Struct ProviderConfig 

pub struct ProviderConfig {
    pub anthropic_api_key: Option<String>,
    pub openai_api_key: Option<String>,
    pub google_api_key: Option<String>,
    pub claude_code_enabled: bool,
    pub claude_code_binary: Option<String>,
    pub claude_code_effort: Option<String>,
    pub fallback_order: Vec<String>,
}

Provider configuration.

Debug is hand-written (see below) so the keys cannot be printed.

Fields

anthropic_api_key: Option<String>

Anthropic API key

openai_api_key: Option<String>

OpenAI API key

google_api_key: Option<String>

Google AI (Gemini) API key

claude_code_enabled: bool

Whether the Claude Code CLI transport is enabled.

Opt-in, and never selected for the user. The CLI injects its own context into every call - including the account email address on the OAuth (subscription) path - which cannot be disabled. lev setup offers it and defaults to declining, so a user who presses Enter through the wizard ends up with it off.

claude_code_binary: Option<String>

Path to the claude executable. None resolves claude on PATH.

claude_code_effort: Option<String>

Reasoning effort for the Claude Code transport: low | medium | high | xhigh | max.

Always sent explicitly. Left to itself the CLI picks high with adaptive thinking, spending output tokens and latency Leviath never asked for. None uses leviath_providers::claude_code::DEFAULT_EFFORT.

fallback_order: Vec<String>

Host-wide failover chain, as "provider/model" entries, best first.

Tried after a stage’s own models list and the default model when the provider in use stops answering (out of credits, rejected key). Entries naming an unregistered provider are skipped, and a malformed entry is ignored with a warning rather than failing the load.

provider/model rather than a bare provider name because a failover target needs a model to send; there is no sensible default per provider. A blueprint that names one model has nowhere to go without this, which is exactly how issue #201 took every agent down at once.

Trait Implementations

impl Clone for ProviderConfig

fn clone(&self) -> ProviderConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProviderConfig

Hand-written so the API keys can never be printed.

A #[derive(Debug)] here meant one tracing::debug!(?config) anywhere in the workspace - or one dbg!, or an anyhow context that formats a struct holding this - would put every provider key into the logs. Nothing did that today, which is exactly when it is cheap to foreclose: the type now cannot leak, so nobody has to remember not to.

Reports whether each key is set, which is what a debug line is actually asking, and mirrors the RedactedConfig the /api/config handler returns.

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProviderConfig

fn default() -> ProviderConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ProviderConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ProviderConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.