@fabricorg/experiments-evals 0.1.0 → 0.2.0

package/README.md

@@ -10,6 +10,9 @@ import { DatabricksModelClient } from '@fabricorg/experiments-evals/databricks';
 ```
 
 Databricks is an explicit adapter subpath; it is not exported from the portable
-package root.
+package root. The subpath also exports a read-only `DatabricksMlflowClient` for
+linking native managed-MLflow run metrics into Fabric release policy. MLflow
+artifacts, datasets, traces, scorers, feedback, and lineage remain in
+Databricks.
 
-See [experiments.fabric.pro/docs/ai-quality/overview](https://experiments.fabric.pro/docs/ai-quality/overview).
+See [Databricks-native AI quality](https://experiments.fabric.pro/docs/ai-quality/databricks-native/).

package/dist/databricks.cjs

@@ -1,25 +1,79 @@
 'use strict';
 
+var zod = require('zod');
+
+// src/databricks-auth.ts
+var DatabricksBearerProvider = class {
+  host;
+  auth;
+  fetchImpl;
+  timeoutMs;
+  oauthToken = null;
+  constructor(config) {
+    this.host = normalizeDatabricksHost(config.host);
+    this.auth = config.auth;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks timeoutMs must be positive");
+    }
+  }
+  async token() {
+    if (this.auth.kind === "pat") return this.auth.token;
+    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
+      return this.oauthToken.value;
+    }
+    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
+      method: "POST",
+      headers: {
+        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
+        "content-type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
+    const body = await response.json();
+    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
+    this.oauthToken = {
+      value: body.access_token,
+      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
+    };
+    return this.oauthToken.value;
+  }
+};
+function normalizeDatabricksHost(host) {
+  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+}
+function toBase64(value) {
+  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
+  return btoa(value);
+}
+
 // src/databricks-model-client.ts
 var DatabricksModelClient = class {
   endpoint;
   /** Exposed for wiring assertions (deps-construction tests). */
   authMode;
   host;
-  auth;
   fetchImpl;
   timeoutMs;
-  oauthToken = null;
+  bearer;
   constructor(config) {
-    this.host = normalizeHost(config.host);
+    this.host = normalizeDatabricksHost(config.host);
     this.endpoint = config.endpoint;
-    this.auth = config.auth;
     this.authMode = config.auth.kind;
     this.fetchImpl = config.fetchImpl ?? fetch;
     this.timeoutMs = config.timeoutMs ?? 6e4;
     if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
       throw new Error("Databricks Model Serving timeoutMs must be positive");
     }
+    this.bearer = new DatabricksBearerProvider({
+      host: this.host,
+      auth: config.auth,
+      fetchImpl: this.fetchImpl,
+      timeoutMs: this.timeoutMs
+    });
   }
   async complete(messages, options) {
     if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {
@@ -33,7 +87,7 @@ var DatabricksModelClient = class {
       {
         method: "POST",
         headers: {
-          authorization: `Bearer ${await this.resolveToken()}`,
+          authorization: `Bearer ${await this.bearer.token()}`,
           "content-type": "application/json"
         },
         body: JSON.stringify({
@@ -60,29 +114,6 @@ var DatabricksModelClient = class {
       }
     };
   }
-  async resolveToken() {
-    if (this.auth.kind === "pat") return this.auth.token;
-    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
-      return this.oauthToken.value;
-    }
-    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
-      method: "POST",
-      headers: {
-        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
-        "content-type": "application/x-www-form-urlencoded"
-      },
-      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
-      signal: AbortSignal.timeout(this.timeoutMs)
-    });
-    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
-    const body = await response.json();
-    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
-    this.oauthToken = {
-      value: body.access_token,
-      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
-    };
-    return this.oauthToken.value;
-  }
 };
 function parseServingResponse(payload) {
   if (!isRecord(payload)) throw new Error("Model Serving returned an invalid response object");
@@ -107,14 +138,126 @@ function isRecord(value) {
 function isTokenCount(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function normalizeHost(host) {
-  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+var MlflowMetric = zod.z.object({
+  key: zod.z.string().min(1),
+  value: zod.z.number(),
+  timestamp: zod.z.number().optional(),
+  step: zod.z.number().optional()
+});
+var MlflowRunResponse = zod.z.object({
+  run: zod.z.object({
+    info: zod.z.object({
+      run_id: zod.z.string().min(1),
+      experiment_id: zod.z.string().min(1),
+      status: zod.z.string().min(1),
+      start_time: zod.z.number().optional(),
+      end_time: zod.z.number().optional(),
+      artifact_uri: zod.z.string().optional(),
+      run_name: zod.z.string().optional()
+    }),
+    data: zod.z.object({
+      metrics: zod.z.array(MlflowMetric).default([]),
+      params: zod.z.array(zod.z.object({ key: zod.z.string(), value: zod.z.string() })).default([]),
+      tags: zod.z.array(zod.z.object({ key: zod.z.string(), value: zod.z.string() })).default([])
+    }).default({ metrics: [], params: [], tags: [] })
+  })
+});
+var DatabricksMlflowClient = class {
+  host;
+  authMode;
+  fetchImpl;
+  timeoutMs;
+  bearer;
+  constructor(config) {
+    this.host = normalizeDatabricksHost(config.host);
+    this.authMode = config.auth.kind;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks MLflow timeoutMs must be positive");
+    }
+    this.bearer = new DatabricksBearerProvider({
+      host: this.host,
+      auth: config.auth,
+      fetchImpl: this.fetchImpl,
+      timeoutMs: this.timeoutMs
+    });
+  }
+  async getRun(runId) {
+    if (!runId.trim()) throw new Error("MLflow runId is required");
+    const url = new URL(`${this.host}/api/2.0/mlflow/runs/get`);
+    url.searchParams.set("run_id", runId);
+    const response = await this.fetchImpl(url, {
+      headers: { authorization: `Bearer ${await this.bearer.token()}` },
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) {
+      const body = await response.text();
+      throw new Error(
+        `Databricks MLflow run lookup failed (${response.status}): ${body.slice(0, 500)}`
+      );
+    }
+    const parsed = MlflowRunResponse.safeParse(await response.json());
+    if (!parsed.success) {
+      throw new Error(
+        `Databricks MLflow returned an invalid run: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`
+      );
+    }
+    return parsed.data.run;
+  }
+  runUrl(run) {
+    return `${this.host}/ml/experiments/${encodeURIComponent(run.info.experiment_id)}/runs/${encodeURIComponent(run.info.run_id)}`;
+  }
+};
+function parseMlflowMetricGates(value) {
+  const entries = value.split(",").map((entry) => entry.trim()).filter(Boolean);
+  if (entries.length === 0) throw new Error("At least one MLflow metric gate is required");
+  return entries.map((entry) => {
+    const match = /^(.+?)(>=|<=|==|!=|>|<)(-?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?)$/i.exec(entry);
+    if (!match) throw new Error(`Invalid MLflow metric gate '${entry}'`);
+    const metric = match[1].trim();
+    if (!metric) throw new Error(`Invalid MLflow metric gate '${entry}'`);
+    return {
+      metric,
+      operator: match[2],
+      threshold: Number(match[3])
+    };
+  });
 }
-function toBase64(value) {
-  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
-  return btoa(value);
+function evaluateMlflowMetricGates(run, gates) {
+  const metrics = new Map(run.data.metrics.map((metric) => [metric.key, metric.value]));
+  return gates.map((gate) => {
+    const actual = metrics.get(gate.metric) ?? null;
+    return {
+      ...gate,
+      actual,
+      passed: actual === null ? false : compare(actual, gate.operator, gate.threshold),
+      ...actual === null ? { reason: "missing-metric" } : {}
+    };
+  });
+}
+function compare(actual, operator, threshold) {
+  switch (operator) {
+    case ">=":
+      return actual >= threshold;
+    case ">":
+      return actual > threshold;
+    case "<=":
+      return actual <= threshold;
+    case "<":
+      return actual < threshold;
+    case "==":
+      return actual === threshold;
+    case "!=":
+      return actual !== threshold;
+  }
 }
 
+exports.DatabricksBearerProvider = DatabricksBearerProvider;
+exports.DatabricksMlflowClient = DatabricksMlflowClient;
 exports.DatabricksModelClient = DatabricksModelClient;
+exports.evaluateMlflowMetricGates = evaluateMlflowMetricGates;
+exports.normalizeDatabricksHost = normalizeDatabricksHost;
+exports.parseMlflowMetricGates = parseMlflowMetricGates;
 //# sourceMappingURL=databricks.cjs.map
 //# sourceMappingURL=databricks.cjs.map

package/dist/databricks.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/databricks-model-client.ts"],"names":[],"mappings":";;;AAqCO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACrC,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,cAAc,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AAAA,EAEA,MAAc,YAAA,GAAgC;AAC5C,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;AAEA,SAAS,cAAc,IAAA,EAAsB;AAC3C,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB","file":"databricks.cjs","sourcesContent":["import type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeHost(config.host);\n    this.endpoint = config.endpoint;\n    this.auth = config.auth;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.resolveToken()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n\n  private async resolveToken(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n\nfunction normalizeHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n"]}
+{"version":3,"sources":["../src/databricks-auth.ts","../src/databricks-model-client.ts","../src/databricks-mlflow-client.ts"],"names":["z"],"mappings":";;;;;AASO,IAAM,2BAAN,MAA+B;AAAA,EACnB,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAKT;AACD,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,IACzD;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,GAAyB;AAC7B,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEO,SAAS,wBAAwB,IAAA,EAAsB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB;;;AC1BO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MACzC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,eAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;ACnIA,IAAM,YAAA,GAAeA,MAAE,MAAA,CAAO;AAAA,EAC5B,GAAA,EAAKA,KAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACrB,KAAA,EAAOA,MAAE,MAAA,EAAO;AAAA,EAChB,SAAA,EAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACnB,CAAC,CAAA;AAED,IAAM,iBAAA,GAAoBA,MAAE,MAAA,CAAO;AAAA,EACjC,GAAA,EAAKA,MAAE,MAAA,CAAO;AAAA,IACZ,IAAA,EAAMA,MAAE,MAAA,CAAO;AAAA,MACb,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACxB,aAAA,EAAeA,KAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MAC/B,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACxB,UAAA,EAAYA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAChC,QAAA,EAAUA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC9B,YAAA,EAAcA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,QAAA,EAAUA,KAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,CAAA;AAAA,IACD,IAAA,EAAMA,MACH,MAAA,CAAO;AAAA,MACN,SAASA,KAAA,CAAE,KAAA,CAAM,YAAY,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,MACzC,QAAQA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,CAAO,EAAE,KAAKA,KAAA,CAAE,MAAA,IAAU,KAAA,EAAOA,KAAA,CAAE,QAAO,EAAG,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,MAC5E,MAAMA,KAAA,CAAE,KAAA,CAAMA,MAAE,MAAA,CAAO,EAAE,KAAKA,KAAA,CAAE,MAAA,IAAU,KAAA,EAAOA,KAAA,CAAE,QAAO,EAAG,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAE;AAAA,KAC3E,CAAA,CACA,OAAA,CAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAG,IAAA,EAAM,IAAI;AAAA,GACjD;AACH,CAAC,CAAA;AAYM,IAAM,yBAAN,MAA6B;AAAA,EACzB,IAAA;AAAA,EACA,QAAA;AAAA,EACQ,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAsC;AAChD,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAChE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MACzC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,KAAA,EAA6C;AACxD,IAAA,IAAI,CAAC,KAAA,CAAM,IAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC7D,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,wBAAA,CAA0B,CAAA;AAC1D,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,KAAK,CAAA;AACpC,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA,EAAK;AAAA,MACzC,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,CAAA,CAAA,EAAG;AAAA,MAChE,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,MAAM,SAAS,iBAAA,CAAkB,SAAA,CAAU,MAAM,QAAA,CAAS,MAAM,CAAA;AAChE,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,8CAA8C,MAAA,CAAO,KAAA,CAAM,OAAO,CAAC,CAAA,EAAG,WAAW,iBAAiB,CAAA;AAAA,OACpG;AAAA,IACF;AACA,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA;AAAA,EACrB;AAAA,EAEA,OAAO,GAAA,EAAkC;AACvC,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,gBAAA,EAAmB,mBAAmB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAC,CAAA,MAAA,EAAS,kBAAA,CAAmB,GAAA,CAAI,IAAA,CAAK,MAAM,CAAC,CAAA,CAAA;AAAA,EAC9H;AACF;AAiBO,SAAS,uBAAuB,KAAA,EAAmC;AACxE,EAAA,MAAM,OAAA,GAAU,KAAA,CACb,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,IAAA,EAAM,CAAA,CAC3B,OAAO,OAAO,CAAA;AACjB,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,EAAG,MAAM,IAAI,MAAM,6CAA6C,CAAA;AACvF,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,KAAU;AAC5B,IAAA,MAAM,KAAA,GAAQ,oEAAA,CAAqE,IAAA,CAAK,KAAK,CAAA;AAC7F,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAG,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,CAAC,CAAA,CAAG,IAAA,EAAK;AAC9B,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAG,CAAA;AACpE,IAAA,OAAO;AAAA,MACL,MAAA;AAAA,MACA,QAAA,EAAU,MAAM,CAAC,CAAA;AAAA,MACjB,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC;AAAA,KAC5B;AAAA,EACF,CAAC,CAAA;AACH;AAGO,SAAS,yBAAA,CACd,KACA,KAAA,EACoB;AACpB,EAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AACpF,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AACzB,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,MAAM,CAAA,IAAK,IAAA;AAC3C,IAAA,OAAO;AAAA,MACL,GAAG,IAAA;AAAA,MACH,MAAA;AAAA,MACA,MAAA,EAAQ,WAAW,IAAA,GAAO,KAAA,GAAQ,QAAQ,MAAA,EAAQ,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,SAAS,CAAA;AAAA,MAC/E,GAAI,MAAA,KAAW,IAAA,GAAO,EAAE,MAAA,EAAQ,gBAAA,KAA8B;AAAC,KACjE;AAAA,EACF,CAAC,CAAA;AACH;AAEA,SAAS,OAAA,CAAQ,MAAA,EAAgB,QAAA,EAA8B,SAAA,EAA4B;AACzF,EAAA,QAAQ,QAAA;AAAU,IAChB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,IAAU,SAAA;AAAA,IACnB,KAAK,GAAA;AACH,MAAA,OAAO,MAAA,GAAS,SAAA;AAAA,IAClB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,IAAU,SAAA;AAAA,IACnB,KAAK,GAAA;AACH,MAAA,OAAO,MAAA,GAAS,SAAA;AAAA,IAClB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,KAAW,SAAA;AAAA,IACpB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,KAAW,SAAA;AAAA;AAExB","file":"databricks.cjs","sourcesContent":["/** Authentication accepted by Databricks workspace APIs. */\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\n/**\n * Small, dependency-free bearer provider shared by the Model Serving and\n * MLflow adapters. OAuth tokens are cached until one minute before expiry.\n */\nexport class DatabricksBearerProvider {\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: {\n    host: string;\n    auth: DatabricksAuth;\n    fetchImpl?: typeof fetch;\n    timeoutMs?: number;\n  }) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.auth = config.auth;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks timeoutMs must be positive');\n    }\n  }\n\n  async token(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nexport function normalizeDatabricksHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n","import {\n  type DatabricksAuth,\n  DatabricksBearerProvider,\n  normalizeDatabricksHost,\n} from './databricks-auth.js';\nimport type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\nexport type { DatabricksAuth } from './databricks-auth.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly bearer: DatabricksBearerProvider;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.endpoint = config.endpoint;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n    this.bearer = new DatabricksBearerProvider({\n      host: this.host,\n      auth: config.auth,\n      fetchImpl: this.fetchImpl,\n      timeoutMs: this.timeoutMs,\n    });\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.bearer.token()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n","import { z } from 'zod';\nimport {\n  type DatabricksAuth,\n  DatabricksBearerProvider,\n  normalizeDatabricksHost,\n} from './databricks-auth.js';\n\nconst MlflowMetric = z.object({\n  key: z.string().min(1),\n  value: z.number(),\n  timestamp: z.number().optional(),\n  step: z.number().optional(),\n});\n\nconst MlflowRunResponse = z.object({\n  run: z.object({\n    info: z.object({\n      run_id: z.string().min(1),\n      experiment_id: z.string().min(1),\n      status: z.string().min(1),\n      start_time: z.number().optional(),\n      end_time: z.number().optional(),\n      artifact_uri: z.string().optional(),\n      run_name: z.string().optional(),\n    }),\n    data: z\n      .object({\n        metrics: z.array(MlflowMetric).default([]),\n        params: z.array(z.object({ key: z.string(), value: z.string() })).default([]),\n        tags: z.array(z.object({ key: z.string(), value: z.string() })).default([]),\n      })\n      .default({ metrics: [], params: [], tags: [] }),\n  }),\n});\n\nexport type DatabricksMlflowRun = z.infer<typeof MlflowRunResponse>['run'];\n\nexport interface DatabricksMlflowClientConfig {\n  host: string;\n  auth: DatabricksAuth;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n}\n\n/** Read-only adapter for native managed-MLflow run evidence. */\nexport class DatabricksMlflowClient {\n  readonly host: string;\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly bearer: DatabricksBearerProvider;\n\n  constructor(config: DatabricksMlflowClientConfig) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks MLflow timeoutMs must be positive');\n    }\n    this.bearer = new DatabricksBearerProvider({\n      host: this.host,\n      auth: config.auth,\n      fetchImpl: this.fetchImpl,\n      timeoutMs: this.timeoutMs,\n    });\n  }\n\n  async getRun(runId: string): Promise<DatabricksMlflowRun> {\n    if (!runId.trim()) throw new Error('MLflow runId is required');\n    const url = new URL(`${this.host}/api/2.0/mlflow/runs/get`);\n    url.searchParams.set('run_id', runId);\n    const response = await this.fetchImpl(url, {\n      headers: { authorization: `Bearer ${await this.bearer.token()}` },\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Databricks MLflow run lookup failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const parsed = MlflowRunResponse.safeParse(await response.json());\n    if (!parsed.success) {\n      throw new Error(\n        `Databricks MLflow returned an invalid run: ${parsed.error.issues[0]?.message ?? 'schema mismatch'}`,\n      );\n    }\n    return parsed.data.run;\n  }\n\n  runUrl(run: DatabricksMlflowRun): string {\n    return `${this.host}/ml/experiments/${encodeURIComponent(run.info.experiment_id)}/runs/${encodeURIComponent(run.info.run_id)}`;\n  }\n}\n\nexport type MlflowGateOperator = '>=' | '>' | '<=' | '<' | '==' | '!=';\n\nexport interface MlflowMetricGate {\n  metric: string;\n  operator: MlflowGateOperator;\n  threshold: number;\n}\n\nexport interface MlflowGateResult extends MlflowMetricGate {\n  actual: number | null;\n  passed: boolean;\n  reason?: 'missing-metric';\n}\n\n/** Parse `accuracy>=0.9,toxicity<=0.05` without owning MLflow scoring itself. */\nexport function parseMlflowMetricGates(value: string): MlflowMetricGate[] {\n  const entries = value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n  if (entries.length === 0) throw new Error('At least one MLflow metric gate is required');\n  return entries.map((entry) => {\n    const match = /^(.+?)(>=|<=|==|!=|>|<)(-?(?:\\d+(?:\\.\\d*)?|\\.\\d+)(?:e[+-]?\\d+)?)$/i.exec(entry);\n    if (!match) throw new Error(`Invalid MLflow metric gate '${entry}'`);\n    const metric = match[1]!.trim();\n    if (!metric) throw new Error(`Invalid MLflow metric gate '${entry}'`);\n    return {\n      metric,\n      operator: match[2] as MlflowGateOperator,\n      threshold: Number(match[3]),\n    };\n  });\n}\n\n/** Evaluate release policy over metrics already computed and retained by MLflow. */\nexport function evaluateMlflowMetricGates(\n  run: DatabricksMlflowRun,\n  gates: readonly MlflowMetricGate[],\n): MlflowGateResult[] {\n  const metrics = new Map(run.data.metrics.map((metric) => [metric.key, metric.value]));\n  return gates.map((gate) => {\n    const actual = metrics.get(gate.metric) ?? null;\n    return {\n      ...gate,\n      actual,\n      passed: actual === null ? false : compare(actual, gate.operator, gate.threshold),\n      ...(actual === null ? { reason: 'missing-metric' as const } : {}),\n    };\n  });\n}\n\nfunction compare(actual: number, operator: MlflowGateOperator, threshold: number): boolean {\n  switch (operator) {\n    case '>=':\n      return actual >= threshold;\n    case '>':\n      return actual > threshold;\n    case '<=':\n      return actual <= threshold;\n    case '<':\n      return actual < threshold;\n    case '==':\n      return actual === threshold;\n    case '!=':\n      return actual !== threshold;\n  }\n}\n"]}

package/dist/databricks.d.cts

@@ -1,5 +1,34 @@
 import { M as ModelClient, C as ChatMessage, g as ModelCompletionOptions, h as ModelResponse } from './model-client-B7yk_i1s.cjs';
-import 'zod';
+import { z } from 'zod';
+
+/** Authentication accepted by Databricks workspace APIs. */
+type DatabricksAuth = {
+    kind: 'pat';
+    token: string;
+} | {
+    kind: 'oauth-m2m';
+    clientId: string;
+    clientSecret: string;
+};
+/**
+ * Small, dependency-free bearer provider shared by the Model Serving and
+ * MLflow adapters. OAuth tokens are cached until one minute before expiry.
+ */
+declare class DatabricksBearerProvider {
+    private readonly host;
+    private readonly auth;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private oauthToken;
+    constructor(config: {
+        host: string;
+        auth: DatabricksAuth;
+        fetchImpl?: typeof fetch;
+        timeoutMs?: number;
+    });
+    token(): Promise<string>;
+}
+declare function normalizeDatabricksHost(host: string): string;
 
 /**
  * Transport-agnostic Databricks Model Serving chat client
@@ -14,14 +43,6 @@ import 'zod';
  * (`apps/api/src/server/model-client.ts`) and the Temporal worker
  * (`agents/harness-deploy`) wrap this class with their own env resolution.
  */
-type DatabricksAuth = {
-    kind: 'pat';
-    token: string;
-} | {
-    kind: 'oauth-m2m';
-    clientId: string;
-    clientSecret: string;
-};
 interface DatabricksModelClientConfig {
     /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */
     host: string;
@@ -38,13 +59,250 @@ declare class DatabricksModelClient implements ModelClient {
     /** Exposed for wiring assertions (deps-construction tests). */
     readonly authMode: DatabricksAuth['kind'];
     private readonly host;
-    private readonly auth;
     private readonly fetchImpl;
     private readonly timeoutMs;
-    private oauthToken;
+    private readonly bearer;
     constructor(config: DatabricksModelClientConfig);
     complete(messages: readonly ChatMessage[], options: ModelCompletionOptions): Promise<ModelResponse>;
-    private resolveToken;
 }
 
-export { type DatabricksAuth, DatabricksModelClient, type DatabricksModelClientConfig };
+declare const MlflowRunResponse: z.ZodObject<{
+    run: z.ZodObject<{
+        info: z.ZodObject<{
+            run_id: z.ZodString;
+            experiment_id: z.ZodString;
+            status: z.ZodString;
+            start_time: z.ZodOptional<z.ZodNumber>;
+            end_time: z.ZodOptional<z.ZodNumber>;
+            artifact_uri: z.ZodOptional<z.ZodString>;
+            run_name: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        }, {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        }>;
+        data: z.ZodDefault<z.ZodObject<{
+            metrics: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodNumber;
+                timestamp: z.ZodOptional<z.ZodNumber>;
+                step: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }, {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }>, "many">>;
+            params: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                value: string;
+                key: string;
+            }, {
+                value: string;
+                key: string;
+            }>, "many">>;
+            tags: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                value: string;
+                key: string;
+            }, {
+                value: string;
+                key: string;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        }, {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data: {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        };
+    }, {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data?: {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    run: {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data: {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        };
+    };
+}, {
+    run: {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data?: {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        } | undefined;
+    };
+}>;
+type DatabricksMlflowRun = z.infer<typeof MlflowRunResponse>['run'];
+interface DatabricksMlflowClientConfig {
+    host: string;
+    auth: DatabricksAuth;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}
+/** Read-only adapter for native managed-MLflow run evidence. */
+declare class DatabricksMlflowClient {
+    readonly host: string;
+    readonly authMode: DatabricksAuth['kind'];
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly bearer;
+    constructor(config: DatabricksMlflowClientConfig);
+    getRun(runId: string): Promise<DatabricksMlflowRun>;
+    runUrl(run: DatabricksMlflowRun): string;
+}
+type MlflowGateOperator = '>=' | '>' | '<=' | '<' | '==' | '!=';
+interface MlflowMetricGate {
+    metric: string;
+    operator: MlflowGateOperator;
+    threshold: number;
+}
+interface MlflowGateResult extends MlflowMetricGate {
+    actual: number | null;
+    passed: boolean;
+    reason?: 'missing-metric';
+}
+/** Parse `accuracy>=0.9,toxicity<=0.05` without owning MLflow scoring itself. */
+declare function parseMlflowMetricGates(value: string): MlflowMetricGate[];
+/** Evaluate release policy over metrics already computed and retained by MLflow. */
+declare function evaluateMlflowMetricGates(run: DatabricksMlflowRun, gates: readonly MlflowMetricGate[]): MlflowGateResult[];
+
+export { type DatabricksAuth, DatabricksBearerProvider, DatabricksMlflowClient, type DatabricksMlflowClientConfig, type DatabricksMlflowRun, DatabricksModelClient, type DatabricksModelClientConfig, type MlflowGateOperator, type MlflowGateResult, type MlflowMetricGate, evaluateMlflowMetricGates, normalizeDatabricksHost, parseMlflowMetricGates };

package/dist/databricks.d.ts

@@ -1,5 +1,34 @@
 import { M as ModelClient, C as ChatMessage, g as ModelCompletionOptions, h as ModelResponse } from './model-client-B7yk_i1s.js';
-import 'zod';
+import { z } from 'zod';
+
+/** Authentication accepted by Databricks workspace APIs. */
+type DatabricksAuth = {
+    kind: 'pat';
+    token: string;
+} | {
+    kind: 'oauth-m2m';
+    clientId: string;
+    clientSecret: string;
+};
+/**
+ * Small, dependency-free bearer provider shared by the Model Serving and
+ * MLflow adapters. OAuth tokens are cached until one minute before expiry.
+ */
+declare class DatabricksBearerProvider {
+    private readonly host;
+    private readonly auth;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private oauthToken;
+    constructor(config: {
+        host: string;
+        auth: DatabricksAuth;
+        fetchImpl?: typeof fetch;
+        timeoutMs?: number;
+    });
+    token(): Promise<string>;
+}
+declare function normalizeDatabricksHost(host: string): string;
 
 /**
  * Transport-agnostic Databricks Model Serving chat client
@@ -14,14 +43,6 @@ import 'zod';
  * (`apps/api/src/server/model-client.ts`) and the Temporal worker
  * (`agents/harness-deploy`) wrap this class with their own env resolution.
  */
-type DatabricksAuth = {
-    kind: 'pat';
-    token: string;
-} | {
-    kind: 'oauth-m2m';
-    clientId: string;
-    clientSecret: string;
-};
 interface DatabricksModelClientConfig {
     /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */
     host: string;
@@ -38,13 +59,250 @@ declare class DatabricksModelClient implements ModelClient {
     /** Exposed for wiring assertions (deps-construction tests). */
     readonly authMode: DatabricksAuth['kind'];
     private readonly host;
-    private readonly auth;
     private readonly fetchImpl;
     private readonly timeoutMs;
-    private oauthToken;
+    private readonly bearer;
     constructor(config: DatabricksModelClientConfig);
     complete(messages: readonly ChatMessage[], options: ModelCompletionOptions): Promise<ModelResponse>;
-    private resolveToken;
 }
 
-export { type DatabricksAuth, DatabricksModelClient, type DatabricksModelClientConfig };
+declare const MlflowRunResponse: z.ZodObject<{
+    run: z.ZodObject<{
+        info: z.ZodObject<{
+            run_id: z.ZodString;
+            experiment_id: z.ZodString;
+            status: z.ZodString;
+            start_time: z.ZodOptional<z.ZodNumber>;
+            end_time: z.ZodOptional<z.ZodNumber>;
+            artifact_uri: z.ZodOptional<z.ZodString>;
+            run_name: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        }, {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        }>;
+        data: z.ZodDefault<z.ZodObject<{
+            metrics: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodNumber;
+                timestamp: z.ZodOptional<z.ZodNumber>;
+                step: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }, {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }>, "many">>;
+            params: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                value: string;
+                key: string;
+            }, {
+                value: string;
+                key: string;
+            }>, "many">>;
+            tags: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                key: z.ZodString;
+                value: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                value: string;
+                key: string;
+            }, {
+                value: string;
+                key: string;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        }, {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data: {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        };
+    }, {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data?: {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    run: {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data: {
+            params: {
+                value: string;
+                key: string;
+            }[];
+            metrics: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[];
+            tags: {
+                value: string;
+                key: string;
+            }[];
+        };
+    };
+}, {
+    run: {
+        info: {
+            status: string;
+            run_id: string;
+            experiment_id: string;
+            start_time?: number | undefined;
+            end_time?: number | undefined;
+            artifact_uri?: string | undefined;
+            run_name?: string | undefined;
+        };
+        data?: {
+            params?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+            metrics?: {
+                value: number;
+                key: string;
+                timestamp?: number | undefined;
+                step?: number | undefined;
+            }[] | undefined;
+            tags?: {
+                value: string;
+                key: string;
+            }[] | undefined;
+        } | undefined;
+    };
+}>;
+type DatabricksMlflowRun = z.infer<typeof MlflowRunResponse>['run'];
+interface DatabricksMlflowClientConfig {
+    host: string;
+    auth: DatabricksAuth;
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}
+/** Read-only adapter for native managed-MLflow run evidence. */
+declare class DatabricksMlflowClient {
+    readonly host: string;
+    readonly authMode: DatabricksAuth['kind'];
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private readonly bearer;
+    constructor(config: DatabricksMlflowClientConfig);
+    getRun(runId: string): Promise<DatabricksMlflowRun>;
+    runUrl(run: DatabricksMlflowRun): string;
+}
+type MlflowGateOperator = '>=' | '>' | '<=' | '<' | '==' | '!=';
+interface MlflowMetricGate {
+    metric: string;
+    operator: MlflowGateOperator;
+    threshold: number;
+}
+interface MlflowGateResult extends MlflowMetricGate {
+    actual: number | null;
+    passed: boolean;
+    reason?: 'missing-metric';
+}
+/** Parse `accuracy>=0.9,toxicity<=0.05` without owning MLflow scoring itself. */
+declare function parseMlflowMetricGates(value: string): MlflowMetricGate[];
+/** Evaluate release policy over metrics already computed and retained by MLflow. */
+declare function evaluateMlflowMetricGates(run: DatabricksMlflowRun, gates: readonly MlflowMetricGate[]): MlflowGateResult[];
+
+export { type DatabricksAuth, DatabricksBearerProvider, DatabricksMlflowClient, type DatabricksMlflowClientConfig, type DatabricksMlflowRun, DatabricksModelClient, type DatabricksModelClientConfig, type MlflowGateOperator, type MlflowGateResult, type MlflowMetricGate, evaluateMlflowMetricGates, normalizeDatabricksHost, parseMlflowMetricGates };

package/dist/databricks.js

@@ -1,23 +1,77 @@
+import { z } from 'zod';
+
+// src/databricks-auth.ts
+var DatabricksBearerProvider = class {
+  host;
+  auth;
+  fetchImpl;
+  timeoutMs;
+  oauthToken = null;
+  constructor(config) {
+    this.host = normalizeDatabricksHost(config.host);
+    this.auth = config.auth;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks timeoutMs must be positive");
+    }
+  }
+  async token() {
+    if (this.auth.kind === "pat") return this.auth.token;
+    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
+      return this.oauthToken.value;
+    }
+    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
+      method: "POST",
+      headers: {
+        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
+        "content-type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
+    const body = await response.json();
+    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
+    this.oauthToken = {
+      value: body.access_token,
+      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
+    };
+    return this.oauthToken.value;
+  }
+};
+function normalizeDatabricksHost(host) {
+  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+}
+function toBase64(value) {
+  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
+  return btoa(value);
+}
+
 // src/databricks-model-client.ts
 var DatabricksModelClient = class {
   endpoint;
   /** Exposed for wiring assertions (deps-construction tests). */
   authMode;
   host;
-  auth;
   fetchImpl;
   timeoutMs;
-  oauthToken = null;
+  bearer;
   constructor(config) {
-    this.host = normalizeHost(config.host);
+    this.host = normalizeDatabricksHost(config.host);
     this.endpoint = config.endpoint;
-    this.auth = config.auth;
     this.authMode = config.auth.kind;
     this.fetchImpl = config.fetchImpl ?? fetch;
     this.timeoutMs = config.timeoutMs ?? 6e4;
     if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
       throw new Error("Databricks Model Serving timeoutMs must be positive");
     }
+    this.bearer = new DatabricksBearerProvider({
+      host: this.host,
+      auth: config.auth,
+      fetchImpl: this.fetchImpl,
+      timeoutMs: this.timeoutMs
+    });
   }
   async complete(messages, options) {
     if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {
@@ -31,7 +85,7 @@ var DatabricksModelClient = class {
       {
         method: "POST",
         headers: {
-          authorization: `Bearer ${await this.resolveToken()}`,
+          authorization: `Bearer ${await this.bearer.token()}`,
           "content-type": "application/json"
         },
         body: JSON.stringify({
@@ -58,29 +112,6 @@ var DatabricksModelClient = class {
       }
     };
   }
-  async resolveToken() {
-    if (this.auth.kind === "pat") return this.auth.token;
-    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
-      return this.oauthToken.value;
-    }
-    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
-      method: "POST",
-      headers: {
-        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
-        "content-type": "application/x-www-form-urlencoded"
-      },
-      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
-      signal: AbortSignal.timeout(this.timeoutMs)
-    });
-    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
-    const body = await response.json();
-    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
-    this.oauthToken = {
-      value: body.access_token,
-      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
-    };
-    return this.oauthToken.value;
-  }
 };
 function parseServingResponse(payload) {
   if (!isRecord(payload)) throw new Error("Model Serving returned an invalid response object");
@@ -105,14 +136,121 @@ function isRecord(value) {
 function isTokenCount(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
-function normalizeHost(host) {
-  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+var MlflowMetric = z.object({
+  key: z.string().min(1),
+  value: z.number(),
+  timestamp: z.number().optional(),
+  step: z.number().optional()
+});
+var MlflowRunResponse = z.object({
+  run: z.object({
+    info: z.object({
+      run_id: z.string().min(1),
+      experiment_id: z.string().min(1),
+      status: z.string().min(1),
+      start_time: z.number().optional(),
+      end_time: z.number().optional(),
+      artifact_uri: z.string().optional(),
+      run_name: z.string().optional()
+    }),
+    data: z.object({
+      metrics: z.array(MlflowMetric).default([]),
+      params: z.array(z.object({ key: z.string(), value: z.string() })).default([]),
+      tags: z.array(z.object({ key: z.string(), value: z.string() })).default([])
+    }).default({ metrics: [], params: [], tags: [] })
+  })
+});
+var DatabricksMlflowClient = class {
+  host;
+  authMode;
+  fetchImpl;
+  timeoutMs;
+  bearer;
+  constructor(config) {
+    this.host = normalizeDatabricksHost(config.host);
+    this.authMode = config.auth.kind;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks MLflow timeoutMs must be positive");
+    }
+    this.bearer = new DatabricksBearerProvider({
+      host: this.host,
+      auth: config.auth,
+      fetchImpl: this.fetchImpl,
+      timeoutMs: this.timeoutMs
+    });
+  }
+  async getRun(runId) {
+    if (!runId.trim()) throw new Error("MLflow runId is required");
+    const url = new URL(`${this.host}/api/2.0/mlflow/runs/get`);
+    url.searchParams.set("run_id", runId);
+    const response = await this.fetchImpl(url, {
+      headers: { authorization: `Bearer ${await this.bearer.token()}` },
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) {
+      const body = await response.text();
+      throw new Error(
+        `Databricks MLflow run lookup failed (${response.status}): ${body.slice(0, 500)}`
+      );
+    }
+    const parsed = MlflowRunResponse.safeParse(await response.json());
+    if (!parsed.success) {
+      throw new Error(
+        `Databricks MLflow returned an invalid run: ${parsed.error.issues[0]?.message ?? "schema mismatch"}`
+      );
+    }
+    return parsed.data.run;
+  }
+  runUrl(run) {
+    return `${this.host}/ml/experiments/${encodeURIComponent(run.info.experiment_id)}/runs/${encodeURIComponent(run.info.run_id)}`;
+  }
+};
+function parseMlflowMetricGates(value) {
+  const entries = value.split(",").map((entry) => entry.trim()).filter(Boolean);
+  if (entries.length === 0) throw new Error("At least one MLflow metric gate is required");
+  return entries.map((entry) => {
+    const match = /^(.+?)(>=|<=|==|!=|>|<)(-?(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?)$/i.exec(entry);
+    if (!match) throw new Error(`Invalid MLflow metric gate '${entry}'`);
+    const metric = match[1].trim();
+    if (!metric) throw new Error(`Invalid MLflow metric gate '${entry}'`);
+    return {
+      metric,
+      operator: match[2],
+      threshold: Number(match[3])
+    };
+  });
 }
-function toBase64(value) {
-  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
-  return btoa(value);
+function evaluateMlflowMetricGates(run, gates) {
+  const metrics = new Map(run.data.metrics.map((metric) => [metric.key, metric.value]));
+  return gates.map((gate) => {
+    const actual = metrics.get(gate.metric) ?? null;
+    return {
+      ...gate,
+      actual,
+      passed: actual === null ? false : compare(actual, gate.operator, gate.threshold),
+      ...actual === null ? { reason: "missing-metric" } : {}
+    };
+  });
+}
+function compare(actual, operator, threshold) {
+  switch (operator) {
+    case ">=":
+      return actual >= threshold;
+    case ">":
+      return actual > threshold;
+    case "<=":
+      return actual <= threshold;
+    case "<":
+      return actual < threshold;
+    case "==":
+      return actual === threshold;
+    case "!=":
+      return actual !== threshold;
+  }
 }
 
-export { DatabricksModelClient };
+export { DatabricksBearerProvider, DatabricksMlflowClient, DatabricksModelClient, evaluateMlflowMetricGates, normalizeDatabricksHost, parseMlflowMetricGates };
 //# sourceMappingURL=databricks.js.map
 //# sourceMappingURL=databricks.js.map

package/dist/databricks.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/databricks-model-client.ts"],"names":[],"mappings":";AAqCO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACrC,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,cAAc,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AAAA,EAEA,MAAc,YAAA,GAAgC;AAC5C,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;AAEA,SAAS,cAAc,IAAA,EAAsB;AAC3C,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB","file":"databricks.js","sourcesContent":["import type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeHost(config.host);\n    this.endpoint = config.endpoint;\n    this.auth = config.auth;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.resolveToken()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n\n  private async resolveToken(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n\nfunction normalizeHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n"]}
+{"version":3,"sources":["../src/databricks-auth.ts","../src/databricks-model-client.ts","../src/databricks-mlflow-client.ts"],"names":[],"mappings":";;;AASO,IAAM,2BAAN,MAA+B;AAAA,EACnB,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAKT;AACD,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,IACzD;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,GAAyB;AAC7B,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEO,SAAS,wBAAwB,IAAA,EAAsB;AAC5D,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB;;;AC1BO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MACzC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,eAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;ACnIA,IAAM,YAAA,GAAe,EAAE,MAAA,CAAO;AAAA,EAC5B,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACrB,KAAA,EAAO,EAAE,MAAA,EAAO;AAAA,EAChB,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC/B,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AACnB,CAAC,CAAA;AAED,IAAM,iBAAA,GAAoB,EAAE,MAAA,CAAO;AAAA,EACjC,GAAA,EAAK,EAAE,MAAA,CAAO;AAAA,IACZ,IAAA,EAAM,EAAE,MAAA,CAAO;AAAA,MACb,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACxB,aAAA,EAAe,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MAC/B,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,MACxB,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAChC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC9B,YAAA,EAAc,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAClC,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAAS,KAC/B,CAAA;AAAA,IACD,IAAA,EAAM,EACH,MAAA,CAAO;AAAA,MACN,SAAS,CAAA,CAAE,KAAA,CAAM,YAAY,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,MACzC,QAAQ,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,CAAO,EAAE,KAAK,CAAA,CAAE,MAAA,IAAU,KAAA,EAAO,CAAA,CAAE,QAAO,EAAG,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA,MAC5E,MAAM,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,CAAO,EAAE,KAAK,CAAA,CAAE,MAAA,IAAU,KAAA,EAAO,CAAA,CAAE,QAAO,EAAG,CAAC,CAAA,CAAE,OAAA,CAAQ,EAAE;AAAA,KAC3E,CAAA,CACA,OAAA,CAAQ,EAAE,OAAA,EAAS,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAG,IAAA,EAAM,IAAI;AAAA,GACjD;AACH,CAAC,CAAA;AAYM,IAAM,yBAAN,MAA6B;AAAA,EACzB,IAAA;AAAA,EACA,QAAA;AAAA,EACQ,SAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAsC;AAChD,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA,CAAwB,MAAA,CAAO,IAAI,CAAA;AAC/C,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,8CAA8C,CAAA;AAAA,IAChE;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MACzC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,OAAO,KAAA,EAA6C;AACxD,IAAA,IAAI,CAAC,KAAA,CAAM,IAAA,IAAQ,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAC7D,IAAA,MAAM,MAAM,IAAI,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,wBAAA,CAA0B,CAAA;AAC1D,IAAA,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,KAAK,CAAA;AACpC,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA,CAAU,GAAA,EAAK;AAAA,MACzC,OAAA,EAAS,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,MAAA,CAAO,KAAA,EAAO,CAAA,CAAA,EAAG;AAAA,MAChE,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,qCAAA,EAAwC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OACjF;AAAA,IACF;AACA,IAAA,MAAM,SAAS,iBAAA,CAAkB,SAAA,CAAU,MAAM,QAAA,CAAS,MAAM,CAAA;AAChE,IAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,8CAA8C,MAAA,CAAO,KAAA,CAAM,OAAO,CAAC,CAAA,EAAG,WAAW,iBAAiB,CAAA;AAAA,OACpG;AAAA,IACF;AACA,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA;AAAA,EACrB;AAAA,EAEA,OAAO,GAAA,EAAkC;AACvC,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,gBAAA,EAAmB,mBAAmB,GAAA,CAAI,IAAA,CAAK,aAAa,CAAC,CAAA,MAAA,EAAS,kBAAA,CAAmB,GAAA,CAAI,IAAA,CAAK,MAAM,CAAC,CAAA,CAAA;AAAA,EAC9H;AACF;AAiBO,SAAS,uBAAuB,KAAA,EAAmC;AACxE,EAAA,MAAM,OAAA,GAAU,KAAA,CACb,KAAA,CAAM,GAAG,CAAA,CACT,GAAA,CAAI,CAAC,KAAA,KAAU,KAAA,CAAM,IAAA,EAAM,CAAA,CAC3B,OAAO,OAAO,CAAA;AACjB,EAAA,IAAI,QAAQ,MAAA,KAAW,CAAA,EAAG,MAAM,IAAI,MAAM,6CAA6C,CAAA;AACvF,EAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,KAAA,KAAU;AAC5B,IAAA,MAAM,KAAA,GAAQ,oEAAA,CAAqE,IAAA,CAAK,KAAK,CAAA;AAC7F,IAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAG,CAAA;AACnE,IAAA,MAAM,MAAA,GAAS,KAAA,CAAM,CAAC,CAAA,CAAG,IAAA,EAAK;AAC9B,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,KAAK,CAAA,CAAA,CAAG,CAAA;AACpE,IAAA,OAAO;AAAA,MACL,MAAA;AAAA,MACA,QAAA,EAAU,MAAM,CAAC,CAAA;AAAA,MACjB,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC;AAAA,KAC5B;AAAA,EACF,CAAC,CAAA;AACH;AAGO,SAAS,yBAAA,CACd,KACA,KAAA,EACoB;AACpB,EAAA,MAAM,OAAA,GAAU,IAAI,GAAA,CAAI,GAAA,CAAI,KAAK,OAAA,CAAQ,GAAA,CAAI,CAAC,MAAA,KAAW,CAAC,MAAA,CAAO,GAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AACpF,EAAA,OAAO,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,KAAS;AACzB,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,MAAM,CAAA,IAAK,IAAA;AAC3C,IAAA,OAAO;AAAA,MACL,GAAG,IAAA;AAAA,MACH,MAAA;AAAA,MACA,MAAA,EAAQ,WAAW,IAAA,GAAO,KAAA,GAAQ,QAAQ,MAAA,EAAQ,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,SAAS,CAAA;AAAA,MAC/E,GAAI,MAAA,KAAW,IAAA,GAAO,EAAE,MAAA,EAAQ,gBAAA,KAA8B;AAAC,KACjE;AAAA,EACF,CAAC,CAAA;AACH;AAEA,SAAS,OAAA,CAAQ,MAAA,EAAgB,QAAA,EAA8B,SAAA,EAA4B;AACzF,EAAA,QAAQ,QAAA;AAAU,IAChB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,IAAU,SAAA;AAAA,IACnB,KAAK,GAAA;AACH,MAAA,OAAO,MAAA,GAAS,SAAA;AAAA,IAClB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,IAAU,SAAA;AAAA,IACnB,KAAK,GAAA;AACH,MAAA,OAAO,MAAA,GAAS,SAAA;AAAA,IAClB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,KAAW,SAAA;AAAA,IACpB,KAAK,IAAA;AACH,MAAA,OAAO,MAAA,KAAW,SAAA;AAAA;AAExB","file":"databricks.js","sourcesContent":["/** Authentication accepted by Databricks workspace APIs. */\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\n/**\n * Small, dependency-free bearer provider shared by the Model Serving and\n * MLflow adapters. OAuth tokens are cached until one minute before expiry.\n */\nexport class DatabricksBearerProvider {\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: {\n    host: string;\n    auth: DatabricksAuth;\n    fetchImpl?: typeof fetch;\n    timeoutMs?: number;\n  }) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.auth = config.auth;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks timeoutMs must be positive');\n    }\n  }\n\n  async token(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nexport function normalizeDatabricksHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n","import {\n  type DatabricksAuth,\n  DatabricksBearerProvider,\n  normalizeDatabricksHost,\n} from './databricks-auth.js';\nimport type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\nexport type { DatabricksAuth } from './databricks-auth.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly bearer: DatabricksBearerProvider;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.endpoint = config.endpoint;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n    this.bearer = new DatabricksBearerProvider({\n      host: this.host,\n      auth: config.auth,\n      fetchImpl: this.fetchImpl,\n      timeoutMs: this.timeoutMs,\n    });\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.bearer.token()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n","import { z } from 'zod';\nimport {\n  type DatabricksAuth,\n  DatabricksBearerProvider,\n  normalizeDatabricksHost,\n} from './databricks-auth.js';\n\nconst MlflowMetric = z.object({\n  key: z.string().min(1),\n  value: z.number(),\n  timestamp: z.number().optional(),\n  step: z.number().optional(),\n});\n\nconst MlflowRunResponse = z.object({\n  run: z.object({\n    info: z.object({\n      run_id: z.string().min(1),\n      experiment_id: z.string().min(1),\n      status: z.string().min(1),\n      start_time: z.number().optional(),\n      end_time: z.number().optional(),\n      artifact_uri: z.string().optional(),\n      run_name: z.string().optional(),\n    }),\n    data: z\n      .object({\n        metrics: z.array(MlflowMetric).default([]),\n        params: z.array(z.object({ key: z.string(), value: z.string() })).default([]),\n        tags: z.array(z.object({ key: z.string(), value: z.string() })).default([]),\n      })\n      .default({ metrics: [], params: [], tags: [] }),\n  }),\n});\n\nexport type DatabricksMlflowRun = z.infer<typeof MlflowRunResponse>['run'];\n\nexport interface DatabricksMlflowClientConfig {\n  host: string;\n  auth: DatabricksAuth;\n  fetchImpl?: typeof fetch;\n  timeoutMs?: number;\n}\n\n/** Read-only adapter for native managed-MLflow run evidence. */\nexport class DatabricksMlflowClient {\n  readonly host: string;\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private readonly bearer: DatabricksBearerProvider;\n\n  constructor(config: DatabricksMlflowClientConfig) {\n    this.host = normalizeDatabricksHost(config.host);\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks MLflow timeoutMs must be positive');\n    }\n    this.bearer = new DatabricksBearerProvider({\n      host: this.host,\n      auth: config.auth,\n      fetchImpl: this.fetchImpl,\n      timeoutMs: this.timeoutMs,\n    });\n  }\n\n  async getRun(runId: string): Promise<DatabricksMlflowRun> {\n    if (!runId.trim()) throw new Error('MLflow runId is required');\n    const url = new URL(`${this.host}/api/2.0/mlflow/runs/get`);\n    url.searchParams.set('run_id', runId);\n    const response = await this.fetchImpl(url, {\n      headers: { authorization: `Bearer ${await this.bearer.token()}` },\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Databricks MLflow run lookup failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const parsed = MlflowRunResponse.safeParse(await response.json());\n    if (!parsed.success) {\n      throw new Error(\n        `Databricks MLflow returned an invalid run: ${parsed.error.issues[0]?.message ?? 'schema mismatch'}`,\n      );\n    }\n    return parsed.data.run;\n  }\n\n  runUrl(run: DatabricksMlflowRun): string {\n    return `${this.host}/ml/experiments/${encodeURIComponent(run.info.experiment_id)}/runs/${encodeURIComponent(run.info.run_id)}`;\n  }\n}\n\nexport type MlflowGateOperator = '>=' | '>' | '<=' | '<' | '==' | '!=';\n\nexport interface MlflowMetricGate {\n  metric: string;\n  operator: MlflowGateOperator;\n  threshold: number;\n}\n\nexport interface MlflowGateResult extends MlflowMetricGate {\n  actual: number | null;\n  passed: boolean;\n  reason?: 'missing-metric';\n}\n\n/** Parse `accuracy>=0.9,toxicity<=0.05` without owning MLflow scoring itself. */\nexport function parseMlflowMetricGates(value: string): MlflowMetricGate[] {\n  const entries = value\n    .split(',')\n    .map((entry) => entry.trim())\n    .filter(Boolean);\n  if (entries.length === 0) throw new Error('At least one MLflow metric gate is required');\n  return entries.map((entry) => {\n    const match = /^(.+?)(>=|<=|==|!=|>|<)(-?(?:\\d+(?:\\.\\d*)?|\\.\\d+)(?:e[+-]?\\d+)?)$/i.exec(entry);\n    if (!match) throw new Error(`Invalid MLflow metric gate '${entry}'`);\n    const metric = match[1]!.trim();\n    if (!metric) throw new Error(`Invalid MLflow metric gate '${entry}'`);\n    return {\n      metric,\n      operator: match[2] as MlflowGateOperator,\n      threshold: Number(match[3]),\n    };\n  });\n}\n\n/** Evaluate release policy over metrics already computed and retained by MLflow. */\nexport function evaluateMlflowMetricGates(\n  run: DatabricksMlflowRun,\n  gates: readonly MlflowMetricGate[],\n): MlflowGateResult[] {\n  const metrics = new Map(run.data.metrics.map((metric) => [metric.key, metric.value]));\n  return gates.map((gate) => {\n    const actual = metrics.get(gate.metric) ?? null;\n    return {\n      ...gate,\n      actual,\n      passed: actual === null ? false : compare(actual, gate.operator, gate.threshold),\n      ...(actual === null ? { reason: 'missing-metric' as const } : {}),\n    };\n  });\n}\n\nfunction compare(actual: number, operator: MlflowGateOperator, threshold: number): boolean {\n  switch (operator) {\n    case '>=':\n      return actual >= threshold;\n    case '>':\n      return actual > threshold;\n    case '<=':\n      return actual <= threshold;\n    case '<':\n      return actual < threshold;\n    case '==':\n      return actual === threshold;\n    case '!=':\n      return actual !== threshold;\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fabricorg/experiments-evals",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "LLM and code evaluators for Fabric Experiments: judge library, ModelClient contract, run aggregation.",
   "license": "MIT",
   "type": "module",
@@ -10,12 +10,24 @@
   "module": "./dist/index.js",
   "exports": {
     ".": {
-      "import": { "types": "./dist/index.d.ts", "default": "./dist/index.js" },
-      "require": { "types": "./dist/index.d.cts", "default": "./dist/index.cjs" }
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
     },
     "./databricks": {
-      "import": { "types": "./dist/databricks.d.ts", "default": "./dist/databricks.js" },
-      "require": { "types": "./dist/databricks.d.cts", "default": "./dist/databricks.cjs" }
+      "import": {
+        "types": "./dist/databricks.d.ts",
+        "default": "./dist/databricks.js"
+      },
+      "require": {
+        "types": "./dist/databricks.d.cts",
+        "default": "./dist/databricks.cjs"
+      }
     }
   },
   "files": ["dist"],