search and ai stabilization work, localization stablized.

src/__Libraries/StellaOps.Cryptography/DefaultCryptoProvider.cs

@@ -4,6 +4,7 @@ using System.Collections.Generic;
 using System.Globalization;
 using System.Linq;
 using System.Security.Cryptography;
+using static StellaOps.Localization.T;
 
 namespace StellaOps.Cryptography;
 
@@ -62,7 +63,7 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
     {
         if (!Supports(CryptoCapability.PasswordHashing, algorithmId))
         {
-            throw new InvalidOperationException($"Password hashing algorithm '{algorithmId}' is not supported by provider '{Name}'.");
+            throw new InvalidOperationException(_t("crypto.provider.algorithm_not_supported", algorithmId, Name));
         }
 
         return passwordHashers[algorithmId];
@@ -72,7 +73,7 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
     {
         if (!Supports(CryptoCapability.ContentHashing, algorithmId))
         {
-            throw new InvalidOperationException($"Hash algorithm '{algorithmId}' is not supported by provider '{Name}'.");
+            throw new InvalidOperationException(_t("crypto.provider.hash_not_supported", algorithmId, Name));
         }
 
         return new DefaultCryptoHasher(algorithmId);
@@ -84,18 +85,18 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
 
         if (!Supports(CryptoCapability.Signing, algorithmId))
         {
-            throw new InvalidOperationException($"Signing algorithm '{algorithmId}' is not supported by provider '{Name}'.");
+            throw new InvalidOperationException(_t("crypto.provider.algorithm_not_supported", algorithmId, Name));
         }
 
         if (!signingKeys.TryGetValue(keyReference.KeyId, out var signingKey))
         {
-            throw new KeyNotFoundException($"Signing key '{keyReference.KeyId}' is not registered with provider '{Name}'.");
+            throw new KeyNotFoundException(_t("crypto.provider.key_not_registered", keyReference.KeyId, Name));
         }
 
         if (!string.Equals(signingKey.AlgorithmId, algorithmId, StringComparison.OrdinalIgnoreCase))
         {
             throw new InvalidOperationException(
-                $"Signing key '{keyReference.KeyId}' is registered for algorithm '{signingKey.AlgorithmId}', not '{algorithmId}'.");
+                _t("crypto.provider.key_algorithm_mismatch", keyReference.KeyId, signingKey.AlgorithmId, algorithmId));
         }
 
         return EcdsaSigner.Create(signingKey);
@@ -105,7 +106,7 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
     {
         if (!Supports(CryptoCapability.Verification, algorithmId))
         {
-            throw new InvalidOperationException($"Verification algorithm '{algorithmId}' is not supported by provider '{Name}'.");
+            throw new InvalidOperationException(_t("crypto.provider.verify_not_supported", algorithmId, Name));
         }
 
         return EcdsaSigner.CreateVerifierFromPublicKey(algorithmId, publicKeyBytes);
@@ -117,7 +118,7 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
         EnsureSigningSupported(signingKey.AlgorithmId);
         if (signingKey.Kind != CryptoSigningKeyKind.Ec)
         {
-            throw new InvalidOperationException($"Provider '{Name}' only accepts EC signing keys.");
+            throw new InvalidOperationException(_t("crypto.provider.ec_keys_only", Name));
         }
         ValidateSigningKey(signingKey);
 
@@ -171,7 +172,7 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
     {
         if (!SupportedSigningAlgorithms.Contains(algorithmId))
         {
-            throw new InvalidOperationException($"Signing algorithm '{algorithmId}' is not supported by provider 'default'.");
+            throw new InvalidOperationException(_t("crypto.provider.algorithm_not_supported", algorithmId, "default"));
         }
     }
 
@@ -179,14 +180,14 @@ public sealed class DefaultCryptoProvider : ICryptoProvider, ICryptoProviderDiag
     {
         if (!string.Equals(signingKey.AlgorithmId, SignatureAlgorithms.Es256, StringComparison.OrdinalIgnoreCase))
         {
-            throw new InvalidOperationException($"Only ES256 signing keys are currently supported by provider 'default'.");
+            throw new InvalidOperationException(_t("crypto.provider.es256_only", "default"));
         }
 
         var expected = ECCurve.NamedCurves.nistP256;
         var curve = signingKey.PrivateParameters.Curve;
         if (!curve.IsNamed || !string.Equals(curve.Oid.Value, expected.Oid.Value, StringComparison.Ordinal))
         {
-            throw new InvalidOperationException("ES256 signing keys must use the NIST P-256 curve.");
+            throw new InvalidOperationException(_t("crypto.provider.p256_required"));
         }
     }
 }