export interface OAuthSession {
    accessToken: string;
    refreshToken?: string;
    expiresAt?: number;
    tokenType?: string;
    scope?: string;
    user?: {
        email?: string;
        sub?: string;
    };
}
export interface CliConfig {
    apiKey?: string;
    tenantOrgId?: string;
    defaultRegion?: string;
    oauth?: OAuthSession;
}
export declare function loadConfig(): CliConfig;
/**
 * Atomically writes the config file with mode 0600. The file is created in a
 * sibling temp path with the restrictive mode applied at open time (avoids a
 * TOCTOU window where a fresh file briefly has 0644 before chmod tightens it),
 * then renamed into place. On Windows the mode bits are effectively ignored,
 * which matches the platform's NTFS-ACL-based model.
 */
export declare function saveConfig(config: CliConfig): void;
export declare function getConfigPath(): string;
//# sourceMappingURL=config.d.ts.map