@amerged/ohmyhost-mcp 0.1.44 → 0.1.46

package/dist/stdio-main.js

@@ -30,7 +30,7 @@ import {
   serverIdentityOf,
   setNegotiatedProtocolVersion,
   validateEnvelopeMeta
-} from "./chunk-NUWAJ4TH.js";
+} from "./chunk-2GRH5YCK.js";
 
 // node_modules/.pnpm/ignore@7.0.12/node_modules/ignore/index.js
 var require_ignore = __commonJS({
@@ -24293,14 +24293,14 @@ function isFrameworkConversionDiagnosticCode(value) {
 function parseFrameworkConversionDiagnostic(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     return null;
-  const record8 = value;
-  const code = Object.hasOwn(record8, "code") ? record8["code"] : void 0;
-  const path2 = Object.hasOwn(record8, "path") ? record8["path"] : void 0;
+  const record9 = value;
+  const code = Object.hasOwn(record9, "code") ? record9["code"] : void 0;
+  const path2 = Object.hasOwn(record9, "path") ? record9["path"] : void 0;
   if (!isFrameworkConversionDiagnosticCode(code) || typeof path2 !== "string")
     return null;
   const definition = DETAIL_DEFINITIONS[code];
-  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record8, name) ? record8[name] : void 0]);
-  if (Object.keys(record8).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
+  const fields = Object.entries(definition.fields ?? {}).map(([name, grammar]) => [name, grammar, Object.hasOwn(record9, name) ? record9[name] : void 0]);
+  if (Object.keys(record9).length !== fields.length + 2 || pathClassOf(definition, path2) === null || fields.some(([, grammar, field]) => !fieldMatches(grammar, field)))
     return null;
   return Object.freeze(Object.fromEntries([
     ["code", code],
@@ -25572,6 +25572,48 @@ var PROBLEM_POLICY = {
     action: "The platform is still retrying this webhook delivery. Read the delivery in the delivery list; replay it only if it ends dead_lettered or the receiver needs the event again.",
     title: "Webhook delivery still pending"
   },
+  database_watch_limit: {
+    status: 409,
+    retryable: false,
+    action: "List the project's database watches for this environment and delete one you no longer need, then create the watch again.",
+    title: "Database watch limit reached"
+  },
+  database_watch_table_unavailable: {
+    status: 409,
+    retryable: false,
+    action: "The table must exist as an ordinary table owned by the application, created by a deployed migration; views, partitions, temporary tables and the schemas pgcf, ohmyhost, information_schema and pg_* cannot be watched. Fix the name or deploy the migration, then create the watch again.",
+    title: "Table cannot be watched"
+  },
+  database_watch_column_unavailable: {
+    status: 409,
+    retryable: false,
+    action: "List only existing column names exactly as written, names are case-sensitive. Delete the watch before a migration drops a published column, because the write would fail.",
+    title: "Watched column does not exist"
+  },
+  database_watch_events_unavailable: {
+    status: 409,
+    retryable: false,
+    action: "The platform event schema is installed when the database wakes: run any query against that environment, wait for the answer, then create the watch again. If it still fails, report the request_id through feedback.",
+    title: "Database events not installed yet"
+  },
+  database_watch_conflict: {
+    status: 409,
+    retryable: false,
+    action: "A migration already attaches a capture trigger to this table: keep it and skip the watch, or remove it from the migrations, deploy and create the watch again. A table carries one capture trigger.",
+    title: "Table already has a capture trigger"
+  },
+  database_table_conflict: {
+    status: 409,
+    retryable: false,
+    action: "A table with this name already exists with another definition. Choose another table name, or create the table again with the same columns, types, nullability, identity, defaults and primary key it has.",
+    title: "Table already exists with another definition"
+  },
+  database_table_limit: {
+    status: 409,
+    retryable: false,
+    action: "This database already holds the maximum number of tables in its public schema, so no table can be added. Use an existing table, or remove a table you no longer need through a deployed migration, then create the table again.",
+    title: "Database table limit reached"
+  },
   project_notes_conflict: {
     status: 409,
     retryable: false,
@@ -25836,7 +25878,7 @@ var PROBLEM_POLICY = {
   api_key_permissions_unavailable: {
     status: 503,
     retryable: false,
-    action: "Report the platform user-key permission configuration through feedback. Repeated login or creation will not fix it.",
+    action: "Report the platform user-key permission configuration through feedback with this request_id; it affects every token the same way, whatever the integration. Repeated login does not fix it. After the platform confirms the fix, repeat the same create with the same name and Idempotency-Key.",
     title: "Token permissions unavailable"
   },
   reconciliation_exhausted: {
@@ -26255,8 +26297,8 @@ var isPaidValidationRecord = (value) => {
   if (typeof value !== "object" || value === null || Array.isArray(value) || Object.keys(value).sort().join(",") !== "content,name,purpose,type") {
     return false;
   }
-  const record8 = value;
-  return (record8["type"] === "CNAME" || record8["type"] === "TXT") && boundedString(record8["name"], 1, 253) && boundedString(record8["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record8["purpose"]));
+  const record9 = value;
+  return (record9["type"] === "CNAME" || record9["type"] === "TXT") && boundedString(record9["name"], 1, 253) && boundedString(record9["content"], 1, 2048) && ["traffic", "ownership", "ssl", "dcv_delegation"].includes(String(record9["purpose"]));
 };
 
 // apps/product-cli/dist/source-publisher.js
@@ -26526,7 +26568,7 @@ async function prepareLocalSourcePublication(input) {
     request = { ...request, expected_commit_sha: link2.source.last_confirmed_commit_sha };
   }
   parseManagedSourceRequest("upload", request);
-  const record8 = {
+  const record9 = {
     version: 1,
     ...scope,
     operation_id: null,
@@ -26535,16 +26577,16 @@ async function prepareLocalSourcePublication(input) {
     request
   };
   if (original !== null) {
-    assertSameAttempt(original, record8);
+    assertSameAttempt(original, record9);
   } else
-    await writePending(record8, true);
+    await writePending(record9, true);
   return {
     request,
     accepted: async (operation) => {
       const current = await readPending(scope, replay);
       if (current === null)
         throw new LocalSourcePublicationError("source_publication_missing");
-      assertSameAttempt(current, record8);
+      assertSameAttempt(current, record9);
       if (current.operation_id !== null && current.operation_id !== operation.id)
         throw new ResponseContractError();
       if (!replay)
@@ -26563,7 +26605,7 @@ async function prepareLocalSourcePublication(input) {
         const current = await readPending(scope);
         if (current === null || current.operation_id !== null)
           return;
-        assertSameAttempt(current, record8);
+        assertSameAttempt(current, record9);
       } catch (error2) {
         if (error2 instanceof LocalSourcePublicationError && (error2.code === "source_publication_scope_mismatch" || error2.code === "source_publication_pending"))
           return;
@@ -26766,12 +26808,12 @@ async function readRecord(path2) {
     await handle?.close();
   }
 }
-async function writePending(record8, create, completed = false) {
-  const parent = join3(record8.directory, ".ohmyhost");
+async function writePending(record9, create, completed = false) {
+  const parent = join3(record9.directory, ".ohmyhost");
   for (const directory of [
     parent,
-    record8.metadata_directory,
-    join3(record8.metadata_directory, "publications")
+    record9.metadata_directory,
+    join3(record9.metadata_directory, "publications")
   ]) {
     try {
       await fs2.mkdir(directory, { mode: 448 });
@@ -26782,10 +26824,10 @@ async function writePending(record8, create, completed = false) {
     await checkedDirectory(directory);
     await fs2.chmod(directory, 448);
   }
-  const target = completed ? completedPath(record8) : pendingPath(record8);
+  const target = completed ? completedPath(record9) : pendingPath(record9);
   const temporary = create ? target : `${target}.${randomUUID()}.tmp`;
   try {
-    await fs2.writeFile(temporary, `${JSON.stringify(record8)}
+    await fs2.writeFile(temporary, `${JSON.stringify(record9)}
 `, { mode: 384, flag: "wx" });
     if (!create)
       await fs2.rename(temporary, target);
@@ -26915,7 +26957,7 @@ function exact2(value, keys) {
 
 // packages/contracts/dist/credit-pricing.js
 function assertOrganizationCreditUsage(value) {
-  const record8 = (input, keys) => {
+  const record9 = (input, keys) => {
     if (!input || typeof input !== "object" || Array.isArray(input) || Object.keys(input).sort().join() !== keys.split(",").sort().join())
       throw new TypeError("Invalid usage fields");
     return input;
@@ -26923,30 +26965,30 @@ function assertOrganizationCreditUsage(value) {
   const identifier3 = (input) => typeof input === "string" && /^[0-7][0-9A-HJKMNP-TV-Z]{25}$/u.test(input);
   const amount = (input) => typeof input === "string" && /^(0|[1-9][0-9]{0,37})$/u.test(input);
   const instant2 = (input) => typeof input === "string" && Number.isFinite(Date.parse(input)) && new Date(input).toISOString() === input;
-  const report = record8(value, "organization_id,as_of,unit,period,from,projects,days");
+  const report = record9(value, "organization_id,as_of,unit,period,from,projects,days");
   if (!identifier3(report["organization_id"]) || !instant2(report["as_of"]) || !instant2(report["from"]) || report["unit"] !== "microcredits" || typeof report["period"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])$/u.test(report["period"]) || !Array.isArray(report["projects"]) || report["projects"].length > 1e3 || !Array.isArray(report["days"]) || report["days"].length > 15)
     throw new TypeError("Invalid usage report");
   let previous = "";
   for (const input of report["projects"]) {
-    const project = record8(input, "project_id,used_micros");
+    const project = record9(input, "project_id,used_micros");
     if (!identifier3(project["project_id"]) || String(project["project_id"]) <= previous || !amount(project["used_micros"]))
       throw new TypeError("Invalid usage project");
     previous = String(project["project_id"]);
   }
   let previousDay = "";
   for (const input of report["days"]) {
-    const day = record8(input, "day,projects");
+    const day = record9(input, "day,projects");
     if (typeof day["day"] !== "string" || !/^20[0-9]{2}-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])$/u.test(day["day"]) || day["day"] <= previousDay || !Array.isArray(day["projects"]) || day["projects"].length > 1e3)
       throw new TypeError("Invalid usage day");
     previousDay = day["day"];
     previous = "";
     for (const projectInput of day["projects"]) {
-      const project = record8(projectInput, "project_id,meters");
+      const project = record9(projectInput, "project_id,meters");
       if (!identifier3(project["project_id"]) || String(project["project_id"]) <= previous || !Array.isArray(project["meters"]) || project["meters"].length > 1e3)
         throw new TypeError("Invalid usage project");
       previous = String(project["project_id"]);
       for (const meterInput of project["meters"]) {
-        const meter = record8(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
+        const meter = record9(meterInput, "environment_id,meter,unit,rate_card_id,quantity,charged_micros");
         if (meter["environment_id"] !== null && !identifier3(meter["environment_id"]))
           throw new TypeError("Invalid usage environment");
         for (const key of ["meter", "unit", "rate_card_id"])
@@ -27093,6 +27135,9 @@ var DATABASE_WEBHOOK_EVENT_TYPES = [
   "database.resized",
   "database.deleted"
 ];
+var DATABASE_WATCH_OPERATIONS = ["insert", "update", "delete"];
+var DATABASE_WATCH_MAX_COLUMNS = 32;
+var DATABASE_WATCH_DEFAULT_SCHEMA = "public";
 var DATABASE_WEBHOOK_MAX_EVENT_TYPES = 16;
 var DATABASE_WEBHOOK_MAX_HEADERS = 8;
 var DATABASE_WEBHOOK_URL_MAX_LENGTH = 2048;
@@ -27135,15 +27180,61 @@ var USAGE_MAX_RANGE_MS = 31 * 24 * USAGE_HOUR_MS;
 var WEBHOOK_KEYS = ["id", "environment", "url", "event_types", "header_names", "created_at"];
 var WEBHOOK_ID_PATTERN = /^whk_[a-z0-9]{20}$/u;
 var DELIVERY_ID_PATTERN = /^dlv_[0-9a-f]{20}$/u;
-var EVENT_ID_PATTERN = /^evt_[0-9a-f]{20}$/u;
+var EVENT_ID_PATTERN = /^(?:evt_[0-9a-f]{20}|[a-z][a-z0-9]{19}:[1-9][0-9]{0,15}:[1-9][0-9]{0,15})$/u;
+var DATA_SUBSCRIPTION_PATTERN = /^data\.(?:\*|[a-z][a-z0-9_]{0,47})$/u;
+var DATA_EVENT_TYPE_PATTERN = /^data\.[a-z][a-z0-9_]{0,47}$/u;
+var DATABASE_WATCH_ID_PATTERN = /^pgcf_watch_[0-9a-f]{8}$/u;
+var DATABASE_WATCH_IDENTIFIER_PATTERN = /^[A-Za-z_][A-Za-z0-9_]{0,62}$/u;
+var DATABASE_WATCH_FORBIDDEN_SCHEMAS = ["information_schema", "pgcf", "ohmyhost"];
+var DATABASE_WATCH_KEYS = [
+  "id",
+  "environment",
+  "schema",
+  "table",
+  "columns",
+  "operations",
+  "topic",
+  "event_type"
+];
 var SCHEDULE_NAME_PATTERN = /^[a-z][a-z0-9_-]{0,62}$/u;
 var CURSOR_PATTERN = /^[A-Za-z0-9._|:=+/-]{1,200}$/u;
 var HEADER_NAME_PATTERN = /^[A-Za-z][A-Za-z0-9-]{0,63}$/u;
+function isDatabaseWatchIdentifier(value) {
+  return matches(value, DATABASE_WATCH_IDENTIFIER_PATTERN);
+}
+function isDatabaseWatchSchema(value) {
+  if (!isDatabaseWatchIdentifier(value))
+    return false;
+  const lower = value.toLowerCase();
+  return !lower.startsWith("pg_") && !DATABASE_WATCH_FORBIDDEN_SCHEMAS.includes(lower);
+}
+function dataEventTopic(tableName) {
+  const mapped = Array.from(tableName, (character) => {
+    const lower = Array.from(character.toLowerCase())[0] ?? "_";
+    return /^[a-z0-9_]$/u.test(lower) ? lower : "_";
+  }).join("");
+  const topic = /^[a-z]/u.test(mapped) ? mapped : `t_${mapped}`;
+  return topic.slice(0, 48);
+}
 function assertDatabaseWebhook(value) {
   if (!record4(value) || !exact4(value, WEBHOOK_KEYS))
     throw new TypeError("Invalid database webhook");
   assertWebhookFields(value);
 }
+function assertDatabaseWatch(value) {
+  if (!record4(value) || !exact4(value, DATABASE_WATCH_KEYS) || !matches(value["id"], DATABASE_WATCH_ID_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || !isDatabaseWatchSchema(value["schema"]) || !isDatabaseWatchIdentifier(value["table"]) || !Array.isArray(value["columns"]) || value["columns"].length < 1 || value["columns"].length > DATABASE_WATCH_MAX_COLUMNS || !value["columns"].every(isDatabaseWatchIdentifier) || !isCanonicalOperations(value["operations"]) || value["topic"] !== dataEventTopic(value["table"]) || value["event_type"] !== `data.${value["topic"]}`)
+    throw new TypeError("Invalid database watch");
+}
+function assertDatabaseWatchPage(value) {
+  if (!record4(value) || !exact4(value, ["items"]) || !pageItems(value["items"]))
+    throw new TypeError("Invalid database watch page");
+  for (const item of value["items"])
+    assertDatabaseWatch(item);
+}
+function assertDatabaseWatchDeleted(value) {
+  if (!record4(value) || !exact4(value, ["id", "deleted"]) || !matches(value["id"], DATABASE_WATCH_ID_PATTERN) || value["deleted"] !== true)
+    throw new TypeError("Invalid database watch deletion");
+}
 function assertDatabaseWebhookCreated(value) {
   if (!record4(value) || !exact4(value, [...WEBHOOK_KEYS, "secret"]) || typeof value["secret"] !== "string" || value["secret"].length === 0)
     throw new TypeError("Invalid database webhook");
@@ -27172,7 +27263,7 @@ function assertDatabaseWebhookDelivery(value) {
     "delivered_at",
     "last_status",
     "last_error"
-  ]) || !matches(value["id"], DELIVERY_ID_PATTERN) || !matches(value["event_id"], EVENT_ID_PATTERN) || !oneOf(DATABASE_WEBHOOK_EVENT_TYPES, value["event_type"]) || !matches(value["webhook_id"], WEBHOOK_ID_PATTERN) || !oneOf(["pending", "delivered", "dead_lettered"], value["state"]) || !nonNegativeInteger(value["attempts"]) || !timestamp3(value["created_at"]) || !nullable(value["next_attempt_at"], timestamp3) || !nullable(value["delivered_at"], timestamp3) || !nullable(value["last_status"], Number.isSafeInteger) || !nullable(value["last_error"], (error) => oneOf(["timeout", "network", "http", "expired", "permanent"], error)))
+  ]) || !matches(value["id"], DELIVERY_ID_PATTERN) || !matches(value["event_id"], EVENT_ID_PATTERN) || !isDeliveredEventType(value["event_type"]) || !matches(value["webhook_id"], WEBHOOK_ID_PATTERN) || !oneOf(["pending", "delivered", "dead_lettered"], value["state"]) || !nonNegativeInteger(value["attempts"]) || !timestamp3(value["created_at"]) || !nullable(value["next_attempt_at"], timestamp3) || !nullable(value["delivered_at"], timestamp3) || !nullable(value["last_status"], Number.isSafeInteger) || !nullable(value["last_error"], (error) => oneOf(["timeout", "network", "http", "expired", "permanent"], error)))
     throw new TypeError("Invalid database webhook delivery");
 }
 function assertDatabaseWebhookDeliveryPage(value) {
@@ -27255,7 +27346,7 @@ function assertUsageRow(value) {
     throw new TypeError("Invalid database execution usage row");
 }
 function assertWebhookFields(value) {
-  if (!matches(value["id"], WEBHOOK_ID_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || !isHttpsUrl2(value["url"]) || !Array.isArray(value["event_types"]) || value["event_types"].length < 1 || value["event_types"].length > DATABASE_WEBHOOK_MAX_EVENT_TYPES || !value["event_types"].every((type) => oneOf(DATABASE_WEBHOOK_EVENT_TYPES, type)) || !Array.isArray(value["header_names"]) || value["header_names"].length > DATABASE_WEBHOOK_MAX_HEADERS || !value["header_names"].every((name) => matches(name, HEADER_NAME_PATTERN)) || !timestamp3(value["created_at"]))
+  if (!matches(value["id"], WEBHOOK_ID_PATTERN) || !oneOf(["dev", "prod"], value["environment"]) || !isHttpsUrl2(value["url"]) || !Array.isArray(value["event_types"]) || value["event_types"].length < 1 || value["event_types"].length > DATABASE_WEBHOOK_MAX_EVENT_TYPES || !value["event_types"].every(isDatabaseWebhookEventPattern) || !Array.isArray(value["header_names"]) || value["header_names"].length > DATABASE_WEBHOOK_MAX_HEADERS || !value["header_names"].every((name) => matches(name, HEADER_NAME_PATTERN)) || !timestamp3(value["created_at"]))
     throw new TypeError("Invalid database webhook");
 }
 function isHttpsUrl2(value) {
@@ -27267,6 +27358,18 @@ function isHttpsUrl2(value) {
     return false;
   }
 }
+function isDatabaseWebhookEventPattern(value) {
+  return oneOf(DATABASE_WEBHOOK_EVENT_TYPES, value) || matches(value, DATA_SUBSCRIPTION_PATTERN);
+}
+function isDeliveredEventType(value) {
+  return oneOf(DATABASE_WEBHOOK_EVENT_TYPES, value) || matches(value, DATA_EVENT_TYPE_PATTERN);
+}
+function isCanonicalOperations(value) {
+  if (!Array.isArray(value) || value.length < 1)
+    return false;
+  const canonical = DATABASE_WATCH_OPERATIONS.filter((operation) => value.includes(operation));
+  return canonical.length === value.length && canonical.every((op, index) => op === value[index]);
+}
 function isCronText(value) {
   return typeof value === "string" && value.length >= DATABASE_SCHEDULE_CRON_MIN_LENGTH && value.length <= DATABASE_SCHEDULE_CRON_MAX_LENGTH;
 }
@@ -27310,7 +27413,7 @@ function exact4(value, keys) {
 // apps/product-cli/package.json
 var package_default2 = {
   name: "@ohmyhost/product-cli",
-  version: "0.1.44",
+  version: "0.1.46",
   private: true,
   ohmyhost: {
     deployment: "production",
@@ -27759,6 +27862,170 @@ function expectPositiveInteger(value, field, options = {}) {
   return value;
 }
 
+// packages/contracts/dist/database-tables.js
+var DATABASE_TABLE_COLUMN_TYPES = [
+  "text",
+  "integer",
+  "bigint",
+  "boolean",
+  "numeric",
+  "double precision",
+  "timestamptz",
+  "date",
+  "uuid",
+  "jsonb"
+];
+var DATABASE_TABLE_DEFAULTS = ["now", "uuid"];
+var DATABASE_TABLE_MAX_COLUMNS = 64;
+var DATABASE_TABLE_MAX_PRIMARY_KEY_COLUMNS = 8;
+var DATABASE_TABLE_IDENTIFIER_PATTERN = /^[a-z_][a-z0-9_]{0,62}$/u;
+var RESERVED_WORDS = /* @__PURE__ */ new Set([
+  "all",
+  "analyse",
+  "analyze",
+  "and",
+  "any",
+  "array",
+  "as",
+  "asc",
+  "asymmetric",
+  "both",
+  "case",
+  "cast",
+  "check",
+  "collate",
+  "column",
+  "constraint",
+  "create",
+  "current_catalog",
+  "current_date",
+  "current_role",
+  "current_time",
+  "current_timestamp",
+  "current_user",
+  "default",
+  "deferrable",
+  "desc",
+  "distinct",
+  "do",
+  "else",
+  "end",
+  "except",
+  "false",
+  "fetch",
+  "for",
+  "foreign",
+  "from",
+  "grant",
+  "group",
+  "having",
+  "in",
+  "initially",
+  "intersect",
+  "into",
+  "lateral",
+  "leading",
+  "limit",
+  "localtime",
+  "localtimestamp",
+  "not",
+  "null",
+  "offset",
+  "on",
+  "only",
+  "or",
+  "order",
+  "placing",
+  "primary",
+  "references",
+  "returning",
+  "select",
+  "session_user",
+  "some",
+  "symmetric",
+  "table",
+  "then",
+  "to",
+  "trailing",
+  "true",
+  "union",
+  "unique",
+  "user",
+  "using",
+  "variadic",
+  "when",
+  "where",
+  "window",
+  "with"
+]);
+function isDatabaseTableIdentifier(value) {
+  return typeof value === "string" && DATABASE_TABLE_IDENTIFIER_PATTERN.test(value) && !value.startsWith("pg_") && !RESERVED_WORDS.has(value);
+}
+function parseDatabaseTableCreateRequest(value) {
+  if (!record7(value) || !onlyKeys(value, ["table", "columns", "primaryKey"]) || !isDatabaseTableIdentifier(value["table"]) || !Array.isArray(value["columns"]) || value["columns"].length < 1 || value["columns"].length > DATABASE_TABLE_MAX_COLUMNS)
+    throw new TypeError("Invalid database table request");
+  const inputs = value["columns"].map(parseColumn);
+  const names = inputs.map((column) => column.name);
+  if (new Set(names).size !== names.length || inputs.filter((column) => column.identity).length > 1)
+    throw new TypeError("Invalid database table request");
+  const primaryKey = parsePrimaryKey(value["primaryKey"], names);
+  return {
+    table: value["table"],
+    columns: inputs.map((column) => completeColumn(column, primaryKey.includes(column.name))),
+    primaryKey
+  };
+}
+function parseColumn(value) {
+  if (!record7(value) || !onlyKeys(value, ["name", "type", "nullable", "identity", "default"]) || !isDatabaseTableIdentifier(value["name"]) || !oneOf2(DATABASE_TABLE_COLUMN_TYPES, value["type"]) || value["nullable"] !== void 0 && typeof value["nullable"] !== "boolean" || value["identity"] !== void 0 && typeof value["identity"] !== "boolean" || value["default"] !== void 0 && !oneOf2(DATABASE_TABLE_DEFAULTS, value["default"]))
+    throw new TypeError("Invalid database table request");
+  const type = value["type"];
+  const identity = value["identity"] === true;
+  const defaultValue = value["default"] ?? null;
+  if (identity && type !== "integer" && type !== "bigint")
+    throw new TypeError("Invalid database table request");
+  if (identity && defaultValue !== null)
+    throw new TypeError("Invalid database table request");
+  if (defaultValue === "now" && type !== "timestamptz")
+    throw new TypeError("Invalid database table request");
+  if (defaultValue === "uuid" && type !== "uuid")
+    throw new TypeError("Invalid database table request");
+  return {
+    name: value["name"],
+    type,
+    nullable: value["nullable"],
+    identity,
+    default: defaultValue
+  };
+}
+function parsePrimaryKey(value, names) {
+  if (value === void 0)
+    return [];
+  if (!Array.isArray(value) || value.length < 1 || value.length > DATABASE_TABLE_MAX_PRIMARY_KEY_COLUMNS || new Set(value).size !== value.length || !value.every((name) => typeof name === "string" && names.includes(name)))
+    throw new TypeError("Invalid database table request");
+  return value;
+}
+function completeColumn(column, keyed) {
+  const required = column.identity || keyed;
+  if (required && column.nullable === true)
+    throw new TypeError("Invalid database table request");
+  return {
+    name: column.name,
+    type: column.type,
+    nullable: required ? false : column.nullable ?? true,
+    identity: column.identity,
+    default: column.default
+  };
+}
+function oneOf2(allowed, value) {
+  return typeof value === "string" && allowed.includes(value);
+}
+function record7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function onlyKeys(value, allowed) {
+  return Object.keys(value).every((key) => allowed.includes(key));
+}
+
 // packages/workos-auth-contracts/dist/user-api-keys.js
 var WORKOS_USER_API_KEY_PATTERN = /^sk_[A-Za-z0-9_-]{20,128}$/u;
 
@@ -28424,7 +28691,11 @@ var HELP_USAGE = Object.freeze({
   "database access create": "ohmyhost database access create --project ULID --environment dev|prod [--mode read|write] [--ttl 5m|1h|24h|SECONDS] [--label TEXT] --yes --json\n  The connection URI is shown once. Use it immediately, never store it in files, notes or source, and revoke it when finished.",
   "database access list": "ohmyhost database access list --project ULID [--environment dev|prod] --json",
   "database access revoke": "ohmyhost database access revoke --project ULID --access ULID --yes --json",
-  "database webhook create": "ohmyhost database webhook create --project ULID --environment dev|prod --url HTTPS_URL --event-types TYPE[,TYPE] [--headers-file PATH] --idempotency-key KEY --yes --json (the signing secret is shown once in this answer; types: database.created, database.ready, database.woke, database.slept, database.suspended, database.resized, database.deleted; the headers file is a UTF-8 JSON object of at most 8 KiB)",
+  "database watch create": "ohmyhost database watch create --project ULID --environment dev|prod --table NAME [--schema public] --columns COL[,COL] [--operations insert,update,delete] --idempotency-key KEY --yes --json (publishes only the listed columns, at most 32, of each row change as the event type data.<topic> printed in this answer; the table must exist as an ordinary table of the application; a sleeping database wakes; next, subscribe with 'ohmyhost database webhook create ... --event-types data.<topic>')",
+  "database watch list": "ohmyhost database watch list --project ULID [--environment dev|prod] --json (dev when omitted; a sleeping database wakes)",
+  "database watch delete": "ohmyhost database watch delete --project ULID --environment dev|prod --watch ID --idempotency-key KEY --yes --json",
+  "database table create": "ohmyhost database table create --project ULID --environment dev|prod --table NAME --columns-file PATH [--primary-key COL[,COL]] --idempotency-key KEY --yes --json (the table is created in the public schema as the migration role, with the same access as migration tables, so a database watch can attach later; the columns file is a UTF-8 JSON array of 1 to 64 column objects, at most 64 KiB, each with name, type and optional nullable, identity and default; types: text, integer, bigint, boolean, numeric, double precision, timestamptz, date, uuid, jsonb; identity needs integer or bigint; default now needs timestamptz and default uuid needs uuid; identical repeats answer created false; at most 100 tables, 64 columns per table)",
+  "database webhook create": "ohmyhost database webhook create --project ULID --environment dev|prod --url HTTPS_URL --event-types TYPE[,TYPE] [--headers-file PATH] --idempotency-key KEY --yes --json (the signing secret is shown once in this answer; types: database.created, database.ready, database.woke, database.slept, database.suspended, database.resized, database.deleted, data.<topic> for the rows of one watched table printed by database watch create, or data.* for every watched table; a bare * is not accepted and does not include data events; the headers file is a UTF-8 JSON object of at most 8 KiB)",
   "database webhook list": "ohmyhost database webhook list --project ULID [--environment dev|prod] --json (dev when omitted; the secret is never listed)",
   "database webhook get": "ohmyhost database webhook get --project ULID [--environment dev|prod] --webhook ID --json",
   "database webhook delete": "ohmyhost database webhook delete --project ULID --environment dev|prod --webhook ID --yes --json",
@@ -28566,12 +28837,12 @@ function buildClientParams(args, fields) {
   };
   const map = buildKeyMap(fields);
   function writeSlot(slot, key, value) {
-    let record8 = params[slot];
-    if (record8 === void 0) {
-      record8 = /* @__PURE__ */ Object.create(null);
-      params[slot] = record8;
+    let record9 = params[slot];
+    if (record9 === void 0) {
+      record9 = /* @__PURE__ */ Object.create(null);
+      params[slot] = record9;
     }
-    record8[key] = value;
+    record9[key] = value;
   }
   let config;
   for (const [index, arg] of args.entries()) {
@@ -31218,6 +31489,92 @@ var revokeProjectDatabaseAccess = (parameters, options) => {
     ...params
   });
 };
+var createProjectDatabaseTable = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { key: "databaseTableCreateRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/tables",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var listProjectDatabaseWatches = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "path", key: "project_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).get({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/watches",
+    ...options,
+    ...params
+  });
+};
+var createProjectDatabaseWatch = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { key: "databaseWatchCreateRequest", map: "body" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).post({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/watches",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers
+    }
+  });
+};
+var deleteProjectDatabaseWatch = (parameters, options) => {
+  const params = buildClientParams([parameters], [
+    {
+      args: [
+        { in: "headers", key: "X-Request-Id" },
+        { in: "headers", key: "Idempotency-Key" },
+        { in: "path", key: "project_id" },
+        { in: "path", key: "watch_id" },
+        { in: "query", key: "environment" }
+      ]
+    }
+  ]);
+  return (options?.client ?? client).delete({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/watches/{watch_id}",
+    ...options,
+    ...params
+  });
+};
 var listProjectDatabaseWebhooks = (parameters, options) => {
   const params = buildClientParams([parameters], [
     {
@@ -32622,7 +32979,25 @@ function checkedResponse(kind, value) {
 
 // apps/product-cli/dist/product-api.js
 var WEBHOOK_SCOPE_MISMATCH = "Webhook response scope mismatch";
+var WATCH_SCOPE_MISMATCH = "Watch response scope mismatch";
+var TABLE_SCOPE_MISMATCH = "Table response scope mismatch";
 var SCHEDULE_SCOPE_MISMATCH = "Schedule response scope mismatch";
+function assertDatabaseTableAnswer(value) {
+  const table = isRecordValue(value) ? value["table"] : void 0;
+  const columns = isRecordValue(table) ? table["columns"] : void 0;
+  const primaryKey = isRecordValue(table) ? table["primary_key"] : void 0;
+  if (!isRecordValue(table) || !hasExactKeys(table, ["environment", "schema", "table", "columns", "primary_key", "created"]) || table["environment"] !== "dev" && table["environment"] !== "prod" || table["schema"] !== "public" || !isDatabaseTableIdentifier(table["table"]) || typeof table["created"] !== "boolean" || !Array.isArray(columns) || columns.length < 1 || !columns.every(isDatabaseTableAnswerColumn) || !Array.isArray(primaryKey) || !primaryKey.every((name) => columns.some((column) => column["name"] === name)))
+    throw new TypeError("Invalid database table answer");
+}
+function isDatabaseTableAnswerColumn(value) {
+  return isRecordValue(value) && hasExactKeys(value, ["name", "type", "nullable", "identity", "default"]) && isDatabaseTableIdentifier(value["name"]) && DATABASE_TABLE_COLUMN_TYPES.includes(value["type"]) && typeof value["nullable"] === "boolean" && typeof value["identity"] === "boolean" && (value["default"] === null || DATABASE_TABLE_DEFAULTS.includes(value["default"]));
+}
+function isRecordValue(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function hasExactKeys(value, keys) {
+  return Object.keys(value).sort().join(",") === [...keys].sort().join(",");
+}
 var GeneratedSdkProductApi = class {
   #client;
   managedSource;
@@ -32819,6 +33194,58 @@ var GeneratedSdkProductApi = class {
     assertProjectDatabaseAccess(value);
     return value;
   }
+  async createProjectDatabaseWatch(input) {
+    const value = await createProjectDatabaseWatch({
+      project_id: input.projectId,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseWatchCreateRequest: {
+        environment: input.environment,
+        schema: input.request.schema,
+        table: input.request.table,
+        columns: [...input.request.columns],
+        operations: [...input.request.operations]
+      }
+    }, { client: this.#client });
+    assertDatabaseWatch(value);
+    if (value.environment !== input.environment || value.schema !== input.request.schema || value.table !== input.request.table)
+      throw new TypeError(WATCH_SCOPE_MISMATCH);
+    return value;
+  }
+  async listProjectDatabaseWatches(input) {
+    const value = await listProjectDatabaseWatches({ project_id: input.projectId, environment: input.environment }, { client: this.#client });
+    assertDatabaseWatchPage(value);
+    if (value.items.some((item) => item.environment !== input.environment))
+      throw new TypeError(WATCH_SCOPE_MISMATCH);
+    return value;
+  }
+  async deleteProjectDatabaseWatch(input) {
+    const value = await deleteProjectDatabaseWatch({
+      project_id: input.projectId,
+      environment: input.environment,
+      "Idempotency-Key": input.idempotencyKey,
+      watch_id: input.watchId
+    }, { client: this.#client });
+    assertDatabaseWatchDeleted(value);
+    if (value.id !== input.watchId)
+      throw new TypeError(WATCH_SCOPE_MISMATCH);
+    return value;
+  }
+  async createProjectDatabaseTable(input) {
+    const value = await createProjectDatabaseTable({
+      project_id: input.projectId,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseTableCreateRequest: {
+        environment: input.environment,
+        table: input.request.table,
+        columns: [...input.request.columns],
+        ...input.request.primaryKey.length === 0 ? {} : { primary_key: [...input.request.primaryKey] }
+      }
+    }, { client: this.#client });
+    assertDatabaseTableAnswer(value);
+    if (value.table.environment !== input.environment || value.table.table !== input.request.table)
+      throw new TypeError(TABLE_SCOPE_MISMATCH);
+    return value;
+  }
   /** The signing secret exists only in this answer; the CLI prints it once and stores nothing. */
   async createProjectDatabaseWebhook(input) {
     const value = await createProjectDatabaseWebhook({
@@ -34096,6 +34523,55 @@ var GeneratedSdkLocalMcpClient = class {
     requireScope(value.items.every((webhook) => webhook.environment === environment2));
     return value;
   }
+  async listDatabaseWatches(input) {
+    const environment2 = input.environment ?? "dev";
+    const value = await listProjectDatabaseWatches({ project_id: input.projectId, environment: environment2 }, { client: this.#client });
+    assertDatabaseWatchPage(value);
+    requireScope(value.items.every((watch) => watch.environment === environment2));
+    return value;
+  }
+  async createDatabaseWatch(input) {
+    const value = await createProjectDatabaseWatch({
+      project_id: input.projectId,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseWatchCreateRequest: {
+        environment: input.environment,
+        ...input.schema === void 0 ? {} : { schema: input.schema },
+        table: input.table,
+        columns: [...input.columns],
+        ...input.operations === void 0 ? {} : { operations: [...input.operations] }
+      }
+    }, { client: this.#client });
+    assertDatabaseWatch(value);
+    requireScope(value.environment === input.environment && value.table === input.table && value.schema === (input.schema ?? DATABASE_WATCH_DEFAULT_SCHEMA));
+    return value;
+  }
+  async createDatabaseTable(input) {
+    const value = await createProjectDatabaseTable({
+      project_id: input.projectId,
+      "Idempotency-Key": input.idempotencyKey,
+      databaseTableCreateRequest: {
+        environment: input.environment,
+        table: input.table,
+        columns: [...input.columns],
+        ...input.primaryKey === void 0 || input.primaryKey.length === 0 ? {} : { primary_key: [...input.primaryKey] }
+      }
+    }, { client: this.#client });
+    assertDatabaseTableAnswer(value);
+    requireScope(value.table.environment === input.environment && value.table.table === input.table);
+    return value;
+  }
+  async deleteDatabaseWatch(input) {
+    const value = await deleteProjectDatabaseWatch({
+      project_id: input.projectId,
+      environment: input.environment,
+      "Idempotency-Key": input.idempotencyKey,
+      watch_id: input.watchId
+    }, { client: this.#client });
+    assertDatabaseWatchDeleted(value);
+    requireScope(value.id === input.watchId);
+    return value;
+  }
   /** The signing secret exists only in this response and is never stored by the client. */
   async createDatabaseWebhook(input) {
     const value = await createProjectDatabaseWebhook({
@@ -34445,13 +34921,13 @@ function normalizeMcpSourceChanges(value) {
   }
 }
 function normalizeSourceChanges(value) {
-  const body = record7(value);
+  const body = record8(value);
   const changes = body["changes"];
   if (!Array.isArray(changes) || changes.length < 1 || changes.length > MANAGED_SOURCE_LIMITS.files)
     invalid7();
   let textBytes = 0;
   const normalized = changes.map((change) => {
-    const entry = record7(change);
+    const entry = record8(change);
     const hasText = Object.hasOwn(entry, "content_text");
     if (hasText === Object.hasOwn(entry, "content_base64"))
       invalid7();
@@ -34510,7 +34986,7 @@ function encodeBase64(bytes) {
     binary += String.fromCharCode(...bytes.subarray(offset, offset + 32768));
   return btoa(binary);
 }
-function record7(value) {
+function record8(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
     invalid7();
   return value;
@@ -34523,7 +34999,10 @@ function invalid7() {
 var identifier2 = external_exports.string().min(1).max(256);
 var databaseEnvironment = external_exports.enum(["dev", "prod"]);
 var databaseWebhookId = external_exports.string().regex(/^whk_[a-z0-9]{20}$/u);
+var databaseWatchId = external_exports.string().regex(/^pgcf_watch_[0-9a-f]{8}$/u);
+var databaseIdentifier = external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]{0,62}$/u);
 var databaseDeliveryId = external_exports.string().regex(/^dlv_[0-9a-f]{20}$/u);
+var databaseTableIdentifier = external_exports.string().refine(isDatabaseTableIdentifier);
 var databaseScheduleName = external_exports.string().regex(/^[a-z][a-z0-9_-]{0,62}$/u);
 var profileName = external_exports.string().regex(/^[a-z0-9][a-z0-9_-]{0,62}$/u).optional().describe("Saved login to act as (profile_list shows them). Needed only when several logins could run this call; OHMYHOST_PROFILE of this server must match it.");
 var idempotencyKey = external_exports.string().min(1).max(128);
@@ -34774,15 +35253,81 @@ function createLocalOhmyhostMcpServer(dependencies) {
     ...input.environment === void 0 ? {} : { environment: input.environment }
   }));
   registerProductTool(server, dependencies, "database_access_revoke", "Revoke one issued database credential immediately: open sessions end and its PostgreSQL role is removed. Revocation is idempotent and never touches application roles or data.", external_exports.object({ project_id: identifier2, access_id: identifier2 }), (client2, input) => client2.revokeDatabaseAccess({ projectId: input.project_id, accessId: input.access_id }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_watch_list", "List this project's database watches of one Dev or Prod environment (dev when omitted). Each watch shows its table, columns, operations and the event type data.<topic> it publishes. Listing wakes a sleeping database.", external_exports.object({ project_id: identifier2, environment: databaseEnvironment.optional() }), (client2, input) => client2.listDatabaseWatches({
+    projectId: input.project_id,
+    ...input.environment === void 0 ? {} : { environment: input.environment }
+  }));
+  registerProductTool(server, dependencies, "database_watch_create", "Publish row changes of one table of a Dev or Prod database as data events: only the listed columns (at most 32) of each insert, update or delete are published, with the event type data.<topic> returned by this call. Pass that event type to database_webhook_create. The table must exist as an ordinary table of the application, created by a deployed migration; a sleeping database wakes. Rows written before the watch exists are not published, and a published column must not be dropped while the watch exists. Requires confirmed: true and an idempotency key. Refused with project_budget_exceeded while the Stop budget is reached.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    schema: databaseIdentifier.refine(isDatabaseWatchSchema).optional(),
+    table: databaseIdentifier,
+    columns: external_exports.array(databaseIdentifier).min(1).max(32).refine((columns) => new Set(columns).size === columns.length),
+    operations: external_exports.array(external_exports.enum(DATABASE_WATCH_OPERATIONS)).min(1).max(3).refine((operations) => new Set(operations).size === operations.length).optional(),
+    idempotency_key: idempotencyKey,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.createDatabaseWatch({
+    projectId: input.project_id,
+    environment: input.environment,
+    ...input.schema === void 0 ? {} : { schema: input.schema },
+    table: input.table,
+    columns: input.columns,
+    ...input.operations === void 0 ? {} : { operations: input.operations },
+    idempotencyKey: input.idempotency_key
+  }), mutationAnnotations());
+  registerProductTool(server, dependencies, "database_watch_delete", "Remove the capture trigger of one database watch: its table publishes no more data events. Destructive: requires confirmed: true and an idempotency key. Deleting an already deleted watch answers not found.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    watch_id: databaseWatchId,
+    idempotency_key: idempotencyKey,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => client2.deleteDatabaseWatch({
+    projectId: input.project_id,
+    environment: input.environment,
+    watchId: input.watch_id,
+    idempotencyKey: input.idempotency_key
+  }), destructiveAnnotations());
+  registerProductTool(server, dependencies, "database_table_create", "Create one ordinary table in the public schema of a Dev or Prod database, as the migration role with the same access as migration tables, so a database_watch_create can attach later. Each column has a lower-case name, a type (text, integer, bigint, boolean, numeric, double precision, timestamptz, date, uuid or jsonb) and optional nullable, identity (integer or bigint only) and default (now for timestamptz, uuid for uuid); at most 64 columns, 8 primary-key columns and 100 tables per database. An identical repeat answers created: false; a table of the same name with another definition is refused with database_table_conflict. Tables created this way are not in the repository's migration files: record them in project notes and add a migration when the source should reproduce the database. Requires confirmed: true and an idempotency key. Refused with project_budget_exceeded while the Stop budget is reached.", external_exports.object({
+    project_id: identifier2,
+    environment: databaseEnvironment,
+    table: databaseTableIdentifier,
+    columns: external_exports.array(external_exports.object({
+      name: databaseTableIdentifier,
+      type: external_exports.enum(DATABASE_TABLE_COLUMN_TYPES),
+      nullable: external_exports.boolean().optional(),
+      identity: external_exports.boolean().optional(),
+      default: external_exports.enum(DATABASE_TABLE_DEFAULTS).optional()
+    })).min(1).max(DATABASE_TABLE_MAX_COLUMNS),
+    primary_key: external_exports.array(databaseTableIdentifier).min(1).max(DATABASE_TABLE_MAX_PRIMARY_KEY_COLUMNS).optional(),
+    idempotency_key: idempotencyKey,
+    confirmed: external_exports.literal(true)
+  }), (client2, input) => {
+    const request = parseDatabaseTableCreateRequest({
+      table: input.table,
+      columns: input.columns,
+      ...input.primary_key === void 0 ? {} : { primaryKey: input.primary_key }
+    });
+    return client2.createDatabaseTable({
+      projectId: input.project_id,
+      environment: input.environment,
+      table: request.table,
+      columns: input.columns,
+      ...request.primaryKey.length === 0 ? {} : { primaryKey: request.primaryKey },
+      idempotencyKey: input.idempotency_key
+    });
+  }, mutationAnnotations());
   registerProductTool(server, dependencies, "database_webhook_list", "List this project's database webhooks of one Dev or Prod environment (dev when omitted), without signing secrets. Each webhook lists its event types and header names only.", external_exports.object({ project_id: identifier2, environment: databaseEnvironment.optional() }), (client2, input) => client2.listDatabaseWebhooks({
     projectId: input.project_id,
     ...input.environment === void 0 ? {} : { environment: input.environment }
   }));
-  registerProductTool(server, dependencies, "database_webhook_create", "Subscribe one HTTPS receiver to database lifecycle events (database.created, ready, woke, slept, suspended, resized, deleted) of one Dev or Prod database. The signing secret is RETURNED EXACTLY ONCE: store it in a secret manager and never write it into files, notes, source, commit messages or later messages. Deliveries are signed, retried and dead-lettered when retries stop. At most five webhooks exist per project environment. Requires confirmed: true and an idempotency key; the same key with the same request returns the stored answer.", external_exports.object({
+  registerProductTool(server, dependencies, "database_webhook_create", "Subscribe one HTTPS receiver to database lifecycle events (database.created, ready, woke, slept, suspended, resized, deleted) of one Dev or Prod database, or to data events: data.<topic> for the rows of one watched table (the event type database_watch_create returns) or data.* for every watched table; a bare * never matches data events. The signing secret is RETURNED EXACTLY ONCE: store it in a secret manager and never write it into files, notes, source, commit messages or later messages. Deliveries are signed, retried and dead-lettered when retries stop. At most five webhooks exist per project environment. Requires confirmed: true and an idempotency key; the same key with the same request returns the stored answer.", external_exports.object({
     project_id: identifier2,
     environment: databaseEnvironment,
     url: external_exports.string().max(2048).regex(/^https:\/\//u),
-    event_types: external_exports.array(external_exports.enum(DATABASE_WEBHOOK_EVENT_TYPES)).min(1).max(16),
+    event_types: external_exports.array(external_exports.union([
+      external_exports.enum(DATABASE_WEBHOOK_EVENT_TYPES),
+      external_exports.string().regex(/^data\.(?:\*|[a-z][a-z0-9_]{0,47})$/u).refine(isDatabaseWebhookEventPattern)
+    ])).min(1).max(16),
     headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
     idempotency_key: idempotencyKey,
     confirmed: external_exports.literal(true)