//! Runbeam SDK
//!
//! A Rust library for integrating with the Runbeam Cloud API.
//!
//! This SDK provides:
//! - JWT token validation with RS256 and JWKS caching
//! - Laravel Sanctum API token support
//! - Runbeam Cloud API client for gateway authorization
//! - Secure token storage via encrypted filesystem storage (age encryption)
//! - Type definitions for API requests/responses and error handling
//!
//! # Authentication Methods
//!
//! The SDK supports two authentication methods:
//!
//! ## JWT Tokens (Legacy)
//!
//! JWT tokens with RS256 signature validation. The SDK performs local validation
//! using public keys fetched from JWKS endpoints. Use this method when you need
//! local token validation and claim extraction.
//!
//! ## Laravel Sanctum API Tokens
//!
//! Laravel Sanctum API tokens (format: `{id}|{token}`) are passed directly to the
//! server for validation. Use this method for simpler authentication flows where
//! local token validation is not required.
//!
//! # Example (JWT Authentication)
//!
//! ```no_run
//! use runbeam_sdk::{
//!     RunbeamClient,
//!     validate_jwt_token,
//!     save_machine_token,
//!     MachineToken,
//! };
//!
//! # async fn example() -> Result<(), Box<dyn std::error::Error>> {
//! // Validate a user JWT token
//! let claims = validate_jwt_token("eyJhbGci...", 24).await?;
//!
//! // Create API client from JWT issuer
//! let client = RunbeamClient::new(claims.api_base_url());
//!
//! // Authorize a gateway and get machine token
//! let response = client.authorize_gateway(
//!     "eyJhbGci...",
//!     "gateway-123",
//!     None,
//!     None
//! ).await?;
//!
//! // Save machine token securely (encrypted filesystem storage)
//! let machine_token = MachineToken::new(
//!     response.machine_token,
//!     response.expires_at,
//!     response.gateway.id,
//!     response.gateway.code,
//!     response.abilities,
//! );
//! save_machine_token("harmony", &machine_token).await?;
//! # Ok(())
//! # }
//! ```
//!
//! # Example (Sanctum Authentication)
//!
//! ```no_run
//! use runbeam_sdk::{
//!     RunbeamClient,
//!     save_machine_token,
//!     MachineToken,
//! };
//!
//! # async fn example() -> Result<(), Box<dyn std::error::Error>> {
//! // Create API client with base URL
//! let client = RunbeamClient::new("https://api.runbeam.io");
//!
//! // Authorize a gateway with Sanctum token (no validation needed)
//! let response = client.authorize_gateway(
//!     "1|abc123def456...",  // Sanctum API token
//!     "gateway-123",
//!     None,
//!     None
//! ).await?;
//!
//! // Save machine token securely (encrypted filesystem storage)
//! let machine_token = MachineToken::new(
//!     response.machine_token,
//!     response.expires_at,
//!     response.gateway.id,
//!     response.gateway.code,
//!     response.abilities,
//! );
//! save_machine_token("harmony", &machine_token).await?;
//! # Ok(())
//! # }
//! ```

pub mod runbeam_api;
pub mod storage;
pub mod validation;

// Re-export commonly used types and functions
pub use validation::{
    validate_config_toml, validate_pipeline_toml, validate_toml, ValidationError,
};

pub use runbeam_api::{
    client::RunbeamClient,
    jwt::{extract_bearer_token, validate_jwt_token, JwtClaims},
    resources::{
        AcknowledgeChangesRequest, AcknowledgeChangesResponse, Authentication, Backend,
        BaseUrlResponse, Change, ChangeAppliedResponse, ChangeFailedRequest, ChangeFailedResponse,
        ChangeStatusResponse, Endpoint, Gateway, GatewayConfiguration, Middleware, Network,
        PaginatedResponse, PaginationLinks, PaginationMeta, Pipeline, Policy, PolicyRules, ResourceResponse,
        Service, Transform,
    },
    token_storage::{
        // Backwards-compatible machine token functions
        clear_machine_token,
        // Generic token storage functions
        clear_token,
        load_machine_token,
        load_token,
        save_machine_token,
        save_token,
        save_token_with_key,
        MachineToken,
    },
    types::{
        ApiError, AuthorizeResponse, GatewayInfo, RunbeamError, StoreConfigRequest,
        StoreConfigResponse, TeamInfo, UserInfo, UserToken,
    },
};
