export type AuthBrokerAction = "serve" | "token" | "login" | "logout" | "status" | "import" | "migrate";
export interface AuthBrokerCommandArgs {
    action: AuthBrokerAction;
    flags: {
        json?: boolean;
        bind?: string;
        regenerate?: boolean;
        via?: string;
        provider?: string;
        dryRun?: boolean;
        /** `login`/`logout`: provider id. `import`: filesystem path. */
        source?: string;
        /** `import`: keep credentials whose JSON had `disabled: true`. */
        includeDisabled?: boolean;
        /** `migrate`: also upload local OAuth (default: api_key only, since OAuth is via cliproxy import). */
        includeOauth?: boolean;
        /** `migrate`: also capture env-var API keys for providers not yet on broker. */
        includeEnv?: boolean;
        /** `migrate`: required `--from-local` source. Reserved for future sources. */
        fromLocal?: boolean;
    };
}
declare const ACTIONS: readonly AuthBrokerAction[];
export declare function runAuthBrokerCommand(cmd: AuthBrokerCommandArgs): Promise<void>;
export { ACTIONS as AUTH_BROKER_ACTIONS };