jobarbiter 0.3.3 → 0.3.4

package/dist/index.js

@@ -743,9 +743,9 @@ program
     }
 });
 // ============================================================
-// observe (manage coding agent observers)
+// observe (manage AI agent observers)
 // ============================================================
-const observe = program.command("observe").description("Manage coding agent proficiency observers");
+const observe = program.command("observe").description("Manage AI agent proficiency observers");
 observe
     .command("status")
     .description("Show observer status and accumulated data")
@@ -754,7 +754,7 @@ observe
         const agents = detectAgents();
         const status = getObservationStatus();
         const detected = agents.filter((a) => a.installed);
-        console.log("\n🔍 Coding Agent Observers\n");
+        console.log("\n🔍 AI Agent Observers\n");
         console.log("  Agents:");
         for (const agent of agents) {
             if (!agent.installed) {
@@ -795,7 +795,7 @@ observe
 });
 observe
     .command("install")
-    .description("Install observers for detected coding agents")
+    .description("Install observers for detected AI agents")
     .option("--agent <id>", "Install for specific agent (claude-code, cursor, opencode, codex, gemini)")
     .option("--all", "Install for all detected agents")
     .action(async (opts) => {
@@ -803,7 +803,7 @@ observe
         const agents = detectAgents();
         const detected = agents.filter((a) => a.installed);
         if (detected.length === 0) {
-            error("No coding agents detected on this system.");
+            error("No AI agents detected on this system.");
             console.log("  Supported: Claude Code, Cursor, OpenCode, Codex CLI, Gemini CLI");
             process.exit(1);
         }
@@ -841,7 +841,7 @@ observe
 });
 observe
     .command("remove")
-    .description("Remove observers from coding agents")
+    .description("Remove observers from AI agents")
     .option("--agent <id>", "Remove from specific agent")
     .option("--all", "Remove from all agents")
     .action(async (opts) => {
@@ -880,7 +880,7 @@ observe
         const status = getObservationStatus();
         if (!status.hasData) {
             console.log("\nNo observation data collected yet.");
-            console.log("Use your coding agents normally — data accumulates automatically.\n");
+            console.log("Use your AI agents normally — data accumulates automatically.\n");
             process.exit(0);
         }
         console.log("\n📊 Observation Data Review\n");

package/dist/lib/detect-tools.d.ts

@@ -7,7 +7,7 @@
  *
  * Never logs or stores API key values — only checks for existence.
  */
-export type ToolCategory = "coding-agent" | "chat" | "orchestration" | "api-provider";
+export type ToolCategory = "ai-agent" | "chat" | "orchestration" | "api-provider";
 export interface DetectedTool {
     id: string;
     name: string;

package/dist/lib/detect-tools.js

@@ -13,11 +13,11 @@ import { homedir, platform } from "node:os";
 import { execSync } from "node:child_process";
 // ── Tool Definitions ───────────────────────────────────────────────────
 const TOOL_DEFINITIONS = [
-    // AI Coding Agents
+    // AI AI Agents
     {
         id: "claude-code",
         name: "Claude Code",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "claude",
         configDir: join(homedir(), ".claude"),
         observerAvailable: true,
@@ -25,7 +25,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "cursor",
         name: "Cursor",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "cursor",
         configDir: join(homedir(), ".cursor"),
         macApp: "/Applications/Cursor.app",
@@ -34,7 +34,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "github-copilot",
         name: "GitHub Copilot",
-        category: "coding-agent",
+        category: "ai-agent",
         configDir: join(homedir(), ".config", "github-copilot"),
         vscodeExtension: "github.copilot",
         cursorExtension: "github.copilot",
@@ -43,7 +43,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "codex",
         name: "Codex CLI",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "codex",
         configDir: join(homedir(), ".codex"),
         observerAvailable: true,
@@ -51,7 +51,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "opencode",
         name: "OpenCode",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "opencode",
         configDir: join(homedir(), ".config", "opencode"),
         observerAvailable: true,
@@ -59,7 +59,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "aider",
         name: "Aider",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "aider",
         configDir: join(homedir(), ".aider"),
         pipPackage: "aider-chat",
@@ -68,7 +68,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "continue",
         name: "Continue",
-        category: "coding-agent",
+        category: "ai-agent",
         vscodeExtension: "continue.continue",
         cursorExtension: "continue.continue",
         observerAvailable: false,
@@ -76,7 +76,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "cline",
         name: "Cline",
-        category: "coding-agent",
+        category: "ai-agent",
         vscodeExtension: "saoudrizwan.claude-dev",
         cursorExtension: "saoudrizwan.claude-dev",
         observerAvailable: false,
@@ -84,7 +84,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "windsurf",
         name: "Windsurf",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "windsurf",
         macApp: "/Applications/Windsurf.app",
         observerAvailable: false,
@@ -92,7 +92,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "letta",
         name: "Letta Code",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "letta",
         configDir: join(homedir(), ".letta"),
         pipPackage: "letta",
@@ -101,7 +101,7 @@ const TOOL_DEFINITIONS = [
     {
         id: "gemini",
         name: "Gemini CLI",
-        category: "coding-agent",
+        category: "ai-agent",
         binary: "gemini",
         configDir: join(homedir(), ".gemini"),
         observerAvailable: true,

package/dist/lib/observe.d.ts

@@ -1,5 +1,5 @@
 /**
- * JobArbiter Observer — Hook installer for coding agent CLIs
+ * JobArbiter Observer — Hook installer for AI agent CLIs
  *
  * Installs observation hooks that extract proficiency signals from
  * session transcripts. Uses detect-tools.ts for agent detection.

package/dist/lib/observe.js

@@ -1,5 +1,5 @@
 /**
- * JobArbiter Observer — Hook installer for coding agent CLIs
+ * JobArbiter Observer — Hook installer for AI agent CLIs
  *
  * Installs observation hooks that extract proficiency signals from
  * session transcripts. Uses detect-tools.ts for agent detection.
@@ -64,7 +64,7 @@ function ensureObserverDirs() {
 }
 // ── Core Observer Script ───────────────────────────────────────────────
 /**
- * The universal observer script. Runs as a hook in any coding agent.
+ * The universal observer script. Runs as a hook in any AI agent.
  * Reads session transcript data from stdin (JSON), extracts proficiency
  * signals, and appends them to the local observations file.
  *
@@ -75,7 +75,7 @@ function getObserverScript() {
     return `#!/usr/bin/env node
 /**
  * JobArbiter Observer Hook
- * Extracts proficiency signals from coding agent sessions.
+ * Extracts proficiency signals from AI agent sessions.
  * 
  * Reads JSON from stdin, writes observations to:
  *   ~/.config/jobarbiter/observer/observations.json
@@ -105,7 +105,7 @@ process.stdin.on("end", () => {
     const observation = extractSignals(data);
     if (observation) appendObservation(observation);
   } catch (err) {
-    // Silent failure — never block the coding agent
+    // Silent failure — never block the AI agent
     fs.appendFileSync(
       path.join(os.homedir(), ".config", "jobarbiter", "observer", "errors.log"),
       \`[\${new Date().toISOString()}] \${err.message}\\n\`

package/dist/lib/onboard.js

@@ -12,6 +12,7 @@ import { loadConfig, saveConfig, getConfigPath } from "./config.js";
 import { apiUnauthenticated, api, ApiError } from "./api.js";
 import { installObservers } from "./observe.js";
 import { detectAllTools, formatToolDisplay, } from "./detect-tools.js";
+import { loadProviderKeys, saveProviderKey, validateProviderKey, } from "./providers.js";
 // ── ANSI Colors ────────────────────────────────────────────────────────
 const colors = {
     reset: "\x1b[0m",
@@ -103,7 +104,7 @@ export async function runOnboardWizard(opts) {
         }
         // Onboarding incomplete — resume
         const resumeStep = (existingConfig.onboardingStep ?? 1) + 1;
-        console.log(`\n${sym.rocket}  ${c.bold("Resuming onboarding")} from step ${resumeStep}/6\n`);
+        console.log(`\n${sym.rocket}  ${c.bold("Resuming onboarding")} from step ${resumeStep}/7\n`);
         console.log(c.dim(`   Account: ${existingConfig.userType} | API key configured`));
         console.log(c.dim(`   Run ${c.highlight("jobarbiter onboard --force")} to start over.\n`));
         const prompt = new Prompt();
@@ -199,9 +200,9 @@ async function selectUserType(prompt) {
 }
 // ── Email & Verification ───────────────────────────────────────────────
 async function handleEmailVerification(prompt, baseUrl, userType) {
-    // Workers: 1) Account, 2) Tool Detection, 3) Domains, 4) GitHub, 5) LinkedIn, 6) Done
-    // Employers: 1) Account, 2) (skip verification), 3) Company, 4) Domain, 5) What You Need, 6) Done
-    const totalSteps = 6;
+    // Workers: 1) Account, 2) Tool Detection, 3) AI Accounts, 4) Domains, 5) GitHub, 6) LinkedIn, 7) Done
+    // Employers: 1) Account, 2) (skip verification), 3) Company, 4) Domain, 5) What You Need, 6) Done (stays at 6)
+    const totalSteps = userType === "employer" ? 6 : 7;
     console.log(`\n${sym.email} ${c.bold(`Step 1/${totalSteps} — Create Your Account`)}\n`);
     // Get email
     let email;
@@ -286,9 +287,14 @@ async function runWorkerFlow(prompt, state, startStep = 2) {
         state.tools = detectedToolsResult.tools;
         saveProgress(2);
     }
-    // Step 3: Domains
+    // Step 3: Connect AI Accounts (optional)
     if (startStep <= 3) {
-        console.log(`${sym.target} ${c.bold("Step 3/6 — Your Domains")}\n`);
+        await runConnectAIAccountsStep(prompt);
+        saveProgress(3);
+    }
+    // Step 4: Domains
+    if (startStep <= 4) {
+        console.log(`${sym.target} ${c.bold("Step 4/7 — Your Domains")}\n`);
         console.log(`What domains do you work in? ${c.dim("(comma-separated)")}`);
         console.log(c.dim("Examples: full-stack dev, data engineering, trading, content creation\n"));
         const domainsInput = await prompt.question(`${sym.arrow} `);
@@ -308,11 +314,11 @@ async function runWorkerFlow(prompt, state, startStep = 2) {
         catch (err) {
             console.log(`${sym.warning} ${c.warning("Could not save profile details — you can update later with 'jobarbiter profile create'")}\n`);
         }
-        saveProgress(3);
+        saveProgress(4);
     }
-    // Step 4: Connect GitHub (optional)
-    if (startStep <= 4) {
-        console.log(`${sym.link} ${c.bold("Step 4/6 — Connect GitHub")} ${c.dim("(optional)")}\n`);
+    // Step 5: Connect GitHub (optional)
+    if (startStep <= 5) {
+        console.log(`${sym.link} ${c.bold("Step 5/7 — Connect GitHub")} ${c.dim("(optional)")}\n`);
         console.log(`Connecting your GitHub lets us analyze your AI-assisted work patterns.`);
         console.log(`This significantly boosts your proficiency score.\n`);
         const githubUsername = await prompt.question(`GitHub username ${c.dim("(press Enter to skip)")}: `);
@@ -333,11 +339,11 @@ async function runWorkerFlow(prompt, state, startStep = 2) {
         else {
             console.log(`${c.dim("Skipped — you can connect later with 'jobarbiter git connect'")}\n`);
         }
-        saveProgress(4);
+        saveProgress(5);
     }
-    // Step 5: Connect LinkedIn (optional)
-    if (startStep <= 5) {
-        console.log(`${sym.link} ${c.bold("Step 5/6 — Connect LinkedIn")} ${c.dim("(optional)")}\n`);
+    // Step 6: Connect LinkedIn (optional)
+    if (startStep <= 6) {
+        console.log(`${sym.link} ${c.bold("Step 6/7 — Connect LinkedIn")} ${c.dim("(optional)")}\n`);
         console.log(`Your LinkedIn profile strengthens identity verification.`);
         console.log(c.dim("We never post on your behalf or access your connections.\n"));
         const linkedinUrl = await prompt.question(`LinkedIn URL ${c.dim("(press Enter to skip)")}: `);
@@ -356,21 +362,21 @@ async function runWorkerFlow(prompt, state, startStep = 2) {
         else {
             console.log(`${c.dim("Skipped — you can connect later with 'jobarbiter identity linkedin <url>'")}\n`);
         }
-        saveProgress(5);
+        saveProgress(6);
     }
-    // Step 6: Done!
-    saveConfig({ ...config, onboardingComplete: true, onboardingStep: 6 });
+    // Step 7: Done!
+    saveConfig({ ...config, onboardingComplete: true, onboardingStep: 7 });
     showWorkerCompletion(state);
 }
 // ── Tool Detection Step ────────────────────────────────────────────────
 async function runToolDetectionStep(prompt, config) {
-    console.log(`🔍 ${c.bold("Step 2/6 — Detecting AI Tools")}\n`);
+    console.log(`🔍 ${c.bold("Step 2/7 — Detecting AI Tools")}\n`);
     console.log(c.dim("  Scanning your machine...\n"));
     const allTools = detectAllTools();
     const installed = allTools.filter((t) => t.installed);
-    const notInstalled = allTools.filter((t) => !t.installed && t.category === "coding-agent");
+    const notInstalled = allTools.filter((t) => !t.installed && t.category === "ai-agent");
     // Group by category
-    const codingAgents = installed.filter((t) => t.category === "coding-agent");
+    const codingAgents = installed.filter((t) => t.category === "ai-agent");
     const chatTools = installed.filter((t) => t.category === "chat");
     const orchestration = installed.filter((t) => t.category === "orchestration");
     const apiProviders = installed.filter((t) => t.category === "api-provider");
@@ -381,7 +387,7 @@ async function runToolDetectionStep(prompt, config) {
         return { tools: [] };
     }
     console.log(`  ${c.bold("Found:")}`);
-    // Show coding agents with observer status
+    // Show AI agents with observer status
     for (const tool of codingAgents) {
         const display = formatToolDisplay(tool);
         if (tool.observerAvailable) {
@@ -406,7 +412,7 @@ async function runToolDetectionStep(prompt, config) {
     for (const tool of apiProviders) {
         console.log(`    ${sym.check} ${tool.name} ${c.dim("configured")}`);
     }
-    // Show not-detected coding agents
+    // Show not-detected AI agents
     if (notInstalled.length > 0) {
         console.log(`\n  ${c.dim("Not detected (install to track):")}`);
         for (const tool of notInstalled.slice(0, 5)) {
@@ -418,11 +424,11 @@ async function runToolDetectionStep(prompt, config) {
     }
     // Collect tool names for profile
     const toolNames = installed.map((t) => t.name);
-    // Observer installation for coding agents
+    // Observer installation for AI agents
     const needsObserver = codingAgents.filter((t) => t.observerAvailable && !t.observerActive);
     if (needsObserver.length > 0) {
         console.log(`\n  ${c.bold("Observers")}`);
-        console.log(`  JobArbiter observes your coding sessions to build your`);
+        console.log(`  JobArbiter observes your AI sessions to build your`);
         console.log(`  proficiency profile. ${c.bold("No code or prompts leave your machine")} —`);
         console.log(`  only aggregate scores (tool usage, session counts, token volume).\n`);
         console.log(c.dim(`  Data stored locally: ~/.config/jobarbiter/observer/observations.json`));
@@ -473,8 +479,87 @@ async function runToolDetectionStep(prompt, config) {
     }
     return { tools: toolNames };
 }
+// ── Connect AI Accounts Step ───────────────────────────────────────────
+async function runConnectAIAccountsStep(prompt) {
+    console.log(`${sym.link} ${c.bold("Step 3/7 — Connect AI Accounts")} ${c.dim("(optional)")}\n`);
+    console.log(`  Connecting your AI provider accounts lets us analyze usage depth,`);
+    console.log(`  not just tool presence. The more we can see, the stronger your`);
+    console.log(`  verified proficiency profile.\n`);
+    console.log(`  ${c.bold("What we can pull:")}`);
+    console.log(`    ${sym.bullet} Token usage volume and patterns ${c.dim("(how much you use AI)")}`);
+    console.log(`    ${sym.bullet} Model preferences ${c.dim("(which models you reach for)")}`);
+    console.log(`    ${sym.bullet} Session frequency and consistency over time`);
+    console.log(`    ${sym.bullet} API spend patterns ${c.dim("(demonstrates serious usage)")}\n`);
+    console.log(`  ${c.bold("What we NEVER access:")}`);
+    console.log(`    ${sym.bullet} Your conversation content`);
+    console.log(`    ${sym.bullet} Prompts or responses`);
+    console.log(`    ${sym.bullet} Any proprietary or sensitive data\n`);
+    // Check for already connected providers
+    const existingProviders = loadProviderKeys();
+    if (existingProviders.length > 0) {
+        console.log(`  ${c.bold("Already connected:")}`);
+        for (const p of existingProviders) {
+            console.log(`    ${sym.check} ${p.provider}`);
+        }
+        console.log();
+    }
+    // Show available connections
+    let continueConnecting = true;
+    while (continueConnecting) {
+        console.log(`  ${c.bold("Available connections:")}\n`);
+        console.log(`    ${c.highlight("1.")} Anthropic API key  — Pull Claude usage stats`);
+        console.log(`    ${c.highlight("2.")} OpenAI API key     — Pull GPT/ChatGPT usage stats`);
+        console.log(`    ${c.highlight("3.")} Skip for now\n`);
+        console.log(c.dim(`  You can connect accounts later with 'jobarbiter tokens connect'\n`));
+        const choice = await prompt.question(`  Your choice ${c.dim("[1/2/3]")}: `);
+        if (choice === "3" || choice.toLowerCase() === "skip" || choice === "") {
+            console.log(`\n${c.dim("  Skipped — you can connect providers later with 'jobarbiter tokens connect'")}\n`);
+            continueConnecting = false;
+        }
+        else if (choice === "1") {
+            await connectProvider(prompt, "anthropic", "Anthropic");
+            // Ask if they want to connect another
+            continueConnecting = await prompt.confirm(`\n  Connect another provider?`, false);
+            console.log();
+        }
+        else if (choice === "2") {
+            await connectProvider(prompt, "openai", "OpenAI");
+            // Ask if they want to connect another
+            continueConnecting = await prompt.confirm(`\n  Connect another provider?`, false);
+            console.log();
+        }
+        else {
+            console.log(c.error("  Please enter 1, 2, or 3"));
+        }
+    }
+}
+async function connectProvider(prompt, providerId, providerName) {
+    console.log(`\n  ${sym.lock} ${c.bold("Privacy Notice")}`);
+    console.log(`  ${c.dim("─".repeat(50))}`);
+    console.log(`  Your API key is stored ${c.bold("locally only")} at:`);
+    console.log(`  ${c.dim("~/.config/jobarbiter/providers.json")}\n`);
+    console.log(`  ${sym.bullet} Keys are ${c.bold("NEVER")} sent to JobArbiter's servers`);
+    console.log(`  ${sym.bullet} Only aggregate stats (token counts, model usage) are submitted`);
+    console.log(`  ${sym.bullet} Revoke anytime: ${c.highlight(`jobarbiter tokens disconnect ${providerId}`)}`);
+    console.log(`  ${c.dim("─".repeat(50))}\n`);
+    const apiKey = await prompt.question(`  ${providerName} API key: `);
+    if (!apiKey || apiKey.trim() === "") {
+        console.log(`  ${c.dim("Skipped")}`);
+        return;
+    }
+    console.log(c.dim("\n  Validating API key..."));
+    const result = await validateProviderKey(providerId, apiKey.trim());
+    if (result.valid) {
+        saveProviderKey(providerId, apiKey.trim());
+        console.log(`  ${sym.check} ${c.success(`${providerName} connected`)} — ${result.summary}`);
+    }
+    else {
+        console.log(`  ${sym.cross} ${c.error(`Invalid key: ${result.error}`)}`);
+        console.log(`  ${c.dim("You can try again later with 'jobarbiter tokens connect'")}`);
+    }
+}
 function showWorkerCompletion(state) {
-    console.log(`${sym.done} ${c.bold("Step 6/6 — You're In!")}\n`);
+    console.log(`${sym.done} ${c.bold("Step 7/7 — You're In!")}\n`);
     console.log(`Your profile is live. Here's what happens next:\n`);
     console.log(`  📊 Your proficiency score builds automatically from:`);
     console.log(`     ${sym.bullet} Coding agent observation ${c.dim("(biggest factor — 35%)")}`);

package/dist/lib/providers.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Provider Key Management Module
+ *
+ * Securely manages API keys for AI providers (Anthropic, OpenAI, etc.)
+ * Keys are stored locally ONLY and never sent to JobArbiter's servers.
+ * Only aggregate usage stats are submitted for proficiency scoring.
+ */
+export interface ProviderConfig {
+    provider: string;
+    apiKey: string;
+    connectedAt: string;
+    lastSync?: string;
+}
+export interface ProvidersFile {
+    version: number;
+    providers: ProviderConfig[];
+}
+export interface ValidationResult {
+    valid: boolean;
+    error?: string;
+    summary?: string;
+}
+export declare function getProvidersPath(): string;
+export declare function loadProviderKeys(): ProviderConfig[];
+export declare function saveProviderKey(provider: string, apiKey: string): void;
+export declare function removeProviderKey(provider: string): boolean;
+export declare function getProviderKey(provider: string): ProviderConfig | null;
+/**
+ * Validate an Anthropic API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export declare function validateAnthropicKey(apiKey: string): Promise<ValidationResult>;
+/**
+ * Validate an OpenAI API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export declare function validateOpenAIKey(apiKey: string): Promise<ValidationResult>;
+/**
+ * Get list of supported providers.
+ */
+export declare function getSupportedProviders(): Array<{
+    id: string;
+    name: string;
+}>;
+/**
+ * Validate a key for any supported provider.
+ */
+export declare function validateProviderKey(provider: string, apiKey: string): Promise<ValidationResult>;

package/dist/lib/providers.js

@@ -0,0 +1,157 @@
+/**
+ * Provider Key Management Module
+ *
+ * Securely manages API keys for AI providers (Anthropic, OpenAI, etc.)
+ * Keys are stored locally ONLY and never sent to JobArbiter's servers.
+ * Only aggregate usage stats are submitted for proficiency scoring.
+ */
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+// ── Paths ──────────────────────────────────────────────────────────────
+const CONFIG_DIR = join(homedir(), ".config", "jobarbiter");
+const PROVIDERS_FILE = join(CONFIG_DIR, "providers.json");
+export function getProvidersPath() {
+    return PROVIDERS_FILE;
+}
+// ── Load / Save ────────────────────────────────────────────────────────
+export function loadProviderKeys() {
+    if (!existsSync(PROVIDERS_FILE)) {
+        return [];
+    }
+    try {
+        const raw = readFileSync(PROVIDERS_FILE, "utf-8");
+        const data = JSON.parse(raw);
+        return data.providers || [];
+    }
+    catch {
+        return [];
+    }
+}
+export function saveProviderKey(provider, apiKey) {
+    mkdirSync(CONFIG_DIR, { recursive: true });
+    const existing = loadProviderKeys();
+    // Remove any existing entry for this provider
+    const filtered = existing.filter((p) => p.provider !== provider);
+    // Add new entry
+    filtered.push({
+        provider,
+        apiKey,
+        connectedAt: new Date().toISOString(),
+    });
+    const data = {
+        version: 1,
+        providers: filtered,
+    };
+    writeFileSync(PROVIDERS_FILE, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+}
+export function removeProviderKey(provider) {
+    const existing = loadProviderKeys();
+    const filtered = existing.filter((p) => p.provider !== provider);
+    if (filtered.length === existing.length) {
+        return false; // Provider not found
+    }
+    const data = {
+        version: 1,
+        providers: filtered,
+    };
+    writeFileSync(PROVIDERS_FILE, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+    return true;
+}
+export function getProviderKey(provider) {
+    const providers = loadProviderKeys();
+    return providers.find((p) => p.provider === provider) || null;
+}
+// ── Validation ─────────────────────────────────────────────────────────
+/**
+ * Validate an Anthropic API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export async function validateAnthropicKey(apiKey) {
+    try {
+        const response = await fetch("https://api.anthropic.com/v1/models", {
+            method: "GET",
+            headers: {
+                "x-api-key": apiKey,
+                "anthropic-version": "2023-06-01",
+            },
+        });
+        if (response.status === 401) {
+            return { valid: false, error: "Invalid API key" };
+        }
+        if (response.status === 403) {
+            return { valid: false, error: "API key doesn't have required permissions" };
+        }
+        if (!response.ok) {
+            return { valid: false, error: `API error: ${response.status}` };
+        }
+        // Key is valid - we can't get usage from this endpoint, 
+        // but we can confirm the key works
+        return {
+            valid: true,
+            summary: "API key validated",
+        };
+    }
+    catch (err) {
+        if (err instanceof Error) {
+            return { valid: false, error: `Connection error: ${err.message}` };
+        }
+        return { valid: false, error: "Unknown error" };
+    }
+}
+/**
+ * Validate an OpenAI API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export async function validateOpenAIKey(apiKey) {
+    try {
+        const response = await fetch("https://api.openai.com/v1/models", {
+            method: "GET",
+            headers: {
+                "Authorization": `Bearer ${apiKey}`,
+            },
+        });
+        if (response.status === 401) {
+            return { valid: false, error: "Invalid API key" };
+        }
+        if (response.status === 403) {
+            return { valid: false, error: "API key doesn't have required permissions" };
+        }
+        if (!response.ok) {
+            return { valid: false, error: `API error: ${response.status}` };
+        }
+        // Key is valid
+        return {
+            valid: true,
+            summary: "API key validated",
+        };
+    }
+    catch (err) {
+        if (err instanceof Error) {
+            return { valid: false, error: `Connection error: ${err.message}` };
+        }
+        return { valid: false, error: "Unknown error" };
+    }
+}
+/**
+ * Get list of supported providers.
+ */
+export function getSupportedProviders() {
+    return [
+        { id: "anthropic", name: "Anthropic" },
+        { id: "openai", name: "OpenAI" },
+    ];
+}
+/**
+ * Validate a key for any supported provider.
+ */
+export async function validateProviderKey(provider, apiKey) {
+    switch (provider) {
+        case "anthropic":
+            return validateAnthropicKey(apiKey);
+        case "openai":
+            return validateOpenAIKey(apiKey);
+        default:
+            return { valid: false, error: `Unknown provider: ${provider}` };
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jobarbiter",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "CLI for JobArbiter — the first AI Proficiency Marketplace",
   "type": "module",
   "bin": {

package/src/index.ts

@@ -781,10 +781,10 @@ program
 	});
 
 // ============================================================
-// observe (manage coding agent observers)
+// observe (manage AI agent observers)
 // ============================================================
 
-const observe = program.command("observe").description("Manage coding agent proficiency observers");
+const observe = program.command("observe").description("Manage AI tool proficiency observers");
 
 observe
 	.command("status")
@@ -796,7 +796,7 @@ observe
 
 			const detected = agents.filter((a) => a.installed);
 
-			console.log("\n🔍 Coding Agent Observers\n");
+			console.log("\n🔍 AI Agent Observers\n");
 			console.log("  Agents:");
 			for (const agent of agents) {
 				if (!agent.installed) {
@@ -839,7 +839,7 @@ observe
 
 observe
 	.command("install")
-	.description("Install observers for detected coding agents")
+	.description("Install observers for detected AI agents")
 	.option("--agent <id>", "Install for specific agent (claude-code, cursor, opencode, codex, gemini)")
 	.option("--all", "Install for all detected agents")
 	.action(async (opts) => {
@@ -848,7 +848,7 @@ observe
 			const detected = agents.filter((a) => a.installed);
 
 			if (detected.length === 0) {
-				error("No coding agents detected on this system.");
+				error("No AI agents detected on this system.");
 				console.log("  Supported: Claude Code, Cursor, OpenCode, Codex CLI, Gemini CLI");
 				process.exit(1);
 			}
@@ -890,7 +890,7 @@ observe
 
 observe
 	.command("remove")
-	.description("Remove observers from coding agents")
+	.description("Remove observers from AI agents")
 	.option("--agent <id>", "Remove from specific agent")
 	.option("--all", "Remove from all agents")
 	.action(async (opts) => {
@@ -935,7 +935,7 @@ observe
 
 			if (!status.hasData) {
 				console.log("\nNo observation data collected yet.");
-				console.log("Use your coding agents normally — data accumulates automatically.\n");
+				console.log("Use your AI agents normally — data accumulates automatically.\n");
 				process.exit(0);
 			}
 

package/src/lib/config.ts

@@ -7,7 +7,7 @@ export interface Config {
 	baseUrl: string;
 	userType: "worker" | "employer" | "seeker" | "poster";
 	onboardingComplete?: boolean;
-	onboardingStep?: number; // last completed step (1-6)
+	onboardingStep?: number; // last completed step (1-7)
 }
 
 const CONFIG_DIR = join(homedir(), ".config", "jobarbiter");

package/src/lib/detect-tools.ts

@@ -15,7 +15,7 @@ import { execSync } from "node:child_process";
 
 // ── Types ──────────────────────────────────────────────────────────────
 
-export type ToolCategory = "coding-agent" | "chat" | "orchestration" | "api-provider";
+export type ToolCategory = "ai-agent" | "chat" | "orchestration" | "api-provider";
 
 export interface DetectedTool {
 	id: string;
@@ -46,11 +46,11 @@ interface ToolDefinition {
 // ── Tool Definitions ───────────────────────────────────────────────────
 
 const TOOL_DEFINITIONS: ToolDefinition[] = [
-	// AI Coding Agents
+	// AI AI Agents
 	{
 		id: "claude-code",
 		name: "Claude Code",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "claude",
 		configDir: join(homedir(), ".claude"),
 		observerAvailable: true,
@@ -58,7 +58,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "cursor",
 		name: "Cursor",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "cursor",
 		configDir: join(homedir(), ".cursor"),
 		macApp: "/Applications/Cursor.app",
@@ -67,7 +67,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "github-copilot",
 		name: "GitHub Copilot",
-		category: "coding-agent",
+		category: "ai-agent",
 		configDir: join(homedir(), ".config", "github-copilot"),
 		vscodeExtension: "github.copilot",
 		cursorExtension: "github.copilot",
@@ -76,7 +76,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "codex",
 		name: "Codex CLI",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "codex",
 		configDir: join(homedir(), ".codex"),
 		observerAvailable: true,
@@ -84,7 +84,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "opencode",
 		name: "OpenCode",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "opencode",
 		configDir: join(homedir(), ".config", "opencode"),
 		observerAvailable: true,
@@ -92,7 +92,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "aider",
 		name: "Aider",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "aider",
 		configDir: join(homedir(), ".aider"),
 		pipPackage: "aider-chat",
@@ -101,7 +101,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "continue",
 		name: "Continue",
-		category: "coding-agent",
+		category: "ai-agent",
 		vscodeExtension: "continue.continue",
 		cursorExtension: "continue.continue",
 		observerAvailable: false,
@@ -109,7 +109,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "cline",
 		name: "Cline",
-		category: "coding-agent",
+		category: "ai-agent",
 		vscodeExtension: "saoudrizwan.claude-dev",
 		cursorExtension: "saoudrizwan.claude-dev",
 		observerAvailable: false,
@@ -117,7 +117,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "windsurf",
 		name: "Windsurf",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "windsurf",
 		macApp: "/Applications/Windsurf.app",
 		observerAvailable: false,
@@ -125,7 +125,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "letta",
 		name: "Letta Code",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "letta",
 		configDir: join(homedir(), ".letta"),
 		pipPackage: "letta",
@@ -134,7 +134,7 @@ const TOOL_DEFINITIONS: ToolDefinition[] = [
 	{
 		id: "gemini",
 		name: "Gemini CLI",
-		category: "coding-agent",
+		category: "ai-agent",
 		binary: "gemini",
 		configDir: join(homedir(), ".gemini"),
 		observerAvailable: true,

package/src/lib/observe.ts

@@ -1,5 +1,5 @@
 /**
- * JobArbiter Observer — Hook installer for coding agent CLIs
+ * JobArbiter Observer — Hook installer for AI agent CLIs
  *
  * Installs observation hooks that extract proficiency signals from
  * session transcripts. Uses detect-tools.ts for agent detection.
@@ -98,7 +98,7 @@ function ensureObserverDirs(): void {
 // ── Core Observer Script ───────────────────────────────────────────────
 
 /**
- * The universal observer script. Runs as a hook in any coding agent.
+ * The universal observer script. Runs as a hook in any AI agent.
  * Reads session transcript data from stdin (JSON), extracts proficiency
  * signals, and appends them to the local observations file.
  *
@@ -109,7 +109,7 @@ function getObserverScript(): string {
 	return `#!/usr/bin/env node
 /**
  * JobArbiter Observer Hook
- * Extracts proficiency signals from coding agent sessions.
+ * Extracts proficiency signals from AI agent sessions.
  * 
  * Reads JSON from stdin, writes observations to:
  *   ~/.config/jobarbiter/observer/observations.json
@@ -139,7 +139,7 @@ process.stdin.on("end", () => {
     const observation = extractSignals(data);
     if (observation) appendObservation(observation);
   } catch (err) {
-    // Silent failure — never block the coding agent
+    // Silent failure — never block the AI agent
     fs.appendFileSync(
       path.join(os.homedir(), ".config", "jobarbiter", "observer", "errors.log"),
       \`[\${new Date().toISOString()}] \${err.message}\\n\`

package/src/lib/onboard.ts

@@ -20,6 +20,12 @@ import {
 	type DetectedTool,
 	type ToolCategory,
 } from "./detect-tools.js";
+import {
+	loadProviderKeys,
+	saveProviderKey,
+	validateProviderKey,
+	getSupportedProviders,
+} from "./providers.js";
 
 // ── ANSI Colors ────────────────────────────────────────────────────────
 
@@ -150,7 +156,7 @@ export async function runOnboardWizard(opts: { force?: boolean; baseUrl?: string
 		}
 		// Onboarding incomplete — resume
 		const resumeStep = (existingConfig.onboardingStep ?? 1) + 1;
-		console.log(`\n${sym.rocket}  ${c.bold("Resuming onboarding")} from step ${resumeStep}/6\n`);
+		console.log(`\n${sym.rocket}  ${c.bold("Resuming onboarding")} from step ${resumeStep}/7\n`);
 		console.log(c.dim(`   Account: ${existingConfig.userType} | API key configured`));
 		console.log(c.dim(`   Run ${c.highlight("jobarbiter onboard --force")} to start over.\n`));
 		
@@ -257,9 +263,9 @@ async function handleEmailVerification(
 	baseUrl: string,
 	userType: "worker" | "employer"
 ): Promise<{ email: string; apiKey: string; userId: string }> {
-	// Workers: 1) Account, 2) Tool Detection, 3) Domains, 4) GitHub, 5) LinkedIn, 6) Done
-	// Employers: 1) Account, 2) (skip verification), 3) Company, 4) Domain, 5) What You Need, 6) Done
-	const totalSteps = 6;
+	// Workers: 1) Account, 2) Tool Detection, 3) AI Accounts, 4) Domains, 5) GitHub, 6) LinkedIn, 7) Done
+	// Employers: 1) Account, 2) (skip verification), 3) Company, 4) Domain, 5) What You Need, 6) Done (stays at 6)
+	const totalSteps = userType === "employer" ? 6 : 7;
 	
 	console.log(`\n${sym.email} ${c.bold(`Step 1/${totalSteps} — Create Your Account`)}\n`);
 
@@ -357,9 +363,15 @@ async function runWorkerFlow(prompt: Prompt, state: OnboardState, startStep = 2)
 		saveProgress(2);
 	}
 
-	// Step 3: Domains
+	// Step 3: Connect AI Accounts (optional)
 	if (startStep <= 3) {
-		console.log(`${sym.target} ${c.bold("Step 3/6 — Your Domains")}\n`);
+		await runConnectAIAccountsStep(prompt);
+		saveProgress(3);
+	}
+
+	// Step 4: Domains
+	if (startStep <= 4) {
+		console.log(`${sym.target} ${c.bold("Step 4/7 — Your Domains")}\n`);
 		console.log(`What domains do you work in? ${c.dim("(comma-separated)")}`);
 		console.log(c.dim("Examples: full-stack dev, data engineering, trading, content creation\n"));
 		const domainsInput = await prompt.question(`${sym.arrow} `);
@@ -380,12 +392,12 @@ async function runWorkerFlow(prompt: Prompt, state: OnboardState, startStep = 2)
 		} catch (err) {
 			console.log(`${sym.warning} ${c.warning("Could not save profile details — you can update later with 'jobarbiter profile create'")}\n`);
 		}
-		saveProgress(3);
+		saveProgress(4);
 	}
 
-	// Step 4: Connect GitHub (optional)
-	if (startStep <= 4) {
-		console.log(`${sym.link} ${c.bold("Step 4/6 — Connect GitHub")} ${c.dim("(optional)")}\n`);
+	// Step 5: Connect GitHub (optional)
+	if (startStep <= 5) {
+		console.log(`${sym.link} ${c.bold("Step 5/7 — Connect GitHub")} ${c.dim("(optional)")}\n`);
 		console.log(`Connecting your GitHub lets us analyze your AI-assisted work patterns.`);
 		console.log(`This significantly boosts your proficiency score.\n`);
 
@@ -406,12 +418,12 @@ async function runWorkerFlow(prompt: Prompt, state: OnboardState, startStep = 2)
 		} else {
 			console.log(`${c.dim("Skipped — you can connect later with 'jobarbiter git connect'")}\n`);
 		}
-		saveProgress(4);
+		saveProgress(5);
 	}
 
-	// Step 5: Connect LinkedIn (optional)
-	if (startStep <= 5) {
-		console.log(`${sym.link} ${c.bold("Step 5/6 — Connect LinkedIn")} ${c.dim("(optional)")}\n`);
+	// Step 6: Connect LinkedIn (optional)
+	if (startStep <= 6) {
+		console.log(`${sym.link} ${c.bold("Step 6/7 — Connect LinkedIn")} ${c.dim("(optional)")}\n`);
 		console.log(`Your LinkedIn profile strengthens identity verification.`);
 		console.log(c.dim("We never post on your behalf or access your connections.\n"));
 
@@ -430,11 +442,11 @@ async function runWorkerFlow(prompt: Prompt, state: OnboardState, startStep = 2)
 		} else {
 			console.log(`${c.dim("Skipped — you can connect later with 'jobarbiter identity linkedin <url>'")}\n`);
 		}
-		saveProgress(5);
+		saveProgress(6);
 	}
 
-	// Step 6: Done!
-	saveConfig({ ...config, onboardingComplete: true, onboardingStep: 6 });
+	// Step 7: Done!
+	saveConfig({ ...config, onboardingComplete: true, onboardingStep: 7 });
 	showWorkerCompletion(state);
 }
 
@@ -444,15 +456,15 @@ async function runToolDetectionStep(
 	prompt: Prompt,
 	config: Config,
 ): Promise<{ tools: string[] }> {
-	console.log(`🔍 ${c.bold("Step 2/6 — Detecting AI Tools")}\n`);
+	console.log(`🔍 ${c.bold("Step 2/7 — Detecting AI Tools")}\n`);
 	console.log(c.dim("  Scanning your machine...\n"));
 
 	const allTools = detectAllTools();
 	const installed = allTools.filter((t) => t.installed);
-	const notInstalled = allTools.filter((t) => !t.installed && t.category === "coding-agent");
+	const notInstalled = allTools.filter((t) => !t.installed && t.category === "ai-agent");
 
 	// Group by category
-	const codingAgents = installed.filter((t) => t.category === "coding-agent");
+	const codingAgents = installed.filter((t) => t.category === "ai-agent");
 	const chatTools = installed.filter((t) => t.category === "chat");
 	const orchestration = installed.filter((t) => t.category === "orchestration");
 	const apiProviders = installed.filter((t) => t.category === "api-provider");
@@ -466,7 +478,7 @@ async function runToolDetectionStep(
 
 	console.log(`  ${c.bold("Found:")}`);
 
-	// Show coding agents with observer status
+	// Show AI agents with observer status
 	for (const tool of codingAgents) {
 		const display = formatToolDisplay(tool);
 		if (tool.observerAvailable) {
@@ -491,7 +503,7 @@ async function runToolDetectionStep(
 		console.log(`    ${sym.check} ${tool.name} ${c.dim("configured")}`);
 	}
 
-	// Show not-detected coding agents
+	// Show not-detected AI agents
 	if (notInstalled.length > 0) {
 		console.log(`\n  ${c.dim("Not detected (install to track):")}`);
 		for (const tool of notInstalled.slice(0, 5)) {
@@ -505,12 +517,12 @@ async function runToolDetectionStep(
 	// Collect tool names for profile
 	const toolNames = installed.map((t) => t.name);
 
-	// Observer installation for coding agents
+	// Observer installation for AI agents
 	const needsObserver = codingAgents.filter((t) => t.observerAvailable && !t.observerActive);
 
 	if (needsObserver.length > 0) {
 		console.log(`\n  ${c.bold("Observers")}`);
-		console.log(`  JobArbiter observes your coding sessions to build your`);
+		console.log(`  JobArbiter observes your AI sessions to build your`);
 		console.log(`  proficiency profile. ${c.bold("No code or prompts leave your machine")} —`);
 		console.log(`  only aggregate scores (tool usage, session counts, token volume).\n`);
 		console.log(c.dim(`  Data stored locally: ~/.config/jobarbiter/observer/observations.json`));
@@ -567,8 +579,99 @@ async function runToolDetectionStep(
 	return { tools: toolNames };
 }
 
+// ── Connect AI Accounts Step ───────────────────────────────────────────
+
+async function runConnectAIAccountsStep(prompt: Prompt): Promise<void> {
+	console.log(`${sym.link} ${c.bold("Step 3/7 — Connect AI Accounts")} ${c.dim("(optional)")}\n`);
+	
+	console.log(`  Connecting your AI provider accounts lets us analyze usage depth,`);
+	console.log(`  not just tool presence. The more we can see, the stronger your`);
+	console.log(`  verified proficiency profile.\n`);
+	
+	console.log(`  ${c.bold("What we can pull:")}`);
+	console.log(`    ${sym.bullet} Token usage volume and patterns ${c.dim("(how much you use AI)")}`);
+	console.log(`    ${sym.bullet} Model preferences ${c.dim("(which models you reach for)")}`);
+	console.log(`    ${sym.bullet} Session frequency and consistency over time`);
+	console.log(`    ${sym.bullet} API spend patterns ${c.dim("(demonstrates serious usage)")}\n`);
+	
+	console.log(`  ${c.bold("What we NEVER access:")}`);
+	console.log(`    ${sym.bullet} Your conversation content`);
+	console.log(`    ${sym.bullet} Prompts or responses`);
+	console.log(`    ${sym.bullet} Any proprietary or sensitive data\n`);
+
+	// Check for already connected providers
+	const existingProviders = loadProviderKeys();
+	if (existingProviders.length > 0) {
+		console.log(`  ${c.bold("Already connected:")}`);
+		for (const p of existingProviders) {
+			console.log(`    ${sym.check} ${p.provider}`);
+		}
+		console.log();
+	}
+
+	// Show available connections
+	let continueConnecting = true;
+	
+	while (continueConnecting) {
+		console.log(`  ${c.bold("Available connections:")}\n`);
+		console.log(`    ${c.highlight("1.")} Anthropic API key  — Pull Claude usage stats`);
+		console.log(`    ${c.highlight("2.")} OpenAI API key     — Pull GPT/ChatGPT usage stats`);
+		console.log(`    ${c.highlight("3.")} Skip for now\n`);
+		console.log(c.dim(`  You can connect accounts later with 'jobarbiter tokens connect'\n`));
+
+		const choice = await prompt.question(`  Your choice ${c.dim("[1/2/3]")}: `);
+		
+		if (choice === "3" || choice.toLowerCase() === "skip" || choice === "") {
+			console.log(`\n${c.dim("  Skipped — you can connect providers later with 'jobarbiter tokens connect'")}\n`);
+			continueConnecting = false;
+		} else if (choice === "1") {
+			await connectProvider(prompt, "anthropic", "Anthropic");
+			// Ask if they want to connect another
+			continueConnecting = await prompt.confirm(`\n  Connect another provider?`, false);
+			console.log();
+		} else if (choice === "2") {
+			await connectProvider(prompt, "openai", "OpenAI");
+			// Ask if they want to connect another
+			continueConnecting = await prompt.confirm(`\n  Connect another provider?`, false);
+			console.log();
+		} else {
+			console.log(c.error("  Please enter 1, 2, or 3"));
+		}
+	}
+}
+
+async function connectProvider(prompt: Prompt, providerId: string, providerName: string): Promise<void> {
+	console.log(`\n  ${sym.lock} ${c.bold("Privacy Notice")}`);
+	console.log(`  ${c.dim("─".repeat(50))}`);
+	console.log(`  Your API key is stored ${c.bold("locally only")} at:`);
+	console.log(`  ${c.dim("~/.config/jobarbiter/providers.json")}\n`);
+	console.log(`  ${sym.bullet} Keys are ${c.bold("NEVER")} sent to JobArbiter's servers`);
+	console.log(`  ${sym.bullet} Only aggregate stats (token counts, model usage) are submitted`);
+	console.log(`  ${sym.bullet} Revoke anytime: ${c.highlight(`jobarbiter tokens disconnect ${providerId}`)}`);
+	console.log(`  ${c.dim("─".repeat(50))}\n`);
+
+	const apiKey = await prompt.question(`  ${providerName} API key: `);
+	
+	if (!apiKey || apiKey.trim() === "") {
+		console.log(`  ${c.dim("Skipped")}`);
+		return;
+	}
+
+	console.log(c.dim("\n  Validating API key..."));
+	
+	const result = await validateProviderKey(providerId, apiKey.trim());
+	
+	if (result.valid) {
+		saveProviderKey(providerId, apiKey.trim());
+		console.log(`  ${sym.check} ${c.success(`${providerName} connected`)} — ${result.summary}`);
+	} else {
+		console.log(`  ${sym.cross} ${c.error(`Invalid key: ${result.error}`)}`);
+		console.log(`  ${c.dim("You can try again later with 'jobarbiter tokens connect'")}`);
+	}
+}
+
 function showWorkerCompletion(state: OnboardState): void {
-	console.log(`${sym.done} ${c.bold("Step 6/6 — You're In!")}\n`);
+	console.log(`${sym.done} ${c.bold("Step 7/7 — You're In!")}\n`);
 	console.log(`Your profile is live. Here's what happens next:\n`);
 	
 	console.log(`  📊 Your proficiency score builds automatically from:`);

package/src/lib/providers.ts

@@ -0,0 +1,205 @@
+/**
+ * Provider Key Management Module
+ * 
+ * Securely manages API keys for AI providers (Anthropic, OpenAI, etc.)
+ * Keys are stored locally ONLY and never sent to JobArbiter's servers.
+ * Only aggregate usage stats are submitted for proficiency scoring.
+ */
+
+import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+
+// ── Types ──────────────────────────────────────────────────────────────
+
+export interface ProviderConfig {
+	provider: string;       // "anthropic" | "openai" | "google"
+	apiKey: string;         // stored locally only
+	connectedAt: string;    // ISO timestamp
+	lastSync?: string;      // last time usage data was pulled
+}
+
+export interface ProvidersFile {
+	version: number;
+	providers: ProviderConfig[];
+}
+
+export interface ValidationResult {
+	valid: boolean;
+	error?: string;
+	summary?: string;  // e.g., "1.2M tokens used this month"
+}
+
+// ── Paths ──────────────────────────────────────────────────────────────
+
+const CONFIG_DIR = join(homedir(), ".config", "jobarbiter");
+const PROVIDERS_FILE = join(CONFIG_DIR, "providers.json");
+
+export function getProvidersPath(): string {
+	return PROVIDERS_FILE;
+}
+
+// ── Load / Save ────────────────────────────────────────────────────────
+
+export function loadProviderKeys(): ProviderConfig[] {
+	if (!existsSync(PROVIDERS_FILE)) {
+		return [];
+	}
+
+	try {
+		const raw = readFileSync(PROVIDERS_FILE, "utf-8");
+		const data = JSON.parse(raw) as ProvidersFile;
+		return data.providers || [];
+	} catch {
+		return [];
+	}
+}
+
+export function saveProviderKey(provider: string, apiKey: string): void {
+	mkdirSync(CONFIG_DIR, { recursive: true });
+
+	const existing = loadProviderKeys();
+	
+	// Remove any existing entry for this provider
+	const filtered = existing.filter((p) => p.provider !== provider);
+	
+	// Add new entry
+	filtered.push({
+		provider,
+		apiKey,
+		connectedAt: new Date().toISOString(),
+	});
+
+	const data: ProvidersFile = {
+		version: 1,
+		providers: filtered,
+	};
+
+	writeFileSync(PROVIDERS_FILE, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+}
+
+export function removeProviderKey(provider: string): boolean {
+	const existing = loadProviderKeys();
+	const filtered = existing.filter((p) => p.provider !== provider);
+	
+	if (filtered.length === existing.length) {
+		return false; // Provider not found
+	}
+
+	const data: ProvidersFile = {
+		version: 1,
+		providers: filtered,
+	};
+
+	writeFileSync(PROVIDERS_FILE, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+	return true;
+}
+
+export function getProviderKey(provider: string): ProviderConfig | null {
+	const providers = loadProviderKeys();
+	return providers.find((p) => p.provider === provider) || null;
+}
+
+// ── Validation ─────────────────────────────────────────────────────────
+
+/**
+ * Validate an Anthropic API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export async function validateAnthropicKey(apiKey: string): Promise<ValidationResult> {
+	try {
+		const response = await fetch("https://api.anthropic.com/v1/models", {
+			method: "GET",
+			headers: {
+				"x-api-key": apiKey,
+				"anthropic-version": "2023-06-01",
+			},
+		});
+
+		if (response.status === 401) {
+			return { valid: false, error: "Invalid API key" };
+		}
+
+		if (response.status === 403) {
+			return { valid: false, error: "API key doesn't have required permissions" };
+		}
+
+		if (!response.ok) {
+			return { valid: false, error: `API error: ${response.status}` };
+		}
+
+		// Key is valid - we can't get usage from this endpoint, 
+		// but we can confirm the key works
+		return {
+			valid: true,
+			summary: "API key validated",
+		};
+	} catch (err) {
+		if (err instanceof Error) {
+			return { valid: false, error: `Connection error: ${err.message}` };
+		}
+		return { valid: false, error: "Unknown error" };
+	}
+}
+
+/**
+ * Validate an OpenAI API key by making a test API call.
+ * Returns validation result with usage summary if available.
+ */
+export async function validateOpenAIKey(apiKey: string): Promise<ValidationResult> {
+	try {
+		const response = await fetch("https://api.openai.com/v1/models", {
+			method: "GET",
+			headers: {
+				"Authorization": `Bearer ${apiKey}`,
+			},
+		});
+
+		if (response.status === 401) {
+			return { valid: false, error: "Invalid API key" };
+		}
+
+		if (response.status === 403) {
+			return { valid: false, error: "API key doesn't have required permissions" };
+		}
+
+		if (!response.ok) {
+			return { valid: false, error: `API error: ${response.status}` };
+		}
+
+		// Key is valid
+		return {
+			valid: true,
+			summary: "API key validated",
+		};
+	} catch (err) {
+		if (err instanceof Error) {
+			return { valid: false, error: `Connection error: ${err.message}` };
+		}
+		return { valid: false, error: "Unknown error" };
+	}
+}
+
+/**
+ * Get list of supported providers.
+ */
+export function getSupportedProviders(): Array<{ id: string; name: string }> {
+	return [
+		{ id: "anthropic", name: "Anthropic" },
+		{ id: "openai", name: "OpenAI" },
+	];
+}
+
+/**
+ * Validate a key for any supported provider.
+ */
+export async function validateProviderKey(provider: string, apiKey: string): Promise<ValidationResult> {
+	switch (provider) {
+		case "anthropic":
+			return validateAnthropicKey(apiKey);
+		case "openai":
+			return validateOpenAIKey(apiKey);
+		default:
+			return { valid: false, error: `Unknown provider: ${provider}` };
+	}
+}