@cratis/pi 7.29.0 → 7.30.0

package/package/corpus/skills/cratis-screenplay-automations-and-translations/SKILL.md

@@ -12,9 +12,13 @@ guarantees. Then write it as `Automation` and `Translate` slices that say truthf
 protected, what is only recorded, and who acts. Grammar depth is in
 `cratis-screenplay-captures-and-reactions`; this skill owns the decisions.
 
-**One meaning of Translation:** outside data becomes our facts (a `capture` or a translator
-reaction over an imported event, in a `Translate` slice). Our own event-to-event follow-up is an
+**Translation crosses an application boundary:** inbound turns outside data or foreign
+public events into private local facts; outbound publishes private facts as one local public
+event type. Declare `direction inbound|outbound` when public metadata is used; omission
+preserves historical inbound for legacy translations. Private-to-private follow-up is an
 Automation (`produces` or `invokes`), even when a Chronicle reactor realizes it.
+Read [public events and direction](references/public-events-and-direction.md) for released
+ESM v9 forms, event-target folds, publication specifications and the Unsupported capture limit.
 
 Work in the model first. Code appears only where it is truly needed: the external call, the
 source adapter, the trusted actor, and everything Stage cannot render (below). Session and
@@ -35,8 +39,9 @@ identity, effect and pending-work contract at that point; do not postpone it to
   (`references/realization-and-gap-fill.md`).
 - Reaction `runs as system role "<Role>"` declares an invocation actor (ESM v10).
   Without it the invoke has no caller. Historical CLI 3.41.0's 4.114.0 compiler
-  rejected the syntax (PLAY0137); current CLI 3.46.1 instead refuses ESM v10
-  at render admission (CLI-RENDER-004). Checked model/diagnostics: captures-and-reactions
+  rejected the syntax (PLAY0137); previous CLI 3.46.1 refused ESM v10
+  at render admission (CLI-RENDER-004). CLI 3.50.0 reaches Stage 4.67.0's
+  construct admission, which still refuses reaction identity (STAGE-ESM-034). Checked model/diagnostics: captures-and-reactions
   `references/invocation-identity.md`.
 
 ## Effect guarantees and recovery traps

package/package/corpus/skills/cratis-screenplay-automations-and-translations/references/audit-format.md

@@ -11,8 +11,10 @@ technique: partial work stays visible and nothing is skipped because it looked r
 
 Result is `complete` only when every column is filled or says why it does not apply (for example
 "direct effect: immediate, internal, cannot fail"). `open` names the unresolved decision and who
-answers. `blocked` names the actual capability gap (for example current CLI
-3.46.1 refuses ESM v10 at render admission with CLI-RENDER-004) with intended behavior.
+answers. `blocked` names the actual capability gap with intended behavior. For example,
+CLI 3.50.0 admits ESM v10 to Stage 4.67.0 construct checks, where reaction identity
+is refused with STAGE-ESM-034. Previous CLI 3.46.1 refused v10 at the version gate
+with CLI-RENDER-004; do not report that historical refusal as the current gap.
 
 ## Per translation (capture or translator reaction)
 | Source and type | Location | Correlation | Field dispositions | Target fields traced | Dedup and ordering | Trust boundary | Recovery owner | Named cases | Result |

package/package/corpus/skills/cratis-screenplay-automations-and-translations/references/automation-patterns.md

@@ -72,9 +72,9 @@ Screenplay 4.125.0 declares the actor with reaction-level `runs as system role
 "<Role>"` (ESM v10); without it a gated invocation has no caller and denies.
 `given caller` is not an invocation actor. Role requirements remain enforced;
 claim conditions for this system principal remain unknown. Historical CLI 3.41.0's
-older compiler rejected the syntax (PLAY0137). Current CLI 3.46.1 bundles
-Screenplay 4.130.0 / Stage 4.52.0 and refuses v10 at render admission
-(CLI-RENDER-004; toolchain `references/versions.md`).
+older compiler rejected the syntax (PLAY0137). CLI 3.50.0 bundles Screenplay 4.131.0 / Stage 4.67.0 and reaches v10
+construct admission, but reaction identity still refuses STAGE-ESM-034.
+Previous CLI 3.46.1 refused v10 at its version gate; see toolchain `references/versions.md`.
 Use the checked model in captures-and-reactions `references/invocation-identity.md`.
 Arc gap-fill uses `[ExecuteCommandsAsSystem("<role>")]` for returned commands,
 not identity inferred from prose or an imperative pipeline call.

package/package/corpus/skills/cratis-screenplay-automations-and-translations/references/provenance.md

@@ -44,5 +44,8 @@ binds); tool-qualified verdict text; the trusted-actor text now names `[ExecuteC
 `reactions.md`, `ReactionIdentityParser.cs`, `ReactionRefusalValidator.cs` and the
 binder's v10 selection; the checked scenario passed reference execution. CLI
 3.41.0's older parser and Stage 4.51.3's v7 planner were historical target limits.
-Current CLI 3.46.1 bundles Screenplay 4.130.0 / Stage 4.52.0 and still refuses
-v10 at render admission (CLI-RENDER-004; toolchain `references/versions.md`).
+Previous CLI 3.46.1 refused v10 at its version gate. CLI 3.50.0 bundles
+Screenplay 4.131.0/Stage 4.67.0, reaches v10 construct checks, and still refuses
+reaction identity with STAGE-ESM-034; see toolchain `references/versions.md`.
+Public/direction forms and routes/filters follow Screenplay v4.135.0 decisions
+0049–0051 and 0060–0066, not the older inbound-only translation scope.

package/package/corpus/skills/cratis-screenplay-automations-and-translations/references/public-events-and-direction.md

@@ -0,0 +1,137 @@
+<!-- Copyright (c) Cratis. All rights reserved. -->
+<!-- Licensed under the MIT license. See LICENSE file in the project root for full license information. -->
+
+# Public events and translation direction (released ESM v9)
+
+## Contents
+
+- Choose the boundary and direction
+- Outbound publication and specifications
+- Inbound event captures
+- Admission and evidence
+
+## Choose the boundary and direction
+
+Events are private by default. `public event X` declares a local public contract;
+`event X from "store"` declares a foreign public event's shape locally. The quoted
+origin is an opaque store name, not a path or declaration reference. Nothing checks
+that the local shape matches the other application's contract. A public/foreign
+`import Qualified.X from "store"` has no local shape and remains PLAY0268.
+
+`direction inbound` and `direction outbound` belong directly inside a Translate
+slice. Omission preserves historical inbound behavior for translations with no
+public metadata. A translation declaring or using public metadata needs explicit
+direction (PLAY0614), not a guess from its name.
+
+- Inbound: accept public foreign events or outside data and produce private local
+  facts. Use `capture` or a translating reaction. Correlation, deduplication,
+  enrichment and recovery still need the method skill's decisions.
+- Outbound: consume private local facts and publish exactly one local public event
+  type through a reaction or event-target projection/reducer. No capture belongs
+  here. A private-to-private follow-up is an Automation, not an outbound Translate.
+- A command never produces a public event (PLAY0607), and a foreign public event
+  is never produced locally (PLAY0613). Export only the intended contract fields;
+  public visibility does not authorize exposing personal data or secrets.
+
+## Outbound publication and specifications
+
+`projection P => PublicEvent` resolves its target as an event rather than a read
+model. Keep read-model and event names distinct. The outbound slice owns exactly
+one local public event type; its builders target that event only. Event-target
+reducers have the same boundary but opaque transitions: the reference evaluator
+returns typed Unsupported when a transition is reached, not a successful fold.
+
+An event-target projection holds one folded instance per event source id, not a
+read-model key. It publishes when the folded instance is complete and differs from
+the last published instance for that id. An identical repeated private fact emits
+nothing; changed state emits a new public instance, never rewrites the old fact.
+The reference fold admits only root-property set/clear from literals or event
+properties; other mappings block planning. Publication is unrouted and reactions
+can observe the new public fact. A route filter therefore cannot select publication.
+
+This complete source uses the released publication specification form:
+
+```screenplay
+domain Contracts
+concept OrderId : Uuid
+concept OrderStatus : String
+module Integration
+  feature Translation
+    slice StateChange PackOrder
+      command PackOrder
+        orderId OrderId identifier
+        carrier String
+        produces OrderPacked
+          for orderId
+          carrier = carrier
+      event OrderPacked
+        carrier String
+    slice Translate PublishOrderShipped
+      direction outbound
+      public event OrderShipped
+        carrier String
+        status OrderStatus
+      projection OrderShippedPublisher => OrderShipped
+        from OrderPacked
+          status = "packed"
+      specification PublishingAPackedOrder
+        when append OrderPacked
+          for "3fa85f64-5717-4562-b3fc-2c963f66afa6"
+          carrier = "DHL"
+        then OrderShipped
+          carrier = "DHL"
+          status = "packed"
+```
+
+`when append <PrivateEvent>` commits the input; the `then <PublicEvent>` list
+contains only the follow-up publications, exhaustive and ordered. Also specify
+incomplete state, unchanged repeat, changed state and independent event source ids.
+An expected public instance is not a `then readmodel` assertion.
+
+## Inbound event captures
+
+The foreign declaration must carry a quoted origin. `source events` has one or
+more distinct `from <ForeignEvent>` children; no URL, table or other setting is
+allowed in that block. It is valid only in an explicitly inbound Translate slice.
+
+```screenplay
+domain Contracts
+concept OrderId : Uuid
+module Integration
+  feature Tracking
+    slice Translate TrackShipments
+      direction inbound
+      event ShipmentDispatched from "shipping"
+        orderId OrderId
+      event OrderDispatched
+        orderId OrderId
+      capture ShipmentTracking
+        source events
+          from ShipmentDispatched
+        key orderId
+        append OrderDispatched
+          orderId = $.orderId
+```
+
+This compiles and binds as ESM v9. Evaluating the events-source capture returns
+typed Unsupported: the event-payload-to-working-record contract is not admitted.
+Do not equate binding with a passing capture specification or invent that mapping.
+Keep correlation and resulting private events in the model and report the runtime gap.
+
+## Admission and evidence
+
+ESM v9 shipped in Screenplay 4.117.0 and is selected only by use of public events,
+origins, direction, event-target builders or events-source captures. At 4.135.0,
+publication reference scenarios execute; imported shapes still refuse binding.
+Stage 4.52.0 (previous CLI 3.46.1) audits only through v7: CLI-RENDER-004 precedes
+its STAGE-ESM-016 version refusal. CLI 3.50.0/Stage 4.67.0 reaches construct
+admission through v10 but still refuses publication (STAGE-ESM-032), foreign
+events/events-source captures (STAGE-ESM-033); source admission is not rendering.
+
+Source: Screenplay `v4.135.0:Documentation/screenplay/fixtures/public-events.play`,
+`events.md`, `slices.md`, `captures.md`, decisions 0049–0051 and
+`Source/DotNET/Screenplay.CanonicalCorpus/PublicEventsCorpus.cs`.
+Renderer source: Stage `v4.52.0:Source/Rendering.Cratis/Semantics/SemanticCratisAdmission.cs`
+and `v4.67.0:Source/Rendering.Cratis/Semantics/SemanticVersionFeatures.cs`.
+Diagnostics and repairs: toolchain `references/diagnostics.md`; version allocation:
+toolchain `references/versions.md`.

package/package/corpus/skills/cratis-screenplay-automations-and-translations/verification.json

@@ -3,12 +3,16 @@
   "input": "Our payment provider sends webhooks when invoices are paid or refunded, and we must email a receipt afterwards. Model the integration and the follow-up in the Screenplay model.",
   "fixtures": [],
   "assertions": [
+    { "kind": "skill-contains", "value": "direction outbound", "file": "references/public-events-and-direction.md" },
+    { "kind": "skill-contains", "value": "source events", "file": "references/public-events-and-direction.md" },
+    { "kind": "skill-contains", "value": "then OrderShipped", "file": "references/public-events-and-direction.md" },
+    { "kind": "skill-contains", "value": "typed Unsupported", "file": "references/public-events-and-direction.md" },
     { "kind": "play-compiles" },
     { "kind": "skill-contains", "value": "`[ExecuteCommandsAsSystem(\"<role>\")]`" },
     { "kind": "skill-contains", "value": "ESM v10" },
     { "kind": "skill-contains", "value": "STAGE-ESM-024" },
     { "kind": "skill-contains", "value": "runs as system role" },
-    { "kind": "skill-contains", "value": "**One meaning of Translation:**" },
+    { "kind": "skill-contains", "value": "**Translation crosses an application boundary:**" },
     { "kind": "skill-contains", "value": "complete, open or blocked" },
     { "kind": "skill-contains", "value": "never write a mapping" },
     { "kind": "skill-contains", "value": "run-specifications" },

package/package/corpus/skills/cratis-screenplay-captures-and-reactions/SKILL.md

@@ -6,9 +6,8 @@ license: MIT
 
 # Captures and reactions
 
-The two slice types that run without anyone pressing a button. A `capture` in a
-`Translate` slice turns outside data into events; a `reaction` in an `Automation`
-slice runs when something happens.
+`capture` accepts outside data; `reaction` responds to an occurrence.
+Translate slices cross public boundaries; Automation slices cause private follow-up.
 
 ## Locate the model
 
@@ -26,16 +25,9 @@ source is the single flow model.
 
 ## Verified product sources
 
-| Package | Version | Purpose |
-| --- | --- | --- |
-| `Cratis.Screenplay` | `4.31.0` | CDL parser, reaction and trigger parsers, diagnostics, semantic binder |
-| `Cratis.Screenplay` | main `fd18129` | Command-only inline event boundary |
-| `Cratis.Screenplay` | `4.66.0` (`c89198b`) | ESM v6: reactions, clock, trigger and capture specifications bind; `invokes` caller rule; probed with the standalone tool and its MCP server |
-
-The table records historical examples/probes; they are not reclassified as
-current execution evidence. Refusal/redelivery guidance follows released
-v4.125.0 `reactions.md`/`specifications.md`. Current pins are in toolchain
-`references/versions.md`; reverify before promoting an old probe to that version.
+Read [product sources](references/product-sources.md) for retained historical
+parser/binder probes and refusal/redelivery evidence. Current pins are in toolchain
+`references/versions.md`; historical examples are not current execution evidence.
 
 ⚠️ **Which tool admits them depends on its Screenplay version.** The ESM level
 decides, not the slice type:
@@ -57,6 +49,13 @@ them. Read `cratis-screenplay-toolchain` (`references/versions.md`) when selecti
 Method (the four-part automation test, loops, translations versus automations):
 `cratis-screenplay-automations-and-translations`.
 
+## Public boundaries and observer selection
+
+Read [ESM v9 translation](../cratis-screenplay-automations-and-translations/references/public-events-and-direction.md)
+for `direction`, `source events`/`from`, and its typed Unsupported evaluation.
+Read [v10 filters](../cratis-screenplay-toolchain/references/production-routes-and-filters.md)
+for reaction/reducer `from Source[.Stream]`; unrouted facts never match.
+
 ## Specify what sets them off
 
 A specification names what sets the automation off: `when clock`, `when trigger`
@@ -76,9 +75,9 @@ Read [invocation identity](references/invocation-identity.md) for the checked
 scenario, claim/unknown semantics and PLAY0647–0652/0557 diagnostics.
 
 Historical CLI 3.41.0's 4.114.0 compiler rejected this source with PLAY0137.
-Current CLI 3.46.1 bundles Screenplay 4.130.0 / Stage 4.52.0; its render version
-gate still admits only through v7 (CLI-RENDER-004 for v10). Target realization is gap-fill,
-using Arc `[ExecuteCommandsAsSystem]` for returned commands. Without that attribute
+Previous CLI 3.46.1 refused v10 (CLI-RENDER-004); CLI 3.50.0 reaches
+Stage 4.67.0's construct admission, still refusing identity (STAGE-ESM-034).
+Target realization is gap-fill, using Arc `[ExecuteCommandsAsSystem]` for returned commands. Without that attribute
 Arc supplies no principal and `[Authorize]`/`[Roles]` deny. Each invoked command
 is atomic, not the whole cascade; earlier accepted facts remain after a later refusal.
 

package/package/corpus/skills/cratis-screenplay-captures-and-reactions/references/invocation-identity.md

@@ -71,10 +71,10 @@ module Work
 
 Historical CLI 3.41.0 bundled Screenplay 4.114.0, which did not parse `runs as`:
 the example's `cratis screenplay validate --executable --warnings-as-errors`
-returned PLAY0137, exit 5. This is not a current parser claim. Current CLI 3.46.1
-bundles Screenplay 4.130.0 but its render gate still admits only through v7
-(CLI-RENDER-004 for v10); bundled Stage 4.52.0's direct planner audits through
-v7 and refuses v10 with STAGE-ESM-016 (`references/versions.md` in toolchain).
+returned PLAY0137, exit 5. This is not a current parser claim. CLI 3.50.0 bundles
+Screenplay 4.131.0/Stage 4.67.0 and reaches v10 construct admission, but
+reaction identity still refuses STAGE-ESM-034. Previous CLI 3.46.1/Stage 4.52.0
+audited through v7 only (`references/versions.md` in toolchain).
 Clock/application-trigger identities have no Stage Arc realization either.
 Use authorized gap-fill with the model as contract; returned-command Arc identity
 uses `[ExecuteCommandsAsSystem]`, never permission inferred from a model header.

package/package/corpus/skills/cratis-screenplay-captures-and-reactions/references/product-sources.md

@@ -0,0 +1,15 @@
+<!-- Copyright (c) Cratis. All rights reserved. -->
+<!-- Licensed under the MIT license. See LICENSE file in the project root for full license information. -->
+
+# Retained product-source evidence
+
+| Package | Version | Purpose |
+| --- | --- | --- |
+| `Cratis.Screenplay` | `4.31.0` | CDL parser, reaction and trigger parsers, diagnostics, semantic binder |
+| `Cratis.Screenplay` | main `fd18129` | Command-only inline event boundary |
+| `Cratis.Screenplay` | `4.66.0` (`c89198b`) | ESM v6: reactions, clock, trigger and capture specifications bind; `invokes` caller rule; probed with the standalone tool and its MCP server |
+
+The table records historical examples/probes, not current execution evidence.
+Refusal/redelivery guidance follows released v4.125.0 `reactions.md`/`specifications.md`.
+Current pins live in toolchain `references/versions.md`; reverify before promoting
+an old probe to that version.

package/package/corpus/skills/cratis-screenplay-captures-and-reactions/verification.json

@@ -3,10 +3,12 @@
   "input": "Translate external data into events and declare a reaction.",
   "fixtures": [],
   "assertions": [
+    { "kind": "skill-contains", "value": "unrouted facts never match" },
+    { "kind": "skill-contains", "value": "source events" },
     { "kind": "play-compiles" },
     {
       "kind": "skill-contains",
-      "value": "main `fd18129`"
+      "value": "main `fd18129`", "file": "references/product-sources.md"
     },
     {
       "kind": "skill-contains",

package/package/corpus/skills/cratis-screenplay-command-surface/SKILL.md

@@ -260,14 +260,13 @@ produces when isProForma == true
 
 ## Routes and external operations
 
-Named event sources/streams and command routes bind as ESM v8 (verified at 4.125.0);
-CLI 3.46.1 render rejects models above v7. A routed command's identifier and
-known event destinations must match the source's nominal identifier type
-(PLAY0504, error). Allocation uses the generated identifier's type, or without
-one requires a UUID-based source. Composite `streamId` routes map every named
-part exactly once; scalar `streamId T` and `streamId = x` remain valid. The complete checked route example
-and nested `streamId =` form are in `cratis-screenplay-toolchain`
-`references/sources-and-streams.md`.
+Routes bind as ESM v8; production `stream Source.Stream` overrides
+select v10. Read toolchain [routes](../cratis-screenplay-toolchain/references/production-routes-and-filters.md)
+and [source/stream declarations](../cratis-screenplay-toolchain/references/sources-and-streams.md).
+`public event X` is a local export; `event X from "store"` is a locally declared,
+unverified foreign shape. Commands never produce public events. Read
+[translation direction](../cratis-screenplay-automations-and-translations/references/public-events-and-direction.md)
+for the released ESM v9 boundary and quoted opaque origins.
 
 Use `system`, `uses` and inline/standalone `operation` declarations to state
 external work in the authored production sequence, with execute/compensate phase
@@ -369,7 +368,7 @@ Four contexts, and **what each omits is load-bearing** — when writing a code b
 ## Verify
 
 - [ ] Validate the complete model root with warnings as errors; name the tool,
-      version and result. Current pins: standalone 4.131.0 / CLI 3.46.1; bundle
+      version and result. Current pins: standalone 4.135.0 / CLI 3.50.0; bundle
       compatibility and execution are separate checks.
 - [ ] No unintended `PLAY0478` or `PLAY0479` information remains.
 - [ ] At most one command property carries `identifier`, and no event property does.

package/package/corpus/skills/cratis-screenplay-command-surface/references/context.md

@@ -105,7 +105,7 @@ Checked at Screenplay 4.127.0: `$identity.<property>` is the same caller value a
 is supported, not deprecated. Historical `cratis` CLI 3.41.0 bundled Screenplay 4.114.0, which predated both:
 its parser rejected a top-level `identity` block (`PLAY0001`), and with `--executable` it read a
 `$identity.<property>` mapping as a raw expression (`PLAY0268`). Those checks used standalone 4.127.0;
-they are not current CLI 3.46.1/Screenplay 4.130.0 parser claims. Check current renderer
+they are not current CLI 3.50.0/Screenplay 4.131.0 parser claims. Check current renderer
 admission separately before choosing caller mappings. Built-ins are `id`, `name`, `userName`,
 `isAuthenticated`, `roles`, `claims.<name>` (everything after `claims.` is opaque).
 Bare `$identity` reports PLAY0152; unknown properties report PLAY0155. Only

package/package/corpus/skills/cratis-screenplay-command-surface/references/generated-values-and-responses.md

@@ -1,8 +1,8 @@
 ## Generated values and responses (ESM v7)
 
 A `generated` command property and `returns` response bind and reference-execute
-as ESM v7 (checked at 4.68.0). Current pins are standalone Screenplay 4.131.0
-and CLI 3.46.1 (bundled Screenplay 4.130.0/Stage 4.52.0); `cratis-screenplay-toolchain`
+as ESM v7 (checked at 4.68.0). Current pins are standalone Screenplay 4.135.0
+and CLI 3.50.0 (bundled Screenplay 4.131.0/Stage 4.67.0); `cratis-screenplay-toolchain`
 `references/versions.md` owns the table. CLI#261 is closed: CLI now admits v7
 to Stage planning. The historical CLI 3.41.0 v7 canonical corpus received Stage
 generated-value and response refusals STAGE-ESM-028/029. Do not turn this into a blanket compiler
@@ -45,8 +45,8 @@ Rules (all read at `v4.68.0`):
 
 Operations remain authorable/unadmitted (PLAY0268). Named event sources,
 streams and command/specification routes instead bind and reference-execute as
-ESM v8 at 4.125.0; CLI 3.46.1 render refuses versions above v7 before planning
-(CLI-RENDER-004). Syntax/MCP acceptance alone is not execution. Source/stream
+ESM v8 at 4.125.0; CLI 3.50.0 reaches Stage construct admission through v10,
+not blanket target support. Syntax/MCP acceptance alone is not execution. Source/stream
 forms and realization boundary: `cratis-screenplay-toolchain`
 `references/sources-and-streams.md`. Do not infer further syntax or provider
 admission from decision numbers.

package/package/corpus/skills/cratis-screenplay-event-modeling/SKILL.md

@@ -139,8 +139,8 @@ What binds depends on **which tool** you ask, so name the tool and its version:
   standalone 4.125.0. Use `screenplay test` or MCP `run-specifications` for V4.
   Operations/systems, exact numbers and refusal/redelivery remain unadmitted.
   Historical CLI 3.41.0 rejected `runs as` syntax and its Stage 4.51.3 check
-  refused generated values/responses with STAGE-ESM-028/029. Current CLI 3.46.1
-  bundles Screenplay 4.130.0 / Stage 4.52.0 but still renders through v7 only.
+  refused generated values/responses with STAGE-ESM-028/029. CLI 3.50.0 bundles
+  Screenplay 4.131.0/Stage 4.67.0; v10 reaches construct admission, not full support.
   Source/binding admission and target realization are separate gates.
 
 The ESM versions, the full disposition table and the Step 7 clock example's binding

package/package/corpus/skills/cratis-screenplay-event-modeling/references/parsed-not-runnable.md

@@ -28,7 +28,7 @@ Pins and consumer boundaries: toolchain `references/versions.md`.
 | Command reads/concurrency | Legacy unprotected decisions, PLAY0271 |
 | Invokes-only trigger reads | Report-only, not protected state; direct production with reads refuses |
 | Generated values/responses | v7 binding/reference execution; historical Stage 4.51.3 check: member refusals STAGE-ESM-028/029 |
-| Sources/streams and command/specification routes | v8 binding/reference execution; current CLI 3.46.1 render boundary is v7 |
+| Sources/streams and command/specification routes | v8 binding/reference execution; CLI 3.50.0 reaches Stage construct checks through v10 |
 | Declared reaction invocation actor | v10 binding/reference execution; older CLI parser PLAY0137; Stage planner refuses v10 |
 | Operations/systems, exact numbers, refusal/redelivery | Source accepted; whole binding refuses PLAY0268 |
 | UI | Authoring/deferred metadata; runtime support is a separate consumer contract |

package/package/corpus/skills/cratis-screenplay-legacy-extraction/references/generate-notes.md

@@ -17,9 +17,9 @@ cratis-screenplay-toolchain `references/versions.md`; behaviour from the cratis
 Screenplay.CritterStack `v0.24.0`. Version-specific capability facts belong in cratis-screenplay-toolchain
 `references/versions.md`.
 
-Current CLI is 3.46.1, with Screenplay 4.130.0 / Stage 4.52.0 /
+Current CLI is 3.50.0, with Screenplay 4.131.0 / Stage 4.67.0 /
 Arc.Screenplay 22.54.0 / Chronicle 19.32.0 / Fundamentals 7.22.8
-(`references/versions.md` in the toolchain; standalone Screenplay is 4.131.0).
+(`references/versions.md` in the toolchain; standalone Screenplay is 4.135.0).
 Option/admission evidence checked at CLI 3.41.0: released
 `GenerateScreenplaySettings.cs`, `ArcScreenplayGeneration.cs`, v7 planning specs
 and `Documentation/reference/screenplay.md`; older diagnostic probes below keep

package/package/corpus/skills/cratis-screenplay-model-authoring/SKILL.md

@@ -23,7 +23,7 @@ contract is in `cratis-screenplay-ui-composition`.
 
 ## Verified product sources
 
-Current authoring/MCP guidance follows Screenplay v4.131.0
+Current authoring/MCP guidance follows Screenplay v4.135.0
 `Documentation/screenplay/mcp/`, `ast-authoring.md`, `folders.md`, `vscode.md`.
 Discover installed tools and schemas; CLI bundles can differ from the standalone
 tool. Pins are in `cratis-screenplay-toolchain` `references/versions.md`.
@@ -291,9 +291,9 @@ that the code compiles or behaves. Read `references/mcp-tools.md#code-attachment
   it defines them and maps them onto V1 to V5. `screenplay --warnaserror` checks
   syntax plus the consistency rules (`PLAY0282`-`PLAY0294`) but never binds, so a
   clean run is not a bound or executable result.
-- Operations/exact numbers remain unadmitted; source/stream routes bind as ESM v8,
-  and generated values/responses as v7. CLI 3.46.1 render passes v7 to Stage but
-  refuses newer versions. A source contract is never dropped or stubbed to bind.
+- Operations/`numbers exact` remain unadmitted; routes bind as v8, public
+  boundaries v9, identity/overrides/filters v10, qualifying non-route Double
+  literals v11. CLI 3.50.0 reaches Stage checks through v10. Never drop or stub source contracts to bind.
 - Distinguish authoring acceptance from `executableReady`; unsupported backend
   capabilities are not a reason to drop source constructs or invent stubs.
 - If execution is intended, validate with the owning downstream runtime as well.

package/package/corpus/skills/cratis-screenplay-model-authoring/references/language-reference.md

@@ -243,6 +243,12 @@ v4.31.0 table, re-read against v4.66.0 and v4.68.0 documentation and probed thro
 the standalone 4.66.0 tool for the rows marked "probed"; Cratis CLI 3.28.2 and 3.28.3 bundle
 Screenplay 4.66.0 (before 3.28.2, Screenplay 4.60.1, differ where stated).
 
+Read-model identity and query admission below are corrected to 4.135.0:
+explicit trailing `key` wins; otherwise single-instance queries in the owning slice
+must agree on `by`. Only with no single-instance identifier and an admitted list
+query does conventional `*Id` inference run. Queryless views need explicit `key`.
+See read-surface `references/named-keys.md` for the collection-key exclusion algorithm.
+
 | Disposition | Constructs |
 | --- | --- |
 | Binds and runs in the reference runner | `StateChange`/`StateView` slices; `produces` including `when` conditions over command properties and literal tags; the portable validation rules, `matches email`, quoted `matches` patterns and `require` over command properties; declarative policies and `authorize` on modules, features, commands and keyed queries; `unique` constraints; projections as Chronicle lowers them, including variants, except the projection constructs in the next row; specifications, including `given caller`, `then denied` and `when append` |
@@ -254,7 +260,7 @@ Screenplay 4.66.0 (before 3.28.2, Screenplay 4.60.1, differ where stated).
 | Binds as ESM v7 on standalone Screenplay 4.68.0 (source and release notes; `PLAY0268` on the 4.66.0 in Cratis CLI 3.28.x, probed) | `generated` properties and `returns` responses, generated fixtures and `then returns`: bound and executed by the reference runner; a policy, rule or requirement that references a generated value is `PLAY0273`, and a generated property on a concept with validation rules is `PLAY0268`. Stage 4.24.2 does not render them (`STAGE-ESM-016`, tracked in Stage#201): gap-fill |
 | Authorable, not executable (PLAY0268) | Systems/operations, exact numbers and refusal/redelivery remain unadmitted |
 | Current routing and actor admission | Sources/streams and command/specification routes bind and reference-execute as v8; reaction `runs as system role` supplies the invocation actor as v10 on 4.125.0. Whole-workspace binding determines executable availability; CLI/Stage realization remains separate |
-| Blocks binding (`PLAY0268`) | `pii`/`secret` concepts (also legacy spellings; historical probe: "compliance attributes require portable data-subject semantics"), command `handler` (never binds; a command cannot declare both `produces` and `handler`, `PLAY0035`), bare `rule <Name>`, `require` or conditions over read-model paths, dates and `today` in comparisons, `$context.tenant`/claims/roles/causation in `produces`, `$env` conditions, `file` constraints, unquoted `import` of an external contract, a read model whose keyed queries in its own slice do not share one `by` property (none, or two different properties; several queries over the same property bind), any query other than `=> <ReadModel> optional` with one caller-supplied `by` argument (so also observable, filtered, scoped and performer-backed queries), `$causedBy` and templates in projections |
+| Blocks binding (`PLAY0268`) | `pii`/`secret` concepts (also legacy spellings; historical probe: "compliance attributes require portable data-subject semantics"), command `handler` (never binds; a command cannot declare both `produces` and `handler`, `PLAY0035`), bare `rule <Name>`, `require` or conditions over read-model paths, dates and `today` in comparisons, `$context.tenant`/claims/roles/causation in `produces`, `$env` conditions, `file` constraints, unquoted `import` of an external contract, a read model with neither explicit `key` nor unambiguous query-based identity as described above (composite keys remain unadmitted), queries with filters, scope, performer, context-derived `by` or composite `by` blocks (optional keyed and collection queries, including observable delivery, bind at 4.135.0), `$causedBy` and templates in projections |
 | Blocks binding (`PLAY0271`, legacy meaning) | Command `reads` and `concurrency` |
 | Deferred (`PLAY0269`, information) | Screens, layouts, templates, forms, contributions, UI profiles, themes, behaviors and `on`/`uses` |
 | Metadata only (`PLAY0270`, information) | `domain`, `seed`, `persona`, trigger and other descriptions, and `file` provenance on declarations |

package/package/corpus/skills/cratis-screenplay-model-authoring/references/mcp-tools.md

@@ -98,6 +98,9 @@ with `view: "diagnostics"`, then `view: "repairs"` at the current revision.
 | `PLAY0469` | Remove an inline same-source identifier property and mapping, retiring its semantic address. This changes the contract; `canFixAll` is false. Refuse other consumers, opaque impact, changed routing or comment loss. Plain contracts get guidance only. |
 | `PLAY0479` | Migrate one optional type spelling, or all in a document, preserving syntax and trivia. Exclude `query Q => observable?`. |
 | `PLAY0563/0564` | Expand a one-line interaction alternative / turn a strict item `where` into one block-form `when`. Individual review, canonical formatting, no pinned evidence; refuse comment loss. Opaque non-item-condition text has no PLAY0564 repair. |
+| `PLAY0614` | Declare Translate direction only when exactly one inbound/outbound interpretation fits public metadata; never change event visibility to make a repair fit. |
+| `PLAY0661` | Complete command reads only when each missing part has one same-named compatible source; preserve authored parts and refuse ambiguity. Queries and trigger reads have no repair. |
+| `PLAY0664` | Remove an override identical to the command's complete source/stream/id route. |
 | `PLAY0516` | Move a producing sibling declaration/import before its consumer, or pin an already placed file before a retained glob. Preserve catalogs, comments, placement and executable readiness; introduce no timeline findings. Own-sub-feature edges, cycles, unranked members and mixed/different-parent boundaries have no repair. Rediscover after each move; pinned evidence is unsupported. |
 
 These discoveries verify acceptance before listing a repair. Only compact
@@ -188,7 +191,8 @@ persona/policy and table/case/caseParameter provenance. Neither view executes.
 
 Screenplay v4.127.0 `mcp/reference.md` and `authoring-tools.md` describe these
 additions (checked at 4.127.0); discover installed schemas because current
-CLI 3.46.1 bundles Screenplay 4.130.0, not standalone 4.131.0.
+Previous CLI 3.46.1 bundled Screenplay 4.130.0; CLI 3.50.0 bundles
+4.131.0, so these source objects are available there too.
 
 - Identity/detail summaries expose declared sources; `$identity` has its own
   expression node. The block alone stays executable-ready, but executable reads
@@ -322,7 +326,8 @@ the open model as candidate:
 }
 ```
 
-These source objects require Screenplay 4.131.0; CLI 3.46.1 bundles 4.130.0.
+These source objects require Screenplay 4.131.0; CLI 3.50.0 bundles it
+(previous CLI 3.46.1 bundled 4.130.0).
 Discover installed schemas rather than assuming bundle parity.
 Check that the registered worktree is checked out at the intended commit and
 contains the baseline model; Git refs are not resolved. An admitted missing

package/package/corpus/skills/cratis-screenplay-model-authoring/references/screen-authoring-workflow.md

@@ -146,10 +146,12 @@ Historical verified public vector and executable checks:
 
 - executed toolchain: public CLI 3.43.0 (`23e5a24`), whose default runtime was
   `cratis/stage:4.52.0` and which bundled Screenplay 4.127.0. Published since,
-  and not verified by this vector: Scene 4.17.0, Screenplay 4.133.1, Stage 4.64.0, CLI
-  3.46.1 (bundling Screenplay 4.130.0, default Stage still 4.52.0) and Studio 0.152.2.
+  and not verified by this vector: Scene 4.17.0, Screenplay 4.133.1, Stage 4.64.0,
+  previous CLI 3.46.1 (bundling Screenplay 4.130.0, then-default Stage 4.52.0) and
+  Studio 0.152.2. Current pins are CLI 3.50.0 (Screenplay 4.131.0 / Stage 4.67.0)
+  and standalone Screenplay 4.135.0; see toolchain `references/versions.md`.
   Compiler claims from this `cratis` probe are 4.127.0 claims, not current CLI
-  3.46.1/Screenplay 4.130.0 claims;
+  3.50.0/Screenplay 4.131.0 claims;
 - fixture root: `Source/DotNET/Screenplay.CanonicalCorpus/Corpus/ScreenComposition/v1/source/folder`
   in the Screenplay repository;
 - Screenplay repo tool (available checkout): `dotnet run --project Source/DotNET/Tool

package/package/corpus/skills/cratis-screenplay-model-authoring/verification.json

@@ -6,7 +6,7 @@
     { "kind": "play-compiles" },
     {
       "kind": "skill-contains",
-      "value": "Screenplay v4.131.0"
+      "value": "Screenplay v4.135.0"
     },
     {
       "kind": "skill-contains",

package/package/corpus/skills/cratis-screenplay-model-review/SKILL.md

@@ -31,7 +31,7 @@ adapted to `.play` declarations (`references/provenance.md`).
 |---|---|---|
 | Screenplay | `v4.66.0` (`c89198b`) | MCP catalog (29 tools: `describe-application`, `search-declarations`, `dependencies`, `find-assertion-gaps`, `read-workspace`, `declaration-details`) in `Source/DotNET/Screenplay.Mcp/McpToolCatalog.cs`; diagnostics PLAY0029, PLAY0191, PLAY0268, PLAY0271, PLAY0350, PLAY0381, PLAY0469 in `Source/DotNET/Screenplay/Diagnostics/DiagnosticCodes.cs`; decision 0008 (one data subject per event) |
 | Screenplay | `v4.127.0` | `find-specification-obligations` (SPEC001–SPEC008 authored presence), `find-modeling-smells` (SMELL001–SMELL005 advisory questions); neither proves executed behavior or complete lineage |
-| Screenplay | `v4.131.0` | `semantic-diff` source objects and revision-pinned pages: `Source/DotNET/Screenplay.Mcp/{McpRevisionDiff,McpWorkspaces.Comparison,McpToolCatalog}.cs`, `Documentation/screenplay/mcp/reference.md`; CLI 3.46.1's 4.130.0 bundle predates these arguments |
+| Screenplay | `v4.131.0` | `semantic-diff` source objects and revision-pinned pages: `Source/DotNET/Screenplay.Mcp/{McpRevisionDiff,McpWorkspaces.Comparison,McpToolCatalog}.cs`, `Documentation/screenplay/mcp/reference.md`; previous CLI 3.46.1 predates these; CLI 3.50.0 bundles them |
 | cratis CLI | `v3.28.3` | bundles Screenplay 4.66.0 and Stage 4.24.2; see the toolchain skill |
 
 The full pin table lives in `cratis-screenplay-toolchain` `references/versions.md`; do not copy
@@ -243,18 +243,17 @@ verdict follows the rules in `references/report-template.md`.
 - Complete examples in this skill compile: `references/worked-example.md`.
 
 ## Route near misses
-- Writing missing specs: `cratis-screenplay-scenario-coverage`. Slice redesign:
-  `cratis-screenplay-slice-design`. Stream and invariant fixes:
-  `cratis-screenplay-streams-and-consistency`. Automations and translations:
-  `cratis-screenplay-automations-and-translations`.
-- Phases, modes and verdicts: `cratis-screenplay-modeling-lifecycle`. Tools, versions and
-  diagnostics: `cratis-screenplay-toolchain`. Construct mechanics: `cratis-screenplay-specifications`,
+- Specs: `cratis-screenplay-scenario-coverage`; slices: `cratis-screenplay-slice-design`;
+  streams/invariants: `cratis-screenplay-streams-and-consistency`;
+  reactions/translations: `cratis-screenplay-automations-and-translations`.
+- Modes/verdicts: `cratis-screenplay-modeling-lifecycle`; tools/diagnostics:
+  `cratis-screenplay-toolchain`; syntax: `cratis-screenplay-specifications`,
   `cratis-screenplay-command-surface`, `cratis-screenplay-projections`.
-- Chronicle compliance review: `cratis-chronicle-event-modeling`. Rendered code, gap-fill and
-  code review: `cratis-screenplay-render-and-gap-fill`, `cratis-code-review`,
-  `cratis-application-slice-conformance`.
+- Compliance: `cratis-chronicle-event-modeling`; rendered/gap-filled code:
+  `cratis-screenplay-render-and-gap-fill`, `cratis-code-review`, `cratis-application-slice-conformance`.
 
 ## References (load on demand)
+- Review public leaks, direction, complete keys and effective routes with [public/key/route checks](references/public-keys-and-routes.md).
 - Read `references/checklist.md` when performing the element sweep and phased audit; it contains eleven phases, 89 checks, tiers and evidence sources.
 - Read `references/anti-patterns.md` when investigating an anti-pattern signal; it gives the signal, why it matters, tier and Screenplay fix.
 - Read `references/report-template.md` when classifying findings, deciding the verdict, writing the report or conducting a re-review; it defines report, severity and verdict rules.
@@ -263,4 +262,4 @@ verdict follows the rules in `references/report-template.md`.
 - Read `references/business-questions.md` when conducting the business-question pass; it contains the explainer journey method, prompts and word translation.
 
 ## Lineage
-Read `references/provenance.md` when checking method lineage, attribution or adaptation permissions.
+Method lineage, attribution and adaptation permissions: `references/provenance.md`.

package/package/corpus/skills/cratis-screenplay-model-review/references/anti-patterns.md

@@ -62,7 +62,7 @@ the problem, the checks it violates, the fix, all pinned to one declaration.
 | Missing `for` | an event production (`produces <Event>` or `produces event`) without `for`. Not operation productions: they are authorable design intent, belong to commands, and take no event `for`, tags or routing | runtimes disagree on the destination | C (executable) / D | `for <identifier>` |
 | Unbuilt read-model field | field no projection maps and AutoMap cannot fill | always empty; not reported by the compiler | D | map it or remove it |
 | Undeclared removal/append event | `remove with` or capture `append` names an undeclared event | passes V1, fails binding (V2/V3, PLAY0273) | C (executable) / D | declare or fix the name; run V3 |
-| Gated command invoked by a reaction without a declared actor | reaction `invokes` a command under a caller policy and has no `runs as system role "<Role>"` that satisfies the gate | the invocation carries no caller: rejected at run time | D (major) | declare `runs as system role "<Role>"` with the least-privilege role the gate admits (ESM v10, Screenplay 4.125.0; current CLI 3.46.1 refuses v10 with CLI-RENDER-004, so gap-fill) or record another trusted-path decision - never just delete the gate. A matching `runs as system role` is the admitted trusted path, not a defect |
+| Gated command invoked by a reaction without a declared actor | reaction `invokes` a command under a caller policy and has no `runs as system role "<Role>"` that satisfies the gate | the invocation carries no caller: rejected at run time | D (major) | declare `runs as system role "<Role>"` with the least-privilege role the gate admits (ESM v10, Screenplay 4.125.0; previous CLI 3.46.1 refused v10 with CLI-RENDER-004, so gap-fill) or record another trusted-path decision - never just delete the gate. A matching `runs as system role` is the admitted trusted path, not a defect |
 | `reads` + `produces` reaction | reaction both reads a view and produces | fails binding | C (executable) | invoke a command, or produce without reads |
 | `reads` treated as protection | rule "checked" because the command or reaction `reads` a view | `reads` enforces nothing | D (major) | keep or introduce `reads <View>` + `require ... message` as stated intent, mark it NOT enforced in the slice `description`, name the target (`[ProtectedDecision]` + `DecisionRead<T>`, Chronicle DCB, or a constraint where it fits); checklist E3 |
 | Caller-supplied state rule | `require currentStatus == "open"` where the caller sends `currentStatus` | the caller decides its own permission | D (major) | read the stored state with `reads`; keep or introduce `reads <View>` + `require ... message` as stated intent, mark it NOT enforced in the slice `description`, name the target (`[ProtectedDecision]` + `DecisionRead<T>`, Chronicle DCB, or a constraint where it fits); checklist E3 |