Erros e estados do Pix Out

import { createHmac } from 'node:crypto';
import { setTimeout as sleep } from 'node:timers/promises';

export async function enviarLote(corpoOriginal) {
  const path = '/v1/payouts/batches';
  const clientId = process.env.TURBOFY_CLIENT_ID;
  const clientSecret = process.env.TURBOFY_CLIENT_SECRET;

  for (let tentativa = 1; tentativa <= 3; tentativa++) {
    const timestamp = Date.now().toString();
    const signature = createHmac('sha256', clientSecret)
      .update(`${timestamp}.POST.${path}.${corpoOriginal}`)
      .digest('hex');
    const signal = AbortSignal.timeout(15_000);

    try {
      const response = await fetch(`https://api.turbofypay.com${path}`, {
        method: 'POST',
        headers: {
          'content-type': 'application/json',
          'x-client-id': clientId,
          'x-client-secret': clientSecret,
          'x-turbofy-timestamp': timestamp,
          'x-turbofy-signature': signature,
        },
        body: corpoOriginal,
        signal,
      });

      if (response.status === 429) {
        throw new Error(`HTTP 429. Retry-After: ${response.headers.get('retry-after') ?? 'ausente'}`);
      }

      const resultado = await response.json();
      if (response.status === 201 || response.status === 200) return resultado;

      const code = resultado?.error?.code;
      const busy = response.status === 409 && code === 'PAYOUT_BATCH_BUSY';
      const timeout = response.status === 500 && code === 'P2028';
      if (!busy && !timeout) throw new Error(`HTTP ${response.status}: ${code ?? 'sem código'}`);
    } catch (error) {
      if (error.name !== 'TimeoutError' && !(error.name === 'AbortError' && signal.aborted)) {
        throw error;
      }
    }

    if (tentativa < 3) await sleep(tentativa * 1000);
  }

  throw new Error('Lote sem confirmação. Preserve o corpo original e a chave de idempotência.');
}