/**
 * Per-user encrypted credential store for MCP HTTP modes.
 * Uses better-sqlite3 for persistence and Node.js crypto for AES-256-GCM at-rest encryption.
 */
export interface IUserCredentialStore {
    saveCredentials(userId: string, config: Record<string, string>): void;
    getCredentials(userId: string): Record<string, string> | null;
    deleteCredentials(userId: string): void;
}
export declare class SqliteUserStore implements IUserCredentialStore {
    private db;
    private masterKey;
    /**
     * @param dbPath Path to the SQLite DB file.
     * @param masterKey 32-byte AES key for at-rest encryption.
     */
    constructor(dbPath: string, masterKey: Buffer);
    private encrypt;
    private decrypt;
    saveCredentials(userId: string, config: Record<string, string>): void;
    getCredentials(userId: string): Record<string, string> | null;
    deleteCredentials(userId: string): void;
    close(): void;
}
//# sourceMappingURL=user-store.d.ts.map