/**
 * WAW051: Cognito Implicit OAuth Grant Allowed
 *
 * Flags UserPoolClients whose AllowedOAuthFlows include the deprecated
 * "implicit" grant — it returns tokens directly in the redirect URL (exposed
 * in browser history/referrer headers) instead of via a code exchange.
 */
import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
export declare function checkCognitoImplicitGrant(ctx: PostSynthContext): PostSynthDiagnostic[];
export declare const waw051: PostSynthCheck;
//# sourceMappingURL=waw051.d.ts.map