import { APIError, QumoClient } from "@qumo-deploy/sdk";

const client = new QumoClient({
  baseUrl: "https://api.qumo.dev",
  apiKey: "invalid_key",
});

try {
  await client.projects.list();
} catch (err: unknown) {
  if (err instanceof APIError) {
    console.error(`HTTP Status: ${err.status}`);
    console.error(`Server Message: ${err.message}`);
    console.error(`Error Payload:`, err.data);

    switch (err.status) {
      case 401:
        console.error("Authentication failed: verify QUMO_API_KEY or Bearer token.");
        break;
      case 403:
        console.error("Access forbidden: check your IAM roles and workspace permissions.");
        break;
      case 404:
        console.error("Requested resource not found.");
        break;
      case 429:
        console.error("Rate limit exceeded: implement exponential backoff.");
        break;
      default:
        console.error("Unexpected error occurred.");
    }
  } else {
    throw err;
  }
}

import { IAM_ROLE_IDS, type IAMRoleID } from "@qumo-deploy/sdk";

// Built-in IAM roles:
// - "roles/platform.admin"
// - "roles/project.viewer"
// - "roles/project.editor"
// - "roles/project.admin"
// - "roles/tenant.admin"

function isTenantAdmin(role: IAMRoleID): boolean {
  return role === "roles/tenant.admin";
}