{
  "code": "UNAUTHORIZED",
  "message": "Valid API key required. Use Authorization: Bearer cvt_live_<key>.",
  "retry_hint": null,
  "user_fixable": true,
  "retry_likely_to_succeed": false
}

import { Curviate, isCurviateError } from "@curviate/sdk";
 
const curviate = new Curviate({ apiKey: process.env.CURVIATE_API_KEY! });
 
try {
  await curviate.accounts.list();
} catch (err) {
  if (!isCurviateError(err)) throw err;
 
  switch (err.code) {
    case "RATE_LIMIT_TENANT":
    case "RATE_LIMIT_ACCOUNT":
      // delayMs is the camelCase view of retry_hint.delay_ms
      await new Promise((r) => setTimeout(r, err.retryHint?.delayMs ?? 60_000));
      break;
    case "UNAUTHORIZED":
      console.error("Check your API key.");
      break;
    case "ACCOUNT_NOT_FOUND":
      console.error("Run accounts.list() and use an id from that response.");
      break;
    default:
      // Required: the taxonomy is additive, so unknown codes will appear.
      console.error(`Unhandled ${err.code} (HTTP ${err.httpStatus}): ${err.message}`);
      throw err;
  }
}

# A 429 response, rate limit exceeded
HTTP/2 429
Retry-After: 37
ratelimit: "tenant";r=0;t=37
ratelimit-policy: "tenant";q=2500;w=60
Content-Type: application/json
 
{
  "code": "RATE_LIMIT_TENANT",
  "message": "Tenant rate limit exceeded.",
  "retry_hint": { "kind": "delay", "delay_ms": 37000 },
  "user_fixable": false,
  "retry_likely_to_succeed": true
}

const res = await fetch(url, { headers: { Authorization: `Bearer ${key}` } });
 
if (res.status === 429) {
  const header = res.headers.get("retry-after");
  const body = await res.json();
  const waitMs =
    (header ? Number(header) * 1000 : undefined) ??
    body.retry_hint?.delay_ms ??
    60_000;
  await new Promise((r) => setTimeout(r, waitMs));
}