@echomem/mcp 1.4.51 → 1.4.53

package/README.md

@@ -133,6 +133,20 @@ Both hook entries are merged idempotently into `~/.codex/hooks.json` and
 `~/.claude/settings.json`; unrelated user hooks and settings are preserved. Hooks fail open when
 their local input is missing so they cannot prevent a conversation from starting or finishing.
 
+### Cloud Cowork through `remote-devices`
+
+Cloud Cowork inference cannot use the local hook or transcript-verification path. The shared local
+MCP process also must not retain one cloud conversation as global bridge state. Cloud Cowork agents
+therefore pass their runtime-issued `session_...` identifier as `cloudCoworkSessionId` on each
+EchoMem tool call. EchoMem binds that request to the canonical `cowork:session_...` context with
+`cloud_cowork_tool_argument` evidence and `remote_mcp` origin, then links or saves against that
+context without changing shared bridge state.
+
+This identity is intentionally reported as **provisional**: the authenticated user owns the
+context and ticket link, but EchoMem cannot independently corroborate the cloud identifier from a
+local transcript. Verified local Cowork remains `cowork:local_...` with trusted local evidence.
+Never convert one form into the other or silently present a provisional cloud link as verified.
+
 ### Manual / headless (SSH, containers, CI)
 
 No browser? Provide secrets directly — this is the documented headless path:

package/dist/index.js

@@ -16,7 +16,7 @@ import { MCP_PACKAGE_VERSION, MCP_SERVER_INSTRUCTIONS, MEMORY_CITATION_INSTRUCTI
 import { clearBillingAlert, writeBillingAlert } from "./billing-alert.js";
 import { checkLatestUpdateStatus, formatUpdateNotice, formatUpdateStatusText, startBackgroundUpdateCheck, } from "./update-check.js";
 import { autoUpdateHeadlessRuntime } from "./headless-runtime.js";
-import { resolveSourceSessionRequestContext, resolveSourceSessionFromBindingToken, } from "./source-session.js";
+import { SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE, resolveCloudCoworkSessionFromToolArguments, resolveSourceSessionRequestContext, resolveSourceSessionFromBindingToken, } from "./source-session.js";
 const ECHO_API_BASE_URL = process.env.ECHO_API_BASE_URL || "https://echo-mem-chrome.vercel.app";
 const ECHO_PRICING_URL = process.env.ECHO_PRICING_URL || "https://echoknows.com/account";
 const ECHO_MEMORY_WEB_URL = (process.env.ECHO_MEMORY_WEB_URL || "https://echoknows.com/memory").replace(/\/$/, "");
@@ -169,6 +169,17 @@ function formatReconnectRequiredResult(error) {
         "No editor restart is needed. Keep all credentials out of chat.",
     ].join("\n");
 }
+function formatWorkspaceTicketNotFoundResult(error) {
+    if (!axios.isAxiosError(error) || error.response?.status !== 404)
+        return null;
+    if (errorCodeFrom(error.response.data) !== "WORKSPACE_TICKET_NOT_FOUND")
+        return null;
+    return [
+        "🎫 This Echo workspace ticket no longer exists or is unavailable.",
+        "Do not retry this ticket ID.",
+        "Ask the user whether to continue without a ticket or attach this session to another ticket.",
+    ].join("\n");
+}
 /** Map a thrown error to the telemetry error_kind taxonomy. */
 function classifyError(error) {
     if (error instanceof NoTokenError)
@@ -339,6 +350,9 @@ function detectMcpHostFromEnv() {
         return "cursor";
     if (process.env.WINDSURF_WORKSPACE_ID || process.env.WINDSURF_USER_ID)
         return "windsurf";
+    // Cowork embeds a Claude Code process, but this outer host ID is the distinguishing signal.
+    if (process.env.CLAUDE_CODE_HOST_SESSION_ID)
+        return "cowork";
     if (process.env.CLAUDE_CODE || process.env.CLAUDECODE || process.env.ANTHROPIC_CLAUDE_CODE) {
         return "claude_code";
     }
@@ -697,7 +711,7 @@ class EchoMemApiClient {
         const requestContext = this.requestContext.getStore();
         return requestContext === undefined ? this.boundSourceSession : requestContext.sourceSession;
     }
-    getRequestVerifiedSourceSession() {
+    getRequestSourceSession() {
         const requestContext = this.requestContext.getStore();
         if (!requestContext || requestContext.lineageStatus === "unbound")
             return null;
@@ -709,26 +723,29 @@ class EchoMemApiClient {
     async withRequestContext(requestContext, operation) {
         return this.requestContext.run(requestContext, operation);
     }
-    async bindSourceSession(verified, persistForBridge = true) {
+    async bindSourceSession(identity, persistForBridge = true) {
         this.synchronizeAccountContext();
-        const cached = this.sourceSessionsByCanonicalKey.get(verified.canonicalKey);
+        if (identity.evidence === SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE && persistForBridge) {
+            throw new Error("A provisional Cloud Cowork identity cannot become shared bridge state");
+        }
+        const cached = this.sourceSessionsByCanonicalKey.get(identity.canonicalKey);
         if (cached) {
             if (persistForBridge)
                 this.boundSourceSession = cached;
             return { ...cached, created: false };
         }
         const response = await this.axios.post("/api/extension/source-sessions/bind", {
-            provider: verified.provider,
-            providerSessionId: verified.providerSessionId,
-            evidence: verified.evidence,
+            provider: identity.provider,
+            providerSessionId: identity.providerSessionId,
+            evidence: identity.evidence,
         });
         const contextId = readString(response.data, "contextId");
         const canonicalKey = readString(response.data, "canonicalKey");
-        if (response.data?.success !== true || !contextId || canonicalKey !== verified.canonicalKey) {
+        if (response.data?.success !== true || !contextId || canonicalKey !== identity.canonicalKey) {
             throw new Error("EchoMem returned an invalid source-session binding receipt");
         }
-        const bound = { ...verified, contextId };
-        this.sourceSessionsByCanonicalKey.set(verified.canonicalKey, bound);
+        const bound = { ...identity, contextId };
+        this.sourceSessionsByCanonicalKey.set(identity.canonicalKey, bound);
         if (this.sourceSessionsByCanonicalKey.size > 64) {
             const oldestKey = this.sourceSessionsByCanonicalKey.keys().next().value;
             if (oldestKey)
@@ -745,9 +762,10 @@ class EchoMemApiClient {
         const parsed = linkWorkspaceTicketSessionSchema.parse(args ?? {});
         // A bridge-level compatibility binding can outlive a conversation in
         // long-running hosts. Ticket links are therefore allowed to take the fast
-        // path only from identity verified for this exact request; otherwise the
-        // Desktop transcript watcher completes the link from local evidence.
-        const sourceSession = this.getRequestVerifiedSourceSession();
+        // path only from identity scoped to this exact request. That identity is
+        // either verified host metadata or an explicitly marked provisional Cloud
+        // Cowork claim; otherwise Desktop completes the link from local evidence.
+        const sourceSession = this.getRequestSourceSession();
         if (!sourceSession)
             return null;
         const response = await this.axios.post(`/api/extension/workspace-tickets/${encodeURIComponent(parsed.ticketId)}/sessions`, {
@@ -1026,10 +1044,14 @@ class EchoMemApiClient {
         // For an encrypted account, hand the server the key transiently in the X-Encryption-Key header
         // so it encrypts at rest (mirrors the extension's write path, spec §3.1a). Locked → LockedError.
         const enc = await this.encState();
+        const boundSourceSession = this.getBoundSourceSession();
+        const originChannel = boundSourceSession?.evidence === SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE
+            ? "remote_mcp"
+            : "local_mcp";
         const config = {
             headers: {
                 "X-EchoMem-Request-Id": randomUUID(),
-                "X-EchoMem-Origin-Channel": "local_mcp",
+                "X-EchoMem-Origin-Channel": originChannel,
                 ...(enc.enabled && enc.key ? { "X-Encryption-Key": enc.key } : {}),
             },
         };
@@ -1039,9 +1061,10 @@ class EchoMemApiClient {
                 sourceUrl: parsed.url,
                 source: parsed.source || "mcp_server",
                 title: parsed.title,
-                // A verified source session owns the memory context. The independent opaque scope still
+                // A source-session identity owns the memory context. Provisional Cloud Cowork identity
+                // is explicitly marked by its evidence and origin channel. The independent opaque scope still
                 // governs group-sharing consent and never becomes the source-session identity.
-                conversationKey: this.getBoundSourceSession()?.canonicalKey ?? groupSharingScopeId,
+                conversationKey: boundSourceSession?.canonicalKey ?? groupSharingScopeId,
                 groupSharingScopeId,
                 passthrough: parsed.passthrough || false,
                 triggerMessage: parsed.triggerMessage ||
@@ -1411,8 +1434,10 @@ class EchoMemMCPServer {
         });
     }
     getMcpClientAnalytics() {
-        const hostPlatform = normalizeMcpHostPlatform(this.mcpClientName)
-            ?? detectMcpHostFromEnv()
+        const environmentPlatform = detectMcpHostFromEnv();
+        const hostPlatform = (environmentPlatform === "cowork" ? environmentPlatform : undefined)
+            ?? normalizeMcpHostPlatform(this.mcpClientName)
+            ?? environmentPlatform
             ?? "unknown";
         return {
             mcp_client_name: this.mcpClientName,
@@ -1486,6 +1511,23 @@ class EchoMemMCPServer {
             catch {
                 // Malformed host metadata is not model input. Ignore it and retain the explicit fallback.
             }
+            let provisionalCloudSession = null;
+            try {
+                provisionalCloudSession = resolveCloudCoworkSessionFromToolArguments(toolArgs);
+            }
+            catch (error) {
+                throw new McpError(ErrorCode.InvalidParams, error instanceof Error ? error.message : "Invalid Cloud Cowork session identity");
+            }
+            if (provisionalCloudSession && sourceResolution.sourceSession) {
+                throw new McpError(ErrorCode.InvalidParams, "This request already has a verified local source session. Omit cloudCoworkSessionId rather than mixing identities.");
+            }
+            if (provisionalCloudSession) {
+                sourceResolution = {
+                    sourceSession: provisionalCloudSession,
+                    isSubagent: false,
+                    lineageStatus: "not_applicable",
+                };
+            }
             // A child request starts fail-closed. Resolved children bind to the originating root; unresolved
             // children carry an explicit null so AsyncLocalStorage cannot fall through to a global binding.
             let requestSourceSession = sourceResolution.isSubagent
@@ -1735,6 +1777,13 @@ class EchoMemMCPServer {
                             isError: true,
                         };
                     }
+                    const missingWorkspaceTicket = formatWorkspaceTicketNotFoundResult(error);
+                    if (missingWorkspaceTicket) {
+                        return {
+                            content: [{ type: "text", text: missingWorkspaceTicket }],
+                            isError: true,
+                        };
+                    }
                     const upgradeRequired = formatUpgradeRequiredResult(error);
                     if (upgradeRequired) {
                         return {
@@ -2028,15 +2077,26 @@ Details: ${m.details || "N/A"}`)
         }
         const ticket = isRecord(result.ticket) ? result.ticket : {};
         const workspaceId = readString(ticket, "workspaceId") ?? parsed.workspaceId;
+        const sourceSession = this.client.getBoundSourceSession();
+        const provisional = sourceSession?.evidence === SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE;
         return {
             content: [{
                     type: "text",
                     text: [
                         result.changed === true
-                            ? "Linked this verified source session to the Echo workspace ticket."
-                            : "This verified source session was already linked to the Echo workspace ticket.",
+                            ? provisional
+                                ? "Linked this provisional Cloud Cowork session to the Echo workspace ticket."
+                                : "Linked this verified source session to the Echo workspace ticket."
+                            : provisional
+                                ? "This provisional Cloud Cowork session was already linked to the Echo workspace ticket."
+                                : "This verified source session was already linked to the Echo workspace ticket.",
                         `Ticket: ${parsed.ticketId}`,
                         workspaceId ? `Workspace: ${workspaceId}` : "",
+                        sourceSession ? `Source session: ${sourceSession.canonicalKey}` : "",
+                        sourceSession ? `Context: ${sourceSession.contextId}` : "",
+                        provisional
+                            ? "Identity trust: provisional (reported by Cloud Cowork in the tool call; not verified by a local transcript). Repeat cloudCoworkSessionId on later EchoMem calls from this conversation."
+                            : "",
                         "Retries are safe and do not create duplicate links or history events.",
                     ].filter(Boolean).join("\n"),
                 }],

package/dist/source-session.js

@@ -4,6 +4,7 @@ import { resolveClaudeCoworkSessionsDir, resolveClaudeProjectsDir, resolveCodexS
 export const SOURCE_SESSION_BINDING_EVIDENCE = "local_jsonl_tool_call";
 export const SOURCE_SESSION_HOOK_EVIDENCE = "local_session_start_hook";
 export const SOURCE_SESSION_MCP_METADATA_EVIDENCE = "local_mcp_session_metadata";
+export const SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE = "cloud_cowork_tool_argument";
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const UUID_IN_TEXT_RE = /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i;
 const MAX_TAIL_BYTES = 512 * 1024;
@@ -20,13 +21,18 @@ function normalizedProviderSessionId(provider, value) {
     if (provider === "codex" && !UUID_RE.test(normalized)) {
         throw new Error("Codex source-session ID must be a UUID");
     }
-    if (provider === "cowork" && !/^local_[A-Za-z0-9_-]{1,194}$/.test(normalized)) {
-        throw new Error("Cowork source-session ID must use the local_ host session identifier");
+    if (provider === "cowork"
+        && !/^local_[A-Za-z0-9_-]{1,194}$/.test(normalized)
+        && !/^session_[A-Za-z0-9_-]{1,192}$/.test(normalized)) {
+        throw new Error("Cowork source-session ID must use a local_ host ID or session_ Cloud Cowork ID");
     }
     return UUID_RE.test(normalized) ? normalized.toLowerCase() : normalized;
 }
 export function verifiedSourceSession(provider, providerSessionId, evidence) {
     const normalized = normalizedProviderSessionId(provider, providerSessionId);
+    if (provider === "cowork" && !normalized.startsWith("local_")) {
+        throw new Error("Verified Cowork source-session ID must use the local_ host identifier");
+    }
     return {
         provider,
         providerSessionId: normalized,
@@ -34,6 +40,26 @@ export function verifiedSourceSession(provider, providerSessionId, evidence) {
         evidence,
     };
 }
+export function provisionalCloudCoworkSession(providerSessionId) {
+    const normalized = normalizedProviderSessionId("cowork", providerSessionId);
+    if (!normalized.startsWith("session_")) {
+        throw new Error("Cloud Cowork source-session ID must use the session_ identifier from the cloud runtime");
+    }
+    return {
+        provider: "cowork",
+        providerSessionId: normalized,
+        canonicalKey: `cowork:${normalized}`,
+        evidence: SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE,
+    };
+}
+export function resolveCloudCoworkSessionFromToolArguments(args) {
+    if (!isRecord(args) || args.cloudCoworkSessionId === undefined)
+        return null;
+    if (typeof args.cloudCoworkSessionId !== "string") {
+        throw new Error("cloudCoworkSessionId must be the current Cloud Cowork session_ identifier");
+    }
+    return provisionalCloudCoworkSession(args.cloudCoworkSessionId);
+}
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -361,14 +387,23 @@ export function resolveSourceSessionRequestContext(metadata, options = {}) {
             agentDepth: lineage.agentDepth,
         };
     }
+    const isClaudeHost = host.includes("claude") || host.includes("cowork");
+    const coworkCandidate = env.CLAUDE_CODE_HOST_SESSION_ID?.trim() ?? "";
+    // Cowork embeds Claude Code, so its MCP handshake may still identify the nested client as
+    // "Claude Code" and expose both IDs. The outer host session is the durable Cowork conversation;
+    // it must win over the nested CLI session whenever Anthropic supplies both host-owned values.
+    if (isClaudeHost && coworkCandidate) {
+        return {
+            sourceSession: verifiedSourceSession("cowork", coworkCandidate, SOURCE_SESSION_MCP_METADATA_EVIDENCE),
+            isSubagent: false,
+            lineageStatus: "not_applicable",
+        };
+    }
     if (host.includes("claude_desktop") || host === "claude" || host.includes("cowork")) {
-        const candidate = env.CLAUDE_CODE_HOST_SESSION_ID?.trim() ?? "";
         return {
-            sourceSession: candidate
-                ? verifiedSourceSession("cowork", candidate, SOURCE_SESSION_MCP_METADATA_EVIDENCE)
-                : null,
+            sourceSession: null,
             isSubagent: false,
-            lineageStatus: candidate ? "not_applicable" : "unbound",
+            lineageStatus: "unbound",
         };
     }
     if (host.includes("claude_code")) {
@@ -384,7 +419,10 @@ export function resolveSourceSessionRequestContext(metadata, options = {}) {
     return { sourceSession: null, isSubagent: false, lineageStatus: "unbound" };
 }
 export function resolveSourceSessionFromMcpContext(metadata, options = {}) {
-    return resolveSourceSessionRequestContext(metadata, options).sourceSession;
+    const sourceSession = resolveSourceSessionRequestContext(metadata, options).sourceSession;
+    return sourceSession?.evidence === SOURCE_SESSION_CLOUD_TOOL_ARGUMENT_EVIDENCE
+        ? null
+        : sourceSession;
 }
 export function resolveSourceSessionFromBindingToken(bindingToken, options = {}) {
     const normalizedToken = bindingToken.trim().toLowerCase();

package/dist/v1-contract.js

@@ -164,7 +164,32 @@ function decorateLocalToolSpec(tool) {
 const triggerMetadataSchema = {
     triggerMessage: z.string().optional(),
     triggerMessageRole: z.string().optional(),
+    cloudCoworkSessionId: z.string().regex(/^session_[A-Za-z0-9_-]{1,192}$/).optional(),
 };
+const CLOUD_COWORK_SESSION_DESCRIPTION = "Cloud Cowork only: the current session_ identifier supplied by the Cowork runtime. Repeat it on each EchoMem call so the shared remote-devices bridge can attach that one request to the same provisional conversation context. Never guess or reuse an ID from another conversation. Local Cowork, Claude Code, and Codex must omit this field.";
+const CLOUD_COWORK_SESSION_PROPERTY = {
+    type: "string",
+    pattern: "^session_[A-Za-z0-9_-]{1,192}$",
+    description: CLOUD_COWORK_SESSION_DESCRIPTION,
+};
+const SOURCE_CONTEXT_FREE_TOOL_NAMES = new Set([
+    canonicalToolNames.bindSourceSession,
+    canonicalToolNames.updateStatus,
+    canonicalToolNames.contextHealth,
+    canonicalToolNames.recompose,
+]);
+function injectCloudCoworkSession(specs) {
+    for (const spec of specs) {
+        if (SOURCE_CONTEXT_FREE_TOOL_NAMES.has(spec.name))
+            continue;
+        const existing = spec.inputSchema.properties ?? {};
+        spec.inputSchema.properties = {
+            ...existing,
+            cloudCoworkSessionId: CLOUD_COWORK_SESSION_PROPERTY,
+        };
+    }
+    return specs;
+}
 // Canonical workspace selector for tools that act inside a company workspace.
 // `workspaceId` is the current name; `groupId` is the legacy alias kept working
 // so existing prompts keep functioning. Handlers normalize with
@@ -478,7 +503,7 @@ export function listToolSpecs(opts = {}) {
         {
             name: canonicalToolNames.linkWorkspaceTicketSession,
             title: "Link this agent conversation to an Echo workspace ticket",
-            description: withMcpVersion("Call when the user asks to work on, continue, attach, or bind this conversation to an Echo workspace ticket and supplies its UUID. Pass the ticketId exactly; pass workspaceId when a structured Echo ticket marker provides it. The operation is idempotent. If the current source session is already verified, EchoMem links it immediately. Otherwise Echo Desktop can recover this exact tool invocation from the local transcript and finish the verified link; never guess or ask the user for a source-session/context ID."),
+            description: withMcpVersion("Call when the user asks to work on, continue, attach, or bind this conversation to an Echo workspace ticket and supplies its UUID. Pass the ticketId exactly; pass workspaceId when a structured Echo ticket marker provides it. The operation is idempotent. A verified local source session links immediately. Cloud Cowork has no local transcript, so pass its current session_ runtime identifier as cloudCoworkSessionId; EchoMem records that path explicitly as provisional and links it immediately. Otherwise Echo Desktop can recover this exact invocation from a local transcript. Never guess or ask the user for a source-session/context ID."),
             inputSchema: {
                 type: "object",
                 properties: {
@@ -1097,5 +1122,5 @@ export function listToolSpecs(opts = {}) {
             },
         },
     ];
-    return injectWorkspaceSelector(tools).map(decorateLocalToolSpec);
+    return injectWorkspaceSelector(injectCloudCoworkSession(tools)).map(decorateLocalToolSpec);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@echomem/mcp",
-  "version": "1.4.51",
+  "version": "1.4.53",
   "description": "EchoMem MCP bridge for cross-agent memory, local history import, and recall",
   "main": "dist/index.js",
   "type": "module",
@@ -33,7 +33,7 @@
     "test:billing-ui": "npm run build && node test/setup-ui.test.mjs billing",
     "test:config-safety": "npm run build && node test/config-safety.test.mjs",
     "test:mcp-control": "npm run build && node test/mcp-control.test.mjs",
-    "test": "npm run build && node test/source-session.test.mjs && node test/source-session-hook.test.mjs && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/onboarding-resilience.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/workspace-selector.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/headless-runtime.test.mjs && node test/claude-code-config.test.mjs && node test/config-safety.test.mjs && node test/mcp-control.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/save-checkpoint-hook.test.mjs && node test/durable-entry.test.mjs && node test/durable-reexec.test.mjs && node test/doctor.test.mjs && node test/environment-matrix.test.mjs",
+    "test": "npm run build && node test/source-session.test.mjs && node test/cowork-ticket-session.test.mjs && node test/source-session-hook.test.mjs && node test/local-data-paths.test.mjs && node test/crypto.test.mjs && node test/integration.test.mjs && node test/onboarding-resilience.test.mjs && node test/local-auth.test.mjs && node test/retrieval-only.test.mjs && node test/no-restart.test.mjs && node test/canonical-golden.test.mjs && node test/tools.test.mjs && node test/workspace-selector.test.mjs && node test/group-map.test.mjs && node test/update-check.test.mjs && node test/headless-runtime.test.mjs && node test/claude-code-config.test.mjs && node test/config-safety.test.mjs && node test/mcp-control.test.mjs && node test/delete.test.mjs && node test/low-touch-tools.test.mjs && node test/migrate.test.mjs && node test/restart-recovery.test.mjs && node test/save-checkpoint-hook.test.mjs && node test/durable-entry.test.mjs && node test/durable-reexec.test.mjs && node test/doctor.test.mjs && node test/environment-matrix.test.mjs",
     "prepack": "npm run build"
   },
   "dependencies": {