viber-channel 0.8.39 → 0.8.41

package/lib/parent_watchdog.ts

@@ -164,6 +164,8 @@ export interface ParentWatchdogOptions {
 
 export interface ParentWatchdogHandle {
   stop: () => void;
+  /** The agent ancestor resolved at startup (#708: the runner reads its session log). */
+  agent: AgentIdentity | null;
 }
 
 const DEFAULT_INTERVAL_MS = 5000;
@@ -233,7 +235,7 @@ export function startParentWatchdog(
 
   if (!identity) {
     log("[viber-channel] parent watchdog disabled (no resolvable agent ancestor)\n");
-    return { stop: () => {} };
+    return { stop: () => {}, agent: null };
   }
 
   const watched = identity;
@@ -272,5 +274,6 @@ export function startParentWatchdog(
       stopped = true;
       clearTimer(handle);
     },
+    agent: watched,
   };
 }

package/lib/peers.ts

@@ -10,6 +10,7 @@
  */
 
 import { cfAccessHeaders } from "./cfAccess.js";
+import { RESEND_DELAY_MS } from "./messages.js";
 
 /** A peer agent as returned by GET /api/instances/peers.
  *  project_id/project_name are present only in the user-scoped listing (#307):
@@ -175,21 +176,37 @@ function instanceIdOrNull(v: unknown): string | null {
  * Returns a structured outcome rather than throwing on the expected 4xx cases
  * (peer offline / not found) so the tool can surface a clear message to the
  * model; network/parse failures throw.
+ *
+ * #694: a network failure (a keep-alive socket killed by a Cloudflare datacenter
+ * switch) is retried ONCE after `retryDelayMs`. Safe because the route is
+ * open-or-create: a second call finds the pair the first one created and pushes
+ * no second join (viber-api instances.test.ts, "a resend in the SAME direction").
  */
 export async function openDm(
   baseUrl: string,
   instanceToken: string,
   peerInstanceId: string,
+  /** Fetch seam (#694 tests). Defaults to the global `fetch`. */
+  fetchImpl: typeof fetch = fetch,
+  retryDelayMs: number = RESEND_DELAY_MS,
 ): Promise<OpenDmOutcome> {
-  const resp = await fetch(`${baseUrl}/api/instances/dms`, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${instanceToken}`,
-      "Content-Type": "application/json",
-      ...cfAccessHeaders(),
-    },
-    body: JSON.stringify({ peer_instance_id: peerInstanceId }),
-  });
+  const send = (): Promise<Response> =>
+    fetchImpl(`${baseUrl}/api/instances/dms`, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${instanceToken}`,
+        "Content-Type": "application/json",
+        ...cfAccessHeaders(),
+      },
+      body: JSON.stringify({ peer_instance_id: peerInstanceId }),
+    });
+  let resp: Response;
+  try {
+    resp = await send();
+  } catch {
+    await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
+    resp = await send();
+  }
 
   if (!resp.ok) {
     let detail = `HTTP ${resp.status}`;

package/lib/presence_trigger.ts

@@ -47,7 +47,7 @@ export interface PresenceTrigger {
   stop: () => void;
 }
 
-/** The agent records of a presence folder: `<instance_id>.json`, never `*.coverage.json`. */
+/** The agent records of a presence folder: `<instance_id>.json`, never `*.coverage.json` nor `*.runtime.json`. */
 export function listPresenceRecords(dir: string): Map<string, number> | null {
   let names: string[];
   try {
@@ -57,7 +57,9 @@ export function listPresenceRecords(dir: string): Map<string, number> | null {
   }
   const out = new Map<string, number>();
   for (const name of names) {
-    if (!name.endsWith(".json") || name.endsWith(".coverage.json")) continue;
+    // #708: runtime files have their own trigger (runner_runtime.ts) — counted twice they would
+    // queue a second beat for one change.
+    if (!name.endsWith(".json") || name.endsWith(".coverage.json") || name.endsWith(".runtime.json")) continue;
     try {
       out.set(name, statSync(join(dir, name)).mtimeMs);
     } catch {

package/lib/runner_roster.ts

@@ -30,6 +30,8 @@ import {
   readPresenceRecord,
 } from "./presence_record.js";
 import { enumerateStartTimes } from "./process_start.js";
+import { runtimeFilePath } from "./codex_runtime.js";
+import { type RuntimeDelta, type RuntimeSource, type RuntimeTracker } from "./runner_runtime.js";
 import { announcedCapabilitiesVersion } from "./gateway_features.js";
 import { runnerIdentity } from "./runner_exec.js";
 import * as reg from "./runner_registry.js";
@@ -92,6 +94,8 @@ export interface CollectedRoster {
   notes: string[];
   /** #687: one line per ended agent OBSERVED (logged even if `capRoster` defers its report), for the runner's log (`endLine`). */
   ends: string[];
+  /** #708: where to read what each PRESENT agent runs on — exactly the present this beat carries. */
+  runtimeSources: RuntimeSource[];
 }
 
 /** The process table: pid → start time, or `undefined` when the instrument did not see. */
@@ -111,6 +115,7 @@ function emptyCollected(note?: string): CollectedRoster {
     endedFiles: new Map(),
     notes: note === undefined ? [] : [note],
     ends: [],
+    runtimeSources: [],
   };
 }
 
@@ -204,6 +209,7 @@ export async function collectRoster(deps: CollectDeps): Promise<CollectedRoster>
         created_at: record.created_at,
         job_name: record.job_name,
       });
+      out.runtimeSources.push({ instance_id: record.instance_id });
     } else {
       out.roster[c.kind].push(record.instance_id);
       out.endedFiles.set(record.instance_id, { path, content: JSON.stringify(record) });
@@ -229,6 +235,7 @@ function capRoster(c: CollectedRoster): CollectedRoster {
   // The registry must only learn what this beat actually told the server (Codex).
   const sentPresent = new Set(keptPresent.map((p) => p.instance_id));
   c.seen = c.seen.filter((s) => sentPresent.has(s.instance_id));
+  c.runtimeSources = c.runtimeSources.filter((s) => sentPresent.has(s.instance_id));
   c.roster = { present: keptPresent, closed: keptClosed, down: keptDown };
   c.notes.push(`roster capped at ${ROSTER_MAX} (had ${total}); the rest goes next beat`);
   return c;
@@ -349,6 +356,11 @@ export function applyAck(collected: CollectedRoster, ack: RosterAck, deps: Apply
     } catch {
       // no coverage for it: nothing to clean
     }
+    try {
+      unlinkSync(runtimeFilePath(deps.identityBaseUrl, id, deps.lockDir));
+    } catch {
+      // #708: no runtime file for it (an agent that never reported)
+    }
   }
   return removed;
 }
@@ -369,6 +381,8 @@ export interface RosterBeatDeps {
   headers?: () => Record<string, string>;
   /** #647: the announced capabilities version (default: the cached gateway probe). */
   capabilitiesVersion?: () => 1 | 2;
+  /** #708: what each present agent runs on; absent = the beat carries no `runtime`. */
+  runtime?: RuntimeTracker;
 }
 
 /**
@@ -444,6 +458,16 @@ async function rosterBeatOnce(auth: RosterBeatAuth, deps: RosterBeatDeps): Promi
   const { closes: pendingCloses, replaced } = pendingClosesOf(identity, deps.lockDir, collected.roster);
   collected.roster.closed.push(...pendingCloses);
 
+  const beatBody: Record<string, unknown> = {
+    capabilities: { runtimes: ["claude-code", "codex", "gemma"], platform: process.platform, version: (deps.capabilitiesVersion ?? announcedCapabilitiesVersion)() },
+    // #627 (JP, decision A): the new instance of each pair takes the old one's
+    // conversations — the server re-invites it once it is online.
+    roster: replaced.length > 0 ? { ...collected.roster, replaced } : collected.roster,
+  };
+  // #708: the roster first; runtime entries only take the room it leaves under the cap.
+  const runtimeSent = withRuntime(beatBody, collected.runtimeSources, deps.runtime);
+  const body = JSON.stringify(beatBody);
+
   let resp: Response;
   try {
     resp = await (deps.fetchImpl ?? fetch)(`${auth.base_url}/api/runners/${auth.runner_id}/heartbeat`, {
@@ -455,12 +479,7 @@ async function rosterBeatOnce(auth: RosterBeatAuth, deps: RosterBeatDeps): Promi
         "Content-Type": "application/json",
         ...(deps.headers?.() ?? {}),
       },
-      body: JSON.stringify({
-        capabilities: { runtimes: ["claude-code", "codex", "gemma"], platform: process.platform, version: (deps.capabilitiesVersion ?? announcedCapabilitiesVersion)() },
-        // #627 (JP, decision A): the new instance of each pair takes the old one's
-        // conversations — the server re-invites it once it is online.
-        roster: replaced.length > 0 ? { ...collected.roster, replaced } : collected.roster,
-      }),
+      body,
     });
   } catch {
     return "ok"; // best-effort: nothing acknowledged, nothing changed
@@ -473,7 +492,10 @@ async function rosterBeatOnce(auth: RosterBeatAuth, deps: RosterBeatDeps): Promi
     return "ok";
   }
 
-  const ack = parseRosterAck(await resp.json().catch(() => null));
+  const ackBody: unknown = await resp.json().catch(() => null);
+  const ack = parseRosterAck(ackBody);
+  // #708: an entry counts as sent only once the server names it as stored.
+  if (runtimeSent) deps.runtime?.ack(storedRuntime(runtimeSent, ackBody));
   // A beat whose ended records are never acknowledged is not dangerous (coverage and
   // leases are still served) but it is SILENT: say it once it lasts (Opus, step-05).
   if (collected.endedFiles.size > 0 && !ack.presence_applied) {
@@ -584,3 +606,35 @@ export function pendingClosesOf(
   }
   return { closes, replaced };
 }
+
+/** `,"runtime":{}` — what the field costs before its first entry. */
+const RUNTIME_FIELD_BYTES = Buffer.byteLength(',"runtime":{}', "utf8");
+
+/**
+ * #708: add the runtime delta to a beat body, in the room the rest leaves under
+ * `HEARTBEAT_MAX_BODY_BYTES`. Returns what was added (to acknowledge on success), or
+ * undefined when nothing was.
+ */
+export function withRuntime(
+  body: Record<string, unknown>,
+  sources: readonly RuntimeSource[],
+  tracker: RuntimeTracker | undefined,
+): RuntimeDelta | undefined {
+  if (!tracker) return undefined;
+  tracker.setSources(sources);
+  tracker.poll();
+  const room = HEARTBEAT_MAX_BODY_BYTES - Buffer.byteLength(JSON.stringify(body), "utf8") - RUNTIME_FIELD_BYTES;
+  const delta = room > 0 ? tracker.delta(room) : {};
+  if (Object.keys(delta).length === 0) return undefined;
+  body.runtime = delta;
+  return delta;
+}
+
+/** #708: the entries of `sent` the server answered as stored (`runtime_applied: [ids]`). */
+export function storedRuntime(sent: RuntimeDelta, ackBody: unknown): RuntimeDelta {
+  const ids = (ackBody as { runtime_applied?: unknown } | null)?.runtime_applied;
+  if (!Array.isArray(ids)) return {};
+  const out: RuntimeDelta = {};
+  for (const id of ids) if (typeof id === "string" && id in sent) out[id] = sent[id] as RuntimeDelta[string];
+  return out;
+}

package/lib/runner_runtime.ts

@@ -0,0 +1,187 @@
+/**
+ * runner_runtime.ts — the runner's side of #708: what each present agent runs on,
+ * sent to the server ONLY when it changes.
+ *
+ * Source: `<presenceDir>/<id>.runtime.json`, written by the agent's own process — the
+ * codex bridge on each turn, the claude channel after each reply (JP's rule, a round
+ * trip: claude_runtime_publisher.ts). The runner never reads a session log: it stats
+ * these small files and re-reads one only when its size or mtime moved.
+ *
+ * On the wire, `runtime` sits NEXT TO the roster, as a delta: an instance absent
+ * from it means "no opinion", `null` means "clear it", an object is the value. The
+ * roster is serialized first; runtime entries only take the room that is left under
+ * the body cap — presence is never lost to metadata. An entry counts as sent only once
+ * the server names it in `runtime_applied: [ids]`; until then it rides the next beat.
+ *
+ * "Changed" means what the chip shows changed (`sameRuntime`): `observed_at` and the
+ * raw token count are never compared.
+ */
+import { statSync } from "node:fs";
+import { readRuntimeFile, runtimeFilePath } from "./codex_runtime.js";
+import { type RuntimeV1, sameRuntime } from "./runtime_info.js";
+
+export interface RuntimeSource {
+  instance_id: string;
+}
+
+export type RuntimeDelta = Record<string, RuntimeV1 | null>;
+
+export interface RuntimeTrackerDeps {
+  identityBaseUrl: string;
+  lockDir?: string;
+  /** File signature (size + mtime), or undefined when the file is absent. */
+  signature?: (path: string) => string | undefined;
+}
+
+function fileSignature(path: string): string | undefined {
+  try {
+    const s = statSync(path);
+    return `${s.size}:${s.mtimeMs}`;
+  } catch {
+    return undefined;
+  }
+}
+
+/** Bytes `"id":<value>,` adds to a JSON object. */
+function entryBytes(id: string, value: RuntimeV1 | null): number {
+  return Buffer.byteLength(`${JSON.stringify(id)}:${JSON.stringify(value)},`, "utf8");
+}
+
+interface Observed {
+  value: RuntimeV1 | undefined;
+  /** What was read, so an unchanged file is not read again. */
+  key: string | undefined;
+}
+
+export class RuntimeTracker {
+  private sources = new Map<string, RuntimeSource>();
+  private observed = new Map<string, Observed>();
+  /** Acknowledged by the server. Absent = never sent by this runner life. */
+  private sent = new Map<string, RuntimeV1 | null>();
+  private readonly signature: (path: string) => string | undefined;
+
+  constructor(private readonly deps: RuntimeTrackerDeps) {
+    this.signature = deps.signature ?? fileSignature;
+  }
+
+  /** The present agents of the last roster. An agent gone is forgotten: the server clears it on its end. */
+  setSources(list: readonly RuntimeSource[]): void {
+    const next = new Map(list.map((s) => [s.instance_id, s]));
+    for (const id of this.sources.keys()) {
+      if (!next.has(id)) {
+        this.observed.delete(id);
+        this.sent.delete(id);
+      }
+    }
+    this.sources = next;
+  }
+
+  /** Re-observe every source; true when some value changed since the last observation. */
+  poll(): boolean {
+    let changed = false;
+    for (const id of this.sources.keys()) {
+      const before = this.observed.get(id);
+      const after = this.observe(id, before);
+      this.observed.set(id, after);
+      if (!sameRuntime(before?.value, after.value)) changed = true;
+    }
+    return changed;
+  }
+
+  /** The entries the server does not hold yet, by instance id, within `budgetBytes`. */
+  delta(budgetBytes: number): RuntimeDelta {
+    const out: RuntimeDelta = {};
+    let room = budgetBytes;
+    for (const id of [...this.sources.keys()].sort()) {
+      const value = this.observed.get(id)?.value ?? null;
+      // Never sent: say it once, `null` included — a previous runner life may have left a value.
+      if (this.sent.has(id) && sameRuntime(this.sent.get(id), value)) continue;
+      const cost = entryBytes(id, value);
+      if (cost > room) break; // deterministic: the rest, in id order, goes next beat
+      out[id] = value;
+      room -= cost;
+    }
+    return out;
+  }
+
+  /** The server stored these entries. */
+  ack(sent: RuntimeDelta): void {
+    for (const [id, value] of Object.entries(sent)) {
+      if (this.sources.has(id)) this.sent.set(id, value);
+    }
+  }
+
+  private observe(id: string, before: Observed | undefined): Observed {
+    let path: string;
+    try {
+      path = runtimeFilePath(this.deps.identityBaseUrl, id, this.deps.lockDir);
+    } catch {
+      return { value: undefined, key: undefined };
+    }
+    const sig = this.signature(path);
+    if (sig === undefined) return { value: undefined, key: undefined };
+    const key = `${path}|${sig}`;
+    if (before && before.key === key) return before;
+    const value = readRuntimeFile(path, id);
+    // Present but unreadable (a read racing a rename, an antivirus holding it): keep what was
+    // known — only an ABSENT file clears the chip. The key is not advanced, so it is read again.
+    if (value === undefined) return before ?? { value: undefined, key: undefined };
+    // Same thing shown: keep the earlier observation, `observed_at` included.
+    if (before && sameRuntime(before.value, value)) return { value: before.value, key };
+    return { value, key };
+  }
+}
+
+export const RUNTIME_SCAN_MS = 2_000;
+export const RUNTIME_DEBOUNCE_MS = 500;
+
+export interface RuntimeTriggerOptions {
+  tracker: RuntimeTracker;
+  onChange: () => void;
+  intervalMs?: number;
+  debounceMs?: number;
+  setInterval?: (fn: () => void, ms: number) => unknown;
+  clearInterval?: (handle: unknown) => void;
+  setTimeout?: (fn: () => void, ms: number) => unknown;
+  clearTimeout?: (handle: unknown) => void;
+}
+
+/**
+ * Beat when what an agent runs on CHANGES — a local poll, no request otherwise. Only a
+ * fresh local change triggers: a value the server has not acknowledged yet (a failed
+ * beat) rides the next periodic beat instead of hammering a failing server. The first
+ * poll is the BASELINE, covered by the runner's start-up beat.
+ */
+export function startRuntimeTrigger(opts: RuntimeTriggerOptions): { scan: () => void; stop: () => void } {
+  const setIv = opts.setInterval ?? ((fn: () => void, ms: number) => unrefd(setInterval(fn, ms)));
+  const clearIv = opts.clearInterval ?? ((h: unknown) => clearInterval(h as ReturnType<typeof setInterval>));
+  const setTo = opts.setTimeout ?? ((fn: () => void, ms: number) => unrefd(setTimeout(fn, ms)));
+  const clearTo = opts.clearTimeout ?? ((h: unknown) => clearTimeout(h as ReturnType<typeof setTimeout>));
+  const debounceMs = opts.debounceMs ?? RUNTIME_DEBOUNCE_MS;
+  let pending: unknown = null;
+  let stopped = false;
+  opts.tracker.poll();
+  const scan = (): void => {
+    if (stopped) return;
+    if (!opts.tracker.poll() || pending !== null) return;
+    pending = setTo(() => {
+      pending = null;
+      if (!stopped) opts.onChange();
+    }, debounceMs);
+  };
+  const timer = setIv(scan, opts.intervalMs ?? RUNTIME_SCAN_MS);
+  return {
+    scan,
+    stop: () => {
+      stopped = true;
+      clearIv(timer);
+      if (pending !== null) clearTo(pending);
+      pending = null;
+    },
+  };
+}
+
+function unrefd<T>(h: T): T {
+  (h as { unref?: () => void }).unref?.();
+  return h;
+}

package/lib/runner_stream.ts

@@ -23,6 +23,7 @@ import { type ExecDeps, reconcileOnce, runnerIdentity } from "./runner_exec.js";
 import { runRosterBeat } from "./runner_roster.js";
 import { presenceDir } from "./presence_record.js";
 import { startPresenceTrigger } from "./presence_trigger.js";
+import { RuntimeTracker, startRuntimeTrigger } from "./runner_runtime.js";
 
 /** Remove leftover temp spec files (`.viber/runner-specs/`) from a prior crash
  *  at daemon start — they may hold sensitive rolePrompts (Codex P1-1). The
@@ -129,8 +130,8 @@ async function safeReconcile(auth: RunnerAuth, deps: ExecDeps = {}): Promise<voi
  *
  *  #627: the beat now carries the machine's ROSTER — the only presence signal of
  *  the agents this runner vouches for (`runner_roster.ts`). */
-async function sendHeartbeat(auth: RunnerAuth, queueIfBusy = false): Promise<"ok" | "revoked"> {
-  return runRosterBeat(auth, { headers: cfAccessHeaders }, { queueIfBusy });
+async function sendHeartbeat(auth: RunnerAuth, queueIfBusy = false, runtime?: RuntimeTracker): Promise<"ok" | "revoked"> {
+  return runRosterBeat(auth, { headers: cfAccessHeaders, runtime }, { queueIfBusy });
 }
 
 export function sleep(ms: number, signal?: AbortSignal): Promise<void> {
@@ -174,8 +175,10 @@ export async function runPersistentRunnerStream(
   // Shared abort so a heartbeat-detected revocation tears down the live SSE now,
   // instead of waiting for the next reconnect.
   let currentAbort: AbortController | null = null;
+  // #708: what each present agent runs on, pushed with the beat when it changes.
+  const runtime = new RuntimeTracker({ identityBaseUrl: runnerIdentity(auth) });
   const beat = (queueIfBusy: boolean): void => {
-    void sendHeartbeat(auth, queueIfBusy)
+    void sendHeartbeat(auth, queueIfBusy, runtime)
       .then((r) => {
         if (r === "revoked") {
           revoked = true;
@@ -196,6 +199,8 @@ export async function runPersistentRunnerStream(
     dir: presenceDir(runnerIdentity(auth)),
     onChange: () => beat(true),
   });
+  // #708: and one more when what an agent runs on changes (a local poll, same request).
+  const runtimeTrigger = startRuntimeTrigger({ tracker: runtime, onChange: () => beat(true) });
   // Reconcile timer is a RE-JITTERED recursive setTimeout (not setInterval): each
   // tick draws a fresh crypto jitter so a fleet never re-synchronizes (Codex C6).
   let reconcileTimer: ReturnType<typeof setTimeout>;
@@ -247,6 +252,7 @@ export async function runPersistentRunnerStream(
   } finally {
     clearInterval(heartbeatTimer);
     presenceTrigger.stop();
+    runtimeTrigger.stop();
     clearTimeout(reconcileTimer!);
   }
 }

package/lib/runtime_info.ts

@@ -0,0 +1,102 @@
+/**
+ * runtime_info.ts — what an agent is running on, as the web shows it (#708).
+ *
+ * `RuntimeV1` is the contract of plan 708 step-01: model, effort and context
+ * occupation of ONE agent, observed locally (Claude's session log, Codex's
+ * token-usage notifications) and pushed by the runner when it changes.
+ *
+ * Two rules every producer and consumer shares:
+ * - an unknown field is OMITTED, never 0 — a 0 % looks plausible;
+ * - "changed" means what the chip shows changed: `observed_at` and the raw token
+ *   count are excluded from every comparison (`sameRuntime`), otherwise each re-read
+ *   or each call would beat the runner (#627 rule).
+ */
+
+/** JP's decision (2026-10-17): every Claude model he runs has a 1 M window. */
+export const CLAUDE_CONTEXT_WINDOW = 1_000_000;
+
+export const RUNTIME_SCHEMA_VERSION = 1;
+export const RUNTIME_MAX_BYTES = 512;
+const MODEL_MAX = 64;
+const EFFORT_MAX = 16;
+
+export interface RuntimeV1 {
+  v: 1;
+  model?: string;
+  effort?: string;
+  /** Input-side tokens of the LAST call — never a sum over the session. */
+  context_tokens?: number;
+  context_window?: number;
+  /** Integer 0..100. */
+  context_percent?: number;
+  /** Epoch ms of the observation; moves only with a business field. */
+  observed_at: number;
+}
+
+export interface RuntimeFields {
+  model?: string;
+  effort?: string;
+  contextTokens?: number;
+  contextWindow?: number;
+}
+
+const isCount = (n: unknown): n is number => typeof n === "number" && Number.isInteger(n) && n >= 0;
+
+/**
+ * Build a runtime from what is known. Anything missing or out of bounds is left
+ * out; the percent exists only when both its terms do, and is capped at 100.
+ */
+export function buildRuntime(fields: RuntimeFields, observedAt: number): RuntimeV1 {
+  const r: RuntimeV1 = { v: 1, observed_at: observedAt };
+  if (typeof fields.model === "string" && fields.model !== "" && fields.model.length <= MODEL_MAX) r.model = fields.model;
+  if (typeof fields.effort === "string" && fields.effort !== "" && fields.effort.length <= EFFORT_MAX) r.effort = fields.effort;
+  if (isCount(fields.contextTokens)) r.context_tokens = fields.contextTokens;
+  if (isCount(fields.contextWindow) && fields.contextWindow > 0) r.context_window = fields.contextWindow;
+  if (r.context_tokens !== undefined && r.context_window !== undefined) {
+    r.context_percent = Math.min(100, Math.round((r.context_tokens / r.context_window) * 100));
+  }
+  return r;
+}
+
+/**
+ * True when two observations show the same thing: model, effort, window and percent.
+ * `observed_at` is ignored, and so is `context_tokens`: it moves on every call of a
+ * working agent, and comparing it would beat the runner — and write D1 — at that pace.
+ * The token count travels with the value; a change is a change of what the chip shows.
+ */
+export function sameRuntime(a: RuntimeV1 | null | undefined, b: RuntimeV1 | null | undefined): boolean {
+  if (!a || !b) return !a && !b;
+  return (
+    a.model === b.model &&
+    a.effort === b.effort &&
+    a.context_window === b.context_window &&
+    a.context_percent === b.context_percent &&
+    // A count appearing or vanishing is a change; only its value is not compared.
+    (a.context_tokens === undefined) === (b.context_tokens === undefined)
+  );
+}
+
+/** True when nothing but the version and the timestamp is known. */
+export function isEmptyRuntime(r: RuntimeV1): boolean {
+  return Object.keys(r).every((k) => k === "v" || k === "observed_at");
+}
+
+/**
+ * Strict check of a received value: the WHOLE entry is rejected on any violation,
+ * never one field — no half-trusted value (plan 708, step-01 contract).
+ */
+export function parseRuntime(value: unknown): RuntimeV1 | undefined {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) return undefined;
+  const v = value as Record<string, unknown>;
+  if (v.v !== RUNTIME_SCHEMA_VERSION) return undefined;
+  if (typeof v.observed_at !== "number" || !Number.isFinite(v.observed_at) || v.observed_at <= 0) return undefined;
+  const allowed = new Set(["v", "model", "effort", "context_tokens", "context_window", "context_percent", "observed_at"]);
+  if (Object.keys(v).some((k) => !allowed.has(k))) return undefined;
+  const str = (x: unknown, max: number): boolean => x === undefined || (typeof x === "string" && x !== "" && x.length <= max);
+  if (!str(v.model, MODEL_MAX) || !str(v.effort, EFFORT_MAX)) return undefined;
+  if (v.context_tokens !== undefined && !isCount(v.context_tokens)) return undefined;
+  if (v.context_window !== undefined && !(isCount(v.context_window) && v.context_window > 0)) return undefined;
+  if (v.context_percent !== undefined && !(isCount(v.context_percent) && v.context_percent <= 100)) return undefined;
+  if (Buffer.byteLength(JSON.stringify(v), "utf8") > RUNTIME_MAX_BYTES) return undefined;
+  return v as unknown as RuntimeV1;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viber-channel",
-  "version": "0.8.39",
+  "version": "0.8.41",
   "description": "Voice + text MCP channel between a Claude Code session and the Viber UI (https://viber.dgypx.dev). Push transcripts to Claude; send_message tool delivers text back to the UI.",
   "type": "module",
   "bin": {

package/viber-channel.ts

@@ -54,6 +54,7 @@ import {
 import { channelPauseReason, type PresenceGate, startCoverageWatch } from "./lib/coverage_watch.ts";
 import { type PresenceEndReason, type PresenceRecordHandle, startPresenceRecord } from "./lib/presence_record.ts";
 import { startParentWatchdog } from "./lib/parent_watchdog.ts";
+import { ClaudeRuntimePublisher } from "./lib/claude_runtime_publisher.ts";
 import { acquireInstance, maybeAttachTeam, registerInstance } from "./lib/instance.ts";
 import { runPersistentControlStream } from "./lib/control_stream.ts";
 import { type DmWatermark, runDmStream } from "./lib/dm_stream.ts";
@@ -557,7 +558,22 @@ async function handleCallTool(
   }
 }
 
-mcp.setRequestHandler(CallToolRequestSchema, async (request) => toMcpToolResult(await handleCallTool(request)));
+// #708: after each reply on the channel, the agent's model, effort and context are
+// re-read from its claude's session log and left for the runner (JP: a round trip,
+// not a watch). Created here; the instance id is read when it publishes.
+const runtimePublisher = new ClaudeRuntimePublisher({
+  // Read at reply time: the watchdog starts after mcp.connect(), below.
+  getClaudePid: () => parentWatchdog.agent?.pid ?? null,
+  identityBaseUrl: WEB_URL,
+  getInstanceId: () => OWN_INSTANCE_ID,
+});
+
+mcp.setRequestHandler(CallToolRequestSchema, async (request) => {
+  const result = await handleCallTool(request);
+  const name = request.params.name;
+  if ((name === "send_message" || name === "message_agent") && !result.isError) runtimePublisher.afterReply();
+  return toMcpToolResult(result);
+});
 
 // Prevent duplicate instances (#166); fingerprint namespacing for different
 // projects (#267); session-id namespacing for concurrent launches of the same
@@ -603,7 +619,7 @@ if (blockingPid !== null) {
 // the cmd.exe/bunx spawn chain), it becomes a zombie that keeps beating and shows
 // "online" with no one answering. The watchdog watches the agent PID+identity and
 // exits the instant it's gone — the reliable backstop to the stdin "end" handler.
-startParentWatchdog({
+const parentWatchdog = startParentWatchdog({
   onParentGone: () => {
     scheduler?.cancel();
     releaseLock();