@xemahq/llm-registry-api-client 0.8.12 → 0.8.13

package/dist/custom-fetch.d.ts

@@ -97,6 +97,7 @@ export declare class ClientError extends Error {
     readonly url: string;
     readonly body: unknown;
     constructor(status: number, url: string, body: unknown);
+    static [Symbol.hasInstance](candidate: unknown): boolean;
 }
 export declare function configureClient(config: ClientConfig): void;
 export declare function getClientConfig(): ClientConfig;

package/dist/custom-fetch.js

@@ -19,6 +19,50 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.customFetch = exports.ClientError = void 0;
 exports.configureClient = configureClient;
 exports.getClientConfig = getClientConfig;
+/**
+ * Cross-package identity for `ClientError`.
+ *
+ * ── THE OUTAGE THIS IS FOR ────────────────────────────────────────────────
+ *
+ * PRODUCTION, 2026-09-22. A session launch aborted on
+ * `HTTP 503 from http://skill-registry-api…/skills`. A 503 is the archetypal
+ * TRANSIENT — agent-session's launch taxonomy already listed it as retryable —
+ * but it was classified PERMANENT and the launch was abandoned.
+ *
+ * The cause was this file. Every generated client package gets its OWN copy of
+ * `ClientError`, so there are as many classes as there are clients (81 at the
+ * time of writing), all byte-identical and all DIFFERENT OBJECTS. A consumer
+ * naturally writes `err instanceof ClientError` against the one client it
+ * imported — which reads as obviously correct and is silently package-local. An
+ * error from any OTHER client fails it, falls past every status check, and lands
+ * on whatever the default is.
+ *
+ * That was not the first time: biome-host had already switched to structural
+ * detection for the same reason, and canopy imports TWO `ClientError` classes
+ * and tests both. Three more call sites elsewhere carry the same shape.
+ *
+ * ── WHY A BRAND AND NOT A SHARED PACKAGE ─────────────────────────────────
+ *
+ * The obvious fix is one shared runtime class every client imports. It was
+ * rejected on measurement: the 81 generated clients are DEPENDENCY-FREE by
+ * design (exactly one has any dependency at all), and a shared class would have
+ * to be a PEER dependency to be safe — a normal dependency can be installed
+ * twice under version skew, which reinstates this identical bug in a form that
+ * is HARDER to see, because the classes then look like they ought to match.
+ *
+ * `Symbol.for` is a process-wide registry keyed by STRING, so every copy of
+ * this template resolves the same symbol without importing anything. The brand
+ * costs no dependency, cannot skew, and needs no new package.
+ *
+ * `Symbol.hasInstance` then makes plain `instanceof` mean the right thing
+ * fleet-wide: an error from ANY generated client satisfies `instanceof
+ * ClientError` in ANY other. A helper would have made the safe pattern
+ * available; this makes the dangerous pattern impossible.
+ *
+ * Narrow on purpose — the brand is set only by this constructor, so an unrelated
+ * error carrying a `status` is not admitted.
+ */
+const CLIENT_ERROR_BRAND = Symbol.for('xema.generatedClientError');
 class ClientError extends Error {
     status;
     url;
@@ -29,6 +73,14 @@ class ClientError extends Error {
         this.url = url;
         this.body = body;
         this.name = 'ClientError';
+        // Non-enumerable: it must not appear in JSON, logs or snapshots — it is an
+        // identity marker, not payload.
+        Object.defineProperty(this, CLIENT_ERROR_BRAND, { value: true });
+    }
+    static [Symbol.hasInstance](candidate) {
+        return (typeof candidate === 'object' &&
+            candidate !== null &&
+            CLIENT_ERROR_BRAND in candidate);
     }
 }
 exports.ClientError = ClientError;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/llm-registry-api-client",
-  "version": "0.8.12",
+  "version": "0.8.13",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "files": [
@@ -19,7 +19,7 @@
     "service": "llm-registry-api",
     "biome": "agent-runtime",
     "target": "server",
-    "generator": "@xemahq/api-client-generator@0.21.0",
+    "generator": "@xemahq/api-client-generator@1.1.2",
     "source": "openapi.public.json"
   },
   "license": "LicenseRef-Xema-BSL-1.1",