def resolve_client_config_for_account(account) -> dict:
    """Resolve client config for an account: its imported config row or server default."""
    # Called from sync or async context; imports DB lazily.
    from app.db.session import SyncSession
    from app.models import OAuthClientConfig
    if account.oauth_config_id:
        with SyncSession() as s:
            cfg = s.get(OAuthClientConfig, account.oauth_config_id)
            if cfg and cfg.is_active:
                return {"client_id": cfg.client_id, "client_secret": cfg.client_secret,
                        "redirect_uri": cfg.redirect_uri or f"{settings.BASE_URL}/auth/google/callback"}
    return resolve_client_config(None)