LLMProxy.Provider.TokenCodec.Migration (llm_proxy v0.2.0)

Explicit migration tools for stored provider credentials.

Encryption and plaintext rollback run in one database transaction. Status and verification return counts only. They never return credential values.

Summary

counts()

decrypt_all()

encrypt_all()

rotate_all()

status()

verify()

@type counts() :: %{
  rows: non_neg_integer(),
  encrypted_fields: non_neg_integer(),
  plaintext_fields: non_neg_integer()
}

@spec decrypt_all() :: {:ok, map()} | {:error, term()}

@spec encrypt_all() :: {:ok, map()} | {:error, term()}

@spec rotate_all() :: {:ok, map()} | {:error, term()}

@spec status() :: {:ok, counts()} | {:error, term()}

@spec verify() :: {:ok, counts()} | {:error, term()}