Interface LlmSecretResolver

All Known Implementing Classes:
EnvSystemPropertyLlmSecretResolver

public interface LlmSecretResolver
Resolves an LlmSecretReference to a live LlmSecret at the point of use.

This is the LLM layer's own credential seam, intentionally independent of any other secret mechanism in the project. A literal reference resolves to its wrapped value; an indirect reference (scheme:key) is looked up in the source the implementation backs.

Resolution is fail-fast: an indirect reference that cannot be resolved must throw (an LlmProviderConfigurationException). Implementations must never log the resolved value or include it in any exception message or other output — a failure message may name the scheme:key but never the value.

  • Method Summary

    Modifier and Type
    Method
    Description
    Resolves a credential reference to its live value.
  • Method Details

    • resolve

      LlmSecret resolve(LlmSecretReference reference)
      Resolves a credential reference to its live value.
      Parameters:
      reference - the reference to resolve; must not be null
      Returns:
      the resolved secret; never null
      Throws:
      LlmProviderConfigurationException - if an indirect reference cannot be resolved