@gotcos/glasses-server 6.24.4 → 6.24.5

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## 6.24.5
+
+COS Control provider proofs now isolate themselves from project customizations.
+
+- Claude Code 2.1.227 began rejecting the automated readiness check in large COS
+  workspaces because it loaded project instructions, skills, plugins, and attachment
+  context before evaluating the tiny proof prompt. The request exceeded 200k tokens
+  and exited 1 even though Claude authentication and normal commands were healthy.
+- The no-tool readiness subprocess now uses Claude Safe Mode. It still proves the
+  installed CLI, authentication, model access, process lifecycle, and exact response,
+  while avoiding unrelated workspace context. Normal glasses queries are unchanged.
+
 ## 6.24.4
 
 Rich-media attachments extend the established authenticated photo pipeline without

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gotcos/glasses-server",
-  "version": "6.24.4",
+  "version": "6.24.5",
   "description": "COS Glasses \u2014 self-hosted AI heads-up-display server for Even G2 smart glasses, powered by Claude Code, Codex, or Cursor Agent CLI",
   "type": "module",
   "bin": {

package/server/lib/provider-proof.ts

@@ -25,6 +25,12 @@ export interface ProcessResult {
   aborted: boolean
 }
 
+// A readiness proof must validate the installed/authenticated provider, not load
+// the selected workspace's CLAUDE.md, skills, plugins, MCP servers, and other
+// project customizations. Large COS workspaces can otherwise overflow Claude's
+// context window before the tiny proof prompt is evaluated.
+export const CLAUDE_SAFE_MODE_ENV = 'CLAUDE_CODE_SAFE_MODE'
+
 type TerminationReason = 'timeout' | 'abort' | null
 
 export function runBounded(
@@ -41,6 +47,7 @@ export function runBounded(
     }
     const env = { ...process.env }
     delete env.CLAUDECODE
+    env[CLAUDE_SAFE_MODE_ENV] = '1'
     const child = spawn(command, args, {
       cwd: cosBrainDir() ?? process.cwd(),
       env,