v0.4.0 — seamless provider keys

Seamless provider keys — set a key once, never re-enter it.

Added

• Prompt-and-save funnel. The first time you run a provider (--provider kimi/grok) with no key, oxison prompts for it (hidden input) and offers to save it. Every run after is zero-touch.

  $ oxison run . --provider grok
    no XAI_API_KEY found for provider 'grok'.
    Paste your grok API key (hidden): ****************
    Save it for next time? [Y/n] y
    ✓ saved to keychain — future runs won't ask
  

• oxison auth subcommand to manage saved keys:

  oxison auth set grok       # prompts hidden, or --api-key for scripts
  oxison auth status         # which keys are saved / detected (never echoes a key)
  oxison auth rm grok

• Storage: OS keychain first — macOS Keychain (security), Linux libsecret (secret-tool) — with a 0600-file fallback at ~/.config/oxison/credentials. Fail-soft, zero new dependencies.

• Resolution order: --api-key > env var > saved key > interactive prompt. The prompt is TTY-gated, so CI/headless fails fast with a clear "set XAI_API_KEY…" message instead of hanging. oxison never prints any part of a saved key.

Install:

pip install "git+https://github.com/escotilha/oxison.git@v0.4.0"

Full changelog: https://github.com/escotilha/oxison/blob/v0.4.0/CHANGELOG.md