Appearance
lovable.project.bootstrap-auth ​
Provision Sign in with Orkestia for a Lovable project
Provision the identity tenant a Lovable app signs its end-users in with.
Returns the client_key and the hosted-login integration block the app needs — the app never handles a password, and the login page is Orkestia's, not the vibecoded app's.
Run this from Lovable's chat over MCP before the app is deployed: pass the Lovable preview origin as dev_origin so sign-in works while building, then lovable.project.go-live registers the production callback.
Overview ​
| Property | Value |
|---|---|
| Workflow type | Dag |
| Library | App-lovable |
| Version | 1.0 |
Input Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
actor | string | No | — | Member or agent provisioning the app. |
organization_uuid | uuid | Yes | — | Organization that will own the identity app. |
app_name | string | Yes | — | Human-readable name for the identity app. |
redirect_uris | list | No | — | OAuth callback URLs; production ones can be added at go-live. |
mode | string | No | — | dev (default) or live. dev restricts sign-in to an email allowlist. |
dev_origin | string | No | — | Lovable preview origin to allow during the build, e.g. https://<id>.lovable.app |
Output Schema ​
| Field | Type | Required | Default | Description |
|---|---|---|---|---|
organization_uuid | uuid | Yes | — | — |
identity_app_uuid | uuid | No | — | — |
client_uuid | uuid | No | — | — |
client_key | string | No | — | — |
integration | dict | No | — | — |
groups_seeded | boolean | No | — | — |
dev_origin_allowed | boolean | No | — | — |
provision_app | json | No | — | — |
seed_groups | json | No | — | — |
allow_dev_origin | json | No | — | — |
actor | string | No | — | — |
app_name | string | No | — | — |
redirect_uris | list | No | — | — |
mode | string | No | — | — |
dev_origin | string | No | — | — |
failure_reason | string | No | — | — |
failure_type | string | No | — | — |
failed_action | string | No | — | — |
failed_at_state | string | No | — | — |
failed_step | json | No | — | — |
failed_layer | integer | No | — | — |
error | string | No | — | — |
error_type | string | No | — | — |
DAG Layers ​
| # | Layer | Steps | Compensation |
|---|---|---|---|
| 1 | provision | identity.app.provision | — |
| 2 | groups | identity.end-user.group.seed-defaults | — |
| 3 | dev-origin | identity.app.allow-dev-origin | — |
Execution Flow ​
Sub-workflows ​
| Sub-workflow | Step name |
|---|---|
identity.app.provision | provision_app |
identity.end-user.group.seed-defaults | seed_groups |
identity.app.allow-dev-origin | allow_dev_origin |
API Usage ​
bash
POST /api/workflows/start
Content-Type: application/json
{
"workflow_type": "lovable.project.bootstrap-auth",
"initial_data": {
"organization_uuid": "value",
"app_name": "value"
}
}