orbit-thread 1.2.0 → 1.2.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 1.2.1 — 12 October 2026
+
+- Fix Orbit Resume reporting "No verified milestones recorded" for valid handoffs that use `## Completed this session`. Resume now reads both headings.
+- Fix Orbit Resume reading only the first line of each handoff section; every section now runs to the next `##` heading or the end of the file (LF and CRLF), still capped at six entries.
+- `## Completed milestones` remains the canonical heading; when both exist the canonical section wins and entries are not duplicated.
+- No change to the handoff format, read-only behaviour, redaction, stale-handoff detection, 50-line limit or Git safety. Existing v1.2.0 installations and handoffs keep working; `orbit-thread update` refreshes the version.
+
 ## 1.2.0 — 12 October 2026
 
 - Add **Orbit Resume**, a third canonical skill that recovers project context at the start of a fresh Codex or Claude Code session from the latest usable handoff, current Git state and only the living docs the task needs.

package/docs/PUBLISHING.md

@@ -1,10 +1,10 @@
 # npm publication and releases
 
-Orbit Thread v1.2.0 adds Orbit Resume to the Orbit Thread line, which succeeded Orbit Handoff v1.0.x in v1.1.0.
+Orbit Thread v1.2.1 is a compatibility patch for Orbit Resume (v1.2.0 added Resume to the Orbit Thread line, which succeeded Orbit Handoff v1.0.x in v1.1.0).
 
-`orbit-thread@1.1.0` is already published. v1.2.0 is a new version.
+`orbit-thread@1.2.0` is already published. v1.2.1 is a new version.
 
-Historical `orbit-handoff@1.0.0`, `orbit-handoff@1.0.1` and `orbit-thread@1.1.0` releases are immutable. Do not republish, unpublish or move their release tags.
+Historical `orbit-handoff@1.0.0`, `orbit-handoff@1.0.1`, `orbit-thread@1.1.0` and `orbit-thread@1.2.0` releases are immutable. Do not republish, unpublish or move their release tags.
 
 The new primary package is:
 
@@ -35,11 +35,11 @@ claude plugin validate . --strict
 Inspect:
 
 ```text
-orbit-thread-1.2.0.tgz
-dist/orbit-thread-plugin-1.2.0.zip
+orbit-thread-1.2.1.tgz
+dist/orbit-thread-plugin-1.2.1.zip
 ```
 
-The npm tarball should contain 28 files (version 1.2.0, including `lib/resume.mjs` and `plugin/skills/orbit-resume/`). The plugin ZIP should contain the portable `plugin.json`, the three canonical skills and the listing icon. Neither should contain tests, `dist/`, credentials or other build residue.
+The npm tarball should contain 28 files (version 1.2.1, including `lib/resume.mjs` and `plugin/skills/orbit-resume/`). The plugin ZIP should contain the portable `plugin.json`, the three canonical skills and the listing icon. Neither should contain tests, `dist/`, credentials or other build residue.
 
 Confirm all three canonical skills are present:
 
@@ -56,7 +56,7 @@ and that the packed CLI can install, setup, configure, doctor, update and uninst
 After release checks pass:
 
 ```sh
-npm publish ./orbit-thread-1.2.0.tgz --access public --registry https://registry.npmjs.org/
+npm publish ./orbit-thread-1.2.1.tgz --access public --registry https://registry.npmjs.org/
 ```
 
 Complete npm's normal browser/2FA challenge if prompted. Never weaken npm account security to automate publication.
@@ -78,7 +78,7 @@ npx orbit-thread@latest doctor --agent both --scope project
 npx orbit-thread@latest uninstall --agent both --scope project --yes
 ```
 
-Also confirm `npx orbit-thread@latest resume` runs read-only in the disposable repository. Verify `latest` resolves to `1.2.0` and package metadata points to `shab1h-gh/orbit-thread`.
+Also confirm `npx orbit-thread@latest resume` runs read-only in the disposable repository. Verify `latest` resolves to `1.2.1` and package metadata points to `shab1h-gh/orbit-thread`.
 
 ## Existing Orbit Handoff users
 

package/docs/SUBMISSION.md

@@ -6,10 +6,10 @@ Provider-directory review is separate from npm, GitHub and standalone installati
 
 ## OpenAI / ChatGPT Plugins Directory
 
-Orbit Thread v1.2.0 is submitted as:
+Orbit Thread v1.2.1 is submitted as:
 
 ```text
-dist/orbit-thread-plugin-1.2.0.zip
+dist/orbit-thread-plugin-1.2.1.zip
 ```
 
 Build it with:
@@ -22,10 +22,10 @@ The ZIP contains portable `plugin.json`, all three canonical skills, OpenAI inte
 
 ### Submission flow
 
-1. Complete release validation and build the final v1.2.0 ZIP from the release commit/tag.
+1. Complete release validation and build the final v1.2.1 ZIP from the release commit/tag.
 2. Open the OpenAI Plugins publisher dashboard:
    `https://platform.openai.com/plugins`
-3. Upload `orbit-thread-plugin-1.2.0.zip`.
+3. Upload `orbit-thread-plugin-1.2.1.zip`.
 4. Complete automated checks and resolve genuine findings.
 5. Review listing metadata and required policy/data-handling declarations.
 6. Choose **Submit for review**.
@@ -63,7 +63,7 @@ claude plugin validate ./plugin --strict
 claude plugin validate . --strict
 ```
 
-Then use the directory management/submission surface in Claude, connect the GitHub account that owns `shab1h-gh/orbit-thread`, select the repository/plugin, complete the listing details and submit it for review. Use the immutable v1.2.0 release/tag once created.
+Then use the directory management/submission surface in Claude, connect the GitHub account that owns `shab1h-gh/orbit-thread`, select the repository/plugin, complete the listing details and submit it for review. Use the immutable v1.2.1 release/tag once created.
 
 A successful GitHub marketplace installation does not mean the plugin is approved for Anthropic's public directory.
 

package/docs/VALIDATION.md

@@ -237,3 +237,15 @@ regression test confirms they do not reach terminal output.
 - Merge PR #3, then tag v1.2.0 from the merged release commit.
 - Publish `orbit-thread@1.2.0` and repeat the public-registry smoke test described in
   [PUBLISHING.md](PUBLISHING.md).
+
+## Orbit Resume v1.2.1 validation
+
+Compatibility patch (`fix/resume-completed-heading`): Resume now accepts `## Completed this session` as an alias of the canonical `## Completed milestones`. The canonical section takes precedence when both exist; the handoff format is unchanged. The v1.2.0 section above is a historical record and is unchanged.
+
+### Verified locally
+
+Results are recorded in the release PR and final report; the checks run were `npm test` (including regression tests for both headings, precedence, missing sections and redaction under the legacy heading), `npm run validate`, `npm run scan:public`, `npm run build:plugin`, `npm pack`, `npm run smoke:pack`, `claude plugin validate ./plugin --strict`, `claude plugin validate . --strict` and `git diff --check`.
+
+### Compatibility with v1.2.0 installations
+
+A project installed with the published `orbit-thread@1.2.0` is updated in place by the 1.2.1 CLI; installed skills, `.orbit-thread/config.json`, living docs and existing handoffs are preserved.

package/lib/resume.mjs

@@ -38,7 +38,7 @@ function readHandoff(root) {
       state: 'valid', text, updated: `${updated[3]}-${updated[2]}-${updated[1]}`,
       fields: {
         objective,
-        completed: section(text, 'Completed milestones'),
+        completed: firstSection(text, ['Completed milestones', 'Completed this session']),
         unfinished: section(text, 'In progress'),
         risks: section(text, 'Open issues / risks'),
         verification: section(text, 'Verification'),
@@ -53,11 +53,20 @@ function readHandoff(root) {
 
 function section(text, title) {
   const escaped = title.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  const match = text.match(new RegExp(`^##\\s+${escaped}\\s*\\r?\\n([\\s\\S]*?)(?=^##\\s+|\\s*$)`, 'm'));
+  const match = text.match(new RegExp(`^##\\s+${escaped}\\s*\\r?\\n([\\s\\S]*?)(?=^##\\s+|(?![\\s\\S]))`, 'm'));
   if (!match) return [];
   return match[1].split(/\r?\n/).map(line => line.trim()).filter(line => line && !/^<!--/.test(line)).slice(0, 6).map(line => scrub(line));
 }
 
+// Canonical heading first; legacy alias only used when the canonical section is absent or empty.
+function firstSection(text, titles) {
+  for (const title of titles) {
+    const lines = section(text, title);
+    if (lines.length) return lines;
+  }
+  return [];
+}
+
 function git(root, args) {
   try {
     return execFileSync('git', args, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 3000 }).trim();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orbit-thread",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Token-efficient project setup, checkpoints and coding-session continuity for Codex and Claude Code.",
   "type": "module",
   "bin": {

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "orbit-thread",
   "displayName": "Orbit Thread",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Token-efficient project setup, checkpoints and coding-session continuity.",
   "author": { "name": "Shabih Anwar", "url": "https://github.com/shab1h-gh" },
   "homepage": "https://github.com/shab1h-gh/orbit-thread",

package/plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "orbit-thread",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Token-efficient project setup, checkpoints and coding-session continuity.",
   "author": { "name": "Shabih Anwar", "url": "https://github.com/shab1h-gh" },
   "homepage": "https://github.com/shab1h-gh/orbit-thread",