export type Config = {
    dir: string;
    tokensDir: string;
    clientSecretPath: string;
    tokenOverride?: string;
    account?: string;
};
/**
 * Parse and validate the environment into one typed `Config`; consumers read
 * the returned object, not `process.env` (see the module note for the two
 * sanctioned exceptions).
 */
export declare function loadConfig(env?: NodeJS.ProcessEnv): Config;
/** The token file for `account`: the single-account override, or the per-account default. */
export declare function tokenPath(account: string, config?: Config): string;
/** The account to act as (explicit arg wins over env), validated as a safe path segment. */
export declare function resolveAccount(account?: string, config?: Config): string;
/**
 * Front-loaded union of every planned service's OAuth scopes (the B1 model): each
 * account consents once and is authorized for everything. Google only issues a
 * refresh token on a fresh grant, so adding a scope here later forces re-consent
 * of every account. The OAuth consent screen must list these same scopes.
 */
export declare const SCOPES: string[];
//# sourceMappingURL=config.d.ts.map