@intelligentelectron/pdf-analyzer 0.1.6 → 1.0.0

package/README.md

@@ -75,7 +75,7 @@ After installing the MCP with one of the methods above, you can connect it to yo
 Install [Claude Code](https://docs.anthropic.com/en/docs/claude-code), then run:
 
 ```bash
-claude mcp add --scope user pdf-analyzer --env GEMINI_API_KEY=your-key -- pdf-analyzer
+claude mcp add --scope user pdf-analyzer -- pdf-analyzer
 ```
 
 ### OpenAI Codex
@@ -83,7 +83,7 @@ claude mcp add --scope user pdf-analyzer --env GEMINI_API_KEY=your-key -- pdf-an
 Install [OpenAI Codex](https://developers.openai.com/codex/cli/), then run:
 
 ```bash
-codex mcp add pdf-analyzer --env GEMINI_API_KEY=your-key -- pdf-analyzer
+codex mcp add pdf-analyzer -- pdf-analyzer
 ```
 
 ### Gemini CLI
@@ -91,7 +91,7 @@ codex mcp add pdf-analyzer --env GEMINI_API_KEY=your-key -- pdf-analyzer
 Install [Gemini CLI](https://geminicli.com/docs/get-started/installation/), then run:
 
 ```bash
-gemini mcp add --scope user -e GEMINI_API_KEY=your-key pdf-analyzer pdf-analyzer
+gemini mcp add --scope user pdf-analyzer pdf-analyzer
 ```
 
 ### VS Code (GitHub Copilot)
@@ -105,10 +105,7 @@ Add to `.vscode/mcp.json` in your project:
   "servers": {
     "pdf-analyzer": {
       "type": "stdio",
-      "command": "pdf-analyzer",
-      "env": {
-        "GEMINI_API_KEY": "your-key"
-      }
+      "command": "pdf-analyzer"
     }
   }
 }
@@ -116,8 +113,6 @@ Add to `.vscode/mcp.json` in your project:
 
 Then enable it in **Configure Tools** (click the tools icon in Copilot chat).
 
-> **Warning:** Do not commit `.vscode/mcp.json` to version control — it contains your API key. Add it to your `.gitignore`.
-
 ## Usage
 
 Once connected, ask your AI assistant to analyze any PDF:

package/dist/cli/commands.d.ts

@@ -1,5 +1,5 @@
 /**
- * CLI command handlers for --version, --help, --update, and --uninstall.
+ * CLI command handlers for --version, --help, --setup, --update, and --uninstall.
  */
 /**
  * Print version information.
@@ -9,6 +9,14 @@ export declare const printVersion: () => void;
  * Print help message.
  */
 export declare const printHelp: () => void;
+/**
+ * Handle the --setup flag: choose provider and store API key.
+ */
+export declare const handleSetupCommand: () => Promise<void>;
+/**
+ * Handle the deprecated --set-key flag.
+ */
+export declare const handleSetKeyCommand: () => Promise<void>;
 /**
  * Handle the --update flag: check and apply updates interactively.
  */

package/dist/cli/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH;;GAEG;AACH,eAAO,MAAM,YAAY,QAAO,IAE/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,IAsC5B,CAAC;AAsBF;;GAEG;AACH,eAAO,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAqCxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,IAAI,CA4C3D,CAAC"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;GAEG;AAoBH;;GAEG;AACH,eAAO,MAAM,YAAY,QAAO,IAE/B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,SAAS,QAAO,IA0C5B,CAAC;AAYF;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,IAAI,CAmEvD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAGxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,mBAAmB,QAAa,OAAO,CAAC,IAAI,CAmCxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,QAAa,OAAO,CAAC,IAAI,CAoD3D,CAAC"}

package/dist/cli/commands.js

@@ -1,12 +1,15 @@
 /**
- * CLI command handlers for --version, --help, --update, and --uninstall.
+ * CLI command handlers for --version, --help, --setup, --update, and --uninstall.
  */
 import * as fs from "node:fs";
 import * as path from "node:path";
 import * as os from "node:os";
+import * as clack from "@clack/prompts";
 import { VERSION, GITHUB_REPO, BINARY_NAME } from "../version.js";
 import { checkForUpdate, performUpdate } from "./updater.js";
 import { removeFromPath } from "./shell.js";
+import { getApiKey, setApiKey, getActiveProvider, setActiveProvider, getModel, setModel, deleteAllCredentials, } from "../keychain.js";
+import { providerList } from "../providers/registry.js";
 /**
  * Print version information.
  */
@@ -20,19 +23,26 @@ export const printHelp = () => {
     console.log(`
 ${BINARY_NAME} v${VERSION}
 
-MCP server for analyzing PDF documents using Gemini AI.
+MCP server for analyzing PDF documents using AI.
+Supports Google Gemini, Anthropic Claude, and OpenAI.
 
 USAGE:
   ${BINARY_NAME} [OPTIONS]
 
 OPTIONS:
   --version, -v    Print version and exit
+  --setup          Choose an LLM provider and store your API key
+  --set-key        Alias for --setup (deprecated)
   --update         Check for updates and apply if available
   --uninstall      Remove ${BINARY_NAME} from the system
   --help, -h       Show this help message
 
-ENVIRONMENT VARIABLES:
-  GEMINI_API_KEY        Required. Your Gemini API key from Google AI Studio.
+PROVIDER SETUP:
+  ${BINARY_NAME} --setup
+
+  Lets you choose a provider (Google Gemini, Anthropic Claude, or OpenAI)
+  and stores your API key in the OS credential store (macOS Keychain,
+  Windows Credential Manager, or Linux secret-tool).
 
 INSTALLATION:
   curl -fsSL https://raw.githubusercontent.com/${GITHUB_REPO}/main/install.sh | bash
@@ -41,10 +51,7 @@ MCP CONFIGURATION:
   {
     "mcpServers": {
       "pdf-analyzer": {
-        "command": "${BINARY_NAME}",
-        "env": {
-          "GEMINI_API_KEY": "your-api-key-here"
-        }
+        "command": "${BINARY_NAME}"
       }
     }
   }
@@ -54,21 +61,80 @@ MORE INFO:
 `.trim());
 };
 /**
- * Simple confirmation prompt for terminal.
+ * Check if a clack prompt was cancelled (Ctrl+C).
+ */
+function assertNotCancelled(value) {
+    if (clack.isCancel(value)) {
+        clack.cancel("Setup cancelled.");
+        process.exit(0);
+    }
+}
+/**
+ * Handle the --setup flag: choose provider and store API key.
  */
-const confirm = async (message) => {
-    return new Promise((resolve) => {
-        process.stdout.write(`${message} [y/N] `);
-        const onData = (data) => {
-            const answer = data.toString().trim().toLowerCase();
-            process.stdin.removeListener("data", onData);
-            process.stdin.pause();
-            resolve(answer === "y" || answer === "yes");
-        };
-        process.stdin.resume();
-        process.stdin.setEncoding("utf8");
-        process.stdin.once("data", onData);
+export const handleSetupCommand = async () => {
+    clack.intro("pdf-analyzer setup");
+    const existingProvider = getActiveProvider();
+    const existingKey = getApiKey();
+    const existingModel = getModel();
+    if (existingProvider && existingKey) {
+        const providerConfig = providerList.find((p) => p.id === existingProvider);
+        const providerName = providerConfig?.displayName ?? existingProvider;
+        const modelName = providerConfig?.models.find((m) => m.id === existingModel)?.displayName ?? existingModel;
+        const shouldReconfigure = await clack.confirm({
+            message: `Already configured with ${providerName} (${modelName}). Reconfigure?`,
+        });
+        assertNotCancelled(shouldReconfigure);
+        if (!shouldReconfigure) {
+            clack.outro("No changes made.");
+            return;
+        }
+    }
+    const providerId = await clack.select({
+        message: "Choose your LLM provider",
+        options: providerList.map((p) => ({
+            value: p.id,
+            label: p.displayName,
+        })),
+    });
+    assertNotCancelled(providerId);
+    const selected = providerList.find((p) => p.id === providerId);
+    const modelId = await clack.select({
+        message: "Choose a model",
+        options: selected.models.map((m) => ({
+            value: m.id,
+            label: `${m.displayName} - ${m.hint}`,
+        })),
     });
+    assertNotCancelled(modelId);
+    const selectedModel = selected.models.find((m) => m.id === modelId);
+    clack.note(`Model: ${selectedModel.displayName} (${modelId})\nGet your API key from: ${selected.apiKeyUrl}`, selected.displayName);
+    const key = await clack.password({
+        message: "Enter your API key",
+        validate: (value) => {
+            if (!value)
+                return "API key is required";
+        },
+    });
+    assertNotCancelled(key);
+    try {
+        setActiveProvider(selected.id);
+        setModel(modelId);
+        setApiKey(key);
+        clack.outro(`${selected.displayName} (${selectedModel.displayName}) configured successfully.`);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        clack.cancel(`Failed to store credentials: ${message}`);
+        process.exit(1);
+    }
+};
+/**
+ * Handle the deprecated --set-key flag.
+ */
+export const handleSetKeyCommand = async () => {
+    clack.log.warn("--set-key is deprecated. Use --setup instead.");
+    await handleSetupCommand();
 };
 /**
  * Handle the --update flag: check and apply updates interactively.
@@ -89,15 +155,13 @@ export const handleUpdateCommand = async () => {
         console.error("Update available but no download URL found for your platform");
         process.exit(1);
     }
-    console.log(`Update available: ${VERSION} → ${check.latestVersion}`);
+    console.log(`Update available: ${VERSION} -> ${check.latestVersion}`);
     console.log("Downloading...");
     const result = await performUpdate(check.downloadUrl, check.latestVersion);
     if (!result.success) {
         console.error(`Update failed: ${result.error}`);
         process.exit(1);
     }
-    // On Windows, we need to ensure stdout is flushed before exiting
-    // because replacing the running executable can cause issues
     const message = `Successfully updated to ${result.newVersion}\n`;
     await new Promise((resolve) => {
         process.stdout.write(message, () => resolve());
@@ -115,13 +179,20 @@ export const handleUninstallCommand = async () => {
     console.log(`  - Binary: ${binaryPath}`);
     console.log(`  - Directory: ${installDir}`);
     console.log("  - PATH entries from shell config files");
+    console.log("  - Stored credentials from OS credential store");
     console.log("");
-    const confirmed = await confirm("Are you sure you want to uninstall?");
+    const confirmed = await clack.confirm({
+        message: "Are you sure you want to uninstall?",
+    });
+    assertNotCancelled(confirmed);
     if (!confirmed) {
         console.log("Uninstall cancelled.");
         return;
     }
     console.log("");
+    // Remove all stored credentials
+    deleteAllCredentials();
+    console.log("Removed stored credentials");
     // Remove PATH entries from shell rc files
     const modifiedFiles = removeFromPath();
     if (modifiedFiles.length > 0) {

package/dist/cli/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAS,EAAE;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAS,EAAE;IAClC,OAAO,CAAC,GAAG,CACT;EACF,WAAW,KAAK,OAAO;;;;;IAKrB,WAAW;;;;;4BAKa,WAAW;;;;;;;iDAOU,WAAW;;;;;;sBAMtC,WAAW;;;;;;;;;uBASV,WAAW;CACjC,CAAC,IAAI,EAAE,CACL,CAAC;AACJ,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,GAAG,KAAK,EAAE,OAAe,EAAoB,EAAE;IAC1D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,SAAS,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;IAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,MAAM,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAE3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iEAAiE;IACjE,4DAA4D;IAC5D,MAAM,OAAO,GAAG,2BAA2B,MAAM,CAAC,UAAU,IAAI,CAAC;IACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,oBAAoB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAEvE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,0CAA0C;IAC1C,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC;IACvC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CACT,kDAAkD,WAAW,yBAAyB,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/cli/commands.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EACL,SAAS,EACT,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,GAAS,EAAE;IACrC,OAAO,CAAC,GAAG,CAAC,GAAG,WAAW,KAAK,OAAO,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,GAAS,EAAE;IAClC,OAAO,CAAC,GAAG,CACT;EACF,WAAW,KAAK,OAAO;;;;;;IAMrB,WAAW;;;;;;;4BAOa,WAAW;;;;IAInC,WAAW;;;;;;;iDAOkC,WAAW;;;;;;sBAMtC,WAAW;;;;;;uBAMV,WAAW;CACjC,CAAC,IAAI,EAAE,CACL,CAAC;AACJ,CAAC,CAAC;AAEF;;GAEG;AACH,SAAS,kBAAkB,CAAI,KAAiB;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,IAAmB,EAAE;IAC1D,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAElC,MAAM,gBAAgB,GAAG,iBAAiB,EAAE,CAAC;IAC7C,MAAM,WAAW,GAAG,SAAS,EAAE,CAAC;IAChC,MAAM,aAAa,GAAG,QAAQ,EAAE,CAAC;IAEjC,IAAI,gBAAgB,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,gBAAgB,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,cAAc,EAAE,WAAW,IAAI,gBAAgB,CAAC;QACrE,MAAM,SAAS,GACb,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,aAAa,CAAC,EAAE,WAAW,IAAI,aAAa,CAAC;QAC3F,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YAC5C,OAAO,EAAE,2BAA2B,YAAY,KAAK,SAAS,iBAAiB;SAChF,CAAC,CAAC;QACH,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACtC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,KAAK,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QACpC,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,WAAW;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAE/B,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAE,CAAC;IAEhE,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;QACjC,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,IAAI,EAAE;SACtC,CAAC,CAAC;KACJ,CAAC,CAAC;IACH,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5B,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC;IAErE,KAAK,CAAC,IAAI,CACR,UAAU,aAAa,CAAC,WAAW,KAAK,OAAO,6BAA6B,QAAQ,CAAC,SAAS,EAAE,EAChG,QAAQ,CAAC,WAAW,CACrB,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;QAC/B,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,qBAAqB,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAExB,IAAI,CAAC;QACH,iBAAiB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClB,SAAS,CAAC,GAAG,CAAC,CAAC;QACf,KAAK,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,WAAW,KAAK,aAAa,CAAC,WAAW,4BAA4B,CAAC,CAAC;IACjG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,KAAK,CAAC,MAAM,CAAC,gCAAgC,OAAO,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;IAC3D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAChE,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,IAAmB,EAAE;IAC3D,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,KAAK,GAAG,MAAM,cAAc,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,CAAC,KAAK,CAAC,+BAA+B,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,uBAAuB,OAAO,GAAG,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,OAAO,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAE3E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,2BAA2B,MAAM,CAAC,UAAU,IAAI,CAAC;IACjE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,IAAmB,EAAE;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAE7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,WAAW,oBAAoB,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACpC,OAAO,EAAE,qCAAqC;KAC/C,CAAC,CAAC;IACH,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,gCAAgC;IAChC,oBAAoB,EAAE,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAE1C,0CAA0C;IAC1C,MAAM,aAAa,GAAG,cAAc,EAAE,CAAC;IACvC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,oCAAoC;IACpC,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CACT,kDAAkD,WAAW,yBAAyB,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC,CAAC"}

package/dist/index.d.ts

@@ -7,12 +7,11 @@
  *
  * CLI flags:
  *   --version, -v    Print version and exit
+ *   --setup          Choose LLM provider and store API key
+ *   --set-key        Deprecated alias for --setup
  *   --update         Check for updates and apply if available
  *   --uninstall      Remove pdf-analyzer from the system
  *   --help, -h       Show help
- *
- * Environment variables:
- *   GEMINI_API_KEY        Required. Your Gemini API key.
  */
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;GAaG"}

package/dist/index.js

@@ -7,15 +7,14 @@
  *
  * CLI flags:
  *   --version, -v    Print version and exit
+ *   --setup          Choose LLM provider and store API key
+ *   --set-key        Deprecated alias for --setup
  *   --update         Check for updates and apply if available
  *   --uninstall      Remove pdf-analyzer from the system
  *   --help, -h       Show help
- *
- * Environment variables:
- *   GEMINI_API_KEY        Required. Your Gemini API key.
  */
 import { autoUpdate, reexec } from "./cli/updater.js";
-import { printVersion, printHelp, handleUpdateCommand, handleUninstallCommand, } from "./cli/commands.js";
+import { printVersion, printHelp, handleSetupCommand, handleSetKeyCommand, handleUpdateCommand, handleUninstallCommand, } from "./cli/commands.js";
 import { runServer } from "./server.js";
 /**
  * Main entry point for the PDF Analyzer MCP server.
@@ -32,6 +31,16 @@ const main = async () => {
         printHelp();
         return;
     }
+    // Handle --setup
+    if (args.includes("--setup")) {
+        await handleSetupCommand();
+        return;
+    }
+    // Handle --set-key (deprecated alias)
+    if (args.includes("--set-key")) {
+        await handleSetKeyCommand();
+        return;
+    }
     // Handle --update
     if (args.includes("--update")) {
         await handleUpdateCommand();

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,YAAY,EACZ,SAAS,EACT,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;GAEG;AACH,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,YAAY,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,sBAAsB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC;IAED,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EACL,YAAY,EACZ,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC;;GAEG;AACH,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,wBAAwB;IACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,YAAY,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,kBAAkB,EAAE,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,sCAAsC;IACtC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,kBAAkB;IAClB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,mBAAmB,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,MAAM,sBAAsB,EAAE,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,mFAAmF;IACnF,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,+BAA+B;IAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,CAAC;IACX,CAAC;IAED,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/keychain.d.ts

@@ -0,0 +1,34 @@
+/**
+ * OS-native credential storage.
+ *
+ * Uses platform CLI tools (no native addons) so it works with Bun-compiled binaries.
+ * - macOS: `security` CLI (Keychain Access)
+ * - Windows: `cmdkey` + PowerShell (Credential Manager)
+ * - Linux: `secret-tool` (libsecret), if available
+ */
+/**
+ * Escape a string for safe use as a shell argument.
+ * Wraps in single quotes and escapes any embedded single quotes.
+ */
+export declare function escapeShellArg(arg: string): string;
+/** Read a value from the OS credential store. */
+export declare function getStoredValue(account: string, service?: string): string | null;
+/** Write a value to the OS credential store. */
+export declare function setStoredValue(account: string, value: string, service?: string): void;
+/** Remove a value from the OS credential store (best-effort). */
+export declare function deleteStoredValue(account: string, service?: string): void;
+/** Get the active provider ID. Returns null if not set. */
+export declare function getActiveProvider(): string | null;
+/** Store the active provider ID. */
+export declare function setActiveProvider(providerId: string): void;
+/** Get the stored API key. Returns null if not found. */
+export declare function getApiKey(): string | null;
+/** Store the API key. */
+export declare function setApiKey(key: string): void;
+/** Get the stored model ID. Returns null if not set. */
+export declare function getModel(): string | null;
+/** Store the selected model ID. */
+export declare function setModel(modelId: string): void;
+/** Delete all stored credentials (provider + API key + model). Best-effort. */
+export declare function deleteAllCredentials(): void;
+//# sourceMappingURL=keychain.d.ts.map

package/dist/keychain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.d.ts","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AA2ID,iDAAiD;AACjD,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAwB,GAAG,MAAM,GAAG,IAAI,CAWhG;AAED,gDAAgD;AAChD,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,MAAwB,GAChC,IAAI,CAcN;AAED,iEAAiE;AACjE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAwB,GAAG,IAAI,CAe1F;AAUD,2DAA2D;AAC3D,wBAAgB,iBAAiB,IAAI,MAAM,GAAG,IAAI,CAEjD;AAED,oCAAoC;AACpC,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAE1D;AAED,yDAAyD;AACzD,wBAAgB,SAAS,IAAI,MAAM,GAAG,IAAI,CAEzC;AAED,yBAAyB;AACzB,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE3C;AAED,wDAAwD;AACxD,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAExC;AAED,mCAAmC;AACnC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED,+EAA+E;AAC/E,wBAAgB,oBAAoB,IAAI,IAAI,CAI3C"}

package/dist/keychain.js

@@ -0,0 +1,208 @@
+/**
+ * OS-native credential storage.
+ *
+ * Uses platform CLI tools (no native addons) so it works with Bun-compiled binaries.
+ * - macOS: `security` CLI (Keychain Access)
+ * - Windows: `cmdkey` + PowerShell (Credential Manager)
+ * - Linux: `secret-tool` (libsecret), if available
+ */
+import { execSync } from "node:child_process";
+const DEFAULT_SERVICE = "pdf-analyzer";
+/** Stdio config that prevents credential leaks to MCP stdio transport. */
+const SILENT_STDIO = ["pipe", "pipe", "pipe"];
+/**
+ * Escape a string for safe use as a shell argument.
+ * Wraps in single quotes and escapes any embedded single quotes.
+ */
+export function escapeShellArg(arg) {
+    return `'${arg.replace(/'/g, "'\\''")}'`;
+}
+// ---------------------------------------------------------------------------
+// macOS (Keychain)
+// ---------------------------------------------------------------------------
+function getMacOS(service, account) {
+    try {
+        return execSync(`security find-generic-password -s ${escapeShellArg(service)} -a ${escapeShellArg(account)} -w`, { stdio: SILENT_STDIO, encoding: "utf-8" }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function setMacOS(service, account, value) {
+    execSync(`security add-generic-password -s ${escapeShellArg(service)} -a ${escapeShellArg(account)} -w ${escapeShellArg(value)} -U`, { stdio: SILENT_STDIO });
+}
+function deleteMacOS(service, account) {
+    try {
+        execSync(`security delete-generic-password -s ${escapeShellArg(service)} -a ${escapeShellArg(account)}`, { stdio: SILENT_STDIO });
+    }
+    catch {
+        // Credential may not exist; ignore
+    }
+}
+// ---------------------------------------------------------------------------
+// Windows (Credential Manager)
+// ---------------------------------------------------------------------------
+/** Build a Windows credential target from service + account. */
+function winTarget(service, account) {
+    return `${service}/${account}`;
+}
+function getWindows(service, account) {
+    try {
+        const target = winTarget(service, account);
+        const script = `
+Add-Type -Namespace Win32 -Name Cred -MemberDefinition @'
+[DllImport("advapi32.dll", SetLastError=true, CharSet=CharSet.Unicode)]
+public static extern bool CredRead(string target, int type, int flags, out IntPtr cred);
+[DllImport("advapi32.dll")]
+public static extern void CredFree(IntPtr cred);
+[StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)]
+public struct CREDENTIAL {
+  public int Flags; public int Type; public string TargetName;
+  public string Comment; public long LastWritten; public int CredentialBlobSize;
+  public IntPtr CredentialBlob; public int Persist; public int AttributeCount;
+  public IntPtr Attributes; public string TargetAlias; public string UserName;
+}
+'@
+$ptr = [IntPtr]::Zero
+if ([Win32.Cred]::CredRead("${target}", 1, 0, [ref]$ptr)) {
+  $c = [Runtime.InteropServices.Marshal]::PtrToStructure($ptr, [Type][Win32.Cred+CREDENTIAL])
+  $secret = [Runtime.InteropServices.Marshal]::PtrToStringUni($c.CredentialBlob, $c.CredentialBlobSize/2)
+  [Win32.Cred]::CredFree($ptr)
+  Write-Output $secret
+}`;
+        return (execSync(`powershell -NoProfile -Command "${script.replace(/"/g, '\\"')}"`, {
+            stdio: SILENT_STDIO,
+            encoding: "utf-8",
+        }).trim() || null);
+    }
+    catch {
+        return null;
+    }
+}
+function setWindows(service, account, value) {
+    const target = winTarget(service, account);
+    execSync(`cmdkey /generic:${target} /user:${account} /pass:${escapeShellArg(value)}`, {
+        stdio: SILENT_STDIO,
+        shell: "cmd.exe",
+    });
+}
+function deleteWindows(service, account) {
+    try {
+        const target = winTarget(service, account);
+        execSync(`cmdkey /delete:${target}`, {
+            stdio: SILENT_STDIO,
+            shell: "cmd.exe",
+        });
+    }
+    catch {
+        // Credential may not exist; ignore
+    }
+}
+// ---------------------------------------------------------------------------
+// Linux (libsecret / secret-tool)
+// ---------------------------------------------------------------------------
+function getLinux(service, account) {
+    try {
+        return (execSync(`secret-tool lookup service ${escapeShellArg(service)} username ${escapeShellArg(account)}`, { stdio: SILENT_STDIO, encoding: "utf-8" }).trim() || null);
+    }
+    catch {
+        return null;
+    }
+}
+function setLinux(service, account, value) {
+    execSync(`echo -n ${escapeShellArg(value)} | secret-tool store --label=${escapeShellArg(service)} service ${escapeShellArg(service)} username ${escapeShellArg(account)}`, { stdio: SILENT_STDIO });
+}
+function deleteLinux(service, account) {
+    try {
+        execSync(`secret-tool clear service ${escapeShellArg(service)} username ${escapeShellArg(account)}`, { stdio: SILENT_STDIO });
+    }
+    catch {
+        // Credential may not exist or secret-tool unavailable; ignore
+    }
+}
+// ---------------------------------------------------------------------------
+// Generic credential operations
+// ---------------------------------------------------------------------------
+/** Read a value from the OS credential store. */
+export function getStoredValue(account, service = DEFAULT_SERVICE) {
+    switch (process.platform) {
+        case "darwin":
+            return getMacOS(service, account);
+        case "win32":
+            return getWindows(service, account);
+        case "linux":
+            return getLinux(service, account);
+        default:
+            return null;
+    }
+}
+/** Write a value to the OS credential store. */
+export function setStoredValue(account, value, service = DEFAULT_SERVICE) {
+    switch (process.platform) {
+        case "darwin":
+            setMacOS(service, account, value);
+            break;
+        case "win32":
+            setWindows(service, account, value);
+            break;
+        case "linux":
+            setLinux(service, account, value);
+            break;
+        default:
+            throw new Error(`Credential storage is not supported on ${process.platform}`);
+    }
+}
+/** Remove a value from the OS credential store (best-effort). */
+export function deleteStoredValue(account, service = DEFAULT_SERVICE) {
+    switch (process.platform) {
+        case "darwin":
+            deleteMacOS(service, account);
+            break;
+        case "win32":
+            deleteWindows(service, account);
+            break;
+        case "linux":
+            deleteLinux(service, account);
+            break;
+        default:
+            // No-op on unsupported platforms
+            break;
+    }
+}
+// ---------------------------------------------------------------------------
+// Convenience API for provider and API key storage
+// ---------------------------------------------------------------------------
+const PROVIDER_ACCOUNT = "PROVIDER";
+const API_KEY_ACCOUNT = "API_KEY";
+const MODEL_ACCOUNT = "MODEL";
+/** Get the active provider ID. Returns null if not set. */
+export function getActiveProvider() {
+    return getStoredValue(PROVIDER_ACCOUNT);
+}
+/** Store the active provider ID. */
+export function setActiveProvider(providerId) {
+    setStoredValue(PROVIDER_ACCOUNT, providerId);
+}
+/** Get the stored API key. Returns null if not found. */
+export function getApiKey() {
+    return getStoredValue(API_KEY_ACCOUNT);
+}
+/** Store the API key. */
+export function setApiKey(key) {
+    setStoredValue(API_KEY_ACCOUNT, key);
+}
+/** Get the stored model ID. Returns null if not set. */
+export function getModel() {
+    return getStoredValue(MODEL_ACCOUNT);
+}
+/** Store the selected model ID. */
+export function setModel(modelId) {
+    setStoredValue(MODEL_ACCOUNT, modelId);
+}
+/** Delete all stored credentials (provider + API key + model). Best-effort. */
+export function deleteAllCredentials() {
+    deleteStoredValue(PROVIDER_ACCOUNT);
+    deleteStoredValue(API_KEY_ACCOUNT);
+    deleteStoredValue(MODEL_ACCOUNT);
+}
+//# sourceMappingURL=keychain.js.map

package/dist/keychain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain.js","sourceRoot":"","sources":["../src/keychain.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,MAAM,eAAe,GAAG,cAAc,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,YAAY,GAA6B,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAExE;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,QAAQ,CACb,qCAAqC,cAAc,CAAC,OAAO,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAC/F,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC,IAAI,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IAC/D,QAAQ,CACN,oCAAoC,cAAc,CAAC,OAAO,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,OAAO,cAAc,CAAC,KAAK,CAAC,KAAK,EAC1H,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe;IACnD,IAAI,CAAC;QACH,QAAQ,CACN,uCAAuC,cAAc,CAAC,OAAO,CAAC,OAAO,cAAc,CAAC,OAAO,CAAC,EAAE,EAC9F,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,gEAAgE;AAChE,SAAS,SAAS,CAAC,OAAe,EAAE,OAAe;IACjD,OAAO,GAAG,OAAO,IAAI,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,OAAe;IAClD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;8BAeW,MAAM;;;;;EAKlC,CAAC;QAEC,OAAO,CACL,QAAQ,CAAC,mCAAmC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE;YAC1E,KAAK,EAAE,YAAY;YACnB,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAClB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,mBAAmB,MAAM,UAAU,OAAO,UAAU,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE;QACpF,KAAK,EAAE,YAAY;QACnB,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,OAAe;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC3C,QAAQ,CAAC,kBAAkB,MAAM,EAAE,EAAE;YACnC,KAAK,EAAE,YAAY;YACnB,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,kCAAkC;AAClC,8EAA8E;AAE9E,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,CACL,QAAQ,CACN,8BAA8B,cAAc,CAAC,OAAO,CAAC,aAAa,cAAc,CAAC,OAAO,CAAC,EAAE,EAC3F,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,CAC3C,CAAC,IAAI,EAAE,IAAI,IAAI,CACjB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,OAAe,EAAE,KAAa;IAC/D,QAAQ,CACN,WAAW,cAAc,CAAC,KAAK,CAAC,gCAAgC,cAAc,CAAC,OAAO,CAAC,YAAY,cAAc,CAAC,OAAO,CAAC,aAAa,cAAc,CAAC,OAAO,CAAC,EAAE,EAChK,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,OAAe;IACnD,IAAI,CAAC;QACH,QAAQ,CACN,6BAA6B,cAAc,CAAC,OAAO,CAAC,aAAa,cAAc,CAAC,OAAO,CAAC,EAAE,EAC1F,EAAE,KAAK,EAAE,YAAY,EAAE,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAkB,eAAe;IAC/E,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,cAAc,CAC5B,OAAe,EACf,KAAa,EACb,UAAkB,eAAe;IAEjC,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM;QACR,KAAK,OAAO;YACV,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,OAAO;YACV,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAClC,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAAkB,eAAe;IAClF,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,QAAQ;YACX,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,OAAO;YACV,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,MAAM;QACR,KAAK,OAAO;YACV,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM;QACR;YACE,iCAAiC;YACjC,MAAM;IACV,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,2DAA2D;AAC3D,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,gBAAgB,CAAC,CAAC;AAC1C,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,cAAc,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAC/C,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,SAAS;IACvB,OAAO,cAAc,CAAC,eAAe,CAAC,CAAC;AACzC,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,cAAc,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,QAAQ;IACtB,OAAO,cAAc,CAAC,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,cAAc,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB;IAClC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACpC,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACnC,iBAAiB,CAAC,aAAa,CAAC,CAAC;AACnC,CAAC"}

package/dist/pdf-utils.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Shared PDF utility functions.
+ *
+ * Contains URL validation, path validation, and PDF fetching logic
+ * used by both the service layer and provider implementations.
+ */
+/**
+ * Check if a string is a Gemini File API URI.
+ */
+export declare function isGeminiFileUri(source: string): boolean;
+/**
+ * Check if a string is a URL (excluding Gemini File API URIs).
+ */
+export declare function isUrl(source: string): boolean;
+/**
+ * Validates a local PDF file path.
+ * Throws descriptive errors for common issues.
+ */
+export declare function validateLocalPath(pdfPath: string): void;
+/**
+ * Fetch PDF content from a URL with timeout.
+ */
+export declare function fetchPdfFromUrl(url: string): Promise<Buffer>;
+/**
+ * Read PDF bytes from a local file path.
+ */
+export declare function readPdfBytes(pdfPath: string): Buffer;
+//# sourceMappingURL=pdf-utils.d.ts.map

package/dist/pdf-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf-utils.d.ts","sourceRoot":"","sources":["../src/pdf-utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;GAEG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAU7C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAmBvD;AAKD;;GAEG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgClE;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGpD"}