gh-glance 0.16.0 → 0.16.2

package/CHANGELOG.md

@@ -7,6 +7,44 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.16.2] - 2026-10-03
+
+No change to the dashboard itself: `index.mjs` is identical to 0.16.1. This
+release changes how gh-glance is tested and published.
+
+### Changed
+
+- The published npm package is now the exact tarball the release pull request
+  tested: CI packs it once, the package and terminal smoke checks run those
+  bytes, and the release workflow verifies the tested tree, run, archive digest and
+  tarball digests before publishing it with lifecycle scripts disabled and
+  pinned Node 22.22.2 / npm 11.21.0. A version collision or an unclear
+  registry answer stops publication instead of skipping it.
+- Release delivery is checked automatically: registry integrity, npm
+  provenance bound to this release workflow, tag and merge commit, and a fresh
+  install run on Node 22 and 24.
+- CI runs the full suites once, on the release pull request; pushes to
+  `develop` and `main` run quick checks or a promotion identity check, and
+  coverage runs on a schedule instead of on every push.
+- README: the live freshness monitor section explains how to observe the
+  default on-demand mode (continuously active Actions only).
+
+## [0.16.1] - 2026-10-02
+
+### Fixed
+
+- When external API use pushes every pane's next request slot past the quota
+  reset, panes now show "GitHub quota pacing; retry automatically after reset"
+  instead of "Local coordination unavailable ... retry when storage works".
+  Deferred background refreshes also get their own notice.
+- Heavy API use by other tools on the same account no longer starves every
+  pane until the quota resets. Pacing now divides by at most 4 times the
+  measured external pressure, while the reserve still stops gh-glance before
+  the account runs out.
+- Uncertain charges left by dead panes are released one quota window after
+  their newest charge, instead of reducing every hour's budget until the next
+  reboot.
+
 ## [0.16.0] - 2026-10-01
 
 ### Changed
@@ -1216,7 +1254,9 @@ engineering, security, QA and UX. What follows is what changed as a result.
 - The `main` field from `package.json`. It advertised the file as importable,
   but importing it took over the terminal or exited the host process.
 
-[Unreleased]: https://github.com/juan294/gh-glance/compare/v0.16.0...HEAD
+[Unreleased]: https://github.com/juan294/gh-glance/compare/v0.16.2...HEAD
+[0.16.2]: https://github.com/juan294/gh-glance/compare/v0.16.1...v0.16.2
+[0.16.1]: https://github.com/juan294/gh-glance/compare/v0.16.0...v0.16.1
 [0.16.0]: https://github.com/juan294/gh-glance/compare/v0.15.2...v0.16.0
 [0.15.2]: https://github.com/juan294/gh-glance/compare/v0.15.1...v0.15.2
 [0.15.1]: https://github.com/juan294/gh-glance/compare/v0.15.0...v0.15.1

package/README.md

@@ -946,6 +946,17 @@ SIGINT, or a sample gap over 15 seconds makes the report nonqualifying. A sleep
 gap requires a new uninterrupted window. A schema 1 manifest supports a
 diagnostic `--once` read only; it cannot qualify a run.
 
+Under the default `--background on-demand`, only the active Actions tab is
+watched continuously; Issues, Pull Requests and Security are fetched when
+opened or on `r`. Declare only those continuously active Actions panes in a
+monitored window, and check secondary views with separate one-shot assertions:
+a perpetual cadence oracle over an intentionally idle tab would report a false
+stall. A bounded release canary (one already running Actions pane, at most five
+minutes and 20 extra admissions per resource above the quota floor) is planned
+offline by `planCanary` in `scripts/release-policy.mjs`, which emits exactly
+such a schema 2 manifest and the stop rule; it cannot qualify the 24-hour
+windows.
+
 Provider-limit exclusions require `--external-evidence` pointing to an
 append-only JSON trace with `schema: 1` and an `events` array. Each `raw-http`
 event records the independently captured issue and finish timestamps, host,

package/index.mjs

@@ -2289,6 +2289,12 @@ function sharedLaneEvidence(value) {
 // Below this many completed shared calls in a probe window, external-spend
 // inference is noise. Under the threshold the loop retains the previous factor.
 const MIN_SAMPLE_CALLS = 5;
+// Pacing divides the spendable share by the external factor, so a large factor
+// compounds: gh-glance's own paid calls shrink, the next sample's ratio grows,
+// and the lane is pushed past the reset while quota sits unused. The reserve,
+// not this divisor, is what keeps gh-glance off the floor, so the divisor can
+// be bounded without letting external load exhaust the account.
+const MAX_PACING_EXTERNAL_FACTOR = 4;
 
 const REQUEST_PRIORITIES = Object.freeze({
   manual: 0,
@@ -2517,7 +2523,8 @@ function resourceDecision({
       epoch: capacity.epoch,
     };
   }
-  const callsPerMs = capacity.spendable / (capacity.resetMs - nowMs) / externalFactor;
+  const callsPerMs = capacity.spendable / (capacity.resetMs - nowMs) /
+    Math.min(externalFactor, MAX_PACING_EXTERNAL_FACTOR);
   if (!Number.isFinite(callsPerMs) || callsPerMs <= 0) {
     return {
       mode: "paused",
@@ -4564,6 +4571,9 @@ function transferReceiptToDebt(state, receipt, nowMs, groupId = null) {
     group.units[resource] += amount;
     group.counts[resource] += amount > 0 ? 1 : 0;
   }
+  // The newest charge, not the group's creation, starts the window after
+  // which reconcileBootDebt may treat the group as settled.
+  group.at = Math.max(group.at, nowMs);
   state.debtGroups[id] = group;
   return true;
 }
@@ -4611,12 +4621,17 @@ function retireControlReceiptToDebt(state, resource, at) {
   return true;
 }
 
+// A reboot proves an unknown owner's children are gone. So does age: a group's
+// `at` is its newest charge, and once a full window has elapsed since then
+// GitHub has charged every covered request to a window that is already over.
 function reconcileBootDebt(state, at) {
   const bootId = coordinationBootId();
-  if (bootId === null) return { ok: true, changed: false };
   let changed = false;
   for (const group of Object.values(state.debtGroups)) {
-    if (group.quiescent || group.bootId === null || group.bootId === bootId) continue;
+    if (group.quiescent) continue;
+    const priorBoot = bootId !== null && group.bootId !== null && group.bootId !== bootId;
+    const outlivedWindow = group.sealed && at - group.at >= IDENTITY_UNCERTAIN_MAX_MS;
+    if (!priorBoot && !outlivedWindow) continue;
     if (!makeDebtGroupQuiescent(state, group, at)) {
       return { ok: false, reason: "accounting-overflow" };
     }
@@ -15633,6 +15648,8 @@ const RECOVERY_COPY = Object.freeze({
   "probe-failed": ["GitHub budget check failed", "Retry automatically at the shown time", "Budget check; retry"],
   "block-unpublished": ["Saving GitHub request limit", "Retry sharing the hold automatically", "Saving hold; retry"],
   "budget-reset": ["GitHub quota pacing", "Retry automatically after reset", "Quota; retry"],
+  reset: ["GitHub quota pacing", "Retry automatically after reset", "Quota; retry"],
+  priority: ["Background refresh waiting its turn", "Retry automatically at the next slot", "Queued; retry"],
   "rate-limit": ["GitHub quota pacing", "Retry automatically after reset", "Quota; retry"],
   "rate-limited": ["GitHub request limit", "Retry automatically after the shared hold", "Limit; retry"],
   "local-reserve": ["Local quota reserve pacing", "Retry automatically at the next grant", "Reserve; retry"],
@@ -20338,6 +20355,8 @@ export {
   GOVERNOR_PHASE_WINDOW_MS,
   BUDGET_PROBE_MS,
   MIN_SAMPLE_CALLS,
+  MAX_PACING_EXTERNAL_FACTOR,
+  IDENTITY_UNCERTAIN_MAX_MS,
   REQUEST_PRIORITIES,
   normalizeBudgetResource,
   budgetEpoch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gh-glance",
-  "version": "0.16.0",
+  "version": "0.16.2",
   "description": "A live-refreshing GitHub dashboard for your terminal: Actions, Issues, Pull Requests, and Security alerts in one narrow pane",
   "type": "module",
   "bin": {
@@ -14,16 +14,20 @@
     "LICENSE"
   ],
   "scripts": {
-    "lint": "eslint . --max-warnings 0",
+    "lint": "eslint --max-warnings 0 index.mjs eslint.config.js scripts test",
     "prepare": "node -e \"process.exit(require('fs').existsSync('.git')?0:1)\" && husky || true",
     "prepublishOnly": "npm run lint && node --check index.mjs && npm test",
     "start": "node index.mjs",
     "test": "node --test --test-skip-pattern='E2E-' test/*.test.mjs",
+    "test:fast": "node scripts/test-select.mjs run fast",
+    "test:recovery": "node scripts/test-select.mjs run recovery",
+    "test:package": "node scripts/test-select.mjs run package",
     "test:coverage": "node --test --test-concurrency=1 --test-skip-pattern='E2E-' --experimental-test-coverage --test-coverage-include=index.mjs test/*.test.mjs",
     "test:coverage:runtime": "node test/runtime-coverage.mjs",
-    "test:efficiency": "node --test test/efficiency.test.mjs",
+    "test:efficiency": "node scripts/test-select.mjs run efficiency",
     "measure:efficiency": "node scripts/measure-efficiency.mjs",
-    "test:pty": "node --test --test-concurrency=1 --test-timeout=900000 test/pty/*.test.mjs"
+    "test:pty": "node scripts/test-select.mjs run pty",
+    "test:pty:smoke": "node scripts/test-select.mjs run pty:smoke"
   },
   "keywords": [
     "github",