feat(everyrow-cc): add conversation privacy and sharing (#5035)

## Summary

- **Phase 1 (Privacy):** Gate agent read endpoints (`/stream`,
`/session-history`, `/session-status`) behind owner verification.
Express proxy extracts user ID from Supabase auth cookie and forwards
`X-User-Id`/`X-Share-Token` headers to the agent service, which stores
`owner_user_id` on first `/chat` and rejects unauthorized reads.
- **Phase 2 (Sharing):** Add share toggle endpoints, public share
metadata endpoint, session-to-conversation linkage, and a read-only
share view. Database migration adds `share_token`, `forked_from`, and
`cc_conversation_id` columns with RLS policies cascading read access
through sessions → tasks → artifacts. Frontend adds `ShareButton` in
conversation header and `SharedConversationView` at `/share/[token]`.
- **Phase 3 (Forking):** `forked_from` column added to schema for future
support — no logic yet.

### Key changes across layers

| Layer | Files | What |
|-------|-------|------|
| Express proxy | `server/auth.ts`, `routes.ts`, `agent-client.ts`,
`server.ts` | Cookie-based auth extraction, share token forwarding, new
proxy routes |
| Agent service | `server.py`, `sdk_manager.py` | Owner
storage/verification, share token validation against engine |
| Engine API | `cc_conversations.py`, `cc_conversations_types.py`,
`db.py`, `main.py` | Share toggle, public share endpoint, session
linking, new DB functions |
| Frontend | `ShareButton.tsx`, `SharedConversationView.tsx`,
`share/[token]/page.tsx`, `AppShell.tsx`, `ChatPane.tsx`, `useSSE.ts`,
`conversations-api.ts` | Share UI, read-only public view, session
linking on everyrow_session event |
| Database | `20260324000000_cc_conversation_sharing.sql` | share_token,
forked_from, cc_conversation_id, RLS policies |

## Test plan

- [ ] Open a conversation as User A — SSE stream works, chat works
- [ ] In incognito (no auth), try
`/app/api/session-history?sessionId=<UUID>` — should get 401
- [ ] Log in as User B, try the same — should get 403
- [ ] As User A, click Share toggle — get share URL with copyable link
- [ ] Open share URL in incognito — see read-only chat + data view (no
input box)
- [ ] Revoke share — share URL returns error
- [ ] Verify existing conversation flow (create, chat, resume) still
works end-to-end
- [ ] Run migration against local/docker Supabase and verify columns +
policies created

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Sourced from commit 6682622497b22cf60863fdad10c050d960f36567

Author: jackwildman

futuresearch-mcp/src/futuresearch_mcp/http_config.py

@@ -43,12 +43,21 @@
     "user_agent", default=""
 )
 
+_conversation_id_var: contextvars.ContextVar[str] = contextvars.ContextVar(
+    "conversation_id", default=""
+)
+
 
 def get_user_agent() -> str:
     """Return the User-Agent of the current HTTP request (empty in stdio mode)."""
     return _user_agent_var.get()
 
 
+def get_conversation_id() -> str:
+    """Return the X-Conversation-Id of the current HTTP request (empty if absent)."""
+    return _conversation_id_var.get()
+
+
 def configure_http_mode(
     *,
     mcp: FastMCP,
@@ -210,6 +219,9 @@ async def dispatch(self, request, call_next):
         # Propagate User-Agent so downstream tool code can detect the client
         # even in stateless HTTP mode (no MCP initialize → no client_params).
         ua_token = _user_agent_var.set(request.headers.get("user-agent", ""))
+        cc_token = _conversation_id_var.set(
+            request.headers.get("x-conversation-id", "")
+        )
         try:
             start = _time.monotonic()
             response = await call_next(request)
@@ -236,6 +248,7 @@ async def dispatch(self, request, call_next):
             return response
         finally:
             _user_agent_var.reset(ua_token)
+            _conversation_id_var.reset(cc_token)
 
 
 def _add_middleware(

futuresearch-mcp/src/futuresearch_mcp/tool_helpers.py

@@ -20,6 +20,7 @@
 from futuresearch.generated.models.task_status import TaskStatus
 from futuresearch.generated.models.task_status_response import TaskStatusResponse
 from futuresearch.generated.types import Unset
+from futuresearch.session import create_session
 from mcp.server.fastmcp import Context
 from mcp.server.session import ServerSession
 from mcp.types import TextContent
@@ -60,6 +61,26 @@ def _get_client(ctx: FuturesearchContext) -> AuthenticatedClient:
     return ctx.request_context.lifespan_context.client_factory()
 
 
+def _get_conversation_id() -> str | None:
+    """Get the conversation ID from the current HTTP request context, if any."""
+    try:
+        from futuresearch_mcp.http_config import get_conversation_id  # noqa: PLC0415
+
+        val = get_conversation_id()
+        return val if val else None
+    except Exception:
+        return None
+
+
+def create_linked_session(
+    client: AuthenticatedClient,
+    **kwargs: Any,
+):
+    """Wrapper around SDK create_session that passes conversation_id from HTTP context."""
+    conv_id = _get_conversation_id()
+    return create_session(client=client, conversation_id=conv_id, **kwargs)
+
+
 def log_client_info(ctx: FuturesearchContext, tool_name: str) -> None:
     """Log MCP client identity and capabilities for the current request."""
     try:

futuresearch-mcp/src/futuresearch_mcp/tools.py

@@ -26,7 +26,7 @@
     rank_async,
     single_agent_async,
 )
-from futuresearch.session import create_session, list_sessions
+from futuresearch.session import list_sessions
 from futuresearch.task import cancel_task
 from mcp.types import CallToolResult, TextContent, ToolAnnotations
 from pydantic import BaseModel, create_model
@@ -65,6 +65,7 @@
     _fetch_task_result,
     _get_client,
     _record_task_ownership,
+    create_linked_session,
     create_tool_response,
     dedupe_summaries,
     log_client_info,
@@ -177,7 +178,7 @@ async def futuresearch_use_list(
     client = _get_client(ctx)
 
     try:
-        async with create_session(client=client) as session:
+        async with create_linked_session(client=client) as session:
             result = await use_built_in_list(
                 artifact_id=UUID(params.artifact_id),
                 session=session,
@@ -273,7 +274,7 @@ async def futuresearch_agent(
     if params.response_schema:
         response_model = _schema_to_model("AgentResult", params.response_schema)
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -359,7 +360,7 @@ async def futuresearch_single_agent(
         DynamicInput = create_model("DynamicInput", **fields)  # pyright: ignore[reportArgumentType, reportCallIssue]
         input_model = DynamicInput()
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -441,7 +442,7 @@ async def futuresearch_rank(
     if params.response_schema:
         response_model = _schema_to_model("RankResult", params.response_schema)
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -515,7 +516,7 @@ async def futuresearch_dedupe(
 
     input_data = params._aid_or_dataframe
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -607,7 +608,7 @@ async def futuresearch_merge(
     left_input = params._left_aid_or_dataframe
     right_input = params._right_aid_or_dataframe
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -685,7 +686,7 @@ async def futuresearch_forecast(
 
     input_data = params._aid_or_dataframe
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -757,7 +758,7 @@ async def futuresearch_classify(
 
     input_data = params._aid_or_dataframe
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)
@@ -827,7 +828,7 @@ async def futuresearch_upload_data(
         if df.empty:
             raise ValueError(f"CSV file is empty: {params.source}")
 
-    async with create_session(
+    async with create_linked_session(
         client=client, session_id=params.session_id, name=params.session_name
     ) as session:
         session_id_str = str(session.session_id)

futuresearch-mcp/tests/test_mcp_e2e.py

@@ -239,7 +239,7 @@ async def test_call_agent_tool(self, _http_state):
                     return_value=mock_task,
                 ),
                 patch(
-                    "futuresearch_mcp.tools.create_session",
+                    "futuresearch_mcp.tools.create_linked_session",
                     side_effect=fake_create_session,
                 ),
             ):

futuresearch-mcp/tests/test_server.py

@@ -317,7 +317,7 @@ async def test_submit_returns_task_id(self):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -356,7 +356,7 @@ async def test_submit_returns_task_id(self):
                 "futuresearch_mcp.tools.single_agent_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -386,7 +386,7 @@ async def test_submit_with_input_data(self):
                 "futuresearch_mcp.tools.single_agent_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -421,7 +421,7 @@ async def test_submit_with_response_schema(self):
                 "futuresearch_mcp.tools.single_agent_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -1023,7 +1023,7 @@ async def test_submit_with_inline_data(self):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -1062,7 +1062,7 @@ async def test_submit_with_artifact_id(self):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -1197,7 +1197,7 @@ async def test_upload_from_url(self):
                 return_value=mock_df,
             ),
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch(
@@ -1235,7 +1235,7 @@ async def test_upload_from_local_path(self, tmp_path: Path):
 
         with (
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch(
@@ -1296,7 +1296,7 @@ async def test_upload_from_url_http_mode_registers_poll_token(self):
                 return_value=mock_df,
             ),
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch(
@@ -1476,7 +1476,7 @@ async def test_submit_stdio_returns_single_content(self):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -1507,7 +1507,7 @@ async def test_submit_http_returns_widget_and_text(self, fake_redis):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch.object(redis_store, "get_redis_client", return_value=fake_redis),
@@ -1737,7 +1737,7 @@ async def test_agent_passes_session_params(self):
             patch(
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
-            patch("futuresearch_mcp.tools.create_session") as mock_cs,
+            patch("futuresearch_mcp.tools.create_linked_session") as mock_cs,
         ):
             mock_cs.return_value = _make_async_context_manager(mock_session)
             mock_op.return_value = mock_task
@@ -1767,7 +1767,7 @@ async def test_agent_passes_session_name(self):
             patch(
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
-            patch("futuresearch_mcp.tools.create_session") as mock_cs,
+            patch("futuresearch_mcp.tools.create_linked_session") as mock_cs,
         ):
             mock_cs.return_value = _make_async_context_manager(mock_session)
             mock_op.return_value = mock_task
@@ -1805,7 +1805,7 @@ async def test_upload_data_passes_session_id(self):
                 new_callable=AsyncMock,
                 return_value=mock_df,
             ),
-            patch("futuresearch_mcp.tools.create_session") as mock_cs,
+            patch("futuresearch_mcp.tools.create_linked_session") as mock_cs,
             patch(
                 "futuresearch_mcp.tools.create_table_artifact",
                 new_callable=AsyncMock,
@@ -1840,7 +1840,7 @@ async def test_response_includes_session_id(self):
                 "futuresearch_mcp.tools.agent_map_async", new_callable=AsyncMock
             ) as mock_op,
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
         ):
@@ -1884,7 +1884,7 @@ async def test_use_list_stdio_saves_csv(self, tmp_path, monkeypatch):
                 return_value=mock_result,
             ),
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch(
@@ -1931,7 +1931,7 @@ async def test_use_list_http_no_csv(self, tmp_path, monkeypatch):
                 return_value=mock_result,
             ),
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 return_value=_make_async_context_manager(mock_session),
             ),
             patch(
@@ -1968,7 +1968,7 @@ async def test_use_list_error_handling(self):
 
         with (
             patch(
-                "futuresearch_mcp.tools.create_session",
+                "futuresearch_mcp.tools.create_linked_session",
                 side_effect=EveryrowError("connection failed"),
             ),
         ):

futuresearch-mcp/tests/test_stdio_content.py

@@ -206,7 +206,7 @@ def _submit_patches(mock_op_path: str):
         ctx,
         patch(mock_op_path, new_callable=AsyncMock, return_value=mock_task),
         patch(
-            "futuresearch_mcp.tools.create_session",
+            "futuresearch_mcp.tools.create_linked_session",
             return_value=_make_async_cm(mock_session),
         ),
     )