Fixes
- CLI streaming: fall back to non-streaming summaries when a stream iterator times out before yielding text, without marking slide streaming complete on failed partial output.
- Core prompts: escape untrusted prompt context/content delimiters and make sponsor-only slide instructions compatible with mandatory slide headings.
- Link preview: reject unsafe direct-video URL schemes, detect YouTube privacy-enhanced embeds, and avoid stripping visible inline text with similar CSS property/value prefixes.
- Slides: reject traversal and symlinked cache image paths while preserving valid child paths that start with dot-dot text.
- Chrome extension: flush final SSE events when streams close without a blank delimiter.
- Tests: include
packages/core/srcin coverage collection so core package regressions affect the gate.
Release Proof
- Commit: e34ce25
- Gate:
pnpm -s checkpassed, 1872 tests, coverage thresholds green. - Pack verify:
bash scripts/release.sh verifypassed. - Bun smoke:
pnpm -s build:bun:testpassed;summarize --versionreported0.15.2 (e34ce25c). - Chrome zip:
dist-chrome/summarize-chrome-extension-v0.15.2.zip,unzip -tpassed. - Firefox zip:
dist-firefox/summarize-firefox-extension-v0.15.2.zip,unzip -tpassed. - npm CLI: https://www.npmjs.com/package/@steipete/summarize/v/0.15.2
- npm CLI tarball: https://registry.npmjs.org/@steipete/summarize/-/summarize-0.15.2.tgz
- npm CLI integrity:
sha512-kW4SeT7UlHAypcuIyVO3sg/z9SwNRQkT9c52ElDEqqSUQUW9iJcQ2JLPV/o/3HzEazOrlSzCg9WUH1CooZ34FQ== - npm CLI published: 2026-05-17T00:34:29.311Z, dist-tag
latest. - npm core: https://www.npmjs.com/package/@steipete/summarize-core/v/0.15.2
- npm core tarball: https://registry.npmjs.org/@steipete/summarize-core/-/summarize-core-0.15.2.tgz
- npm core integrity:
sha512-PQEbcXY12w0xnMRN5Q+AbBKwE7iowf8Wp2bMC4QtfDv8yXIckjxoUS3AWJ+dmeAlj8lka37l0dyzUg2F381YEA== - npm core published: 2026-05-17T00:34:20.209Z, dist-tag
latest. - npm smoke:
pnpm -s dlx @steipete/summarize@0.15.2 --versionreturned0.15.2; help smoke passed. - Bun arm64 sha256:
8945d6b8177fc7d28d21e691e56cf166793316121ecd2605a2bba10d8320b85c - Bun x64 sha256:
b6912a58ac697314fb4deaef510b167ab6763fa87b9edd564226b8b764ed0aca