@keboola/api-client 32.0.0 → 34.0.0

package/dist/index.d.cts

@@ -1,7 +1,8 @@
-import { D as ApiError, S as isHtmlResponseError, T as MiddlewareFn, _ as ValidationError, b as ManagementClientAuthError, d as HttpContentType, f as HttpHeader, g as isFetchClientError, h as isApiError, m as isAbortError, p as FetchClientError, u as createGenericFetchClient, v as isValidationError, x as HtmlResponseError, y as parseOrThrow } from "./index-CQrKS7PV.cjs";
-import { $ as generateUUID, A as LegacySession, At as TaskFn, B as createPersistor, Bt as isKeboolaError, C as LogLevel, Ct as delay, D as ResponseLog, Dt as CollectOptions, E as RequestLog, Et as concurrent, Ft as createMemoryStorage, G as Emitter, Gt as isSyncActionError, H as isEmptyDeep, Ht as isStorageTokenMutatingRequest, It as createNullStorage, J as createDerivedAsyncStore, Jt as isQueryJobTimeoutError, K as ReadableStore, Kt as ServiceUnavailableError, L as createLegacyKeboola, Lt as createSessionStorage, Mt as KeboolaOptions, Nt as StorageAdapter, O as createLoggingMiddleware, Ot as collect, Pt as createLocalStorage, Q as shallowEqual, R as createKeboola, Rt as KeboolaError, S as Log, St as lazy, T as LoggingOptions, Tt as ConcurrentOptions, U as isPlainObject, V as deepMerge, Vt as ClientContext, W as AsyncState, Wt as SyncActionError, X as createEmitter, Xt as isQueryJobError, Y as createDerivedStore, Yt as QueryJobError, Z as createStore, Zt as UserError, _t as PollContext, at as createPollRegistry, b as RetryOptions, bt as PollResult, ct as PollState, dt as PollerStartFn, et as Result, ft as PollerStopFn, gt as poller, h as createStorageSdk, ht as poll, i as createQueryServiceSdk, it as PollRegistry, j as KeboolaApi, jt as assert, k as BearerSession, kt as coalesce, lt as PollTask, mt as failureOf, nt as series, ot as ObservedPoller, pt as emitter, q as Store, qt as QueryJobTimeoutError, rt as PollEntry, st as PollSnapshot, tt as asError, ut as Poller, v as jobStatus, vt as PollKey, w as Logger, wt as dedupe, x as createRetryMiddleware, xt as PollTick, y as KeboolaHttpHeader, yt as PollOptions, z as Persistor, zt as KeboolaErrorType } from "./index-Bjk-tCpG.cjs";
-import { r as AuthStrategy, t as BaseClientOptions } from "./types-BREGN3qo.cjs";
-import { n as parseLogLines } from "./appLogs-BAaaGYKg.cjs";
-import { t as isManagementClientAuthError } from "./index-D_7yCRKy.cjs";
+import { C as HtmlResponseError, D as MiddlewareFn, S as ManagementClientAuthError, _ as isTimeoutError, b as isValidationError, d as HttpContentType, f as HttpHeader, g as isFetchClientError, h as isApiError, k as ApiError, m as isAbortError, p as FetchClientError, u as createGenericFetchClient, v as ValidationError, w as isHtmlResponseError, x as parseOrThrow, y as formatValidationIssues } from "./index-V7XKUQm9.cjs";
+import { $ as createDerivedStore, A as LegacySession, At as delay, Bt as KeboolaErrorType, C as LogLevel, Ct as poller, D as ResponseLog, Dt as PollResult, E as RequestLog, Et as PollOptions, F as ProjectClients, Ft as collect, G as createMemoryStorage, Gt as SyncActionError, H as createPersistor, Ht as ClientContext, It as coalesce, J as deepMerge, Jt as QueryJobTimeoutError, K as createNullStorage, Kt as isSyncActionError, Lt as TaskFn, M as createKeboola, Mt as ConcurrentOptions, N as KeboolaOptions, Nt as concurrent, O as createLoggingMiddleware, Ot as PollTick, P as KeboolaApi, Pt as CollectOptions, Q as createDerivedAsyncStore, Qt as UserError, Rt as assert, S as Log, St as poll, T as LoggingOptions, Tt as PollKey, U as StorageAdapter, Ut as isStorageTokenMutatingRequest, V as Persistor, Vt as isKeboolaError, W as createLocalStorage, X as isPlainObject, Xt as QueryJobError, Y as isEmptyDeep, Yt as isQueryJobTimeoutError, Z as AsyncState, Zt as isQueryJobError, _t as Poller, at as Failure, b as RetryOptions, bt as emitter, ct as asError, dt as PollRegistry, et as shallowEqual, ft as createPollRegistry, gt as PollTask, h as createStorageSdk, ht as PollState, i as createQueryServiceSdk, it as generateUUID, j as createLegacyKeboola, jt as dedupe, k as BearerSession, kt as lazy, lt as series, mt as PollSnapshot, nt as Store, ot as Result, pt as ObservedPoller, q as createSessionStorage, qt as ServiceUnavailableError, rt as createStore, st as Success, tt as ReadableStore, ut as PollEntry, v as jobStatus, vt as PollerStartFn, w as Logger, wt as PollContext, x as createRetryMiddleware, xt as failureOf, y as KeboolaHttpHeader, yt as PollerStopFn, zt as KeboolaError } from "./index-BLx14ZI4.cjs";
+import { r as AuthStrategy, t as BaseClientOptions } from "./types-_RhBCj4_.cjs";
+import { n as parseLogLines } from "./appLogs-D5A13Y0y.cjs";
+import { t as isManagementClientAuthError } from "./index-Dodwl64k.cjs";
+import { r as createEmitter, t as Emitter } from "./emitter-dLF1Fyfg.cjs";
 import { n as KeboolaObjectId, r as keboolaUID, t as schemaGuidedMerge } from "./index-NC1dXRTD.cjs";
-export { ApiError, AsyncState, type AuthStrategy, type BaseClientOptions, BearerSession, type ClientContext, CollectOptions, ConcurrentOptions, Emitter, type FetchClientError, HtmlResponseError, HttpContentType, HttpHeader, type KeboolaApi, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, KeboolaObjectId, type KeboolaOptions, LegacySession, Log, LogLevel, Logger, LoggingOptions, ManagementClientAuthError, MiddlewareFn, ObservedPoller, Persistor, type PollContext, PollEntry, type PollKey, type PollOptions, PollRegistry, type PollResult, PollSnapshot, PollState, PollTask, type PollTick, Poller, PollerStartFn, PollerStopFn, QueryJobError, QueryJobTimeoutError, ReadableStore, RequestLog, ResponseLog, Result, RetryOptions, ServiceUnavailableError, type StorageAdapter, Store, SyncActionError, TaskFn, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };
+export { ApiError, type AsyncState, type AuthStrategy, type BaseClientOptions, BearerSession, type ClientContext, CollectOptions, ConcurrentOptions, type Emitter, Failure, type FetchClientError, HtmlResponseError, HttpContentType, HttpHeader, type KeboolaApi, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, KeboolaObjectId, type KeboolaOptions, LegacySession, Log, LogLevel, Logger, LoggingOptions, ManagementClientAuthError, MiddlewareFn, ObservedPoller, Persistor, type PollContext, PollEntry, type PollKey, type PollOptions, PollRegistry, type PollResult, PollSnapshot, PollState, PollTask, type PollTick, Poller, PollerStartFn, PollerStopFn, type ProjectClients, QueryJobError, QueryJobTimeoutError, type ReadableStore, RequestLog, ResponseLog, Result, RetryOptions, ServiceUnavailableError, type StorageAdapter, type Store, Success, SyncActionError, TaskFn, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, formatValidationIssues, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isTimeoutError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };

package/dist/index.d.ts

@@ -1,7 +1,8 @@
-import { D as ApiError, S as isHtmlResponseError, T as MiddlewareFn, _ as ValidationError, b as ManagementClientAuthError, d as HttpContentType, f as HttpHeader, g as isFetchClientError, h as isApiError, m as isAbortError, p as FetchClientError, u as createGenericFetchClient, v as isValidationError, x as HtmlResponseError, y as parseOrThrow } from "./index-CeJOmN-P.js";
-import { $ as generateUUID, A as LegacySession, At as TaskFn, B as createPersistor, Bt as isKeboolaError, C as LogLevel, Ct as delay, D as ResponseLog, Dt as CollectOptions, E as RequestLog, Et as concurrent, Ft as createMemoryStorage, G as Emitter, Gt as isSyncActionError, H as isEmptyDeep, Ht as isStorageTokenMutatingRequest, It as createNullStorage, J as createDerivedAsyncStore, Jt as isQueryJobTimeoutError, K as ReadableStore, Kt as ServiceUnavailableError, L as createLegacyKeboola, Lt as createSessionStorage, Mt as KeboolaOptions, Nt as StorageAdapter, O as createLoggingMiddleware, Ot as collect, Pt as createLocalStorage, Q as shallowEqual, R as createKeboola, Rt as KeboolaError, S as Log, St as lazy, T as LoggingOptions, Tt as ConcurrentOptions, U as isPlainObject, V as deepMerge, Vt as ClientContext, W as AsyncState, Wt as SyncActionError, X as createEmitter, Xt as isQueryJobError, Y as createDerivedStore, Yt as QueryJobError, Z as createStore, Zt as UserError, _t as PollContext, at as createPollRegistry, b as RetryOptions, bt as PollResult, ct as PollState, dt as PollerStartFn, et as Result, ft as PollerStopFn, gt as poller, h as createStorageSdk, ht as poll, i as createQueryServiceSdk, it as PollRegistry, j as KeboolaApi, jt as assert, k as BearerSession, kt as coalesce, lt as PollTask, mt as failureOf, nt as series, ot as ObservedPoller, pt as emitter, q as Store, qt as QueryJobTimeoutError, rt as PollEntry, st as PollSnapshot, tt as asError, ut as Poller, v as jobStatus, vt as PollKey, w as Logger, wt as dedupe, x as createRetryMiddleware, xt as PollTick, y as KeboolaHttpHeader, yt as PollOptions, z as Persistor, zt as KeboolaErrorType } from "./index-FhKX7Cv1.js";
-import { r as AuthStrategy, t as BaseClientOptions } from "./types-DwpRt3e9.js";
-import { n as parseLogLines } from "./appLogs-DX_WTBCa.js";
-import { t as isManagementClientAuthError } from "./index-Ctqkm3Fx.js";
+import { C as HtmlResponseError, D as MiddlewareFn, S as ManagementClientAuthError, _ as isTimeoutError, b as isValidationError, d as HttpContentType, f as HttpHeader, g as isFetchClientError, h as isApiError, k as ApiError, m as isAbortError, p as FetchClientError, u as createGenericFetchClient, v as ValidationError, w as isHtmlResponseError, x as parseOrThrow, y as formatValidationIssues } from "./index-KuQ79Mnz.js";
+import { $ as createDerivedStore, A as LegacySession, At as delay, Bt as KeboolaErrorType, C as LogLevel, Ct as poller, D as ResponseLog, Dt as PollResult, E as RequestLog, Et as PollOptions, F as ProjectClients, Ft as collect, G as createMemoryStorage, Gt as SyncActionError, H as createPersistor, Ht as ClientContext, It as coalesce, J as deepMerge, Jt as QueryJobTimeoutError, K as createNullStorage, Kt as isSyncActionError, Lt as TaskFn, M as createKeboola, Mt as ConcurrentOptions, N as KeboolaOptions, Nt as concurrent, O as createLoggingMiddleware, Ot as PollTick, P as KeboolaApi, Pt as CollectOptions, Q as createDerivedAsyncStore, Qt as UserError, Rt as assert, S as Log, St as poll, T as LoggingOptions, Tt as PollKey, U as StorageAdapter, Ut as isStorageTokenMutatingRequest, V as Persistor, Vt as isKeboolaError, W as createLocalStorage, X as isPlainObject, Xt as QueryJobError, Y as isEmptyDeep, Yt as isQueryJobTimeoutError, Z as AsyncState, Zt as isQueryJobError, _t as Poller, at as Failure, b as RetryOptions, bt as emitter, ct as asError, dt as PollRegistry, et as shallowEqual, ft as createPollRegistry, gt as PollTask, h as createStorageSdk, ht as PollState, i as createQueryServiceSdk, it as generateUUID, j as createLegacyKeboola, jt as dedupe, k as BearerSession, kt as lazy, lt as series, mt as PollSnapshot, nt as Store, ot as Result, pt as ObservedPoller, q as createSessionStorage, qt as ServiceUnavailableError, rt as createStore, st as Success, tt as ReadableStore, ut as PollEntry, v as jobStatus, vt as PollerStartFn, w as Logger, wt as PollContext, x as createRetryMiddleware, xt as failureOf, y as KeboolaHttpHeader, yt as PollerStopFn, zt as KeboolaError } from "./index-DFBFa3SS.js";
+import { r as AuthStrategy, t as BaseClientOptions } from "./types-Ct0YPy2w.js";
+import { n as parseLogLines } from "./appLogs-Ch7DYpzx.js";
+import { t as isManagementClientAuthError } from "./index-P-iT5THa.js";
+import { r as createEmitter, t as Emitter } from "./emitter-dLF1Fyfg.js";
 import { n as KeboolaObjectId, r as keboolaUID, t as schemaGuidedMerge } from "./index-NC1dXRTD.js";
-export { ApiError, AsyncState, type AuthStrategy, type BaseClientOptions, BearerSession, type ClientContext, CollectOptions, ConcurrentOptions, Emitter, type FetchClientError, HtmlResponseError, HttpContentType, HttpHeader, type KeboolaApi, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, KeboolaObjectId, type KeboolaOptions, LegacySession, Log, LogLevel, Logger, LoggingOptions, ManagementClientAuthError, MiddlewareFn, ObservedPoller, Persistor, type PollContext, PollEntry, type PollKey, type PollOptions, PollRegistry, type PollResult, PollSnapshot, PollState, PollTask, type PollTick, Poller, PollerStartFn, PollerStopFn, QueryJobError, QueryJobTimeoutError, ReadableStore, RequestLog, ResponseLog, Result, RetryOptions, ServiceUnavailableError, type StorageAdapter, Store, SyncActionError, TaskFn, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };
+export { ApiError, type AsyncState, type AuthStrategy, type BaseClientOptions, BearerSession, type ClientContext, CollectOptions, ConcurrentOptions, type Emitter, Failure, type FetchClientError, HtmlResponseError, HttpContentType, HttpHeader, type KeboolaApi, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, KeboolaObjectId, type KeboolaOptions, LegacySession, Log, LogLevel, Logger, LoggingOptions, ManagementClientAuthError, MiddlewareFn, ObservedPoller, Persistor, type PollContext, PollEntry, type PollKey, type PollOptions, PollRegistry, type PollResult, PollSnapshot, PollState, PollTask, type PollTick, Poller, PollerStartFn, PollerStopFn, type ProjectClients, QueryJobError, QueryJobTimeoutError, type ReadableStore, RequestLog, ResponseLog, Result, RetryOptions, ServiceUnavailableError, type StorageAdapter, type Store, Success, SyncActionError, TaskFn, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, formatValidationIssues, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isTimeoutError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };

package/dist/index.js

@@ -1,49 +1,50 @@
 import { t as createProject } from "./project-DWwZv66D.js";
-import { a as poller, c as Result, d as delay, i as poll, l as asError, n as emitter, o as clamp, r as failureOf, s as finiteOr, t as jobStatus, u as lazy } from "./jobStatus-DbMupQEK.js";
-import { n as collect, t as createQueueClient } from "./queue-DViSQ-eq.js";
+import { a as poller, c as Result, d as delay, i as poll, l as asError, n as emitter, o as clamp, r as failureOf, s as finiteOr, t as jobStatus, u as lazy } from "./jobStatus-PSZJMTiA.js";
+import { n as collect, t as createQueueClient } from "./queue-DyotLFJi.js";
 import { t as concurrent } from "./concurrent-CH9fbNr3.js";
 import { t as dedupe } from "./dedupe-DYIHgZoG.js";
-import { a as shallowEqual, i as createStore, n as createDerivedStore, r as createEmitter, t as createDerivedAsyncStore } from "./createStore-BNiCRQXa.js";
-import { a as series, i as ServiceUnavailableError, t as createStorageClient } from "./storage-kgxscFEg.js";
+import { n as createEmitter, t as createStore } from "./store-C9FQCHGe.js";
+import { a as series, i as ServiceUnavailableError, t as createStorageClient } from "./storage-LYwFQPNO.js";
 import { n as keboolaUID, t as createTagSdk } from "./tag-DCsoewjL.js";
 import { t as generateUUID } from "./generateUUID-Dr8l-aoc.js";
 import { t as isPlainObject } from "./isPlainObject-LYW-03uB.js";
-import { n as schemaGuidedMerge, r as isEmptyDeep, t as createConfigurationSdk } from "./configurations-ZwBXilW-.js";
+import { n as schemaGuidedMerge, r as isEmptyDeep, t as createConfigurationSdk } from "./configurations-VtNE0nrT.js";
 import { t as UserError } from "./UserError-By_Zckmc.js";
-import { a as HttpContentType, f as HttpStatus, i as isFetchClientError, l as normalizeBaseUrl, m as ApiError, n as isAbortError, o as HttpHeader, p as KeboolaHttpHeader, r as isApiError } from "./createFetchClient-BbG46bL0.js";
-import { n as HtmlResponseError, r as isHtmlResponseError } from "./validateConnectionStatus-BrLXkoSI.js";
-import { t as ManagementClientAuthError } from "./ManagementClientAuthError-BAFNvOdf.js";
+import { a as isTimeoutError, d as normalizeBaseUrl, g as ApiError, h as KeboolaHttpHeader, i as isFetchClientError, m as HttpStatus, n as isAbortError, o as HttpContentType, r as isApiError, s as HttpHeader } from "./createFetchClient-U-ZrwPl2.js";
+import { n as HtmlResponseError, r as isHtmlResponseError } from "./validateConnectionStatus-olE2sQ3U.js";
+import { t as ManagementClientAuthError } from "./ManagementClientAuthError-ey-f03vy.js";
 import { i as isQueryJobError, n as isQueryJobTimeoutError, r as QueryJobError, t as QueryJobTimeoutError } from "./QueryJobTimeoutError-C7JbNGOM.js";
 import { n as isSyncActionError, t as SyncActionError } from "./SyncActionError-CoZFsdUk.js";
-import { n as isValidationError, r as parseOrThrow, t as ValidationError } from "./ValidationError-CzPWydEb.js";
-import { t as createGenericFetchClient } from "./createGenericFetchClient-BHYQLZhe.js";
-import { t as createImportClient } from "./import-SQuurg1G.js";
-import { t as createAuthClient } from "./authClient--BtZgjIc.js";
-import { n as isManagementClientAuthError, t as createManagementClient } from "./management-CIFhu1Nm.js";
-import { s as ProjectFeature } from "./constants-ByEwVtGf.js";
+import { i as parseOrThrow, n as formatValidationIssues, r as isValidationError, t as ValidationError } from "./ValidationError-BekhphAq.js";
+import { t as createGenericFetchClient } from "./createGenericFetchClient-rxvUUbap.js";
+import { t as createImportClient } from "./import-CROEK82b.js";
+import { t as createAuthClient } from "./authClient-D7W9vWPR.js";
+import { n as isManagementClientAuthError, t as createManagementClient } from "./management-Bp440RsV.js";
+import { s as ProjectFeature } from "./constants-wfbFsqqN.js";
 import { t as createStorageTable } from "./storageTable-DslXtqNL.js";
-import { createSemanticLayerSdk } from "./sdk/semanticLayer/index.js";
+import { a as createSemanticLayerSdk } from "./semanticLayer-CSqmtHRo.js";
 import { createStorageSdk } from "./sdk/storage/index.js";
 import { createVaultSdk } from "./sdk/vault/index.js";
 import { createAiClient } from "./ai/index.js";
-import { t as parseLogLines } from "./appLogs-DTLE6HTy.js";
+import { t as parseLogLines } from "./appLogs-xsVkTriU.js";
 import { createAppsClient } from "./apps/index.js";
+import { createBillingClient } from "./billing/index.js";
 import { createChatClient } from "./chat/index.js";
-import { t as createDataScienceClient } from "./dataScience-Sm8iONhP.js";
+import { t as createDataScienceClient } from "./dataScience-C1gO5zUn.js";
 import { createEditorClient } from "./editor/index.js";
 import { createEncryptionClient } from "./encryption/index.js";
-import { t as createKaiAgentClient } from "./kaiAgent-HDaFS9BR.js";
-import { t as createMetastoreClient } from "./metastore-CrXkKufo.js";
+import { t as createKaiAgentClient } from "./kaiAgent-8LNzGhZc.js";
+import { t as createMetastoreClient } from "./metastore-VCDRVhUT.js";
 import { createNotificationsClient } from "./notifications/index.js";
-import { t as createOauthClient } from "./oauth-CFwSNz37.js";
+import { t as createOauthClient } from "./oauth--asfePw-.js";
 import { createOmnisearchClient } from "./omnisearch/index.js";
-import { t as createQueryServiceClient } from "./queryService-DK-jUnET.js";
+import { t as createQueryServiceClient } from "./queryService-Ca65E5KH.js";
 import { createSchedulerClient } from "./scheduler/index.js";
 import { createStreamClient } from "./stream/index.js";
-import { t as createSyncActionsClient } from "./syncActions-B75t0NwP.js";
-import { t as createTelemetryClient } from "./telemetry-FXpodtJN.js";
+import { t as createSyncActionsClient } from "./syncActions-QeBhIVhG.js";
+import { createTelemetryClient } from "./telemetry/index.js";
 import { createVaultClient } from "./vault/index.js";
-import { n as isUnauthorized, t as createBearerCredential } from "./credential-d2RDcXRB.js";
+import { n as isUnauthorized, t as createBearerCredential } from "./credential-CihSf_xs.js";
 import { createQueryServiceSdk } from "./sdk/queryService/index.js";
 import * as z$1 from "zod";
 //#region src/utils/assert.ts
@@ -91,6 +92,111 @@ const coalesce = (task) => {
 	};
 };
 //#endregion
+//#region src/utils/store/derivedStore.ts
+const isPlainObjectOrArray = (value) => {
+	if (Array.isArray(value)) return true;
+	const proto = Object.getPrototypeOf(value);
+	return proto === Object.prototype || proto === null;
+};
+const shallowEqual = (a, b) => {
+	if (Object.is(a, b)) return true;
+	if (typeof a !== "object" || a === null || typeof b !== "object" || b === null) return false;
+	if (!isPlainObjectOrArray(a) || !isPlainObjectOrArray(b)) return false;
+	const aKeys = Object.keys(a);
+	const bKeys = Object.keys(b);
+	return aKeys.length === bKeys.length && aKeys.every((key) => Object.is(a[key], b[key]));
+};
+const createDerivedStore = ({ source, dependsOn, build, keyEquals = shallowEqual }) => {
+	let key = dependsOn(source.get());
+	const store = createStore(build(key));
+	const unsubscribe = source.subscribe((state) => {
+		const next = dependsOn(state);
+		if (keyEquals(key, next)) return;
+		key = next;
+		store.set(build(next));
+	});
+	const get = store.get;
+	const subscribe = store.subscribe;
+	const dispose = () => {
+		unsubscribe();
+		store.dispose();
+	};
+	return {
+		get,
+		subscribe,
+		dispose
+	};
+};
+//#endregion
+//#region src/utils/store/derivedAsyncStore.ts
+const createDerivedAsyncStore = ({ source, dependsOn, build, keyEquals = shallowEqual }) => {
+	const store = createStore({ state: "idle" });
+	let currentKey = null;
+	let generation = 0;
+	let controller = null;
+	const run = (key) => {
+		controller?.abort();
+		controller = new AbortController();
+		const runGeneration = ++generation;
+		store.set({ state: "pending" });
+		build(key, controller.signal).then((value) => {
+			if (runGeneration === generation) store.set({
+				state: "ready",
+				value
+			});
+		}, (error) => {
+			if (runGeneration === generation) store.set({
+				state: "errored",
+				error
+			});
+		});
+	};
+	const sync = (state) => {
+		const next = dependsOn(state);
+		if (next === null) {
+			if (currentKey === null) return;
+			controller?.abort();
+			controller = null;
+			generation += 1;
+			currentKey = null;
+			store.set({ state: "idle" });
+			return;
+		}
+		if (currentKey !== null && keyEquals(currentKey, next)) return;
+		currentKey = next;
+		run(next);
+	};
+	sync(source.get());
+	const unsubscribe = source.subscribe(sync);
+	const get = store.get;
+	const subscribe = store.subscribe;
+	const dispose = () => {
+		controller?.abort();
+		unsubscribe();
+		store.dispose();
+	};
+	const readable = {
+		get,
+		subscribe,
+		dispose
+	};
+	const settled = () => new Promise((resolve) => {
+		let unsubscribeSettled = () => {};
+		const check = (state) => {
+			if (state.state === "ready" || state.state === "errored") {
+				unsubscribeSettled();
+				resolve(state);
+			}
+		};
+		unsubscribeSettled = store.subscribe(check);
+		check(store.get());
+	});
+	return {
+		store: readable,
+		settled
+	};
+};
+//#endregion
 //#region src/utils/async/poll/registry.ts
 const DEFAULT_LIMIT = 50;
 const isFinished = ({ snapshot }) => snapshot.state !== "idle" && snapshot.state !== "polling";
@@ -601,6 +707,7 @@ const stamp = (tokens) => ({
 const createConfig$1 = (initial = INITIAL) => {
 	const store = createStore(initial);
 	let expiredNotified = false;
+	let epoch = 0;
 	const setBaseUrl = (baseUrl) => {
 		if (store.get().status !== "anonymous") throw new KeboolaError(KeboolaErrorType.AlreadyAuthenticated);
 		store.set({
@@ -613,6 +720,7 @@ const createConfig$1 = (initial = INITIAL) => {
 		if (state.status !== "anonymous") throw new KeboolaError(KeboolaErrorType.AlreadyAuthenticated);
 		if (!state.baseUrl) throw new KeboolaError(KeboolaErrorType.Unconfigured);
 		expiredNotified = false;
+		epoch += 1;
 		store.set({
 			status: "authenticated",
 			baseUrl: state.baseUrl,
@@ -646,6 +754,7 @@ const createConfig$1 = (initial = INITIAL) => {
 	};
 	/** Drop the credential (sign out); keeps the configured baseUrl. */
 	const reset = () => {
+		epoch += 1;
 		store.set({
 			status: "anonymous",
 			baseUrl: store.get().baseUrl
@@ -687,6 +796,15 @@ const createConfig$1 = (initial = INITIAL) => {
 	};
 	const getBaseUrl = () => store.get().baseUrl;
 	/**
+	* Which sign-in this is — a counter, bumped by `authenticate` and `reset`.
+	*
+	* - For anything long-lived that must not outlive the credential it was built against: capture it,
+	*   compare it later. A rotation does not move it; only a new session or a sign-out does.
+	* - Distinct from `notifyExpired`'s latch, which answers "report this death once" rather than
+	*   "which session are we in".
+	*/
+	const getEpoch = () => epoch;
+	/**
 	* Session-expiry latch (fire-once):
 	* - why: concurrent 401s all report expiry, but the app must sign out once; and the credential /
 	*   auth middleware are long-lived singletons, so the latch can't live in them — it must reset
@@ -715,6 +833,7 @@ const createConfig$1 = (initial = INITIAL) => {
 		forceExpire,
 		requireCredential,
 		getBaseUrl,
+		getEpoch,
 		notifyExpired,
 		debug
 	};
@@ -1005,6 +1124,14 @@ const createServiceClients = ({ baseUrl, auth, getServiceBaseUrl, middlewareFor,
 		middlewares: middlewareFor("notifications", [attachTokenMiddleware]),
 		auth
 	})
+}).add({
+	serviceId: "billing",
+	clientName: "billing",
+	clientFn: (serviceBaseUrl) => createBillingClient({
+		baseUrl: serviceBaseUrl,
+		middlewares: middlewareFor("billing", [attachTokenMiddleware]),
+		auth
+	})
 }).add({
 	serviceId: "metastore",
 	clientName: "metastore",
@@ -1185,7 +1312,12 @@ const createKeboola = (options = {}) => {
 	const refresh = async () => {
 		const client = authClientBare.get();
 		assert$1(client, KeboolaErrorType.NotReady);
-		const refreshed = await client.token.refresh(config.requireCredential().refreshToken);
+		const epoch = config.getEpoch();
+		const refreshed = await client.token.refresh(config.requireCredential().refreshToken).catch((error) => {
+			if (config.getEpoch() !== epoch) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+			throw error;
+		});
+		if (config.getEpoch() !== epoch) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
 		config.applyRefresh(refreshed);
 		return refreshed.accessToken;
 	};
@@ -1201,8 +1333,49 @@ const createKeboola = (options = {}) => {
 			}
 		};
 	};
+	/**
+	* The session's state, once it is known to carry a credential.
+	*
+	* - Returns the state rather than nothing, so the caller reads `baseUrl` and `credential` off a
+	*   narrowed union instead of re-checking the status to get at them.
+	* - `NotAuthenticated`, the same refusal `requireScopedProject` opens with. The two differ only in
+	*   how far they go: this one stops at "somebody is signed in", which is all a request naming its
+	*   own project needs.
+	*/
+	const requireAuthenticated = () => {
+		const state = config.store.get();
+		if (state.status === "anonymous") throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+		return state;
+	};
+	/**
+	* The project this session is scoped to, right now.
+	*
+	* - Read at every point that stamps a project, never snapshotted across an `await`: the scope moves
+	*   with `setProject`/`clearProject`, and neither ends the session, so it is not in the epoch and
+	*   `assertSameSession` cannot see it change.
+	* - `NotReady` rather than `NotAuthenticated` when merely unscoped — the credential is fine, the
+	*   project is what is missing. A credential alone does not authorize a project request: kai-agent
+	*   reads the project from the header, not the token, and cannot attribute a call that omits it.
+	*/
+	const requireScopedProject = () => {
+		const state = requireAuthenticated();
+		if (state.status !== "scoped") throw new KeboolaError(KeboolaErrorType.NotReady);
+		return state.projectId;
+	};
+	/**
+	* The project client sets `forProject` has handed out, keyed by project id.
+	*
+	* - Not keyed by stack: `setBaseUrl` throws once authenticated and `signOut` empties this, so one
+	*   entry can never belong to a different `baseUrl` than the live session.
+	* - A `lazy` per key, not a bare promise: concurrent callers share one bootstrap, later ones replay
+	*   the resolved set, and a rejected build clears only its own slot — so a build orphaned by a
+	*   sign-out cannot evict the entry that replaced it.
+	*/
+	const extraProjects = /* @__PURE__ */ new Map();
 	const signOut = () => {
 		config.reset();
+		credential.abandonRefresh();
+		extraProjects.clear();
 		persistor.clear();
 	};
 	const onSessionExpired = () => {
@@ -1213,13 +1386,75 @@ const createKeboola = (options = {}) => {
 		getToken,
 		onSessionExpired
 	});
-	const authMiddleware = createBearerAuthMiddleware(credential);
+	const sessionGuard = (epoch) => () => {
+		if (config.getEpoch() !== epoch) throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+	};
+	/**
+	* The auth middleware, refusing to carry a request across a change of session.
+	*
+	* - The middleware holds no token — it reads the credential live — so anything built on it acts as
+	*   whoever is signed in *at request time*, not whoever built it. Rebuilding a store on sign-out
+	*   only stops new reads; a request already in flight completes as the next user, still stamped
+	*   with the old project. `config`'s epoch moves on `authenticate` and `reset` and never on a
+	*   rotation, so it is exactly "which sign-in is this".
+	* - `epochFor` says which sign-in a request answers to, resolved per request:
+	*   1. a client set pins to the sign-in that *built* it (`pinToSession`) — a set the caller still
+	*      holds must not ride the session that replaced it;
+	*   2. `api.auth` pins to the sign-in the request *started* on, because its store is keyed on
+	*      `baseUrl` alone: it is built once, while anonymous, so a build-time pin would freeze at that
+	*      epoch and refuse every authenticated call.
+	* - The guard covers every credential read, not only the wire request, so it wraps the credential
+	*   rather than sitting beside it. The 401 path rotates the token by calling the credential
+	*   directly: a straggler from a dead session would otherwise spend the *live* session's
+	*   single-use refresh token, and sign that session out if the rotation itself came back 401.
+	* - `expiresSession` decides whether a 401 that survives a rotation means the session is dead.
+	*   True for this session's own realms; false where the 401 may be about the project instead of
+	*   the credential (see `forProject`).
+	* - `inner` is for middleware that **re-invokes `next`** — a retry. Composed outside the pin it
+	*   would re-enter it per attempt, and with a per-request `epochFor` each attempt would re-pin to
+	*   whoever is signed in by then: a 503 backoff is exactly long enough for a sign-out to land, and
+	*   the retry then goes out as the next user. Inside, one epoch covers every attempt and each
+	*   attempt still passes the guard. Anything new that retries belongs here, not in the array.
+	*/
+	const createPinnedAuthMiddleware = (epochFor, { expiresSession = true, inner = [] } = {}) => {
+		return (next) => (request) => {
+			const assertSameSession = sessionGuard(epochFor());
+			const pinnedCredential = {
+				...credential,
+				getAccessToken: async (options) => {
+					assertSameSession();
+					return credential.getAccessToken(options);
+				},
+				notifyExpired: expiresSession ? credential.notifyExpired : () => {}
+			};
+			const guarded = (wire) => (repeated) => {
+				assertSameSession();
+				return wire(repeated);
+			};
+			const chain = inner.reduceRight((acc, middleware) => middleware(acc), guarded(next));
+			return createBearerAuthMiddleware(pinnedCredential)(chain)(request);
+		};
+	};
+	/**
+	* Pin something long-lived to the sign-in live right now.
+	*
+	* - `assertSameSession` is for whatever no middleware chain covers: a bootstrap whose every
+	*   request passed the guard before the sign-out resolves anyway and must not be handed back, and
+	*   `getAuthHeaders`, which emits the credential by hand.
+	*/
+	const pinToSession = (options) => {
+		const epoch = config.getEpoch();
+		return {
+			assertSameSession: sessionGuard(epoch),
+			pinnedAuthMiddleware: createPinnedAuthMiddleware(() => epoch, options)
+		};
+	};
 	const authClient = createDerivedStore({
 		source: config.store,
 		dependsOn: (state) => state.baseUrl,
 		build: (baseUrl) => baseUrl ? createAuthClient({
 			baseUrl,
-			middlewares: middlewareFor("auth", [retryContention, authMiddleware])
+			middlewares: middlewareFor("auth", [createPinnedAuthMiddleware(config.getEpoch, { inner: [retryContention] })])
 		}) : null
 	});
 	const management = createDerivedStore({
@@ -1231,7 +1466,7 @@ const createKeboola = (options = {}) => {
 				type: "bearer",
 				token: ""
 			},
-			middlewares: middlewareFor("management", [authMiddleware])
+			middlewares: middlewareFor("management", [pinToSession().pinnedAuthMiddleware])
 		}) : null
 	});
 	const projectClientsAsync = createDerivedAsyncStore({
@@ -1243,13 +1478,32 @@ const createKeboola = (options = {}) => {
 		build: ({ baseUrl, projectId }) => {
 			return createProjectClients$1({
 				baseUrl,
-				authMiddleware,
+				authMiddleware: pinToSession().pinnedAuthMiddleware,
 				projectId,
 				middlewareFor,
 				clientServiceUrls: options.clientServiceUrls
 			});
 		}
 	});
+	const forProject = async (projectId) => {
+		const state = requireAuthenticated();
+		const cached = extraProjects.get(projectId);
+		if (cached) return cached();
+		const { assertSameSession, pinnedAuthMiddleware } = pinToSession({ expiresSession: false });
+		const build = lazy(async () => {
+			const clients = await createProjectClients$1({
+				baseUrl: state.baseUrl,
+				authMiddleware: pinnedAuthMiddleware,
+				projectId,
+				middlewareFor,
+				clientServiceUrls: options.clientServiceUrls
+			});
+			assertSameSession();
+			return clients;
+		});
+		extraProjects.set(projectId, build);
+		return build();
+	};
 	if (options.baseUrl) config.setBaseUrl(options.baseUrl);
 	config.store.subscribe((state) => {
 		if (state.status === "anonymous") return;
@@ -1283,6 +1537,19 @@ const createKeboola = (options = {}) => {
 		* re-entering the project. Use `reset` to sign out instead.
 		*/
 		clearProject: config.clearProjectId,
+		/**
+		* The clients for one project, off this session — for reaching a second project without leaving
+		* the first.
+		*
+		* - `setProjectAsync` *moves* the session (and `api`) to another project; this *adds* one. The
+		*   returned set is the caller's to hold and never appears on `api`.
+		* - Every set shares this session's auth middleware, so one rotation serves all of them. A second
+		*   `createKeboola()` does not: both hold the same single-use refresh token, and the first to
+		*   rotate invalidates the other's, whose next refresh 401s and signs it out.
+		* - Independent of the scope, including for the scoped project itself — asking for that one
+		*   builds a second set with its own `liveProject`, so prefer `api.*` there.
+		*/
+		forProject,
 		reset: signOut,
 		/**
 		* Dev/test only: mark the current access token as expired so the bearer credential rotates it on
@@ -1299,18 +1566,42 @@ const createKeboola = (options = {}) => {
 		*   string, and `X-KBC-ProjectId` is composed here rather than in every consuming app.
 		* - Resolved per call, through the credential — so a near-expiry token rotates and a revoked
 		*   one is never re-sent. A snapshot held by the caller would do neither.
-		* - Throws rather than emitting a half-formed `Bearer null`: an unauthenticated or unscoped
-		*   session has nothing to authorize with.
+		* - Throws rather than emitting a half-formed `Bearer null`: a session with no credential has
+		*   nothing to authorize with.
+		* - Pinned to the sign-in it was called on, like every client here. This is the one
+		*   credential-emitting surface with no middleware chain for the guard to sit in, so the check
+		*   is written out around the `await` that rotates the token.
+		*
+		* `projectId` names the project the headers authorize, for a caller reaching a project the
+		* session is not scoped to:
+		*
+		* - **Omitted**, the session's own scope answers — unchanged, and re-read *after* the rotation
+		*   rather than carried across it. The epoch the pin compares moves on a sign-in and a sign-out
+		*   only, so a project switch mid-rotation is invisible to it.
+		* - **Given**, it is what the header says, and the scope is not consulted at all. A caller that
+		*   names a project has said everything the request needs: the credential is user-level and the
+		*   project is a header on top of it, so an authenticated session suffices where an unnamed call
+		*   requires a scoped one. Nothing about the session can change the answer, so there is nothing
+		*   to re-read after the `await`.
+		* - **Not checked against an access set**, because this session cannot acquire one:
+		*   `forProject` — the only other surface taking a caller-supplied project id — records that
+		*   connection collapses every bearer failure into a single `invalid_token` 401, so "no access
+		*   to this project" and "revoked token" are the same response. Whether the caller may reach a
+		*   project is the caller's own knowledge, from `token.introspect`. What is guaranteed here is
+		*   that the header names what was asked for and never something else — which is the failure
+		*   worth preventing: a turn sent somewhere the transcript above it did not come from.
 		*/
-		getAuthHeaders: async () => {
-			const state = config.store.get();
-			if (state.status === "anonymous") throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
-			if (state.status !== "scoped") throw new KeboolaError(KeboolaErrorType.NotReady);
+		getAuthHeaders: async (projectId) => {
+			const { assertSameSession } = pinToSession();
+			if (projectId === void 0) requireScopedProject();
+			else requireAuthenticated();
 			const accessToken = await credential.getAccessToken();
+			assertSameSession();
+			const authorizedProjectId = projectId ?? requireScopedProject();
 			assert$1(accessToken, KeboolaErrorType.NotAuthenticated);
 			return {
 				[HttpHeader.AUTHORIZATION]: `Bearer ${accessToken}`,
-				[KeboolaHttpHeader.PROJECT_ID]: String(state.projectId)
+				[KeboolaHttpHeader.PROJECT_ID]: String(authorizedProjectId)
 			};
 		},
 		restore: async () => {
@@ -1324,8 +1615,10 @@ const createKeboola = (options = {}) => {
 			if (!configured) config.setBaseUrl(persisted.baseUrl);
 			const client = authClientBare.get();
 			assert$1(client, KeboolaErrorType.NotReady);
+			const startedOn = config.getEpoch();
 			try {
 				const refreshed = await client.token.refresh(persisted.refreshToken);
+				if (config.getEpoch() !== startedOn) return { status: "empty" };
 				config.authenticate(refreshed);
 				if (persisted.projectId !== null) {
 					config.setProjectId(persisted.projectId);
@@ -1333,6 +1626,7 @@ const createKeboola = (options = {}) => {
 				}
 				return { status: "restored" };
 			} catch (err) {
+				if (config.getEpoch() !== startedOn) return { status: "empty" };
 				if (isUnauthorized(err)) {
 					persistor.clear();
 					return { status: "expired" };
@@ -1569,6 +1863,6 @@ const createLegacyKeboola = (options = {}) => {
 	};
 };
 //#endregion
-export { ApiError, HtmlResponseError, HttpContentType, HttpHeader, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, ManagementClientAuthError, QueryJobError, QueryJobTimeoutError, Result, ServiceUnavailableError, SyncActionError, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };
+export { ApiError, HtmlResponseError, HttpContentType, HttpHeader, KeboolaError, KeboolaErrorType, KeboolaHttpHeader, ManagementClientAuthError, QueryJobError, QueryJobTimeoutError, Result, ServiceUnavailableError, SyncActionError, UserError, ValidationError, asError, assert, coalesce, collect, concurrent, createDerivedAsyncStore, createDerivedStore, createEmitter, createGenericFetchClient, createKeboola, createLegacyKeboola, createLocalStorage, createLoggingMiddleware, createMemoryStorage, createNullStorage, createPersistor, createPollRegistry, createQueryServiceSdk, createRetryMiddleware, createSessionStorage, createStorageSdk, createStore, dedupe, deepMerge, delay, emitter, failureOf, formatValidationIssues, generateUUID, isAbortError, isApiError, isEmptyDeep, isFetchClientError, isHtmlResponseError, isKeboolaError, isManagementClientAuthError, isPlainObject, isQueryJobError, isQueryJobTimeoutError, isStorageTokenMutatingRequest, isSyncActionError, isTimeoutError, isValidationError, jobStatus, keboolaUID, lazy, parseLogLines, parseOrThrow, poll, poller, schemaGuidedMerge, series, shallowEqual };
 
 //# sourceMappingURL=index.js.map