Skip to content

First-run onboarding with multi-provider credentials - #5

Merged
TheGreatAxios merged 6 commits into
mainfrom
cl-first-run-flow
Aug 9, 2026
Merged

First-run onboarding with multi-provider credentials#5
TheGreatAxios merged 6 commits into
mainfrom
cl-first-run-flow

Conversation

@TheGreatAxios

Copy link
Copy Markdown
Contributor

Summary

Onboard a new user straight to a fired routine; credentials support Anthropic, OpenAI, and Google.

Test plan

  • Onboarding credential tests
  • Multi-provider native storage route tests

@TheGreatAxios

Copy link
Copy Markdown
Contributor Author

Self-critique (orchestrator)

Verdict: likely merge-ready after CI + greybeard/bruckheimer

Looks good

  • Multi-provider credentials (Anthropic/OpenAI/Google) via onboarding package + hub-client credential-test.
  • Domain in packages; web page consumes.
  • Tests for complete-credential, routes, multi-provider storage.
  • Docs: works without ANTHROPIC_API_KEY; multi-provider.

Verify

  1. Secrets never logged; credential validation is server-side only.
  2. First-run path still works with zero providers configured (honest empty).
  3. CI green; greybeard + bruckheimer.

@TheGreatAxios
TheGreatAxios force-pushed the cl-first-run-flow branch 2 times, most recently from 27a1290 to a60b169 Compare August 9, 2026 02:05
Covers proving an Anthropic key with a real call before it's stored,
seeding a personal bench once it checks out, and the route-level
error envelopes for an anonymous request, a missing key, and a
rejected one.
First-run no longer stops at "no credential configured": a signed-up
user with no seed model lands on a guided step that asks for their own
Anthropic key, proves it with a real call through Interchange's own
Anthropic adapter before anything is stored, and — once it checks
out — seeds their personal bench and confirms the default routines
actually answer, all without leaving the page.

A bad key is rejected with Anthropic's own reason, never a bare
failure; a good key's owner lands on a screen showing exactly which
routines are now live, with one click into their starter channel.
Explains that a signed-up user with no hub-owned seed key isn't left
without routines — onboarding walks them through adding and proving
their own key on the spot.
Covers testing a key against Anthropic, OpenAI, or Google through each
provider's own adapter; a test-only endpoint that never stores
anything; and seeding that skips the Anthropic-only catalog for other
providers while still deploying and confirming routines with them.
The credential step no longer assumes Anthropic: a provider picker
drives which of Interchange's own adapters proves the key, and the
default routines deploy against whichever provider and key the user
chose.

The onboarding-owned /credential endpoint is gone. Testing a key is
now a side-effect-free /credential/test that stores nothing, and
finishing setup is a /complete call that plants the credential through
the hub's own POST /api/tenants/:id/credentials route via the existing
seeding path — never a second, onboarding-specific way to store one.
Notes the provider picker and that the browsable model catalog is
still Anthropic-only, even though credentials and routines work for
any of the three.
@TheGreatAxios

Copy link
Copy Markdown
Contributor Author

Greybeard: MERGE — prove-then-store credentials; multi-provider; non-Anthropic catalog skip intentional.

@TheGreatAxios
TheGreatAxios merged commit 564b4f1 into main Aug 9, 2026
2 checks passed
@TheGreatAxios
TheGreatAxios deleted the cl-first-run-flow branch August 9, 2026 03:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant