devlensio 0.4.4 → 0.6.1

package/dist/config/providers/file.js

@@ -1,11 +1,9 @@
 import fs from "fs";
-import path from "path";
-import os from "os";
-import { ANTHROPIC_DEFAULTS, } from "../types.js";
+import { CONFIG_FILE } from "./paths.js";
+import { ANTHROPIC_DEFAULTS, makeProviderKey, } from "../types.js";
+import { findProvider } from "./catalog.js";
+export { CONFIG_DIR, CONFIG_FILE } from "./paths.js";
 // ─── Constants ────────────────────────────────────────────────────────────────
-export const CONFIG_DIR = path.join(os.homedir(), ".devlens");
-export const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
-// ─── Environment Variable Names ───────────────────────────────────────────────
 //
 // For Docker users who prefer env vars over config files.
 // A Docker user running Ollama in the same network would set:
@@ -17,6 +15,7 @@ export const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");
 export const ENV = {
     // Summarization
     LLM_PROVIDER: "DEVLENS_LLM_PROVIDER", //here DEVLENS_LLM_PROVIDER is the actual env variable
+    LLM_PROVIDER_NAME: "DEVLENS_LLM_PROVIDER_NAME",
     LLM_MODEL: "DEVLENS_LLM_MODEL",
     LLM_KEY: "DEVLENS_LLM_KEY",
     LLM_BASE_URL: "DEVLENS_LLM_BASE_URL",
@@ -32,7 +31,7 @@ export const ENV = {
     NEO4J_PASSWORD: "DEVLENS_NEO4J_PASSWORD",
     NEO4J_STORECODE: "NEO4J_STORE_CODE"
 };
-// ─── Deep Merge ───────────────────────────────────────────────────────────────
+//  Deep Merge 
 //
 // Merges user's partial config on top of defaults.
 // Does NOT mutate either argument — returns a new object.
@@ -60,7 +59,73 @@ function deepMerge(base, partial) {
             : base.neo4j,
     };
 }
-// ─── Env Var Application ──────────────────────────────────────────────────────
+// ─── v1→v2 Provider Migration ──────────────────────────────────────────────
+// Old configs stored brand strings ("openrouter", "ollama", etc.) in
+// `provider`. In v2, provider is the wire protocol and the brand goes in
+// `providerName`.  This maps old values via the catalog and persists the fix.
+function migrateProviderConfig(config) {
+    const p = config.summarization.provider;
+    if (p === "openai" || p === "anthropic")
+        return config;
+    const entry = findProvider(p);
+    if (!entry)
+        throw new Error(`DevLens: "${p}" is not a valid provider protocol. Wire protocol must be "openai" or "anthropic". ` +
+            `Fix: set "provider" to "openai" and "providerName" to "${p}" in ~/.devlens/config.json`);
+    const migrated = { ...config, summarization: { ...config.summarization, provider: entry.protocol, providerName: entry.name } };
+    try {
+        const raw = JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+        raw.summarization = { ...raw.summarization, provider: entry.protocol };
+        if (!raw.summarization.providerName)
+            raw.summarization.providerName = entry.name;
+        const tmp = CONFIG_FILE + ".tmp";
+        fs.writeFileSync(tmp, JSON.stringify(raw, null, 2));
+        fs.renameSync(tmp, CONFIG_FILE);
+    }
+    catch { /* non-fatal — will re-migrate next load */ }
+    return migrated;
+}
+const VALID_LLM_PROTOCOLS = new Set(["openai", "anthropic"]);
+const VALID_EMBED_PROTOCOLS = new Set(["openai", "anthropic", "openrouter", "gemini", "ollama"]);
+function sanitizeProviderEnv(raw) {
+    if (!raw)
+        return undefined;
+    if (VALID_LLM_PROTOCOLS.has(raw))
+        return raw;
+    // It's a junk/placeholder value — skip it so the default stays in place.
+    return undefined;
+}
+function sanitizeEmbedProviderEnv(raw) {
+    if (!raw)
+        return undefined;
+    if (VALID_EMBED_PROTOCOLS.has(raw))
+        return raw;
+    return undefined;
+}
+function sanitizeApiKeyEnv(raw) {
+    if (!raw)
+        return undefined;
+    // Reject dot-notation field references: "embedding.apiKey", "summarization.key", etc.
+    if (/^[a-z]+\.[a-zA-Z]/.test(raw))
+        return undefined;
+    return raw;
+}
+function sanitizeBaseUrlEnv(raw) {
+    if (!raw)
+        return undefined;
+    if (raw.startsWith("http://") || raw.startsWith("https://"))
+        return raw;
+    // Not a URL — likely a placeholder like "embedding.baseUrl"
+    return undefined;
+}
+function sanitizeModelEnv(raw) {
+    if (!raw)
+        return undefined;
+    // Reject dot-notation references like "summarization.model"
+    if (/^[a-z]+\.[a-zA-Z]/.test(raw))
+        return undefined;
+    return raw;
+}
+//  Env Var Application
 //
 // Applies environment variables onto an already-merged config.
 // Only fills fields that are still empty after the file merge.
@@ -78,20 +143,21 @@ function applyEnvVars(config) {
             // Only inject env var if config file didn't already set this field
             provider: s.provider !== ANTHROPIC_DEFAULTS.summarization.provider
                 ? s.provider
-                : process.env[ENV.LLM_PROVIDER] ?? s.provider,
-            model: s.model ?? process.env[ENV.LLM_MODEL],
-            apiKey: s.apiKey ?? process.env[ENV.LLM_KEY],
-            baseUrl: s.baseUrl ?? process.env[ENV.LLM_BASE_URL],
+                : sanitizeProviderEnv(process.env[ENV.LLM_PROVIDER]) ?? s.provider,
+            providerName: s.providerName ?? sanitizeModelEnv(process.env[ENV.LLM_PROVIDER_NAME]),
+            model: s.model ?? sanitizeModelEnv(process.env[ENV.LLM_MODEL]),
+            apiKey: s.apiKey ?? sanitizeApiKeyEnv(process.env[ENV.LLM_KEY]),
+            baseUrl: s.baseUrl ?? sanitizeBaseUrlEnv(process.env[ENV.LLM_BASE_URL]),
             batchSize: s.batchSize ?? (parseInt(process.env[ENV.BATCH_SIZE] ?? "", 10) ?? s.batchSize),
         },
         embedding: {
             ...e,
             provider: e.provider !== ANTHROPIC_DEFAULTS.embedding.provider
                 ? e.provider
-                : process.env[ENV.EMBED_PROVIDER] ?? e.provider,
-            model: e.model ?? process.env[ENV.EMBED_MODEL],
-            apiKey: e.apiKey ?? process.env[ENV.EMBED_KEY],
-            baseUrl: e.baseUrl ?? process.env[ENV.EMBED_BASE_URL],
+                : sanitizeEmbedProviderEnv(process.env[ENV.EMBED_PROVIDER]) ?? e.provider,
+            model: e.model ?? sanitizeModelEnv(process.env[ENV.EMBED_MODEL]),
+            apiKey: e.apiKey ?? sanitizeApiKeyEnv(process.env[ENV.EMBED_KEY]),
+            baseUrl: e.baseUrl ?? sanitizeBaseUrlEnv(process.env[ENV.EMBED_BASE_URL]),
         },
         // Neo4j: only build from env vars if config file didn't set it
         // AND all three required env vars are present
@@ -110,15 +176,14 @@ function buildNeo4jFromEnv() {
         return undefined;
     return { url, username, password, storeRawCode };
 }
-// ─── Validation ───────────────────────────────────────────────────────────────
+//  Validation 
 //
 // Only validates what cannot have a sensible default.
-// apiKey is required for all cloud providers (anthropic, openai, openrouter, gemini).
-// ollama needs no apiKey — it uses baseUrl.
-// managed never needs an apiKey — platform provides it via request headers.
+// Key requirement is resolved from the catalog's `requiresKey` per provider.
+// If a providerName isn't in the catalog (custom), we default to requiring a key.
 //
 // Error messages are actionable — they tell the user exactly how to fix the problem.
-const PROVIDERS_NEEDING_KEY = new Set([
+const EMBEDDING_PROVIDERS_NEEDING_KEY = new Set([
     "anthropic",
     "openai",
     "openrouter",
@@ -126,10 +191,11 @@ const PROVIDERS_NEEDING_KEY = new Set([
 ]);
 function validate(config) {
     const { summarization, embedding } = config;
-    // Summarization apiKey
-    if (PROVIDERS_NEEDING_KEY.has(summarization.provider) &&
-        !summarization.apiKey) {
-        throw new Error(`DevLens config error: summarization.apiKey is required when provider is "${summarization.provider}".\n` +
+    // Summarization apiKey — resolved from catalog
+    const entry = findProvider(summarization.providerName ?? "");
+    const needsKey = entry?.requiresKey ?? true; // unknown/custom → require key
+    if (needsKey && !summarization.apiKey) {
+        throw new Error(`DevLens config error: summarization.apiKey is required for "${summarization.providerName ?? summarization.provider}".\n` +
             `  Fix option 1 — add to ${CONFIG_FILE}:\n` +
             `    { "summarization": { "apiKey": "your-key-here" } }\n` +
             `  Fix option 2 — set environment variable:\n` +
@@ -142,7 +208,7 @@ function validate(config) {
     const rawFile = readFileConfig();
     const userSetEmbedding = !!rawFile.embedding?.provider;
     if (userSetEmbedding &&
-        PROVIDERS_NEEDING_KEY.has(embedding.provider) &&
+        EMBEDDING_PROVIDERS_NEEDING_KEY.has(embedding.provider) &&
         !embedding.apiKey) {
         throw new Error(`DevLens config error: embedding.apiKey is required when provider is "${embedding.provider}".\n` +
             `  Fix option 1 — add to ${CONFIG_FILE}:\n` +
@@ -165,15 +231,15 @@ function validate(config) {
         }
     }
     // Ollama baseUrl format
-    if (summarization.provider === "ollama") {
-        const base = summarization.baseUrl ?? "http://localhost:11434";
+    if (summarization.providerName === "ollama") {
+        const base = summarization.baseUrl ?? "http://localhost:11434/v1";
         if (!base.startsWith("http://") && !base.startsWith("https://")) {
             throw new Error(`DevLens config error: summarization.baseUrl must start with http:// or https://.\n` +
                 `  Got: "${base}"`);
         }
     }
 }
-// ─── readFileConfig ───────────────────────────────────────────────────────────
+//  readFileConfig
 //
 // Reads ~/.devlens/config.json and returns a PartialConfig.
 // Returns empty object if file doesn't exist — first run, caller uses defaults.
@@ -192,7 +258,57 @@ function readFileConfig() {
             `  Tip: use a JSON validator at https://jsonlint.com`);
     }
 }
-// ─── loadFileConfig ───────────────────────────────────────────────────────────
+/** Public — reads the raw config.json as a plain object. Used by multi-provider helpers. */
+export function readRawConfigFile() {
+    if (!fs.existsSync(CONFIG_FILE))
+        return {};
+    try {
+        return JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+    }
+    catch {
+        return {};
+    }
+}
+// ── Multi-provider detection ──────────────────────────────────────────────
+/** Returns true if the raw summarization block is in multi-provider format. */
+function isMultiProviderFormat(s) {
+    if (!s || typeof s !== "object")
+        return false;
+    const obj = s;
+    return (typeof obj.active === "string" &&
+        obj.providers !== undefined &&
+        typeof obj.providers === "object" &&
+        !Array.isArray(obj.providers));
+}
+/** Extract the active provider from multi-provider storage, returning a flat summarization partial. */
+function extractActiveProvider(storage) {
+    const entry = storage.providers[storage.active];
+    if (!entry) {
+        // Fallback: pick the first available provider
+        const first = Object.values(storage.providers)[0];
+        if (!first)
+            throw new Error("Multi-provider config has no provider entries.");
+        // Fix the active key to match what exists
+        storage.active = Object.keys(storage.providers)[0];
+        return {
+            provider: first.provider,
+            providerName: first.providerName,
+            model: first.model,
+            apiKey: first.apiKey,
+            baseUrl: first.baseUrl,
+            batchSize: first.batchSize,
+        };
+    }
+    return {
+        provider: entry.provider,
+        providerName: entry.providerName,
+        model: entry.model,
+        apiKey: entry.apiKey,
+        baseUrl: entry.baseUrl,
+        batchSize: entry.batchSize,
+    };
+}
+//  loadFileConfig 
 //
 // Public entry point — called by resolveConfig() in config/index.ts.
 //
@@ -207,9 +323,59 @@ function readFileConfig() {
 //   4. Validate — throw clear errors for anything missing or invalid
 //   5. Return fully resolved DevLensConfig — never partial, never undefined fields
 export function loadFileConfig(defaults = ANTHROPIC_DEFAULTS) {
-    const partial = readFileConfig();
+    let partial = readFileConfig();
+    // ── Multi-provider detection & migration ─────────────────────────────────
+    if (partial.summarization) {
+        const sum = partial.summarization;
+        if (isMultiProviderFormat(sum)) {
+            // New multi-provider format — extract the active entry
+            const activeFlat = extractActiveProvider(sum);
+            partial = {
+                ...partial,
+                summarization: activeFlat,
+            };
+        }
+        else if (typeof sum.provider === "string" && !sum.providers) {
+            // Old flat format — migrate to multi-provider automatically
+            const protocol = sum.provider;
+            const providerName = sum.providerName ?? protocol;
+            const key = makeProviderKey(protocol, providerName);
+            const newStorage = {
+                active: key,
+                providers: {
+                    [key]: {
+                        provider: protocol,
+                        providerName: providerName,
+                        model: sum.model ?? "",
+                        apiKey: sum.apiKey,
+                        baseUrl: sum.baseUrl,
+                        batchSize: sum.batchSize ?? 50,
+                    },
+                },
+            };
+            // Write the migrated format back atomically
+            const raw = JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+            raw.summarization = newStorage;
+            const tmp = CONFIG_FILE + ".tmp";
+            fs.writeFileSync(tmp, JSON.stringify(raw, null, 2));
+            fs.renameSync(tmp, CONFIG_FILE);
+            // Proceed with the active entry as the flat summarization
+            partial = {
+                ...partial,
+                summarization: {
+                    provider: protocol,
+                    providerName: providerName,
+                    model: sum.model ?? "",
+                    apiKey: sum.apiKey,
+                    baseUrl: sum.baseUrl,
+                    batchSize: sum.batchSize ?? 50,
+                },
+            };
+        }
+    }
     const merged = deepMerge(defaults, partial);
-    const withEnv = applyEnvVars(merged);
+    const migrated = migrateProviderConfig(merged);
+    const withEnv = applyEnvVars(migrated);
     validate(withEnv);
     return withEnv;
 }

package/dist/config/providers/paths.d.ts

@@ -0,0 +1,2 @@
+export declare const CONFIG_DIR: string;
+export declare const CONFIG_FILE: string;

package/dist/config/providers/paths.js

@@ -0,0 +1,4 @@
+import os from "os";
+import path from "path";
+export const CONFIG_DIR = path.join(os.homedir(), ".devlens");
+export const CONFIG_FILE = path.join(CONFIG_DIR, "config.json");

package/dist/config/providers/providers.default.d.ts

@@ -0,0 +1,3 @@
+import type { CatalogProvider } from "./catalog.js";
+export declare const DEFAULT_PROVIDERS: CatalogProvider[];
+export declare const CATALOG_VERSION = 2;

package/dist/config/providers/providers.default.js

@@ -0,0 +1,12 @@
+export const DEFAULT_PROVIDERS = [
+    { name: "deepseek", label: "DeepSeek", protocol: "openai", baseUrl: "https://api.deepseek.com", requiresKey: true },
+    { name: "openai", label: "OpenAI", protocol: "openai", baseUrl: "https://api.openai.com/v1", requiresKey: true },
+    { name: "anthropic", label: "Anthropic", protocol: "anthropic", baseUrl: "https://api.anthropic.com", requiresKey: true },
+    { name: "gemini", label: "Google Gemini", protocol: "openai", baseUrl: "https://generativelanguage.googleapis.com/v1beta/openai", requiresKey: true },
+    { name: "groq", label: "Groq", protocol: "openai", baseUrl: "https://api.groq.com/openai/v1", requiresKey: true },
+    { name: "mistral", label: "Mistral", protocol: "openai", baseUrl: "https://api.mistral.ai/v1", requiresKey: true },
+    { name: "xai", label: "xAI Grok", protocol: "openai", baseUrl: "https://api.x.ai/v1", requiresKey: true },
+    { name: "openrouter", label: "OpenRouter", protocol: "openai", baseUrl: "https://openrouter.ai/api/v1", requiresKey: true },
+    { name: "ollama", label: "Ollama (local)", protocol: "openai", baseUrl: "http://localhost:11434/v1", requiresKey: false },
+];
+export const CATALOG_VERSION = 2;

package/dist/config/providers/request.js

@@ -1,5 +1,15 @@
 import { CONFIG_HEADERS } from "../types.js";
-// ─ applyRequestHeaders 
+const VALID_LLM_PROTOCOLS = new Set(["openai", "anthropic"]);
+const VALID_EMBED_PROTOCOLS = new Set(["openai", "anthropic", "openrouter", "gemini", "ollama"]);
+function rejectPlaceholder(v) {
+    if (!v)
+        return undefined;
+    // Dot-notation field references like "embedding.provider", "summarization.key"
+    if (/^[a-z]+\.[a-zA-Z]/.test(v))
+        return undefined;
+    return v;
+}
+// ─ applyRequestHeaders
 //
 // Public — called by resolveConfig() in config/index.ts AFTER loadFileConfig().
 //
@@ -27,15 +37,16 @@ export function applyRequestHeaders(base, req) {
     }
     //  Summarization overrides ─
     const provider = get(CONFIG_HEADERS.PROVIDER);
-    const model = get(CONFIG_HEADERS.MODEL);
-    const apiKey = get(CONFIG_HEADERS.API_KEY);
-    const baseUrl = get(CONFIG_HEADERS.BASE_URL);
+    const providerName = rejectPlaceholder(get(CONFIG_HEADERS.PROVIDER_NAME));
+    const model = rejectPlaceholder(get(CONFIG_HEADERS.MODEL));
+    const apiKey = rejectPlaceholder(get(CONFIG_HEADERS.API_KEY));
+    const baseUrl = (() => { const v = get(CONFIG_HEADERS.BASE_URL); return v && (v.startsWith("http://") || v.startsWith("https://")) ? v : undefined; })();
     const batchSize = get(CONFIG_HEADERS.BATCH_SIZE);
     //  Embedding overrides ─
     const embedProvider = get(CONFIG_HEADERS.EMBED_PROVIDER);
-    const embedModel = get(CONFIG_HEADERS.EMBED_MODEL);
-    const embedKey = get(CONFIG_HEADERS.EMBED_KEY);
-    const embedBaseUrl = get(CONFIG_HEADERS.EMBED_BASE_URL);
+    const embedModel = rejectPlaceholder(get(CONFIG_HEADERS.EMBED_MODEL));
+    const embedKey = rejectPlaceholder(get(CONFIG_HEADERS.EMBED_KEY));
+    const embedBaseUrl = (() => { const v = get(CONFIG_HEADERS.EMBED_BASE_URL); return v && (v.startsWith("http://") || v.startsWith("https://")) ? v : undefined; })();
     //  Neo4j overrides ─
     const neo4jUrl = get(CONFIG_HEADERS.NEO4J_URL);
     const neo4jUser = get(CONFIG_HEADERS.NEO4J_USER);
@@ -48,7 +59,8 @@ export function applyRequestHeaders(base, req) {
         deploymentMode: base.deploymentMode,
         summarization: {
             ...base.summarization,
-            ...(provider && { provider: provider }),
+            ...(provider && VALID_LLM_PROTOCOLS.has(provider) && { provider: provider }),
+            ...(providerName && { providerName }),
             ...(model && { model }),
             ...(apiKey && { apiKey }),
             ...(baseUrl && { baseUrl }),
@@ -56,7 +68,7 @@ export function applyRequestHeaders(base, req) {
         },
         embedding: {
             ...base.embedding,
-            ...(embedProvider && { provider: embedProvider }),
+            ...(embedProvider && VALID_EMBED_PROTOCOLS.has(embedProvider) && { provider: embedProvider }),
             ...(embedModel && { model: embedModel }),
             ...(embedKey && { apiKey: embedKey }),
             ...(embedBaseUrl && { baseUrl: embedBaseUrl }),

package/dist/config/types.d.ts

@@ -1,13 +1,35 @@
-export type LLMProvider = "anthropic" | "openai" | "openrouter" | "gemini" | "ollama" | "managed";
-export type EmbeddingProvider = "openai" | "anthropic" | "openrouter" | "gemini" | "ollama" | "managed";
+export type LLMProvider = "openai" | "anthropic";
+export type EmbeddingProvider = "openai" | "anthropic" | "openrouter" | "gemini" | "ollama";
 export type DeploymentMode = "local" | "cloud";
 export interface SummarizationConfig {
     provider: LLMProvider;
+    providerName?: string;
     model: string;
     apiKey?: string;
     baseUrl?: string;
     batchSize: number;
 }
+/** A single provider entry stored in the multi-provider map on disk. */
+export interface ProviderConfigEntry {
+    provider: LLMProvider;
+    providerName: string;
+    model: string;
+    apiKey?: string;
+    baseUrl?: string;
+    batchSize: number;
+}
+/** Storage shape for `summarization` inside config.json (v2 multi-provider). */
+export interface MultiProviderStorage {
+    active: string;
+    providers: Record<string, ProviderConfigEntry>;
+}
+/** Derive the composite key from a protocol + providerName pair. */
+export declare function makeProviderKey(protocol: string, providerName: string): string;
+/** Parse a composite key back into its parts. */
+export declare function parseProviderKey(key: string): {
+    protocol: string;
+    providerName: string;
+};
 export interface EmbeddingConfig {
     provider: EmbeddingProvider;
     model: string;
@@ -30,6 +52,7 @@ export declare const OLLAMA_DEFAULTS: DevLensConfig;
 export declare const ANTHROPIC_DEFAULTS: DevLensConfig;
 export declare const CONFIG_HEADERS: {
     readonly PROVIDER: "x-llm-provider";
+    readonly PROVIDER_NAME: "x-llm-provider-name";
     readonly MODEL: "x-llm-model";
     readonly API_KEY: "x-llm-key";
     readonly BASE_URL: "x-llm-base-url";

package/dist/config/types.js

@@ -1,18 +1,30 @@
+/** Derive the composite key from a protocol + providerName pair. */
+export function makeProviderKey(protocol, providerName) {
+    return `${protocol}:${providerName}`;
+}
+/** Parse a composite key back into its parts. */
+export function parseProviderKey(key) {
+    const idx = key.indexOf(":");
+    if (idx === -1)
+        throw new Error(`Invalid provider key: "${key}"`);
+    return { protocol: key.slice(0, idx), providerName: key.slice(idx + 1) };
+}
 // Note: apiKey is intentionally absent from all defaults.
 // If a user reaches the defaults with no key configured anywhere,
 // the system fails clearly at the LLM call — never silently sends an empty key.
 export const OLLAMA_DEFAULTS = {
     deploymentMode: "local",
     summarization: {
-        provider: "ollama",
+        provider: "openai",
+        providerName: "ollama",
         model: "qwen2.5-coder:3b", // code-aware, 3B params, runs on ~2GB RAM
-        baseUrl: "http://localhost:11434",
+        baseUrl: "http://localhost:11434/v1",
         batchSize: 50,
     },
     embedding: {
         provider: "ollama",
         model: "nomic-embed-text", // best local embedding model, 768 dims
-        baseUrl: "http://localhost:11434",
+        baseUrl: "http://localhost:11434/v1",
     },
     // neo4j absent — file-only mode is the safe default
 };
@@ -20,7 +32,9 @@ export const ANTHROPIC_DEFAULTS = {
     deploymentMode: "local",
     summarization: {
         provider: "anthropic",
+        providerName: "anthropic",
         model: "claude-haiku-4-5", // fastest Claude, cheapest, good code understanding
+        baseUrl: "https://api.anthropic.com",
         batchSize: 50,
         // apiKey intentionally absent — user must set in config.json
     },
@@ -31,7 +45,7 @@ export const ANTHROPIC_DEFAULTS = {
     },
     // neo4j absent
 };
-// ─── Request Header Names ─────────────────────────────────────────────────────
+//  Request Header Names 
 //
 // Exact header names the cloud backend sends to this Bun backend.
 // Defined as constants so they are never mistyped across files.
@@ -40,7 +54,8 @@ export const ANTHROPIC_DEFAULTS = {
 // Headers marked "NEVER LOG" must never appear in any log output.
 export const CONFIG_HEADERS = {
     // LLM provider for summarization
-    PROVIDER: "x-llm-provider", // e.g. "anthropic"
+    PROVIDER: "x-llm-provider", // e.g. "anthropic" — wire protocol
+    PROVIDER_NAME: "x-llm-provider-name", // e.g. "deepseek" — brand identity
     MODEL: "x-llm-model", // e.g. "claude-haiku-4-5"
     API_KEY: "x-llm-key",
     BASE_URL: "x-llm-base-url", // for Ollama: "http://localhost:11434"
@@ -54,7 +69,7 @@ export const CONFIG_HEADERS = {
     NEO4J_PASSWORD: "x-neo4j-password",
     NEO4J_STORECODE: "false",
 };
-// ─── Sensitive Headers Set ────────────────────────────────────────────────────
+//  Sensitive Headers Set 
 //
 // Used by sanitizeHeaders() below.
 // Add any new secret header here the moment it is added to CONFIG_HEADERS.
@@ -63,7 +78,7 @@ const SENSITIVE_HEADERS = new Set([
     CONFIG_HEADERS.EMBED_KEY,
     CONFIG_HEADERS.NEO4J_PASSWORD,
 ]);
-// ─── sanitizeHeaders ──────────────────────────────────────────────────────────
+//  sanitizeHeaders 
 //
 // Call this before logging ANY request headers anywhere in the codebase.
 // Replaces secret values with "[REDACTED]" so API keys never appear in logs.

package/dist/config/writer.d.ts

@@ -1,4 +1,4 @@
-import type { DevLensConfig } from "./types.js";
+import type { DevLensConfig, ProviderConfigEntry } from "./types.js";
 type DeepPartial<T> = {
     [P in keyof T]?: T[P] extends object ? DeepPartial<T[P]> : T[P];
 };
@@ -7,10 +7,15 @@ export interface SafeConfig {
     deploymentMode: DevLensConfig["deploymentMode"];
     summarization: {
         provider: string;
+        providerName?: string;
         model: string;
         baseUrl?: string;
         batchSize: number;
-        apiKeyHint?: string;
+        apiKey?: string;
+    };
+    allProviders?: {
+        active: string;
+        providers: ProviderConfigEntry[];
     };
     embedding: {
         provider: string;
@@ -24,6 +29,7 @@ export interface SafeConfig {
         storeRawCode: boolean;
     };
 }
+export declare function atomicWrite(filePath: string, content: string): void;
 export declare function writeConfig(partial: PartialConfig): void;
 export declare function maskConfig(config: DevLensConfig): SafeConfig;
 export {};