@fabric-harness/databricks 0.16.1 → 1.0.0

package/dist/index.d.ts

@@ -1,85 +1,148 @@
-import type { FilesystemSource, JsonObject, ToolDef } from '@fabric-harness/sdk';
-export interface DatabricksClientOptions {
+import type { CapabilityPolicy, EmbeddingProvider, FilesystemSource, ModelProvider, Retriever, SessionStore, ToolDef } from '@fabric-harness/sdk';
+import { DatabricksRestClient } from './client.js';
+import type { DatabricksWorkspaceSourceOptions } from './tools.js';
+import type { DatabricksPrincipal, DatabricksTokenProvider } from './identity.js';
+import type { DatabricksLineageRecord } from './governance.js';
+import type { LakebaseClient, LakebasePoolFactory } from './lakebase.js';
+import type { DatabricksConsumption } from './consumption.js';
+export { DatabricksRestClient, createDatabricksClient, waitForDatabricksRun, waitForDatabricksStatement } from './client.js';
+export type { DatabricksClientOptions, DatabricksWaitOptions } from './client.js';
+export { databricksSqlTool, databricksRunJobTool, databricksNotebookTool, databricksMlflowLogMetricTool, databricksMlflowLogParamTool, unityCatalogTablesTool, databricksTableInfoTool, databricksWorkspaceSource } from './tools.js';
+export type { DatabricksSqlToolOptions, DatabricksWorkspaceSourceOptions } from './tools.js';
+export { databricksFoundationModelProvider, registerDatabricksModelProvider } from './model.js';
+export type { DatabricksModelOptions } from './model.js';
+export { appServicePrincipalFromEnv, databricksIdentity, fabricPrincipalFor, onBehalfOfFromHeaders } from './identity.js';
+export type { DatabricksPrincipal, DatabricksTokenProvider, FabricPrincipalOverrides } from './identity.js';
+export { withGovernance, withGovernanceTools, databricksApprovalRules, databricksGovernancePolicy } from './governance.js';
+export type { DatabricksGovernanceOptions, DatabricksLineageRecord, DatabricksApprovalRuleOptions, DatabricksGovernancePolicyOptions } from './governance.js';
+export { lakebaseClient } from './lakebase.js';
+export { databricksPersistence } from './persistence.js';
+export { databricksTelemetry, ensureDatabricksTelemetryTables } from './telemetry-sink.js';
+export { databricksApp } from './app.js';
+export type { DatabricksAppOptions, DatabricksAppRuntime } from './app.js';
+export type { DatabricksTelemetry, DatabricksTelemetryOptions } from './telemetry-sink.js';
+export type { DatabricksPersistence, DatabricksPersistenceOptions, DatabricksPersistenceStoreModule } from './persistence.js';
+export type { LakebaseClient, LakebaseClientOptions, LakebasePoolConfig, LakebasePoolFactory } from './lakebase.js';
+export { UcVolumesAttachmentStore } from './volumes-attachment-store.js';
+export type { UcVolumesAttachmentStoreOptions } from './volumes-attachment-store.js';
+export { buildMlflowTrace, mlflowTraceExporter } from './mlflow-tracing.js';
+export type { MlflowTraceExporter, MlflowTraceExporterOptions, MlflowTraceInput, MlflowTracePayload } from './mlflow-tracing.js';
+export { inferenceTableUsageQuery, servingUsageCapture } from './serving-usage.js';
+export type { InferenceTableUsageQueryOptions, ServingUsageCaptureOptions } from './serving-usage.js';
+export { databricksEmbeddings } from './embeddings.js';
+export type { DatabricksEmbeddingsOptions } from './embeddings.js';
+export { databricksVectorSearch } from './vector-search.js';
+export type { DatabricksVectorSearchOptions } from './vector-search.js';
+export { databricksAiQueryTool } from './ai.js';
+export type { DatabricksAiQueryToolOptions } from './ai.js';
+export { databricksGenieTool } from './genie.js';
+export type { DatabricksGenieToolOptions } from './genie.js';
+export { databricksLakeflowTools, databricksPipelineListTool, databricksPipelineStatusTool, databricksPipelineStartTool, databricksPipelineStopTool } from './lakeflow.js';
+export { databricksConsumption, databricksConsumptionTool } from './consumption.js';
+export type { ConsumptionGroupBy, ConsumptionSummary, ConsumptionSummaryOptions, DatabricksConsumption, DatabricksConsumptionOptions, DatabricksConsumptionToolOptions } from './consumption.js';
+export { databricksActualCostSource, databricksTenantCostLimit } from './cost-budget-actuals.js';
+export type { DatabricksActualCostSourceOptions } from './cost-budget-actuals.js';
+export { databricksFeatureLookupTool } from './feature-serving.js';
+export type { DatabricksFeatureLookupToolOptions } from './feature-serving.js';
+export { databricksAgent, defineDatabricksAgent, resolveToolRefs } from './agent.js';
+export type { DatabricksAgentOptions, DefineDatabricksAgentOptions } from './agent.js';
+export { MockDatabricksModelProvider } from './mock-provider.js';
+export type { MockDatabricksModelProviderOptions } from './mock-provider.js';
+export interface DatabricksBundleConfig {
+    /** Workspace host, e.g. https://adb-1234567890.0.cloud.databricks.com */
     host: string;
-    token: string | (() => string | Promise<string>);
+    /** Acting identity — UC enforces this principal's grants on every call. */
+    principal: DatabricksPrincipal;
+    /** Default serving-endpoint name for the returned model provider. */
+    model?: string;
+    /** SQL Warehouse id; when set, a governed `databricks_sql` tool is included. */
+    warehouseId?: string;
+    /** Extra Databricks tools to include; governed alongside the defaults. */
+    tools?: ToolDef[];
+    governance?: {
+        /** When set, sensitive (write/execute) tools route to this approval audience. */
+        stewardAudience?: string;
+        approvalServices?: string[];
+        /** Belt-and-suspenders catalog allowlist enforced before tool execution (UC stays source of truth). */
+        catalogs?: string[];
+        approvalTtlSeconds?: number;
+        /** Label recorded in lineage for the acting principal (never a token). */
+        principalLabel?: string;
+        /** Sink for audit/lineage records; wire to OTel / onEvent at the app layer. */
+        onLineage?: (record: DatabricksLineageRecord) => void;
+    };
+    /** Lakebase (managed Postgres) connection for durable session/journal state. */
+    lakebase?: {
+        host: string;
+        database: string;
+        user: string;
+        port?: number;
+        ssl?: boolean | {
+            rejectUnauthorized?: boolean;
+        };
+        poolFactory?: LakebasePoolFactory;
+    };
+    /**
+     * Builds a SessionStore from the Lakebase client. Injected so this package stays decoupled from
+     * `@fabric-harness/node` — e.g. `(client) => new PostgresSessionStore({ client })`.
+     */
+    sessionStoreFactory?: (client: LakebaseClient) => SessionStore;
+    /** Mosaic AI Vector Search for RAG. Adds a governed `search` tool and exposes `retriever`. */
+    vectorSearch?: {
+        /** Full index name `catalog.schema.index`. */
+        index: string;
+        /** Column holding the chunk text. */
+        textColumn: string;
+        columns?: string[];
+        idColumn?: string;
+        /** `'text'` (managed-embedding index, default) or `'vector'` (self-managed; requires `embeddingEndpoint`). */
+        queryType?: 'text' | 'vector';
+        /** Serving-endpoint name for query embeddings (required for `queryType: 'vector'`). */
+        embeddingEndpoint?: string;
+        /** Override the search tool name (default `search`). */
+        searchToolName?: string;
+    };
+    /** Add the governed `ai_query` tool (in-warehouse model inference). Requires `warehouseId`. */
+    aiFunctions?: boolean;
+    /** Add the governed Genie tool for natural-language analytics over a Genie space. */
+    genie?: {
+        spaceId: string;
+    };
+    /** Add governed Lakeflow pipeline tools (list/status read; start/stop execute). */
+    lakeflow?: boolean;
+    /** Add the System-Tables consumption tool + expose `bundle.consumption`. Requires `warehouseId`. */
+    consumption?: boolean;
+    /** Add a governed low-latency feature-lookup tool against a Feature Serving endpoint. */
+    featureServing?: {
+        endpoint: string;
+    };
     fetchImpl?: typeof fetch;
 }
-export declare class DatabricksRestClient {
-    private readonly host;
-    private readonly token;
-    private readonly fetchImpl;
-    constructor(options: DatabricksClientOptions);
-    get<T>(path: string, query?: Record<string, string | number | boolean | undefined>): Promise<T>;
-    post<T>(path: string, body?: unknown, query?: Record<string, string | number | boolean | undefined>): Promise<T>;
-    request<T>(method: string, path: string, body?: unknown, query?: Record<string, string | number | boolean | undefined>): Promise<T>;
+export interface DatabricksBundle {
+    /** Rotating token provider shared by the model provider, REST client, and Lakebase client. */
+    identity: DatabricksTokenProvider;
+    modelProvider: ModelProvider;
+    client: DatabricksRestClient;
+    /** Governed Databricks tools (lineage-stamped, catalog-allowlisted). */
+    tools: ToolDef[];
+    /** Approval routing + egress allowlist for the tool set. Merge into the agent's policy. */
+    policy: CapabilityPolicy;
+    lakebase?: LakebaseClient;
+    store?: SessionStore;
+    /** Mount Databricks workspace files as a read-only context source. */
+    workspaceSource: (rootPath: string, options?: DatabricksWorkspaceSourceOptions) => FilesystemSource;
+    /** Vector Search retriever, when `vectorSearch` is configured. */
+    retriever?: Retriever;
+    /** Query-embedding provider, when `vectorSearch.embeddingEndpoint` is configured. */
+    embeddings?: EmbeddingProvider;
+    /** System-Tables consumption reporter, when `consumption` is enabled (needs `warehouseId`). */
+    consumption?: DatabricksConsumption;
 }
-export declare function createDatabricksClient(options: DatabricksClientOptions): DatabricksRestClient;
-export interface DatabricksWaitOptions {
-    pollIntervalMs?: number;
-    timeoutMs?: number;
-}
-export declare function waitForDatabricksRun(client: DatabricksRestClient, runId: number, options?: DatabricksWaitOptions): Promise<Record<string, unknown>>;
-export declare function waitForDatabricksStatement(client: DatabricksRestClient, statementId: string, options?: DatabricksWaitOptions): Promise<Record<string, unknown>>;
-export interface DatabricksSqlToolOptions {
-    warehouseId: string;
-    name?: string;
-    description?: string;
-    waitTimeout?: string;
-    disposition?: 'INLINE' | 'EXTERNAL_LINKS';
-}
-export declare function databricksSqlTool(client: DatabricksRestClient, options: DatabricksSqlToolOptions): ToolDef<{
-    statement: string;
-    catalog?: string;
-    schema?: string;
-}, unknown>;
-export declare function databricksRunJobTool(client: DatabricksRestClient, options?: {
-    name?: string;
-    description?: string;
-}): ToolDef<{
-    jobId: number;
-    notebookParams?: JsonObject;
-    pythonParams?: string[];
-    jarParams?: string[];
-}, unknown>;
-export declare function databricksNotebookTool(client: DatabricksRestClient, options?: {
-    name?: string;
-    description?: string;
-    existingClusterId?: string;
-}): ToolDef<{
-    notebookPath: string;
-    baseParameters?: JsonObject;
-    runName?: string;
-}, unknown>;
-export declare function databricksMlflowLogMetricTool(client: DatabricksRestClient, options?: {
-    name?: string;
-    description?: string;
-}): ToolDef<{
-    runId: string;
-    key: string;
-    value: number;
-    step?: number;
-    timestamp?: number;
-}, unknown>;
-export declare function databricksMlflowLogParamTool(client: DatabricksRestClient, options?: {
-    name?: string;
-    description?: string;
-}): ToolDef<{
-    runId: string;
-    key: string;
-    value: string;
-}, unknown>;
-export declare function unityCatalogTablesTool(client: DatabricksRestClient, options?: {
-    name?: string;
-    description?: string;
-}): ToolDef<{
-    catalog: string;
-    schema: string;
-}, unknown>;
-export interface DatabricksWorkspaceSourceOptions {
-    name?: string;
-    include?: (path: string) => boolean;
-    recursive?: boolean;
-    format?: 'SOURCE' | 'HTML' | 'JUPYTER' | 'DBC';
-}
-export declare function databricksWorkspaceSource(client: DatabricksRestClient, rootPath: string, options?: DatabricksWorkspaceSourceOptions): FilesystemSource;
+/**
+ * One-call wiring for a Databricks-native agent: model serving, a UC principal threaded through
+ * model + data + state, governed tools, an approval/egress policy, and (optionally) Lakebase-backed
+ * durable state. Also registers `databricks/*` + `mosaic-ai/*` model refs. Everything is layered on
+ * Unity Catalog — never a replacement for it.
+ */
+export declare function databricks(config: DatabricksBundleConfig): DatabricksBundle;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,gBAAgB,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAGlG,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IACzD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAe;gBAE7B,OAAO,EAAE,uBAAuB;IAM5C,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI/F,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI1G,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAmB9I;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,uBAAuB,GAAG,oBAAoB,CAE7F;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAS7J;AAED,wBAAsB,0BAA0B,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASzK;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC;CAC3C;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAwB7K;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,UAAU,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,OAAO,CAAC,CAuBzO;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,UAAU,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAwBjP;AAED,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAyBrO;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAajM;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,EAAE,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,CAAC,CAajL;AAED,MAAM,WAAW,gCAAgC;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACpC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,KAAK,CAAC;CAChD;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,gCAAqC,GAAG,gBAAgB,CAQ1J"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAElJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAC;AAEnE,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGlF,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,KAAK,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAOzE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAM9D,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC7H,YAAY,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,6BAA6B,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AACtO,YAAY,EAAE,wBAAwB,EAAE,gCAAgC,EAAE,MAAM,YAAY,CAAC;AAE7F,OAAO,EAAE,iCAAiC,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAChG,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC1H,YAAY,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAC5G,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAC3H,YAAY,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,iCAAiC,EAAE,MAAM,iBAAiB,CAAC;AAC9J,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAC3E,YAAY,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AAC3F,YAAY,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAC9H,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpH,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,YAAY,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,YAAY,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACjI,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnF,YAAY,EAAE,+BAA+B,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,YAAY,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,YAAY,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAChD,YAAY,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,YAAY,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAC3K,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AACpF,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,4BAA4B,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AACjM,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AACjG,YAAY,EAAE,iCAAiC,EAAE,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,YAAY,EAAE,kCAAkC,EAAE,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACrF,YAAY,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjE,YAAY,EAAE,kCAAkC,EAAE,MAAM,oBAAoB,CAAC;AAE7E,MAAM,WAAW,sBAAsB;IACrC,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,SAAS,EAAE,mBAAmB,CAAC;IAC/B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE;QACX,iFAAiF;QACjF,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,uGAAuG;QACvG,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,0EAA0E;QAC1E,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,+EAA+E;QAC/E,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,CAAC;KACvD,CAAC;IACF,gFAAgF;IAChF,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,GAAG,CAAC,EAAE,OAAO,GAAG;YAAE,kBAAkB,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QACjD,WAAW,CAAC,EAAE,mBAAmB,CAAC;KACnC,CAAC;IACF;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,YAAY,CAAC;IAC/D,8FAA8F;IAC9F,YAAY,CAAC,EAAE;QACb,8CAA8C;QAC9C,KAAK,EAAE,MAAM,CAAC;QACd,qCAAqC;QACrC,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,8GAA8G;QAC9G,SAAS,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;QAC9B,uFAAuF;QACvF,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,wDAAwD;QACxD,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,+FAA+F;IAC/F,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,qFAAqF;IACrF,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,mFAAmF;IACnF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oGAAoG;IACpG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,yFAAyF;IACzF,cAAc,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,8FAA8F;IAC9F,QAAQ,EAAE,uBAAuB,CAAC;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,wEAAwE;IACxE,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,2FAA2F;IAC3F,MAAM,EAAE,gBAAgB,CAAC;IACzB,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,sEAAsE;IACtE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gCAAgC,KAAK,gBAAgB,CAAC;IACpG,kEAAkE;IAClE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,qFAAqF;IACrF,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,+FAA+F;IAC/F,WAAW,CAAC,EAAE,qBAAqB,CAAC;CACrC;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,sBAAsB,GAAG,gBAAgB,CAqE3E"}

package/dist/index.js

@@ -1,234 +1,118 @@
-import { redactText } from '@fabric-harness/sdk';
-export class DatabricksRestClient {
-    host;
-    token;
-    fetchImpl;
-    constructor(options) {
-        this.host = options.host.replace(/\/$/, '');
-        this.token = options.token;
-        this.fetchImpl = options.fetchImpl ?? fetch;
-    }
-    get(path, query) {
-        return this.request('GET', path, undefined, query);
-    }
-    post(path, body, query) {
-        return this.request('POST', path, body, query);
-    }
-    async request(method, path, body, query = {}) {
-        const token = typeof this.token === 'function' ? await this.token() : this.token;
-        const url = new URL(`${this.host}${path.startsWith('/') ? path : `/${path}`}`);
-        for (const [key, value] of Object.entries(query))
-            if (value !== undefined)
-                url.searchParams.set(key, String(value));
-        const response = await this.fetchImpl(url, {
-            method,
-            headers: {
-                authorization: `Bearer ${token}`,
-                ...(body !== undefined ? { 'content-type': 'application/json' } : {}),
-            },
-            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+import { createSearchTool } from '@fabric-harness/sdk';
+import { DatabricksRestClient } from './client.js';
+import { databricksSqlTool, databricksTableInfoTool, databricksWorkspaceSource, unityCatalogTablesTool } from './tools.js';
+import { databricksIdentity } from './identity.js';
+import { databricksFoundationModelProvider, registerDatabricksModelProvider } from './model.js';
+import { databricksGovernancePolicy, withGovernanceTools } from './governance.js';
+import { lakebaseClient } from './lakebase.js';
+import { databricksEmbeddings } from './embeddings.js';
+import { databricksVectorSearch } from './vector-search.js';
+import { databricksAiQueryTool } from './ai.js';
+import { databricksGenieTool } from './genie.js';
+import { databricksLakeflowTools } from './lakeflow.js';
+import { databricksConsumption, databricksConsumptionTool } from './consumption.js';
+import { databricksFeatureLookupTool } from './feature-serving.js';
+import { databricksActualCostSource, databricksTenantCostLimit } from './cost-budget-actuals.js';
+// REST client + wait helpers (client.ts) and tool factories + workspace source (tools.ts).
+export { DatabricksRestClient, createDatabricksClient, waitForDatabricksRun, waitForDatabricksStatement } from './client.js';
+export { databricksSqlTool, databricksRunJobTool, databricksNotebookTool, databricksMlflowLogMetricTool, databricksMlflowLogParamTool, unityCatalogTablesTool, databricksTableInfoTool, databricksWorkspaceSource } from './tools.js';
+export { databricksFoundationModelProvider, registerDatabricksModelProvider } from './model.js';
+export { appServicePrincipalFromEnv, databricksIdentity, fabricPrincipalFor, onBehalfOfFromHeaders } from './identity.js';
+export { withGovernance, withGovernanceTools, databricksApprovalRules, databricksGovernancePolicy } from './governance.js';
+export { lakebaseClient } from './lakebase.js';
+export { databricksPersistence } from './persistence.js';
+export { databricksTelemetry, ensureDatabricksTelemetryTables } from './telemetry-sink.js';
+export { databricksApp } from './app.js';
+export { UcVolumesAttachmentStore } from './volumes-attachment-store.js';
+export { buildMlflowTrace, mlflowTraceExporter } from './mlflow-tracing.js';
+export { inferenceTableUsageQuery, servingUsageCapture } from './serving-usage.js';
+export { databricksEmbeddings } from './embeddings.js';
+export { databricksVectorSearch } from './vector-search.js';
+export { databricksAiQueryTool } from './ai.js';
+export { databricksGenieTool } from './genie.js';
+export { databricksLakeflowTools, databricksPipelineListTool, databricksPipelineStatusTool, databricksPipelineStartTool, databricksPipelineStopTool } from './lakeflow.js';
+export { databricksConsumption, databricksConsumptionTool } from './consumption.js';
+export { databricksActualCostSource, databricksTenantCostLimit } from './cost-budget-actuals.js';
+export { databricksFeatureLookupTool } from './feature-serving.js';
+export { databricksAgent, defineDatabricksAgent, resolveToolRefs } from './agent.js';
+export { MockDatabricksModelProvider } from './mock-provider.js';
+/**
+ * One-call wiring for a Databricks-native agent: model serving, a UC principal threaded through
+ * model + data + state, governed tools, an approval/egress policy, and (optionally) Lakebase-backed
+ * durable state. Also registers `databricks/*` + `mosaic-ai/*` model refs. Everything is layered on
+ * Unity Catalog — never a replacement for it.
+ */
+export function databricks(config) {
+    registerDatabricksModelProvider();
+    const identity = databricksIdentity(config.principal);
+    const client = new DatabricksRestClient({ host: config.host, token: identity, ...(config.fetchImpl ? { fetchImpl: config.fetchImpl } : {}) });
+    let embeddings;
+    let retriever;
+    let searchTool;
+    if (config.vectorSearch) {
+        if (config.vectorSearch.embeddingEndpoint)
+            embeddings = databricksEmbeddings({ client, endpoint: config.vectorSearch.embeddingEndpoint });
+        retriever = databricksVectorSearch({
+            client,
+            index: config.vectorSearch.index,
+            textColumn: config.vectorSearch.textColumn,
+            ...(config.vectorSearch.columns ? { columns: config.vectorSearch.columns } : {}),
+            ...(config.vectorSearch.idColumn ? { idColumn: config.vectorSearch.idColumn } : {}),
+            ...(config.vectorSearch.queryType ? { queryType: config.vectorSearch.queryType } : {}),
+            ...(embeddings ? { embeddings } : {}),
+        });
+        searchTool = createSearchTool(retriever, {
+            ...(config.vectorSearch.searchToolName ? { name: config.vectorSearch.searchToolName } : {}),
+            metadata: { provider: 'databricks', service: 'vector-search' },
         });
-        if (!response.ok) {
-            const text = redactText(await response.text(), { additionalSecrets: [token] });
-            throw new Error(`databricks: ${response.status} ${response.statusText}: ${text.slice(0, 500)}`);
-        }
-        if (response.status === 204)
-            return undefined;
-        return await response.json();
-    }
-}
-export function createDatabricksClient(options) {
-    return new DatabricksRestClient(options);
-}
-export async function waitForDatabricksRun(client, runId, options = {}) {
-    const deadline = Date.now() + (options.timeoutMs ?? 600_000);
-    const interval = options.pollIntervalMs ?? 5_000;
-    let current = await client.get('/api/2.1/jobs/runs/get', { run_id: runId });
-    while (!isTerminalDatabricksRunState(current) && Date.now() < deadline) {
-        await new Promise((resolve) => setTimeout(resolve, interval));
-        current = await client.get('/api/2.1/jobs/runs/get', { run_id: runId });
-    }
-    return current;
-}
-export async function waitForDatabricksStatement(client, statementId, options = {}) {
-    const deadline = Date.now() + (options.timeoutMs ?? 300_000);
-    const interval = options.pollIntervalMs ?? 2_000;
-    let current = await client.get(`/api/2.0/sql/statements/${encodeURIComponent(statementId)}`);
-    while (!isTerminalDatabricksStatementState(current) && Date.now() < deadline) {
-        await new Promise((resolve) => setTimeout(resolve, interval));
-        current = await client.get(`/api/2.0/sql/statements/${encodeURIComponent(statementId)}`);
     }
-    return current;
-}
-export function databricksSqlTool(client, options) {
-    return {
-        name: options.name ?? 'databricks_sql',
-        description: options.description ?? 'Run a SQL statement on a Databricks SQL Warehouse.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: {
-                statement: { type: 'string' },
-                catalog: { type: 'string' },
-                schema: { type: 'string' },
-            },
-            required: ['statement'],
-        },
-        metadata: { effect: 'execute', provider: 'databricks', service: 'sql' },
-        execute: (input) => client.post('/api/2.0/sql/statements', {
-            warehouse_id: options.warehouseId,
-            statement: input.statement,
-            wait_timeout: options.waitTimeout ?? '30s',
-            disposition: options.disposition ?? 'INLINE',
-            ...(input.catalog ? { catalog: input.catalog } : {}),
-            ...(input.schema ? { schema: input.schema } : {}),
-        }),
+    const rawTools = [
+        ...(config.warehouseId ? [databricksSqlTool(client, { warehouseId: config.warehouseId })] : []),
+        unityCatalogTablesTool(client),
+        databricksTableInfoTool(client),
+        ...(searchTool ? [searchTool] : []),
+        ...(config.aiFunctions && config.warehouseId ? [databricksAiQueryTool(client, { warehouseId: config.warehouseId })] : []),
+        ...(config.genie ? [databricksGenieTool(client, { spaceId: config.genie.spaceId })] : []),
+        ...(config.lakeflow ? databricksLakeflowTools(client) : []),
+        ...(config.consumption && config.warehouseId ? [databricksConsumptionTool(client, { warehouseId: config.warehouseId })] : []),
+        ...(config.featureServing ? [databricksFeatureLookupTool(client, { endpoint: config.featureServing.endpoint })] : []),
+        ...(config.tools ?? []),
+    ];
+    const tools = withGovernanceTools(rawTools, {
+        principal: config.governance?.principalLabel ?? principalLabel(config.principal),
+        ...(config.governance?.onLineage ? { onLineage: config.governance.onLineage } : {}),
+        ...(config.governance?.catalogs ? { catalogs: config.governance.catalogs } : {}),
+    });
+    const policy = databricksGovernancePolicy({
+        tools,
+        host: config.host,
+        ...(config.governance?.stewardAudience ? { stewardAudience: config.governance.stewardAudience } : {}),
+        ...(config.governance?.approvalServices ? { approvalServices: config.governance.approvalServices } : {}),
+        ...(config.governance?.approvalTtlSeconds !== undefined ? { ttlSeconds: config.governance.approvalTtlSeconds } : {}),
+    });
+    const bundle = {
+        identity,
+        modelProvider: databricksFoundationModelProvider({ host: config.host, token: identity, ...(config.model ? { defaultModel: config.model } : {}) }),
+        client,
+        tools,
+        policy,
+        workspaceSource: (rootPath, options) => databricksWorkspaceSource(client, rootPath, options ?? {}),
+        ...(retriever ? { retriever } : {}),
+        ...(embeddings ? { embeddings } : {}),
+        ...(config.consumption && config.warehouseId ? { consumption: databricksConsumption(client, { warehouseId: config.warehouseId }) } : {}),
     };
-}
-export function databricksRunJobTool(client, options = {}) {
-    return {
-        name: options.name ?? 'databricks_run_job',
-        description: options.description ?? 'Trigger an existing Databricks job by job id.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: {
-                jobId: { type: 'number' },
-                notebookParams: { type: 'object', additionalProperties: true },
-                pythonParams: { type: 'array', items: { type: 'string' } },
-                jarParams: { type: 'array', items: { type: 'string' } },
-            },
-            required: ['jobId'],
-        },
-        metadata: { effect: 'execute', provider: 'databricks', service: 'jobs' },
-        execute: (input) => client.post('/api/2.1/jobs/run-now', {
-            job_id: input.jobId,
-            ...(input.notebookParams ? { notebook_params: input.notebookParams } : {}),
-            ...(input.pythonParams ? { python_params: input.pythonParams } : {}),
-            ...(input.jarParams ? { jar_params: input.jarParams } : {}),
-        }),
-    };
-}
-export function databricksNotebookTool(client, options = {}) {
-    return {
-        name: options.name ?? 'databricks_run_notebook',
-        description: options.description ?? 'Submit a one-off Databricks notebook run.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: {
-                notebookPath: { type: 'string' },
-                baseParameters: { type: 'object', additionalProperties: true },
-                runName: { type: 'string' },
-            },
-            required: ['notebookPath'],
-        },
-        metadata: { effect: 'execute', provider: 'databricks', service: 'jobs' },
-        execute: (input) => client.post('/api/2.1/jobs/runs/submit', {
-            run_name: input.runName ?? `fabric-harness:${input.notebookPath}`,
-            ...(options.existingClusterId ? { existing_cluster_id: options.existingClusterId } : {}),
-            notebook_task: {
-                notebook_path: input.notebookPath,
-                ...(input.baseParameters ? { base_parameters: input.baseParameters } : {}),
-            },
-        }),
-    };
-}
-export function databricksMlflowLogMetricTool(client, options = {}) {
-    return {
-        name: options.name ?? 'databricks_mlflow_log_metric',
-        description: options.description ?? 'Log a metric to an MLflow run hosted in Databricks.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: {
-                runId: { type: 'string' },
-                key: { type: 'string' },
-                value: { type: 'number' },
-                step: { type: 'number' },
-                timestamp: { type: 'number' },
-            },
-            required: ['runId', 'key', 'value'],
-        },
-        metadata: { effect: 'write', provider: 'databricks', service: 'mlflow' },
-        execute: (input) => client.post('/api/2.0/mlflow/runs/log-metric', {
-            run_id: input.runId,
-            key: input.key,
-            value: input.value,
-            timestamp: input.timestamp ?? Date.now(),
-            ...(input.step !== undefined ? { step: input.step } : {}),
-        }),
-    };
-}
-export function databricksMlflowLogParamTool(client, options = {}) {
-    return {
-        name: options.name ?? 'databricks_mlflow_log_param',
-        description: options.description ?? 'Log a parameter to an MLflow run hosted in Databricks.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: { runId: { type: 'string' }, key: { type: 'string' }, value: { type: 'string' } },
-            required: ['runId', 'key', 'value'],
-        },
-        metadata: { effect: 'write', provider: 'databricks', service: 'mlflow' },
-        execute: (input) => client.post('/api/2.0/mlflow/runs/log-parameter', { run_id: input.runId, key: input.key, value: input.value }),
-    };
-}
-export function unityCatalogTablesTool(client, options = {}) {
-    return {
-        name: options.name ?? 'databricks_unity_catalog_tables',
-        description: options.description ?? 'List Unity Catalog tables in a catalog and schema.',
-        inputSchema: {
-            type: 'object',
-            additionalProperties: false,
-            properties: { catalog: { type: 'string' }, schema: { type: 'string' } },
-            required: ['catalog', 'schema'],
-        },
-        metadata: { effect: 'read', provider: 'databricks', service: 'unity-catalog' },
-        execute: (input) => client.get('/api/2.1/unity-catalog/tables', { catalog_name: input.catalog, schema_name: input.schema }),
-    };
-}
-export function databricksWorkspaceSource(client, rootPath, options = {}) {
-    const include = options.include ?? (() => true);
-    return {
-        name: options.name ?? `databricks-workspace:${rootPath}`,
-        async *entries() {
-            yield* walkWorkspace(client, rootPath, rootPath, include, options.recursive ?? true, options.format ?? 'SOURCE');
-        },
-    };
-}
-async function* walkWorkspace(client, root, current, include, recursive, format) {
-    const listing = await client.get('/api/2.0/workspace/list', { path: current });
-    for (const object of listing.objects ?? []) {
-        if (object.object_type === 'DIRECTORY') {
-            if (recursive)
-                yield* walkWorkspace(client, root, object.path, include, recursive, format);
-            continue;
-        }
-        const relative = object.path.slice(root.length).replace(/^\/+/, '');
-        if (!relative || !include(relative))
-            continue;
-        const exported = await client.get('/api/2.0/workspace/export', { path: object.path, format });
-        yield { path: relative, content: exported.content ? base64ToBytes(exported.content) : new Uint8Array() };
+    if (config.lakebase) {
+        const lakebase = lakebaseClient({ ...config.lakebase, token: identity });
+        bundle.lakebase = lakebase;
+        if (config.sessionStoreFactory)
+            bundle.store = config.sessionStoreFactory(lakebase);
     }
+    return bundle;
 }
-function isTerminalDatabricksRunState(run) {
-    const state = run.state;
-    const lifeCycle = state?.life_cycle_state;
-    return lifeCycle === 'TERMINATED' || lifeCycle === 'SKIPPED' || lifeCycle === 'INTERNAL_ERROR';
-}
-function isTerminalDatabricksStatementState(statement) {
-    const status = statement.status;
-    const state = status?.state;
-    return state === 'SUCCEEDED' || state === 'FAILED' || state === 'CANCELED' || state === 'CLOSED';
-}
-function base64ToBytes(value) {
-    if (typeof Buffer !== 'undefined')
-        return new Uint8Array(Buffer.from(value, 'base64'));
-    const binary = atob(value);
-    const bytes = new Uint8Array(binary.length);
-    for (let i = 0; i < binary.length; i += 1)
-        bytes[i] = binary.charCodeAt(i);
-    return bytes;
+function principalLabel(principal) {
+    if (principal.kind === 'service-principal')
+        return `sp:${principal.clientId}`;
+    // pat / on-behalf-of: prefer an explicit label (e.g. the channel actor / user id) over the bare kind.
+    return principal.label ?? principal.kind;
 }
 //# sourceMappingURL=index.js.map