config

type Profile struct {
	Version    int              `toml:"version"`
	Name       string           `toml:"name"`
	Threshold  int              `toml:"threshold"`
	OutputSalt string           `toml:"output_salt"` // hex-encoded random salt for HKDF output key derivation
	Integrity  string           `toml:"integrity"`   // hex-encoded HMAC-SHA256 of provider data
	Providers  []ProviderConfig `toml:"providers"`
}

type ProviderConfig struct {
	Type           string            `toml:"type"`
	ID             string            `toml:"id"`
	EncryptedShare string            `toml:"encrypted_share"` // hex-encoded AES-GCM ciphertext
	Nonce          string            `toml:"nonce"`           // hex-encoded GCM nonce
	ShareSalt      string            `toml:"share_salt"`      // hex-encoded HKDF salt
	Params         map[string]string `toml:"params"`          // provider-specific metadata
}