@genesislcap/ai-assistant 15.6.2 → 15.7.0-ts7.1

package/dist/chat-driver.cjs

@@ -1016,6 +1016,67 @@ var GeminiProvider = class {
   }
 };
 
+// ../../foundation-ai/dist/esm/transports/budget-exhausted-error.js
+var BUDGET_EXCEEDED_CODE = "BUDGET_EXCEEDED";
+var VENDOR_LABELS = Object.freeze({
+  anthropic: "Anthropic",
+  gemini: "Gemini",
+  openai: "OpenAI",
+  chrome: "Chrome"
+});
+var BUDGETED_VENDORS = Object.freeze([
+  "anthropic",
+  "gemini"
+]);
+var VENDOR_TYPE_BY_LABEL = new Map(Object.entries(VENDOR_LABELS).map(([type, label]) => [
+  label.toLowerCase(),
+  type
+]));
+function vendorTypeOfLabel(label) {
+  if (typeof label !== "string")
+    return void 0;
+  return VENDOR_TYPE_BY_LABEL.get(label.trim().toLowerCase());
+}
+var BUDGET_EXCEEDED_STATUS = 402;
+var DEFAULT_BUDGET_EXHAUSTED_MESSAGE = "You've reached your AI usage limit. Contact your administrator to raise it.";
+var BudgetExhaustedError = class extends Error {
+  constructor(vendorLabel, budgetUsd, spentUsd, detail, extra) {
+    super(`${vendorLabel} request refused: the AI usage budget is exhausted` + (budgetUsd != null ? ` (spent ${spentUsd != null ? `$${spentUsd}` : "an unknown amount"} of a $${budgetUsd} budget)` : "") + (detail ? `: ${detail}` : "") + ". Retrying will not clear this \u2014 the budget must be raised.");
+    this.vendorLabel = vendorLabel;
+    this.budgetUsd = budgetUsd;
+    this.spentUsd = spentUsd;
+    this.detail = detail;
+    this.name = "BudgetExhaustedError";
+    this.otherVendorAvailable = extra === null || extra === void 0 ? void 0 : extra.otherVendorAvailable;
+    this.serverVendor = extra === null || extra === void 0 ? void 0 : extra.serverVendor;
+  }
+};
+var isBudgetRejection = (status, code) => status === BUDGET_EXCEEDED_STATUS || code === BUDGET_EXCEEDED_CODE;
+var parseJsonOrUndefined = (text) => {
+  try {
+    return JSON.parse(text);
+  } catch (_a) {
+    return void 0;
+  }
+};
+var codeOf = (payload) => {
+  const code = payload === null || payload === void 0 ? void 0 : payload.code;
+  return typeof code === "string" ? code : void 0;
+};
+var numberOrUndefined = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+var booleanOrUndefined = (value) => typeof value === "boolean" ? value : void 0;
+var stringOrUndefined = (value) => typeof value === "string" && value.trim() !== "" ? value : void 0;
+function budgetExhaustedFrom(vendorLabel, payload, fallbackDetail) {
+  var _a, _b, _c, _d;
+  const body = typeof payload === "object" && payload !== null ? payload : {};
+  const details = typeof body.details === "object" && body.details !== null ? body.details : {};
+  const detail = typeof body.error === "string" ? body.error : fallbackDetail;
+  return new BudgetExhaustedError(vendorLabel, (_a = numberOrUndefined(body.budgetUsd)) !== null && _a !== void 0 ? _a : numberOrUndefined(details.budgetUsd), (_b = numberOrUndefined(body.spentUsd)) !== null && _b !== void 0 ? _b : numberOrUndefined(details.spentUsd), detail, {
+    otherVendorAvailable: (_c = booleanOrUndefined(body.otherVendorAvailable)) !== null && _c !== void 0 ? _c : booleanOrUndefined(details.otherVendorAvailable),
+    serverVendor: (_d = stringOrUndefined(body.vendor)) !== null && _d !== void 0 ? _d : stringOrUndefined(details.vendor)
+  });
+}
+
 // ../../foundation-ai/dist/esm/types/config.types.js
 var SUPPORTED_GEMINI_MODEL_IDS = [
   "gemini-2.5-pro",
@@ -1149,7 +1210,8 @@ function readFramedBody(stream, onChunk, vendorLabel, stallTimeout) {
 var MAX_RETRIES = 5;
 function postWithRetry(options) {
   return __awaiter(this, void 0, void 0, function* () {
-    var _a, _b, _c, _d;
+    var _a, _b;
+    var _c, _d;
     const { url, headers, body, credentials, vendorLabel, retryableStatuses, timeout, stallTimeout, backoffBaseMs, signal } = options;
     const backoff = (attempt) => abortableDelay(backoffBaseMs * (1 << attempt), signal);
     for (let attempt = 0; attempt <= MAX_RETRIES; attempt += 1) {
@@ -1170,15 +1232,19 @@ function postWithRetry(options) {
           signal: combinedSignal,
           credentials
         });
-        if (retryableStatuses.includes(response.status) && attempt < MAX_RETRIES) {
-          logger.warn(`${vendorLabel}Transport: retryable status ${response.status}, retrying (attempt ${attempt + 1}/${MAX_RETRIES})`);
-          clearTimeout(timeoutId);
-          yield backoff(attempt);
-          continue;
-        }
         if (!response.ok) {
-          const err = yield response.text();
-          throw new Error(`${vendorLabel} request error ${response.status}: ${err}`);
+          const errText = yield response.text();
+          const parsed = parseJsonOrUndefined(errText);
+          if (isBudgetRejection(response.status, codeOf(parsed))) {
+            throw budgetExhaustedFrom(vendorLabel, parsed, errText || void 0);
+          }
+          if (retryableStatuses.includes(response.status) && attempt < MAX_RETRIES) {
+            logger.warn(`${vendorLabel}Transport: retryable status ${response.status}, retrying (attempt ${attempt + 1}/${MAX_RETRIES})`);
+            clearTimeout(timeoutId);
+            yield backoff(attempt);
+            continue;
+          }
+          throw new Error(`${vendorLabel} request error ${response.status}: ${errText}`);
         }
         if (((_b = (_a = response.headers) === null || _a === void 0 ? void 0 : _a.get("content-type")) === null || _b === void 0 ? void 0 : _b.toLowerCase().includes("application/x-ndjson")) && response.body) {
           rearmStallTimer();
@@ -1188,6 +1254,9 @@ function postWithRetry(options) {
           if (frame.code === "UPSTREAM_STALLED") {
             throw new DOMException(`${vendorLabel} request stalled: ${(_c = frame.error) !== null && _c !== void 0 ? _c : "no upstream data"}`, "TimeoutError");
           }
+          if (isBudgetRejection(frame.status, frame.code)) {
+            throw budgetExhaustedFrom(vendorLabel, frame);
+          }
           if (retryableStatuses.includes(frame.status) && attempt < MAX_RETRIES) {
             logger.warn(`${vendorLabel}Transport: retryable status ${frame.status} (err frame), retrying (attempt ${attempt + 1}/${MAX_RETRIES})`);
             clearTimeout(timeoutId);
@@ -1504,7 +1573,8 @@ var AnthropicTransport = class _AnthropicTransport {
    * the payload tidy.
    */
   toAnthropicMessages(history, userMessage, attachments) {
-    var _a, _b, _c;
+    var _a, _b;
+    var _c;
     const messages = [];
     const pushBlock = (role, block) => {
       const last = messages[messages.length - 1];
@@ -1534,13 +1604,13 @@ var AnthropicTransport = class _AnthropicTransport {
             type: "tool_use",
             id: tc.id,
             name: tc.name,
-            input: (_b = tc.args) !== null && _b !== void 0 ? _b : {}
+            input: (_c = tc.args) !== null && _c !== void 0 ? _c : {}
           });
         }
         continue;
       }
       const role = msg.role === "user" ? "user" : "assistant";
-      if (role === "user" && ((_c = msg.attachments) === null || _c === void 0 ? void 0 : _c.length)) {
+      if (role === "user" && ((_b = msg.attachments) === null || _b === void 0 ? void 0 : _b.length)) {
         pushBlock(role, { type: "text", text: msg.content });
         for (const att of msg.attachments) {
           pushBlock(role, { type: "text", text: `[File: ${att.name}]
@@ -1658,7 +1728,7 @@ ${att.content}` });
         headers: requestHeaders,
         body,
         credentials,
-        vendorLabel: "Anthropic",
+        vendorLabel: VENDOR_LABELS.anthropic,
         retryableStatuses: _AnthropicTransport.RETRYABLE_STATUSES,
         timeout: this.timeout,
         stallTimeout: this.stallTimeout,
@@ -2016,7 +2086,8 @@ var GeminiTransport = class _GeminiTransport {
   // ── ChatTransport (multi-turn chat) ────────────────────────────────────
   sendChatMessage(history, userMessage, options) {
     return __awaiter(this, void 0, void 0, function* () {
-      var _a, _b;
+      var _a;
+      var _b;
       const contents = this.toGeminiContents(history, userMessage, options === null || options === void 0 ? void 0 : options.attachments);
       if (options === null || options === void 0 ? void 0 : options.tailContext) {
         contents.push({ role: "user", parts: [{ text: options.tailContext }] });
@@ -2080,7 +2151,8 @@ var GeminiTransport = class _GeminiTransport {
     return totalCost;
   }
   toGeminiContents(history, userMessage, attachments) {
-    var _a, _b, _c;
+    var _a, _b;
+    var _c;
     const contents = [];
     const toolCallNameById = /* @__PURE__ */ new Map();
     for (const msg of history) {
@@ -2088,7 +2160,7 @@ var GeminiTransport = class _GeminiTransport {
         continue;
       const role = msg.role === "user" ? "user" : "model";
       if (msg.toolResult) {
-        const fnName = (_a = toolCallNameById.get(msg.toolResult.toolCallId)) !== null && _a !== void 0 ? _a : msg.toolResult.toolCallId;
+        const fnName = (_c = toolCallNameById.get(msg.toolResult.toolCallId)) !== null && _c !== void 0 ? _c : msg.toolResult.toolCallId;
         contents.push({
           role: "user",
           parts: [
@@ -2100,7 +2172,7 @@ var GeminiTransport = class _GeminiTransport {
             }
           ]
         });
-      } else if ((_b = msg.toolCalls) === null || _b === void 0 ? void 0 : _b.length) {
+      } else if ((_a = msg.toolCalls) === null || _a === void 0 ? void 0 : _a.length) {
         for (const tc of msg.toolCalls) {
           toolCallNameById.set(tc.id, tc.name);
         }
@@ -2119,7 +2191,7 @@ var GeminiTransport = class _GeminiTransport {
             return part;
           })
         });
-      } else if (role === "user" && ((_c = msg.attachments) === null || _c === void 0 ? void 0 : _c.length)) {
+      } else if (role === "user" && ((_b = msg.attachments) === null || _b === void 0 ? void 0 : _b.length)) {
         const msgAttachmentParts = msg.attachments.map((att) => ({
           text: `[File: ${att.name}]
 ${att.content}`
@@ -2172,11 +2244,12 @@ ${att.content}`
     };
   }
   fromGeminiResponse(response, offeredToolNames = /* @__PURE__ */ new Set()) {
-    var _a, _b, _c, _d;
+    var _a, _b;
+    var _c, _d;
     const { inputTokens, outputTokens, thoughtsTokens, cacheReadTokens, cost } = this.usageFromGemini(response.usageMetadata);
     const candidates = response === null || response === void 0 ? void 0 : response.candidates;
     const firstCandidate = candidates === null || candidates === void 0 ? void 0 : candidates[0];
-    const parts = (_b = (_a = firstCandidate === null || firstCandidate === void 0 ? void 0 : firstCandidate.content) === null || _a === void 0 ? void 0 : _a.parts) !== null && _b !== void 0 ? _b : [];
+    const parts = (_c = (_a = firstCandidate === null || firstCandidate === void 0 ? void 0 : firstCandidate.content) === null || _a === void 0 ? void 0 : _a.parts) !== null && _c !== void 0 ? _c : [];
     const toolCalls = [];
     const thoughtParts = [];
     const textParts = [];
@@ -2189,7 +2262,7 @@ ${att.content}`
         toolCalls.push({
           id: crypto.randomUUID(),
           name: part.functionCall.name,
-          args: (_c = part.functionCall.args) !== null && _c !== void 0 ? _c : {},
+          args: (_d = part.functionCall.args) !== null && _d !== void 0 ? _d : {},
           providerMetadata: { [GEMINI_PROVIDER_KEY]: state }
         });
       } else if (part.thought && part.text) {
@@ -2227,7 +2300,7 @@ ${att.content}`
       base.cacheReadTokens = cacheReadTokens;
     if (cost != null)
       base.cost = cost;
-    const blockReason = (_d = response.promptFeedback) === null || _d === void 0 ? void 0 : _d.blockReason;
+    const blockReason = (_b = response.promptFeedback) === null || _b === void 0 ? void 0 : _b.blockReason;
     if (finishReason != null || thoughtsTokens != null || blockReason != null) {
       base.responseMeta = {
         finishReason,
@@ -2273,9 +2346,10 @@ ${att.content}`
    * without answering" signature.
    */
   logAbnormalResponse(response, parsed) {
-    var _a, _b, _c;
-    const usage = (_a = response.usageMetadata) !== null && _a !== void 0 ? _a : {};
-    const candidate = (_c = (_b = response.candidates) === null || _b === void 0 ? void 0 : _b[0]) !== null && _c !== void 0 ? _c : {};
+    var _a;
+    var _b, _c;
+    const usage = (_b = response.usageMetadata) !== null && _b !== void 0 ? _b : {};
+    const candidate = (_c = (_a = response.candidates) === null || _a === void 0 ? void 0 : _a[0]) !== null && _c !== void 0 ? _c : {};
     logger.warn("GeminiTransport: blank/non-STOP response", {
       model: this.model,
       finishReason: parsed.finishReason,
@@ -2326,7 +2400,7 @@ ${att.content}`
         headers,
         body: payload,
         credentials,
-        vendorLabel: "Gemini",
+        vendorLabel: VENDOR_LABELS.gemini,
         retryableStatuses: _GeminiTransport.RETRYABLE_STATUSES,
         timeout: this.timeout,
         stallTimeout: this.stallTimeout,
@@ -2379,7 +2453,8 @@ var EmptyAIProviderRegistry = class _EmptyAIProviderRegistry {
   }
   getStatus(name) {
     return __awaiter(this, void 0, void 0, function* () {
-      var _a, _b, _c;
+      var _a, _b;
+      var _c;
       if (name !== void 0 && name !== _EmptyAIProviderRegistry.DEFAULT_NAME)
         return null;
       return (_c = yield (_b = (_a = this.noopProvider).getStatus) === null || _b === void 0 ? void 0 : _b.call(_a)) !== null && _c !== void 0 ? _c : null;
@@ -2387,7 +2462,8 @@ var EmptyAIProviderRegistry = class _EmptyAIProviderRegistry {
   }
   listStatuses() {
     return __awaiter(this, void 0, void 0, function* () {
-      var _a, _b, _c;
+      var _a, _b;
+      var _c;
       const status = (_c = yield (_b = (_a = this.noopProvider).getStatus) === null || _b === void 0 ? void 0 : _b.call(_a)) !== null && _c !== void 0 ? _c : null;
       return [{ name: _EmptyAIProviderRegistry.DEFAULT_NAME, isDefault: true, status }];
     });
@@ -2431,7 +2507,8 @@ var MutableAIProviderRegistry = class _MutableAIProviderRegistry {
   }
   getStatus(name) {
     return __awaiter(this, void 0, void 0, function* () {
-      var _a, _b;
+      var _a;
+      var _b;
       const provider = name === void 0 ? this.default() : this.providers.get(name);
       if (!provider)
         return null;
@@ -2442,7 +2519,8 @@ var MutableAIProviderRegistry = class _MutableAIProviderRegistry {
     return __awaiter(this, void 0, void 0, function* () {
       const entries = [...this.providers.entries()];
       return Promise.all(entries.map((_a) => __awaiter(this, [_a], void 0, function* ([name, provider]) {
-        var _b, _c;
+        var _b;
+        var _c;
         return {
           name,
           isDefault: name === this._defaultName,
@@ -3076,6 +3154,19 @@ function accumulate(messages, into) {
 var TOOL_FOLD_SYMBOL = Symbol("toolFold");
 
 // src/components/chat-driver/chat-driver.ts
+var budgetDetailOf = (e) => {
+  const vendor = vendorTypeOfLabel(e.vendorLabel) ?? vendorTypeOfLabel(e.serverVendor);
+  if (e.budgetUsd == null && e.spentUsd == null && !vendor) return void 0;
+  return {
+    budgetUsd: e.budgetUsd,
+    spentUsd: e.spentUsd,
+    vendorLabel: e.vendorLabel,
+    ...vendor ? { vendor } : {},
+    // Server-known truth the client cannot re-derive, so it rides all the way to
+    // the banner rather than being re-guessed there from registry membership.
+    ...e.otherVendorAvailable != null ? { otherVendorAvailable: e.otherVendorAvailable } : {}
+  };
+};
 var DEFAULT_MAX_TOOL_ITERATIONS = 50;
 var DEFAULT_MAX_FOLD_OPERATIONS = 5;
 var DEFAULT_MAX_TURN_SNAPSHOTS = 400;
@@ -3258,6 +3349,22 @@ var ChatDriver = class _ChatDriver extends EventTarget {
      * picked up on the next turn.
      */
     this.resolvedStatusCache = /* @__PURE__ */ new Map();
+    /**
+     * Set the moment a budget wall is observed anywhere in this turn — this
+     * driver's own 402, or a sub-agent's (which surfaces here only as a
+     * `'budget_exhausted'` tool result). Read at the top of the tool loop to end
+     * the turn before issuing another model call that would hit the same wall.
+     * Reset per turn alongside the other per-turn counters.
+     */
+    this.budgetExhaustedThisTurn = false;
+    /**
+     * Whether this turn's budget wall came from a SUB-AGENT rather than this
+     * driver's own request. Decides whether `lastResolvedProvider` is a valid
+     * attribution fallback: for an own wall it is the refusing vendor, for a
+     * child's wall it is the parent's vendor — the one known NOT to have refused.
+     * Reset per turn alongside `budgetWallDetail`.
+     */
+    this.budgetWallViaSubAgent = false;
     const {
       toolHandlers = {},
       toolDefinitions = [],
@@ -3268,12 +3375,14 @@ var ChatDriver = class _ChatDriver extends EventTarget {
       condenseBatchCalls = 1,
       maxTurnSnapshots = DEFAULT_MAX_TURN_SNAPSHOTS,
       sessionKey = "",
-      activityBus = NOOP_ACTIVITY_BUS
+      activityBus = NOOP_ACTIVITY_BUS,
+      budgetExhaustedMessage = DEFAULT_BUDGET_EXHAUSTED_MESSAGE
     } = config;
     this.maxToolIterations = maxToolIterations;
     this.condenseBatchCalls = condenseBatchCalls;
     this.sessionKey = sessionKey;
     this.activityBus = activityBus;
+    this.budgetExhaustedMessage = budgetExhaustedMessage;
     if (typeof toolHandlers === "function") {
       this.toolHandlersFactory = toolHandlers;
       this.toolHandlers = {};
@@ -3380,8 +3489,56 @@ var ChatDriver = class _ChatDriver extends EventTarget {
    * (rather than set to `undefined`) so a happy-path result stays byte-identical to
    * the historical `{ reason: 'done' }`.
    */
-  turnDone(failureReason) {
-    return failureReason ? { reason: "done", failureReason } : { reason: "done" };
+  turnDone(failureReason, budget) {
+    if (!failureReason) return { reason: "done" };
+    return budget ? { reason: "done", failureReason, budget } : { reason: "done", failureReason };
+  }
+  /**
+   * Terminal budget outcome for a wall hit **outside** the tool loop — today,
+   * `OrchestratingDriver`'s classification phase, which calls the provider
+   * directly and so never enters `runToolLoop`.
+   *
+   * Does **not** publish `tool-loop-end`: no `tool-loop-start` was published for
+   * the classify phase, and an unbalanced end would break start/end pairing for
+   * subscribers that rely on it. The driver **return value** is what reports this
+   * case — see `FoundationAiAssistant`'s latch, which reads both seams for
+   * exactly this reason.
+   *
+   * The non-sub-agent tail of the in-loop `BudgetExhaustedError` branch lives
+   * here so there is one copy of the log line, the debug-log entry, the
+   * transcript bubble and the result shape rather than two that can drift.
+   *
+   * @param pendingUserMessage - a user message that has NOT yet been appended,
+   *   appended first so the answer does not end up replying to nothing. Only the
+   *   classification seam passes it: `OrchestratingDriver` dispatches the user's
+   *   text as an optimistic `history-updated` detail and leaves the real append
+   *   to `chatDriver.sendMessage`, which never runs when `classify()` throws — so
+   *   the bubble below would re-dispatch a history the user's own message was
+   *   never in, and it would vanish from the transcript on the next render. The
+   *   in-loop caller has already appended it and passes nothing.
+   *
+   * @internal
+   */
+  reportBudgetExhausted(e, pendingUserMessage) {
+    if (pendingUserMessage) this.appendToHistory(pendingUserMessage);
+    this.budgetExhaustedThisTurn = true;
+    logger2.error("ChatDriver: AI budget exhausted", e);
+    recordTurnError(this.sessionKey, "budget-exhausted", {
+      agent: this.activeAgentName,
+      provider: this.lastResolvedProviderName,
+      // The registry ALIAS (e.g. 'high') is what `provider` records; the vendor
+      // is the thing a per-vendor budget is actually scoped to, and it was known
+      // at both ends and discarded in the middle until now. Taken from the
+      // refusing transport's label first — this method also serves the
+      // classification seam, where `lastResolvedProvider` is the PREVIOUS turn's
+      // vendor (or nothing), because classify runs against the registry default.
+      vendor: vendorTypeOfLabel(e.vendorLabel) ?? vendorTypeOfLabel(e.serverVendor) ?? this.lastResolvedProvider,
+      budgetUsd: e.budgetUsd,
+      spentUsd: e.spentUsd,
+      isSubAgent: this.isSubAgent
+    });
+    this.appendToHistory({ role: "assistant", content: this.budgetExhaustedMessage });
+    return this.turnDone("budget-exhausted", budgetDetailOf(e));
   }
   /** The typed failure reason on a loop result, or `undefined` for a clean turn / handoff. */
   static failureReasonOf(result) {
@@ -3391,10 +3548,28 @@ var ChatDriver = class _ChatDriver extends EventTarget {
    * Build the `tool-loop-end` event detail for a turn's result. A failure carries a
    * `{ failureReason }` detail; a clean turn emits `undefined` — the historical shape,
    * kept byte-identical so subscribers see exactly what they always have.
+   *
+   * A budget failure additionally carries `vendor` — the concrete vendor
+   * (`'anthropic'`/`'gemini'`) the walled turn resolved to, which the driver knows
+   * and used to discard. Optional and additive: a subscriber reading only
+   * `failureReason` is unaffected, a non-budget failure still emits the historical
+   * `{ failureReason }` with no `vendor` key, and the value is a plain string so
+   * the detail stays structured-cloneable for the cross-tab hop. It is the field a
+   * per-vendor budget model needs and the one that would be awkward to retrofit.
    */
-  static loopEndDetail(result) {
+  loopEndDetail(result) {
     const failureReason = _ChatDriver.failureReasonOf(result);
-    return failureReason ? { failureReason } : void 0;
+    if (!failureReason) return void 0;
+    if (failureReason !== "budget-exhausted") {
+      return { failureReason };
+    }
+    const budget = result.reason === "done" ? result.budget : void 0;
+    const vendor = budget?.vendor ?? (this.budgetWallViaSubAgent ? void 0 : this.lastResolvedProvider);
+    return {
+      failureReason,
+      ...vendor ? { vendor } : {},
+      ...budget ? { budget } : {}
+    };
   }
   /**
    * Swap in a new agent's configuration. Called by OrchestratingDriver before
@@ -3580,9 +3755,9 @@ var ChatDriver = class _ChatDriver extends EventTarget {
    * under a separate session key, so recording here would orphan the event off
    * the user-visible debug-log timeline.)
    */
-  failSubAgent(reason) {
+  failSubAgent(reason, budget) {
     if (!this.isSubAgent || this.subAgentFailure) return;
-    this.subAgentFailure = { reason };
+    this.subAgentFailure = budget ? { reason, budget } : { reason };
   }
   /**
    * Returns true if `releaseAgent` was called during the most recent turn.
@@ -4032,6 +4207,9 @@ Output format (strict):
     this.subAgentCompletion = void 0;
     this.subAgentFailure = void 0;
     this.agentReleaseRequested = false;
+    this.budgetExhaustedThisTurn = false;
+    this.budgetWallDetail = void 0;
+    this.budgetWallViaSubAgent = false;
     this.appendToHistory({ role: "user", content: userInput, attachments });
     this.turnStartedAt = Date.now();
     recordMetaEvent(this.sessionKey, "turn.start", {
@@ -4066,7 +4244,7 @@ Output format (strict):
       });
       this.busy = false;
       this.endTurn();
-      this.activityBus.publish("tool-loop-end", _ChatDriver.loopEndDetail(result));
+      this.activityBus.publish("tool-loop-end", this.loopEndDetail(result));
     }
   }
   /**
@@ -4257,8 +4435,14 @@ Output format (strict):
       recordMetaEvent(this.sessionKey, "subagent.completed", { agent: name });
       return { outcome: { ok: true, result: completion.result }, trace };
     }
-    const reason = child.getSubAgentFailure()?.reason ?? "max_iterations";
+    const failure = child.getSubAgentFailure();
+    const reason = failure?.reason ?? "max_iterations";
     recordMetaEvent(this.sessionKey, "subagent.failed", { agent: name, reason });
+    if (reason === "budget_exhausted") {
+      this.budgetExhaustedThisTurn = true;
+      this.budgetWallViaSubAgent = true;
+      this.budgetWallDetail ??= failure?.budget;
+    }
     return { outcome: { ok: false, reason }, trace };
   }
   /**
@@ -4271,6 +4455,9 @@ Output format (strict):
     this.beginTurn();
     this.subAgentCompletion = void 0;
     this.subAgentFailure = void 0;
+    this.budgetExhaustedThisTurn = false;
+    this.budgetWallDetail = void 0;
+    this.budgetWallViaSubAgent = false;
     this.turnStartedAt = Date.now();
     recordMetaEvent(this.sessionKey, "turn.start", {
       phase: "continueFromHistory",
@@ -4304,7 +4491,7 @@ Output format (strict):
       });
       this.busy = false;
       this.endTurn();
-      this.activityBus.publish("tool-loop-end", _ChatDriver.loopEndDetail(result));
+      this.activityBus.publish("tool-loop-end", this.loopEndDetail(result));
     }
   }
   // ---------------------------------------------------------------------------
@@ -4458,6 +4645,31 @@ Output format (strict):
       if (this.turnController.signal.aborted) {
         return this.completeAbortedTurn();
       }
+      if (this.budgetExhaustedThisTurn) {
+        logger2.error("ChatDriver: ending the turn \u2014 a sub-agent hit the AI budget wall");
+        recordTurnError(this.sessionKey, "budget-exhausted", {
+          agent: this.activeAgentName,
+          provider: this.lastResolvedProviderName,
+          // The CHILD's vendor when it knew one, and NOTHING otherwise. On this
+          // path the wall is definitionally the child's, and on a mixed registry
+          // `lastResolvedProvider` is this driver's own vendor — the one known
+          // NOT to have refused. An unattributable child wall must degrade to
+          // the vendor-agnostic block (which `latchBlockedFrom` handles
+          // fail-safe), never to a vendor that is known to be wrong: naming the
+          // parent's vendor here walled BOTH — the child's via its own
+          // tool-loop-end, the parent's via this event — and derived `blocked`
+          // over headroom that still existed.
+          vendor: this.budgetWallDetail?.vendor,
+          via: "sub-agent",
+          isSubAgent: this.isSubAgent
+        });
+        if (this.isSubAgent) {
+          this.failSubAgent("budget_exhausted", this.budgetWallDetail);
+        } else {
+          this.appendToHistory({ role: "assistant", content: this.budgetExhaustedMessage });
+        }
+        return this.turnDone("budget-exhausted", this.budgetWallDetail);
+      }
       const promptCtx = {
         agentName: this.activeAgentName ?? "",
         history: this.history,
@@ -4629,6 +4841,25 @@ ${tailBody}
           }
           return this.turnDone("response-truncated");
         }
+        if (e instanceof BudgetExhaustedError) {
+          this.budgetExhaustedThisTurn = true;
+          this.budgetWallDetail = budgetDetailOf(e);
+          this.budgetWallViaSubAgent = false;
+          if (this.isSubAgent) {
+            logger2.error("ChatDriver: AI budget exhausted", e);
+            recordTurnError(this.sessionKey, "budget-exhausted", {
+              agent: this.activeAgentName,
+              provider: this.lastResolvedProviderName,
+              vendor: vendorTypeOfLabel(e.vendorLabel) ?? vendorTypeOfLabel(e.serverVendor) ?? this.lastResolvedProvider,
+              budgetUsd: e.budgetUsd,
+              spentUsd: e.spentUsd,
+              isSubAgent: true
+            });
+            this.failSubAgent("budget_exhausted", this.budgetWallDetail);
+            return this.turnDone("budget-exhausted", this.budgetWallDetail);
+          }
+          return this.reportBudgetExhausted(e);
+        }
         if (e instanceof DOMException && e.name === "TimeoutError") {
           logger2.error("ChatDriver: request timed out", e);
           recordTurnError(this.sessionKey, "exception", {
@@ -5104,6 +5335,17 @@ var OrchestratingDriver = class extends EventTarget {
      * user stops. Reset at the start of each `sendMessage`.
      */
     this.cancelled = false;
+    /**
+     * Whether the CURRENT turn's user message has reached the inner driver's
+     * history. False through the pre-first-turn classify (where the only echo of
+     * the message is an optimistic `history-updated` dispatch), true from the
+     * moment `chatDriver.sendMessage` is entered — including through every later
+     * handoff classify. Read by the budget-wall catch in `sendMessage` to decide
+     * whether `reportBudgetExhausted` must append the message itself: appending
+     * it when already appended duplicated it; not appending it when unappended
+     * made it vanish. Reset at the top of each `runOrchestratedTurn`.
+     */
+    this.userMessageAppended = false;
     /**
      * Sticky user pick from the picker (or the host's `setAgent` API). Only
      * changes on explicit user action. Survives flow completion: when a stateful
@@ -5145,7 +5387,8 @@ var OrchestratingDriver = class extends EventTarget {
       maxFoldOperations: options.maxFoldOperations,
       maxTurnSnapshots: options.maxTurnSnapshots,
       sessionKey: this.sessionKey,
-      activityBus: options.activityBus
+      activityBus: options.activityBus,
+      budgetExhaustedMessage: options.budgetExhaustedMessage
     });
     this.chatDriver.addEventListener("history-updated", (e) => {
       this.dispatchEvent(new CustomEvent("history-updated", { detail: e.detail }));
@@ -5244,7 +5487,25 @@ var OrchestratingDriver = class extends EventTarget {
     return this.chatDriver.getSuggestions(history, prompt2, count, agentInfo);
   }
   async sendMessage(input, attachments) {
+    try {
+      return await this.runOrchestratedTurn(input, attachments);
+    } catch (e) {
+      if (e instanceof BudgetExhaustedError) {
+        return this.chatDriver.reportBudgetExhausted(
+          e,
+          this.userMessageAppended ? void 0 : {
+            role: "user",
+            content: input,
+            ...attachments ? { attachments } : {}
+          }
+        );
+      }
+      throw e;
+    }
+  }
+  async runOrchestratedTurn(input, attachments) {
     this.cancelled = false;
+    this.userMessageAppended = false;
     const history = this.chatDriver.getHistory();
     this.dispatchEvent(
       new CustomEvent("history-updated", {
@@ -5258,6 +5519,7 @@ var OrchestratingDriver = class extends EventTarget {
     let handoffs = 0;
     let handoffSummary = "";
     let remainingTask = "";
+    let lastResult;
     while (true) {
       if (this.cancelled) break;
       await this.applyAgent(currentAgent);
@@ -5266,8 +5528,10 @@ var OrchestratingDriver = class extends EventTarget {
         const contextPrimer = handoffSummary ? [{ role: "user", content: `[Context from previous agent]: ${handoffSummary}` }] : [];
         result = await this.chatDriver.continueFromHistory(contextPrimer);
       } else {
+        this.userMessageAppended = true;
         result = await this.chatDriver.sendMessage(input, attachments);
       }
+      lastResult = result;
       if (this.chatDriver.getAgentReleaseRequested()) {
         await this.releaseActiveAgent();
         break;
@@ -5289,7 +5553,7 @@ var OrchestratingDriver = class extends EventTarget {
       this.dispatchEvent(new CustomEvent("orchestrating-start"));
       currentAgent = await this.classify(remainingTask, updatedHistory);
     }
-    return { reason: "done" };
+    return lastResult?.reason === "done" ? lastResult : { reason: "done" };
   }
   async continueFromHistory(transientPrimer) {
     return this.chatDriver.continueFromHistory(transientPrimer);
@@ -5472,6 +5736,7 @@ ${recentMessages}` : ""}`;
         }
       }
     };
+    let routedNoMatch = false;
     for (let attempt = 0; attempt <= this.classifierRetries; attempt += 1) {
       try {
         const options = {
@@ -5491,8 +5756,10 @@ ${recentMessages}` : ""}`;
         if (index >= 0 && index < this.specialists.length) {
           return this.specialists[index];
         }
+        routedNoMatch = true;
         break;
       } catch (e) {
+        if (e instanceof BudgetExhaustedError) throw e;
         logger2.warn(`OrchestratingDriver: classifier attempt ${attempt + 1} failed:`, e);
         if (attempt === this.classifierRetries) {
           logger2.error("OrchestratingDriver: classifier failed after all retries, using fallback");
@@ -5500,10 +5767,12 @@ ${recentMessages}` : ""}`;
       }
     }
     if (this.fallback) return this.fallback;
-    const specialistNames = this.specialists.map((s) => s.name).join(", ");
-    this.appendInlineMessage(
-      `I'm not sure how to help with that. I can assist with: ${specialistNames}.`
-    );
+    if (routedNoMatch) {
+      const specialistNames = this.specialists.map((s) => s.name).join(", ");
+      this.appendInlineMessage(
+        `I'm not sure how to help with that. I can assist with: ${specialistNames}.`
+      );
+    }
     return this.specialists[0];
   }
   /**