@drico2008/fincli 0.1.2 → 0.1.3

package/README.md

@@ -90,6 +90,24 @@ copy .env.example .env
 
 Isi API key hanya untuk provider yang ingin digunakan. yfinance fallback tidak butuh API key. Config membaca status key tanpa menampilkan secret.
 
+Untuk install global lewat npm, user tidak perlu membuka folder package atau mengedit `.env`. Simpan API key lewat command FinCLI:
+
+```text
+/ai_model key groq <api_key>
+/ai_model key openrouter <api_key>
+/news_model key finnhub <api_key>
+/news_model key twelvedata <api_key>
+/news_model key custom <api_key> https://your-market-api.example.com
+```
+
+Key disimpan lokal di:
+
+```text
+~/.fincli/secrets.env
+```
+
+File ini tidak dicetak penuh di output terminal. `/config` dan `/provider key status` hanya menampilkan status/masked key.
+
 ## Run
 
 ```bash
@@ -202,6 +220,7 @@ Di TUI, command ini membuka selector seperti modern CLI:
 - Select Provider
 - Status provider current/configured
 - Use existing configuration / configure again
+- Configure API key jika provider belum punya key
 - Select Model
 - Search model/provider
 - Navigasi `up/down`, `Enter`, `Tab`, dan `Esc`
@@ -222,6 +241,7 @@ Di TUI, command ini membuka selector untuk provider market/news dan fallback pri
 
 - Select Market/News Provider
 - Pilih `Twelve Data`, `Finnhub`, `Custom API`, atau `Yahoo Finance`
+- Masukkan API key langsung dari popup jika provider belum dikonfigurasi
 - Pilih preset fallback: recommended, primary + yfinance, data API priority, atau yfinance only
 - Search provider/preset
 - Navigasi `up/down`, `Enter`, `Tab`, dan `Esc`
@@ -436,6 +456,7 @@ Contoh:
 
 ```bash
 /ai_model openrouter openai/gpt-4o-mini
+/ai_model key openrouter <api_key>
 /ai jelaskan risiko market NVDA secara singkat
 /analyze AAPL 1d
 ```
@@ -496,6 +517,12 @@ Environment variable:
 FINNHUB_API_KEY=your-finnhub-key
 ```
 
+Atau simpan dari FinCLI:
+
+```text
+/news_model key finnhub <api_key>
+```
+
 Endpoint Finnhub yang dipakai:
 
 ```text
@@ -524,6 +551,12 @@ Environment variable:
 TWELVE_DATA_API_KEY=your-twelve-data-key
 ```
 
+Atau simpan dari FinCLI:
+
+```text
+/news_model key twelvedata <api_key>
+```
+
 Endpoint Twelve Data yang dipakai:
 
 ```text
@@ -571,6 +604,12 @@ MARKET_DATA_API_KEY=your-key
 MARKET_DATA_BASE_URL=https://your-market-api.example.com
 ```
 
+Atau simpan dari FinCLI:
+
+```text
+/news_model key custom <api_key> https://your-market-api.example.com
+```
+
 FinCLI akan memanggil endpoint:
 
 ```text
@@ -605,6 +644,7 @@ FinCLI menyimpan data lokal di:
 ```
 
 API key tidak disimpan di output terminal dan sebaiknya tetap berada di `.env` atau environment variable.
+Untuk install global via npm, API key paling praktis disimpan lewat command FinCLI di `~/.fincli/secrets.env`.
 
 ## Test
 
@@ -622,7 +662,7 @@ Hasil terakhir di environment ini:
 
 - `fincli` tidak dikenali: jalankan `pip install -e .` dari root project.
 - TUI tidak tampil rapi: perbesar terminal desktop.
-- API key tidak terbaca: pastikan file `.env` ada di root project atau export environment variable.
+- API key tidak terbaca: gunakan `/ai_model key <provider> <api_key>` atau `/news_model key <provider> <api_key>`, lalu cek `/config` atau `/provider key status`.
 - `/price` gagal karena yfinance belum ada: jalankan `pip install -e ".[dev]"` atau `pip install -r requirements.txt`.
 - Config rusak: hapus `~/.fincli/config.json` untuk kembali ke default.
 

package/fincli/__init__.py

@@ -1,3 +1,3 @@
 """FinCLI package."""
 
-__version__ = "0.1.2"
+__version__ = "0.1.3"

package/fincli/app/cli/commands.py

@@ -17,7 +17,9 @@ COMMANDS: tuple[CommandSpec, ...] = (
     CommandSpec("/help", "Tampilkan bantuan, command list, dan contoh.", "/help"),
     CommandSpec("/dashboard", "Tampilkan dashboard compact FinCLI.", "/dashboard", "General"),
     CommandSpec("/ai_model", "Lihat atau ganti AI provider/model.", "/ai_model openrouter openai/gpt-4o-mini", "AI"),
+    CommandSpec("/ai_model key", "Simpan API key AI lokal.", "/ai_model key groq <api_key>", "AI"),
     CommandSpec("/news_model", "Buka selector provider market/news dan fallback.", "/news_model", "Provider"),
+    CommandSpec("/news_model key", "Simpan API key market/news lokal.", "/news_model key finnhub <api_key>", "Provider"),
     CommandSpec("/market", "Ringkasan market profesional untuk instrumen.", "/market AAPL 1d", "Market"),
     CommandSpec("/news", "Tampilkan news/fundamental terbaru untuk instrumen.", "/news AAPL", "Market"),
     CommandSpec("/technical", "Analisis teknikal instrumen.", "/technical BTC-USD 1d", "Analysis"),

package/fincli/app/cli/router.py

@@ -50,6 +50,7 @@ from fincli.app.storage.cache import TTLCache
 from fincli.app.storage.config import ConfigManager
 from fincli.app.storage.database import FinCLIDatabase
 from fincli.app.storage.market_cache import MarketCache
+from fincli.app.storage.secrets import save_secret
 from fincli.app.utils.errors import CommandError, FinCLIError
 
 
@@ -211,6 +212,23 @@ class CommandRouter:
         if len(args) == 0:
             current = self.config.settings
             return CommandResult(Panel(f"{current.ai_provider} / {current.ai_model}", title="Active AI Model"))
+        if args[0].lower() == "key":
+            if len(args) < 3:
+                raise CommandError("Format: /ai_model key <provider> <api_key>")
+            provider = args[1].lower()
+            info = AIProviderManager().get(provider)
+            if info is None:
+                raise CommandError(f"AI provider tidak dikenal: {provider}")
+            save_secret(info.env_key, args[2])
+            if self.config.settings.ai_provider == provider:
+                self.ai_provider = AIProviderManager().create(provider)
+            return CommandResult(
+                Panel(
+                    f"API key AI untuk {provider} disimpan di ~/.fincli/secrets.env.\nKey tidak ditampilkan di terminal.",
+                    title="AI API Key Saved",
+                    border_style="green",
+                )
+            )
         if len(args) < 2:
             raise CommandError("Format: /ai_model <provider> <model>")
         self.config.set_ai_model(args[0], args[1])
@@ -232,6 +250,27 @@ class CommandRouter:
                     title="Active Data Provider",
                 )
             )
+        if args[0].lower() == "key":
+            if len(args) < 3:
+                raise CommandError("Format: /news_model key <provider> <api_key> [base_url untuk custom]")
+            provider = args[1].lower()
+            env_keys = _market_provider_secret_keys(provider)
+            if not env_keys:
+                raise CommandError(f"Provider {provider} tidak membutuhkan API key atau tidak dikenal.")
+            save_secret(env_keys[0], args[2])
+            if provider == "custom" and len(args) >= 4:
+                save_secret("MARKET_DATA_BASE_URL", args[3])
+            self._refresh_market_service()
+            self.cache.clear()
+            extra = "\nBase URL custom juga disimpan." if provider == "custom" and len(args) >= 4 else ""
+            return CommandResult(
+                Panel(
+                    f"API key market/news untuk {provider} disimpan di ~/.fincli/secrets.env.{extra}\n"
+                    "Key tidak ditampilkan di terminal.",
+                    title="Market API Key Saved",
+                    border_style="green",
+                )
+            )
         self.config.set_market_provider(args[0])
         self.config.set_news_provider(args[0])
         self.config.set_market_provider_priority([args[0], *self._priority_tail(args[0])])
@@ -1121,6 +1160,14 @@ def _format_provider_key_status(manager: MarketProviderManager) -> Table:
     return table
 
 
+def _market_provider_secret_keys(provider: str) -> tuple[str, ...]:
+    return {
+        "custom": ("MARKET_DATA_API_KEY", "MARKET_DATA_BASE_URL"),
+        "finnhub": ("FINNHUB_API_KEY",),
+        "twelvedata": ("TWELVE_DATA_API_KEY",),
+    }.get(provider.lower(), ())
+
+
 def _format_transactions(rows: list[dict[str, object]]) -> Table:
     table = Table(title="Transaction Ledger", expand=True)
     table.add_column("ID", justify="right")

package/fincli/app/providers/ai/http_provider.py

@@ -27,7 +27,7 @@ class OpenAICompatibleProvider(BaseAIProvider):
         if not self.api_key:
             raise ProviderError(
                 f"API key untuk provider {self.name} belum diatur.",
-                "Isi API key di .env lalu jalankan ulang FinCLI.",
+                f"Gunakan /ai_model key {self.name} <api_key> atau set environment variable.",
             )
 
         payload = {
@@ -69,7 +69,7 @@ class GeminiProviderHTTP(BaseAIProvider):
 
     async def complete(self, request: AIRequest) -> AIResponse:
         if not self.api_key:
-            raise ProviderError("API key untuk provider gemini belum diatur.")
+            raise ProviderError("API key untuk provider gemini belum diatur.", "Gunakan /ai_model key gemini <api_key>.")
         url = f"{self.base_url}/models/{request.model}:generateContent?key={self.api_key}"
         payload = {"contents": [{"parts": [{"text": request.prompt}]}]}
         try:
@@ -100,7 +100,7 @@ class AnthropicProviderHTTP(BaseAIProvider):
 
     async def complete(self, request: AIRequest) -> AIResponse:
         if not self.api_key:
-            raise ProviderError("API key untuk provider anthropic belum diatur.")
+            raise ProviderError("API key untuk provider anthropic belum diatur.", "Gunakan /ai_model key anthropic <api_key>.")
         payload = {
             "model": request.model,
             "max_tokens": 1200,

package/fincli/app/providers/market/custom_provider.py

@@ -119,12 +119,12 @@ class CustomMarketProvider(BaseMarketProvider):
         if not self.api_key:
             raise ProviderError(
                 "API key custom market provider belum diatur.",
-                "Isi MARKET_DATA_API_KEY di .env.",
+                "Gunakan /news_model key custom <api_key> <base_url>.",
             )
         if not self.base_url:
             raise ProviderError(
                 "Base URL custom market provider belum diatur.",
-                "Isi MARKET_DATA_BASE_URL di .env.",
+                "Gunakan /news_model key custom <api_key> <base_url>.",
             )
 
         close_client = self._client is None

package/fincli/app/providers/market/finnhub_provider.py

@@ -141,7 +141,7 @@ class FinnhubProvider:
 
     async def _get(self, path: str, params: dict[str, object]) -> Any:
         if not self.api_key:
-            raise ProviderError("API key Finnhub belum diatur.", "Isi FINNHUB_API_KEY di .env.")
+            raise ProviderError("API key Finnhub belum diatur.", "Gunakan /news_model key finnhub <api_key>.")
         close_client = self._client is None
         client = self._client or httpx.AsyncClient(timeout=30)
         query = {**params, "token": self.api_key}

package/fincli/app/providers/market/manager.py

@@ -10,6 +10,7 @@ from fincli.app.providers.market.custom_provider import CustomMarketProvider
 from fincli.app.providers.market.finnhub_provider import FinnhubProvider
 from fincli.app.providers.market.twelvedata_provider import TwelveDataProvider
 from fincli.app.providers.market.yfinance_provider import YFinanceProvider
+from fincli.app.storage.secrets import secret_source
 
 
 @dataclass(frozen=True, slots=True)
@@ -92,25 +93,25 @@ class MarketProviderManager:
                 "provider": "custom",
                 "key": "MARKET_DATA_API_KEY",
                 "status": _mask_status(os.getenv("MARKET_DATA_API_KEY")),
-                "source": ".env" if os.getenv("MARKET_DATA_API_KEY") else "-",
+                "source": secret_source("MARKET_DATA_API_KEY"),
             },
             {
                 "provider": "custom",
                 "key": "MARKET_DATA_BASE_URL",
                 "status": _mask_status(os.getenv("MARKET_DATA_BASE_URL")),
-                "source": ".env" if os.getenv("MARKET_DATA_BASE_URL") else "-",
+                "source": secret_source("MARKET_DATA_BASE_URL"),
             },
             {
                 "provider": "finnhub",
                 "key": "FINNHUB_API_KEY",
                 "status": _mask_status(os.getenv("FINNHUB_API_KEY")),
-                "source": ".env" if os.getenv("FINNHUB_API_KEY") else "-",
+                "source": secret_source("FINNHUB_API_KEY"),
             },
             {
                 "provider": "twelvedata",
                 "key": "TWELVE_DATA_API_KEY",
                 "status": _mask_status(os.getenv("TWELVE_DATA_API_KEY")),
-                "source": ".env" if os.getenv("TWELVE_DATA_API_KEY") else "-",
+                "source": secret_source("TWELVE_DATA_API_KEY"),
             },
         ]
 

package/fincli/app/providers/market/twelvedata_provider.py

@@ -76,7 +76,7 @@ class TwelveDataProvider:
 
     async def _get(self, path: str, params: dict[str, object]) -> Any:
         if not self.api_key:
-            raise ProviderError("API key Twelve Data belum diatur.", "Isi TWELVE_DATA_API_KEY di .env.")
+            raise ProviderError("API key Twelve Data belum diatur.", "Gunakan /news_model key twelvedata <api_key>.")
         close_client = self._client is None
         client = self._client or httpx.AsyncClient(timeout=30)
         try:

package/fincli/app/storage/config.py

@@ -19,10 +19,8 @@ except ImportError:  # pragma: no cover - dependency exists in normal install
 
 from fincli.app.utils.errors import ConfigError
 from fincli.app.utils.formatting import mask_secret
-
-
-APP_DIR = Path.home() / ".fincli"
-CONFIG_FILE = APP_DIR / "config.json"
+from fincli.app.storage.config_paths import APP_DIR, CONFIG_FILE
+from fincli.app.storage.secrets import load_local_secrets
 
 
 @dataclass(slots=True)
@@ -66,6 +64,7 @@ class ConfigManager:
     def load(self) -> FinCLISettings:
         if load_dotenv is not None:
             load_dotenv()
+        load_local_secrets()
 
         if not self.config_file.exists():
             return FinCLISettings()

package/fincli/app/storage/config_paths.py

@@ -0,0 +1,9 @@
+"""Shared local storage paths."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+
+APP_DIR = Path.home() / ".fincli"
+CONFIG_FILE = APP_DIR / "config.json"

package/fincli/app/storage/secrets.py

@@ -0,0 +1,101 @@
+"""Local secret storage for globally installed FinCLI."""
+
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+from fincli.app.storage.config_paths import APP_DIR
+from fincli.app.utils.errors import ConfigError
+
+
+SECRETS_FILE = APP_DIR / "secrets.env"
+
+
+def load_local_secrets(path: Path | None = None, *, override: bool = False) -> None:
+    """Load persisted secrets into process environment."""
+    path = path or SECRETS_FILE
+    if not path.exists():
+        return
+    for line in path.read_text(encoding="utf-8").splitlines():
+        stripped = line.strip()
+        if not stripped or stripped.startswith("#") or "=" not in stripped:
+            continue
+        key, value = stripped.split("=", 1)
+        key = key.strip()
+        value = _unquote(value.strip())
+        if key and (override or key not in os.environ):
+            os.environ[key] = value
+
+
+def save_secret(env_key: str, value: str, path: Path | None = None) -> None:
+    """Persist a secret locally and expose it to the current process."""
+    path = path or SECRETS_FILE
+    key = _validate_env_key(env_key)
+    secret = _sanitize_value(value)
+    if not secret:
+        raise ConfigError(f"Nilai {key} kosong.")
+
+    secrets = read_secrets(path)
+    secrets[key] = secret
+
+    try:
+        path.parent.mkdir(parents=True, exist_ok=True)
+        lines = ["# FinCLI local secrets. Do not commit or share this file."]
+        lines.extend(f"{item_key}={_quote(item_value)}" for item_key, item_value in sorted(secrets.items()))
+        path.write_text("\n".join(lines) + "\n", encoding="utf-8")
+        try:
+            os.chmod(path, 0o600)
+        except OSError:
+            pass
+    except OSError as exc:
+        raise ConfigError("Secret lokal gagal disimpan.", f"Path: {path}") from exc
+
+    os.environ[key] = secret
+
+
+def read_secrets(path: Path | None = None) -> dict[str, str]:
+    """Read local secrets without printing or masking them."""
+    path = path or SECRETS_FILE
+    if not path.exists():
+        return {}
+    result: dict[str, str] = {}
+    for line in path.read_text(encoding="utf-8").splitlines():
+        stripped = line.strip()
+        if not stripped or stripped.startswith("#") or "=" not in stripped:
+            continue
+        key, value = stripped.split("=", 1)
+        result[key.strip()] = _unquote(value.strip())
+    return result
+
+
+def secret_source(env_key: str, path: Path | None = None) -> str:
+    """Return a display-safe source for a secret."""
+    path = path or SECRETS_FILE
+    if env_key in os.environ:
+        if env_key in read_secrets(path):
+            return "~/.fincli/secrets.env"
+        return "environment/.env"
+    return "-"
+
+
+def _validate_env_key(env_key: str) -> str:
+    key = env_key.strip().upper()
+    if not key or not all(char.isalnum() or char == "_" for char in key):
+        raise ConfigError(f"Nama environment key tidak valid: {env_key}")
+    return key
+
+
+def _sanitize_value(value: str) -> str:
+    return value.strip().replace("\r", "").replace("\n", "")
+
+
+def _quote(value: str) -> str:
+    escaped = value.replace("\\", "\\\\").replace('"', '\\"')
+    return f'"{escaped}"'
+
+
+def _unquote(value: str) -> str:
+    if len(value) >= 2 and value[0] == value[-1] == '"':
+        return value[1:-1].replace('\\"', '"').replace("\\\\", "\\")
+    return value

package/fincli/app/tui/market_provider_selector.py

@@ -15,6 +15,7 @@ from textual.widgets import Input, Static
 
 from fincli.app.providers.market.manager import MarketProviderManager
 from fincli.app.storage.config import ConfigManager
+from fincli.app.storage.secrets import save_secret
 from fincli.app.utils.formatting import mask_secret
 
 
@@ -109,6 +110,7 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
         self.selected_index = 0
         self.selected_provider = config.settings.market_provider
         self.search = ""
+        self.pending_env_keys: list[str] = []
 
     def compose(self) -> ComposeResult:
         with Vertical(id="ai_selector_card"):
@@ -131,6 +133,9 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
 
     def on_input_submitted(self, event: Input.Submitted) -> None:
         event.stop()
+        if self.mode == "key":
+            self._save_key(event.value)
+            return
         self.action_select()
 
     def on_key(self, event: Key) -> None:
@@ -170,7 +175,11 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
         if self.mode == "provider":
             provider = selected.provider  # type: ignore[attr-defined]
             self.selected_provider = provider
-            self._set_mode("priority")
+            self.pending_env_keys = [key for key in PROVIDER_ENV_KEYS.get(provider, ()) if not os.getenv(key)]
+            if self.pending_env_keys:
+                self._set_mode("key")
+            else:
+                self._set_mode("priority")
             return
 
         providers = selected.providers  # type: ignore[attr-defined]
@@ -191,9 +200,16 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
 
     def _sync_search_placeholder(self) -> None:
         search = self.query_one("#ai_selector_search", Input)
-        search.placeholder = "Search fallback presets..." if self.mode == "priority" else "Search providers..."
+        search.password = self.mode == "key"
+        if self.mode == "key":
+            env_key = self.pending_env_keys[0] if self.pending_env_keys else "API_KEY"
+            search.placeholder = f"Paste {env_key}..."
+        else:
+            search.placeholder = "Search fallback presets..." if self.mode == "priority" else "Search providers..."
 
     def _visible_items(self) -> list[MarketProviderChoice] | list[PriorityChoice]:
+        if self.mode == "key":
+            return []
         if self.mode == "priority":
             presets = list(priority_presets(self.selected_provider))
             if self.search:
@@ -222,6 +238,10 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
         if self.mode == "priority":
             title.update("Select Provider Priority")
             provider.update(f"[cyan]Primary:[/] {self.selected_provider} [dim](tab to change provider)[/]")
+        elif self.mode == "key":
+            env_key = self.pending_env_keys[0] if self.pending_env_keys else "API_KEY"
+            title.update("Configure Market API Key")
+            provider.update(f"[cyan]Provider:[/] {self.selected_provider} [dim]{env_key} saved to ~/.fincli/secrets.env[/]")
         else:
             title.update("Select Market/News Provider")
             provider.update("")
@@ -231,6 +251,11 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
 
     def _items_text(self, items: list[MarketProviderChoice] | list[PriorityChoice]) -> Text:
         text = Text()
+        if self.mode == "key":
+            env_key = self.pending_env_keys[0] if self.pending_env_keys else "API_KEY"
+            text.append(f"Paste {env_key} above, then press Enter.\n", style="bold")
+            text.append("The value is stored locally and will not be printed in output.\n", style="dim")
+            return text
         text.append("Providers\n" if self.mode == "provider" else "Fallback presets\n", style="bold dim")
         for index, item in enumerate(items):
             selected = index == self.selected_index
@@ -252,10 +277,22 @@ class MarketProviderSelectorScreen(ModalScreen[tuple[str, ...] | None]):
         return text
 
     def _help_text(self) -> str:
+        if self.mode == "key":
+            return "Paste key/value, Enter to save, Esc to close"
         if self.mode == "priority":
             return "Type to search, up/down navigate, Enter to save priority, Tab to change provider, Esc to close"
         return "Type to search, up/down navigate, Enter to select provider, Esc to close"
 
+    def _save_key(self, value: str) -> None:
+        if not self.pending_env_keys or not value.strip():
+            return
+        env_key = self.pending_env_keys.pop(0)
+        save_secret(env_key, value)
+        if self.pending_env_keys:
+            self._set_mode("key")
+        else:
+            self._set_mode("priority")
+
 
 def _provider_key_status(choice: MarketProviderChoice) -> str:
     if not choice.env_keys:

package/fincli/app/tui/model_selector.py

@@ -13,9 +13,10 @@ from textual.events import Key
 from textual.screen import ModalScreen
 from textual.widgets import Input, Static
 
-from fincli.app.providers.ai.manager import AIProviderManager
-from fincli.app.storage.config import ConfigManager
-from fincli.app.utils.formatting import mask_secret
+from fincli.app.providers.ai.manager import AIProviderManager
+from fincli.app.storage.config import ConfigManager
+from fincli.app.storage.secrets import save_secret
+from fincli.app.utils.formatting import mask_secret
 
 
 @dataclass(frozen=True, slots=True)
@@ -248,9 +249,12 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
         self.selected_index = 0
         self._render_selector()
 
-    def on_input_submitted(self, event: Input.Submitted) -> None:
-        event.stop()
-        self.action_select()
+    def on_input_submitted(self, event: Input.Submitted) -> None:
+        event.stop()
+        if self.mode == "key":
+            self._save_key(event.value)
+            return
+        self.action_select()
 
     def on_key(self, event: Key) -> None:
         if event.key == "up":
@@ -286,20 +290,22 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
         if not items:
             return
         selected = items[self.selected_index]
-        if self.mode == "provider":
-            provider = selected.provider  # type: ignore[attr-defined]
-            self.selected_provider = provider
-            if _has_key(provider):
-                self._set_mode("configured")
-            else:
-                self._set_mode("model")
-            return
-        if self.mode == "configured":
-            if selected == "Configure again":
-                self._set_mode("model")
-            else:
-                self._set_mode("model")
-            return
+        if self.mode == "provider":
+            provider = selected.provider  # type: ignore[attr-defined]
+            self.selected_provider = provider
+            if _has_key(provider):
+                self._set_mode("configured")
+            else:
+                self._set_mode("key")
+            return
+        if self.mode == "configured":
+            if selected == "Configure API key":
+                self._set_mode("key")
+            elif selected == "Change model":
+                self._set_mode("model")
+            else:
+                self._set_mode("model")
+            return
         model = selected.model  # type: ignore[attr-defined]
         self.config.set_ai_model(self.selected_provider, model)
         self.on_selected(self.selected_provider, model)
@@ -312,23 +318,31 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
         self.mode = mode
         self.selected_index = 0
         self.search = ""
-        self.query_one("#ai_selector_search", Input).value = ""
-        self._sync_search_placeholder()
-        self._render_selector()
-
-    def _sync_search_placeholder(self) -> None:
-        search = self.query_one("#ai_selector_search", Input)
-        search.placeholder = "Search models..." if self.mode == "model" else "Search providers..."
-
-    def _visible_items(self) -> list[ProviderChoice] | list[ModelChoice] | list[str]:
-        if self.mode == "provider":
-            items = list(PROVIDERS)
-            if self.search:
-                items = [item for item in items if self.search in item.label.lower() or self.search in item.provider]
-            return items
-        if self.mode == "configured":
-            return ["Use existing configuration", "Configure again"]
-        models = list(MODEL_CATALOG.get(self.selected_provider, ()))
+        self.query_one("#ai_selector_search", Input).value = ""
+        self._sync_search_placeholder()
+        self._render_selector()
+
+    def _sync_search_placeholder(self) -> None:
+        search = self.query_one("#ai_selector_search", Input)
+        search.password = self.mode == "key"
+        if self.mode == "key":
+            choice = _provider_choice(self.selected_provider)
+            env_key = choice.env_key if choice else "API_KEY"
+            search.placeholder = f"Paste {env_key}..."
+        else:
+            search.placeholder = "Search models..." if self.mode == "model" else "Search providers..."
+
+    def _visible_items(self) -> list[ProviderChoice] | list[ModelChoice] | list[str]:
+        if self.mode == "provider":
+            items = list(PROVIDERS)
+            if self.search:
+                items = [item for item in items if self.search in item.label.lower() or self.search in item.provider]
+            return items
+        if self.mode == "configured":
+            return ["Use existing configuration", "Configure API key", "Change model"]
+        if self.mode == "key":
+            return []
+        models = list(MODEL_CATALOG.get(self.selected_provider, ()))
         if self.search:
             models = [item for item in models if self.search in item.label.lower() or self.search in item.model.lower()]
         if not models:
@@ -344,12 +358,17 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
         if self.mode == "provider":
             title.update("Select Provider")
             provider.update("")
-        elif self.mode == "configured":
-            choice = _provider_choice(self.selected_provider)
-            label = choice.label if choice else self.selected_provider
-            title.update(f"{label} is already configured")
-            provider.update(f"[cyan]Provider:[/] {label} [dim]{_masked_key(self.selected_provider)}[/]")
-        else:
+        elif self.mode == "configured":
+            choice = _provider_choice(self.selected_provider)
+            label = choice.label if choice else self.selected_provider
+            title.update(f"{label} is already configured")
+            provider.update(f"[cyan]Provider:[/] {label} [dim]{_masked_key(self.selected_provider)}[/]")
+        elif self.mode == "key":
+            choice = _provider_choice(self.selected_provider)
+            label = choice.label if choice else self.selected_provider
+            title.update("Configure API Key")
+            provider.update(f"[cyan]Provider:[/] {label} [dim](saved to ~/.fincli/secrets.env)[/]")
+        else:
             choice = _provider_choice(self.selected_provider)
             label = choice.label if choice else self.selected_provider
             title.update("Select Model")
@@ -361,11 +380,17 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
 
     def _items_text(self, items: list[ProviderChoice] | list[ModelChoice] | list[str]) -> Text:
         text = Text()
-        if self.mode == "provider":
-            text.append("Popular\n", style="bold dim")
-        elif self.mode == "model":
-            hidden = max(0, len(MODEL_CATALOG.get(self.selected_provider, ())) - len(items))
-            text.append(f"{hidden} filtered\n" if self.search else "Available models\n", style="bold dim")
+        if self.mode == "provider":
+            text.append("Popular\n", style="bold dim")
+        elif self.mode == "model":
+            hidden = max(0, len(MODEL_CATALOG.get(self.selected_provider, ())) - len(items))
+            text.append(f"{hidden} filtered\n" if self.search else "Available models\n", style="bold dim")
+        elif self.mode == "key":
+            choice = _provider_choice(self.selected_provider)
+            env_key = choice.env_key if choice else "API_KEY"
+            text.append(f"Paste {env_key} above, then press Enter.\n", style="bold")
+            text.append("The key is stored locally and will not be printed in output.\n", style="dim")
+            return text
 
         for index, item in enumerate(items):
             selected = index == self.selected_index
@@ -386,12 +411,21 @@ class AIModelSelectorScreen(ModalScreen[tuple[str, str] | None]):
             text.append("No matches.\n", style="dim")
         return text
 
-    def _help_text(self) -> str:
-        if self.mode == "configured":
-            return "Up/down navigate, Enter to select, Esc to go back"
+    def _help_text(self) -> str:
+        if self.mode == "key":
+            return "Paste API key, Enter to save, Esc to close"
+        if self.mode == "configured":
+            return "Up/down navigate, Enter to select, Esc to go back"
         if self.mode == "model":
             return "Type to search, up/down navigate, Enter to select, Tab to change provider, Esc to close"
-        return "Type to search, up/down navigate, Enter to select, Esc to close"
+        return "Type to search, up/down navigate, Enter to select, Esc to close"
+
+    def _save_key(self, value: str) -> None:
+        choice = _provider_choice(self.selected_provider)
+        if choice is None or not value.strip():
+            return
+        save_secret(choice.env_key, value)
+        self._set_mode("model")
 
 
 def _provider_choice(provider: str) -> ProviderChoice | None:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drico2008/fincli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Modern financial CLI/TUI terminal for market monitoring and analysis.",
   "license": "MIT",
   "bin": {

package/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "fincli"
-version = "0.1.2"
+version = "0.1.3"
 description = "Modern financial CLI/TUI terminal for market monitoring and analysis."
 readme = "README.md"
 requires-python = ">=3.11"