Releases · vishnutskumar/zotero-ai-explain

Compatible with Zotero 8.0 through 9.99.99.

Highlights

Token streaming via Codex mcp-server (JSON-RPC over stdio) and Claude -p --output-format stream-json.
Popup citation jump-to-page: chunk-scoped [itemKey#chunkIndex] citations now carry per-chunk pageIndex and navigate the existing reader tab when the cited paper is already open.
Per-message citation lookups on the popup Conversation — older turns no longer re-resolve against newer turns' chunks, and two reader windows can't cross-contaminate via the shared retrieval channel (ChatRequest.correlationId plumbed through popup-controller.ts / sidebar-controller.ts).
Unified citation tokenizer under src/ui/citation-lookup.ts — popup, sidebar, and library-chat all share emitTextWithCitations + renderCitationAnchor. Hallucinated chunk-scoped tokens render as inert text on every surface. Per-call regex eliminates the shared lastIndex re-entrancy footgun.
Bundled LLM proxy hardening: bearer-token auth + Host/Origin gate + 1 MiB body cap. Body-cap now drains silently before responding with a structured 413 (no more client-side ECONNRESET); drain timeout (LLM_PROXY_DRAIN_TIMEOUT_MS, default 5 s) bounds half-open clients; close listeners on both overflow and happy paths settle abortive disconnects.
stdin-EOF self-shutdown so the proxy can't outlive Zotero (POSIX PR_SET_PDEATHSIG equivalent).
Comprehensive Node auto-detect + 5 Ubuntu/Linux portability fixes from a Codex MCP read-only review.

Manifest carries clean semver 0.4.0; no -dev suffix on this release.
One known cross-platform test flake on Windows ("process.exit unexpectedly called with '0'" in the F1 body-cap test) is a test-harness artifact, not a runtime defect — the proxy passes the body-cap contract on Linux + macOS and the underlying drain logic is platform-agnostic.

Full PR: #2