@fabricorg/experiments-evals 0.1.0

package/README.md

@@ -0,0 +1,15 @@
+# @fabricorg/experiments-evals
+
+Provider-neutral TypeScript evaluation contracts, built-in LLM judges, code
+evaluators, bounded-concurrency execution, hard judge-token reservations, and
+score aggregation for Fabric Experiments.
+
+```ts
+import { executeEvalRun, relevanceJudge } from '@fabricorg/experiments-evals';
+import { DatabricksModelClient } from '@fabricorg/experiments-evals/databricks';
+```
+
+Databricks is an explicit adapter subpath; it is not exported from the portable
+package root.
+
+See [experiments.fabric.pro/docs/ai-quality/overview](https://experiments.fabric.pro/docs/ai-quality/overview).

package/dist/databricks.cjs

@@ -0,0 +1,120 @@
+'use strict';
+
+// src/databricks-model-client.ts
+var DatabricksModelClient = class {
+  endpoint;
+  /** Exposed for wiring assertions (deps-construction tests). */
+  authMode;
+  host;
+  auth;
+  fetchImpl;
+  timeoutMs;
+  oauthToken = null;
+  constructor(config) {
+    this.host = normalizeHost(config.host);
+    this.endpoint = config.endpoint;
+    this.auth = config.auth;
+    this.authMode = config.auth.kind;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks Model Serving timeoutMs must be positive");
+    }
+  }
+  async complete(messages, options) {
+    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {
+      throw new Error("maxOutputTokens must be a positive integer");
+    }
+    if (!Number.isFinite(options.temperature) || options.temperature < 0) {
+      throw new Error("temperature must be a non-negative finite number");
+    }
+    const response = await this.fetchImpl(
+      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,
+      {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${await this.resolveToken()}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({
+          messages: messages.map((m) => ({ role: m.role, content: m.content })),
+          temperature: options.temperature,
+          max_tokens: options.maxOutputTokens
+        }),
+        signal: AbortSignal.timeout(this.timeoutMs)
+      }
+    );
+    if (!response.ok) {
+      const body = await response.text();
+      throw new Error(
+        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`
+      );
+    }
+    const payload = await response.json();
+    const parsed = parseServingResponse(payload);
+    return {
+      text: parsed.text,
+      tokens: {
+        inputTokens: parsed.inputTokens,
+        outputTokens: parsed.outputTokens
+      }
+    };
+  }
+  async resolveToken() {
+    if (this.auth.kind === "pat") return this.auth.token;
+    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
+      return this.oauthToken.value;
+    }
+    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
+      method: "POST",
+      headers: {
+        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
+        "content-type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
+    const body = await response.json();
+    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
+    this.oauthToken = {
+      value: body.access_token,
+      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
+    };
+    return this.oauthToken.value;
+  }
+};
+function parseServingResponse(payload) {
+  if (!isRecord(payload)) throw new Error("Model Serving returned an invalid response object");
+  const choices = payload.choices;
+  const first = Array.isArray(choices) ? choices[0] : void 0;
+  const message = isRecord(first) && isRecord(first.message) ? first.message : void 0;
+  const text = message?.content;
+  if (typeof text !== "string" || text.trim() === "") {
+    throw new Error("Model Serving returned no completion text");
+  }
+  const usage = isRecord(payload.usage) ? payload.usage : void 0;
+  const inputTokens = usage?.prompt_tokens;
+  const outputTokens = usage?.completion_tokens;
+  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {
+    throw new Error("Model Serving returned invalid token usage");
+  }
+  return { text, inputTokens, outputTokens };
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isTokenCount(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function normalizeHost(host) {
+  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+}
+function toBase64(value) {
+  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
+  return btoa(value);
+}
+
+exports.DatabricksModelClient = DatabricksModelClient;
+//# sourceMappingURL=databricks.cjs.map
+//# sourceMappingURL=databricks.cjs.map

package/dist/databricks.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/databricks-model-client.ts"],"names":[],"mappings":";;;AAqCO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACrC,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,cAAc,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AAAA,EAEA,MAAc,YAAA,GAAgC;AAC5C,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;AAEA,SAAS,cAAc,IAAA,EAAsB;AAC3C,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB","file":"databricks.cjs","sourcesContent":["import type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeHost(config.host);\n    this.endpoint = config.endpoint;\n    this.auth = config.auth;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.resolveToken()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n\n  private async resolveToken(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n\nfunction normalizeHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n"]}

package/dist/databricks.d.cts

@@ -0,0 +1,50 @@
+import { M as ModelClient, C as ChatMessage, g as ModelCompletionOptions, h as ModelResponse } from './model-client-B7yk_i1s.cjs';
+import 'zod';
+
+/**
+ * Transport-agnostic Databricks Model Serving chat client
+ * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).
+ *
+ * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,
+ * otherwise M2M OAuth client credentials are exchanged at
+ * `/oidc/v1/token` and cached per instance until shortly before expiry.
+ *
+ * The `fetchImpl` injection keeps this package free of HTTP-client deps and
+ * lets tests assert the exact request shape. Both the control plane
+ * (`apps/api/src/server/model-client.ts`) and the Temporal worker
+ * (`agents/harness-deploy`) wrap this class with their own env resolution.
+ */
+type DatabricksAuth = {
+    kind: 'pat';
+    token: string;
+} | {
+    kind: 'oauth-m2m';
+    clientId: string;
+    clientSecret: string;
+};
+interface DatabricksModelClientConfig {
+    /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */
+    host: string;
+    /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */
+    endpoint: string;
+    auth: DatabricksAuth;
+    /** Injected for tests; defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */
+    timeoutMs?: number;
+}
+declare class DatabricksModelClient implements ModelClient {
+    readonly endpoint: string;
+    /** Exposed for wiring assertions (deps-construction tests). */
+    readonly authMode: DatabricksAuth['kind'];
+    private readonly host;
+    private readonly auth;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private oauthToken;
+    constructor(config: DatabricksModelClientConfig);
+    complete(messages: readonly ChatMessage[], options: ModelCompletionOptions): Promise<ModelResponse>;
+    private resolveToken;
+}
+
+export { type DatabricksAuth, DatabricksModelClient, type DatabricksModelClientConfig };

package/dist/databricks.d.ts

@@ -0,0 +1,50 @@
+import { M as ModelClient, C as ChatMessage, g as ModelCompletionOptions, h as ModelResponse } from './model-client-B7yk_i1s.js';
+import 'zod';
+
+/**
+ * Transport-agnostic Databricks Model Serving chat client
+ * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).
+ *
+ * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,
+ * otherwise M2M OAuth client credentials are exchanged at
+ * `/oidc/v1/token` and cached per instance until shortly before expiry.
+ *
+ * The `fetchImpl` injection keeps this package free of HTTP-client deps and
+ * lets tests assert the exact request shape. Both the control plane
+ * (`apps/api/src/server/model-client.ts`) and the Temporal worker
+ * (`agents/harness-deploy`) wrap this class with their own env resolution.
+ */
+type DatabricksAuth = {
+    kind: 'pat';
+    token: string;
+} | {
+    kind: 'oauth-m2m';
+    clientId: string;
+    clientSecret: string;
+};
+interface DatabricksModelClientConfig {
+    /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */
+    host: string;
+    /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */
+    endpoint: string;
+    auth: DatabricksAuth;
+    /** Injected for tests; defaults to global fetch. */
+    fetchImpl?: typeof fetch;
+    /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */
+    timeoutMs?: number;
+}
+declare class DatabricksModelClient implements ModelClient {
+    readonly endpoint: string;
+    /** Exposed for wiring assertions (deps-construction tests). */
+    readonly authMode: DatabricksAuth['kind'];
+    private readonly host;
+    private readonly auth;
+    private readonly fetchImpl;
+    private readonly timeoutMs;
+    private oauthToken;
+    constructor(config: DatabricksModelClientConfig);
+    complete(messages: readonly ChatMessage[], options: ModelCompletionOptions): Promise<ModelResponse>;
+    private resolveToken;
+}
+
+export { type DatabricksAuth, DatabricksModelClient, type DatabricksModelClientConfig };

package/dist/databricks.js

@@ -0,0 +1,118 @@
+// src/databricks-model-client.ts
+var DatabricksModelClient = class {
+  endpoint;
+  /** Exposed for wiring assertions (deps-construction tests). */
+  authMode;
+  host;
+  auth;
+  fetchImpl;
+  timeoutMs;
+  oauthToken = null;
+  constructor(config) {
+    this.host = normalizeHost(config.host);
+    this.endpoint = config.endpoint;
+    this.auth = config.auth;
+    this.authMode = config.auth.kind;
+    this.fetchImpl = config.fetchImpl ?? fetch;
+    this.timeoutMs = config.timeoutMs ?? 6e4;
+    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {
+      throw new Error("Databricks Model Serving timeoutMs must be positive");
+    }
+  }
+  async complete(messages, options) {
+    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {
+      throw new Error("maxOutputTokens must be a positive integer");
+    }
+    if (!Number.isFinite(options.temperature) || options.temperature < 0) {
+      throw new Error("temperature must be a non-negative finite number");
+    }
+    const response = await this.fetchImpl(
+      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,
+      {
+        method: "POST",
+        headers: {
+          authorization: `Bearer ${await this.resolveToken()}`,
+          "content-type": "application/json"
+        },
+        body: JSON.stringify({
+          messages: messages.map((m) => ({ role: m.role, content: m.content })),
+          temperature: options.temperature,
+          max_tokens: options.maxOutputTokens
+        }),
+        signal: AbortSignal.timeout(this.timeoutMs)
+      }
+    );
+    if (!response.ok) {
+      const body = await response.text();
+      throw new Error(
+        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`
+      );
+    }
+    const payload = await response.json();
+    const parsed = parseServingResponse(payload);
+    return {
+      text: parsed.text,
+      tokens: {
+        inputTokens: parsed.inputTokens,
+        outputTokens: parsed.outputTokens
+      }
+    };
+  }
+  async resolveToken() {
+    if (this.auth.kind === "pat") return this.auth.token;
+    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 6e4) {
+      return this.oauthToken.value;
+    }
+    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {
+      method: "POST",
+      headers: {
+        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,
+        "content-type": "application/x-www-form-urlencoded"
+      },
+      body: new URLSearchParams({ grant_type: "client_credentials", scope: "all-apis" }),
+      signal: AbortSignal.timeout(this.timeoutMs)
+    });
+    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);
+    const body = await response.json();
+    if (!body.access_token) throw new Error("Databricks OAuth exchange returned no access token");
+    this.oauthToken = {
+      value: body.access_token,
+      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1e3
+    };
+    return this.oauthToken.value;
+  }
+};
+function parseServingResponse(payload) {
+  if (!isRecord(payload)) throw new Error("Model Serving returned an invalid response object");
+  const choices = payload.choices;
+  const first = Array.isArray(choices) ? choices[0] : void 0;
+  const message = isRecord(first) && isRecord(first.message) ? first.message : void 0;
+  const text = message?.content;
+  if (typeof text !== "string" || text.trim() === "") {
+    throw new Error("Model Serving returned no completion text");
+  }
+  const usage = isRecord(payload.usage) ? payload.usage : void 0;
+  const inputTokens = usage?.prompt_tokens;
+  const outputTokens = usage?.completion_tokens;
+  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {
+    throw new Error("Model Serving returned invalid token usage");
+  }
+  return { text, inputTokens, outputTokens };
+}
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isTokenCount(value) {
+  return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function normalizeHost(host) {
+  return host.startsWith("http://") || host.startsWith("https://") ? host.replace(/\/$/, "") : `https://${host.replace(/\/$/, "")}`;
+}
+function toBase64(value) {
+  if (typeof Buffer !== "undefined") return Buffer.from(value).toString("base64");
+  return btoa(value);
+}
+
+export { DatabricksModelClient };
+//# sourceMappingURL=databricks.js.map
+//# sourceMappingURL=databricks.js.map

package/dist/databricks.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/databricks-model-client.ts"],"names":[],"mappings":";AAqCO,IAAM,wBAAN,MAAmD;AAAA,EAC/C,QAAA;AAAA;AAAA,EAEA,QAAA;AAAA,EACQ,IAAA;AAAA,EACA,IAAA;AAAA,EACA,SAAA;AAAA,EACA,SAAA;AAAA,EACT,UAAA,GAA0D,IAAA;AAAA,EAElE,YAAY,MAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,aAAA,CAAc,MAAA,CAAO,IAAI,CAAA;AACrC,IAAA,IAAA,CAAK,WAAW,MAAA,CAAO,QAAA;AACvB,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,IAAA,CAAK,IAAA;AAC5B,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,KAAA;AACrC,IAAA,IAAA,CAAK,SAAA,GAAY,OAAO,SAAA,IAAa,GAAA;AACrC,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,IAAA,CAAK,SAAS,CAAA,IAAK,IAAA,CAAK,aAAa,CAAA,EAAG;AAC3D,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AAAA,EACF;AAAA,EAEA,MAAM,QAAA,CACJ,QAAA,EACA,OAAA,EACwB;AACxB,IAAA,IAAI,CAAC,OAAO,SAAA,CAAU,OAAA,CAAQ,eAAe,CAAA,IAAK,OAAA,CAAQ,mBAAmB,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,CAAC,OAAO,QAAA,CAAS,OAAA,CAAQ,WAAW,CAAA,IAAK,OAAA,CAAQ,cAAc,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,MAAM,kDAAkD,CAAA;AAAA,IACpE;AACA,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,SAAA;AAAA,MAC1B,GAAG,IAAA,CAAK,IAAI,sBAAsB,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,YAAA,CAAA;AAAA,MACnE;AAAA,QACE,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA,EAAS;AAAA,UACP,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,IAAA,CAAK,cAAc,CAAA,CAAA;AAAA,UAClD,cAAA,EAAgB;AAAA,SAClB;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,QAAA,EAAU,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO,EAAE,IAAA,EAAM,CAAA,CAAE,IAAA,EAAM,OAAA,EAAS,CAAA,CAAE,OAAA,EAAQ,CAAE,CAAA;AAAA,UACpE,aAAa,OAAA,CAAQ,WAAA;AAAA,UACrB,YAAY,OAAA,CAAQ;AAAA,SACrB,CAAA;AAAA,QACD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA;AAC5C,KACF;AACA,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,MAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,IAAA,EAAK;AACjC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,iCAAA,EAAoC,SAAS,MAAM,CAAA,GAAA,EAAM,KAAK,KAAA,CAAM,CAAA,EAAG,GAAG,CAAC,CAAA;AAAA,OAC7E;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAW,MAAM,QAAA,CAAS,IAAA,EAAK;AACrC,IAAA,MAAM,MAAA,GAAS,qBAAqB,OAAO,CAAA;AAC3C,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAA,EAAQ;AAAA,QACN,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,cAAc,MAAA,CAAO;AAAA;AACvB,KACF;AAAA,EACF;AAAA,EAEA,MAAc,YAAA,GAAgC;AAC5C,IAAA,IAAI,KAAK,IAAA,CAAK,IAAA,KAAS,KAAA,EAAO,OAAO,KAAK,IAAA,CAAK,KAAA;AAC/C,IAAA,IAAI,IAAA,CAAK,cAAc,IAAA,CAAK,UAAA,CAAW,YAAY,IAAA,CAAK,GAAA,KAAQ,GAAA,EAAQ;AACtE,MAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,IACzB;AACA,IAAA,MAAM,WAAW,MAAM,IAAA,CAAK,UAAU,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,cAAA,CAAA,EAAkB;AAAA,MAClE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,CAAA,MAAA,EAAS,QAAA,CAAS,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,CAAC,CAAA,CAAA;AAAA,QACnF,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAI,eAAA,CAAgB,EAAE,YAAY,oBAAA,EAAsB,KAAA,EAAO,YAAY,CAAA;AAAA,MACjF,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,IAAA,CAAK,SAAS;AAAA,KAC3C,CAAA;AACD,IAAA,IAAI,CAAC,SAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,kCAAA,EAAqC,QAAA,CAAS,MAAM,CAAA,CAAA,CAAG,CAAA;AACzF,IAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAClC,IAAA,IAAI,CAAC,IAAA,CAAK,YAAA,EAAc,MAAM,IAAI,MAAM,oDAAoD,CAAA;AAC5F,IAAA,IAAA,CAAK,UAAA,GAAa;AAAA,MAChB,OAAO,IAAA,CAAK,YAAA;AAAA,MACZ,WAAW,IAAA,CAAK,GAAA,EAAI,GAAA,CAAK,IAAA,CAAK,cAAc,IAAA,IAAQ;AAAA,KACtD;AACA,IAAA,OAAO,KAAK,UAAA,CAAW,KAAA;AAAA,EACzB;AACF;AAEA,SAAS,qBAAqB,OAAA,EAI5B;AACA,EAAA,IAAI,CAAC,QAAA,CAAS,OAAO,GAAG,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAC3F,EAAA,MAAM,UAAU,OAAA,CAAQ,OAAA;AACxB,EAAA,MAAM,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,GAAI,OAAA,CAAQ,CAAC,CAAA,GAAI,MAAA;AACpD,EAAA,MAAM,OAAA,GAAU,SAAS,KAAK,CAAA,IAAK,SAAS,KAAA,CAAM,OAAO,CAAA,GAAI,KAAA,CAAM,OAAA,GAAU,MAAA;AAC7E,EAAA,MAAM,OAAO,OAAA,EAAS,OAAA;AACtB,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,IAAY,IAAA,CAAK,IAAA,OAAW,EAAA,EAAI;AAClD,IAAA,MAAM,IAAI,MAAM,2CAA2C,CAAA;AAAA,EAC7D;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,OAAA,CAAQ,KAAK,CAAA,GAAI,QAAQ,KAAA,GAAQ,MAAA;AACxD,EAAA,MAAM,cAAc,KAAA,EAAO,aAAA;AAC3B,EAAA,MAAM,eAAe,KAAA,EAAO,iBAAA;AAC5B,EAAA,IAAI,CAAC,YAAA,CAAa,WAAW,KAAK,CAAC,YAAA,CAAa,YAAY,CAAA,EAAG;AAC7D,IAAA,MAAM,IAAI,MAAM,4CAA4C,CAAA;AAAA,EAC9D;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,WAAA,EAAa,YAAA,EAAa;AAC3C;AAEA,SAAS,SAAS,KAAA,EAAkD;AAClE,EAAA,OAAO,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,KAAA,CAAM,QAAQ,KAAK,CAAA;AAC5E;AAEA,SAAS,aAAa,KAAA,EAAiC;AACrD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,OAAO,SAAA,CAAU,KAAK,KAAK,KAAA,IAAS,CAAA;AAC1E;AAEA,SAAS,cAAc,IAAA,EAAsB;AAC3C,EAAA,OAAO,KAAK,UAAA,CAAW,SAAS,KAAK,IAAA,CAAK,UAAA,CAAW,UAAU,CAAA,GAC3D,IAAA,CAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GACtB,CAAA,QAAA,EAAW,KAAK,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAC,CAAA,CAAA;AACxC;AAGA,SAAS,SAAS,KAAA,EAAuB;AACvC,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa,OAAO,OAAO,IAAA,CAAK,KAAK,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA;AAC9E,EAAA,OAAO,KAAK,KAAK,CAAA;AACnB","file":"databricks.js","sourcesContent":["import type {\n  ChatMessage,\n  ModelClient,\n  ModelCompletionOptions,\n  ModelResponse,\n} from './model-client.js';\n\n/**\n * Transport-agnostic Databricks Model Serving chat client\n * (`/serving-endpoints/{name}/invocations`, OpenAI-compatible chat payload).\n *\n * Auth mirrors the warehouse wiring: a PAT (`token`) wins when provided,\n * otherwise M2M OAuth client credentials are exchanged at\n * `/oidc/v1/token` and cached per instance until shortly before expiry.\n *\n * The `fetchImpl` injection keeps this package free of HTTP-client deps and\n * lets tests assert the exact request shape. Both the control plane\n * (`apps/api/src/server/model-client.ts`) and the Temporal worker\n * (`agents/harness-deploy`) wrap this class with their own env resolution.\n */\n\nexport type DatabricksAuth =\n  | { kind: 'pat'; token: string }\n  | { kind: 'oauth-m2m'; clientId: string; clientSecret: string };\n\nexport interface DatabricksModelClientConfig {\n  /** Workspace host — bare (`dbc-x.cloud.databricks.com`) or with scheme. */\n  host: string;\n  /** Serving endpoint name; recorded in EvalScore.modelEndpoint. */\n  endpoint: string;\n  auth: DatabricksAuth;\n  /** Injected for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch;\n  /** Abort Model Serving and OAuth calls after this duration. Default: 60s. */\n  timeoutMs?: number;\n}\n\nexport class DatabricksModelClient implements ModelClient {\n  readonly endpoint: string;\n  /** Exposed for wiring assertions (deps-construction tests). */\n  readonly authMode: DatabricksAuth['kind'];\n  private readonly host: string;\n  private readonly auth: DatabricksAuth;\n  private readonly fetchImpl: typeof fetch;\n  private readonly timeoutMs: number;\n  private oauthToken: { value: string; expiresAt: number } | null = null;\n\n  constructor(config: DatabricksModelClientConfig) {\n    this.host = normalizeHost(config.host);\n    this.endpoint = config.endpoint;\n    this.auth = config.auth;\n    this.authMode = config.auth.kind;\n    this.fetchImpl = config.fetchImpl ?? fetch;\n    this.timeoutMs = config.timeoutMs ?? 60_000;\n    if (!Number.isFinite(this.timeoutMs) || this.timeoutMs <= 0) {\n      throw new Error('Databricks Model Serving timeoutMs must be positive');\n    }\n  }\n\n  async complete(\n    messages: readonly ChatMessage[],\n    options: ModelCompletionOptions,\n  ): Promise<ModelResponse> {\n    if (!Number.isInteger(options.maxOutputTokens) || options.maxOutputTokens <= 0) {\n      throw new Error('maxOutputTokens must be a positive integer');\n    }\n    if (!Number.isFinite(options.temperature) || options.temperature < 0) {\n      throw new Error('temperature must be a non-negative finite number');\n    }\n    const response = await this.fetchImpl(\n      `${this.host}/serving-endpoints/${encodeURIComponent(this.endpoint)}/invocations`,\n      {\n        method: 'POST',\n        headers: {\n          authorization: `Bearer ${await this.resolveToken()}`,\n          'content-type': 'application/json',\n        },\n        body: JSON.stringify({\n          messages: messages.map((m) => ({ role: m.role, content: m.content })),\n          temperature: options.temperature,\n          max_tokens: options.maxOutputTokens,\n        }),\n        signal: AbortSignal.timeout(this.timeoutMs),\n      },\n    );\n    if (!response.ok) {\n      const body = await response.text();\n      throw new Error(\n        `Model Serving invocation failed (${response.status}): ${body.slice(0, 500)}`,\n      );\n    }\n    const payload = (await response.json()) as unknown;\n    const parsed = parseServingResponse(payload);\n    return {\n      text: parsed.text,\n      tokens: {\n        inputTokens: parsed.inputTokens,\n        outputTokens: parsed.outputTokens,\n      },\n    };\n  }\n\n  private async resolveToken(): Promise<string> {\n    if (this.auth.kind === 'pat') return this.auth.token;\n    if (this.oauthToken && this.oauthToken.expiresAt > Date.now() + 60_000) {\n      return this.oauthToken.value;\n    }\n    const response = await this.fetchImpl(`${this.host}/oidc/v1/token`, {\n      method: 'POST',\n      headers: {\n        authorization: `Basic ${toBase64(`${this.auth.clientId}:${this.auth.clientSecret}`)}`,\n        'content-type': 'application/x-www-form-urlencoded',\n      },\n      body: new URLSearchParams({ grant_type: 'client_credentials', scope: 'all-apis' }),\n      signal: AbortSignal.timeout(this.timeoutMs),\n    });\n    if (!response.ok) throw new Error(`Databricks OAuth exchange failed (${response.status})`);\n    const body = (await response.json()) as { access_token?: string; expires_in?: number };\n    if (!body.access_token) throw new Error('Databricks OAuth exchange returned no access token');\n    this.oauthToken = {\n      value: body.access_token,\n      expiresAt: Date.now() + (body.expires_in ?? 3600) * 1000,\n    };\n    return this.oauthToken.value;\n  }\n}\n\nfunction parseServingResponse(payload: unknown): {\n  text: string;\n  inputTokens: number;\n  outputTokens: number;\n} {\n  if (!isRecord(payload)) throw new Error('Model Serving returned an invalid response object');\n  const choices = payload.choices;\n  const first = Array.isArray(choices) ? choices[0] : undefined;\n  const message = isRecord(first) && isRecord(first.message) ? first.message : undefined;\n  const text = message?.content;\n  if (typeof text !== 'string' || text.trim() === '') {\n    throw new Error('Model Serving returned no completion text');\n  }\n  const usage = isRecord(payload.usage) ? payload.usage : undefined;\n  const inputTokens = usage?.prompt_tokens;\n  const outputTokens = usage?.completion_tokens;\n  if (!isTokenCount(inputTokens) || !isTokenCount(outputTokens)) {\n    throw new Error('Model Serving returned invalid token usage');\n  }\n  return { text, inputTokens, outputTokens };\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return value !== null && typeof value === 'object' && !Array.isArray(value);\n}\n\nfunction isTokenCount(value: unknown): value is number {\n  return typeof value === 'number' && Number.isInteger(value) && value >= 0;\n}\n\nfunction normalizeHost(host: string): string {\n  return host.startsWith('http://') || host.startsWith('https://')\n    ? host.replace(/\\/$/, '')\n    : `https://${host.replace(/\\/$/, '')}`;\n}\n\n/** Node has Buffer; edge/browser runtimes have btoa. Credentials are ASCII. */\nfunction toBase64(value: string): string {\n  if (typeof Buffer !== 'undefined') return Buffer.from(value).toString('base64');\n  return btoa(value);\n}\n"]}