borgmcp-shared 0.5.0 → 0.6.1

package/README.md

@@ -34,6 +34,7 @@ import { TEMPLATES } from 'borgmcp-shared/templates';
 import { patchRoleSectionText } from 'borgmcp-shared/role-section';
 import { compareBroadcastHwm } from 'borgmcp-shared/log-stream-hwm';
 import { formatDroneAddressToken } from 'borgmcp-shared/drone-address';
+import { canonicalizeRepositoryIdentity } from 'borgmcp-shared/runtime-metadata';
 import type { AppendLogRequest } from 'borgmcp-shared/protocol';
 import { ADAPTER_CONFORMANCE_FIXTURES } from 'borgmcp-shared/conformance';
 ```
@@ -50,6 +51,8 @@ The supported subpaths are:
 - `borgmcp-shared/role-section`: lossless role-text parsing and patching.
 - `borgmcp-shared/log-stream-hwm`: broadcast cursor ordering.
 - `borgmcp-shared/drone-address`: stable short drone-address rendering.
+- `borgmcp-shared/runtime-metadata`: pure validation and canonical repository
+  identity helpers for advisory local seat metadata.
 
 Generated declaration files are included in every published package. Public
 functions and contracts include API documentation in their TypeScript sources.
@@ -94,6 +97,12 @@ versioned request and success envelopes. An evicted seat's former bearer receive
 the terminal `410 DRONE_EVICTED` signal; revoked sessions return
 `401 SESSION_REVOKED`, while expired sessions return the only recoverable
 authentication outcome, `401 AUTH_EXPIRED`.
+An authenticated drone session updates only its own advisory identity with
+`PATCH /api/cubes/:cubeId/drones/self/metadata`. The strict patch carries no
+target seat ID. Metadata never grants authority or changes role, wake, liveness,
+timestamp, log, routing, or model-execution state.
+Identity responses include `runtime_metadata_reported`, keeping an omitted
+attach report distinct from a reported all-null or explicitly cleared state.
 See [docs/enrollment.md](docs/enrollment.md) for purpose-bound owner enrollment,
 ordinary ungranted enrollment, cube creation, pending enrollment, and retry contracts.
 
@@ -107,6 +116,9 @@ credential misuse, isolation and revocation, SSE framing/replay/cursor ordering,
 executable enrollment authority/retry/mismatch/redaction and cube-create
 idempotency, acks, claims, decisions, cube-scoped drone reassignment, role-class
 and single-seat invariants, eviction exclusion, and terminal bearer signaling.
+The same runner covers complete attach reports, own-seat metadata self-healing,
+canonical repository identity, invalid-patch atomicity, cross-cube isolation,
+secret non-echo, and authority/liveness/log non-interference.
 Manage-scoped cube, role, taxonomy, decision, and drone operations also share an
 authority matrix: managing parents may mutate; known same-cube read/write
 parents receive `403 ACCESS_DENIED`; drone sessions remain non-managing; and
@@ -120,8 +132,8 @@ its local/self-hosted implementation. The package does not define a second
 authority, migration target, or fallback implementation.
 
 The package's own suite covers built-in templates, role-section patching,
-broadcast high-water-mark ordering, drone-address formatting, and current public
-response shapes.
+broadcast high-water-mark ordering, drone-address formatting, runtime metadata
+canonicalization, and current public response shapes.
 
 ## Compatibility
 
@@ -142,11 +154,21 @@ immutable, but its artifact predates the local/self-hosted package cleanup. The
 immutable `v0.4.1` verification artifact exposed a platform-dependent SBOM audit
 and must never be published, moved, reused, rerun, or substituted.
 `borgmcp-shared@0.4.2` is published and immutable. `borgmcp-shared@0.4.3` is the
-immutable protocol v2 session-lifecycle release. This source now identifies the
-unpublished `0.5.0` protocol v3 attach-session contract release: attach responses
-carry the exact non-expiring `session: { id }` shape. This reviewed version bump
-grants no tag or publish authority; creating the annotated `v0.5.0` tag and
-publishing its exact reviewed artifact remain separate, independently gated steps.
+immutable protocol v2 session-lifecycle release. `borgmcp-shared@0.5.0` is the published protocol v3 attach-session contract
+release: attach responses carry the exact non-expiring `session: { id }` shape.
+`borgmcp-shared@0.5.1` is published and immutable under the accepted attempt-1
+registry-propagation incident: annotated tag object `045268aa8873da330819860012ecaddb4bc2883c` peels to
+`1981d7373e77f6edb4567872c1544bdbe2b1ef20`; workflow run `29984423571` published exact integrity
+`sha512-XUJq+FjY/cbarU9V1dIWnhNYcqyURTiGb6KyIzg99gy5hk/fEs5ee/8X/qvp7pw1Rshqt2J6I3TVbwJdlde2tA==` and must never be rerun. Independent npm verification
+confirmed its registry signature and SLSA provenance. `borgmcp-shared@0.6.0` was
+never published: annotated tag object `90a1cf686a0ce32a7aef836b0b82a930191b9030`
+peels to protected-main commit `fd69b08586481a60c88099dede8e4e066f73f2f2`;
+attempt-1 workflow run `30054936226` failed in tests before build, packaging,
+authentication, or registry mutation and must never be rerun or moved.
+This source now identifies the unpublished `0.6.1` runtime-metadata contract release. This
+reviewed version bump grants no tag or publish authority; creating annotated
+`v0.6.1` and publishing
+its exact reviewed artifact remain separate, independently gated steps.
 Consumers update shared, server, and client together: peers carrying protocol v2
 and v3 reject each other during credential-free preflight. No registry token
 belongs in this repository, package metadata, lockfiles, or a committed `.npmrc`;

package/dist/conformance/adapter.d.ts

@@ -1,4 +1,4 @@
-import { type CreateCubeResponse, type LogCursor } from '../protocol/index.js';
+import { type CreateCubeResponse, type LogCursor, type DroneRuntimeMetadata } from '../protocol/index.js';
 export interface ConformanceHttpResponse {
     status: number;
     body: unknown;
@@ -15,6 +15,35 @@ export interface ConformanceRole {
 export interface ConformanceDrone {
     readonly id: string;
 }
+export interface ConformanceDroneRuntimeState {
+    readonly metadata: DroneRuntimeMetadata;
+    readonly metadata_reported: boolean;
+    readonly metadata_revision: number;
+    readonly cube_id: string;
+    readonly role_id: string;
+    readonly session_state: 'active' | 'revoked' | 'expired';
+    readonly evicted: boolean;
+    readonly last_seen: string;
+    readonly heartbeat_count: number;
+    readonly wake_count: number;
+    readonly log_count: number;
+    readonly model_turn_count: number;
+    readonly grant_access: ConformanceCubeAccess | null;
+    readonly server_capabilities: readonly string[];
+    readonly principal_revoked: boolean;
+    readonly session_bound: boolean;
+    readonly last_log_post: string | null;
+    readonly last_regen_at: string | null;
+    readonly last_read_log_at: string | null;
+    readonly last_event_received_at: string | null;
+    readonly wake_path: 'live';
+    readonly wake_alert: null;
+    readonly monitor_armed: boolean;
+    readonly sse_connected: boolean;
+    readonly claim_count: number;
+    readonly decision_count: number;
+    readonly routing_eligible: boolean;
+}
 export type ConformanceCubeAccess = 'read' | 'write' | 'manage';
 export interface ConformanceCubeManagementState {
     readonly directive: string;
@@ -75,6 +104,7 @@ export interface ConformanceAdmin {
         readonly evicted: boolean;
         readonly session_revoked: boolean;
     }>;
+    inspectDroneRuntimeState(drone: ConformanceDrone): Promise<ConformanceDroneRuntimeState>;
     inspectCubeManagementState(cube: ConformanceCube): Promise<ConformanceCubeManagementState>;
     grantCreateCubeCapability(principal: ConformancePrincipal): Promise<void>;
     issueDroneSession(principal: ConformancePrincipal): Promise<string>;
@@ -91,6 +121,8 @@ export interface ConformanceOperations {
     protocol(credential: string | null): Promise<ConformanceHttpResponse>;
     enroll(request: unknown): Promise<ConformanceHttpResponse>;
     createCube(credential: string | null, request: unknown): Promise<ConformanceHttpResponse>;
+    attach(credential: string, request: unknown): Promise<ConformanceHttpResponse>;
+    selfMetadataUpdate(credential: string, cube: ConformanceCube, request: unknown): Promise<ConformanceHttpResponse>;
     append(credential: string, cube: ConformanceCube, request: unknown): Promise<ConformanceHttpResponse>;
     appendRaw(credential: string, cube: ConformanceCube, body: string): Promise<ConformanceHttpResponse>;
     read(credential: string, cube: ConformanceCube, request: unknown): Promise<ConformanceHttpResponse>;
@@ -163,6 +195,27 @@ export declare const ADAPTER_CONFORMANCE_FIXTURES: readonly [{
 }, {
     readonly id: "security.drone-session-rejection-causes";
     readonly area: "security";
+}, {
+    readonly id: "metadata.attach-report";
+    readonly area: "metadata";
+}, {
+    readonly id: "metadata.self-heal-patch";
+    readonly area: "metadata";
+}, {
+    readonly id: "security.metadata-invalid-atomic";
+    readonly area: "security";
+}, {
+    readonly id: "security.metadata-own-seat";
+    readonly area: "security";
+}, {
+    readonly id: "security.metadata-cross-cube-isolation";
+    readonly area: "security";
+}, {
+    readonly id: "security.metadata-noninterference";
+    readonly area: "security";
+}, {
+    readonly id: "security.metadata-secret-non-echo";
+    readonly area: "security";
 }, {
     readonly id: "security.active-stream-revocation";
     readonly area: "security";

package/dist/conformance/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/conformance/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAoBL,KAAK,kBAAkB,EACvB,KAAK,SAAS,EAEf,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,mCAAmC;IAClD,uBAAuB,EAAE,OAAO,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IAOnC,mCAAmC,EAAE,OAAO,CAAC;CAC9C;AAED,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IAExE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CACtC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7D,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEnD,SAAS,CACP,SAAS,EAAE,oBAAoB,EAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE;QACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;QACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;KAC/B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,WAAW,CACT,SAAS,EAAE,oBAAoB,EAC/B,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;IAEH,0BAA0B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3F,yBAAyB,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,wBAAwB,CAAC,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxG,qBAAqB,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5D,kBAAkB,CAChB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,0BAA0B,CACxB,SAAS,EAAE,oBAAoB,EAC/B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,eAAe,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,mBAAmB,IAAI,wBAAwB,CAAC;CACjD;AAGD,MAAM,WAAW,qBAAqB;IACpC,MAAM,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtE,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3D,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,CACJ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,SAAS,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,IAAI,CACF,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,cAAc,CACZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,SAAS,GAAG,IAAI,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C;AAED,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoB/B,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,2BAA2B,CAAC;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAEpC,oBAAoB,EAAE,aAAa,CAAC;QAClC,EAAE,EAAE,2BAA2B,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,yBAAyB;IAExC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAsMD,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,sBAAsB,EACnC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAgmCnC"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/conformance/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAuBL,KAAK,kBAAkB,EACvB,KAAK,SAAS,EAEd,KAAK,oBAAoB,EAC1B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;QAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,yBAAyB;IACxC,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,2BAA2B;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,OAAO,CAAC;IACjC,2BAA2B,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,mCAAmC;IAClD,uBAAuB,EAAE,OAAO,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IAOnC,mCAAmC,EAAE,OAAO,CAAC;CAC9C;AAED,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,yBAA0B,SAAQ,uBAAuB;IAExE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;CACtC;AAMD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC7D,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEnD,SAAS,CACP,SAAS,EAAE,oBAAoB,EAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,qBAAqB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE;QACvC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC;QACvC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;KAC/B,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,WAAW,CACT,SAAS,EAAE,oBAAoB,EAC/B,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,yBAAyB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC;QACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAC1B,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;IACH,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEzF,0BAA0B,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3F,yBAAyB,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,iBAAiB,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,wBAAwB,CAAC,SAAS,EAAE,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxG,qBAAqB,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC5D,kBAAkB,CAChB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,kBAAkB,GAC3B,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACxC,0BAA0B,CACxB,SAAS,EAAE,oBAAoB,EAC/B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAChD,eAAe,CAAC,SAAS,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,YAAY,CAAC,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE,mBAAmB,IAAI,wBAAwB,CAAC;CACjD;AAGD,MAAM,WAAW,qBAAqB;IACpC,MAAM,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtE,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC3D,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC/E,kBAAkB,CAChB,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,MAAM,CACJ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAEpC,SAAS,CACP,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,IAAI,CACF,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,GAAG,CACD,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,cAAc,CACZ,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,GACpB,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,KAAK,EAAE,gBAAgB,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,UAAU,CACR,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,eAAe,EACrB,MAAM,EAAE,SAAS,GAAG,IAAI,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;CAC5C;AAED,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2B/B,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACrC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,2BAA2B,CAAC;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,wBAAwB,EAAE,CAAC;IAEpC,oBAAoB,EAAE,aAAa,CAAC;QAClC,EAAE,EAAE,2BAA2B,CAAC;QAChC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACvC,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,yBAAyB;IAExC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAsMD,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,sBAAsB,EACnC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAy/CnC"}

package/dist/conformance/adapter.js

@@ -1,4 +1,4 @@
-import { ErrorCode, compareLogCursor, createProtocolEnvelope, decodeCreateCubeResponseEnvelope, decodeAppendLogResultEnvelope, decodeDecisionResultEnvelope, decodeDecisionsResultEnvelope, decodeEnrollmentExchangeResponseEnvelope, decodeEvictDroneResultEnvelope, decodeProtocolEnvelope, decodeProtocolErrorEnvelope, decodeProtocolTagPreflight, decodeReadLogResultEnvelope, decodeReassignDroneResultEnvelope, decodeSseFrames, PROTOCOL_LIMIT_CEILINGS, PROTOCOL_HTTP_CONTRACT, PROTOCOL_VERSION, utf8ByteLength, } from '../protocol/index.js';
+import { ErrorCode, compareLogCursor, createProtocolEnvelope, decodeCreateCubeResponseEnvelope, decodeAppendLogResultEnvelope, decodeDecisionResultEnvelope, decodeDecisionsResultEnvelope, decodeEnrollmentExchangeResponseEnvelope, decodeAttachResponseEnvelope, decodeDroneRuntimeMetadataPatch, decodeEvictDroneResultEnvelope, decodeProtocolEnvelope, decodeProtocolErrorEnvelope, decodeProtocolTagPreflight, decodeReadLogResultEnvelope, decodeReassignDroneResultEnvelope, decodeUpdateDroneRuntimeMetadataResponseEnvelope, decodeSseFrames, PROTOCOL_LIMIT_CEILINGS, PROTOCOL_HTTP_CONTRACT, PROTOCOL_VERSION, utf8ByteLength, } from '../protocol/index.js';
 import { ENROLLMENT_RETRY_CONFORMANCE } from './index.js';
 export const ADAPTER_CONFORMANCE_FIXTURES = [
     { id: 'http.unauthenticated-liveness', area: 'http' },
@@ -19,6 +19,13 @@ export const ADAPTER_CONFORMANCE_FIXTURES = [
     { id: 'security.cross-cube-drone-management', area: 'security' },
     { id: 'drones.evict-terminal-signal', area: 'drones' },
     { id: 'security.drone-session-rejection-causes', area: 'security' },
+    { id: 'metadata.attach-report', area: 'metadata' },
+    { id: 'metadata.self-heal-patch', area: 'metadata' },
+    { id: 'security.metadata-invalid-atomic', area: 'security' },
+    { id: 'security.metadata-own-seat', area: 'security' },
+    { id: 'security.metadata-cross-cube-isolation', area: 'security' },
+    { id: 'security.metadata-noninterference', area: 'security' },
+    { id: 'security.metadata-secret-non-echo', area: 'security' },
     { id: 'security.active-stream-revocation', area: 'security' },
 ];
 const DEFAULT_STREAM_DEADLINE_MS = 5_000;
@@ -554,6 +561,9 @@ export async function runAdapterConformance(environment, options = {}) {
     let readCredential = '';
     let writeCredential = '';
     let workerSession = '';
+    let metadataDroneA;
+    let metadataDroneB;
+    let metadataSessionA = '';
     await record('security.drone-management-authorization', async () => {
         workerRoleA = await environment.admin.createRole(cubeA, {
             roleClass: 'worker', isHumanSeat: false,
@@ -788,6 +798,260 @@ export async function runAdapterConformance(environment, options = {}) {
             expired_code: ErrorCode.AUTH_EXPIRED,
         };
     });
+    const knownMetadata = {
+        agent_kind: 'opencode',
+        reported_model: 'openai/gpt-5.6-sol',
+        working_repo_name: 'Byte-Ventures/borg-mcp',
+        working_repo_origin: 'https://github.com/Byte-Ventures/borg-mcp',
+    };
+    await record('metadata.attach-report', async () => {
+        metadataSessionA = 'M'.repeat(43);
+        const created = await environment.operations.attach(credentialA, createProtocolEnvelope('metadata-attach-created', {
+            cube_id: cubeA.id,
+            role_id: workerRoleA.id,
+            session_credential: metadataSessionA,
+            runtime_metadata: {
+                ...knownMetadata,
+                working_repo_origin: 'git@github.com:Byte-Ventures/borg-mcp.git',
+            },
+        }));
+        expectStatus(created, 200, 'Metadata attach create');
+        const createdPayload = decodeAttachResponseEnvelope(created.body).payload;
+        invariant(createdPayload.result === 'created', 'First metadata attach did not create a seat.');
+        invariant(same(createdPayload.drone.runtime_metadata, knownMetadata), 'Attach did not echo canonical metadata.');
+        invariant(createdPayload.drone.runtime_metadata_reported, 'Present attach report was not marked reported.');
+        metadataDroneA = { id: createdPayload.drone.id };
+        const unavailableSession = 'N'.repeat(43);
+        const unavailable = await environment.operations.attach(credentialA, createProtocolEnvelope('metadata-attach-unavailable', {
+            cube_id: cubeA.id,
+            role_id: workerRoleA.id,
+            session_credential: unavailableSession,
+        }));
+        expectStatus(unavailable, 200, 'Unavailable metadata attach');
+        const unavailableDrone = decodeAttachResponseEnvelope(unavailable.body).payload.drone;
+        invariant(same(unavailableDrone.runtime_metadata, {
+            agent_kind: null,
+            reported_model: null,
+            working_repo_name: null,
+            working_repo_origin: null,
+        }), 'Omitted attach report synthesized metadata.');
+        invariant(!unavailableDrone.runtime_metadata_reported, 'Omitted attach report was marked reported.');
+        const explicitUnknown = await environment.operations.attach(credentialA, createProtocolEnvelope('metadata-attach-explicit-unknown', {
+            cube_id: cubeA.id,
+            role_id: workerRoleA.id,
+            session_credential: 'U'.repeat(43),
+            runtime_metadata: {
+                agent_kind: null,
+                reported_model: null,
+                working_repo_name: null,
+                working_repo_origin: null,
+            },
+        }));
+        expectStatus(explicitUnknown, 200, 'Explicit unknown metadata attach');
+        const explicitUnknownDrone = decodeAttachResponseEnvelope(explicitUnknown.body).payload.drone;
+        invariant(explicitUnknownDrone.runtime_metadata_reported, 'All-null attach report was not marked reported.');
+        const reused = await environment.operations.attach(credentialA, createProtocolEnvelope('metadata-attach-reused', {
+            cube_id: cubeA.id,
+            role_id: workerRoleA.id,
+            prior_drone_id: metadataDroneA.id,
+            session_credential: metadataSessionA,
+            runtime_metadata: knownMetadata,
+        }));
+        expectStatus(reused, 200, 'Metadata attach reuse');
+        invariant(decodeAttachResponseEnvelope(reused.body).payload.result === 'reused', 'Prior seat was not reused.');
+        const cleared = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope('metadata-clear-all', {
+            agent_kind: null,
+            reported_model: null,
+            working_repo_name: null,
+            working_repo_origin: null,
+        }));
+        expectStatus(cleared, 200, 'Clear-all metadata patch');
+        const clearedPayload = decodeUpdateDroneRuntimeMetadataResponseEnvelope(cleared.body).payload;
+        invariant(clearedPayload.runtime_metadata_reported, 'Clear-all patch lost reported state.');
+        invariant(same(clearedPayload.runtime_metadata, explicitUnknownDrone.runtime_metadata), 'Clear-all patch did not produce explicit unknown metadata.');
+        expectStatus(await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope('metadata-restore-known', knownMetadata)), 200, 'Restore known metadata');
+        return {
+            created: true,
+            reused: true,
+            report_states: [
+                unavailableDrone.runtime_metadata_reported,
+                explicitUnknownDrone.runtime_metadata_reported,
+                clearedPayload.runtime_metadata_reported,
+            ],
+            canonical_response: true,
+        };
+    });
+    await record('metadata.self-heal-patch', async () => {
+        const updates = [
+            { request_id: 'metadata-known-new', patch: { reported_model: 'openai/gpt-5.6-terra' } },
+            { request_id: 'metadata-null-clear', patch: { reported_model: null } },
+            { request_id: 'metadata-null-repeat', patch: { reported_model: null } },
+            { request_id: 'metadata-same-value', patch: { agent_kind: 'opencode' } },
+        ];
+        for (const update of updates) {
+            const response = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope(update.request_id, update.patch));
+            expectStatus(response, 200, update.request_id);
+            decodeUpdateDroneRuntimeMetadataResponseEnvelope(response.body);
+        }
+        const state = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+        invariant(state.metadata.reported_model === null, 'Explicit null did not clear model metadata.');
+        invariant(state.metadata.agent_kind === 'opencode', 'Omitted field was not preserved.');
+        return { known_replace: true, omitted_unchanged: true, null_clear: true, repeat_safe: true };
+    });
+    await record('security.metadata-invalid-atomic', async () => {
+        const invalidPatches = [
+            {},
+            { agent_kind: 'OpenCode' },
+            { reported_model: '' },
+            { reported_model: 'a'.repeat(161) },
+            { reported_model: 'safe\u001b[2J' },
+            { reported_model: 'safe\u061cnext' },
+            { working_repo_name: 'owner/repo' },
+            { working_repo_name: 'owner/repo', working_repo_origin: 'https://user:secret@github.com/owner/repo' },
+            {
+                working_repo_name: 'owner/repo',
+                working_repo_origin: ['file:/', '', 'Users', 'secret', 'repo'].join('/'),
+            },
+            { role_id: workerRoleA.id },
+            { last_seen: '2026-07-14T10:00:00.000Z' },
+        ];
+        for (const [index, patch] of invalidPatches.entries()) {
+            const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+            const response = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope(`metadata-invalid-${index}`, patch));
+            expectError(response, 400, ErrorCode.INVALID_INPUT, `Invalid metadata patch ${index}`);
+            invariant(same(await environment.admin.inspectDroneRuntimeState(metadataDroneA), before), `Invalid metadata patch ${index} partially mutated state.`);
+        }
+        return { cases: invalidPatches.length, atomic: true, prior_safe_state_retained: true };
+    });
+    await record('security.metadata-own-seat', async () => {
+        const peer = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+        const peerBefore = await environment.admin.inspectDroneRuntimeState(peer);
+        const managedBefore = await environment.admin.inspectDroneRuntimeState(managedWorker);
+        const ownBefore = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+        const response = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope('metadata-own-seat', { agent_kind: 'claude' }));
+        expectStatus(response, 200, 'Own-seat metadata update');
+        invariant(same(await environment.admin.inspectDroneRuntimeState(peer), peerBefore), 'Own-seat update mutated a peer seat.');
+        invariant(same(await environment.admin.inspectDroneRuntimeState(managedWorker), managedBefore), 'Own-seat update mutated another existing seat.');
+        invariant((await environment.admin.inspectDroneRuntimeState(metadataDroneA)).role_id === ownBefore.role_id, 'Metadata update changed the current seat role.');
+        expectError(await environment.operations.selfMetadataUpdate(credentialA, cubeA, createProtocolEnvelope('metadata-manager-denied', { agent_kind: 'codex' })), 403, ErrorCode.ACCESS_DENIED, 'Manager metadata update');
+        expectError(await environment.operations.selfMetadataUpdate('Z'.repeat(43), cubeA, createProtocolEnvelope('metadata-invalid-session', { agent_kind: null })), 401, ErrorCode.AUTH_INVALID, 'Unknown metadata session');
+        const rejectedStates = [];
+        const revoked = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+        const revokedSession = await environment.admin.issueManagedDroneSession(revoked);
+        await environment.admin.revokeManagedDroneSession(revoked);
+        rejectedStates.push(['revoked', revoked, revokedSession, 401, ErrorCode.SESSION_REVOKED]);
+        const expired = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+        const expiredSession = await environment.admin.issueManagedDroneSession(expired);
+        await environment.admin.expireManagedDroneSession(expired);
+        rejectedStates.push(['expired', expired, expiredSession, 401, ErrorCode.AUTH_EXPIRED]);
+        const evicted = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+        const evictedSession = await environment.admin.issueManagedDroneSession(evicted);
+        expectStatus(await environment.operations.evictDrone(credentialA, cubeA, evicted, createProtocolEnvelope('metadata-evict-seat', {})), 200, 'Metadata seat eviction');
+        rejectedStates.push(['evicted', evicted, evictedSession, 410, ErrorCode.DRONE_EVICTED]);
+        for (const [label, drone, session, status, code] of rejectedStates) {
+            const before = await environment.admin.inspectDroneRuntimeState(drone);
+            expectError(await environment.operations.selfMetadataUpdate(session, cubeA, createProtocolEnvelope(`metadata-${label}-denied`, { agent_kind: null })), status, code, `${label} metadata session`);
+            invariant(same(await environment.admin.inspectDroneRuntimeState(drone), before), `${label} metadata denial mutated state.`);
+        }
+        return {
+            own_seat_only: true,
+            manager_denied: true,
+            unknown_session_denied: true,
+            revoked_expired_evicted_denied: true,
+        };
+    });
+    await record('security.metadata-cross-cube-isolation', async () => {
+        const sessionB = 'P'.repeat(43);
+        const metadataRoleB = await environment.admin.createRole(cubeB, {
+            roleClass: 'worker', isHumanSeat: false,
+        });
+        const attachedB = await environment.operations.attach(credentialB, createProtocolEnvelope('metadata-attach-b', {
+            cube_id: cubeB.id,
+            role_id: metadataRoleB.id,
+            session_credential: sessionB,
+            runtime_metadata: {
+                agent_kind: 'codex',
+                reported_model: null,
+                working_repo_name: 'Byte-Ventures/borg-mcp-server',
+                working_repo_origin: 'https://github.com/Byte-Ventures/borg-mcp-server',
+            },
+        }));
+        expectStatus(attachedB, 200, 'Cube B metadata attach');
+        metadataDroneB = { id: decodeAttachResponseEnvelope(attachedB.body).payload.drone.id };
+        const beforeB = await environment.admin.inspectDroneRuntimeState(metadataDroneB);
+        const foreign = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeB, createProtocolEnvelope('metadata-cross-cube', { reported_model: 'foreign/probe' }));
+        expectError(foreign, 404, ErrorCode.NOT_FOUND, 'Cross-cube metadata update');
+        const unknown = await environment.operations.selfMetadataUpdate(metadataSessionA, { id: '90000000-0000-4000-8000-000000000001' }, createProtocolEnvelope('metadata-unknown-cube', { reported_model: 'foreign/probe' }));
+        expectError(unknown, 404, ErrorCode.NOT_FOUND, 'Unknown-cube metadata update');
+        invariant(same(foreign.body, unknown.body), 'Foreign and unknown metadata probes were distinguishable.');
+        invariant(same(await environment.admin.inspectDroneRuntimeState(metadataDroneB), beforeB), 'Cross-cube metadata update mutated the foreign seat.');
+        const listedA = await environment.operations.listDrones(credentialA, cubeA);
+        invariant(!listedDroneIds(listedA).includes(metadataDroneB.id), 'Cube A roster disclosed cube B metadata seat.');
+        return { update_status: 404, foreign_unknown_indistinguishable: true, foreign_unchanged: true, roster_isolated: true };
+    });
+    await record('security.metadata-noninterference', async () => {
+        const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+        for (const [requestId, patch] of [
+            ['metadata-noninterference-known', { reported_model: 'openai/gpt-5.6-sol' }],
+            ['metadata-noninterference-repeat', { reported_model: 'openai/gpt-5.6-sol' }],
+            ['metadata-noninterference-null', { reported_model: null }],
+        ]) {
+            expectStatus(await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope(requestId, patch)), 200, requestId);
+        }
+        expectError(await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope('metadata-noninterference-reject', { authority: 'manage' })), 400, ErrorCode.INVALID_INPUT, 'Rejected metadata non-interference update');
+        const reattached = await environment.operations.attach(credentialA, createProtocolEnvelope('metadata-noninterference-reattach', {
+            cube_id: cubeA.id,
+            role_id: workerRoleA.id,
+            prior_drone_id: metadataDroneA.id,
+            session_credential: metadataSessionA,
+        }));
+        expectStatus(reattached, 200, 'Metadata non-interference reattach');
+        const after = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+        const { metadata: _beforeMetadata, metadata_revision: _beforeRevision, ...beforeInvariant } = before;
+        const { metadata: _afterMetadata, metadata_revision: _afterRevision, ...afterInvariant } = after;
+        invariant(same(beforeInvariant, afterInvariant), 'Metadata update changed authority/liveness/log state.');
+        return {
+            authority_unchanged: true,
+            role_unchanged: true,
+            liveness_unchanged: true,
+            logs_unchanged: true,
+            model_turns_unchanged: true,
+        };
+    });
+    await record('security.metadata-secret-non-echo', async () => {
+        const marker = 'SECRET-METADATA-MARKER';
+        const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+        const response = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope('metadata-secret', {
+            working_repo_name: 'owner/repo',
+            working_repo_origin: `https://user:${marker}@github.com/owner/repo?token=${marker}`,
+        }));
+        expectError(response, 400, ErrorCode.INVALID_INPUT, 'Secret-bearing metadata update');
+        invariant(!JSON.stringify(response.body).includes(marker), 'Metadata error echoed hostile secret input.');
+        invariant(same(await environment.admin.inspectDroneRuntimeState(metadataDroneA), before), 'Secret-bearing metadata input was persisted.');
+        const hostileKeys = [
+            'SECRET-METADATA-KEY-MARKER',
+            `control\u001b[2J`,
+            `bidi\u061cmarker`,
+            `token_${'a'.repeat(48)}`,
+        ];
+        for (const [index, key] of hostileKeys.entries()) {
+            const rejected = await environment.operations.selfMetadataUpdate(metadataSessionA, cubeA, createProtocolEnvelope(`metadata-secret-key-${index}`, { [key]: 'x' }));
+            expectError(rejected, 400, ErrorCode.INVALID_INPUT, `Hostile metadata key ${index}`);
+            invariant(!JSON.stringify(rejected.body).includes(key), `Metadata error echoed hostile key ${index}.`);
+        }
+        const logs = await environment.operations.read(credentialA, cubeA, createProtocolEnvelope('metadata-secret-log-read', { cursor: null, limit: 500 }));
+        expectStatus(logs, 200, 'Metadata secret log read');
+        for (const hostile of [marker, ...hostileKeys]) {
+            invariant(!JSON.stringify(logs.body).includes(hostile), 'Metadata input leaked into activity logs.');
+        }
+        return {
+            rejected_pre_persistence: true,
+            response_secret_free: true,
+            state_secret_free: true,
+            log_secret_free: true,
+            unknown_key_secret_free: true,
+        };
+    });
     await record('security.active-stream-revocation', async () => {
         invariant(liveCursor, 'Stream fixture did not produce a live cursor.');
         const opened = await environment.operations.openStream(credentialA, cubeA, liveCursor);