Error codes

{
  "success": false,
  "error": {
    "code": "ERROR_CODE",
    "message": "Human-readable error description",
    "request_id": "abc123...",
    "retryable": false
  }
}

// One key per logical request, reused on every retry of it:
// POST /v1/verify charges, and the key is what stops a retry paying twice.
async function verifyEmail(email, idempotencyKey = crypto.randomUUID(), attempt = 1) {
  const response = await fetch('https://api.kawaa.com/v1/verify', {
    method: 'POST',
    headers: {
      'X-Api-Key': process.env.KAWAA_API_KEY,
      'Content-Type': 'application/json',
      'Idempotency-Key': idempotencyKey,
    },
    body: JSON.stringify({ email }),
  });

  const data = await response.json();
  if (data.success) return data.data;

  const { code, message, retryable, retry_after_seconds } = data.error;

  if (code === 'INSUFFICIENT_CREDITS') {
    throw new Error('Please add credits to continue');
  }
  if (code === 'BAD_REQUEST') {
    // e.g. malformed email input — skip it
    return { status: 'skipped', reason: message };
  }

  // Only retry what the API says can succeed. An absent retryable means
  // "it depends", so do not loop on it.
  if (retryable === true && attempt < 4) {
    const waitSeconds = retry_after_seconds ?? 2 ** attempt;
    await sleep(waitSeconds * 1000);
    return verifyEmail(email, idempotencyKey, attempt + 1);
  }

  throw new Error(code + ': ' + message);
}