Design the boundary
Design a small adapter boundary for messages, stream events and tool results. Decide how the UI displays cancellation, missing credentials and partial output before adding a polished happy path.
Keep access and responsibilities clear
A shared TypeScript interface does not establish service compatibility. Keep GoCux authentication and server-side secrets inside the supported application boundary.
Test a small path first
- Choose one known input and write down the expected output.
- Check authentication, cancellation and an unavailable-service response before widening the task.
- Keep an auditable distinction between data retrieval, generated suggestions and external changes.
A practical starting point
Connect an external system deliberately. These steps describe the GoCux workflow and its permission boundaries.
- Inspect the integrations actually listed in your workspace. Identify the data source, the account that owns it, and the operation you need before granting access.
- Use the narrowest available permission and keep credentials inside the supported connection flow. An integration article does not mean a connector is installed or authorized.
- Test a read operation with a small, known record. Review its scope and output before allowing a workflow to make an external change.
What to verify
Confirm both authorization and the observed result. A successful sign-in is not evidence that every advertised connector operation works.
Bring this workflow into your workspace.
Set the scope. Review the evidence. Approve the steps that need it.