borgmcp-shared 0.5.1 → 0.6.2

package/dist/templates.js.map

@@ -1 +1 @@
-{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAsCA,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;yFAOoD,CAAC;AAI1F,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;;iFAMiC,CAAC;AAElF,MAAM,CAAC,MAAM,mCAAmC,GAAG;;;;;;;;8GAQ2D,CAAC;AAE/G,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;iHAM6E,CAAC;AAElH,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;6HAK2E,CAAC;AAE9H,MAAM,CAAC,MAAM,sCAAsC,GAAG;;;;;sFAKgC,CAAC;AAEvF,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;0GAM8D,CAAC;AAE3G,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;4DAKY,CAAC;AAE7D,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;iFAIsC,CAAC;AAElF,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;0FAImD,CAAC;AAE3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,2BAA2B;IAC3B,gCAAgC;IAChC,gCAAgC;IAChC,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;mGAIwD,CAAC;AAEpG,MAAM,sBAAsB,GAAG;;;;;;;;qKAQsI,CAAC;AAEtK,MAAM,qBAAqB,GAAoB;IAC7C;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QACrE,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC;QAC3C,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,CAAC;QAC/F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,CAAC;QAC/F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC;QAC5F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,UAAU;KACtB;IACD;QACE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC;QAChF,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC9B,OAAO,EAAE,WAAW;KACrB;CACF,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;uFAyBmE,mCAAmC,GAAG,sCAAsC,GAAG,2BAA2B,GAAG,2BAA2B,EAAE,CAAC;AAElO,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;gFAiBgE,kCAAkC,GAAG,uBAAuB,GAAG,qBAAqB,EAAE,CAAC;AAEvK,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;mDAgB6B,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEjH,MAAM,eAAe,GAAG;;;;;;;;wFAQgE,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEtJ,MAAM,cAAc,GAAG;;;;;;;;qDAQ8B,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEnH,MAAM,gBAAgB,GAAG;;;;;;;2DAOkC,qBAAqB,EAAE,CAAC;AAEnF,MAAM,gBAAgB,GAAG;;;;;;;oEAO2C,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAElI,MAAM,YAAY,GAAa;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,0HAA0H;IACvI,cAAc,EAAE,sBAAsB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,gHAAgH;YACnI,oBAAoB,EAAE,WAAW;SAClC;QACD;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,kHAAkH;YACrI,oBAAoB,EAAE,OAAO;SAC9B;QACD;YACE,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,0GAA0G;YAC7H,oBAAoB,EAAE,aAAa;SACpC;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,8GAA8G;YACjI,oBAAoB,EAAE,eAAe;SACtC;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,yGAAyG;YAC5H,oBAAoB,EAAE,cAAc;SACrC;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,2FAA2F;YAC9G,oBAAoB,EAAE,gBAAgB;SACvC;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,iGAAiG;YACpH,oBAAoB,EAAE,gBAAgB;SACvC;KACF;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAoB;IACxC;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QAC1D,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC;QACjF,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,UAAU;KACtB;IACD;QACE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC9B,OAAO,EAAE,WAAW;KACrB;CACF,CAAC;AAEF,MAAM,OAAO,GAAa;IACxB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,mGAAmG;IAChH,cAAc,EAAE;;;;;;2DAMyC;IACzD,gBAAgB,EAAE,gBAAgB;IAClC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,oGAAoG;YACvH,oBAAoB,EAAE;;;;;;;;yFAQ6D,gCAAgC,GAAG,2BAA2B,EAAE;SACpJ;QACD;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,wFAAwF;YAC3G,oBAAoB,EAAE;;;;;;;qEAOyC,qBAAqB,EAAE;SACvF;QACD;YACE,IAAI,EAAE,UAAU;YAChB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,iGAAiG;YACpH,oBAAoB,EAAE;;;;;;8CAMkB,qBAAqB,EAAE;SAChE;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAA6B;IACjD,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,YAAY;CAC7B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,gBAAwB,EACxB,QAAyB;IAEzB,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAC;IAChF,OAAO,QAAQ,EAAE,cAAc,IAAI,gBAAgB,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,oBAA+C,EAC/C,QAAkB;IAElB,IAAI,oBAAoB,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,gBAAoD,EACpD,QAAyB;IAEzB,OAAO,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAChG,CAAC"}
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../src/templates.ts"],"names":[],"mappings":"AAsCA,MAAM,CAAC,MAAM,qBAAqB,GAAG;;;;;;;yFAOoD,CAAC;AAI1F,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;;iFAMiC,CAAC;AAElF,MAAM,CAAC,MAAM,mCAAmC,GAAG;;;;;;;;8GAQ2D,CAAC;AAE/G,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;iHAM6E,CAAC;AAElH,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;6HAK2E,CAAC;AAE9H,MAAM,CAAC,MAAM,sCAAsC,GAAG;;;;;sFAKgC,CAAC;AAEvF,MAAM,CAAC,MAAM,4BAA4B,GAAG;;;;;;0GAM8D,CAAC;AAE3G,MAAM,CAAC,MAAM,gCAAgC,GAAG;;;;;4DAKY,CAAC;AAE7D,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;iFAIsC,CAAC;AAElF,MAAM,CAAC,MAAM,uBAAuB,GAAG;;;;0FAImD,CAAC;AAE3F,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,kCAAkC;IAClC,sCAAsC;IACtC,uBAAuB;IACvB,2BAA2B;IAC3B,gCAAgC;IAChC,gCAAgC;IAChC,oBAAoB;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;mGAIwD,CAAC;AAEpG,MAAM,sBAAsB,GAAG;;;;;;;;qKAQsI,CAAC;AAEtK,MAAM,qBAAqB,GAAoB;IAC7C;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC;QACrE,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC;QAC3C,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,CAAC;QAC/F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,iBAAiB,EAAE,aAAa,EAAE,mBAAmB,EAAE,aAAa,EAAE,aAAa,CAAC;QAC/F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC;QAC5F,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,UAAU;KACtB;IACD;QACE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,SAAS;QAChB,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC;QAChF,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC/B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC9B,OAAO,EAAE,WAAW;KACrB;CACF,CAAC;AAEF,MAAM,WAAW,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;uFA2BmE,mCAAmC,GAAG,sCAAsC,GAAG,2BAA2B,GAAG,2BAA2B,EAAE,CAAC;AAElO,MAAM,OAAO,GAAG;;;;;;;;;;;;;;;;;gFAiBgE,kCAAkC,GAAG,uBAAuB,GAAG,qBAAqB,EAAE,CAAC;AAEvK,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;mDAgB6B,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEjH,MAAM,eAAe,GAAG;;;;;;;;wFAQgE,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEtJ,MAAM,cAAc,GAAG;;;;;;;;qDAQ8B,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAEnH,MAAM,gBAAgB,GAAG;;;;;;;2DAOkC,qBAAqB,EAAE,CAAC;AAEnF,MAAM,gBAAgB,GAAG;;;;;;;oEAO2C,mCAAmC,GAAG,qBAAqB,EAAE,CAAC;AAElI,MAAM,YAAY,GAAa;IAC7B,IAAI,EAAE,cAAc;IACpB,WAAW,EAAE,0HAA0H;IACvI,cAAc,EAAE,sBAAsB;IACtC,gBAAgB,EAAE,qBAAqB;IACvC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,aAAa;YACnB,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,gHAAgH;YACnI,oBAAoB,EAAE,WAAW;SAClC;QACD;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,kHAAkH;YACrI,oBAAoB,EAAE,OAAO;SAC9B;QACD;YACE,IAAI,EAAE,eAAe;YACrB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,0GAA0G;YAC7H,oBAAoB,EAAE,aAAa;SACpC;QACD;YACE,IAAI,EAAE,iBAAiB;YACvB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,8GAA8G;YACjI,oBAAoB,EAAE,eAAe;SACtC;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,yGAAyG;YAC5H,oBAAoB,EAAE,cAAc;SACrC;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,2FAA2F;YAC9G,oBAAoB,EAAE,gBAAgB;SACvC;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,aAAa,EAAE,IAAI;YACnB,mBAAmB,EAAE,IAAI;YACzB,iBAAiB,EAAE,iGAAiG;YACpH,oBAAoB,EAAE,gBAAgB;SACvC;KACF;CACF,CAAC;AAEF,MAAM,gBAAgB,GAAoB;IACxC;QACE,KAAK,EAAE,cAAc;QACrB,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QAC1D,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,mBAAmB;QAC1B,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,cAAc,CAAC;QAC1B,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,CAAC,UAAU,CAAC;QACtB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,YAAY;KACxB;IACD;QACE,KAAK,EAAE,gBAAgB;QACvB,QAAQ,EAAE,CAAC,SAAS,CAAC;QACrB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC;QACjF,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;QACpC,SAAS,EAAE,UAAU;KACtB;IACD;QACE,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,UAAU;QACnB,UAAU,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;KACrC;IACD;QACE,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC;QAC9B,OAAO,EAAE,WAAW;KACrB;CACF,CAAC;AAEF,MAAM,OAAO,GAAa;IACxB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,mGAAmG;IAChH,cAAc,EAAE;;;;;;2DAMyC;IACzD,gBAAgB,EAAE,gBAAgB;IAClC,KAAK,EAAE;QACL;YACE,IAAI,EAAE,aAAa;YACnB,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,oGAAoG;YACvH,oBAAoB,EAAE;;;;;;;;yFAQ6D,gCAAgC,GAAG,2BAA2B,EAAE;SACpJ;QACD;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,IAAI;YAChB,iBAAiB,EAAE,wFAAwF;YAC3G,oBAAoB,EAAE;;;;;;;qEAOyC,qBAAqB,EAAE;SACvF;QACD;YACE,IAAI,EAAE,UAAU;YAChB,aAAa,EAAE,IAAI;YACnB,iBAAiB,EAAE,iGAAiG;YACpH,oBAAoB,EAAE;;;;;;8CAMkB,qBAAqB,EAAE;SAChE;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAA6B;IACjD,OAAO,EAAE,OAAO;IAChB,cAAc,EAAE,YAAY;CAC7B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,gBAAwB,EACxB,QAAyB;IAEzB,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,gBAAgB,CAAC;IAChF,OAAO,QAAQ,EAAE,cAAc,IAAI,gBAAgB,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,oBAA+C,EAC/C,QAAkB;IAElB,IAAI,oBAAoB,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,QAAQ,CAAC,cAAc,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,gBAAoD,EACpD,QAAyB;IAEzB,OAAO,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAChG,CAAC"}

package/docs/compatibility.md

@@ -61,3 +61,31 @@ Model/provider selection is intentionally absent from the coordination contract.
 Agent CLIs own model configuration; Borg servers may expose the separate
 advisory `reported_model` field for session observability, but clients must not
 use it for routing, launch configuration, or authorization.
+
+## Advisory Runtime Metadata
+
+Protocol v3 defines one optional complete runtime-metadata report during attach
+and one authenticated own-seat patch at
+`PATCH /api/cubes/:cubeId/drones/self/metadata`. A complete report contains
+`agent_kind`, `reported_model`, `working_repo_name`, and
+`working_repo_origin`; each value may be explicitly `null`. In a patch, an
+omitted field is unchanged, `null` clears the field, and a value replaces it.
+Repository name and origin are one atomic pair.
+
+Every identity response also carries required `runtime_metadata_reported`.
+`false` means no complete report has been received, while `true` means the
+client reported metadata even when every value is explicitly `null`. A valid
+self-update patch sets the state to reported; clearing all four fields therefore
+remains distinguishable from an omitted attach report.
+
+The shared pure canonicalizer accepts public HTTPS and literal-`git` SSH/SCP
+repository identities and returns a credential-free HTTPS identity. It performs
+no DNS lookup or network request. It rejects local paths, IP and private hosts,
+userinfo, non-default ports, queries, fragments, percent encoding, malformed
+Unicode, terminal controls, and inconsistent repository pairs. Consumers use
+the exported conformance corpus rather than maintaining independent parsers.
+
+Runtime metadata is descriptive only. It cannot alter roles, grants,
+authorization, wake or liveness state, timestamps, logs, routing, or model
+execution. Mixed shared/server/client artifacts fail closed; there is no legacy
+decoder, hosted fallback, or metadata-derived authority.

package/docs/enrollment.md

@@ -9,10 +9,19 @@ This contract replaced the server-generated bearer response used by the
 published `borgmcp-shared@0.3.0` v1 baseline and shipped in the immutable
 `0.4.0` clean-slate v2 release. The immutable `v0.4.1` verification artifact
 failed its cross-platform SBOM audit and must never be published or rerun.
-`borgmcp-shared@0.4.2`, `borgmcp-shared@0.4.3`, and `borgmcp-shared@0.5.0` are
-published and immutable. This source now identifies the unpublished `0.5.1`
-package release. The version bump grants no tag or publication authority: creating
-the `v0.5.1` tag and publishing the reviewed artifact remain separate,
+`borgmcp-shared@0.4.2`, `borgmcp-shared@0.4.3`, `borgmcp-shared@0.5.0`,
+and `borgmcp-shared@0.5.1` are published and immutable. The accepted `0.5.1`
+incident is bound to tag object `045268aa8873da330819860012ecaddb4bc2883c`, protected-main commit
+`1981d7373e77f6edb4567872c1544bdbe2b1ef20`, attempt-1 run `29984423571`, and registry integrity
+`sha512-XUJq+FjY/cbarU9V1dIWnhNYcqyURTiGb6KyIzg99gy5hk/fEs5ee/8X/qvp7pw1Rshqt2J6I3TVbwJdlde2tA==`.
+`borgmcp-shared@0.6.0` was never published: annotated tag object
+`90a1cf686a0ce32a7aef836b0b82a930191b9030` peels to protected-main commit
+`fd69b08586481a60c88099dede8e4e066f73f2f2`; attempt-1 workflow run
+`30054936226` failed in tests before build, packaging, authentication, or registry
+mutation and must never be rerun or moved. `borgmcp-shared@0.6.1` is published
+and immutable. This source now identifies the unpublished `0.6.2` Coordinator
+activation-cadence release. The version bump grants no tag or publication
+authority: creating `v0.6.2` and publishing the reviewed artifact remain separate,
 independently gated steps.
 There is no compatibility path that returns a bearer from the server.
 

package/docs/releasing.md

@@ -122,10 +122,21 @@ These records remain evidence, not reusable release inputs:
   postpublish check reconstructed the wrong workflow identity and is the reason
   that machinery was removed.
 
-`borgmcp-shared@0.4.3` and `borgmcp-shared@0.5.0` are published and immutable.
-This source identifies the unpublished `0.5.1` package release. Its release
-requires reviewed source and explicit publication authorization through one
-protected publish run, followed by
-postpublish registry integrity, signature, and attestation verification. Consumers
+`borgmcp-shared@0.4.3`, `borgmcp-shared@0.5.0`, and `borgmcp-shared@0.5.1`
+are published and immutable. The annotated `v0.5.1` tag object `045268aa8873da330819860012ecaddb4bc2883c`
+peels to protected-main commit `1981d7373e77f6edb4567872c1544bdbe2b1ef20`. Attempt-1 workflow run
+`29984423571` published registry integrity `sha512-XUJq+FjY/cbarU9V1dIWnhNYcqyURTiGb6KyIzg99gy5hk/fEs5ee/8X/qvp7pw1Rshqt2J6I3TVbwJdlde2tA==`; its
+postpublish signature check raced registry propagation and the immutable run ended
+failed. Independent pinned npm verification confirmed the registry signature and
+SLSA provenance, and the incident was explicitly accepted. Never rerun or move
+that tag. `borgmcp-shared@0.6.0` was never published. Its annotated tag object
+`90a1cf686a0ce32a7aef836b0b82a930191b9030` peels to protected-main commit
+`fd69b08586481a60c88099dede8e4e066f73f2f2`; attempt-1 workflow run
+`30054936226` failed in tests before build, packaging, authentication, or registry
+mutation. Never rerun or move that tag. `borgmcp-shared@0.6.1` is published and
+immutable. This source identifies the unpublished `0.6.2` Coordinator
+activation-cadence release. Its release requires reviewed source and explicit publication authorization
+through one protected publish run, followed by postpublish registry integrity,
+signature, and attestation verification. Consumers
 must update the reviewed shared artifact before adopting the matching server and
 client releases; protocol v2 and v3 peers fail closed at credential-free preflight.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "borgmcp-shared",
-  "version": "0.5.1",
+  "version": "0.6.2",
   "description": "Shared protocol, domain, templates, and conformance contracts for Borg MCP implementations.",
   "type": "module",
   "main": "./dist/index.js",
@@ -26,6 +26,10 @@
       "types": "./dist/drone-address.d.ts",
       "import": "./dist/drone-address.js"
     },
+    "./runtime-metadata": {
+      "types": "./dist/runtime-metadata.d.ts",
+      "import": "./dist/runtime-metadata.js"
+    },
     "./protocol": {
       "types": "./dist/protocol/index.d.ts",
       "import": "./dist/protocol/index.js"

package/src/conformance/adapter.ts

@@ -7,12 +7,15 @@ import {
   decodeDecisionResultEnvelope,
   decodeDecisionsResultEnvelope,
   decodeEnrollmentExchangeResponseEnvelope,
+  decodeAttachResponseEnvelope,
+  decodeDroneRuntimeMetadataPatch,
   decodeEvictDroneResultEnvelope,
   decodeProtocolEnvelope,
   decodeProtocolErrorEnvelope,
   decodeProtocolTagPreflight,
   decodeReadLogResultEnvelope,
   decodeReassignDroneResultEnvelope,
+  decodeUpdateDroneRuntimeMetadataResponseEnvelope,
   decodeSseFrames,
   PROTOCOL_LIMIT_CEILINGS,
   PROTOCOL_HTTP_CONTRACT,
@@ -21,6 +24,7 @@ import {
   type CreateCubeResponse,
   type LogCursor,
   type StreamEvent,
+  type DroneRuntimeMetadata,
 } from '../protocol/index.js';
 import { ENROLLMENT_RETRY_CONFORMANCE } from './index.js';
 
@@ -45,6 +49,36 @@ export interface ConformanceDrone {
   readonly id: string;
 }
 
+export interface ConformanceDroneRuntimeState {
+  readonly metadata: DroneRuntimeMetadata;
+  readonly metadata_reported: boolean;
+  readonly metadata_revision: number;
+  readonly cube_id: string;
+  readonly role_id: string;
+  readonly session_state: 'active' | 'revoked' | 'expired';
+  readonly evicted: boolean;
+  readonly last_seen: string;
+  readonly heartbeat_count: number;
+  readonly wake_count: number;
+  readonly log_count: number;
+  readonly model_turn_count: number;
+  readonly grant_access: ConformanceCubeAccess | null;
+  readonly server_capabilities: readonly string[];
+  readonly principal_revoked: boolean;
+  readonly session_bound: boolean;
+  readonly last_log_post: string | null;
+  readonly last_regen_at: string | null;
+  readonly last_read_log_at: string | null;
+  readonly last_event_received_at: string | null;
+  readonly wake_path: 'live';
+  readonly wake_alert: null;
+  readonly monitor_armed: boolean;
+  readonly sse_connected: boolean;
+  readonly claim_count: number;
+  readonly decision_count: number;
+  readonly routing_eligible: boolean;
+}
+
 export type ConformanceCubeAccess = 'read' | 'write' | 'manage';
 
 export interface ConformanceCubeManagementState {
@@ -133,6 +167,7 @@ export interface ConformanceAdmin {
     readonly evicted: boolean;
     readonly session_revoked: boolean;
   }>;
+  inspectDroneRuntimeState(drone: ConformanceDrone): Promise<ConformanceDroneRuntimeState>;
   /** Observes every cube field mutated by a represented manage-scoped operation. */
   inspectCubeManagementState(cube: ConformanceCube): Promise<ConformanceCubeManagementState>;
   grantCreateCubeCapability(principal: ConformancePrincipal): Promise<void>;
@@ -158,6 +193,12 @@ export interface ConformanceOperations {
   protocol(credential: string | null): Promise<ConformanceHttpResponse>;
   enroll(request: unknown): Promise<ConformanceHttpResponse>;
   createCube(credential: string | null, request: unknown): Promise<ConformanceHttpResponse>;
+  attach(credential: string, request: unknown): Promise<ConformanceHttpResponse>;
+  selfMetadataUpdate(
+    credential: string,
+    cube: ConformanceCube,
+    request: unknown,
+  ): Promise<ConformanceHttpResponse>;
   append(
     credential: string,
     cube: ConformanceCube,
@@ -251,6 +292,13 @@ export const ADAPTER_CONFORMANCE_FIXTURES = [
   { id: 'security.cross-cube-drone-management', area: 'security' },
   { id: 'drones.evict-terminal-signal', area: 'drones' },
   { id: 'security.drone-session-rejection-causes', area: 'security' },
+  { id: 'metadata.attach-report', area: 'metadata' },
+  { id: 'metadata.self-heal-patch', area: 'metadata' },
+  { id: 'security.metadata-invalid-atomic', area: 'security' },
+  { id: 'security.metadata-own-seat', area: 'security' },
+  { id: 'security.metadata-cross-cube-isolation', area: 'security' },
+  { id: 'security.metadata-noninterference', area: 'security' },
+  { id: 'security.metadata-secret-non-echo', area: 'security' },
   { id: 'security.active-stream-revocation', area: 'security' },
 ] as const;
 
@@ -1086,6 +1134,9 @@ export async function runAdapterConformance(
   let readCredential = '';
   let writeCredential = '';
   let workerSession = '';
+  let metadataDroneA!: ConformanceDrone;
+  let metadataDroneB!: ConformanceDrone;
+  let metadataSessionA = '';
   await record('security.drone-management-authorization', async () => {
     workerRoleA = await environment.admin.createRole(cubeA, {
       roleClass: 'worker', isHumanSeat: false,
@@ -1566,6 +1617,412 @@ export async function runAdapterConformance(
     };
   });
 
+  const knownMetadata = {
+    agent_kind: 'opencode' as const,
+    reported_model: 'openai/gpt-5.6-sol',
+    working_repo_name: 'Byte-Ventures/borg-mcp',
+    working_repo_origin: 'https://github.com/Byte-Ventures/borg-mcp',
+  };
+  await record('metadata.attach-report', async () => {
+    metadataSessionA = 'M'.repeat(43);
+    const created = await environment.operations.attach(
+      credentialA,
+      createProtocolEnvelope('metadata-attach-created', {
+        cube_id: cubeA.id,
+        role_id: workerRoleA.id,
+        session_credential: metadataSessionA,
+        runtime_metadata: {
+          ...knownMetadata,
+          working_repo_origin: 'git@github.com:Byte-Ventures/borg-mcp.git',
+        },
+      }),
+    );
+    expectStatus(created, 200, 'Metadata attach create');
+    const createdPayload = decodeAttachResponseEnvelope(created.body).payload;
+    invariant(createdPayload.result === 'created', 'First metadata attach did not create a seat.');
+    invariant(same(createdPayload.drone.runtime_metadata, knownMetadata), 'Attach did not echo canonical metadata.');
+    invariant(createdPayload.drone.runtime_metadata_reported, 'Present attach report was not marked reported.');
+    metadataDroneA = { id: createdPayload.drone.id };
+
+    const unavailableSession = 'N'.repeat(43);
+    const unavailable = await environment.operations.attach(
+      credentialA,
+      createProtocolEnvelope('metadata-attach-unavailable', {
+        cube_id: cubeA.id,
+        role_id: workerRoleA.id,
+        session_credential: unavailableSession,
+      }),
+    );
+    expectStatus(unavailable, 200, 'Unavailable metadata attach');
+    const unavailableDrone = decodeAttachResponseEnvelope(unavailable.body).payload.drone;
+    invariant(
+      same(unavailableDrone.runtime_metadata, {
+        agent_kind: null,
+        reported_model: null,
+        working_repo_name: null,
+        working_repo_origin: null,
+      }),
+      'Omitted attach report synthesized metadata.',
+    );
+    invariant(!unavailableDrone.runtime_metadata_reported, 'Omitted attach report was marked reported.');
+
+    const explicitUnknown = await environment.operations.attach(
+      credentialA,
+      createProtocolEnvelope('metadata-attach-explicit-unknown', {
+        cube_id: cubeA.id,
+        role_id: workerRoleA.id,
+        session_credential: 'U'.repeat(43),
+        runtime_metadata: {
+          agent_kind: null,
+          reported_model: null,
+          working_repo_name: null,
+          working_repo_origin: null,
+        },
+      }),
+    );
+    expectStatus(explicitUnknown, 200, 'Explicit unknown metadata attach');
+    const explicitUnknownDrone = decodeAttachResponseEnvelope(explicitUnknown.body).payload.drone;
+    invariant(explicitUnknownDrone.runtime_metadata_reported, 'All-null attach report was not marked reported.');
+
+    const reused = await environment.operations.attach(
+      credentialA,
+      createProtocolEnvelope('metadata-attach-reused', {
+        cube_id: cubeA.id,
+        role_id: workerRoleA.id,
+        prior_drone_id: metadataDroneA.id,
+        session_credential: metadataSessionA,
+        runtime_metadata: knownMetadata,
+      }),
+    );
+    expectStatus(reused, 200, 'Metadata attach reuse');
+    invariant(decodeAttachResponseEnvelope(reused.body).payload.result === 'reused', 'Prior seat was not reused.');
+    const cleared = await environment.operations.selfMetadataUpdate(
+      metadataSessionA,
+      cubeA,
+      createProtocolEnvelope('metadata-clear-all', {
+        agent_kind: null,
+        reported_model: null,
+        working_repo_name: null,
+        working_repo_origin: null,
+      }),
+    );
+    expectStatus(cleared, 200, 'Clear-all metadata patch');
+    const clearedPayload = decodeUpdateDroneRuntimeMetadataResponseEnvelope(cleared.body).payload;
+    invariant(clearedPayload.runtime_metadata_reported, 'Clear-all patch lost reported state.');
+    invariant(
+      same(clearedPayload.runtime_metadata, explicitUnknownDrone.runtime_metadata),
+      'Clear-all patch did not produce explicit unknown metadata.',
+    );
+    expectStatus(
+      await environment.operations.selfMetadataUpdate(
+        metadataSessionA,
+        cubeA,
+        createProtocolEnvelope('metadata-restore-known', knownMetadata),
+      ),
+      200,
+      'Restore known metadata',
+    );
+    return {
+      created: true,
+      reused: true,
+      report_states: [
+        unavailableDrone.runtime_metadata_reported,
+        explicitUnknownDrone.runtime_metadata_reported,
+        clearedPayload.runtime_metadata_reported,
+      ],
+      canonical_response: true,
+    };
+  });
+
+  await record('metadata.self-heal-patch', async () => {
+    const updates = [
+      { request_id: 'metadata-known-new', patch: { reported_model: 'openai/gpt-5.6-terra' } },
+      { request_id: 'metadata-null-clear', patch: { reported_model: null } },
+      { request_id: 'metadata-null-repeat', patch: { reported_model: null } },
+      { request_id: 'metadata-same-value', patch: { agent_kind: 'opencode' as const } },
+    ];
+    for (const update of updates) {
+      const response = await environment.operations.selfMetadataUpdate(
+        metadataSessionA,
+        cubeA,
+        createProtocolEnvelope(update.request_id, update.patch),
+      );
+      expectStatus(response, 200, update.request_id);
+      decodeUpdateDroneRuntimeMetadataResponseEnvelope(response.body);
+    }
+    const state = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+    invariant(state.metadata.reported_model === null, 'Explicit null did not clear model metadata.');
+    invariant(state.metadata.agent_kind === 'opencode', 'Omitted field was not preserved.');
+    return { known_replace: true, omitted_unchanged: true, null_clear: true, repeat_safe: true };
+  });
+
+  await record('security.metadata-invalid-atomic', async () => {
+    const invalidPatches: unknown[] = [
+      {},
+      { agent_kind: 'OpenCode' },
+      { reported_model: '' },
+      { reported_model: 'a'.repeat(161) },
+      { reported_model: 'safe\u001b[2J' },
+      { reported_model: 'safe\u061cnext' },
+      { working_repo_name: 'owner/repo' },
+      { working_repo_name: 'owner/repo', working_repo_origin: 'https://user:secret@github.com/owner/repo' },
+      {
+        working_repo_name: 'owner/repo',
+        working_repo_origin: ['file:/', '', 'Users', 'secret', 'repo'].join('/'),
+      },
+      { role_id: workerRoleA.id },
+      { last_seen: '2026-07-14T10:00:00.000Z' },
+    ];
+    for (const [index, patch] of invalidPatches.entries()) {
+      const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+      const response = await environment.operations.selfMetadataUpdate(
+        metadataSessionA,
+        cubeA,
+        createProtocolEnvelope(`metadata-invalid-${index}`, patch),
+      );
+      expectError(response, 400, ErrorCode.INVALID_INPUT, `Invalid metadata patch ${index}`);
+      invariant(
+        same(await environment.admin.inspectDroneRuntimeState(metadataDroneA), before),
+        `Invalid metadata patch ${index} partially mutated state.`,
+      );
+    }
+    return { cases: invalidPatches.length, atomic: true, prior_safe_state_retained: true };
+  });
+
+  await record('security.metadata-own-seat', async () => {
+    const peer = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+    const peerBefore = await environment.admin.inspectDroneRuntimeState(peer);
+    const managedBefore = await environment.admin.inspectDroneRuntimeState(managedWorker);
+    const ownBefore = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+    const response = await environment.operations.selfMetadataUpdate(
+      metadataSessionA,
+      cubeA,
+      createProtocolEnvelope('metadata-own-seat', { agent_kind: 'claude' }),
+    );
+    expectStatus(response, 200, 'Own-seat metadata update');
+    invariant(
+      same(await environment.admin.inspectDroneRuntimeState(peer), peerBefore),
+      'Own-seat update mutated a peer seat.',
+    );
+    invariant(
+      same(await environment.admin.inspectDroneRuntimeState(managedWorker), managedBefore),
+      'Own-seat update mutated another existing seat.',
+    );
+    invariant(
+      (await environment.admin.inspectDroneRuntimeState(metadataDroneA)).role_id === ownBefore.role_id,
+      'Metadata update changed the current seat role.',
+    );
+    expectError(
+      await environment.operations.selfMetadataUpdate(
+        credentialA,
+        cubeA,
+        createProtocolEnvelope('metadata-manager-denied', { agent_kind: 'codex' }),
+      ),
+      403,
+      ErrorCode.ACCESS_DENIED,
+      'Manager metadata update',
+    );
+    expectError(
+      await environment.operations.selfMetadataUpdate(
+        'Z'.repeat(43),
+        cubeA,
+        createProtocolEnvelope('metadata-invalid-session', { agent_kind: null }),
+      ),
+      401,
+      ErrorCode.AUTH_INVALID,
+      'Unknown metadata session',
+    );
+    const rejectedStates: Array<[string, ConformanceDrone, string, number, ErrorCode]> = [];
+    const revoked = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+    const revokedSession = await environment.admin.issueManagedDroneSession(revoked);
+    await environment.admin.revokeManagedDroneSession(revoked);
+    rejectedStates.push(['revoked', revoked, revokedSession, 401, ErrorCode.SESSION_REVOKED]);
+    const expired = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+    const expiredSession = await environment.admin.issueManagedDroneSession(expired);
+    await environment.admin.expireManagedDroneSession(expired);
+    rejectedStates.push(['expired', expired, expiredSession, 401, ErrorCode.AUTH_EXPIRED]);
+    const evicted = await environment.admin.createDrone(principalA, cubeA, workerRoleA);
+    const evictedSession = await environment.admin.issueManagedDroneSession(evicted);
+    expectStatus(
+      await environment.operations.evictDrone(
+        credentialA,
+        cubeA,
+        evicted,
+        createProtocolEnvelope('metadata-evict-seat', {}),
+      ),
+      200,
+      'Metadata seat eviction',
+    );
+    rejectedStates.push(['evicted', evicted, evictedSession, 410, ErrorCode.DRONE_EVICTED]);
+    for (const [label, drone, session, status, code] of rejectedStates) {
+      const before = await environment.admin.inspectDroneRuntimeState(drone);
+      expectError(
+        await environment.operations.selfMetadataUpdate(
+          session,
+          cubeA,
+          createProtocolEnvelope(`metadata-${label}-denied`, { agent_kind: null }),
+        ),
+        status,
+        code,
+        `${label} metadata session`,
+      );
+      invariant(
+        same(await environment.admin.inspectDroneRuntimeState(drone), before),
+        `${label} metadata denial mutated state.`,
+      );
+    }
+    return {
+      own_seat_only: true,
+      manager_denied: true,
+      unknown_session_denied: true,
+      revoked_expired_evicted_denied: true,
+    };
+  });
+
+  await record('security.metadata-cross-cube-isolation', async () => {
+    const sessionB = 'P'.repeat(43);
+    const metadataRoleB = await environment.admin.createRole(cubeB, {
+      roleClass: 'worker', isHumanSeat: false,
+    });
+    const attachedB = await environment.operations.attach(
+      credentialB,
+      createProtocolEnvelope('metadata-attach-b', {
+        cube_id: cubeB.id,
+        role_id: metadataRoleB.id,
+        session_credential: sessionB,
+        runtime_metadata: {
+          agent_kind: 'codex',
+          reported_model: null,
+          working_repo_name: 'Byte-Ventures/borg-mcp-server',
+          working_repo_origin: 'https://github.com/Byte-Ventures/borg-mcp-server',
+        },
+      }),
+    );
+    expectStatus(attachedB, 200, 'Cube B metadata attach');
+    metadataDroneB = { id: decodeAttachResponseEnvelope(attachedB.body).payload.drone.id };
+    const beforeB = await environment.admin.inspectDroneRuntimeState(metadataDroneB);
+    const foreign = await environment.operations.selfMetadataUpdate(
+      metadataSessionA,
+      cubeB,
+      createProtocolEnvelope('metadata-cross-cube', { reported_model: 'foreign/probe' }),
+    );
+    expectError(foreign, 404, ErrorCode.NOT_FOUND, 'Cross-cube metadata update');
+    const unknown = await environment.operations.selfMetadataUpdate(
+      metadataSessionA,
+      { id: '90000000-0000-4000-8000-000000000001' },
+      createProtocolEnvelope('metadata-unknown-cube', { reported_model: 'foreign/probe' }),
+    );
+    expectError(unknown, 404, ErrorCode.NOT_FOUND, 'Unknown-cube metadata update');
+    invariant(same(foreign.body, unknown.body), 'Foreign and unknown metadata probes were distinguishable.');
+    invariant(
+      same(await environment.admin.inspectDroneRuntimeState(metadataDroneB), beforeB),
+      'Cross-cube metadata update mutated the foreign seat.',
+    );
+    const listedA = await environment.operations.listDrones(credentialA, cubeA);
+    invariant(!listedDroneIds(listedA).includes(metadataDroneB.id), 'Cube A roster disclosed cube B metadata seat.');
+    return { update_status: 404, foreign_unknown_indistinguishable: true, foreign_unchanged: true, roster_isolated: true };
+  });
+
+  await record('security.metadata-noninterference', async () => {
+    const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+    for (const [requestId, patch] of [
+      ['metadata-noninterference-known', { reported_model: 'openai/gpt-5.6-sol' }],
+      ['metadata-noninterference-repeat', { reported_model: 'openai/gpt-5.6-sol' }],
+      ['metadata-noninterference-null', { reported_model: null }],
+    ] as const) {
+      expectStatus(
+        await environment.operations.selfMetadataUpdate(
+          metadataSessionA,
+          cubeA,
+          createProtocolEnvelope(requestId, patch),
+        ),
+        200,
+        requestId,
+      );
+    }
+    expectError(
+      await environment.operations.selfMetadataUpdate(
+        metadataSessionA,
+        cubeA,
+        createProtocolEnvelope('metadata-noninterference-reject', { authority: 'manage' }),
+      ),
+      400,
+      ErrorCode.INVALID_INPUT,
+      'Rejected metadata non-interference update',
+    );
+    const reattached = await environment.operations.attach(
+      credentialA,
+      createProtocolEnvelope('metadata-noninterference-reattach', {
+        cube_id: cubeA.id,
+        role_id: workerRoleA.id,
+        prior_drone_id: metadataDroneA.id,
+        session_credential: metadataSessionA,
+      }),
+    );
+    expectStatus(reattached, 200, 'Metadata non-interference reattach');
+    const after = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+    const { metadata: _beforeMetadata, metadata_revision: _beforeRevision, ...beforeInvariant } = before;
+    const { metadata: _afterMetadata, metadata_revision: _afterRevision, ...afterInvariant } = after;
+    invariant(same(beforeInvariant, afterInvariant), 'Metadata update changed authority/liveness/log state.');
+    return {
+      authority_unchanged: true,
+      role_unchanged: true,
+      liveness_unchanged: true,
+      logs_unchanged: true,
+      model_turns_unchanged: true,
+    };
+  });
+
+  await record('security.metadata-secret-non-echo', async () => {
+    const marker = 'SECRET-METADATA-MARKER';
+    const before = await environment.admin.inspectDroneRuntimeState(metadataDroneA);
+    const response = await environment.operations.selfMetadataUpdate(
+      metadataSessionA,
+      cubeA,
+      createProtocolEnvelope('metadata-secret', {
+        working_repo_name: 'owner/repo',
+        working_repo_origin: `https://user:${marker}@github.com/owner/repo?token=${marker}`,
+      }),
+    );
+    expectError(response, 400, ErrorCode.INVALID_INPUT, 'Secret-bearing metadata update');
+    invariant(!JSON.stringify(response.body).includes(marker), 'Metadata error echoed hostile secret input.');
+    invariant(
+      same(await environment.admin.inspectDroneRuntimeState(metadataDroneA), before),
+      'Secret-bearing metadata input was persisted.',
+    );
+    const hostileKeys = [
+      'SECRET-METADATA-KEY-MARKER',
+      `control\u001b[2J`,
+      `bidi\u061cmarker`,
+      `token_${'a'.repeat(48)}`,
+    ];
+    for (const [index, key] of hostileKeys.entries()) {
+      const rejected = await environment.operations.selfMetadataUpdate(
+        metadataSessionA,
+        cubeA,
+        createProtocolEnvelope(`metadata-secret-key-${index}`, { [key]: 'x' }),
+      );
+      expectError(rejected, 400, ErrorCode.INVALID_INPUT, `Hostile metadata key ${index}`);
+      invariant(!JSON.stringify(rejected.body).includes(key), `Metadata error echoed hostile key ${index}.`);
+    }
+    const logs = await environment.operations.read(
+      credentialA,
+      cubeA,
+      createProtocolEnvelope('metadata-secret-log-read', { cursor: null, limit: 500 }),
+    );
+    expectStatus(logs, 200, 'Metadata secret log read');
+    for (const hostile of [marker, ...hostileKeys]) {
+      invariant(!JSON.stringify(logs.body).includes(hostile), 'Metadata input leaked into activity logs.');
+    }
+    return {
+      rejected_pre_persistence: true,
+      response_secret_free: true,
+      state_secret_free: true,
+      log_secret_free: true,
+      unknown_key_secret_free: true,
+    };
+  });
+
   await record('security.active-stream-revocation', async () => {
     invariant(liveCursor, 'Stream fixture did not produce a live cursor.');
     const opened = await environment.operations.openStream(credentialA, cubeA, liveCursor);