/**
 * CIMD document for a TEST authorize client, distinct from this server's own
 * exchange-client identity in clientMetadata.ts. Local test tools (MCP
 * Inspector, token-mint scripts) have no public TomTom-domain home for their
 * client_id, so this deployment lends them one: ULS dereferences the URL at
 * /authorize and Entra requires the client_id origin to be a verified TomTom
 * domain.
 *
 * Served only when TEST_AUTHORIZE_CLIENT_ENABLED is set (dev deployments).
 * The document alone grants nothing — ULS rejects any client_id without a
 * registry entry — but production has no business advertising a login client.
 *
 * `redirect_uris` is the complete allow-list of local callback URLs ULS will
 * accept for this client; adding a tool means adding its callback here.
 */
export interface TestAuthorizeClientDocument {
    client_id: string;
    client_name: string;
    redirect_uris: string[];
    grant_types: string[];
    response_types: string[];
    token_endpoint_auth_method: "none";
    scope: string;
}
/**
 * URL the test client document is served at, and therefore (per CIMD
 * byte-equality) the test client_id itself. Lives under the base URL path to
 * stay namespaced with this product at the API gateway, which routes exact
 * paths only: publishing it needs a gateway route rewriting
 * `{baseUrlPath}/inspector-client.json` to this app's root path, mirroring
 * the existing /maps/health → /health route.
 */
export declare function buildTestAuthorizeClientUrl(baseUrl: string, baseUrlPath: string): string;
export declare function buildTestAuthorizeClientDocument(clientId: string): TestAuthorizeClientDocument;
//# sourceMappingURL=testClientMetadata.d.ts.map