diff --git a/src/onboard/wizard.rs b/src/onboard/wizard.rs
index a398baa..bf7c842 100644
--- a/src/onboard/wizard.rs
+++ b/src/onboard/wizard.rs
@@ -3773,7 +3773,7 @@ fn print_summary(config: &Config) {
     );
 
     // Secrets
-    println!("    {} Secrets:       {}", style("🔒").cyan(), "configured");
+    println!("    {} Secrets:       configured", style("🔒").cyan());
 
     // Gateway
     println!(
diff --git a/src/providers/mod.rs b/src/providers/mod.rs
index 2417bad..cef584d 100644
--- a/src/providers/mod.rs
+++ b/src/providers/mod.rs
@@ -198,7 +198,11 @@ pub fn create_provider_with_url(
     api_url: Option<&str>,
 ) -> anyhow::Result<Box<dyn Provider>> {
     let resolved_credential = resolve_provider_credential(name, api_key);
-    let key = resolved_credential.as_deref();
+    let key = if let Some(value) = resolved_credential.as_ref() {
+        Some(value.as_str())
+    } else {
+        None
+    };
     match name {
         // ── Primary providers (custom implementations) ───────
         "openrouter" => Ok(Box::new(openrouter::OpenRouterProvider::new(key))),
diff --git a/src/tools/delegate.rs b/src/tools/delegate.rs
index b3369aa..ad2a0ec 100644
--- a/src/tools/delegate.rs
+++ b/src/tools/delegate.rs
@@ -169,7 +169,11 @@ impl Tool for DelegateTool {
             .api_key
             .clone()
             .or_else(|| self.fallback_credential.clone());
-        let provider_credential = provider_credential_owned.as_ref().map(String::as_str);
+        let provider_credential = if let Some(value) = provider_credential_owned.as_ref() {
+            Some(value.as_str())
+        } else {
+            None
+        };
 
         let provider: Box<dyn Provider> =
             match providers::create_provider(&agent_config.provider, provider_credential) {