@sema-agent/core 7.24.4 → 7.25.1

package/dist/tools/fs/shell-read-plan.js

@@ -20,7 +20,8 @@ export function planShellReads(command, decl, depth = 0) {
     const shape = { grouped: false, backgrounded: false, strayRedirection: false };
     if (depth > NESTING_MAX)
         return { segments: [], unreadable: `command text nested more than ${NESTING_MAX} levels deep`, shape };
-    const lexed = lexShellText(foldHomeVariableSpelling(command, decl.homeDir), { mode: "lenient" });
+    const homeReassigned = /(^|[\s;&|(){}`])(?:export\s+)?HOME\+?=/.test(command);
+    const lexed = lexShellText(foldHomeVariableSpelling(command, homeReassigned ? undefined : decl.homeDir), { mode: "lenient" });
     if ("reject" in lexed)
         return { segments: [], unreadable: lexed.reject, shape };
     const nestedPlan = (text) => planShellReads(text, decl, depth + 1);
@@ -140,12 +141,13 @@ export function planShellReads(command, decl, depth = 0) {
             launcherChain: f.launcherChain,
             ...(f.verb !== undefined ? { verb: f.verb } : {}),
             ...(f.reentry !== undefined ? { reentry: f.reentry } : {}),
+            ...(f.unreadProgramText !== undefined ? { unreadProgramText: f.unreadProgramText } : {}),
             declines: f.declines,
             reads: dedupe(f.reads).map(withBases),
             redirects: f.redirects.map((r) => (r.target === undefined ? { op: r.op, direction: r.direction } : { op: r.op, direction: r.direction, target: withBases(r.target) })),
             ...(f.baseMove !== undefined ? { baseMove: { target: typeof f.baseMove.target === "string" ? f.baseMove.target : withBases(f.baseMove.target) } } : {}),
             bases,
-            nested: f.nested,
+            nested: f.nested.map((n) => rebasePlan(n, decl.cwd, bases)),
             reach: reaches[si] ?? { andJoined: false, orBroken: false, moveProvable: false },
         });
     }
@@ -251,8 +253,24 @@ function segmentFacts(segment, p, decl, nestedPlan) {
         const controlIndices = new Set(pos.controlWords);
         const assignmentIndices = new Set(pos.assignments);
         const chainEnd = pos.program?.index ?? toks.folded.length;
+        const launcherValueIndices = new Set();
+        for (const l of pos.launchers) {
+            const row = LAUNCHER_TABLE.get(programBasename(l.name));
+            if (row === undefined)
+                continue;
+            for (let j = l.index + 1; j < chainEnd; j++) {
+                const w = toks.folded[j];
+                if (!w.startsWith("-") || w === "-")
+                    break;
+                const arity = row.optionArity.get(w);
+                if (arity === undefined)
+                    break;
+                if (arity === 1)
+                    launcherValueIndices.add(++j);
+            }
+        }
         for (let j = 0; j < chainEnd; j++) {
-            if (launcherIndices.has(j) || controlIndices.has(j) || assignmentIndices.has(j) || j === written)
+            if (launcherIndices.has(j) || controlIndices.has(j) || assignmentIndices.has(j) || launcherValueIndices.has(j) || j === written)
                 continue;
             const word = toks.folded[j];
             const raw = toks.raw[j];
@@ -267,7 +285,7 @@ function segmentFacts(segment, p, decl, nestedPlan) {
                 reads.push({ spelled: word, raw, provenance: "unlisted_word", expands: "unresolvable" });
                 continue;
             }
-            if (assignmentWordPayload(word) !== undefined) {
+            if (assignmentWordPayload(word, toks.raw[j]) !== undefined) {
                 pushAssignment(reads, toks, j, "env_assignment");
                 continue;
             }
@@ -348,7 +366,8 @@ function segmentFacts(segment, p, decl, nestedPlan) {
     else {
         unlistedWords(reads, toks, program.index, launcherIndices, "unlisted_word", program);
     }
-    if (basename === "sed" && listed) {
+    let unreadProgramText;
+    if (basename === "sed") {
         const slot = sedScriptSlotFiles(args);
         for (const f of slot.reads)
             reads.push(bare(f, f, "script_slot_file"));
@@ -356,6 +375,9 @@ function segmentFacts(segment, p, decl, nestedPlan) {
             reads.push(bare(f, f, "write_redirect_target"));
         for (const c of slot.commands)
             nested.push(nestedPlan(c));
+        if (slot.commands.length > 0 || slot.executesPatternSpace)
+            reentry = "shell";
+        unreadProgramText = slot.unread;
     }
     return {
         ...base,
@@ -363,6 +385,7 @@ function segmentFacts(segment, p, decl, nestedPlan) {
         launcherChain,
         verb: verb,
         ...(reentry !== undefined ? { reentry } : {}),
+        ...(unreadProgramText !== undefined ? { unreadProgramText } : {}),
         declines,
         reads,
         ...(baseMove !== undefined ? { baseMove } : {}),
@@ -371,6 +394,38 @@ function segmentFacts(segment, p, decl, nestedPlan) {
         loopEnd: false,
     };
 }
+function rebasePlan(plan, from, to) {
+    if (to !== "unmodelled" && to.length === 1 && to[0] === from)
+        return plan;
+    const fromSep = from.endsWith("/") || from.endsWith("\\") ? from : `${from}/`;
+    const moveBase = (b) => {
+        if (to === "unmodelled")
+            return [];
+        if (b === from)
+            return [...to];
+        if (b.startsWith(fromSep))
+            return to.map((t) => `${t.endsWith("/") || t.endsWith("\\") ? t : `${t}/`}${b.slice(fromSep.length)}`);
+        return [b];
+    };
+    const moveCandidate = (c) => {
+        if (c.bases === "unmodelled" || c.bases.length === 0)
+            return c;
+        if (to === "unmodelled")
+            return { ...c, bases: "unmodelled" };
+        return { ...c, bases: [...new Set(c.bases.flatMap(moveBase))] };
+    };
+    return {
+        ...plan,
+        segments: plan.segments.map((s) => ({
+            ...s,
+            reads: s.reads.map(moveCandidate),
+            redirects: s.redirects.map((r) => (r.target === undefined ? r : { ...r, target: moveCandidate(r.target) })),
+            ...(s.baseMove !== undefined ? { baseMove: { target: typeof s.baseMove.target === "string" ? s.baseMove.target : moveCandidate(s.baseMove.target) } } : {}),
+            bases: s.bases === "unmodelled" || to === "unmodelled" ? "unmodelled" : [...new Set(s.bases.flatMap(moveBase))],
+            nested: s.nested.map((n) => rebasePlan(n, from, to)),
+        })),
+    };
+}
 function dedupe(reads) {
     const seen = new Set();
     const out = [];
@@ -387,7 +442,7 @@ function bare(raw, folded, provenance) {
     return { spelled: folded, raw, provenance, expands: expandsOf(raw, folded) };
 }
 function expandsOf(raw, folded) {
-    if (folded.includes(SUBSTITUTION_PLACEHOLDER) || hasUnquotedExpansionMetachar(raw))
+    if (folded.includes(SUBSTITUTION_PLACEHOLDER) || hasUnquotedExpansionMetachar(raw) || /[`(]/.test(raw) || raw.includes(")"))
         return "unresolvable";
     if (hasUnquotedGlobMetachar(raw))
         return "glob";
@@ -410,13 +465,13 @@ function redirectFact(r) {
 }
 function pushAssignment(reads, toks, k, provenance) {
     const word = toks.folded[k];
-    const payload = assignmentWordPayload(word);
+    const payload = assignmentWordPayload(word, toks.raw[k]);
     if (payload === undefined)
         return;
-    if (payload.kind === "value")
-        reads.push(bare(toks.raw[k], payload.value, provenance));
-    else
+    if (payload.kind === "unresolved")
         reads.push({ spelled: word, raw: toks.raw[k], provenance, expands: "unresolvable" });
+    if (payload.value !== undefined && payload.value !== SUBSTITUTION_PLACEHOLDER)
+        reads.push(bare(toks.raw[k], payload.value, provenance));
 }
 function unlistedWords(reads, toks, from, launcherIndices, provenance, program) {
     const argv = program !== undefined ? { program: program.basename, from: program.index } : argvProgramOf(toks);
@@ -429,6 +484,8 @@ function unlistedWords(reads, toks, from, launcherIndices, provenance, program)
     for (let j = from; j < toks.folded.length; j++) {
         if (launcherIndices.has(j))
             continue;
+        if (noPathOperands && j > argvStart)
+            break;
         if (expandsOf(toks.raw[j], toks.folded[j]) !== "unresolvable")
             continue;
         expanding.add(j);
@@ -476,7 +533,7 @@ function unlistedWords(reads, toks, from, launcherIndices, provenance, program)
                         for (const c of named)
                             reads.push(bare(toks.raw[j], c, "option_value"));
                         if (named.length > 0)
-                            positional.push(value);
+                            positional.push({ word: value, raw: toks.raw[j] });
                     }
                 }
                 continue;
@@ -501,23 +558,27 @@ function unlistedWords(reads, toks, from, launcherIndices, provenance, program)
                 if (m === undefined || m.dashIsStdin === true)
                     stdinOperand = true;
                 else
-                    positional.push(word);
+                    positional.push({ word, raw });
             }
             else
-                positional.push(word);
+                positional.push({ word, raw });
         }
         reads.push(bare(raw, word, j === argvStart ? "program_path" : provenance));
-        if (j < argvStart || !declaredNotPaths)
+        if (j < argvStart)
             pushAssignment(reads, toks, j, "env_assignment");
+        else if (!declaredNotPaths)
+            pushAssignment(reads, toks, j, provenance);
     }
     if (slotVerb !== undefined && argv !== undefined && segmentSelectsRecursiveRead(slotVerb, toks.folded.slice(argvStart + 1))) {
-        const roots = positional.length > 0 ? positional : stdinOperand ? [] : ["."];
+        const roots = positional.length > 0 ? positional : stdinOperand ? [] : [{ word: ".", raw: "." }];
         for (const root of roots)
-            reads.push({ spelled: root, raw: root, provenance: "traversal_root", expands: false });
+            reads.push({ spelled: root.word, raw: root.raw, provenance: "traversal_root", expands: expandsOf(root.raw, root.word) });
     }
     for (let j = from; j < toks.folded.length; j++) {
         if (launcherIndices.has(j) || j === argvStart)
             continue;
+        if (noPathOperands && j > argvStart)
+            break;
         const raw = toks.raw[j];
         if (expandsOf(raw, toks.folded[j]) === "glob")
             reads.push(bare(raw, toks.folded[j], provenance));
@@ -645,7 +706,7 @@ function listedVerbCandidates(name, args, rawArgs, reads) {
                             for (const c of named)
                                 push(k, c, "option_value");
                             if (named.length > 0)
-                                positional.push(value);
+                                positional.push({ word: value, raw: rawArgs[k] });
                         }
                     }
                     continue;
@@ -665,7 +726,7 @@ function listedVerbCandidates(name, args, rawArgs, reads) {
                 stdinOperand = true;
                 continue;
             }
-            positional.push(t);
+            positional.push({ word: t, raw: rawArgs[k] });
             continue;
         }
         if (inFirstOperandSlot) {
@@ -673,17 +734,17 @@ function listedVerbCandidates(name, args, rawArgs, reads) {
             for (const c of named)
                 push(k, c, "operand");
             if (named.length > 0)
-                positional.push(t);
+                positional.push({ word: t, raw: rawArgs[k] });
             continue;
         }
-        positional.push(t);
+        positional.push({ word: t, raw: rawArgs[k] });
         push(k, t, "operand");
         if (!ASSIGNMENT_VALUE_NOT_PATHS.has(name)) {
-            const payload = assignmentWordPayload(t);
-            if (payload?.kind === "value")
-                push(k, payload.value, "env_assignment");
-            else if (payload !== undefined)
-                reads.push({ spelled: t, raw: rawArgs[k], provenance: "env_assignment", expands: "unresolvable" });
+            const payload = assignmentWordPayload(t, rawArgs[k]);
+            if (payload?.kind === "unresolved")
+                reads.push({ spelled: t, raw: rawArgs[k], provenance: "operand", expands: "unresolvable" });
+            if (payload?.value !== undefined)
+                push(k, payload.value, "operand");
         }
     }
     for (let k = 0; k < args.length; k++) {
@@ -693,8 +754,8 @@ function listedVerbCandidates(name, args, rawArgs, reads) {
             reads.push(bare(rawArgs[k], args[k], "operand"));
     }
     if (segmentSelectsRecursiveRead(name, args)) {
-        const roots = positional.length > 0 ? positional : stdinOperand ? [] : ["."];
+        const roots = positional.length > 0 ? positional : stdinOperand ? [] : [{ word: ".", raw: "." }];
         for (const root of roots)
-            reads.push({ spelled: root, raw: root, provenance: "traversal_root", expands: false });
+            reads.push({ spelled: root.word, raw: root.raw, provenance: "traversal_root", expands: expandsOf(root.raw, root.word) });
     }
 }

package/dist/tools/monitor.d.ts

@@ -42,7 +42,7 @@ import type { AgentTool, ExecutionEnv } from "../internal/harness-types.js";
 import { type MonitorTimers, type TaskRegistry } from "../core/task-registry.js";
 import type { TaskNotificationPayload } from "../core/task-notification.js";
 import type { ToolResultStore } from "../core/tool-result-store.js";
-import type { BashReadonlyRootBoundary } from "./fs/bash-readonly-classifier.js";
+import type { ShellReadAdmission } from "./fs/shell-read-check.js";
 export interface MonitorToolOptions {
     registry: TaskRegistry;
     /** Fallbacks when the runtime ctx carries no identity (direct mounts) — same posture as createBashTool. */
@@ -69,10 +69,10 @@ export interface MonitorToolOptions {
      *  task-registry-monitor.ts's spill helper). Absent ⇒ legal degrade, byte-identical rolling (no spill,
      *  same loss shape as before this design). */
     toolResultStore?: ToolResultStore;
-    /** The deployment's shell READ BOUNDARY — the SAME option `createBashTool` takes: this face spawns a
-     *  shell command too, so the seat that judges the WRITTEN spelling needs the leg that re-judges where the
-     *  kernel takes it. BUILT here, so a library mount is not fail-open on one face and closed on the other. */
-    readBoundary?: BashReadonlyRootBoundary | (() => BashReadonlyRootBoundary | undefined);
+    /** The gate's shell read station's pre-spawn ADMISSION — the SAME option `createBashTool` takes: this face
+     *  spawns a shell command too, so what it runs is what the station judged, re-established before the watch
+     *  spawns. Absent ⇒ no station judged this mount; nothing is re-established. */
+    shellReadAdmission?: ShellReadAdmission;
     /** RB-465-b (HRD-PTL-3 残件): spec-level retain (`TaskSpec.retainBackgroundProcesses`) — the SECOND
      *  retain lane, OR-composed with the env capability at the teardown sweep. Without this bit the mount
      *  could only see the env lane, so a deployment retaining per spec still got the "session ends it"

package/dist/tools/monitor.js

@@ -3,7 +3,6 @@ import { defineTool, errorResult } from "../core/tools.js";
 import { hasBackgroundShell } from "../core/background-shell.js";
 import { MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, } from "../core/task-registry.js";
 import { toolFace } from "../core/tool-catalog-entries.js";
-import { createShellCanonicalRecheck, MONITOR_ESCAPE_PROSE } from "./fs/fs-bash.js";
 import { thrownText } from "../core/thrown-value.js";
 const MONITOR_DESCRIPTION = "Run a shell command in the background and watch its stdout as a stream of events.\n" +
     "\n" +
@@ -43,7 +42,6 @@ function envBackgroundWallSec(caps, requestedSec) {
     return Math.min(base, cap);
 }
 export function createMonitorTool(env, opts) {
-    const canonicalRecheck = opts.readBoundary === undefined ? undefined : createShellCanonicalRecheck(env, opts.readBoundary, MONITOR_ESCAPE_PROSE);
     return defineTool({
         name: "Monitor",
         ...toolFace("monitor"),
@@ -70,9 +68,9 @@ export function createMonitorTool(env, opts) {
             const isPersistent = persistent === true;
             const timeoutMs = Math.min(MONITOR_MAX_TIMEOUT_MS, Math.max(1, Math.floor(timeout_ms ?? MONITOR_DEFAULT_TIMEOUT_MS)));
             const spawnTimeoutSec = isPersistent ? undefined : Math.ceil(timeoutMs / 1000) + 5;
-            const escape = await canonicalRecheck?.(command, ctx.signal);
-            if (escape !== undefined)
-                return escape;
+            const refused = await opts.shellReadAdmission?.("Monitor", ctx.toolCallId, command, ctx.signal);
+            if (refused !== undefined)
+                return refused;
             if (ctx.signal?.aborted === true)
                 return errorResult("Error (Monitor): the call was cancelled before the watch started.");
             const spawn = await env.spawnBackground(command, {

package/dist/tools/task-list.d.ts

@@ -55,6 +55,10 @@ export interface TaskListItem {
  *   (a real CC instance on the same directory) can set an id out of order, and then the backends
  *   disagreed: memory replayed its Map's insertion order while file/cc read the id order back off
  *   disk. Ordering is part of the contract, not each backend's incidental iteration order.
+ *
+ * @contract task_list.partition_is_root_session — a deployment that mounts a TaskListStore per session keys it by the
+ * delegation tree's ROOT session: every child of the tree (spawned live, or revived by a host verb after a durable park)
+ * reads the one list the leader reads; in-engine children share by construction, a per-call or per-reviver store is the divergence.
  */
 export interface TaskListStore {
     get(id: string): TaskListItem | undefined | Promise<TaskListItem | undefined>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.24.4",
+  "version": "7.25.1",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2402,
+  "count": 2410,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -60,6 +60,7 @@
     "AcquiredSession": "interface",
     "ActiveWorktreeSession": "interface",
     "ActorAssertion": "interface",
+    "AddResult": "type",
     "AddWorktreeOptions": "interface",
     "AdoptFileRuleStoreResult": "type",
     "AdoptLocalDataRootOptions": "interface",
@@ -793,6 +794,7 @@
     "MonitorTimers": "interface",
     "MonitorToolOptions": "interface",
     "NOTICE_AUDIENCE": "variable",
+    "NOTIFICATION_INJECTION_OUTCOMES": "variable",
     "NO_PERSISTENT_MEMORY_NOTICE": "variable",
     "NamedToolPolicy": "type",
     "NamedWorkflowListing": "interface",
@@ -804,6 +806,7 @@
     "NormalizedReadDenyEntry": "interface",
     "NotePatch": "interface",
     "NoticeAudience": "type",
+    "NotificationInjectionOutcome": "type",
     "OFFLOAD_TOOL_NAME": "variable",
     "ORCHESTRATION_AWARENESS": "variable",
     "ORCHESTRATION_GUIDANCE": "variable",
@@ -853,6 +856,7 @@
     "PEER_ADDRESS_PREFIXES": "variable",
     "PEER_ADMISSION_DEFAULTS": "variable",
     "PEER_DELIVERY_RECEIPT_STATES": "variable",
+    "PEER_DIRECTORY_CONTRACT_SCOPE": "variable",
     "PEER_DROP_REASONS": "variable",
     "PEER_HELD_QUEUE_CAP": "variable",
     "PEER_HELD_REVIEW_CAUSES": "variable",
@@ -922,6 +926,7 @@
     "PeerDeliveryReceiptState": "type",
     "PeerDirectory": "interface",
     "PeerDirectoryAccess": "interface",
+    "PeerDirectoryContractHooks": "interface",
     "PeerDropReason": "type",
     "PeerHeldEntry": "interface",
     "PeerHeldQueue": "interface",
@@ -1204,6 +1209,7 @@
     "RuleSyncResponseBody": "interface",
     "RuleSyncState": "interface",
     "RuleTicket": "type",
+    "RuleTightenAddDelta": "interface",
     "RuleTombstone": "interface",
     "RuleWriteDelta": "type",
     "RuleWriteOutcome": "type",
@@ -1625,6 +1631,7 @@
     "ackAdoptionConfig": "function",
     "acquireCcLock": "function",
     "addDotsOf": "function",
+    "addPersistedRule": "function",
     "addWorktree": "function",
     "adjudicateModelRoute": "function",
     "adjudicatePersistedPathRules": "function",
@@ -1670,7 +1677,6 @@
     "autoRunOnRecommendationEffective": "function",
     "backgroundAgentStoreContract": "function",
     "backgroundAgentStoreScopesContract": "function",
-    "bashReadBoundaryProbe": "function",
     "bashReversibilityProbe": "function",
     "boundaryPublishVerdict": "function",
     "boundedRedactedSummary": "function",
@@ -1984,6 +1990,7 @@
     "isModelGatedForClass": "function",
     "isModelPriced": "function",
     "isNamespacedCoveringRuleName": "function",
+    "isNotificationInjectionOutcome": "function",
     "isPeerDeliveryReceiptState": "function",
     "isPeerIdleNoticeKind": "function",
     "isPeerSessionId": "function",
@@ -2132,6 +2139,7 @@
     "peekMemoryAnnouncements": "function",
     "peerAdmissionFor": "function",
     "peerAxisToken": "function",
+    "peerDirectoryContract": "function",
     "peerHeldQueueFor": "function",
     "peerHeldQueueIfAny": "function",
     "peerHeldQueueKey": "function",
@@ -2464,6 +2472,7 @@
     "AcquiredSession": "advanced",
     "ActiveWorktreeSession": "internal",
     "ActorAssertion": "advanced",
+    "AddResult": "advanced",
     "AddWorktreeOptions": "advanced",
     "AdoptFileRuleStoreResult": "advanced",
     "AdoptLocalDataRootOptions": "advanced",
@@ -3197,6 +3206,7 @@
     "MonitorTimers": "advanced",
     "MonitorToolOptions": "advanced",
     "NOTICE_AUDIENCE": "advanced",
+    "NOTIFICATION_INJECTION_OUTCOMES": "advanced",
     "NO_PERSISTENT_MEMORY_NOTICE": "advanced",
     "NamedToolPolicy": "advanced",
     "NamedWorkflowListing": "advanced",
@@ -3208,6 +3218,7 @@
     "NormalizedReadDenyEntry": "stable",
     "NotePatch": "stable",
     "NoticeAudience": "advanced",
+    "NotificationInjectionOutcome": "advanced",
     "OFFLOAD_TOOL_NAME": "advanced",
     "ORCHESTRATION_AWARENESS": "advanced",
     "ORCHESTRATION_GUIDANCE": "advanced",
@@ -3257,6 +3268,7 @@
     "PEER_ADDRESS_PREFIXES": "advanced",
     "PEER_ADMISSION_DEFAULTS": "advanced",
     "PEER_DELIVERY_RECEIPT_STATES": "advanced",
+    "PEER_DIRECTORY_CONTRACT_SCOPE": "advanced",
     "PEER_DROP_REASONS": "advanced",
     "PEER_HELD_QUEUE_CAP": "advanced",
     "PEER_HELD_REVIEW_CAUSES": "advanced",
@@ -3326,6 +3338,7 @@
     "PeerDeliveryReceiptState": "advanced",
     "PeerDirectory": "advanced",
     "PeerDirectoryAccess": "advanced",
+    "PeerDirectoryContractHooks": "advanced",
     "PeerDropReason": "advanced",
     "PeerHeldEntry": "advanced",
     "PeerHeldQueue": "advanced",
@@ -3608,6 +3621,7 @@
     "RuleSyncResponseBody": "advanced",
     "RuleSyncState": "advanced",
     "RuleTicket": "advanced",
+    "RuleTightenAddDelta": "advanced",
     "RuleTombstone": "advanced",
     "RuleWriteDelta": "advanced",
     "RuleWriteOutcome": "advanced",
@@ -4029,6 +4043,7 @@
     "ackAdoptionConfig": "advanced",
     "acquireCcLock": "advanced",
     "addDotsOf": "advanced",
+    "addPersistedRule": "advanced",
     "addWorktree": "advanced",
     "adjudicateModelRoute": "advanced",
     "adjudicatePersistedPathRules": "advanced",
@@ -4074,7 +4089,6 @@
     "autoRunOnRecommendationEffective": "internal",
     "backgroundAgentStoreContract": "advanced",
     "backgroundAgentStoreScopesContract": "advanced",
-    "bashReadBoundaryProbe": "advanced",
     "bashReversibilityProbe": "advanced",
     "boundaryPublishVerdict": "advanced",
     "boundedRedactedSummary": "advanced",
@@ -4388,6 +4402,7 @@
     "isModelGatedForClass": "advanced",
     "isModelPriced": "advanced",
     "isNamespacedCoveringRuleName": "advanced",
+    "isNotificationInjectionOutcome": "advanced",
     "isPeerDeliveryReceiptState": "advanced",
     "isPeerIdleNoticeKind": "advanced",
     "isPeerSessionId": "advanced",
@@ -4536,6 +4551,7 @@
     "peekMemoryAnnouncements": "advanced",
     "peerAdmissionFor": "advanced",
     "peerAxisToken": "advanced",
+    "peerDirectoryContract": "advanced",
     "peerHeldQueueFor": "advanced",
     "peerHeldQueueIfAny": "advanced",
     "peerHeldQueueKey": "advanced",