Tratamento de Erros

async function apiRequest(url, options = {}) {
  const response = await fetch(url, {
    ...options,
    headers: {
      "Content-Type": "application/json",
      Authorization: `Bearer ${accessToken}`,
      ...options.headers,
    },
  });

  if (response.ok) {
    // 204 No Content returns no body
    if (response.status === 204) return null;
    return response.json();
  }

  const error = await response.json();

  switch (response.status) {
    case 400:
      // Validation error -- check error.errors for field details
      console.error("Validation failed:", error.errors);
      throw new ValidationError(error.message, error.errors);

    case 401:
      // Token expired -- attempt refresh
      const newTokens = await refreshAccessToken();
      if (newTokens) {
        return apiRequest(url, options); // Retry with new token
      }
      throw new AuthError("Session expired. Please sign in again.");

    case 403:
      // Check for special sub-codes
      return handle403(error);

    case 404:
      throw new NotFoundError(error.message, error.resourceId);

    case 409:
      throw new ConflictError(error.message);

    case 429:
      // Rate limited -- retry after delay
      const retryAfter = response.headers.get("Retry-After");
      await sleep(parseInt(retryAfter || "1") * 1000);
      return apiRequest(url, options);

    default:
      throw new ApiError(error.message, response.status);
  }
}

function handle403(error) {
  switch (error.message) {
    case "auth.organization_selection_required":
      // Prompt user to select an organization
      return redirectToOrgSelection();

    case "auth.otp_verification_required":
      // Redirect to email verification screen
      return redirectToVerification();

    case "auth.method_not_allowed":
      // User signed up with OAuth but is trying email/password
      throw new Error("Please sign in using your Google or Microsoft account.");

    case "auth.invitation_required":
      throw new Error("You need an invitation to access this organization.");

    default:
      // Generic permission error
      throw new ForbiddenError("You don't have permission to perform this action.");
  }
}