namespace StellaOps.Cryptography.Kms;

/// <summary>
/// Options for the <see cref="FileKmsClient"/>.
/// </summary>
public sealed class FileKmsOptions
{
    /// <summary>
    /// Root directory for storing key material.
    /// </summary>
    public string RootPath { get; set; } = string.Empty;

    /// <summary>
    /// Password used to encrypt private key material at rest.
    /// </summary>
    public required string Password { get; set; }

    /// <summary>
    /// Signing algorithm identifier (default ED25519).
    /// </summary>
    public string Algorithm { get; set; } = KmsAlgorithms.Es256;

    /// <summary>
    /// PBKDF2 iteration count for envelope encryption.
    /// </summary>
    public int KeyDerivationIterations { get; set; } = 100_000;
}