async function withRetry(fn, maxAttempts = 4) {
  for (let attempt = 1; attempt <= maxAttempts; attempt++) {
    const res  = await fn();
    const body = await res.clone().json();

    if (res.ok) return body;

    const isRetryable = res.status === 429 || res.status >= 500;
    if (!isRetryable || attempt === maxAttempts) {
      throw Object.assign(new Error(body.message), {
        code:      body.error?.code,
        requestId: body.meta?.requestId,
        status:    res.status,
      });
    }

    // On 429, wait for the rate limit window to reset
    const resetAt = res.headers.get('X-RateLimit-Reset');
    const waitMs  = resetAt
      ? Math.max(Number(resetAt) * 1000 - Date.now(), 1000)
      : Math.min(2 ** attempt * 500, 30000);

    await new Promise(r => setTimeout(r, waitMs));
  }
}

import time, os, requests

def with_retry(fn, max_attempts=4):
    for attempt in range(1, max_attempts + 1):
        resp = fn()
        body = resp.json()

        if resp.ok:
            return body

        retryable = resp.status_code == 429 or resp.status_code >= 500
        if not retryable or attempt == max_attempts:
            raise RuntimeError(
                f"[{body.get('error', {}).get('code', 'UNKNOWN')}] "
                f"{body.get('message')} "
                f"(requestId: {body.get('meta', {}).get('requestId')})"
            )

        if resp.status_code == 429:
            reset_at = resp.headers.get('X-RateLimit-Reset')
            wait = max(int(reset_at) - time.time(), 1) if reset_at else 2 ** attempt
        else:
            wait = min(2 ** attempt * 0.5, 30)

        time.sleep(wait)

async function issueCard(payload) {
  const res  = await fetch('https://api.fyatu.com/api/v3.20/cards', {
    method:  'POST',
    headers: {
      'Authorization': `Bearer ${process.env.FYATU_API_KEY}`,
      'Content-Type':  'application/json',
    },
    body: JSON.stringify(payload),
  });

  const body = await res.json();

  if (!body.success) {
    switch (body.error?.code) {
      case 'CARDHOLDER_KYC_NOT_APPROVED':
        throw new Error('Cardholder KYC is still pending — wait for CARDHOLDER_KYC_APPROVED webhook');
      case 'INSUFFICIENT_PROGRAM_BALANCE':
        throw new Error('Top up your program balance before issuing cards');
      case 'INSUFFICIENT_SCOPE':
        throw new Error('API key is missing the cards:write scope');
      case 'RATE_LIMITED':
        throw Object.assign(new Error('Rate limited'), { resetAt: res.headers.get('X-RateLimit-Reset') });
      default:
        throw new Error(`${body.error?.code}: ${body.message} (requestId: ${body.meta?.requestId})`);
    }
  }

  return body.data;
}

def issue_card(payload):
    resp = requests.post(
        'https://api.fyatu.com/api/v3.20/cards',
        headers={'Authorization': f'Bearer {os.environ["FYATU_API_KEY"]}'},
        json=payload,
    )
    body = resp.json()

    if not body['success']:
        code      = body.get('error', {}).get('code', 'UNKNOWN')
        message   = body.get('message', '')
        requestId = body.get('meta', {}).get('requestId', '')
        raise RuntimeError(f'{code}: {message} (requestId: {requestId})')

    return body['data']

{
  "success": false,
  "status": 422,
  "message": "Cardholder KYC is not approved",
  "error": {
    "code": "CARDHOLDER_KYC_NOT_APPROVED",
    "detail": "The cardholder must have kycStatus APPROVED before a card can be issued"
  },
  "meta": { "requestId": "req_01HXY...", "platform": "Fyatu CaaS", "timestamp": "2026-05-22T10:00:00Z" }
}

{
  "success": false,
  "status": 422,
  "message": "Insufficient program balance",
  "error": {
    "code": "INSUFFICIENT_PROGRAM_BALANCE",
    "detail": "Program balance is $0.00. Required: $50.00"
  },
  "meta": { "requestId": "req_01HXY...", "platform": "Fyatu CaaS", "timestamp": "2026-05-22T10:00:00Z" }
}

{
  "success": false,
  "status": 409,
  "message": "Card has pending transactions and cannot be terminated",
  "error": {
    "code": "CARD_HAS_PENDING_TRANSACTIONS",
    "detail": "Wait for all pending authorizations to clear before terminating"
  },
  "meta": { "requestId": "req_01HXY...", "platform": "Fyatu CaaS", "timestamp": "2026-05-22T10:00:00Z" }
}

{
  "success": false,
  "status": 400,
  "message": "Termination requires explicit confirmation",
  "error": {
    "code": "CONFIRMATION_REQUIRED",
    "detail": "Include \"confirm\": \"TERMINATE_CARD\" in the request body"
  },
  "meta": { "requestId": "req_01HXY...", "platform": "Fyatu CaaS", "timestamp": "2026-05-22T10:00:00Z" }
}