export interface AuthModeInputs {
    /** Absolute service-account keyfile path (from GOOGLE_APPLICATION_CREDENTIALS or config.json). "" if none. */
    credentialsFile: string;
    /** User-OAuth refresh token from env (GOOGLE_GSC_REFRESH_TOKEN). "" if none. */
    refreshToken: string;
    /** True if a stored OAuth credentials file (auth-helper output) exists on disk. */
    hasStoredCreds: boolean;
}
export type AuthMode = "service_account" | "oauth" | "unconfigured";
export interface AuthModeSelection {
    mode: AuthMode;
    /** Echoed back for service_account so the caller can load the keyfile. */
    credentialsFile: string;
}
/**
 * Decide the auth mode. Precedence:
 *   1. service_account — an explicit keyfile path wins (matches historical
 *      loadConfig precedence and is the most explicit signal).
 *   2. oauth — a refresh token (env) or a stored credentials file.
 *   3. unconfigured — no signal; caller must surface an onboarding error.
 */
export declare function selectAuthMode(inputs: AuthModeInputs): AuthModeSelection;