[quickbeard]

What

Port of the hub's provider-identity split (quickbeard/codev-hub#212) to CoDev Code's own config writers:

• SSO-issued gateway keys — the configure flow (including its manual key-paste branch) now writes provider.netgate with display name netGate instead of provider.aigateway / AI Gateway, and pins model: "netgate/<model>".
• Custom provider flow gains an optional, ASCII-only provider name as its first prompt, replacing the raw provider-id prompt. The id is slugged from it ([a-z0-9-], 32-char cap) with a live → id: <slug> preview under the field; a blank or unusable name falls back to ai-gateway / AI Gateway, and the name is written as the provider block's display name so the model picker shows it instead of the bare id.

Name: "Acme AI Gateway"  ->  id: acme-ai-gateway
Name: "My_Gateway 2.0"   ->  id: my-gateway-2-0
Name: "" or "!!!"        ->  ai-gateway / AI Gateway

New packages/codev-gateway/src/provider.ts is the single owner of the identities and the slug (mirrors hub src/lib/provider.ts, minus the detection helpers — codev-code has no id-based config attribution).

auth.json interop

The hub now persists provider_id / provider_name in the shared ~/.codev-hub/auth.json for manually-named keys, and treats saveApiKey as a whole-block write where an omitted pair clears it. auth-file.ts adopts the same rule: the pair is modeled on ApiKeyCreds, and a provider-less save (the SSO flow minting a fresh gateway key) explicitly clears a stale hub-written manual identity — the previous read-merge-write spread would have silently preserved it and the hub would misattribute the new key.

Back-compat

• Pre-rename provider.aigateway blocks are left in place: Config.updateGlobal only merges, never deletes, so re-running codev configure leaves the old block (and its picker entry) next to the new netgate one until the hub's next full-file rewrite converges the config. Documented in the CHANGELOG.
• Hub releases older than its own rename (feat(sandbox): named egress rules for the broker #212) can't attribute a netgate config as CoDev-managed; the merged hub recognizes netgate, ai-gateway, and legacy aigateway.
• All touched files are fork-only, so no DIVERGENCES.md rows.

Testing

• New test/provider.test.ts: slug table (ported from the hub's), 32-char cap without trailing dash, fallback identity.
• config-block.test.ts flipped to netgate/netGate; asserts the custom block carries name.
• auth-file.test.ts: provider pair round-trips and is cleared by a provider-less save.
• bun test in packages/codev-gateway (35 pass) and bun run typecheck in both codev-gateway and tui; targeted test/cli/cmd/tui/provider-options.test.ts still green.

🤖 Generated with Claude Code