zotero-plugin 5.0.21 → 5.0.22

package/bin/branches.js

@@ -37,7 +37,7 @@
     "node_modules/dotenv/package.json"(exports, module) {
       module.exports = {
         name: "dotenv",
-        version: "16.5.0",
+        version: "17.2.1",
         description: "Loads environment variables from .env file",
         main: "lib/main.js",
         types: "lib/main.d.ts",
@@ -60,7 +60,7 @@
           lint: "standard",
           pretest: "npm run lint && npm run dts-check",
           test: "tap run --allow-empty-coverage --disable-coverage --timeout=60000",
-          "test:coverage": "tap run --show-full-coverage --timeout=60000 --coverage-report=lcov",
+          "test:coverage": "tap run --show-full-coverage --timeout=60000 --coverage-report=text --coverage-report=lcov",
           prerelease: "npm test",
           release: "standard-version"
         },
@@ -109,6 +109,36 @@
       var crypto = __require("crypto");
       var packageJson = require_package();
       var version = packageJson.version;
+      var TIPS = [
+        "\u{1F510} encrypt with Dotenvx: https://dotenvx.com",
+        "\u{1F510} prevent committing .env to code: https://dotenvx.com/precommit",
+        "\u{1F510} prevent building .env in docker: https://dotenvx.com/prebuild",
+        "\u{1F4E1} observe env with Radar: https://dotenvx.com/radar",
+        "\u{1F4E1} auto-backup env with Radar: https://dotenvx.com/radar",
+        "\u{1F4E1} version env with Radar: https://dotenvx.com/radar",
+        "\u{1F6E0}\uFE0F  run anywhere with `dotenvx run -- yourcommand`",
+        "\u2699\uFE0F  specify custom .env file path with { path: '/custom/path/.env' }",
+        "\u2699\uFE0F  enable debug logging with { debug: true }",
+        "\u2699\uFE0F  override existing env vars with { override: true }",
+        "\u2699\uFE0F  suppress all logs with { quiet: true }",
+        "\u2699\uFE0F  write to custom object with { processEnv: myObject }",
+        "\u2699\uFE0F  load multiple .env files with { path: ['.env.local', '.env'] }"
+      ];
+      function _getRandomTip() {
+        return TIPS[Math.floor(Math.random() * TIPS.length)];
+      }
+      function parseBoolean(value) {
+        if (typeof value === "string") {
+          return !["false", "0", "no", "off", ""].includes(value.toLowerCase());
+        }
+        return Boolean(value);
+      }
+      function supportsAnsi() {
+        return process.stdout.isTTY;
+      }
+      function dim(text) {
+        return supportsAnsi() ? `\x1B[2m${text}\x1B[0m` : text;
+      }
       var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
       function parse2(src) {
         const obj = {};
@@ -130,8 +160,10 @@
         return obj;
       }
       function _parseVault(options) {
+        options = options || {};
         const vaultPath = _vaultPath(options);
-        const result = DotenvModule.configDotenv({ path: vaultPath });
+        options.path = vaultPath;
+        const result = DotenvModule.configDotenv(options);
         if (!result.parsed) {
           const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
           err.code = "MISSING_DATA";
@@ -155,11 +187,14 @@
         return DotenvModule.parse(decrypted);
       }
       function _warn(message) {
-        console.log(`[dotenv@${version}][WARN] ${message}`);
+        console.error(`[dotenv@${version}][WARN] ${message}`);
       }
       function _debug(message) {
         console.log(`[dotenv@${version}][DEBUG] ${message}`);
       }
+      function _log(message) {
+        console.log(`[dotenv@${version}] ${message}`);
+      }
       function _dotenvKey(options) {
         if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) {
           return options.DOTENV_KEY;
@@ -226,9 +261,10 @@
         return envPath[0] === "~" ? path2.join(os.homedir(), envPath.slice(1)) : envPath;
       }
       function _configVault(options) {
-        const debug = Boolean(options && options.debug);
-        if (debug) {
-          _debug("Loading env from encrypted .env.vault");
+        const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
+        const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options && options.quiet);
+        if (debug || !quiet) {
+          _log("Loading env from encrypted .env.vault");
         }
         const parsed = DotenvModule._parseVault(options);
         let processEnv = process.env;
@@ -241,7 +277,12 @@
       function configDotenv(options) {
         const dotenvPath = path2.resolve(process.cwd(), ".env");
         let encoding = "utf8";
-        const debug = Boolean(options && options.debug);
+        let processEnv = process.env;
+        if (options && options.processEnv != null) {
+          processEnv = options.processEnv;
+        }
+        let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options && options.debug);
+        let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options && options.quiet);
         if (options && options.encoding) {
           encoding = options.encoding;
         } else {
@@ -273,11 +314,25 @@
             lastError = e;
           }
         }
-        let processEnv = process.env;
-        if (options && options.processEnv != null) {
-          processEnv = options.processEnv;
+        const populated = DotenvModule.populate(processEnv, parsedAll, options);
+        debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
+        quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
+        if (debug || !quiet) {
+          const keysCount = Object.keys(populated).length;
+          const shortPaths = [];
+          for (const filePath of optionPaths) {
+            try {
+              const relative = path2.relative(process.cwd(), filePath);
+              shortPaths.push(relative);
+            } catch (e) {
+              if (debug) {
+                _debug(`Failed to load ${filePath} ${e.message}`);
+              }
+              lastError = e;
+            }
+          }
+          _log(`injecting env (${keysCount}) from ${shortPaths.join(",")} ${dim(`-- tip: ${_getRandomTip()}`)}`);
         }
-        DotenvModule.populate(processEnv, parsedAll, options);
         if (lastError) {
           return { parsed: parsedAll, error: lastError };
         } else {
@@ -325,6 +380,7 @@
       function populate(processEnv, parsed, options = {}) {
         const debug = Boolean(options && options.debug);
         const override = Boolean(options && options.override);
+        const populated = {};
         if (typeof parsed !== "object") {
           const err = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
           err.code = "OBJECT_REQUIRED";
@@ -334,6 +390,7 @@
           if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
             if (override === true) {
               processEnv[key] = parsed[key];
+              populated[key] = parsed[key];
             }
             if (debug) {
               if (override === true) {
@@ -344,8 +401,10 @@
             }
           } else {
             processEnv[key] = parsed[key];
+            populated[key] = parsed[key];
           }
         }
+        return populated;
       }
       var DotenvModule = {
         configDotenv,
@@ -377,6 +436,9 @@
       if (process.env.DOTENV_CONFIG_PATH != null) {
         options.path = process.env.DOTENV_CONFIG_PATH;
       }
+      if (process.env.DOTENV_CONFIG_QUIET != null) {
+        options.quiet = process.env.DOTENV_CONFIG_QUIET;
+      }
       if (process.env.DOTENV_CONFIG_DEBUG != null) {
         options.debug = process.env.DOTENV_CONFIG_DEBUG;
       }
@@ -393,15 +455,19 @@
   // node_modules/dotenv/lib/cli-options.js
   var require_cli_options = __commonJS({
     "node_modules/dotenv/lib/cli-options.js"(exports, module) {
-      var re = /^dotenv_config_(encoding|path|debug|override|DOTENV_KEY)=(.+)$/;
+      var re = /^dotenv_config_(encoding|path|quiet|debug|override|DOTENV_KEY)=(.+)$/;
       module.exports = function optionMatcher(args) {
-        return args.reduce(function(acc, cur) {
+        const options = args.reduce(function(acc, cur) {
           const matches = cur.match(re);
           if (matches) {
             acc[matches[1]] = matches[2];
           }
           return acc;
         }, {});
+        if (!("quiet" in options)) {
+          options.quiet = "true";
+        }
+        return options;
       };
     }
   });

package/bin/release.js

@@ -37,7 +37,7 @@
     "node_modules/dotenv/package.json"(exports, module) {
       module.exports = {
         name: "dotenv",
-        version: "16.5.0",
+        version: "17.2.1",
         description: "Loads environment variables from .env file",
         main: "lib/main.js",
         types: "lib/main.d.ts",
@@ -60,7 +60,7 @@
           lint: "standard",
           pretest: "npm run lint && npm run dts-check",
           test: "tap run --allow-empty-coverage --disable-coverage --timeout=60000",
-          "test:coverage": "tap run --show-full-coverage --timeout=60000 --coverage-report=lcov",
+          "test:coverage": "tap run --show-full-coverage --timeout=60000 --coverage-report=text --coverage-report=lcov",
           prerelease: "npm test",
           release: "standard-version"
         },
@@ -109,6 +109,36 @@
       var crypto = __require("crypto");
       var packageJson = require_package();
       var version2 = packageJson.version;
+      var TIPS = [
+        "\u{1F510} encrypt with Dotenvx: https://dotenvx.com",
+        "\u{1F510} prevent committing .env to code: https://dotenvx.com/precommit",
+        "\u{1F510} prevent building .env in docker: https://dotenvx.com/prebuild",
+        "\u{1F4E1} observe env with Radar: https://dotenvx.com/radar",
+        "\u{1F4E1} auto-backup env with Radar: https://dotenvx.com/radar",
+        "\u{1F4E1} version env with Radar: https://dotenvx.com/radar",
+        "\u{1F6E0}\uFE0F  run anywhere with `dotenvx run -- yourcommand`",
+        "\u2699\uFE0F  specify custom .env file path with { path: '/custom/path/.env' }",
+        "\u2699\uFE0F  enable debug logging with { debug: true }",
+        "\u2699\uFE0F  override existing env vars with { override: true }",
+        "\u2699\uFE0F  suppress all logs with { quiet: true }",
+        "\u2699\uFE0F  write to custom object with { processEnv: myObject }",
+        "\u2699\uFE0F  load multiple .env files with { path: ['.env.local', '.env'] }"
+      ];
+      function _getRandomTip() {
+        return TIPS[Math.floor(Math.random() * TIPS.length)];
+      }
+      function parseBoolean(value) {
+        if (typeof value === "string") {
+          return !["false", "0", "no", "off", ""].includes(value.toLowerCase());
+        }
+        return Boolean(value);
+      }
+      function supportsAnsi() {
+        return process.stdout.isTTY;
+      }
+      function dim(text) {
+        return supportsAnsi() ? `\x1B[2m${text}\x1B[0m` : text;
+      }
       var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
       function parse2(src) {
         const obj = {};
@@ -130,8 +160,10 @@
         return obj;
       }
       function _parseVault(options2) {
+        options2 = options2 || {};
         const vaultPath = _vaultPath(options2);
-        const result = DotenvModule.configDotenv({ path: vaultPath });
+        options2.path = vaultPath;
+        const result = DotenvModule.configDotenv(options2);
         if (!result.parsed) {
           const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
           err.code = "MISSING_DATA";
@@ -155,11 +187,14 @@
         return DotenvModule.parse(decrypted);
       }
       function _warn(message) {
-        console.log(`[dotenv@${version2}][WARN] ${message}`);
+        console.error(`[dotenv@${version2}][WARN] ${message}`);
       }
       function _debug(message) {
         console.log(`[dotenv@${version2}][DEBUG] ${message}`);
       }
+      function _log(message) {
+        console.log(`[dotenv@${version2}] ${message}`);
+      }
       function _dotenvKey(options2) {
         if (options2 && options2.DOTENV_KEY && options2.DOTENV_KEY.length > 0) {
           return options2.DOTENV_KEY;
@@ -226,9 +261,10 @@
         return envPath[0] === "~" ? path3.join(os2.homedir(), envPath.slice(1)) : envPath;
       }
       function _configVault(options2) {
-        const debug = Boolean(options2 && options2.debug);
-        if (debug) {
-          _debug("Loading env from encrypted .env.vault");
+        const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options2 && options2.debug);
+        const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options2 && options2.quiet);
+        if (debug || !quiet) {
+          _log("Loading env from encrypted .env.vault");
         }
         const parsed = DotenvModule._parseVault(options2);
         let processEnv = process.env;
@@ -241,7 +277,12 @@
       function configDotenv(options2) {
         const dotenvPath = path3.resolve(process.cwd(), ".env");
         let encoding = "utf8";
-        const debug = Boolean(options2 && options2.debug);
+        let processEnv = process.env;
+        if (options2 && options2.processEnv != null) {
+          processEnv = options2.processEnv;
+        }
+        let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options2 && options2.debug);
+        let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options2 && options2.quiet);
         if (options2 && options2.encoding) {
           encoding = options2.encoding;
         } else {
@@ -273,11 +314,25 @@
             lastError = e;
           }
         }
-        let processEnv = process.env;
-        if (options2 && options2.processEnv != null) {
-          processEnv = options2.processEnv;
+        const populated = DotenvModule.populate(processEnv, parsedAll, options2);
+        debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
+        quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
+        if (debug || !quiet) {
+          const keysCount = Object.keys(populated).length;
+          const shortPaths = [];
+          for (const filePath of optionPaths) {
+            try {
+              const relative = path3.relative(process.cwd(), filePath);
+              shortPaths.push(relative);
+            } catch (e) {
+              if (debug) {
+                _debug(`Failed to load ${filePath} ${e.message}`);
+              }
+              lastError = e;
+            }
+          }
+          _log(`injecting env (${keysCount}) from ${shortPaths.join(",")} ${dim(`-- tip: ${_getRandomTip()}`)}`);
         }
-        DotenvModule.populate(processEnv, parsedAll, options2);
         if (lastError) {
           return { parsed: parsedAll, error: lastError };
         } else {
@@ -325,6 +380,7 @@
       function populate(processEnv, parsed, options2 = {}) {
         const debug = Boolean(options2 && options2.debug);
         const override = Boolean(options2 && options2.override);
+        const populated = {};
         if (typeof parsed !== "object") {
           const err = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
           err.code = "OBJECT_REQUIRED";
@@ -334,6 +390,7 @@
           if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
             if (override === true) {
               processEnv[key] = parsed[key];
+              populated[key] = parsed[key];
             }
             if (debug) {
               if (override === true) {
@@ -344,8 +401,10 @@
             }
           } else {
             processEnv[key] = parsed[key];
+            populated[key] = parsed[key];
           }
         }
+        return populated;
       }
       var DotenvModule = {
         configDotenv,
@@ -377,6 +436,9 @@
       if (process.env.DOTENV_CONFIG_PATH != null) {
         options2.path = process.env.DOTENV_CONFIG_PATH;
       }
+      if (process.env.DOTENV_CONFIG_QUIET != null) {
+        options2.quiet = process.env.DOTENV_CONFIG_QUIET;
+      }
       if (process.env.DOTENV_CONFIG_DEBUG != null) {
         options2.debug = process.env.DOTENV_CONFIG_DEBUG;
       }
@@ -393,15 +455,19 @@
   // node_modules/dotenv/lib/cli-options.js
   var require_cli_options = __commonJS({
     "node_modules/dotenv/lib/cli-options.js"(exports, module) {
-      var re = /^dotenv_config_(encoding|path|debug|override|DOTENV_KEY)=(.+)$/;
+      var re = /^dotenv_config_(encoding|path|quiet|debug|override|DOTENV_KEY)=(.+)$/;
       module.exports = function optionMatcher(args) {
-        return args.reduce(function(acc, cur) {
+        const options2 = args.reduce(function(acc, cur) {
           const matches = cur.match(re);
           if (matches) {
             acc[matches[1]] = matches[2];
           }
           return acc;
         }, {});
+        if (!("quiet" in options2)) {
+          options2.quiet = "true";
+        }
+        return options2;
       };
     }
   });
@@ -8382,7 +8448,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
     "package.json"(exports, module) {
       module.exports = {
         name: "zotero-plugin",
-        version: "5.0.21",
+        version: "5.0.22",
         description: "Zotero plugin builder",
         homepage: "https://github.com/retorquere/zotero-plugin/wiki",
         bin: {
@@ -8412,21 +8478,22 @@ Expecting one of '${allowedValues.join("', '")}'`);
         dependencies: {
           "@octokit/rest": "^22.0.0",
           "@rgrove/parse-xml": "^4.2.0",
-          "@types/node": "^24.0.3",
+          "@types/node": "^24.1.0",
           "@xmldom/xmldom": "^0.9.8",
           ajv: "^8.17.1",
           "ajv-keywords": "^5.1.0",
           archiver: "^7.0.1",
           clp: "^4.0.13",
           commander: "^14.0.0",
-          dotenv: "^16.5.0",
+          dotenv: "^17.2.1",
           ejs: "^3.1.10",
           "fs-extra": "^11.3.0",
           glob: "^11.0.3",
           jsesc: "^3.1.0",
           lodash: "^4.17.21",
           moment: "^2.30.1",
-          peggy: "^5.0.4",
+          openpgp: "^6.2.0",
+          peggy: "^5.0.5",
           "properties-reader": "^2.3.0",
           pug: "^3.0.3",
           rimraf: "^6.0.1",
@@ -8462,7 +8529,6 @@ Expecting one of '${allowedValues.join("', '")}'`);
           "copy-assets.d.ts",
           "copy-assets.js",
           "error-report.pug",
-          "install.rdf.pug",
           "loader/json.d.ts",
           "loader/json.js",
           "loader/peggy.d.ts",
@@ -8473,11 +8539,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
           "make-dirs.d.ts",
           "make-dirs.js",
           "package.json",
-          "rdf.d.ts",
-          "rdf.js",
+          "manifest.d.ts",
+          "manifest.js",
           "root.d.ts",
           "root.js",
-          "update.rdf.pug",
           "version.d.ts",
           "version.js",
           "debug-log.js",
@@ -8491,8 +8556,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
           url: "https://github.com/retorquere/zotero-plugin/issues"
         },
         devDependencies: {
-          dprint: "^0.50.0",
-          esbuild: "^0.25.5"
+          "@openpgp/web-stream-tools": "^0.1.3",
+          dprint: "^0.50.1",
+          esbuild: "^0.25.8"
         }
       };
     }
@@ -12047,8 +12113,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
     const release = await getRelease(releases_tag, false);
     const assets = (await octokit.repos.listReleaseAssets({ owner, repo, release_id: release.data.id })).data;
     const updates = {
-      "update.rdf": (pkg.xpi?.minVersion || "6").match(/^6/) ? "application/rdf+xml" : "",
-      "updates.json": (pkg.xpi?.maxVersion || "7").match(/^7/) ? "application/json" : ""
+      "updates.json": "application/json"
     };
     for (const asset of assets) {
       if (asset.name in updates && updates[asset.name]) {

package/debug-log.d.ts

@@ -9,7 +9,7 @@ declare class DebugLogSender {
     private get zotero();
     convertLegacy(): void;
     private element;
-    register(plugin: string, preferences?: string[], pem?: string): void;
+    register(plugin: string, preferences?: string[], pubkey?: string): void;
     unregister(plugin: string): void;
     private alert;
     send(target: EventTarget): void;
@@ -17,8 +17,6 @@ declare class DebugLogSender {
     private preferences;
     private info;
     private rdf;
-    private publicKey;
-    private encrypt;
     private arrayBufferToBase64;
     private base64ToArrayBuffer;
 }

package/debug-log.js

@@ -55,7 +55,7 @@ class DebugLogSender {
         }
         return elt;
     }
-    register(plugin, preferences = [], pem = '') {
+    register(plugin, preferences = [], pubkey = '') {
         var _a, _b;
         this.convertLegacy();
         const label = 'Send debug log to bashupload.com';
@@ -75,7 +75,7 @@ class DebugLogSender {
                 label: plugin,
                 class: this.id.menuitem,
                 'data-preferences': JSON.stringify(preferences || []),
-                'data-pem': pem,
+                'data-pubkey': pubkey,
             }));
             menuitem.addEventListener('command', event => this.send(event.currentTarget));
         }
@@ -104,30 +104,23 @@ class DebugLogSender {
         const elt = target;
         const plugin = elt.getAttribute('label');
         const preferences = JSON.parse(elt.getAttribute('data-preferences'));
-        const pem = elt.getAttribute('data-pem');
-        this.sendAsync(plugin, preferences, pem).catch((err) => {
+        const pubkey = elt.getAttribute('data-pubkey');
+        this.sendAsync(plugin, preferences, pubkey).catch((err) => {
             this.alert('Debug log submission error', `${err}`); // eslint-disable-line @typescript-eslint/restrict-template-expressions
         });
     }
-    async sendAsync(plugin, preferences, pem) {
+    async sendAsync(plugin, preferences, pubkey = null) {
         await this.zotero.Schema.schemaUpdatePromise;
         const files = {};
         const enc = new TextEncoder();
         const key = this.zotero.Utilities.generateObjectKey();
-        let publicKey = pem ? await this.publicKey(pem) : null;
-        if (pem)
-            files[`${key}/pem.txt`] = enc.encode(pem);
         let log = [
             await this.info(preferences),
             this.zotero.getErrors(true).join('\n\n'),
             this.zotero.Debug.getConsoleViewerOutput().slice(-250000).join('\n'), // eslint-disable-line no-magic-numbers
         ].filter((txt) => txt).join('\n\n').trim();
-        if (publicKey)
-            log = await this.encrypt(publicKey, log);
         files[`${key}/debug.txt`] = enc.encode(log);
         let rdf = await this.rdf();
-        if (publicKey)
-            rdf = await this.encrypt(publicKey, rdf);
         if (rdf)
             files[`${key}/items.rdf`] = enc.encode(rdf);
         // do this runtime because Zotero is not defined at start for bootstrapped zoter6 plugins
@@ -135,7 +128,17 @@ class DebugLogSender {
         if (typeof FormData === 'undefined' && this.zotero.platformMajorVersion >= 102)
             Components.utils.importGlobalProperties(['FormData']);
         // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access
-        const zip = new Uint8Array(UZip.encode(files));
+        let zip = new Uint8Array(UZip.encode(files));
+        /*
+        if (pubkey) {
+          const publicKey = await openpgp.readKey({ armoredKey: pubkey })
+          const encrypted = await openpgp.encrypt({
+            message: await openpgp.createMessage({ binary: zip }),
+            encryptionKeys: publicKey,
+          })
+          zip = encrypted
+        }
+        */
         const blob = new Blob([zip], { type: 'application/zip' });
         // eslint-disable-next-line @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access
         const formData = new FormData();
@@ -219,20 +222,6 @@ class DebugLogSender {
             translation.translate(); // eslint-disable-line @typescript-eslint/no-unsafe-call
         });
     }
-    async publicKey(pem) {
-        const base64Key = pem
-            .replace('-----BEGIN PUBLIC KEY-----', '')
-            .replace('-----END PUBLIC KEY-----', '')
-            .replace(/\n/g, '');
-        const keyBuffer = this.base64ToArrayBuffer(base64Key);
-        return await crypto.subtle.importKey('spki', keyBuffer, { name: 'RSA-OAEP', hash: 'SHA-256' }, true, ['encrypt']);
-    }
-    async encrypt(publicKey, plaintext) {
-        const textEncoder = new TextEncoder();
-        const data = textEncoder.encode(plaintext);
-        const encrypted = await crypto.subtle.encrypt({ name: 'RSA-OAEP' }, publicKey, data);
-        return this.arrayBufferToBase64(encrypted);
-    }
     arrayBufferToBase64(buffer) {
         let binary = '';
         const bytes = new Uint8Array(buffer);

package/manifest.js

@@ -0,0 +1,104 @@
+"use strict";
+/* eslint-disable no-console, @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/restrict-template-expressions, no-magic-numbers */
+var _a, _b;
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+const fs = tslib_1.__importStar(require("fs"));
+const glob_1 = require("glob");
+const path = tslib_1.__importStar(require("path"));
+const properties_reader_1 = tslib_1.__importDefault(require("properties-reader"));
+const uri_templates_1 = tslib_1.__importDefault(require("uri-templates"));
+const root_1 = tslib_1.__importDefault(require("./root"));
+const version_1 = tslib_1.__importDefault(require("./version"));
+const pkg = Object.assign({}, require(path.join(root_1.default, 'package.json')));
+if (!pkg.id)
+    pkg.id = `${pkg.name.replace(/^zotero-/, '')}@${pkg.author.email.replace(/.*@/, '')}`.toLowerCase();
+if (pkg.xpi)
+    Object.assign(pkg, pkg.xpi);
+pkg.version = version_1.default;
+if (pkg.updateLink)
+    pkg.updateLink = (0, uri_templates_1.default)(pkg.updateLink).fill({ version: pkg.version });
+pkg.updateURL = `${pkg.xpi.releaseURL}update.rdf`;
+const translations = (0, glob_1.globSync)(path.join(root_1.default, 'locale/*/*.properties'));
+for (const translation of translations) {
+    const locale = path.basename(path.dirname(translation));
+    const properties = (0, properties_reader_1.default)(translation);
+    const description = properties.get('xpi.description');
+    if (!description)
+        continue;
+    if (locale === 'en-US') {
+        pkg.description = description;
+    }
+    else {
+        pkg.localizedDescriptions = pkg.localizedDescriptions || {};
+        pkg.localizedDescriptions[locale] = description;
+    }
+}
+const options_and_vars = Object.assign(Object.assign({ minVersion: '7.0.0', maxVersion: '8.*' }, pkg), { pretty: true });
+try {
+    Object.assign(options_and_vars, JSON.parse(fs.readFileSync(path.join(root_1.default, 'schema', 'supported.json'), 'utf8')));
+}
+catch (err) { // eslint-disable-line @typescript-eslint/no-unused-vars
+    // ignore
+}
+console.log('generating updates.json');
+fs.writeFileSync(path.join(root_1.default, 'gen/updates.json'), JSON.stringify({
+    addons: {
+        [pkg.id]: {
+            updates: [
+                {
+                    version: options_and_vars.version,
+                    update_link: options_and_vars.updateLink,
+                    applications: {
+                        zotero: {
+                            strict_min_version: options_and_vars.minVersion,
+                            strict_max_version: options_and_vars.maxVersion,
+                        },
+                    },
+                },
+            ],
+        },
+    },
+}, null, 2));
+const icons = [
+    { 48: (_b = (_a = pkg.xpi) === null || _a === void 0 ? void 0 : _a.iconURL) === null || _b === void 0 ? void 0 : _b.replace(/^chrome:\/\/[^/]+\//, '') },
+].filter(i => i[48]);
+const basename = pkg.id.replace(/@.*/, '');
+for (const i of [`content/skin/${basename}.png`, `skin/${basename}.png`, `${basename}.png`, 'icon.png']) {
+    icons.push({ 48: i });
+    icons.push({ 48: i.replace('/zotero-', '/') });
+}
+for (const i of [...icons]) {
+    icons.push({ 48: i[48].replace(/[.](svg|png)$/, ext => ({ '.svg': '.png', '.png': '.svg' }[ext])) });
+}
+for (const i of [...icons]) {
+    if (i[48].endsWith('.svg')) {
+        i[96] = i[48];
+    }
+    else {
+        i[96] = i[48].replace(/([.][^.]+)$/, '@2x$1');
+    }
+}
+const icon = icons.find(i => fs.existsSync(path.join(root_1.default, ...i[48].split('/'))));
+if (icon) {
+    options_and_vars.icons = {
+        48: icon[48],
+        96: fs.existsSync(path.join(root_1.default, ...icon[96].split('/'))) ? icon[96] : icon[48],
+    };
+}
+console.log('generating manifest.json');
+fs.writeFileSync(path.join(root_1.default, 'build/manifest.json'), JSON.stringify({
+    manifest_version: 2,
+    name: options_and_vars.name,
+    version: options_and_vars.version,
+    description: options_and_vars.description,
+    icons: options_and_vars.icons,
+    applications: {
+        zotero: {
+            id: options_and_vars.id,
+            update_url: options_and_vars.updateURL.replace('/update.rdf', '/updates.json'),
+            strict_min_version: '6.999',
+            strict_max_version: '7.*',
+        },
+    },
+}, null, 2));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zotero-plugin",
-  "version": "5.0.21",
+  "version": "5.0.22",
   "description": "Zotero plugin builder",
   "homepage": "https://github.com/retorquere/zotero-plugin/wiki",
   "bin": {
@@ -30,21 +30,22 @@
   "dependencies": {
     "@octokit/rest": "^22.0.0",
     "@rgrove/parse-xml": "^4.2.0",
-    "@types/node": "^24.0.3",
+    "@types/node": "^24.1.0",
     "@xmldom/xmldom": "^0.9.8",
     "ajv": "^8.17.1",
     "ajv-keywords": "^5.1.0",
     "archiver": "^7.0.1",
     "clp": "^4.0.13",
     "commander": "^14.0.0",
-    "dotenv": "^16.5.0",
+    "dotenv": "^17.2.1",
     "ejs": "^3.1.10",
     "fs-extra": "^11.3.0",
     "glob": "^11.0.3",
     "jsesc": "^3.1.0",
     "lodash": "^4.17.21",
     "moment": "^2.30.1",
-    "peggy": "^5.0.4",
+    "openpgp": "^6.2.0",
+    "peggy": "^5.0.5",
     "properties-reader": "^2.3.0",
     "pug": "^3.0.3",
     "rimraf": "^6.0.1",
@@ -80,7 +81,6 @@
     "copy-assets.d.ts",
     "copy-assets.js",
     "error-report.pug",
-    "install.rdf.pug",
     "loader/json.d.ts",
     "loader/json.js",
     "loader/peggy.d.ts",
@@ -91,11 +91,10 @@
     "make-dirs.d.ts",
     "make-dirs.js",
     "package.json",
-    "rdf.d.ts",
-    "rdf.js",
+    "manifest.d.ts",
+    "manifest.js",
     "root.d.ts",
     "root.js",
-    "update.rdf.pug",
     "version.d.ts",
     "version.js",
     "debug-log.js",
@@ -109,7 +108,8 @@
     "url": "https://github.com/retorquere/zotero-plugin/issues"
   },
   "devDependencies": {
-    "dprint": "^0.50.0",
-    "esbuild": "^0.25.5"
+    "@openpgp/web-stream-tools": "^0.1.3",
+    "dprint": "^0.50.1",
+    "esbuild": "^0.25.8"
   }
 }

package/install.rdf.pug

@@ -1,29 +0,0 @@
-doctype xml
-RDF(xmlns="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#")
-  Description(about="urn:mozilla:install-manifest")
-    em:name= name
-    em:description= description
-    if bootstrapped
-      em:bootstrap true
-    if localizedDescriptions
-      each localizedDescription, locale in localizedDescriptions
-        Description
-          em:locale= locale
-          em:name= name
-          em:description= localizedDescription
-    em:id= id
-    em:version= version
-    em:homepageURL= homepage
-    em:creator= author.name
-    if iconURL
-      em:iconURL= iconURL
-    if updateURL
-      em:updateURL= updateURL
-    em:type 2
-    if optionsURL
-      em:optionsURL= optionsURL
-    em:targetApplication
-      Description
-        em:id zotero@chnm.gmu.edu
-        em:minVersion= minVersion
-        em:maxVersion= maxVersion

package/rdf.js

@@ -1,117 +0,0 @@
-"use strict";
-/* eslint-disable no-console, @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-assignment, @typescript-eslint/restrict-template-expressions, no-magic-numbers */
-var _a, _b;
-Object.defineProperty(exports, "__esModule", { value: true });
-const tslib_1 = require("tslib");
-const fs = tslib_1.__importStar(require("fs"));
-const glob_1 = require("glob");
-const path = tslib_1.__importStar(require("path"));
-const pug = tslib_1.__importStar(require("pug"));
-const properties_reader_1 = tslib_1.__importDefault(require("properties-reader"));
-const uri_templates_1 = tslib_1.__importDefault(require("uri-templates"));
-const root_1 = tslib_1.__importDefault(require("./root"));
-const version_1 = tslib_1.__importDefault(require("./version"));
-const pkg = Object.assign({}, require(path.join(root_1.default, 'package.json')));
-if (!pkg.id)
-    pkg.id = `${pkg.name.replace(/^zotero-/, '')}@${pkg.author.email.replace(/.*@/, '')}`.toLowerCase();
-if (pkg.xpi)
-    Object.assign(pkg, pkg.xpi);
-pkg.version = version_1.default;
-if (pkg.updateLink)
-    pkg.updateLink = (0, uri_templates_1.default)(pkg.updateLink).fill({ version: pkg.version });
-pkg.updateURL = `${pkg.xpi.releaseURL}update.rdf`;
-const translations = (0, glob_1.globSync)(path.join(root_1.default, 'locale/*/*.properties'));
-for (const translation of translations) {
-    const locale = path.basename(path.dirname(translation));
-    const properties = (0, properties_reader_1.default)(translation);
-    const description = properties.get('xpi.description');
-    if (!description)
-        continue;
-    if (locale === 'en-US') {
-        pkg.description = description;
-    }
-    else {
-        pkg.localizedDescriptions = pkg.localizedDescriptions || {};
-        pkg.localizedDescriptions[locale] = description;
-    }
-}
-const options_and_vars = Object.assign(Object.assign({ minVersion: '6.0.9', maxVersion: '7.*' }, pkg), { pretty: true });
-try {
-    Object.assign(options_and_vars, JSON.parse(fs.readFileSync(path.join(root_1.default, 'schema', 'supported.json'), 'utf8')));
-}
-catch (err) { // eslint-disable-line @typescript-eslint/no-unused-vars
-    // ignore
-}
-if (options_and_vars.minVersion.match(/^6/)) {
-    let template;
-    console.log('generating install.rdf');
-    template = fs.readFileSync(path.join(__dirname, 'install.rdf.pug'), 'utf8');
-    template = pug.render(template, options_and_vars);
-    fs.writeFileSync(path.join(root_1.default, 'build/install.rdf'), template, { encoding: 'utf8' });
-    console.log('generating update.rdf');
-    template = fs.readFileSync(path.join(__dirname, 'update.rdf.pug'), 'utf8');
-    template = pug.render(template, options_and_vars);
-    fs.writeFileSync(path.join(root_1.default, 'gen/update.rdf'), template, { encoding: 'utf8' });
-}
-if (options_and_vars.maxVersion.match(/^7/)) {
-    console.log('generating updates.json');
-    fs.writeFileSync(path.join(root_1.default, 'gen/updates.json'), JSON.stringify({
-        addons: {
-            [pkg.id]: {
-                updates: [
-                    {
-                        version: options_and_vars.version,
-                        update_link: options_and_vars.updateLink,
-                        applications: {
-                            zotero: {
-                                strict_min_version: options_and_vars.minVersion.match(/^7/) ? options_and_vars.minVersion : '6.999',
-                            },
-                        },
-                    },
-                ],
-            },
-        },
-    }, null, 2));
-    const icons = [
-        { 48: (_b = (_a = pkg.xpi) === null || _a === void 0 ? void 0 : _a.iconURL) === null || _b === void 0 ? void 0 : _b.replace(/^chrome:\/\/[^/]+\//, '') },
-    ].filter(i => i[48]);
-    const basename = pkg.id.replace(/@.*/, '');
-    for (const i of [`content/skin/${basename}.png`, `skin/${basename}.png`, `${basename}.png`, 'icon.png']) {
-        icons.push({ 48: i });
-        icons.push({ 48: i.replace('/zotero-', '/') });
-    }
-    for (const i of [...icons]) {
-        icons.push({ 48: i[48].replace(/[.](svg|png)$/, ext => ({ '.svg': '.png', '.png': '.svg' }[ext])) });
-    }
-    for (const i of [...icons]) {
-        if (i[48].endsWith('.svg')) {
-            i[96] = i[48];
-        }
-        else {
-            i[96] = i[48].replace(/([.][^.]+)$/, '@2x$1');
-        }
-    }
-    const icon = icons.find(i => fs.existsSync(path.join(root_1.default, ...i[48].split('/'))));
-    if (icon) {
-        options_and_vars.icons = {
-            48: icon[48],
-            96: fs.existsSync(path.join(root_1.default, ...icon[96].split('/'))) ? icon[96] : icon[48],
-        };
-    }
-    console.log('generating manifest.json');
-    fs.writeFileSync(path.join(root_1.default, 'build/manifest.json'), JSON.stringify({
-        manifest_version: 2,
-        name: options_and_vars.name,
-        version: options_and_vars.version,
-        description: options_and_vars.description,
-        icons: options_and_vars.icons,
-        applications: {
-            zotero: {
-                id: options_and_vars.id,
-                update_url: options_and_vars.updateURL.replace('/update.rdf', '/updates.json'),
-                strict_min_version: '6.999',
-                strict_max_version: '7.*',
-            },
-        },
-    }, null, 2));
-}

package/update.rdf.pug

@@ -1,24 +0,0 @@
-doctype xml
-RDF:RDF(xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:em="http://www.mozilla.org/2004/em-rdf#")
-  RDF:Description(about=`urn:mozilla:extension:${id}`)
-    em:updates
-      RDF:Seq
-        RDF:li
-          RDF:Description
-            em:version= version
-            em:targetApplication
-              RDF:Description
-                em:id zotero@chnm.gmu.edu
-                em:minVersion= minVersion
-                em:maxVersion= maxVersion
-                em:updateLink= updateLink
-                if updateInfoURL
-                  em:updateInfoURL= updateInfoURL
-            em:targetApplication
-              RDF:Description
-                em:id juris-m@juris-m.github.io
-                em:minVersion= minVersion
-                em:maxVersion= maxVersion
-                em:updateLink= updateLink
-                if updateInfoURL
-                  em:updateInfoURL= updateInfoURL