@keboola/api-client 33.0.0 → 35.0.0

package/dist/{index-GNKwr7EQ.d.ts → index-P-iT5THa.d.ts}

@@ -1,6 +1,6 @@
-import { E as MiddlewareFn, t as createOpenapiFetchClient, x as ManagementClientAuthError } from "./index-DVhTNwvu.js";
-import { n as ClientInitOptions } from "./types-D-98DirB.js";
-import { $ as RemoveProjectUserPath, A as GetProjectPath, At as AddMaintainerUserInput, B as ProjectBase, Bn as Feature, C as CreateProjectFeatureBody, Cn as UpdateOrganizationInput, Ct as UserDetail, D as DeleteProjectInvitationPath, E as CreateProjectInvitationPath, En as CreateFileStorageS3Body, Et as UserOrganizationMembership, F as ListProjectJoinRequestsPath, Fn as RotateFileStorageGcsInput, Ft as CreateMaintainerInvitationInput, Gt as MaintainerMetadataItemPath, Hn as FeatureProject, Ht as MaintainerDetail, I as ListProjectUsersPath, Jt as MaintainerUserPath, K as ProjectMetadataItem, Lt as CreateMaintainerOrganizationInput, Mn as RotateFileStorageAbsInput, Mt as CompleteSamlSetupInput, N as JoinProjectInput, Nt as CreateMaintainerBody, O as DeleteProjectMetadataPath, Ot as UserProjectMembership, P as ListProjectInvitationsPath, Q as RemoveProjectTemplateFeaturePath, Qn as paths, Qt as SetMaintainerMetadataInput, R as MoveProjectInput, Rn as RotateFileStorageS3Input, St as User, T as CreateProjectInvitationBody, Tn as CreateFileStorageGcsBody, Tt as UserMaintainerMembership, Vn as FeatureAdmin, Vt as Maintainer, W as ProjectJoinRequestPath, Wn as GetAllFeaturesQuery, Wt as MaintainerInvitationPath, X as RemoveProjectFeaturePath, Xt as SamlConfigPath, Yt as MetadataItem, Z as RemoveProjectLimitPath, _ as AddProjectUserPath, _t as RemoveUserFeaturePath, a as CreateBigqueryStorageBackendBody, c as StorageBackend, ct as SetProjectMetadataPath, dn as OrganizationDetail, en as UpdateMaintainerInput, ft as UpdateProjectInput, g as AddProjectUserBody, gn as OrganizationMetadataItemPath, gt as GetUsersQuery, h as UpdateStorageBackendInput, ht as DeleteUserMetadataPath, in as AddOrganizationUserInput, it as SetProjectDisabledInput, j as GetProjectReviewersPath, k as GetProjectMetadataPath, kn as FileStorageGcs, ln as CreateOrganizationProjectInput, lt as SetProjectReviewersBody, mt as AddUserFeaturePath, n as ActivateUiAppVersionPath, nn as UpdateSamlConfigInput, nt as Reviewer, o as CreateSnowflakeStorageBackendBody, ot as SetProjectLimitsInput, p as UpdateBigqueryStorageBackendInput, pn as OrganizationInvitationPath, pt as AddUserFeatureBody, qn as DeletedProjectsListQuery, qt as MaintainerUser, r as RegisterUiAppBody, s as GetStorageBackendProjectsQuery, sn as CreateOrganizationInvitationInput, st as SetProjectMetadataBody, tt as RequestProjectAccessInput, ut as SetProjectReviewersPath, w as CreateProjectFeaturePath, wn as CreateFileStorageAbsBody, wt as UserListItem, x as ChangeProjectUserRoleInput, xn as SetOrganizationMetadataInput, xt as UpdateUserInput, y as AssignProjectTemplateFeatureInput, yn as OrganizationUserPath, yt as SetUserMetadataInput, z as Project, zt as CreateSamlConfigInput } from "./types-C35GWNmq.js";
+import { D as MiddlewareFn, S as ManagementClientAuthError, t as createOpenapiFetchClient } from "./index-KuQ79Mnz.js";
+import { n as ClientInitOptions } from "./types-Ct0YPy2w.js";
+import { $ as RemoveProjectUserPath, $n as FeatureProject, $t as MaintainerInvitationPath, A as GetProjectPath, An as OrganizationUserPath, At as CreditPaymentRequest, B as ProjectBase, Bn as FileStorageGcs, C as CreateProjectFeatureBody, Ct as UserDetail, D as DeleteProjectInvitationPath, Dn as OrganizationMetadataItemPath, E as CreateProjectInvitationPath, Et as UserOrganizationMembership, F as ListProjectJoinRequestsPath, Fn as CreateFileStorageAbsBody, Ft as TopUpSetting, Ht as CreateMaintainerBody, I as ListProjectUsersPath, In as CreateFileStorageGcsBody, It as UpdateStripeCustomerBody, Jt as CreateSamlConfigInput, K as ProjectMetadataItem, Kn as RotateFileStorageGcsInput, Kt as CreateMaintainerOrganizationInput, Ln as CreateFileStorageS3Body, Lt as UpdateTopUpSettingBody, Mn as SetOrganizationMetadataInput, Mt as PayAsYouGoBillingConfiguration, N as JoinProjectInput, Nt as StripeCustomer, O as DeleteProjectMetadataPath, Ot as UserProjectMembership, P as ListProjectInvitationsPath, Pn as UpdateOrganizationInput, Q as RemoveProjectTemplateFeaturePath, Qn as FeatureAdmin, R as MoveProjectInput, Sn as OrganizationDetail, St as User, T as CreateProjectInvitationBody, Tt as UserMaintainerMembership, Un as RotateFileStorageAbsInput, Vt as CompleteSamlSetupInput, W as ProjectJoinRequestPath, Wt as CreateMaintainerInvitationInput, X as RemoveProjectFeaturePath, Xt as Maintainer, Yn as RotateFileStorageS3Input, Z as RemoveProjectLimitPath, Zn as Feature, Zt as MaintainerDetail, _ as AddProjectUserPath, _t as RemoveUserFeaturePath, a as CreateBigqueryStorageBackendBody, bn as CreateOrganizationProjectInput, c as StorageBackend, ct as SetProjectMetadataPath, dn as UpdateMaintainerInput, en as MaintainerMetadataItemPath, ft as UpdateProjectInput, g as AddProjectUserBody, gt as GetUsersQuery, h as UpdateStorageBackendInput, hn as AddOrganizationUserInput, ht as DeleteUserMetadataPath, in as MetadataItem, ir as DeletedProjectsListQuery, it as SetProjectDisabledInput, j as GetProjectReviewersPath, jt as CreditPurchase, k as GetProjectMetadataPath, kt as CreatePaymentRequestBody, ln as SetMaintainerMetadataInput, lr as paths, lt as SetProjectReviewersBody, mt as AddUserFeaturePath, n as ActivateUiAppVersionPath, nn as MaintainerUser, nt as Reviewer, o as CreateSnowflakeStorageBackendBody, on as SamlConfigPath, ot as SetProjectLimitsInput, p as UpdateBigqueryStorageBackendInput, pn as UpdateSamlConfigInput, pt as AddUserFeatureBody, r as RegisterUiAppBody, rn as MaintainerUserPath, s as GetStorageBackendProjectsQuery, st as SetProjectMetadataBody, tr as GetAllFeaturesQuery, tt as RequestProjectAccessInput, ut as SetProjectReviewersPath, vn as CreateOrganizationInvitationInput, w as CreateProjectFeaturePath, wn as OrganizationInvitationPath, wt as UserListItem, x as ChangeProjectUserRoleInput, xt as UpdateUserInput, y as AssignProjectTemplateFeatureInput, yt as SetUserMetadataInput, z as Project, zt as AddMaintainerUserInput } from "./types-BMeDOB_D.js";
 //#region src/clients/management/managementClient.d.ts
 type ManagementOpenApiFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;
 type AuthStrategy = {
@@ -355,42 +355,45 @@ declare const createManagementClient: ({ baseUrl, middlewares, auth, withAuthMid
     }[]>;
     joinMaintainer: (maintainerId: number) => Promise<void>;
     getMaintainerSamlConfigs: (maintainerId: number, signal?: AbortSignal) => Promise<{
-      id?: number;
-      maintainerId?: number;
-      customerSlug?: string;
-      name?: string;
-      description?: string | null;
-      idpEntityId?: string;
-      isActive?: boolean;
-      createdAt?: string;
-      updatedAt?: string;
+      id: number;
+      maintainerId: number;
+      customerSlug: string;
+      name: string;
+      description: string | null;
+      idpEntityId: string;
+      membershipRestriction: 'none' | 'permittedDomains';
+      isActive: boolean;
+      createdAt: string;
+      updatedAt: string;
     }>;
     getMaintainerSamlConfig: ({ maintainerId, configId }: SamlConfigPath, signal?: AbortSignal) => Promise<{
-      id?: number;
-      maintainerId?: number;
-      customerSlug?: string;
-      name?: string;
-      description?: string | null;
-      idpEntityId?: string;
-      idpSsoUrl?: string | null;
-      idpSloUrl?: string | null;
-      idpX509Cert?: string | null;
-      spX509Cert?: string;
-      spEntityIdSuffix?: string | null;
-      attributeEmail?: string;
-      attributeFirstName?: string;
-      attributeLastName?: string;
-      attributeRoles?: string | null;
-      roleRequiredToLogin?: string | null;
-      roleProjectPrefix?: string | null;
-      roleOrgAdminPrefix?: string | null;
-      designAdminEmail?: string | null;
-      loginUrlParams?: {
+      id: number;
+      maintainerId: number;
+      customerSlug: string;
+      name: string;
+      description: string | null;
+      idpEntityId: string;
+      idpSsoUrl: string | null;
+      idpSloUrl: string | null;
+      idpX509Cert: string | null;
+      spX509Cert: string;
+      spEntityIdSuffix: string | null;
+      attributeEmail: string;
+      attributeFirstName: string;
+      attributeLastName: string;
+      attributeRoles: string | null;
+      roleRequiredToLogin: string | null;
+      roleProjectPrefix: string | null;
+      roleOrgAdminPrefix: string | null;
+      designAdminEmail: string | null;
+      loginUrlParams: {
         [key: string]: string;
       } | null;
-      isActive?: boolean;
-      createdAt?: string;
-      updatedAt?: string;
+      permittedEmailDomains: string[];
+      membershipRestriction: 'none' | 'permittedDomains';
+      isActive: boolean;
+      createdAt: string;
+      updatedAt: string;
     }>;
     createMaintainerSamlConfig: ({ maintainerId, ...body }: CreateSamlConfigInput) => Promise<{
       id?: number;
@@ -398,6 +401,7 @@ declare const createManagementClient: ({ baseUrl, middlewares, auth, withAuthMid
       customerSlug?: string;
       name?: string;
       isActive?: boolean;
+      membershipRestriction?: 'none' | 'permittedDomains';
       spConfiguration?: {
         entityId?: string;
         acsUrl?: string;
@@ -608,6 +612,35 @@ declare const createManagementClient: ({ baseUrl, middlewares, auth, withAuthMid
     setOrganizationMetadata: ({ organizationId, ...body }: SetOrganizationMetadataInput) => Promise<MetadataItem[]>;
     deleteOrganizationMetadata: ({ organizationId, metadataId }: OrganizationMetadataItemPath) => Promise<void>;
   };
+  payAsYouGo: {
+    getBillingConfiguration: (signal?: AbortSignal) => Promise<PayAsYouGoBillingConfiguration>;
+    getCreditPurchases: (idProject: number, signal?: AbortSignal) => Promise<CreditPurchase[]>;
+    getStripeCustomer: (idProject: number, signal?: AbortSignal) => Promise<StripeCustomer | null>;
+    updateStripeCustomer: (body: UpdateStripeCustomerBody) => Promise<{
+      email: string | null;
+      name: string | null;
+      address?: {
+        line1?: string | null;
+        line2?: string | null;
+        city?: string | null;
+        state?: string | null;
+        postal_code?: string | null;
+        country?: string | null;
+      };
+      vat_id?: string;
+      cards: {
+        id: string;
+        brand: string;
+        exp_month: number;
+        exp_year: number;
+        last4: string;
+        funding: string;
+      }[];
+    }>;
+    getTopUpSetting: (projectId: number, signal?: AbortSignal) => Promise<TopUpSetting>;
+    updateTopUpSetting: (body: UpdateTopUpSettingBody) => Promise<void>;
+    createPaymentRequest: (body: CreatePaymentRequestBody) => Promise<CreditPaymentRequest>;
+  };
   features: {
     getAllFeatures: (query: GetAllFeaturesQuery, signal?: AbortSignal) => Promise<Feature[]>;
     getFeature: (featureId: number, signal?: AbortSignal) => Promise<Feature>;
@@ -1072,4 +1105,4 @@ declare const createManagementClient: ({ baseUrl, middlewares, auth, withAuthMid
 declare const isManagementClientAuthError: (error: unknown) => error is ManagementClientAuthError;
 //#endregion
 export { createManagementClient as i, AuthStrategy as n, ManagementOpenApiFetchClient as r, isManagementClientAuthError as t };
-//# sourceMappingURL=index-GNKwr7EQ.d.ts.map
+//# sourceMappingURL=index-P-iT5THa.d.ts.map

package/dist/{index-DVhTNwvu.d.ts → index-V7XKUQm9.d.cts}

@@ -1,5 +1,5 @@
-import * as z$1 from "zod";
 import { IStringifyOptions } from "qs";
+import * as z$1 from "zod";
 //#region src/errors/ApiError.d.ts
 declare class ApiError extends Error {
   response: Response;
@@ -84,6 +84,16 @@ declare class ValidationError extends Error {
   constructor(message: string, issues?: z$1.core.$ZodIssue[]);
 }
 declare const isValidationError: (error: unknown) => error is ValidationError;
+/**
+ * One line per issue, prefixed by the field it belongs to.
+ *
+ * - Not `z.prettifyError`, which formats for a terminal — its `✖`/`→` glyphs and newlines survive a
+ *   log but collapse into one run-on line in HTML, where most of these end up.
+ * - Exported for the boundaries that degrade instead of throwing: a read that drops one malformed
+ *   element still owes a reason, and it needs the same one line without a `ValidationError`.
+ * - Says which field and what is wrong with it, never the value — so it is safe to log.
+ */
+declare const formatValidationIssues: (issues: readonly z$1.core.$ZodIssue[]) => string;
 /**
  * Parses with `schema`, converting a `ZodError` into a {@link ValidationError}. Use it instead of a
  * bare `schema.parse()` anywhere the value crosses the package boundary — every client input and
@@ -235,5 +245,5 @@ type FetchClient<Paths extends OpenapiPaths<Paths>> = {
 };
 declare const createOpenapiFetchClient: <Paths extends OpenapiPaths<Paths>>(defaultOptions: CreateFetchClientOptions) => FetchClient<Paths>;
 //#endregion
-export { isHtmlResponseError as C, ValidateStatusFn as D, MiddlewareFn as E, ApiError as O, HtmlResponseError as S, HttpMethod as T, isTimeoutError as _, OpenapiParametersType as a, parseOrThrow as b, OpenapiReturnType as c, HttpContentType as d, HttpHeader as f, isFetchClientError as g, isApiError as h, OpenapiFormDataType as i, UploadProgress as l, isAbortError as m, ArrayElement as n, OpenapiPathType as o, FetchClientError as p, OpenapiBodyType as r, OpenapiQueryType as s, createOpenapiFetchClient as t, createGenericFetchClient as u, ValidationError as v, ApiResponse as w, ManagementClientAuthError as x, isValidationError as y };
-//# sourceMappingURL=index-DVhTNwvu.d.ts.map
+export { HtmlResponseError as C, MiddlewareFn as D, HttpMethod as E, ValidateStatusFn as O, ManagementClientAuthError as S, ApiResponse as T, isTimeoutError as _, OpenapiParametersType as a, isValidationError as b, OpenapiReturnType as c, HttpContentType as d, HttpHeader as f, isFetchClientError as g, isApiError as h, OpenapiFormDataType as i, ApiError as k, UploadProgress as l, isAbortError as m, ArrayElement as n, OpenapiPathType as o, FetchClientError as p, OpenapiBodyType as r, OpenapiQueryType as s, createOpenapiFetchClient as t, createGenericFetchClient as u, ValidationError as v, isHtmlResponseError as w, parseOrThrow as x, formatValidationIssues as y };
+//# sourceMappingURL=index-V7XKUQm9.d.cts.map

package/dist/{index-ChMtULt4.d.ts → index-pXN4LWUX.d.ts}

@@ -1,6 +1,6 @@
-import { E as MiddlewareFn, t as createOpenapiFetchClient } from "./index-DVhTNwvu.js";
-import { n as ClientInitOptions } from "./types-D-98DirB.js";
-import { A as ResetPasswordConfirmInput, E as PaginationQuery, F as UpdateAppAsAdminInput, G as paths, I as UpdateAppInput, L as UpdateVendorAsAdminInput, N as SignUpInput, R as UpdateVendorInput, W as components, _ as GetVendorUsersQuery, b as LoginInput, c as ConfirmAccountInput, d as CreateVendorAsAdminInput, f as CreateVendorInput, g as GetChangesQuery, h as GetAppsQuery, k as RejectAppInput, l as CreateAppInput, p as DeprecateAppInput, s as ApproveVendorInput, t as AdminPaginationQuery, u as CreateServiceAccountInput, x as LoginResult, y as LoginChallenge } from "./types-DHqIJKwx.js";
+import { D as MiddlewareFn, t as createOpenapiFetchClient } from "./index-KuQ79Mnz.js";
+import { n as ClientInitOptions } from "./types-Ct0YPy2w.js";
+import { A as ResetPasswordConfirmInput, E as PaginationQuery, F as UpdateAppAsAdminInput, G as paths, I as UpdateAppInput, L as UpdateVendorAsAdminInput, N as SignUpInput, R as UpdateVendorInput, W as components, _ as GetVendorUsersQuery, b as LoginInput, c as ConfirmAccountInput, d as CreateVendorAsAdminInput, f as CreateVendorInput, g as GetChangesQuery, h as GetAppsQuery, k as RejectAppInput, l as CreateAppInput, p as DeprecateAppInput, s as ApproveVendorInput, t as AdminPaginationQuery, u as CreateServiceAccountInput, x as LoginResult, y as LoginChallenge } from "./types-DajzGOKB.js";
 //#region src/clients/developerPortal/developerPortalClient.d.ts
 type DeveloperPortalFetchClient = ReturnType<typeof createOpenapiFetchClient<paths>>;
 type DeveloperPortalClientInitOptions = Omit<ClientInitOptions, 'auth' | 'middlewares'> & {
@@ -1385,4 +1385,4 @@ type DeveloperPortalTokens = {
 declare const authHeader: (token: string) => Record<string, string>;
 //#endregion
 export { DeveloperPortalClient as a, createDeveloperPortalClient as c, isMfaChallengeResponse as i, authHeader as n, DeveloperPortalClientInitOptions as o, uploadAppIcon as r, DeveloperPortalFetchClient as s, DeveloperPortalTokens as t };
-//# sourceMappingURL=index-ChMtULt4.d.ts.map
+//# sourceMappingURL=index-pXN4LWUX.d.ts.map

package/dist/index.cjs

@@ -2,50 +2,51 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_project = require("./project-BvFi19K_.cjs");
 const require_jobStatus = require("./jobStatus-0_Y3Sr4i.cjs");
-const require_queue = require("./queue-D1_TCe0z.cjs");
+const require_queue = require("./queue-OJJUUqc2.cjs");
 const require_concurrent = require("./concurrent-tbiIa0UL.cjs");
 const require_dedupe = require("./dedupe-CiskLkGR.cjs");
 const require_store = require("./store-xS-Cu_VS.cjs");
-const require_storage = require("./storage-DexWot8H.cjs");
+const require_storage = require("./storage-BKm7cztt.cjs");
 const require_tag = require("./tag-CsoOZWB_.cjs");
 const require_generateUUID = require("./generateUUID-C6qKBPIv.cjs");
 const require_isPlainObject = require("./isPlainObject-BB3iy87C.cjs");
-const require_configurations = require("./configurations-Ck-mNB_E.cjs");
+const require_configurations = require("./configurations-zkNjr73Q.cjs");
 const require_UserError = require("./UserError-CSGO1qII.cjs");
-const require_createFetchClient = require("./createFetchClient-DvZvD31l.cjs");
-const require_validateConnectionStatus = require("./validateConnectionStatus-24zqIQ0p.cjs");
-const require_ManagementClientAuthError = require("./ManagementClientAuthError-DqeXL8nv.cjs");
+const require_createFetchClient = require("./createFetchClient-DgMiqTJ8.cjs");
+const require_validateConnectionStatus = require("./validateConnectionStatus-CsvYmCOI.cjs");
+const require_ManagementClientAuthError = require("./ManagementClientAuthError-DD4u0EU7.cjs");
 const require_QueryJobTimeoutError = require("./QueryJobTimeoutError-CVNPdCWX.cjs");
 const require_SyncActionError = require("./SyncActionError-BG0zwchi.cjs");
-const require_ValidationError = require("./ValidationError-h5qvwahi.cjs");
-const require_createGenericFetchClient = require("./createGenericFetchClient-qfCZlCTv.cjs");
-const require_import = require("./import-DJilJ6tq.cjs");
-const require_authClient = require("./authClient-IwQ9Ti0J.cjs");
-const require_management = require("./management-DGfgKsaA.cjs");
-const require_constants = require("./constants-lIfSdTzS.cjs");
+const require_ValidationError = require("./ValidationError-CLVJCCwH.cjs");
+const require_createGenericFetchClient = require("./createGenericFetchClient-o3cPJeRn.cjs");
+const require_import = require("./import-C83w7BKz.cjs");
+const require_authClient = require("./authClient-_PpvGgZJ.cjs");
+const require_management = require("./management-BoxlRNg2.cjs");
+const require_constants = require("./constants-C4DlsF_M.cjs");
 const require_storageTable = require("./storageTable-C9crh4Ef.cjs");
-const require_sdk_semanticLayer_index = require("./sdk/semanticLayer/index.cjs");
+const require_semanticLayer = require("./semanticLayer-E0Vilu8u.cjs");
 const require_sdk_storage_index = require("./sdk/storage/index.cjs");
 const require_sdk_vault_index = require("./sdk/vault/index.cjs");
 const require_ai_index = require("./ai/index.cjs");
-const require_appLogs = require("./appLogs-D8K0VeNM.cjs");
+const require_appLogs = require("./appLogs-BjfUoWzs.cjs");
 const require_apps_index = require("./apps/index.cjs");
+const require_billing_index = require("./billing/index.cjs");
 const require_chat_index = require("./chat/index.cjs");
-const require_dataScience = require("./dataScience-BPW993AG.cjs");
+const require_dataScience = require("./dataScience-0Rl_EuV_.cjs");
 const require_editor_index = require("./editor/index.cjs");
 const require_encryption_index = require("./encryption/index.cjs");
-const require_kaiAgent = require("./kaiAgent-CMVub6Sc.cjs");
-const require_metastore = require("./metastore-DksEte8P.cjs");
+const require_kaiAgent = require("./kaiAgent-B_TaUPRt.cjs");
+const require_metastore = require("./metastore-BYYWTb3m.cjs");
 const require_notifications_index = require("./notifications/index.cjs");
-const require_oauth = require("./oauth-DFsI1TE5.cjs");
+const require_oauth = require("./oauth-B8yqG6Sy.cjs");
 const require_omnisearch_index = require("./omnisearch/index.cjs");
-const require_queryService = require("./queryService--t_W9PSJ.cjs");
+const require_queryService = require("./queryService-BVtjkXy1.cjs");
 const require_scheduler_index = require("./scheduler/index.cjs");
 const require_stream_index = require("./stream/index.cjs");
-const require_syncActions = require("./syncActions-DQq_A9v6.cjs");
-const require_telemetry = require("./telemetry-CAu1Qt7B.cjs");
+const require_syncActions = require("./syncActions-OEZdVffK.cjs");
+const require_telemetry_index = require("./telemetry/index.cjs");
 const require_vault_index = require("./vault/index.cjs");
-const require_credential = require("./credential-D-X5QQrM.cjs");
+const require_credential = require("./credential-DVWvJFJs.cjs");
 const require_sdk_queryService_index = require("./sdk/queryService/index.cjs");
 let zod = require("zod");
 zod = require_rolldown_runtime.__toESM(zod, 1);
@@ -1032,7 +1033,7 @@ const createServiceClients = ({ baseUrl, auth, getServiceBaseUrl, middlewareFor,
 }).add({
 	serviceId: "telemetry",
 	clientName: "telemetry",
-	clientFn: (serviceBaseUrl) => require_telemetry.createTelemetryClient({
+	clientFn: (serviceBaseUrl) => require_telemetry_index.createTelemetryClient({
 		baseUrl: serviceBaseUrl,
 		middlewares: middlewareFor("telemetry", [attachTokenMiddleware]),
 		auth
@@ -1126,6 +1127,14 @@ const createServiceClients = ({ baseUrl, auth, getServiceBaseUrl, middlewareFor,
 		middlewares: middlewareFor("notifications", [attachTokenMiddleware]),
 		auth
 	})
+}).add({
+	serviceId: "billing",
+	clientName: "billing",
+	clientFn: (serviceBaseUrl) => require_billing_index.createBillingClient({
+		baseUrl: serviceBaseUrl,
+		middlewares: middlewareFor("billing", [attachTokenMiddleware]),
+		auth
+	})
 }).add({
 	serviceId: "metastore",
 	clientName: "metastore",
@@ -1214,7 +1223,7 @@ const createProjectClients$1 = async ({ baseUrl, projectId, authMiddleware, midd
 			context
 		}),
 		tag: require_tag.createTagSdk({ metastoreClient: services.metastore }),
-		semanticLayer: require_sdk_semanticLayer_index.createSemanticLayerSdk({ metastoreClient: services.metastore }),
+		semanticLayer: require_semanticLayer.createSemanticLayerSdk({ metastoreClient: services.metastore }),
 		storage: require_sdk_storage_index.createStorageSdk({ storageClient: storage }),
 		vault: require_sdk_vault_index.createVaultSdk({
 			vaultClient: services.vault,
@@ -1328,6 +1337,20 @@ const createKeboola = (options = {}) => {
 		};
 	};
 	/**
+	* The session's state, once it is known to carry a credential.
+	*
+	* - Returns the state rather than nothing, so the caller reads `baseUrl` and `credential` off a
+	*   narrowed union instead of re-checking the status to get at them.
+	* - `NotAuthenticated`, the same refusal `requireScopedProject` opens with. The two differ only in
+	*   how far they go: this one stops at "somebody is signed in", which is all a request naming its
+	*   own project needs.
+	*/
+	const requireAuthenticated = () => {
+		const state = config.store.get();
+		if (state.status === "anonymous") throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+		return state;
+	};
+	/**
 	* The project this session is scoped to, right now.
 	*
 	* - Read at every point that stamps a project, never snapshotted across an `await`: the scope moves
@@ -1338,8 +1361,7 @@ const createKeboola = (options = {}) => {
 	*   reads the project from the header, not the token, and cannot attribute a call that omits it.
 	*/
 	const requireScopedProject = () => {
-		const state = config.store.get();
-		if (state.status === "anonymous") throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+		const state = requireAuthenticated();
 		if (state.status !== "scoped") throw new KeboolaError(KeboolaErrorType.NotReady);
 		return state.projectId;
 	};
@@ -1467,8 +1489,7 @@ const createKeboola = (options = {}) => {
 		}
 	});
 	const forProject = async (projectId) => {
-		const state = config.store.get();
-		if (state.status === "anonymous") throw new KeboolaError(KeboolaErrorType.NotAuthenticated);
+		const state = requireAuthenticated();
 		const cached = extraProjects.get(projectId);
 		if (cached) return cached();
 		const { assertSameSession, pinnedAuthMiddleware } = pinToSession({ expiresSession: false });
@@ -1548,24 +1569,42 @@ const createKeboola = (options = {}) => {
 		*   string, and `X-KBC-ProjectId` is composed here rather than in every consuming app.
 		* - Resolved per call, through the credential — so a near-expiry token rotates and a revoked
 		*   one is never re-sent. A snapshot held by the caller would do neither.
-		* - Throws rather than emitting a half-formed `Bearer null`: an unauthenticated or unscoped
-		*   session has nothing to authorize with.
+		* - Throws rather than emitting a half-formed `Bearer null`: a session with no credential has
+		*   nothing to authorize with.
 		* - Pinned to the sign-in it was called on, like every client here. This is the one
 		*   credential-emitting surface with no middleware chain for the guard to sit in, so the check
 		*   is written out around the `await` that rotates the token.
-		* - The scope is re-read after that `await`, not carried across it. The epoch the pin compares
-		*   moves on a sign-in and a sign-out only, so a project switch mid-rotation is invisible to it.
+		*
+		* `projectId` names the project the headers authorize, for a caller reaching a project the
+		* session is not scoped to:
+		*
+		* - **Omitted**, the session's own scope answers — unchanged, and re-read *after* the rotation
+		*   rather than carried across it. The epoch the pin compares moves on a sign-in and a sign-out
+		*   only, so a project switch mid-rotation is invisible to it.
+		* - **Given**, it is what the header says, and the scope is not consulted at all. A caller that
+		*   names a project has said everything the request needs: the credential is user-level and the
+		*   project is a header on top of it, so an authenticated session suffices where an unnamed call
+		*   requires a scoped one. Nothing about the session can change the answer, so there is nothing
+		*   to re-read after the `await`.
+		* - **Not checked against an access set**, because this session cannot acquire one:
+		*   `forProject` — the only other surface taking a caller-supplied project id — records that
+		*   connection collapses every bearer failure into a single `invalid_token` 401, so "no access
+		*   to this project" and "revoked token" are the same response. Whether the caller may reach a
+		*   project is the caller's own knowledge, from `token.introspect`. What is guaranteed here is
+		*   that the header names what was asked for and never something else — which is the failure
+		*   worth preventing: a turn sent somewhere the transcript above it did not come from.
 		*/
-		getAuthHeaders: async () => {
+		getAuthHeaders: async (projectId) => {
 			const { assertSameSession } = pinToSession();
-			requireScopedProject();
+			if (projectId === void 0) requireScopedProject();
+			else requireAuthenticated();
 			const accessToken = await credential.getAccessToken();
 			assertSameSession();
-			const projectId = requireScopedProject();
+			const authorizedProjectId = projectId ?? requireScopedProject();
 			assert$1(accessToken, KeboolaErrorType.NotAuthenticated);
 			return {
 				[require_createFetchClient.HttpHeader.AUTHORIZATION]: `Bearer ${accessToken}`,
-				[require_createFetchClient.KeboolaHttpHeader.PROJECT_ID]: String(projectId)
+				[require_createFetchClient.KeboolaHttpHeader.PROJECT_ID]: String(authorizedProjectId)
 			};
 		},
 		restore: async () => {
@@ -1729,7 +1768,7 @@ const createProjectClients = async ({ baseUrl, getStorageToken, onStorageTokenRe
 			context
 		}),
 		tag: require_tag.createTagSdk({ metastoreClient: services.metastore }),
-		semanticLayer: require_sdk_semanticLayer_index.createSemanticLayerSdk({ metastoreClient: services.metastore }),
+		semanticLayer: require_semanticLayer.createSemanticLayerSdk({ metastoreClient: services.metastore }),
 		storage: require_sdk_storage_index.createStorageSdk({ storageClient: storage }),
 		vault: require_sdk_vault_index.createVaultSdk({
 			vaultClient: services.vault,
@@ -1869,6 +1908,7 @@ exports.deepMerge = deepMerge;
 exports.delay = require_jobStatus.delay;
 exports.emitter = require_jobStatus.emitter;
 exports.failureOf = require_jobStatus.failureOf;
+exports.formatValidationIssues = require_ValidationError.formatValidationIssues;
 exports.generateUUID = require_generateUUID.generateUUID;
 exports.isAbortError = require_createFetchClient.isAbortError;
 exports.isApiError = require_createFetchClient.isApiError;