@gotcos/glasses-server 6.18.5 → 6.18.6

package/CHANGELOG.md

@@ -1,3 +1,12 @@
+## 6.18.6
+
+- **Phone Restart works on COS Control managed installs.** Recovery status /
+  `/api/recovery/server/restart` previously required `COS_HARNESS=daemon`, but
+  Control's LaunchAgent sets `COS_MANAGED=1` with `COS_HARNESS=foreground`.
+  Health correctly advertised `managed: true` while the restart route returned
+  409 "Server is not managed by the COS LaunchAgent". Gate now uses
+  `COS_MANAGED=1` (`isManagedRuntime()`), matching capabilities.
+
 ## 6.18.5
 
 - **Codex workspace-write now includes outbound network.** `workspace-write`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.18.5",
+  "version": "6.18.6",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {

package/server/lib/managed-runtime.ts

@@ -21,9 +21,9 @@ export function managedRuntimeCapability(): ManagedRuntimeCapability {
     // Whisper lifecycle is private to the local controller. It is never
     // exposed as a network-reachable mutation capability.
     restartWhisper: false,
-    // Server restart is performed by the trusted local helper through launchd,
-    // never by an HTTP endpoint. This flag tells clients that managed recovery
-    // exists without widening the network attack surface.
+    // Phone/companion may POST /api/recovery/server/restart when managed.
+    // launchd KeepAlive brings the process back after SIGTERM. Unmanaged
+    // foreground installs reject that route (restart_unmanaged).
     restartServer: managed,
     maintenanceDrain: managed,
     lifecycleProof: managed,

package/server/routes/recovery.ts

@@ -2,6 +2,7 @@ import { Router } from 'express'
 import { readFileSync } from 'node:fs'
 import { resolve } from 'node:path'
 import { atomicWriteFileSync } from '../lib/atomic-fs.js'
+import { isManagedRuntime } from '../lib/managed-runtime.js'
 import { acquireMaintenance, getRecoveryActivityStatus } from '../lib/recovery-activity.js'
 import { getWhisperHealth, restartWhisperServer } from '../lib/whisper-local.js'
 import { serverMetrics } from '../lib/server-metrics.js'
@@ -19,14 +20,16 @@ recoveryRouter.get('/live', (_req, res) => {
   res.json({
     status: 'ok', bootId: serverMetrics.bootId, pid: process.pid,
     uptimeSeconds: Math.round((Date.now() - serverMetrics.startedAt) / 1000),
-    managed: process.env.COS_HARNESS === 'daemon',
+    // COS Control LaunchAgent sets COS_MANAGED=1 with COS_HARNESS=foreground.
+    // Do not require COS_HARNESS=daemon — that false-negative blocked phone Restart.
+    managed: isManagedRuntime(),
   })
 })
 
 recoveryRouter.get('/recovery/status', (_req, res) => {
   res.json({
     bootId: serverMetrics.bootId,
-    managed: process.env.COS_HARNESS === 'daemon',
+    managed: isManagedRuntime(),
     whisper: getWhisperHealth(),
     asr: { hqActive: false, hqQueued: 0, fastRestarting: false }, // public build: no HQ/fast ASR scheduler in this server
     activity: getRecoveryActivityStatus(),
@@ -46,7 +49,7 @@ recoveryRouter.post('/recovery/whisper/restart', async (_req, res) => {
 })
 
 recoveryRouter.post('/recovery/server/restart', (_req, res) => {
-  if (process.env.COS_HARNESS !== 'daemon') {
+  if (!isManagedRuntime()) {
     return res.status(409).json({ error: 'Server is not managed by the COS LaunchAgent', reason: 'restart_unmanaged' })
   }
   const elapsed = Date.now() - lastRestartAt()