LLMCredentialHelper

Static utility for encrypting and decrypting LLM provider credentials.

Detailed description

Provides encryption of API keys and tokens so they can be stored safely in the LLMProvider record. Encryption is keyed to the local node identity, preventing credential migration between nodes.

The mechanism is octomy::crypt::NodeSecretSeal, under the purpose "llm-credentials". It moved to libcrypt (fleet §FLV-5) so that a library that must not link Qt Widgets can store a credential the same way, and it became authenticated encryption on the way.

See also LLMProvider, octomy::crypt::NodeSecretSeal.