import type { AccessTokenProvider } from "@cargo-ai/cdk/cli";
export type ConfigSource = "environment" | "credentials-file" | "none";
export type Config = {
    /**
     * Resolves the token for each request, renewing the session first when it is
     * about to expire. `undefined` means no credential at all.
     */
    getAccessToken: AccessTokenProvider | undefined;
    baseUrl: string;
    appUrl: string;
    workspaceUuid: string | undefined;
    source: ConfigSource;
};
export declare function getConfig(): Config;
/**
 * An API token is bound to one workspace by the server, which derives the
 * workspace from the token and ignores the one we send alongside it. Pointing
 * CARGO_WORKSPACE_UUID somewhere else would therefore run against the token's
 * workspace while looking like it worked, so refuse instead of silently
 * touching the wrong data. A signed-in session carries no such binding: the
 * server honours the workspace header, so the override just works.
 *
 * Exported for tests; `getConfig` is the only production caller.
 */
export declare function describeWorkspaceOverrideConflict(opts: {
    isWorkspaceBoundToken: boolean;
    tokenSource: ConfigSource;
    credentialsWorkspaceUuid: string | undefined;
    requestedWorkspaceUuid: string | undefined;
}): string | undefined;
//# sourceMappingURL=config.d.ts.map