@sema-agent/core 7.8.0 → 7.9.0

package/dist/stores/file/permission-rule-store.js

@@ -1,17 +1,18 @@
 import { closeSync, constants as FS, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { createHash, randomBytes } from "node:crypto";
+import { isRuleBehavior, readRowBehavior } from "../../core/permission-rule-model.js";
 import { PERMISSION_RULE_WRITER, applySyncJoin, applyTombstones, assertDeleteDeltaCarriesNoAdd, assertRedemptionNotQuarantined, assertWriteDeltaScopeDurable, foldDelta, } from "../../core/permission-rule-store.js";
 import { canonicalize } from "../../core/canonical-json.js";
 import { BootLock } from "./fs-atomic.js";
 import { assertAdoptionBootGate } from "./adoption/marker.js";
 function isRuleFile(v) {
     const p = v;
-    return typeof p === "object" && p !== null && p.schemaVersion === 3 && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev === "number" && (p.quarantined === undefined || Array.isArray(p.quarantined));
+    return typeof p === "object" && p !== null && p.schemaVersion === 4 && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev === "number" && (p.quarantined === undefined || Array.isArray(p.quarantined));
 }
-function isLegacyRuleFile(v) {
+function isOlderRuleFile(v) {
     const p = v;
-    return typeof p === "object" && p !== null && (p.schemaVersion === 1 || p.schemaVersion === 2) && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev === "number";
+    return typeof p === "object" && p !== null && (p.schemaVersion === 1 || p.schemaVersion === 2 || p.schemaVersion === 3) && Array.isArray(p.rules) && Array.isArray(p.tombstones) && typeof p.rev === "number";
 }
 function isOrgStateFile(v) {
     const p = v;
@@ -24,7 +25,7 @@ function jsonForm(v) {
     return JSON.parse(JSON.stringify(v));
 }
 export const ORG_STATE_FILE = "org.json";
-export const SCHEMA3_MARKER_FILE = ".rule-schema-3";
+export const SCHEMA_MARKER_FILE = ".rule-schema-4";
 export class OrgRevisionRefusal extends Error {
 }
 const LOCAL_OWNER_FILE = "local-owner.json";
@@ -158,8 +159,8 @@ class FileDurableRulePartition {
         }
         if (!isRuleFile(parsed)) {
             const sv = schemaVersionWord(parsed);
-            const why = sv === 1 || sv === 2
-                ? `${this.file} is a schema ${String(sv)} bucket that was not migrated to schema 3 (written by an older engine after this directory was migrated?); refusing the whole file and loading zero rules`
+            const why = sv === 1 || sv === 2 || sv === 3
+                ? `${this.file} is a schema ${String(sv)} bucket that was not migrated to schema 4 (written by an older engine after this directory was migrated?); refusing the whole file and loading zero rules`
                 : `${this.file} does not carry a readable rule-file shape; refusing the whole file and loading zero rules`;
             this.disclose(why);
             return { unreadable: why };
@@ -170,6 +171,19 @@ class FileDurableRulePartition {
             this.disclose(why);
             return { unreadable: why };
         }
+        const rowKinds = [
+            ["rule", parsed.rules],
+            ["tombstone", parsed.tombstones],
+            ["quarantined", parsed.quarantined ?? []],
+        ];
+        for (const [kind, rows] of rowKinds) {
+            const bad = rows.findIndex((r) => !isRuleBehavior(r?.behavior));
+            if (bad !== -1) {
+                const why = `${this.file} carries a ${kind} row (#${bad}) whose behavior word is outside deny/ask/allow — a schema 4 row must name its behavior; refusing the whole file and loading zero rules`;
+                this.disclose(why);
+                return { unreadable: why };
+            }
+        }
         return { file: parsed };
     }
     disclose(message) {
@@ -218,7 +232,7 @@ class FileDurableRulePartition {
             throw new Error(`refusing to write the permission-rule store while it cannot be read: ${r.unreadable}`);
         }
         if ("absent" in r) {
-            return { schemaVersion: 3, actor: `file-${randomBytes(6).toString("hex")}`, counter: 0, rev: 0, rules: [], tombstones: [] };
+            return { schemaVersion: 4, actor: `file-${randomBytes(6).toString("hex")}`, counter: 0, rev: 0, rules: [], tombstones: [] };
         }
         return {
             schemaVersion: r.file.schemaVersion,
@@ -324,7 +338,7 @@ export class FileDurableRulePartitionProvider {
     migrateLegacyBuckets() {
         if (!existsSync(this.dir))
             return;
-        if (existsSync(join(this.dir, SCHEMA3_MARKER_FILE)))
+        if (existsSync(join(this.dir, SCHEMA_MARKER_FILE)))
             return;
         try {
             assertSafeDir(this.dir);
@@ -359,7 +373,7 @@ export class FileDurableRulePartitionProvider {
                     legacy.push({ name, file: read });
             }
             if (legacy.length === 0) {
-                this.writeSchema3Marker();
+                this.writeSchemaMarker();
                 return;
             }
             const orgHome = this.fileOrgPersistence();
@@ -380,12 +394,18 @@ export class FileDurableRulePartitionProvider {
                         }
                     }
                 }
-                const next = { ...rest, schemaVersion: 3 };
+                const stamped = stampRowBehaviors(rest);
+                if (stamped === undefined) {
+                    complete = false;
+                    this.onError?.(`bucket ${name} left untouched: a row carries a behavior word outside deny/ask/allow, which no engine version wrote; the file is not migrated`);
+                    continue;
+                }
+                const next = { ...stamped, schemaVersion: 4 };
                 atomicPublish(this.dir, join(this.dir, name), JSON.stringify({ ...next, checksum: checksumOf(next) }, null, 2));
-                this.onError?.(`migrated ${name} to rule-file schema 3${org !== undefined ? ` (its org block moved to ${ORG_STATE_FILE})` : ""}`);
+                this.onError?.(`migrated ${name} to rule-file schema 4${org !== undefined ? ` (its org block moved to ${ORG_STATE_FILE})` : ""}`);
             }
             if (complete)
-                this.writeSchema3Marker();
+                this.writeSchemaMarker();
         }
         finally {
             if (!held) {
@@ -394,12 +414,12 @@ export class FileDurableRulePartitionProvider {
             }
         }
     }
-    writeSchema3Marker() {
+    writeSchemaMarker() {
         try {
-            atomicPublish(this.dir, join(this.dir, SCHEMA3_MARKER_FILE), JSON.stringify({ schemaVersion: 3 }));
+            atomicPublish(this.dir, join(this.dir, SCHEMA_MARKER_FILE), JSON.stringify({ schemaVersion: 4 }));
         }
         catch (err) {
-            this.onError?.(`could not write ${SCHEMA3_MARKER_FILE}: ${err.message}; the legacy scan will run again next construction`);
+            this.onError?.(`could not write ${SCHEMA_MARKER_FILE}: ${err.message}; the legacy scan will run again next construction`);
         }
     }
     orgStatePersistence() {
@@ -449,6 +469,34 @@ export class FileDurableRulePartitionProvider {
         this.lock = undefined;
     }
 }
+function stampRowBehaviors(body) {
+    const rules = [];
+    for (const r of body.rules) {
+        const behavior = readRowBehavior(r.behavior);
+        if (behavior === undefined)
+            return undefined;
+        rules.push({ ...r, behavior });
+    }
+    const tombstones = [];
+    for (const t of body.tombstones) {
+        const behavior = readRowBehavior(t.behavior);
+        if (behavior === undefined)
+            return undefined;
+        tombstones.push({ ...t, behavior });
+    }
+    let quarantined;
+    if (body.quarantined !== undefined) {
+        quarantined = [];
+        for (const q of body.quarantined) {
+            const behavior = readRowBehavior(q.behavior);
+            if (behavior === undefined)
+                return undefined;
+            quarantined.push({ ...q, behavior });
+        }
+    }
+    const { rules: _r, tombstones: _t, quarantined: _q, ...rest } = body;
+    return { ...rest, rules, tombstones, ...(quarantined !== undefined ? { quarantined } : {}) };
+}
 function readLegacyBucket(file) {
     let raw;
     try {
@@ -467,7 +515,7 @@ function readLegacyBucket(file) {
     catch {
         return undefined;
     }
-    if (!isLegacyRuleFile(parsed))
+    if (!isOlderRuleFile(parsed))
         return undefined;
     const { checksum, ...body } = parsed;
     return checksum === checksumOf(body) ? parsed : undefined;

package/dist/tools/fs/bash-readonly-classifier.d.ts

@@ -80,7 +80,7 @@ export interface LeadingCommandNameOptions {
      * name instead of refusing it.
      *
      * OPT-IN, and used by ONE family of callers: the persisted permission-RULE lane
-     * ({@link import("../../core/permission-rule-model.js").parseAllowRuleText} and its matcher), where
+     * ({@link import("../../core/permission-rule-model.js").parseRuleText} and its matcher), where
      * both sides of the comparison are literal text a person read on an approval card. The refusal this
      * option lifts exists for the argv[0]-NAME filters (the read-only allowlist, the coarse
      * command-name policy, the skill specifier): those compare a bare token against a name set, and a

package/dist/tools/fs/fs-pdf.d.ts

@@ -29,7 +29,7 @@ type ReadPdfReturn = string | {
  *   downsampler seam then applies the same pipeline as the Read image branch). poppler absent → HONEST
  *   degradation with the working alternative, never a fake success.
  * Wire discipline: the base64 payload rides `details.file` only while ≤48K chars (same OMIT rule as the
- * image variant — a bigger card would be dropped whole by the structuredFrom 4×cap and blind the shell).
+ * image variant — a bigger card would be dropped whole by the card projector's 4×cap and blind the shell).
  * structured-card audit item B (2026-08-05): that budget management assumed `"document"` was on `CC_DETAIL_TYPES`, which
  * it was not — every `document` card, sized or not, was dropped at the gate, making the 48K rule dead
  * code and the pages/fallback-level disclosure invisible to a host. The word is registered now.

package/dist/tools/fs/notebook.d.ts

@@ -92,5 +92,5 @@ export interface NotebookRender {
 export declare function renderNotebookCells(cells: readonly NotebookCell[], imageBase64Budget: number): NotebookRender;
 /** Wire-card projection of a cell: base64 replaced by a length marker so the `details` card never
  *  carries raw image bytes (they ride the model-facing content blocks; an oversized card would be
- *  omitted whole by the structuredFrom 4×cap and blind the shell). */
+ *  omitted whole by the card projector's 4×cap and blind the shell). */
 export declare function stripNotebookImageData(cell: NotebookCell): NotebookCell;

package/dist/tools/fs/safety.d.ts

@@ -321,7 +321,7 @@ export declare function violationText(toolName: string, v: FsViolation): string;
  * every renderer of a {@link resolveKey} violation — `undefined` keeps the pre-existing detail-less
  * shape for all other violation codes, so nothing else changes byte-wise.
  *
- * RB-397-c (回溯复查批): `type` is the WIRE discriminator — `structuredFrom`'s `CC_DETAIL_TYPES` gate
+ * RB-397-c (回溯复查批): `type` is the WIRE discriminator — the leg's card projector (`createStructuredProjector`, design/388 L4)
  * (tool-output-projection.ts) keys on `details.type`, so without it the card never reached
  * `tool_end.structured` and the "count from fields" promise above held for in-process readers only.
  * `code` stays as-is for the existing RB-371 consumers — the new key is strictly additive.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.8.0",
+  "version": "7.9.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2190,
+  "count": 2206,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -154,6 +154,7 @@
     "CODE_REVIEW_PROMPT": "variable",
     "CODE_ROLE": "variable",
     "CODE_SYSTEM_PROMPT": "variable",
+    "COMMAND_RULE_TOOL": "variable",
     "COMPLIANCE_CAPABILITIES": "variable",
     "CONFIG_CATALOG_VERSION": "variable",
     "CONSOLIDATION_DEFAULTS": "variable",
@@ -806,11 +807,12 @@
     "ParkProbeFindingCode": "type",
     "ParkSelfCheckResult": "interface",
     "ParkedClaimTicket": "interface",
-    "ParsedAllowRule": "interface",
     "ParsedEntryFile": "interface",
     "ParsedPermissionRule": "interface",
+    "ParsedRule": "interface",
     "ParsedScopeKey": "type",
     "PatchReport": "interface",
+    "PathRuleBases": "interface",
     "PausedCause": "type",
     "PeerAdmission": "interface",
     "PeerAdmissionConfig": "interface",
@@ -882,8 +884,8 @@
     "PermissionRuleSyncResult": "interface",
     "PermissionRuleSyncTransport": "type",
     "PermissionRuleWriter": "interface",
-    "PersistedAllowRule": "interface",
     "PersistedOrgRuleState": "interface",
+    "PersistedRule": "interface",
     "PersistedRuleAnswer": "type",
     "PersistedRuleCoverage": "interface",
     "PersistedRuleHit": "interface",
@@ -891,6 +893,7 @@
     "PersistedRuleMatch": "type",
     "PersistedRuleTool": "type",
     "PersistedRuleUnreadable": "interface",
+    "PersistedRuleVerdict": "interface",
     "PlacedSessionRow": "type",
     "PlanParseRepairs": "interface",
     "PlatformLimitReason": "type",
@@ -947,6 +950,7 @@
     "READ_DENY_DEFAULT_TIERS": "variable",
     "READ_FACE_BUILTIN_DENY_TABLE": "variable",
     "READ_FACE_DEFAULT_DENY_ENTRIES": "variable",
+    "READ_RULE_TOOL": "variable",
     "REAL_APPROVAL_CHECKPOINT_VERSION": "variable",
     "REASONING_BUDGET_SHARE": "variable",
     "RECALL_CAVEAT": "variable",
@@ -964,6 +968,9 @@
     "ROOT_ADOPTION_FILE": "variable",
     "ROSTER_SOURCES": "variable",
     "ROUTE_ADJUDICATION_CONFORMANCE_CORPUS": "variable",
+    "RULE_BEHAVIORS": "variable",
+    "RULE_BEHAVIORS_BY_PRECEDENCE": "variable",
+    "RULE_BEHAVIOR_PRECEDENCE": "variable",
     "RULE_OFFERS_ABSENCE_BASELINE": "variable",
     "RULE_SYNC_DROP_CODES": "variable",
     "RUN_WORKFLOW_TOOL_NAME": "variable",
@@ -1061,6 +1068,7 @@
     "RuleApprovalKind": "type",
     "RuleApprovalRecord": "interface",
     "RuleApprovalRecordStore": "interface",
+    "RuleBehavior": "type",
     "RuleCandidate": "interface",
     "RuleConsentDeps": "interface",
     "RuleDeleteDelta": "interface",
@@ -1228,7 +1236,7 @@
     "StopSource": "type",
     "StoreDurability": "type",
     "StoreFidelity": "type",
-    "StoredAllowRules": "interface",
+    "StoredRules": "interface",
     "StoredSession": "class",
     "StoredSessionRules": "interface",
     "StoredStrategy": "interface",
@@ -1467,6 +1475,8 @@
     "addDotsOf": "function",
     "addWorktree": "function",
     "adjudicateModelRoute": "function",
+    "adjudicatePersistedPathRules": "function",
+    "adjudicatePersistedRules": "function",
     "admitMemoryScopes": "function",
     "adoptFilePermissionRuleStore": "function",
     "adoptLocalDataRoot": "function",
@@ -1751,7 +1761,6 @@
     "foldAutoModeArming": "function",
     "foldDelta": "function",
     "foldPermissionModeClass": "function",
-    "formatAllowRuleText": "function",
     "formatDiagnosticsBlock": "function",
     "formatDiagnosticsSummary": "function",
     "formatHookFeedback": "function",
@@ -1763,6 +1772,7 @@
     "formatPeerNoticeClock": "function",
     "formatProjScope": "function",
     "formatProjectMarker": "function",
+    "formatRuleText": "function",
     "formatToolError": "function",
     "formatUserProjScope": "function",
     "formatUserScope": "function",
@@ -1813,6 +1823,7 @@
     "isQuestionUnavailable": "function",
     "isRemoteExecutionEnv": "function",
     "isRetryableRemoteErrorCode": "function",
+    "isRuleBehavior": "function",
     "isRuleLive": "function",
     "isSecretEnvKey": "function",
     "isSelfOrchestrationActive": "function",
@@ -1910,7 +1921,6 @@
     "originEquals": "function",
     "oversizeJournalResult": "function",
     "parkedToolIdentity": "function",
-    "parseAllowRuleText": "function",
     "parseAutoModeResponse": "function",
     "parseCrossSessionEnvelope": "function",
     "parseEntryFile": "function",
@@ -1924,10 +1934,12 @@
     "parseResult": "function",
     "parseRetryAfter": "function",
     "parseRuleSyncResponse": "function",
+    "parseRuleText": "function",
     "parseScopeKey": "function",
     "parseTeacherAdvice": "function",
     "parseWorkflowMeta": "function",
     "pathConfinableWriteToolNames": "function",
+    "pathRuleReaches": "function",
     "pathTargetOf": "function",
     "pathTargetValue": "function",
     "pathTargetingToolNames": "function",
@@ -1981,6 +1993,7 @@
     "readPeerSessionRecord": "function",
     "readPendingSteerQueue": "function",
     "readRootAdoptionFile": "function",
+    "readRowBehavior": "function",
     "readSessionCaptureOptOut": "function",
     "readUsageRecord": "function",
     "readV2HeaderHints": "function",
@@ -2068,8 +2081,10 @@
     "ruleFaceOfInstance": "function",
     "ruleFacesFromRoster": "function",
     "ruleOffersOfRecord": "function",
+    "ruleReachesProgramRun": "function",
     "ruleSourceOf": "function",
     "ruleSyncVector": "function",
+    "ruleToolGrammarOf": "function",
     "runCascade": "function",
     "runDeveloperTask": "function",
     "runExecGate": "function",
@@ -2088,6 +2103,7 @@
     "runWithVerification": "function",
     "runWorkflow": "function",
     "sameExecutionRecord": "function",
+    "sameRuleIdentity": "function",
     "sameRuleOwner": "function",
     "sameScope": "function",
     "sanitizeAutoModeArmingRecipe": "function",
@@ -2346,6 +2362,7 @@
     "CODE_REVIEW_PROMPT": "advanced",
     "CODE_ROLE": "advanced",
     "CODE_SYSTEM_PROMPT": "advanced",
+    "COMMAND_RULE_TOOL": "advanced",
     "COMPLIANCE_CAPABILITIES": "advanced",
     "CONFIG_CATALOG_VERSION": "advanced",
     "CONSOLIDATION_DEFAULTS": "advanced",
@@ -2998,11 +3015,12 @@
     "ParkProbeFindingCode": "advanced",
     "ParkSelfCheckResult": "advanced",
     "ParkedClaimTicket": "advanced",
-    "ParsedAllowRule": "advanced",
     "ParsedEntryFile": "advanced",
     "ParsedPermissionRule": "advanced",
+    "ParsedRule": "advanced",
     "ParsedScopeKey": "advanced",
     "PatchReport": "stable",
+    "PathRuleBases": "advanced",
     "PausedCause": "advanced",
     "PeerAdmission": "advanced",
     "PeerAdmissionConfig": "advanced",
@@ -3074,8 +3092,8 @@
     "PermissionRuleSyncResult": "advanced",
     "PermissionRuleSyncTransport": "advanced",
     "PermissionRuleWriter": "advanced",
-    "PersistedAllowRule": "advanced",
     "PersistedOrgRuleState": "stable",
+    "PersistedRule": "advanced",
     "PersistedRuleAnswer": "advanced",
     "PersistedRuleCoverage": "advanced",
     "PersistedRuleHit": "advanced",
@@ -3083,6 +3101,7 @@
     "PersistedRuleMatch": "advanced",
     "PersistedRuleTool": "advanced",
     "PersistedRuleUnreadable": "advanced",
+    "PersistedRuleVerdict": "advanced",
     "PlacedSessionRow": "advanced",
     "PlanParseRepairs": "advanced",
     "PlatformLimitReason": "advanced",
@@ -3139,6 +3158,7 @@
     "READ_DENY_DEFAULT_TIERS": "advanced",
     "READ_FACE_BUILTIN_DENY_TABLE": "advanced",
     "READ_FACE_DEFAULT_DENY_ENTRIES": "advanced",
+    "READ_RULE_TOOL": "advanced",
     "REAL_APPROVAL_CHECKPOINT_VERSION": "advanced",
     "REASONING_BUDGET_SHARE": "advanced",
     "RECALL_CAVEAT": "advanced",
@@ -3156,6 +3176,9 @@
     "ROOT_ADOPTION_FILE": "advanced",
     "ROSTER_SOURCES": "advanced",
     "ROUTE_ADJUDICATION_CONFORMANCE_CORPUS": "advanced",
+    "RULE_BEHAVIORS": "advanced",
+    "RULE_BEHAVIORS_BY_PRECEDENCE": "advanced",
+    "RULE_BEHAVIOR_PRECEDENCE": "advanced",
     "RULE_OFFERS_ABSENCE_BASELINE": "advanced",
     "RULE_SYNC_DROP_CODES": "advanced",
     "RUN_WORKFLOW_TOOL_NAME": "stable",
@@ -3253,6 +3276,7 @@
     "RuleApprovalKind": "advanced",
     "RuleApprovalRecord": "advanced",
     "RuleApprovalRecordStore": "advanced",
+    "RuleBehavior": "advanced",
     "RuleCandidate": "advanced",
     "RuleConsentDeps": "advanced",
     "RuleDeleteDelta": "advanced",
@@ -3420,7 +3444,7 @@
     "StopSource": "advanced",
     "StoreDurability": "advanced",
     "StoreFidelity": "advanced",
-    "StoredAllowRules": "advanced",
+    "StoredRules": "advanced",
     "StoredSession": "stable",
     "StoredSessionRules": "advanced",
     "StoredStrategy": "advanced",
@@ -3659,6 +3683,8 @@
     "addDotsOf": "advanced",
     "addWorktree": "advanced",
     "adjudicateModelRoute": "advanced",
+    "adjudicatePersistedPathRules": "advanced",
+    "adjudicatePersistedRules": "advanced",
     "admitMemoryScopes": "advanced",
     "adoptFilePermissionRuleStore": "advanced",
     "adoptLocalDataRoot": "advanced",
@@ -3943,7 +3969,6 @@
     "foldAutoModeArming": "advanced",
     "foldDelta": "advanced",
     "foldPermissionModeClass": "advanced",
-    "formatAllowRuleText": "advanced",
     "formatDiagnosticsBlock": "advanced",
     "formatDiagnosticsSummary": "advanced",
     "formatHookFeedback": "advanced",
@@ -3955,6 +3980,7 @@
     "formatPeerNoticeClock": "advanced",
     "formatProjScope": "stable",
     "formatProjectMarker": "stable",
+    "formatRuleText": "advanced",
     "formatToolError": "advanced",
     "formatUserProjScope": "advanced",
     "formatUserScope": "stable",
@@ -4005,6 +4031,7 @@
     "isQuestionUnavailable": "advanced",
     "isRemoteExecutionEnv": "advanced",
     "isRetryableRemoteErrorCode": "advanced",
+    "isRuleBehavior": "advanced",
     "isRuleLive": "advanced",
     "isSecretEnvKey": "advanced",
     "isSelfOrchestrationActive": "advanced",
@@ -4102,7 +4129,6 @@
     "originEquals": "stable",
     "oversizeJournalResult": "advanced",
     "parkedToolIdentity": "advanced",
-    "parseAllowRuleText": "advanced",
     "parseAutoModeResponse": "advanced",
     "parseCrossSessionEnvelope": "advanced",
     "parseEntryFile": "advanced",
@@ -4116,10 +4142,12 @@
     "parseResult": "advanced",
     "parseRetryAfter": "advanced",
     "parseRuleSyncResponse": "advanced",
+    "parseRuleText": "advanced",
     "parseScopeKey": "advanced",
     "parseTeacherAdvice": "advanced",
     "parseWorkflowMeta": "advanced",
     "pathConfinableWriteToolNames": "advanced",
+    "pathRuleReaches": "advanced",
     "pathTargetOf": "advanced",
     "pathTargetValue": "advanced",
     "pathTargetingToolNames": "advanced",
@@ -4173,6 +4201,7 @@
     "readPeerSessionRecord": "advanced",
     "readPendingSteerQueue": "advanced",
     "readRootAdoptionFile": "advanced",
+    "readRowBehavior": "advanced",
     "readSessionCaptureOptOut": "advanced",
     "readUsageRecord": "advanced",
     "readV2HeaderHints": "advanced",
@@ -4260,8 +4289,10 @@
     "ruleFaceOfInstance": "advanced",
     "ruleFacesFromRoster": "advanced",
     "ruleOffersOfRecord": "advanced",
+    "ruleReachesProgramRun": "advanced",
     "ruleSourceOf": "advanced",
     "ruleSyncVector": "advanced",
+    "ruleToolGrammarOf": "advanced",
     "runCascade": "advanced",
     "runDeveloperTask": "advanced",
     "runExecGate": "advanced",
@@ -4280,6 +4311,7 @@
     "runWithVerification": "advanced",
     "runWorkflow": "stable",
     "sameExecutionRecord": "advanced",
+    "sameRuleIdentity": "advanced",
     "sameRuleOwner": "advanced",
     "sameScope": "advanced",
     "sanitizeAutoModeArmingRecipe": "advanced",