatabaseWebhookCreated(value);
+    if (value.environment !== input.environment)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseWebhooks(input) {
+    const value = await listProjectDatabaseWebhooks({ project_id: input.projectId, environment: input.environment }, { client: this.#client });
+    assertDatabaseWebhookPage(value);
+    if (value.items.some((item) => item.environment !== input.environment))
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseWebhook(input) {
+    const value = await getProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhook(value);
+    if (value.id !== input.webhookId || value.environment !== input.environment)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async deleteProjectDatabaseWebhook(input) {
+    const value = await deleteProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookDeleted(value);
+    if (value.id !== input.webhookId)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async testProjectDatabaseWebhook(input) {
+    const value = await testProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookTest(value);
+    return value;
+  }
+  async listProjectDatabaseWebhookDeliveries(input) {
+    const value = await listProjectDatabaseWebhookDeliveries({
+      project_id: input.projectId,
+      environment: input.environment,
+      ...input.webhookId === void 0 ? {} : { webhook_id: input.webhookId },
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseWebhookDeliveryPage(value);
+    if (input.webhookId !== void 0 && value.items.some((item) => item.webhook_id !== input.webhookId))
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  async replayProjectDatabaseWebhookDelivery(input) {
+    const value = await replayProjectDatabaseWebhookDelivery({
+      project_id: input.projectId,
+      environment: input.environment,
+      delivery_id: input.deliveryId
+    }, { client: this.#client });
+    assertDatabaseWebhookReplayAccepted(value);
+    if (value.delivery_id !== input.deliveryId)
+      throw new TypeError(WEBHOOK_SCOPE_MISMATCH);
+    return value;
+  }
+  /** A schedule runs the statements as the application's runtime role; the request confirms it. */
+  async setProjectDatabaseSchedule(input) {
+    const request = input.request;
+    const value = await setProjectDatabaseSchedule({
+      project_id: input.projectId,
+      environment: input.environment,
+      name: input.name,
+      databaseScheduleSetRequest: {
+        ...request.cron === null ? {} : { cron: request.cron },
+        ...request.every_seconds === null ? {} : { every_seconds: request.every_seconds },
+        statements: [...request.statements],
+        timeout_ms: request.timeout_ms,
+        enabled: request.enabled,
+        confirm: true
+      }
+    }, { client: this.#client });
+    assertDatabaseSchedule(value);
+    if (value.name !== input.name || value.environment !== input.environment)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseSchedules(input) {
+    const value = await listProjectDatabaseSchedules({ project_id: input.projectId, environment: input.environment }, { client: this.#client });
+    assertDatabaseSchedulePage(value);
+    if (value.items.some((item) => item.environment !== input.environment))
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseSchedule(input) {
+    const value = await getProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseSchedule(value);
+    if (value.name !== input.name || value.environment !== input.environment)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async deleteProjectDatabaseSchedule(input) {
+    const value = await deleteProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseScheduleDeleted(value);
+    if (value.name !== input.name)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseScheduleRuns(input) {
+    const value = await listProjectDatabaseScheduleRuns({
+      project_id: input.projectId,
+      environment: input.environment,
+      name: input.name,
+      ...input.limit === void 0 ? {} : { limit: input.limit }
+    }, { client: this.#client });
+    assertDatabaseScheduleRunPage(value);
+    if (value.items.some((item) => item.schedule !== input.name))
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async runProjectDatabaseSchedule(input) {
+    const value = await runProjectDatabaseSchedule({ project_id: input.projectId, environment: input.environment, name: input.name }, { client: this.#client });
+    assertDatabaseScheduleRunAccepted(value);
+    if (value.schedule !== input.name)
+      throw new TypeError(SCHEDULE_SCOPE_MISMATCH);
+    return value;
+  }
+  async getProjectDatabaseExecutionUsage(input) {
+    const value = await getProjectDatabaseExecutionUsage({
+      project_id: input.projectId,
+      environment: input.environment,
+      from: input.from,
+      to: input.to,
+      granularity: input.granularity,
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseExecutionUsagePage(value);
+    return value;
+  }
   async planPaidDomain(input) {
     return planPaidProjectDomain({ project_id: input.projectId, paidDomainRequest: { hostname: input.hostname } }, { client: this.#client });
   }
@@ -33000,6 +33706,10 @@ async function createAuthenticatedLocalMcpClient(signal, overrides = {}) {
     throw error;
   }
 }
+function requireScope(matches2) {
+  if (!matches2)
+    throw new TypeError("Database event scope mismatch");
+}
 var GeneratedSdkLocalMcpClient = class {
   managedSource;
   productApiOrigin;
@@ -33209,12 +33919,8 @@ var GeneratedSdkLocalMcpClient = class {
     assertBillingPortal(value);
     return value;
   }
-  async getOrganizationCreditUsage(input) {
-    const value = await getOrganizationCreditUsage({
-      organization_id: input.organizationId,
-      month: input.month,
-      ...input.cursor ? { cursor: input.cursor } : {}
-    }, { client: this.#client });
+  async getOrganizationCreditUsage(organizationId) {
+    const value = await getOrganizationCreditUsage({ organization_id: organizationId }, { client: this.#client });
     assertOrganizationCreditUsage(value);
     return value;
   }
@@ -33383,6 +34089,131 @@ var GeneratedSdkLocalMcpClient = class {
     assertProjectDatabaseAccess(value);
     return value;
   }
+  async listDatabaseWebhooks(input) {
+    const environment2 = input.environment ?? "dev";
+    const value = await listProjectDatabaseWebhooks({ project_id: input.projectId, environment: environment2 }, { client: this.#client });
+    assertDatabaseWebhookPage(value);
+    requireScope(value.items.every((webhook) => webhook.environment === environment2));
+    return value;
+  }
+  /** The signing secret exists only in this response and is never stored by the client. */
+  async createDatabaseWebhook(input) {
+    const value = await createProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseWebhookCreateRequest: {
+        url: input.url,
+        event_types: [...input.eventTypes],
+        headers: { ...input.headers }
+      }
+    }, { client: this.#client });
+    assertDatabaseWebhookCreated(value);
+    requireScope(value.environment === input.environment);
+    return value;
+  }
+  async testDatabaseWebhook(input) {
+    const value = await testProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookTest(value);
+    return value;
+  }
+  async deleteDatabaseWebhook(input) {
+    const value = await deleteProjectDatabaseWebhook({
+      project_id: input.projectId,
+      environment: input.environment,
+      webhook_id: input.webhookId
+    }, { client: this.#client });
+    assertDatabaseWebhookDeleted(value);
+    requireScope(value.id === input.webhookId);
+    return value;
+  }
+  async listDatabaseWebhookDeliveries(input) {
+    const value = await listProjectDatabaseWebhookDeliveries({
+      project_id: input.projectId,
+      environment: input.environment ?? "dev",
+      ...input.webhookId === void 0 ? {} : { webhook_id: input.webhookId },
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseWebhookDeliveryPage(value);
+    requireScope(input.webhookId === void 0 || value.items.every((delivery) => delivery.webhook_id === input.webhookId));
+    return value;
+  }
+  async replayDatabaseWebhookDelivery(input) {
+    const value = await replayProjectDatabaseWebhookDelivery({
+      project_id: input.projectId,
+      environment: input.environment,
+      delivery_id: input.deliveryId
+    }, { client: this.#client });
+    assertDatabaseWebhookReplayAccepted(value);
+    requireScope(value.delivery_id === input.deliveryId);
+    return value;
+  }
+  async listDatabaseSchedules(input) {
+    const environment2 = input.environment ?? "dev";
+    const value = await listProjectDatabaseSchedules({ project_id: input.projectId, environment: environment2 }, { client: this.#client });
+    assertDatabaseSchedulePage(value);
+    requireScope(value.items.every((schedule) => schedule.environment === environment2));
+    return value;
+  }
+  async setDatabaseSchedule(input) {
+    const value = await setProjectDatabaseSchedule({
+      project_id: input.projectId,
+      name: input.name,
+      environment: input.environment,
+      databaseScheduleSetRequest: {
+        ...input.cron === void 0 ? {} : { cron: input.cron },
+        ...input.everySeconds === void 0 ? {} : { every_seconds: input.everySeconds },
+        statements: [...input.statements],
+        ...input.timeoutMs === void 0 ? {} : { timeout_ms: input.timeoutMs },
+        ...input.enabled === void 0 ? {} : { enabled: input.enabled },
+        confirm: true
+      }
+    }, { client: this.#client });
+    assertDatabaseSchedule(value);
+    requireScope(value.name === input.name && value.environment === input.environment);
+    return value;
+  }
+  async deleteDatabaseSchedule(input) {
+    const value = await deleteProjectDatabaseSchedule({ project_id: input.projectId, name: input.name, environment: input.environment }, { client: this.#client });
+    assertDatabaseScheduleDeleted(value);
+    requireScope(value.name === input.name);
+    return value;
+  }
+  async listDatabaseScheduleRuns(input) {
+    const value = await listProjectDatabaseScheduleRuns({
+      project_id: input.projectId,
+      name: input.name,
+      environment: input.environment ?? "dev",
+      ...input.limit === void 0 ? {} : { limit: input.limit }
+    }, { client: this.#client });
+    assertDatabaseScheduleRunPage(value);
+    requireScope(value.items.every((run) => run.schedule === input.name));
+    return value;
+  }
+  async runDatabaseSchedule(input) {
+    const value = await runProjectDatabaseSchedule({ project_id: input.projectId, name: input.name, environment: input.environment }, { client: this.#client });
+    assertDatabaseScheduleRunAccepted(value);
+    requireScope(value.schedule === input.name);
+    return value;
+  }
+  async getDatabaseExecutionUsage(input) {
+    const value = await getProjectDatabaseExecutionUsage({
+      project_id: input.projectId,
+      environment: input.environment ?? "dev",
+      from: input.from,
+      to: input.to,
+      granularity: input.granularity,
+      ...input.limit === void 0 ? {} : { limit: input.limit },
+      ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+    }, { client: this.#client });
+    assertDatabaseExecutionUsagePage(value);
+    return value;
+  }
   planPromotion(input) {
     return planDeploymentPromotion({ project_id: input.projectId, source_deployment_id: input.sourceDeploymentId }, { client: this.#client });
   }
@@ -33614,13 +34445,13 @@ function normalizeMcpSourceChanges(value) {
   }
 }
 function normalizeSourceChanges(value) {
-  const body = record6(value);
+  const body = record7(value);
   const changes = body["changes"];
   if (!Array.isArray(changes) || changes.length < 1 || changes.length > MANAGED_SOURCE_LIMITS.files)
     invalid7();
   let textBytes = 0;
   const normalized = changes.map((change) => {
-    const entry = record6(change);
+    const entry = record7(change);
     const hasText = Object.hasOwn(entry, "content_text");
     if (hasText === Object.hasOwn(entry, "content_base64"))
       invalid7();
@@ -33679,7 +34510,7 @@ function encodeBase64(bytes) {
     binary += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
   return btoa(binary);
 }
-function record6(value) {
+function record7(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     invalid7();
   return value;
@@ -33690,6 +34521,10 @@ function invalid7() {
 
 // apps/mcp/dist/local-server.js
 var identifier2 = external_exports.string().min(1).max(256);
+var databaseEnvironment = external_exports.enum(["dev", "prod"]);
+var databaseWebhookId = external_exports.string().regex(/^whk_[a-z0-9]{20}$/u);
+var databaseDeliveryId = external_exports.string().regex(/^dlv_[0-9a-f]{20}$/u);
+var databaseScheduleName = external_exports.string().regex(/^[a-z][a-z0-9_-]{0,62}$/u);
 var profileName = external_exports.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/u).optional().describe("Saved login to act as (profile_list shows them). Needed only when several logins could run this call; OHMYHOST_PROFILE of this server must match it.");
 var idempotencyKey = external_exports.string().min(1).max(128);
 var commitSha = external_exports.string().regex(/^[a-f0-9]{40}$/u);
@@ -33804,7 +34639,7 @@ function createLocalOhmyhostMcpServer(dependencies) {
     hostname: input.hostname,
     idempotencyKey: input.idempotency_key
   }), destructiveAnnotations());
-  registerProductTool(server, dependencies, "billing_checkout_create", "Owner-only: create or resume a hosted Checkout. Paid is USD 10/month; each top-up pack is USD 10 before tax; a purchase grants 100 credits per dollar up to USD 100 and 125 credits per dollar for the part above, so 10 packs grant 10000 and 20 packs grant 22500 top-up credits. Monthly Paid credits expire at billing-period end; top-ups carry over while Paid and expire on downgrade to Free. Return the URL to the human to review/pay; never auto-pay or treat browser return as confirmation. Preserve the same offer/packs/idempotency key after uncertainty. An existing active, overdue, unpaid or paused subscription must be managed through billing_portal_create, not replaced with another Paid purchase. Then read checkout status and organization credits. Works at zero credit. Top-ups and enabling auto-recharge require active Paid access.", external_exports.object({
+  registerProductTool(server, dependencies, "billing_checkout_create", "Owner-only: create or resume a hosted Checkout. Paid is USD 10/month; each top-up pack is USD 10 before tax; a purchase grants 100 credits per dollar up to USD 100 and 125 credits per dollar for the part above, so 10 packs grant 10000 and 20 packs grant 22500 top-up credits. Monthly Paid credits expire at billing-period end; top-ups never expire, also after a downgrade to Free. Return the URL to the human to review/pay; never auto-pay or treat browser return as confirmation. Preserve the same offer/packs/idempotency key after uncertainty. An existing active, overdue, unpaid or paused subscription must be managed through billing_portal_create, not replaced with another Paid purchase. Then read checkout status and organization credits. Works at zero credit. Top-ups and enabling auto-recharge require active Paid access.", external_exports.object({
     organization_id: identifier2,
     offer: external_exports.enum(["topup", "paid"]),
     packs: external_exports.number().int().min(1).max(100).default(1),
@@ -33815,12 +34650,12 @@ function createLocalOhmyhostMcpServer(dependencies) {
     packs: input.packs,
     idempotencyKey: input.idempotency_key
   }), mutationAnnotations());
-  registerProductTool(server, dependencies, "billing_checkout_get", "Owner-only: observe the original checkout and reconcile confirmed credits/refunds, without another purchase. payment_confirmed is historical; read organization_credits_get for spendable funds and organization_account_get's effective plan for Paid coverage; paid_until remains the paid Stripe period end during renewal grace. Follow required_action: complete_checkout means give its URL to the human; open_billing_portal means call billing_portal_create and give that fresh URL to the human to resolve payment. contact_support means contact https://ohmyho.st/contact about the original invoice; none means no human payment step now, not proof of current Paid coverage. Never start a second subscription to repair a failed renewal. Follow billing_issue when tax needs attention: use billing_portal_create for open_billing_portal, or https://ohmyho.st/contact for contact_support; retain the original invoice and never disable tax. Retry the same checkout after an outage. state=expired ends this attempt; use a new key only for an explicitly requested new purchase, never automatically after an error or timeout.", external_exports.object({ organization_id: identifier2, checkout_id: identifier2 }), (client2, input) => client2.getBillingCheckout({
+  registerProductTool(server, dependencies, "billing_checkout_get", "Owner-only: observe the original checkout and reconcile confirmed credits/refunds, without another purchase. payment_confirmed is historical; read organization_credits_get for spendable funds and organization_account_get's effective plan for Paid coverage; paid_until is the end of paid coverage: the paid Stripe period end plus its 14-day renewal grace. Follow required_action: complete_checkout means give its URL to the human; open_billing_portal means call billing_portal_create and give that fresh URL to the human to resolve payment. contact_support means contact https://ohmyho.st/contact about the original invoice; none means no human payment step now, not proof of current Paid coverage. Never start a second subscription to repair a failed renewal. Follow billing_issue when tax needs attention: use billing_portal_create for open_billing_portal, or https://ohmyho.st/contact for contact_support; retain the original invoice and never disable tax. Retry the same checkout after an outage. state=expired ends this attempt; use a new key only for an explicitly requested new purchase, never automatically after an error or timeout.", external_exports.object({ organization_id: identifier2, checkout_id: identifier2 }), (client2, input) => client2.getBillingCheckout({
     organizationId: input.organization_id,
     checkoutId: input.checkout_id
   }));
   registerProductTool(server, dependencies, "billing_recharge_get", "Owner-only: read auto-recharge consent, spending limit and payment handoff. Reading never initiates a charge. Return private setup_url/invoice_url only to the human; never log them. Read again after Stripe card setup or payment. billing_issue identifies the original invoice: open_billing_portal means collect corrected billing details through billing_portal_create; contact_support means use https://ohmyho.st/contact. Never disable tax, discard the invoice or start another purchase to repair it.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getBillingRecharge(input.organization_id));
-  registerProductTool(server, dependencies, "billing_recharge_configure", "Owner-only: enable or disable automatic off-session payments. Enabling requires active Paid access. NEVER enable without explicit human approval for USD 9 plus tax per 1000 top-up credits, which carry over while Paid and expire on downgrade to Free, refill below 100 credits, and the chosen gross USD monthly limit. Set consent off_session_v1 only after that approval; null when disabling. Read current revision first. Preserve the original idempotency key and payload after uncertainty. A saved Stripe card may require setup_url. Disabling prevents new payment initiation; in-progress payments may finish. This does not create a subscription or Paid access.", external_exports.object({
+  registerProductTool(server, dependencies, "billing_recharge_configure", "Owner-only: enable or disable automatic off-session payments. Enabling requires active Paid access. NEVER enable without explicit human approval for USD 9 plus tax per 1000 top-up credits, which never expire, refill below 100 credits, and the chosen gross USD monthly limit. Set consent off_session_v1 only after that approval; null when disabling. Read current revision first. Preserve the original idempotency key and payload after uncertainty. A saved Stripe card may require setup_url. Disabling prevents new payment initiation; in-progress payments may finish. This does not create a subscription or Paid access.", external_exports.object({
     organization_id: identifier2,
     enabled: external_exports.boolean(),
     monthly_limit_minor: external_exports.number().int().min(1e3).max(1e5),
@@ -33846,19 +34681,11 @@ function createLocalOhmyhostMcpServer(dependencies) {
     idempotencyKey: input.idempotency_key
   }), mutationAnnotations());
   registerProductTool(server, dependencies, "project_export_get", "Owner-only: read the original SQL ZIP export's progress/error and verified download URL. Follow next_poll_after_seconds while queued/running; never create another export to poll. The signed URL lasts 24 hours and is only issued with sufficient remaining seven-day archive retention. Keep the URL out of source, logs and persisted project notes. The password cannot be retrieved. Available at zero credits.", external_exports.object({ project_id: identifier2, export_id: identifier2 }), (client2, input) => client2.getProjectExport({ projectId: input.project_id, exportId: input.export_id }));
-  registerProductTool(server, dependencies, "organization_usage_get", "Read posted UTC-month usage by project, environment and published meter/rate. One credit is 1000000 microcredits. Includes corrections; null environment means shared project cost. Current reservations are separate. Follow next_cursor with the same month (20 projects/page). Late or unmetered usage is not zero consumption. platform_overrun_micros is platform expense, not customer debt. Owner-only; works at zero credit without new charges.", external_exports.object({
-    organization_id: identifier2,
-    month: external_exports.string().regex(/^20[0-9]{2}-(0[1-9]|1[0-2])$/u),
-    cursor: identifier2.optional()
-  }), (client2, input) => client2.getOrganizationCreditUsage({
-    organizationId: input.organization_id,
-    month: input.month,
-    ...input.cursor ? { cursor: input.cursor } : {}
-  }));
-  registerProductTool(server, dependencies, "organization_account_get", "Owner-only: read the effective Free/Paid plan, its Stripe or granted source, available monthly credits that expire at period end and top-up credits that carry over while Paid but expire on downgrade to Free, reservations and next expiry. Granted Paid features do not imply a Stripe subscription or extra monthly Paid allowance. paid_until is the paid Stripe period end or grant end; null on Free or for an unbounded grant. An unpaid renewal may retain Paid features for up to 14 days after that Stripe period end, without new monthly credits. This read grants no access or credits.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationAccount(input.organization_id));
+  registerProductTool(server, dependencies, "organization_usage_get", "Read the billed usage of the last up to 14 UTC days (today included) grouped by day, project and meter, and what each project has used so far this UTC month. One credit is 1000000 microcredits. Null environment means shared project cost. Charges can arrive late and unmetered usage is not zero consumption. Owner-only; works at zero credit without new charges.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationCreditUsage(input.organization_id));
+  registerProductTool(server, dependencies, "organization_account_get", "Owner-only: read the effective Free/Paid plan, its Stripe or granted source, the monthly credits that expire at next_expiry, the top-up and bonus credits that never expire, the reservations that hold part of them, and available_micros (monthly plus one-time minus reservations). Granted Paid features do not imply a Stripe subscription or extra monthly Paid allowance. paid_until is the end of the paid coverage, which includes the 14-day renewal grace of a Stripe subscription; null on Free. This read grants no access or credits.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationAccount(input.organization_id));
   registerProductTool(server, dependencies, "referral_link_get", "Read the workspace's referral link to share. A new user whose first workspace comes from it starts with 30 days of Paid and 1,000 credits; that workspace's first payment gives this workspace 1,000 credits, plus 30 days of Paid unless a Stripe subscription or an unbounded grant already covers it. Any member may read it.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationReferral(input.organization_id));
-  registerProductTool(server, dependencies, "organization_credits_get", "Read the owner's shared organization credit pool, seven-day grace_started_at/grace_expires_at and published rate_cards. Existing services/domains are not immediately shut down at zero credit; an explicit project stop budget is separate. One credit is 1000000 microcredits. Each rate states credit_micros for units_per_charge; publication alone does not enable billing. active_meters identifies billed sources; provider outages and platform overrun are not customer debt. Works at zero credit. Top-ups and enabling auto-recharge require active Paid access.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationCredits(input.organization_id));
-  registerProductTool(server, dependencies, "project_budget_get", "Read the owner's project UTC-month budget, measured usage and open reservations. A budget never allocates a second wallet.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getProjectCreditBudget(input.project_id));
+  registerProductTool(server, dependencies, "organization_credits_get", "Read the owner's shared organization credit pool (available_micros is monthly plus one-time credit minus reservations), the seven-day grace_started_at/grace_expires_at that begins when the credit is used up, and published rate_cards. Existing services/domains are not immediately shut down at zero credit; an explicit project stop budget is separate. One credit is 1000000 microcredits. Each rate states credit_micros for units_per_charge; publication alone does not enable billing. active_meters identifies billed sources; provider outages are not customer debt. Works at zero credit. Top-ups and enabling auto-recharge require active Paid access.", external_exports.object({ organization_id: identifier2 }), (client2, input) => client2.getOrganizationCredits(input.organization_id));
+  registerProductTool(server, dependencies, "project_budget_get", "Read the owner's project UTC-month budget, this month's use and open reservations. A budget never allocates a second wallet.", external_exports.object({ project_id: identifier2 }), (client2, input) => client2.getProjectCreditBudget(input.project_id));
   registerProductTool(server, dependencies, "project_budget_set", "Set an owner's optional monthly project budget in microcredits (1000000 = one credit). continue is the default and uses the org pool after the threshold; stop blocks new billable work. null clears the budget and requires continue. Changing it never resets usage or adds credits. Replay the same key after uncertainty; read the budget again for current usage.", external_exports.object({
     project_id: identifier2,
     amount_micros: external_exports.string().regex(/^(0|[1-9][0-9]{0,18})$/u).nullable(),
@@ -33947,6 +34774,142 @@ function createLocalOhmyhostMcpServer(dependencies) {
     ...input.environment === void 0 ? {} : { environment: input.environment }
   }));
   registerProductTool(server, dependencies, "database_access_revoke", "Revoke one issued database credential immediately: open sessions end and its PostgreSQL role is removed. Revocation is idempotent and never touches application roles or data.", external_exports.object({ project_id: identifier2, access_id: identifier2 }), (client2, input) => client2.revokeDatabaseAccess({ projectId: input.project_id, accessId: input.access_id }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_webhook_list", "List this project's database webhooks of one Dev or Prod environment (dev when omitted), without signing secrets. Each webhook lists its event types and header names only.", external_exports.object({ project_id: identifier2, environment: databaseEnvironment.optional() }), (client2, input) => client2.listDatabaseWebhooks({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment }
+  }));
+  registerProductTool(server, dependencies, "database_webhook_create", "Subscribe one HTTPS receiver to database lifecycle events (database.created, ready, woke, slept, suspended, resized, deleted) of one Dev or Prod database. The signing secret is RETURNED EXACTLY ONCE: store it in a secret manager and never write it into files, notes, source, commit messages or later messages. Deliveries are signed, retried and dead-lettered when retries stop. At most five webhooks exist per project environment. Requires confirmed: true and an idempotency key; the same key with the same request returns the stored answer.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    url: external_exports.string().max(2048).regex(/^https:\/\//u),
+    event_types: external_exports.array(external_exports.enum(DATABASE_WEBHOOK_EVENT_TYPES)).min(1).max(16),
+    headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+    idempotency_key: idempotencyKey,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.createDatabaseWebhook({
+    projectId: input.project_id,
+    environment: input.environment,
+    url: input.url,
+    eventTypes: input.event_types,
+    headers: input.headers ?? {},
+    idempotencyKey: input.idempotency_key
+  }), mutationAnnotations());
+  registerProductTool(server, dependencies, "database_webhook_test", "Send one signed test request to a database webhook and report the outcome synchronously. Each call sends one request to the receiver; the platform allows one test per webhook every five seconds. If the answer is lost, read database_webhook_delivery_list before calling again; a second call sends another request.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    webhook_id: databaseWebhookId
+  }), (client2, input) => client2.testDatabaseWebhook({
+    projectId: input.project_id,
+    environment: input.environment,
+    webhookId: input.webhook_id
+  }), { ...mutationAnnotations(), idempotentHint: false });
+  registerProductTool(server, dependencies, "database_webhook_delete", "Stop all deliveries to one database webhook. Destructive: requires confirmed: true. Deleting an already deleted webhook answers not found.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    webhook_id: databaseWebhookId,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.deleteDatabaseWebhook({
+    projectId: input.project_id,
+    environment: input.environment,
+    webhookId: input.webhook_id
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_webhook_delivery_list", "List recent database webhook deliveries, newest first, optionally for one webhook. Each delivery shows its state (pending, delivered or dead_lettered), attempts and last error.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment.optional(),
+    webhook_id: databaseWebhookId.optional(),
+    limit: external_exports.number().int().min(1).max(100).optional(),
+    cursor: external_exports.string().min(1).max(200).optional()
+  }), (client2, input) => client2.listDatabaseWebhookDeliveries({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment },
+    ...input.webhook_id === void 0 ? {} : { webhookId: input.webhook_id },
+    ...input.limit === void 0 ? {} : { limit: input.limit },
+    ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+  }));
+  registerProductTool(server, dependencies, "database_webhook_delivery_replay", "Queue one more attempt for a database webhook delivery that is no longer being retried. Each call queues one attempt; the delivery returns to pending until it is delivered or dead-lettered again. If the answer is lost, read database_webhook_delivery_list before calling again; a second call queues another attempt.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    delivery_id: databaseDeliveryId
+  }), (client2, input) => client2.replayDatabaseWebhookDelivery({
+    projectId: input.project_id,
+    environment: input.environment,
+    deliveryId: input.delivery_id
+  }), { ...mutationAnnotations(), idempotentHint: false });
+  registerProductTool(server, dependencies, "database_schedule_list", "List this project's database schedules of one Dev or Prod environment (dev when omitted), with their cadence, statements, timeout and next run.", external_exports.object({ project_id: identifier2, environment: databaseEnvironment.optional() }), (client2, input) => client2.listDatabaseSchedules({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment }
+  }));
+  registerProductTool(server, dependencies, "database_schedule_set", "Create or replace a named database schedule that runs SQL statements repeatedly on a timer, as the application's own runtime role, so row-level security applies. Send exactly one of cron (five-field UTC expression) or every_seconds (60 to 2678400). Each run is cancelled after timeout_ms (1000 to 30000, default 10000). Statements run in order and must be safe to repeat: write idempotent statements. Destructive: requires confirmed: true.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    name: databaseScheduleName,
+    cron: external_exports.string().min(9).max(120).optional(),
+    every_seconds: external_exports.number().int().min(DATABASE_SCHEDULE_MIN_EVERY_SECONDS).max(DATABASE_SCHEDULE_MAX_EVERY_SECONDS).optional(),
+    statements: external_exports.array(external_exports.string().min(1).max(DATABASE_SCHEDULE_STATEMENT_MAX_BYTES)).min(1).max(DATABASE_SCHEDULE_MAX_STATEMENTS),
+    timeout_ms: external_exports.number().int().min(DATABASE_SCHEDULE_MIN_TIMEOUT_MS).max(DATABASE_SCHEDULE_MAX_TIMEOUT_MS).optional(),
+    enabled: external_exports.boolean().optional(),
+    confirmed: external_exports.literal(true)
+  }).refine((value) => value.cron === void 0 !== (value.every_seconds === void 0), {
+    message: "Send exactly one of cron or every_seconds",
+    path: ["every_seconds"]
+  }), (client2, input) => client2.setDatabaseSchedule({
+    projectId: input.project_id,
+    environment: input.environment,
+    name: input.name,
+    cron: input.cron,
+    everySeconds: input.every_seconds,
+    statements: input.statements,
+    timeoutMs: input.timeout_ms,
+    enabled: input.enabled
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_schedule_delete", "Remove one database schedule so it never runs again. Destructive: requires confirmed: true.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    name: databaseScheduleName,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.deleteDatabaseSchedule({
+    projectId: input.project_id,
+    environment: input.environment,
+    name: input.name
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_schedule_run_list", "List the newest runs of one database schedule, newest first, with each run's outcome (succeeded, failed, timed_out, outcome_unknown, rejected or a skipped reason) and SQLSTATE when one applies.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment.optional(),
+    name: databaseScheduleName,
+    limit: external_exports.number().int().min(1).max(50).optional()
+  }), (client2, input) => client2.listDatabaseScheduleRuns({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment },
+    name: input.name,
+    ...input.limit === void 0 ? {} : { limit: input.limit }
+  }));
+  registerProductTool(server, dependencies, "database_schedule_run_now", "Queue one immediate run of a database schedule. Refused while the schedule is disabled or a run is already queued. Destructive: the statements execute against the database; requires confirmed: true. If the answer is lost, read database_schedule_run_list before calling again; a second call queues another run.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    name: databaseScheduleName,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.runDatabaseSchedule({
+    projectId: input.project_id,
+    environment: input.environment,
+    name: input.name
+  }), { ...destructiveAnnotations(), idempotentHint: false });
+  registerProductTool(server, dependencies, "database_execution_usage_get", "Read metered database execution usage: schedule runs and webhook attempts per UTC hour or day window. from and to are UTC timestamps with milliseconds (Z), aligned to the granularity, at most 31 days apart. Only completed windows are final. Rejected, skipped, event and delivery counts are reported but not billed.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment.optional(),
+    from: external_exports.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}Z$/u),
+    to: external_exports.string().regex(/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}\.[0-9]{3}Z$/u),
+    granularity: external_exports.enum(["hour", "day"]),
+    limit: external_exports.number().int().min(1).max(100).optional(),
+    cursor: external_exports.string().min(1).max(200).optional()
+  }), (client2, input) => client2.getDatabaseExecutionUsage({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment },
+    from: input.from,
+    to: input.to,
+    granularity: input.granularity,
+    ...input.limit === void 0 ? {} : { limit: input.limit },
+    ...input.cursor === void 0 ? {} : { cursor: input.cursor }
+  }));
   registerProductTool(server, dependencies, "promotion_plan", "Plan promotion of the current Dev artifact to Prod without a rebuild.", external_exports.object({ project_id: identifier2, source_deployment_id: identifier2 }), (client2, input) => client2.planPromotion({
     projectId: input.project_id,
     sourceDeploymentId: input.source_deployment_id
@@ -34875,7 +35838,7 @@ function safeFailure(error, commandPrefix) {
     return {
       code: "request_timeout",
       retryable: true,
-      suggestedAction: "The ohmyho.st API did not answer within 30 seconds. Call this tool again; for a change use the same idempotency_key, because it may already be under way."
+      suggestedAction: "The ohmyho.st API did not answer within 30 seconds. Call this tool again; for a change that takes an idempotency_key use the same key, because it may already be under way. A change without a key (webhook delete, test or replay, schedule set, delete or run) is repeated only after a read tool shows the current state."
     };
   if (error instanceof Error) {
     const local = localFailure(error, commandPrefix);
@@ -34942,7 +35905,7 @@ function localFailure(error, commandPrefix) {
       return {
         code: "network_error",
         retryable: true,
-        suggestedAction: "The request did not reach the ohmyho.st API, or its answer was cut off. Call this tool again; for a change use the same idempotency_key, because it may already have been applied."
+        suggestedAction: "The request did not reach the ohmyho.st API, or its answer was cut off. Call this tool again; for a change that takes an idempotency_key use the same key, because it may already have been applied. A change without a key (webhook delete, test or replay, schedule set, delete or run) is repeated only after a read tool shows the current state."
       };
     case "ResponseContractError":
       return {