@genesislcap/ai-assistant 15.14.0 → 15.14.2

package/dist/chat-driver.mjs

@@ -1041,6 +1041,94 @@ function budgetExhaustedFrom(vendorLabel, payload, fallbackDetail) {
   });
 }
 
+// ../../foundation-ai/dist/esm/transports/provider-refused.js
+var PROVIDER_REFUSED_CODE = "PROVIDER_REFUSED";
+var DEFAULT_PROVIDER_REFUSED_MESSAGE = "AI requests are currently being refused by the provider. This isn't related to your account or your usage and needs no action from you \u2014 please contact your support team so it can be restored.";
+var ProviderRefusedError = class extends Error {
+  constructor(vendorLabel, kind, upstreamStatus, upstreamType, detail) {
+    super(`${vendorLabel} refused the request (${kind})` + (upstreamStatus != null ? ` \u2014 HTTP ${upstreamStatus}` : "") + (upstreamType ? ` ${upstreamType}` : "") + (detail ? `: ${detail}` : "") + ". Retrying will not clear this \u2014 the provider account must be fixed.");
+    this.vendorLabel = vendorLabel;
+    this.kind = kind;
+    this.upstreamStatus = upstreamStatus;
+    this.upstreamType = upstreamType;
+    this.detail = detail;
+    this.name = "ProviderRefusedError";
+  }
+};
+var ANTHROPIC_SPEND_PHRASES = Object.freeze([
+  /credit balance/i,
+  /usage limit/i,
+  /spend limit/i,
+  /insufficient (credit|funds|balance)/i
+]);
+var ANTHROPIC_AUTH_TYPES = Object.freeze([
+  "authentication_error",
+  "permission_error"
+]);
+function anthropicErrorBody(payload) {
+  var _a;
+  const outer = typeof payload === "object" && payload !== null ? payload : {};
+  for (const candidate of [
+    outer.error,
+    (_a = outer.details) === null || _a === void 0 ? void 0 : _a.error
+  ]) {
+    if (typeof candidate === "object" && candidate !== null) {
+      const { type, message } = candidate;
+      return {
+        type: typeof type === "string" ? type : void 0,
+        message: typeof message === "string" ? message : void 0
+      };
+    }
+  }
+  return void 0;
+}
+function statedKind(payload) {
+  const outer = typeof payload === "object" && payload !== null ? payload : {};
+  const nested = typeof outer.details === "object" && outer.details !== null ? outer.details : {};
+  for (const candidate of [outer.kind, nested.kind]) {
+    if (candidate === "auth" || candidate === "spend")
+      return candidate;
+  }
+  return void 0;
+}
+function kindFromEnvelopeType(payload) {
+  const body = anthropicErrorBody(payload);
+  if (!(body === null || body === void 0 ? void 0 : body.type))
+    return void 0;
+  if (ANTHROPIC_AUTH_TYPES.includes(body.type))
+    return "auth";
+  if (body.type === "billing_error")
+    return "spend";
+  return void 0;
+}
+function providerRefusalOf(vendor, code, payload) {
+  var _a, _b;
+  if (code === PROVIDER_REFUSED_CODE) {
+    return (_b = (_a = statedKind(payload)) !== null && _a !== void 0 ? _a : kindFromEnvelopeType(payload)) !== null && _b !== void 0 ? _b : "spend";
+  }
+  if (vendor !== "anthropic")
+    return void 0;
+  const structural = kindFromEnvelopeType(payload);
+  if (structural)
+    return structural;
+  const body = anthropicErrorBody(payload);
+  if ((body === null || body === void 0 ? void 0 : body.type) === "invalid_request_error" && body.message) {
+    const message = body.message;
+    if (ANTHROPIC_SPEND_PHRASES.some((phrase) => phrase.test(message)))
+      return "spend";
+  }
+  return void 0;
+}
+function providerRefusedFrom(vendorLabel, kind, upstreamStatus, payload, fallbackDetail) {
+  var _a;
+  const body = anthropicErrorBody(payload);
+  return new ProviderRefusedError(vendorLabel, kind, upstreamStatus, body === null || body === void 0 ? void 0 : body.type, (_a = body === null || body === void 0 ? void 0 : body.message) !== null && _a !== void 0 ? _a : fallbackDetail);
+}
+function vendorOfTransportLabel(vendorLabel) {
+  const entry = Object.entries(VENDOR_LABELS).find(([, label]) => label === vendorLabel);
+  return entry === null || entry === void 0 ? void 0 : entry[0];
+}
+
 // ../../foundation-ai/dist/esm/types/config.types.js
 var SUPPORTED_GEMINI_MODEL_IDS = [
   "gemini-2.5-pro",
@@ -1459,13 +1547,81 @@ function readFramedBody(stream, onChunk, vendorLabel, stallTimeout) {
   });
 }
 
+// ../../foundation-ai/dist/esm/transports/retry-hints.js
+var MAX_SERVER_REQUESTED_BACKOFF_MS = 6e4;
+var MAX_TOTAL_SERVER_REQUESTED_BACKOFF_MS = 12e4;
+var SHOULD_RETRY_HEADER = "x-should-retry";
+var MS_PER_SECOND = 1e3;
+function shouldNotRetry(headers) {
+  var _a;
+  const value = (_a = headers === null || headers === void 0 ? void 0 : headers.get) === null || _a === void 0 ? void 0 : _a.call(headers, SHOULD_RETRY_HEADER);
+  return typeof value === "string" && value.trim().toLowerCase() === "false";
+}
+function retryAfterMs(headers) {
+  var _a;
+  const raw = (_a = headers === null || headers === void 0 ? void 0 : headers.get) === null || _a === void 0 ? void 0 : _a.call(headers, "retry-after");
+  if (typeof raw !== "string" || raw.trim() === "")
+    return void 0;
+  const seconds = Number(raw.trim());
+  if (Number.isFinite(seconds))
+    return Math.max(0, seconds * MS_PER_SECOND);
+  const at = Date.parse(raw);
+  if (Number.isNaN(at))
+    return void 0;
+  return Math.max(0, at - Date.now());
+}
+function retryInfoMs(payload) {
+  const outer = typeof payload === "object" && payload !== null ? payload : {};
+  const framed = typeof outer.details === "object" && outer.details !== null ? outer.details : void 0;
+  for (const holder of [outer.error, framed === null || framed === void 0 ? void 0 : framed.error]) {
+    const details = holder === null || holder === void 0 ? void 0 : holder.details;
+    if (!Array.isArray(details))
+      continue;
+    for (const entry of details) {
+      const type = entry === null || entry === void 0 ? void 0 : entry["@type"];
+      if (typeof type !== "string" || !type.endsWith("google.rpc.RetryInfo"))
+        continue;
+      const delay = entry === null || entry === void 0 ? void 0 : entry.retryDelay;
+      if (typeof delay !== "string")
+        continue;
+      const seconds = Number(delay.replace(/s$/, ""));
+      if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * MS_PER_SECOND;
+    }
+  }
+  return void 0;
+}
+function resolveBackoffMs(attempt, baseMs, serverMs, serverAllowanceMs = Number.POSITIVE_INFINITY) {
+  const ladder = baseMs * Math.pow(2, attempt);
+  if (serverMs == null || !Number.isFinite(serverMs))
+    return ladder;
+  const honoured = Math.min(serverMs, MAX_SERVER_REQUESTED_BACKOFF_MS, Math.max(0, serverAllowanceMs));
+  return Math.max(ladder, honoured);
+}
+function serverBackoffSpentMs(resolvedMs, ladderMs) {
+  return Math.max(0, resolvedMs - ladderMs);
+}
+
 // ../../foundation-ai/dist/esm/transports/post-with-retry.js
 var MAX_RETRIES = 5;
 function postWithRetry(options) {
   return __awaiter(this, void 0, void 0, function* () {
     var _a, _b, _c, _d, _e, _f, _g;
     const { url, headers, body, credentials, vendorLabel, retryableStatuses, timeout, stallTimeout, backoffBaseMs, signal } = options;
-    const backoff = (attempt) => abortableDelay(backoffBaseMs * (1 << attempt), signal);
+    const vendor = vendorOfTransportLabel(vendorLabel);
+    let serverBackoffSpent = 0;
+    const backoff = (attempt, serverMs) => {
+      const ladderMs = backoffBaseMs * Math.pow(2, attempt);
+      const allowanceMs = MAX_TOTAL_SERVER_REQUESTED_BACKOFF_MS - serverBackoffSpent;
+      const waitMs = resolveBackoffMs(attempt, backoffBaseMs, serverMs, allowanceMs);
+      serverBackoffSpent += serverBackoffSpentMs(waitMs, ladderMs);
+      if (serverMs != null && waitMs > ladderMs) {
+        logger.warn(`${vendorLabel}Transport: honouring the server's requested retry delay (${Math.round(waitMs)}ms, asked ${Math.round(serverMs)}ms)`);
+      } else if (serverMs != null && serverMs > ladderMs) {
+        logger.warn(`${vendorLabel}Transport: declining the server's requested retry delay (asked ${Math.round(serverMs)}ms; the ${MAX_TOTAL_SERVER_REQUESTED_BACKOFF_MS}ms sequence allowance is spent) \u2014 using the ladder's ${Math.round(waitMs)}ms`);
+      }
+      return abortableDelay(waitMs, signal);
+    };
     for (let attempt = 0; attempt <= MAX_RETRIES; attempt += 1) {
       const timeoutController = new AbortController();
       const startedAt = performance.now();
@@ -1499,13 +1655,18 @@ function postWithRetry(options) {
         if (!response.ok) {
           const errText = yield response.text();
           const parsed = parseJsonOrUndefined(errText);
+          const refusal = providerRefusalOf(vendor, codeOf(parsed), parsed);
+          if (refusal) {
+            throw providerRefusedFrom(vendorLabel, refusal, response.status, parsed, errText || void 0);
+          }
           if (isBudgetRejection(response.status, codeOf(parsed))) {
             throw budgetExhaustedFrom(vendorLabel, parsed, errText || void 0);
           }
-          if (retryableStatuses.includes(response.status) && attempt < MAX_RETRIES) {
+          const refusedRetry = shouldNotRetry(response.headers);
+          if (retryableStatuses.includes(response.status) && !refusedRetry && attempt < MAX_RETRIES) {
             logger.warn(`${vendorLabel}Transport: retryable status ${response.status}, retrying (attempt ${attempt + 1}/${MAX_RETRIES})`);
             clearTimeout(timeoutId);
-            yield backoff(attempt);
+            yield backoff(attempt, retryAfterMs(response.headers) || retryInfoMs(parsed));
             continue;
           }
           throw new Error(`${vendorLabel} request error ${response.status}: ${errText}`);
@@ -1518,13 +1679,17 @@ function postWithRetry(options) {
           if (frame.code === "UPSTREAM_STALLED") {
             throw new DOMException(`${vendorLabel} request stalled: ${(_f = frame.error) !== null && _f !== void 0 ? _f : "no upstream data"}`, "TimeoutError");
           }
+          const framedRefusal = providerRefusalOf(vendor, frame.code, frame);
+          if (framedRefusal) {
+            throw providerRefusedFrom(vendorLabel, framedRefusal, frame.status, frame, frame.error);
+          }
           if (isBudgetRejection(frame.status, frame.code)) {
             throw budgetExhaustedFrom(vendorLabel, frame);
           }
           if (retryableStatuses.includes(frame.status) && attempt < MAX_RETRIES) {
             logger.warn(`${vendorLabel}Transport: retryable status ${frame.status} (err frame), retrying (attempt ${attempt + 1}/${MAX_RETRIES})`);
             clearTimeout(timeoutId);
-            yield backoff(attempt);
+            yield backoff(attempt, retryInfoMs(frame));
             continue;
           }
           throw new Error(`${vendorLabel} request error ${frame.status}: ${(_g = frame.error) !== null && _g !== void 0 ? _g : JSON.stringify(frame.details)}`);
@@ -3607,6 +3772,12 @@ function accumulate(messages, into) {
 var TOOL_FOLD_SYMBOL = Symbol("toolFold");
 
 // src/components/chat-driver/chat-driver.ts
+var providerRefusedDetailOf = (e) => ({
+  vendorLabel: e.vendorLabel,
+  kind: e.kind,
+  ...e.upstreamStatus != null ? { upstreamStatus: e.upstreamStatus } : {},
+  ...e.upstreamType ? { upstreamType: e.upstreamType } : {}
+});
 var budgetDetailOf = (e) => {
   const vendor = vendorTypeOfLabel(e.vendorLabel) ?? vendorTypeOfLabel(e.serverVendor);
   if (e.budgetUsd == null && e.spentUsd == null && !vendor) return void 0;
@@ -3802,6 +3973,16 @@ var ChatDriver = class _ChatDriver extends EventTarget {
      * picked up on the next turn.
      */
     this.resolvedStatusCache = /* @__PURE__ */ new Map();
+    /**
+     * A provider refusal was observed this turn, so the tool loop must not call the model again
+     * (GENC-1506).
+     *
+     * Exists for the SUB-AGENT path only, exactly like `budgetExhaustedThisTurn`: this driver's own
+     * refusal returns straight out of the catch, whereas a child's refusal reaches the parent as a tool
+     * result, and without this flag the loop would issue another call into the same wall — N batched
+     * children costing N doomed calls plus a doomed parent one.
+     */
+    this.providerRefusedThisTurn = false;
     /**
      * Set the moment a budget wall is observed anywhere in this turn — this
      * driver's own 402, or a sub-agent's (which surfaces here only as a
@@ -3829,13 +4010,15 @@ var ChatDriver = class _ChatDriver extends EventTarget {
       maxTurnSnapshots = DEFAULT_MAX_TURN_SNAPSHOTS,
       sessionKey = "",
       activityBus = NOOP_ACTIVITY_BUS,
-      budgetExhaustedMessage
+      budgetExhaustedMessage,
+      providerRefusedMessage
     } = config;
     this.maxToolIterations = maxToolIterations;
     this.condenseBatchCalls = condenseBatchCalls;
     this.sessionKey = sessionKey;
     this.activityBus = activityBus;
     this.budgetExhaustedMessageOverride = budgetExhaustedMessage;
+    this.providerRefusedMessageOverride = providerRefusedMessage;
     if (typeof toolHandlers === "function") {
       this.toolHandlersFactory = toolHandlers;
       this.toolHandlers = {};
@@ -3942,9 +4125,14 @@ var ChatDriver = class _ChatDriver extends EventTarget {
    * (rather than set to `undefined`) so a happy-path result stays byte-identical to
    * the historical `{ reason: 'done' }`.
    */
-  turnDone(failureReason, budget) {
+  turnDone(failureReason, budget, providerRefused) {
     if (!failureReason) return { reason: "done" };
-    return budget ? { reason: "done", failureReason, budget } : { reason: "done", failureReason };
+    return {
+      reason: "done",
+      failureReason,
+      ...budget ? { budget } : {},
+      ...providerRefused ? { providerRefused } : {}
+    };
   }
   /**
    * Terminal budget outcome for a wall hit **outside** the tool loop — today,
@@ -3999,6 +4187,42 @@ var ChatDriver = class _ChatDriver extends EventTarget {
     this.appendToHistory({ role: "assistant", content: this.budgetExhaustedBubble(e) });
     return this.turnDone("budget-exhausted", budgetDetailOf(e));
   }
+  /**
+   * The sentence shown when the upstream provider refuses (GENC-1506).
+   *
+   * Deliberately far simpler than `budgetExhaustedBubble`: no vendor name, no figures, no
+   * switch-provider advice, and no branching on `kind`. The copy is cause-free by design — a user who
+   * can see their own remaining spend must not be told about a limit, and we must not imply the bill
+   * has gone unpaid — so there is nothing here to compose. A host override wins verbatim.
+   */
+  providerRefusedBubble() {
+    return this.providerRefusedMessageOverride ?? DEFAULT_PROVIDER_REFUSED_MESSAGE;
+  }
+  /**
+   * Terminal provider-refusal outcome. Mirrors `reportBudgetExhausted` so the two walls behave
+   * identically from the caller's side, while keeping their diagnostics distinct.
+   *
+   * `kind` reaches the debug log and the result but never the transcript: it is what lets an operator
+   * tell "top up the account" from "rotate the key", and with cause-free user copy this is the only
+   * place that distinction survives.
+   */
+  reportProviderRefused(e) {
+    const detail = providerRefusedDetailOf(e);
+    this.providerRefusedThisTurn = true;
+    this.providerRefusedDetail = detail;
+    logger2.error("ChatDriver: provider refused the request", e);
+    recordTurnError(this.sessionKey, "provider-refused", {
+      agent: this.activeAgentName,
+      provider: this.lastResolvedProviderName,
+      vendor: vendorTypeOfLabel(e.vendorLabel) ?? this.lastResolvedProvider,
+      kind: e.kind,
+      upstreamStatus: e.upstreamStatus,
+      upstreamType: e.upstreamType,
+      isSubAgent: this.isSubAgent
+    });
+    this.appendToHistory({ role: "assistant", content: this.providerRefusedBubble() });
+    return this.turnDone("provider-refused", void 0, detail);
+  }
   /** The typed failure reason on a loop result, or `undefined` for a clean turn / handoff. */
   static failureReasonOf(result) {
     return result.reason === "done" ? result.failureReason : void 0;
@@ -4222,9 +4446,13 @@ var ChatDriver = class _ChatDriver extends EventTarget {
    * under a separate session key, so recording here would orphan the event off
    * the user-visible debug-log timeline.)
    */
-  failSubAgent(reason, budget) {
+  failSubAgent(reason, budget, providerRefused) {
     if (!this.isSubAgent || this.subAgentFailure) return;
-    this.subAgentFailure = budget ? { reason, budget } : { reason };
+    this.subAgentFailure = {
+      reason,
+      ...budget ? { budget } : {},
+      ...providerRefused ? { providerRefused } : {}
+    };
   }
   /**
    * Returns true if `releaseAgent` was called during the most recent turn.
@@ -4683,6 +4911,8 @@ Output format (strict):
     this.budgetExhaustedThisTurn = false;
     this.budgetWallDetail = void 0;
     this.budgetWallViaSubAgent = false;
+    this.providerRefusedThisTurn = false;
+    this.providerRefusedDetail = void 0;
     this.appendToHistory({ role: "user", content: userInput, attachments });
     this.turnStartedAt = Date.now();
     recordMetaEvent(this.sessionKey, "turn.start", {
@@ -4927,6 +5157,10 @@ Output format (strict):
       this.budgetWallViaSubAgent = true;
       this.budgetWallDetail ??= failure?.budget;
     }
+    if (reason === "provider_refused") {
+      this.providerRefusedThisTurn = true;
+      this.providerRefusedDetail ??= failure?.providerRefused;
+    }
     return { outcome: { ok: false, reason }, trace };
   }
   /**
@@ -4942,6 +5176,8 @@ Output format (strict):
     this.budgetExhaustedThisTurn = false;
     this.budgetWallDetail = void 0;
     this.budgetWallViaSubAgent = false;
+    this.providerRefusedThisTurn = false;
+    this.providerRefusedDetail = void 0;
     this.turnStartedAt = Date.now();
     recordMetaEvent(this.sessionKey, "turn.start", {
       phase: "continueFromHistory",
@@ -5131,6 +5367,22 @@ Output format (strict):
       if (this.turnController.signal.aborted) {
         return this.completeAbortedTurn();
       }
+      if (this.providerRefusedThisTurn) {
+        logger2.error("ChatDriver: ending the turn \u2014 a sub-agent hit the provider wall");
+        recordTurnError(this.sessionKey, "provider-refused", {
+          agent: this.activeAgentName,
+          provider: this.lastResolvedProviderName,
+          kind: this.providerRefusedDetail?.kind,
+          via: "sub-agent",
+          isSubAgent: this.isSubAgent
+        });
+        if (this.isSubAgent) {
+          this.failSubAgent("provider_refused", void 0, this.providerRefusedDetail);
+        } else {
+          this.appendToHistory({ role: "assistant", content: this.providerRefusedBubble() });
+        }
+        return this.turnDone("provider-refused", void 0, this.providerRefusedDetail);
+      }
       if (this.budgetExhaustedThisTurn) {
         logger2.error("ChatDriver: ending the turn \u2014 a sub-agent hit the AI budget wall");
         recordTurnError(this.sessionKey, "budget-exhausted", {
@@ -5358,6 +5610,24 @@ ${tailBody}
           }
           return this.turnDone("response-truncated");
         }
+        if (e instanceof ProviderRefusedError) {
+          if (this.isSubAgent) {
+            logger2.error("ChatDriver: provider refused the request", e);
+            recordTurnError(this.sessionKey, "provider-refused", {
+              agent: this.activeAgentName,
+              provider: this.lastResolvedProviderName,
+              vendor: vendorTypeOfLabel(e.vendorLabel) ?? this.lastResolvedProvider,
+              kind: e.kind,
+              upstreamStatus: e.upstreamStatus,
+              upstreamType: e.upstreamType,
+              isSubAgent: true
+            });
+            const detail = providerRefusedDetailOf(e);
+            this.failSubAgent("provider_refused", void 0, detail);
+            return this.turnDone("provider-refused", void 0, detail);
+          }
+          return this.reportProviderRefused(e);
+        }
         if (e instanceof BudgetExhaustedError) {
           this.budgetExhaustedThisTurn = true;
           this.budgetWallDetail = budgetDetailOf(e);
@@ -6714,6 +6984,7 @@ export {
   AnthropicProvider,
   AnthropicTransport,
   ChatDriver,
+  DEFAULT_PROVIDER_REFUSED_MESSAGE,
   GEMINI_CACHED_INPUT_MULTIPLIER,
   GEMINI_LONG_CONTEXT_THRESHOLD,
   GeminiProvider,
@@ -6721,6 +6992,8 @@ export {
   MutableAIProviderRegistry,
   NOOP_ACTIVITY_BUS,
   OrchestratingDriver,
+  PROVIDER_REFUSED_CODE,
+  ProviderRefusedError,
   REQUEST_CONTINUATION_TOOL,
   SUPPORTED_ANTHROPIC_MODEL_IDS,
   SUPPORTED_GEMINI_MODEL_IDS,