/**
 * SAP MCP Signing Proxy
 *
 * Local signing service for remote MCP servers.
 *
 * Architecture:
 * - Runs on localhost:8765 (never exposed externally)
 * - Reads dedicated agent keypairs from ~/.config/mcp-sap/keypairs/
 * - Signs transactions locally (keys never leave machine)
 * - Returns signed transactions to remote MCP server
 *
 * Security:
 * - Auth token required for all requests
 * - CORS restricted to localhost
 * - Rate limiting per session
 * - Audit logging of all signing requests
 */
import { Keypair } from '@solana/web3.js';
interface SigningProxyConfig {
    authToken: string;
    port: number;
}
/**
 * @name loadSigningConfig
 * @description Resolves signing proxy runtime configuration from environment first and optional default config second.
 * @returns Signing proxy auth token and port.
 */
export declare function loadSigningConfig(): SigningProxyConfig;
/**
 * Internal helper for the load agent keyfile operation.
 *
 * Supports both plaintext (development) and AES-256-GCM encrypted keyfiles.
 * Encrypted keyfiles must contain: { _secret, salt, iv, authTag } encoded as hex.
 */
export declare function resolveAgentKeyfilePath(agentId: string): string;
/**
 * Loads a local SAP MCP agent keyfile from profile walletPath or canonical keypairs directory.
 */
export declare function loadAgentKeyfile(agentId: string, passphrase?: string): Keypair;
/**
 * Executes the create signing proxy operation.
 */
export declare function createSigningProxy(): Promise<import("http").Server<typeof import("http").IncomingMessage, typeof import("http").ServerResponse>>;
export {};
//# sourceMappingURL=signing-proxy.d.ts.map