@cratis/pi 7.127.0 → 7.129.0

package/package/corpus/skills/cratis-screenplay-toolchain/references/screenplay-contract.version

@@ -1 +1 @@
-4.245.0
+5.1.0

package/package/corpus/skills/cratis-screenplay-toolchain/references/traps.md

@@ -62,7 +62,7 @@ Identity and compliance traps (`identity.md`, `concepts.md`, `events.md`, `purpo
   unknown, not safe. Arc needs `[ExecuteCommandsAsSystem]` to supply a principal.
 
 Traps 39 to 44 are tool traps.
-39. Attached file/inline command handlers refuse PLAY0800 (`CommandHandlerRequiresAttachment`): permanent constrained-attachment requirement, so gap-fill in code rather than wait for ESM admission. Read required typed `arguments.subject`, not the message; older binders use PLAY0268 (version gate: [diagnostic arguments](diagnostic-arguments.md)). Pending `handler implementation` beside unconditional productions binds as a described v23 command (PLAY0695). Body-reaching specs are Unsupported ImplementationBody; Stage still refuses rendering STAGE-IMPL-002 even in Stub mode; semantic execution reports ImplementationBody only when reached after gates. `implementation` and `hint` are accepted on a command handler, an operation execute/compensate phase and a command property named rule, and are rejected on concept rules, built-in property rules and whole-command `require`/`validate` bodies; hints do not execute, lock or confirm a body. A handler slice is gap-fill, not a customization of a rendered slice.
+39. An attached file/inline command handler binds as the v23 result contract only beside unconditional `produces` with a resolved, nonempty body; with no `produces`, `produces ... when` or an unresolved body it refuses PLAY0800 (`CommandHandlerRequiresAttachment`). Read required typed `arguments.subject`, not the message; older binders refuse every attached handler (version gate: [diagnostic arguments](diagnostic-arguments.md)). Pending `handler implementation` beside unconditional productions binds as a described v23 command (PLAY0695). Body-reaching specs are Unsupported ImplementationBody; Stage still refuses rendering STAGE-IMPL-002 even in Stub mode; semantic execution reports ImplementationBody only when reached after gates. `implementation` and `hint` are accepted on a command handler, an operation execute/compensate phase and a command property named rule, and are rejected on concept rules, built-in property rules and whole-command `require`/`validate` bodies; hints do not execute, lock or confirm a body. A handler slice is gap-fill, not a customization of a rendered slice.
 40. `numbers exact` (the source mode) parses but never binds (PLAY0268; "not admitted by any supported executable model (ESM) version yet") and is PLAY0001 on older compilers; it is absent from `grammar.md`. Exact lowering of qualifying Double-mode literals is separate (v11). Never use it in a model or example meant to execute.
 41. MCP roots bug: a dynamic-root server on an old tool answers the roots request with an `id: null` error right after `notifications/initialized`; hosts treat it as fatal, and `open-workspace.path` does not help. Start with a fixed root (`screenplay mcp <folder>`, `cratis screenplay mcp` in a project with `.cratis/ai.json`).
     Requires Screenplay 4.63.2 or later (`screenplay --version`) for a dynamic-root server; the compiler bundled in older cratis releases lacks it.

package/package/corpus/skills/cratis-screenplay-ui-composition/SKILL.md

@@ -248,6 +248,12 @@ Read [change alternatives](references/change-alternatives.md) when a component's
 
 Read [interaction example](references/interaction-example.md) when wiring a
 named confirmation behavior and an inline refresh to the same screen.
+
+State every plain and toolbar `action`'s subject: `for item` (the chosen record fills its
+inputs) or `for screen` (no row does). Omitted, the compiler infers it from types, and a
+create action on a list can bind the selected row's id. Read
+[action subjects](references/action-subjects.md) when adding a screen action or when
+PLAY0817-PLAY0821 appear.
 Scalar/named `returns` bind and reference-execute (ESM v7).
 Renderer generation/response limits: command-surface `references/generated-values-and-responses.md`.
 Screenplay resolves response names in form submit and execute success (Requires Screenplay 4.148.0 or later);

package/package/corpus/skills/cratis-screenplay-ui-composition/references/action-subjects.md

@@ -0,0 +1,73 @@
+# Action subjects: `for item` and `for screen`
+
+Requires Screenplay 4.248.0 or later (`screenplay --version`). Source: Screenplay
+`Documentation/screenplay/action-subjects.md` (decision 0110).
+
+A plain or toolbar `action` states whether it acts on one chosen record or on the screen:
+
+- `for item`: the nearest single `data` record, or the selected row of a collection. Inputs bind
+  from it: explicit `with <input> from item.<field>` first, then case-sensitive same-name
+  fields, then one key field with the same declared concept.
+- `for screen`: independent of selection; no row fills the inputs. Use it for actions that
+  create something or that the user fills in through the form.
+
+The clause follows the command name, before an inline `label`. Only action toolbar items
+accept it.
+
+```screenplay
+concept TaskId : Uuid
+concept Title : String
+module Work
+  feature Tasks
+    slice StateChange AddTask
+      command AddTask
+        taskId TaskId identifier
+        title Title
+        produces event TaskAdded
+          title Title = title
+    slice StateChange CompleteTask
+      command CompleteTask
+        taskId TaskId identifier
+        note String
+        produces event TaskCompleted
+          note String = note
+    slice StateView OpenTasks
+      readmodel OpenTask
+        taskId TaskId key
+        title Title
+      projection OpenTasks => OpenTask
+        from TaskAdded
+          taskId = $eventSourceId
+          title = title
+        remove with TaskCompleted
+      query ListOpenTasks => OpenTask[]
+      screen OpenTasksScreen
+        title "Open tasks"
+        data OpenTask[] via query ListOpenTasks
+        action AddTask for screen
+          label "Add task"
+        action CompleteTask for item
+          label "Complete"
+          with taskId from item.taskId
+        table OpenTask
+          column title label "Task"
+```
+
+State the subject on every plain and toolbar action. Without it, the compiler infers `for item`
+when there is exactly one collection `data`, one required non-generated identifier and one key
+with the same concept, and `for screen` otherwise. Inference follows types, not intent: here
+`AddTask` without a clause infers `for item`, because its `taskId` has the row key's concept,
+and would bind the selected row's id to a new task.
+
+| Code | Severity | Meaning | Fix |
+| --- | --- | --- | --- |
+| PLAY0817 | Error | Malformed, duplicate or misplaced subject clause | One clause after the command name |
+| PLAY0818 | Information | Explains an omitted subject's inference | State `for item` or `for screen` |
+| PLAY0819 | Warning | The inferred binding differs from the legacy case-insensitive row-name matching | Decide per action: `for screen`, or `for item` with explicit inputs; never bulk-accept |
+| PLAY0820 | Warning | Several keys could bind one input | Write `with <input> from item.<field>` |
+| PLAY0821 | Warning | A guarded `for screen` action has collection data and cannot choose one item | Use `for item` or single-record data |
+
+A model written before 4.248.0 can report PLAY0818/PLAY0819 on every list-screen action. Review
+each one against what the action means; a create action is `for screen` even when the row has a
+matching identifier. Compiler inference is authoring evidence only: Scene owns the runtime
+selection and form-input behavior.

package/package/corpus/skills/cratis-screenplay-ui-composition/references/file-references.md

@@ -7,8 +7,9 @@ This reference holds the three meanings of `file` and the rules for paths and lo
 Three meanings, one word:
 
 - **Backend implementation attachment.** On an attached command `handler`
-  (PLAY0800: permanent constrained-attachment requirement, gap-filled in code;
-  pending described handlers instead bind v23 without a file), a validation
+  (binds as the v23 result contract beside unconditional `produces` with a resolved
+  body from Screenplay 4.250.0, otherwise PLAY0800; pending described handlers bind
+  v23 without a file), a validation
   rule predicate, a query `performer`, a reducer rule, a reaction trigger, a
   `constraint` and a `policy`, `file` stands in for the inline body: the
   implementation lives there. These are the files a host inventories.
@@ -22,7 +23,7 @@ Three meanings, one word:
   `readmodel`, `projection`, `slice`, `specification`, top-level `trigger` — it
   only records which file realizes it.
 
-Requires Screenplay 4.210.0 (`screenplay --version`) for the file/inline handler's PLAY0800; older binders use PLAY0268. Read its required typed `arguments.subject` to identify the command, never the message.
+Requires Screenplay 4.250.0 (`screenplay --version`) for a file/inline handler beside `produces` to bind; 4.210.0 to 4.249.x refuse it with PLAY0800 and older binders use PLAY0268. Read its required typed `arguments.subject` to identify the command, never the message.
 
 The rules:
 

package/package/corpus/skills/cratis-screenplay-ui-composition/references/response-continuations.md

@@ -72,7 +72,7 @@ module Billing
           title String = title
         returns invoiceId
       screen CreateInvoiceScreen
-        action CreateInvoice
+        action CreateInvoice for screen
           label "Create invoice"
     slice StateView Details
       readmodel Invoice

package/package/corpus/skills/cratis-screenplay-ui-composition/references/worked-flow.md

@@ -21,7 +21,7 @@ module Marina
       screen BookBerthScreen
         title "Book a berth"
         data BerthListView[] via query ListBerths
-        action BookBerth
+        action BookBerth for screen
           navigate to BerthListScreen
           label "Book berth"
     slice StateView BerthList

package/package/corpus/skills/cratis-showrunner-herald/SKILL.md

@@ -12,6 +12,10 @@ as events in the application's own Chronicle event store. It is not a service.
 
 **Requires** `Cratis.Showrunner.Herald` 1.10.0 or later and an application that is a Chronicle
 client (`AddCratis` or `AddCratisChronicle`); check the package reference in the `.csproj`.
+Herald records in the host application's own event store, without naming it again; set
+`HeraldOptions.EventStore` only to use another store. Showrunner 1.13.0 or later takes the host's
+store; an older release takes the name from the Chronicle client options, which an ASP.NET Core
+host leaves empty, so set `EventStore` explicitly there.
 
 ## Add it
 
@@ -41,6 +45,7 @@ builder.AddHerald(herald =>
   validated at startup and the error names the option.
 - Defaults worth knowing: `DefaultLanguage` `en`, `Transport` `Smtp`, `Smtp.Security` `StartTls`,
   `Retry.MaxAttempts` 6, `PollingInterval` 5 seconds. Read [options](references/options.md) for the full table.
+- A `signupDeclined` email is sent from `OrganizationRegistrationDeclined` with the reviewer's message as a value; see `cratis-onboarding-runtime`.
 - Chronicle finds Herald's events through type discovery of referenced `Cratis*` packages.
 - Run the worker in **one** application instance: delivery is at least once.
 

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/SKILL.md

@@ -148,11 +148,12 @@ and unaudited-version refusals still stop first. Codes, limits and fixes:
   overrides (`-036`), unsupported code validation (`-005`), DateTime filters (`-010`),
   unsupported conditional productions, unsupported composite-key projection shapes, including DateTime and decimal key parts (`STAGE-ESM-048`, and `-047` for a single-instance query by parts) and unsupported `all` shapes.
   Protected reads render as Arc read protection in a new enough bundle; shapes it cannot preserve, and every protected read in an older bundle, refuse `STAGE-ESM-044` (see admission.md). Described handlers still refuse `STAGE-IMPL-002` even in Stub mode. Query-performer gaps are a separate contract, not a completed implementation.
-- **Attached command handlers (`PLAY0800`):** file/inline handlers permanently require
-  constrained implementation attachments: gap-fill the slice in code, not by waiting
-  for ESM admission. Read the required typed `arguments.subject` for the command,
-  never match message text. Requires Screenplay 4.210.0 (`screenplay --version`);
-  older bundled binders use PLAY0268 for these handlers.
+- **Attached command handlers:** a file/inline handler beside unconditional `produces`
+  with a resolved body binds as the v23 result contract and Stage renders its C# body.
+  Without `produces`, with `produces ... when` or with an unresolved body it refuses
+  `PLAY0800`: read the required typed `arguments.subject` for the command, never match
+  message text. Older bundled binders refuse every attached handler (version gate:
+  toolchain `references/executable-subset.md`).
 - **Binding refusals:** read toolchain `references/executable-subset.md` for
   `PLAY0268`/`PLAY0271` families; binding is not rendering. Composite keys have
   target-specific support, not blanket refusal. Never drop protection.

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/admission.md

@@ -314,11 +314,14 @@ pure expressions, and no generated type shadowing a referenced one. Anything els
 `STAGE-ESM-019`, `-021` or `-022`. A reducer needs a `StateView` slice, its read model in the
 same slice, a required Guid or text identifier and a matching keyed query. Resolved
 C# command/concept rule and iterator validation bodies have pure-gated render
-paths; unsupported body/context shapes still refuse. Attached
-command handlers refuse `PLAY0800` and permanently require constrained implementation
-attachments: gap-fill in code, not by waiting for ESM admission. Requires Screenplay
-4.210.0 (`screenplay --version`); older bundled binders use PLAY0268 for these handlers.
-Read the required typed `arguments.subject` for the command rather than the message.
+paths; unsupported body/context shapes still refuse. An attached command handler
+beside unconditional `produces` with a resolved body binds as the v23 result contract
+(Screenplay 4.250.0, decision 0117); Stage renders a C# body (`STAGE-IMPL-LANGUAGE` when
+no `csharp` body exists) and its semantic Host and executor report a reached body as
+`Unsupported(ImplementationBody)`. Without `produces`, with `produces ... when` or with
+an unresolved body the handler refuses `PLAY0800` at binding; 4.210.0 to 4.249.x refuse
+every attached handler with it and older binders use PLAY0268. Read the required typed
+`arguments.subject` for the command rather than the message.
 A pending handler beside unconditional productions binds as a described v23
 command; rendering still refuses it with STAGE-IMPL-002 even in Stub mode.
 Query-performer gaps are a separate contract: see [bodies and implementation gaps](current-boundaries.md#bodies-and-implementation-gaps).

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/rendered-application.md

@@ -127,15 +127,24 @@ Requires cratis CLI 3.116.0 with Stage 4.211.0 (`cratis --version`); older relea
 - Only provider kinds AuthProxy supports render (`EntraId`, `GitHub`, `Google`, `Apple`,
   `OpenId`). Another kind is left out with `STAGE-AUTH-001`; a persona that is not a
   requirement on authentication, roles or claims is never matched (`STAGE-AUTH-002`).
-- `offering` renders nothing (`STAGE-ONBOARDING-001`): tenants are provisioned without
-  licensing. `STAGE-ONBOARDING-002` to `-006` cover a tenant invitation with no command,
+- `offering <Name>` renders against Box Office: the default offering is declared, and a
+  retrying reactor on tenant provisioning starts each new tenant on it (`StartTenant`) as soon as
+  the operator publishes the offer. Provisioning and the welcome email do not wait for it.
+  `STAGE-ONBOARDING-008` is information: the operator must publish an offer with that name, and
+  Box Office seat and compute policies are not rendered. Requires Stage 4.212.0
+  for the offering and the declined email; older renderers render neither.
+  `STAGE-ONBOARDING-002` to `-006` cover a tenant invitation with no command,
   a sign-up without a first-member persona, a legal document count other than two, a
-  missing email template and an invitation without inviters.
+  missing email template and an invitation without inviters. `-001` and `-007` are retired
+  and never reused.
 - An invitation Ante rejects (a persona or invitation type the model does not allow) is a
   mistake in the invitation, not a decision about the person: the application records
   `OnboardingInvitationRejected` and logs a warning for an administrator, and emails no
-  one. The `signupDeclined` template renders but is not sent until Ante publishes a
-  declined sign-up (`STAGE-ONBOARDING-007`).
+  one.
+- The `signupDeclined` template is sent on `OrganizationRegistrationDeclined`, with the
+  reviewer's message as `decline.message`, once per registration. Ante publishes that only
+  when sign-up review is on; the model has no review syntax, so a rendered application leaves
+  review off and the host adds approve and decline commands by hand (`cratis-onboarding-runtime`).
 - An application with onboarding pins a newer Chronicle client and kernel image than
   other applications; read them from the rendered files.
 - Realization needs the model folder: email images are read from the model root.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.127.0",
+  "version": "7.129.0",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [