sdk

type CredentialStore interface {
	// Load retrieves credentials for the given origin (e.g., "https://3.basecampapi.com").
	Load(origin string) (*Credentials, error)

	// Save stores credentials for the given origin.
	Save(origin string, creds *Credentials) error

	// Delete removes credentials for the given origin.
	Delete(origin string) error
}

type Credentials struct {
	AccessToken   string `json:"access_token"`
	RefreshToken  string `json:"refresh_token,omitempty"`
	ExpiresAt     int64  `json:"expires_at,omitempty"`
	TokenEndpoint string `json:"token_endpoint,omitempty"`
	OAuthType     string `json:"oauth_type,omitempty"` // "bc3" or "launchpad"
	Scope         string `json:"scope,omitempty"`
	UserID        string `json:"user_id,omitempty"`
}

type EnvTokenSource struct {
	EnvVar string // Environment variable name (default: BASECAMP_TOKEN)
}

type StaticTokenSource struct {
	AccessToken string
}

type StoreError struct {
	Operation string // "load", "save", "delete"
	Origin    string
	Message   string
	Cause     error
}

type TokenError struct {
	Message string
	Cause   error
}

type TokenSource interface {
	// Token returns a valid access token.
	// Implementations should handle token refresh automatically.
	Token(ctx context.Context) (string, error)

	// Refresh forces a token refresh, invalidating any cached token.
	Refresh(ctx context.Context) error
}