fix(spec): name the unreported non-legacy value and all three props-gate commands in the D3 entry and the pending note

Claude-Session: https://claude.ai/code/session_01CiCTczDo7tGhafXjf61dUJ
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

.changeset/17321-record-filter-d2-conversion.md

@@ -48,7 +48,8 @@ excludes every row for a rule array, so a rewrite there would empty the block. T
 on a block that queries an object converts. Such a page keeps loading and rendering unchanged,
 and its `filter` door refuses the form: at `dataSource.filter` on the page's next save; at a
 block's `properties.filter` / `properties.defaultFilters` only as the component-props gate's
-advisory finding (`os validate`) — a re-save through the metadata API is not refused there,
-measured — and for a combinator record that refusal no longer renders the combinator as a field
-(`{ field: '$or', … }`); it names the combinator and says why no rule spells it.
-`os migrate meta --stored` lists each filter left as stored as a TODO under its row.
+advisory finding (`os validate`, `os build`, `os lint`) — a re-save through the metadata API is
+not refused there, measured — and for a combinator record that refusal no longer renders the
+combinator as a field (`{ field: '$or', … }`); it names the combinator and says why no rule
+spells it.
+`os migrate meta --stored` lists each such filter left as stored as a TODO under its row.

packages/spec/src/migrations/entries/semantic/18.element-data-source-and-object-block-filter-rule-array.ts

@@ -79,11 +79,14 @@ export const entry: SemanticMigration = {
     + 'contract), and its `filter` door refuses the form: at `dataSource.filter` on the page\'s '
     + 'next save; at a block\'s `properties.filter` — like `properties.defaultFilters`, a key of '
     + 'the open `properties` bag — only as the component-props gate\'s advisory finding '
-    + '(`os validate`), since a re-save through the metadata API is not refused there. For a '
-    + 'combinator record that refusal names the combinator and says why no rule spells it. '
-    + '`os migrate meta --stored` lists each filter left as stored as a TODO under its row, '
-    + 'naming the block and what blocks the rewrite; a row whose only finding is such a TODO is '
-    + 'reported `skipped`, and the run\'s exit code does not change for it.',
+    + '(os validate, os build, os lint), since a re-save through the metadata API is not '
+    + 'refused there. For a combinator record that refusal names the combinator and says why no '
+    + 'rule spells it. `os migrate meta --stored` lists each such filter as a TODO under its '
+    + 'row, naming the block and what blocks the rewrite (a value that is not a record or AST '
+    + 'form at all — a bare string or number one of the former `z.unknown()` doors took — is '
+    + 'neither converted nor reported, and a row carrying nothing else reads as already on '
+    + 'protocol); a row whose only finding is such a TODO is reported `skipped`, and the run\'s '
+    + 'exit code does not change for it.',
   acceptanceCriteria:
     '`ElementDataSourceSchema.safeParse({ object, filter: [{ field: \'status\', operator: '
     + '\'equals\', value: \'active\' }] })` succeeds and the parsed `filter` is the same rule '