@cratis/pi 7.38.2 → 7.39.0

package/package/corpus/skills/cratis-screenplay-model-authoring/references/mcp-tools.md

@@ -6,6 +6,7 @@
 ## Contents
 
 - Tool groups
+- Run reference specifications
 - Whole-source authoring
 - Diagnostic repairs and refactorings
 - Syntax-only constructs through the MCP
@@ -53,6 +54,7 @@ the [MCP loop](mcp-loop.md).
 | Visual (MCP-Apps hosts only) | `visualize-model` | Draw the board for the model or a `proposalId`; its `sketch` argument previews a what-if of whole documents. Reads only |
 | Planning | `propose-source`, `propose-ast`, `propose-rename`, `propose-move`, `propose-repair`, `propose-property`, `propose-number-enum-members`, `propose-extract-inline-event`, `propose`, `recommend-layout`, `expand-layout` | Produce validated, reviewable candidates without writing them |
 | Review | `read-proposal`, `discard-proposal` | Inspect exact changes, dropped comments and proposed attachments, or abandon a connection-local proposal |
+| Reference execution | `run-specifications` | Run the workspace or, from 4.145.0, a retained proposal candidate read-only; not attached code or target tests |
 | Effects | `apply`, `recover-workspace` | Apply an accepted plan or explicitly recover an interrupted write |
 
 `propose-move` moves a slice to another feature, or a feature to another module or feature, keeping identities: copy the `target` and `newParent` `{kind, parts}` addresses from the identity inventory and pass `expectedRevision` and `expectedCatalogRevision`. It repairs qualified references and `depends on`, and refuses identity loss, capture, collisions, descendant destinations, inherited authorization or screen-interaction changes and glob imports; review `moveReport` (`identityMigrations`, `referenceRepairs`, `fragmentsMoved`). It does not rename events, change pins or move files, and declaration moves between slices are deferred. Use it for legacy re-slicing instead of retyping declarations.
@@ -71,6 +73,44 @@ Exact arguments, AutoMap and fixture rules: [property evidence and planning](pro
 source-only authoring proposal may be accepted while `executableReady` is false.
 That is not permission to claim the application runs.
 
+## Run reference specifications
+
+`run-specifications` runs the deterministic in-memory reference evaluator, not
+Arc/Chronicle, external services or opaque code. It writes no files. Parameters:
+`specification` (exact dotted address or semantic id), `scope` (module/feature/slice
+prefix), `offset` (default 0), `limit` (1–200, default 50), and
+`expectedSourceRevision` (required for `offset > 0`). Both selectors mean
+intersection; no match refuses `UnknownSpecificationSelection`, never an empty pass.
+A table address selects all its cases. Drift refuses `StaleSourceRevision`.
+
+**Screenplay 4.145.0 and later** also accepts `proposalId`: propose → review
+`read-proposal` (including `view: "semantic-diff"`) → run the retained candidate →
+`apply`. Static expectation comparison is not execution. The candidate retains
+identities and planned renames; running does not apply, refresh from disk or discard
+it. A changed base does not prevent candidate execution but still blocks stale
+apply. Applied/discarded proposals and workspace reopen give `UnknownProposal`.
+Continue with the same `proposalId` and returned `sourceRevision` as
+`expectedSourceRevision`. Without `proposalId`, the tool runs the open workspace
+or reads the root with its persisted identities.
+
+The response includes `sourceRevision`, `outcome`, discovered/selected/executed/
+passed/failed/unsupported counts, `executableDiagnostics`, `planIssues`, and `page`
+(plus `proposalId` for candidate runs). Counts cover the entire selection, not one
+page; unsupported cases are not executed. Outcomes are `passed`, `failed`,
+`unsupported`, or overall `unbound`; only `passed` has `isError: false`. An unbound
+model has `page: null`; an impossible `then` (PLAY0285) prevents every spec running.
+Opaque capabilities report unsupported with a capability and reason, not a pass.
+Zero discovered specifications is not coverage evidence.
+
+Outside MCP, use `screenplay test <root> [--filter <exact-address>] [--format text|json]`:
+exit 0 passed, 1 failed, 2 invalid arguments/input/selection or IO, 3 unsupported
+or unbound. `--no-color` is rejected (exit 2); there is no proposal or paging option.
+A folder is one application; a file selects only itself and its imports.
+
+Sources: Screenplay v4.145.0 `Source/DotNET/Screenplay.Mcp/McpWorkspaces.Specifications.cs:12-79`,
+`McpSpecificationExecution.cs:20-49,106-111`, `Source/DotNET/Tool/ModelTest.cs:14-108`,
+`Documentation/screenplay/mcp/authoring-tools.md:500-535` and `tool.md:120-142`.
+
 ## Whole-source authoring
 
 `propose-source` takes `expectedRevision`, `expectedCatalogRevision`, explicit

package/package/corpus/skills/cratis-screenplay-model-authoring/references/property-links.md

@@ -191,7 +191,9 @@ For a required addition with existing fixtures/assertions, supply `fixtureValue`
 as **literal source text**, for example `"\"normal\""` for a String value. The
 planner adds it to existing specification steps, examples and query results;
 `optional: true` adds no fixture values. A literal is not proof of behavior:
-inspect the assertions and run `run-specifications` on the retained proposal.
+inspect the assertions and, on Screenplay **4.145.0 and later**, run
+`run-specifications` with `proposalId` on the retained candidate before `apply`.
+See [reference execution](mcp-tools.md#run-reference-specifications).
 
 | Refusal | Response |
 | --- | --- |

package/package/corpus/skills/cratis-screenplay-model-review/references/checklist.md

@@ -180,7 +180,7 @@ Nebulit (`provenance.md`).
 | Id | Check | Evidence | Tier |
 |---|---|---|---|
 | H1 | Query shape follows the business view (list where people scan; lookup where they open one) | queries, screens | D |
-| H2 | Executable scope: a keyed `=> RM optional` query with `by` named like a read-model property, or an unfiltered / one-`by` list (`=> RM[]`, observable too; `filter`, `scoped to`, `performer` do not bind), and the projection routes by the same identity (a `from` key or an event property, or `$eventSourceId`; `$eventSourceId` is not mandated). Renderable scope only: Stage-specific identity limits (Stage 4.73.1 renders a keyed optional snapshot lookup and observable collection queries; any other query is `STAGE-ESM-010`) | queries, projections | C (executable); C (render admission, renderable only) |
+| H2 | Executable scope: a keyed `=> RM optional` query with `by` named like a read-model property, or a collection (`=> RM[]`, observable too) with caller-supplied `by` and/or equality filters (ESM v14 since 4.143.0). `from`, single-result filters, opaque `scoped to`/`performer` and composite `by` remain PLAY0268. The projection routes by the same identity (a `from` key or an event property, or `$eventSourceId`; `$eventSourceId` is not mandated). Filtered models: Stage 4.73.1 (through v10) and latest checked 4.80.0 (through v13) do not admit v14. Renderable scope only: Stage-specific identity limits (Stage 4.73.1 renders a keyed optional snapshot lookup and observable collection queries; any other query is `STAGE-ESM-010`) | queries, projections | C (executable); C (render admission, renderable only) |
 | H3 | One builder per read model; projection `key` only on `from` | projections | C |
 | H4 | Screens show one actor's point of view; a form submits one command | screens, forms | D |
 

package/package/corpus/skills/cratis-screenplay-model-review/references/report-template.md

@@ -35,7 +35,7 @@ Independence: independent (fresh context, different model family from every auth
 V1 authorable:                <pass (tool, version, N files) | fail: PLAYnnnn at file:line>
 V2 executable diagnostics:    <clean | n diagnostics: codes | not run: reason>
 V3 binding-ready:             <ready | blocked: codes | not run: reason>
-V4 reference specs run:       <route, expected vs discovered, passed/failed/unsupported/cancelled | not run: no route>
+V4 reference specs run:       <route, expected vs discovered, passed/failed/unsupported; overall unbound | not run: no route>
 V5 rendered, target-verified: admission <...>; publication <...>; build <...>; tests <...>   (each "not run: reason" when absent)
 Gaps: <capability gaps and tool-version gaps, e.g. a false PLAY0285 on cascades from a cratis before 3.28.2 bundle>
 

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/references/verdicts-and-modes.md

@@ -21,13 +21,14 @@ defines what each result means and how to report it. Do not copy version facts h
 | V1 authorable | folder-mode validate with warnings as errors. The standalone compiler includes imports in folder and file mode; `cratis` CLI 3.28.2 file validation ignored imports (cli#244, probed); since 3.28.4 (PR #258) it compiles the file with its imports, but folder mode stays the recommended cross-tool check | semantics, binding, specs |
 | V2 executable diagnostics | the executable model reports no diagnostics for the scope | that any spec runs or passes |
 | V3 binding-ready | the model binds to the executable semantic model | that any spec runs or passes |
-| V4 reference specs run | the reference execution route only: engine, and per `.play` specification passed / failed / unsupported / cancelled | rendering, generated code, build or target tests |
+| V4 reference specs run | the reference execution route only: engine, and per `.play` specification passed / failed / unsupported (overall model may be unbound) | rendering, generated code, build or target tests |
 | V5 delivery and target-verified | admission, publication, Debug build, Debug tests of generated specifications, each reported separately | customization conformance, faithful UI |
 
 Results are independent: V3 can be ready while V1 has warnings; V5 build can pass with V4 not
 run. Never infer one from another. Spec outcomes for V4 come only from a reference execution
 route. Written or bound specifications are never "specs pass", and rendered Debug tests are
-V5 evidence, not V4.
+V5 evidence, not V4. A read-only `run-specifications` proposal run (Screenplay
+4.145.0+) is V4 evidence for that retained candidate only, not the disk model.
 
 V4 rules:
 - Report per `.play` specification (expected = specifications in the accepted scope; discovered =

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/references/worked-example.md

@@ -34,12 +34,8 @@ module Berths
       command AllocateBerth
         berthId BerthId identifier
         boat    BoatName
-        produces BerthAllocated
-          for berthId
-          boat = boat
-
-      event BerthAllocated
-        boat BoatName
+        produces event BerthAllocated
+          boat BoatName = boat
 
       constraint OneBerthPerBoat
         unique boat on BerthAllocated

package/package/corpus/skills/cratis-screenplay-projections/SKILL.md

@@ -6,6 +6,8 @@ license: MIT
 
 # Projections — the Screenplay PDL
 
+Read [preferred syntax](../cratis-screenplay-toolchain/references/preferred-syntax.md) when writing or reviewing `.play`.
+
 A `projection` folds events into a read model. Its body is the **Projection
 Declaration Language**, an embedded sub-grammar with its own parser — not free
 text. This is half of every event model, and the half most easily got wrong.

package/package/corpus/skills/cratis-screenplay-read-surface/SKILL.md

@@ -6,6 +6,8 @@ license: MIT
 
 # The Screenplay read surface
 
+Read [preferred syntax](../cratis-screenplay-toolchain/references/preferred-syntax.md) when writing or reviewing `.play`.
+
 What the system can be asked, and what a user sees. The `readmodel` declares the
 shape, the `query` is the entry point, and the `screen` renders it.
 
@@ -32,7 +34,9 @@ source is the single flow model.
 | `Cratis.Screenplay` | `4.66.0` (`c89198b`) | Which query shapes bind and render (`Semantics/`, `Documentation/screenplay/queries.md`) |
 
 The update follows `types.md`, `queries.md` and `vscode.md` at that main commit
-(after v4.52.0). Compilation does not establish query execution.
+(after v4.52.0). Compilation does not establish query execution. Current equality-filter evidence:
+Screenplay v4.145.0 (admitted in 4.143.0, decision 0069); read
+[the verified sources and compiled example](references/equality-filters.md).
 
 Checked against the Screenplay repository at tag `v4.31.0` (commit `355dffb`):
 `Documentation/screenplay/{queries,readmodels,screens,policies,specifications,interactions}.md`
@@ -82,12 +86,12 @@ query ListInvoices => InvoiceListReadModel[]
   authorize IsAuthenticated
 ```
 
-**Name the compiler and renderer.** At Screenplay 4.135.0, optional keyed queries
-and collection queries bind, including `observable`, with caller-supplied `by`
-or no `by` on a collection. Filters, scope, performer and context-derived `by`
-remain PLAY0268. The old Stage 4.24.0 list refusal is not a current compiler
-limitation; check the target renderer's admission separately. Keep a list the
-domain needs rather than inventing a keyed query solely to infer identity.
+**Name the compiler and renderer.** Optional keyed queries and collection queries
+bind, including `observable`. Since Screenplay 4.143.0, caller-supplied equality
+filters on collections bind as ESM v14; `from`, single-result filters, `scoped to`,
+`performer` and composite `by` remain PLAY0268, each with its reason. Read
+[equality filters](references/equality-filters.md) for the admitted shape, a complete
+compiled specification model and the Stage/CLI ceilings. Keep a list the domain needs.
 
 Return-type forms after `=>`: `ReadModel`, `ReadModel optional`, `ReadModel[]`,
 each optionally prefixed `observable`. `ReadModel[] optional` permits an absent
@@ -104,7 +108,7 @@ scalar type named `observable`. It is the canonical exception and has no
 | Clause | Meaning |
 | --- | --- |
 | `by` | the **identifying** parameter — the query returns the instance it identifies |
-| `filter` | an optional parameter narrowing the result set; usually typed `optional` |
+| `filter` | a caller-supplied equality parameter narrowing the result set; required unless typed `optional` |
 | `from <source>` | fills the parameter **from the context** instead of from the caller |
 
 ⚠️ **Anything the caller must not be able to choose — the tenant, the caller's own
@@ -151,7 +155,7 @@ most reads are. The marker qualifies only *how* the result arrives, so it compos
 with `[]`, `optional`, `by`, `filter`, `authorize` and a `performer`, and a screen binds
 to a live query exactly as it binds to a one-shot one. The delivery itself is the
 target runtime's: the executable model binds `observable` queries (delivery `live`) that
-have no `filter`, `scoped to` or `performer`.
+have no opaque scope/performer and, when filtered, only admitted caller-supplied equality filters (ESM v14).
 
 Paging, sorting and change-set delivery for queries are accepted as Screenplay
 decision 0010 but **not in the language yet**. Do not invent syntax for them.
@@ -174,15 +178,19 @@ on the header line is a declaration error, not a shorthand.
 
 ### What runs
 
-In the Screenplay 4.139.0 executable model (admitted since 4.105.0) these bind: a keyed
-`=> <ReadModel> optional` with one caller-supplied `by` argument, an unfiltered list
-`=> <ReadModel>[]`, a list narrowed by one caller-supplied `by` key, and the `observable`
-form of each. `filter`, `scoped to`, `performer`, `by ... from` and composite `by` report
-`PLAY0268`, as does a single non-optional `=> <ReadModel>`. Its `authorize` gate runs before
-the lookup, ANDed with module and feature gates; a denied caller gets
-`Unauthorized`. Pin that with a `given caller` fixture and `then denied` (see
-`cratis-screenplay-specifications`). Model `filter`, `scoped to` and `performer` shapes when the
-application needs them; just do not claim the reference runner exercised them.
+These bind on standalone 4.145.0: keyed `=> RM optional`, unfiltered collections,
+collections narrowed by caller-supplied `by`, and their `observable` forms.
+Caller-supplied equality filters on collections select ESM v14: same-named scalar
+primitive/concept/enum properties, same nominal type ignoring optionality, no
+`from`, distinct names not repeating `by`. `by` and supplied filters AND together;
+optional filters may be omitted, but supplied null is refused. PLAY0268 still
+rejects context sources, single-result filters, opaque scope/performer and
+composite `by` (#599); a single non-optional result remains unadmitted too.
+Authorization runs before lookup, ANDed with module/feature gates; policies see
+only `by`, never filters. Pin denial with `given caller` and `then denied`.
+Specs pass `by` and filters by name (PLAY0468 for unknown, repeated or missing
+required arguments); collection results match by read model/key regardless of
+row order. Details and renderer limits: [equality filters](references/equality-filters.md).
 
 ## `screen` — three levels
 

package/package/corpus/skills/cratis-screenplay-read-surface/references/equality-filters.md

@@ -0,0 +1,211 @@
+<!-- Copyright (c) Cratis. All rights reserved. -->
+<!-- Licensed under the MIT license. See LICENSE file in the project root for full license information. -->
+
+# Caller-supplied equality query filters (ESM v14)
+
+## Contents
+
+- Refusals kept intact
+- Specifications that run
+- Argument diagnostics
+- Rendering is a different verdict
+- Verified product sources
+
+Screenplay **4.143.0 and later**, including the standalone **4.145.0** pin,
+binds `filter <name> <Type> [optional]` on a collection query when:
+
+- there is no `from` source;
+- the read model has a same-named non-collection primitive, concept or enum property;
+- the filter has the same nominal type as that property, ignoring optionality;
+- filter names are distinct and none repeats the `by` name.
+
+Each supplied value matches that property by equality. `by` and all supplied
+filters combine with AND; a row missing the property does not match. A required
+filter must be supplied. An optional filter may be omitted, in which case it
+adds no restriction. **Supplied `null` is refused**, even for an optional filter;
+it is not omission or a request to match null properties.
+
+Filters select ESM v14. Models without filters retain their bytes, version and
+revision. `observable` collections may use filters too, but the reference runner
+answers a snapshot; change sets, paging, sorting and non-equality predicates
+are not admitted by this increment. Query policies still see only `by`, not filters.
+A caller-supplied filter is not a trusted tenant or authorization boundary.
+
+## Refusals kept intact
+
+Each binding refusal reports PLAY0268 with its query/filter and reason:
+
+| Shape | Why it remains unadmitted |
+| --- | --- |
+| `filter ... from ...` or context-derived `by` | Typed query context sources are not admitted; a caller argument must not stand in for trusted context |
+| Filter on a single-result query | Equality filters are admitted only for collections |
+| `scoped to` | The named scope has no portable executable scope contract |
+| `performer` | Query implementation code is opaque, not a portable declarative lookup |
+| Composite `by` block | Multipart lookup admission remains deferred (Screenplay#599) |
+| Filter on a collection/composite property, missing property or mismatched nominal type | The v14 filter contract requires a same-named scalar primitive, concept or enum property with the same type |
+
+Keep those intents when the domain needs them; never drop a context source or
+scope to make a query bind.
+
+## Specifications that run
+
+Both `then query … arguments` and `when query` name `by` and filter arguments.
+Unknown, repeated or missing required arguments report **PLAY0468** in either
+form. The query, its key and supplied filter values identify a call, so one
+specification may assert two calls with different filters.
+
+Collection results compare **without regard to row order**, matched by read
+model and instance key. Row count is exact; asserted properties use subset
+matching unless `exactly` is requested. This does not relax ordering of event
+expectations or collection-valued properties inside one row.
+
+This complete model checks omission, supplied filters, AND with `by`, both query
+specification forms and reversed result rows:
+
+```screenplay
+concept InvoiceId : String
+concept CustomerId : String
+concept InvoiceStatus : Enum
+  issued
+  paid
+module Invoicing
+  feature Overview
+    slice StateView Invoices
+      readmodel InvoiceRow
+        invoiceId InvoiceId key
+        customerId CustomerId
+        status InvoiceStatus
+      query ListInvoices => InvoiceRow[]
+        filter status InvoiceStatus
+        filter customerId CustomerId optional
+      query InvoicesById => observable InvoiceRow[]
+        by invoiceId InvoiceId
+        filter status InvoiceStatus optional
+      example FirstIssued : InvoiceRow
+        invoiceId = "inv-1"
+        customerId = "customer-a"
+        status = issued
+      example SecondIssued : InvoiceRow
+        invoiceId = "inv-2"
+        customerId = "customer-b"
+        status = issued
+      example PaidInvoice : InvoiceRow
+        invoiceId = "inv-3"
+        customerId = "customer-a"
+        status = paid
+      specification OmittingAnOptionalFilter
+        given readmodel FirstIssued
+        given readmodel SecondIssued
+        given readmodel PaidInvoice
+        then query ListInvoices
+          arguments
+            status = issued
+          result
+            invoiceId = "inv-2"
+          result
+            invoiceId = "inv-1"
+      specification SupplyingBothFilters
+        given readmodel FirstIssued
+        given readmodel SecondIssued
+        then query ListInvoices
+          arguments
+            status = issued
+            customerId = "customer-a"
+          result
+            invoiceId = "inv-1"
+      specification CombiningByAndFilter
+        given readmodel FirstIssued
+        given readmodel SecondIssued
+        given readmodel PaidInvoice
+        when query InvoicesById
+          invoiceId = "inv-3"
+          status = issued
+        then no result
+      specification OmittingTheFilterBesideBy
+        given readmodel FirstIssued
+        given readmodel SecondIssued
+        given readmodel PaidInvoice
+        when query InvoicesById
+          invoiceId = "inv-3"
+        then result
+          invoiceId = "inv-3"
+      specification DistinguishingCallsByFilterValues
+        given readmodel FirstIssued
+        given readmodel PaidInvoice
+        then query ListInvoices
+          arguments
+            status = issued
+          result
+            invoiceId = "inv-1"
+        then query ListInvoices
+          arguments
+            status = paid
+          result
+            invoiceId = "inv-3"
+```
+
+## Argument diagnostics
+
+This deliberately invalid fence pins PLAY0468 for missing, unknown and repeated
+arguments in both specification forms. These are source errors, not passing
+reference scenarios or empty-result assertions.
+
+```screenplay expect PLAY0468
+concept ItemId : String
+module FilteringExamples
+  feature Arguments
+    slice StateView Items
+      readmodel Item
+        itemId ItemId key
+        status String
+      query ListItems => Item[]
+        filter status String
+      specification MissingThenArgument
+        then query ListItems
+      specification MissingWhenArgument
+        when query ListItems
+        then no result
+      specification UnknownThenArgument
+        then query ListItems
+          arguments
+            status = "open"
+            search = "anything"
+      specification UnknownWhenArgument
+        when query ListItems
+          status = "open"
+          search = "anything"
+        then no result
+      specification RepeatedThenArgument
+        then query ListItems
+          arguments
+            status = "open"
+            status = "open"
+      specification RepeatedWhenArgument
+        when query ListItems
+          status = "open"
+          status = "open"
+        then no result
+```
+
+## Rendering is a different verdict
+
+The latest Stage release checked here, **v4.80.0**, admits version pairs through
+**ESM v13**, not v14, and its legacy query renderer also refuses authored filter
+contracts. **CLI 3.53.1** bundles **Screenplay 4.137.0 / Stage 4.73.1**:
+its compiler predates v14 and its renderer admits through v10. Standalone V3/V4
+success therefore proves neither bundled binding nor rendering. A consumer must
+explicitly admit v14 and preserve filter arguments and equality selection;
+never erase filters to obtain a render.
+
+## Verified product sources
+
+- Screenplay **v4.145.0**: accepted/implemented decision
+  `decisions/0069-admit-equality-query-filters-as-esm-v14.md`;
+  `Documentation/screenplay/queries.md` (Executable equality filters),
+  `specifications.md:145,307-319,409-428`; admission shipped in v4.143.0.
+- Stage **v4.80.0**: `Source/Rendering.Cratis/Semantics/SemanticVersionFeatures.cs:95-100`
+  uses `EsmSchemaV13Support`; `Renderers/QueryAdmission.cs:13-22` refuses filters;
+  `Directory.Packages.props` pins Screenplay 4.141.0.
+- Stage **v4.73.1**: `Source/Rendering.Cratis/Semantics/SemanticVersionFeatures.cs:89`
+  uses `EsmSchemaV10Support`. CLI **v3.53.1**:
+  `Directory.Packages.props:8,10` pins Screenplay 4.137.0 and Stage 4.73.1.

package/package/corpus/skills/cratis-screenplay-read-surface/references/screen-patterns.md

@@ -77,11 +77,8 @@ module Berths
       command BookBerth
         bookingId BookingId identifier
         berth BerthName
-        produces BerthBooked
-          for bookingId
-          berth = berth
-      event BerthBooked
-        berth BerthName
+        produces event BerthBooked
+          berth BerthName = berth
       screen BookBerthScreen
         title "Book a berth"
         action BookBerth

package/package/corpus/skills/cratis-screenplay-read-surface/verification.json

@@ -7,6 +7,10 @@
     { "kind": "skill-contains", "value": "command reads only", "file": "references/named-keys.md" },
     { "kind": "skill-contains", "value": "remain authoring-only", "file": "references/named-keys.md" },
     { "kind": "play-compiles" },
+    { "kind": "skill-contains", "value": "Caller-supplied equality query filters (ESM v14)", "file": "references/equality-filters.md" },
+    { "kind": "skill-contains", "value": "Supplied `null` is refused", "file": "references/equality-filters.md" },
+    { "kind": "skill-contains", "value": "PLAY0468", "file": "references/equality-filters.md" },
+    { "kind": "skill-contains", "value": "without regard to row order", "file": "references/equality-filters.md" },
     { "kind": "skill-contains", "value": "main `fd18129`" },
     { "kind": "skill-contains", "value": "filter status     InvoiceStatus optional" },
     { "kind": "skill-contains", "value": "query Q => observable?" },

package/package/corpus/skills/cratis-screenplay-render-and-gap-fill/references/renderability-gate.md

@@ -30,7 +30,7 @@ ESM). Only the probe answers renderability. `PLAY0270` entries are information,
 | Class | Meaning | Typical examples (each verified in `admission.md`) | Action |
 | --- | --- | --- | --- |
 | **Model fix (in mode)** | the model is in, or the user chose, renderable mode and breaks its own subset in a way that has a renderable equivalent with the same meaning | a `produces` whose `for` is not the command identifier; one `StateChange` slice with two commands (`STAGE-ESM-004`); two projections for one read model (`-007`); a policy Stage cannot express portably (`-015`; role-only and opaque pure policies render at 4.73.1) | edit request to the modeler session with address, change and rationale |
-| **Capability gap** | the intended meaning needs a construct Stage does not render yet | a snapshot list query (`-010`; observable lists and keyed or unkeyed lists bind and observable lists render), and `filter`, `scoped to`, `performer` queries (`PLAY0268`); Automation and Translate slices (`-001`/`-024`, Stage#79); reactions, clocks, captures and triggers (`-024`); a reaction that both produces and invokes (`-037`: keep it whole and hand-write one reactor on Arc 22.72.0 or later (the Arc the scaffold pins needs a proven override), never split it; Stage#207); generated values and responses (`-028`/`-029`, Stage#175); `then no readmodel` (`-027`); evolved events (`STAGE-ESM-026`); conditional `produces when` (`-006`); `reads` (`PLAY0271`); code validation (`-005`); compliance attributes (`PLAY0268` "require portable data-subject semantics"); a command `handler` (`PLAY0268`) | keep the model; ledger entry; options a to c in `SKILL.md`; link the Stage issue |
+| **Capability gap** | the intended meaning needs a construct Stage does not render yet | a snapshot list query (`-010`; observable lists and keyed or unkeyed lists bind and observable lists render), caller-supplied collection equality filters bind as v14 since 4.143.0 but exceed Stage 4.73.1's v10 ceiling and latest checked 4.80.0's v13 ceiling; context/single-result filters, opaque `scoped to`/`performer` and composite `by` remain PLAY0268; Automation and Translate slices (`-001`/`-024`, Stage#79); reactions, clocks, captures and triggers (`-024`); a reaction that both produces and invokes (`-037`: keep it whole and hand-write one reactor on Arc 22.72.0 or later (the Arc the scaffold pins needs a proven override), never split it; Stage#207); generated values and responses (`-028`/`-029`, Stage#175); `then no readmodel` (`-027`); evolved events (`STAGE-ESM-026`); conditional `produces when` (`-006`); `reads` (`PLAY0271`); code validation (`-005`); compliance attributes (`PLAY0268` "require portable data-subject semantics"); a command `handler` (`PLAY0268`) | keep the model; ledger entry; options a to c in `SKILL.md`; link the Stage issue |
 | **Tool skew** | the bundled compiler disagrees with documented semantics | the false `PLAY0285` on reaction cascades from a cratis before 3.28.2 bundle (cli#242); codes the standalone compiler does not raise | record in the session state and the ledger; never "fix" a correct model |
 | **Environment** | not the model | restore failures, missing SDK, a destination that is not writable | fix the environment or report blocked |
 

package/package/corpus/skills/cratis-screenplay-render-and-gap-fill/references/worked-example.md

@@ -37,11 +37,8 @@ module Berths
         berthId  BerthId identifier
         boatName BoatName
         authorize IsHarbourMaster
-        produces BerthReserved
-          for berthId
-          boatName = boatName
-      event BerthReserved
-        boatName BoatName
+        produces event BerthReserved
+          boatName BoatName = boatName
       specification ReservingABerth
         given caller
           authenticated

package/package/corpus/skills/cratis-screenplay-scenario-coverage/SKILL.md

@@ -141,7 +141,7 @@ target requirements.
 - Every slice has at least one specification at the application boundary.
 - One behaviour per spec; names read as sentences: `Reserving...`, `Rejecting...`, `Refusing...`
   (denial), `<View>LifecycleN<State>` for families.
-- `for` on every given, appended and expected event, and on the `when` command where the
+- `for` on every given, appended and expected event (plain `produces <Name>` too; inline `produces event` omits it), and on the `when` command where the
   destination matters. A competing-claim given needs a *different* `for`.
 - Format rules belong on a `concept`: give each concept rule representative acceptance,
   rejection and boundary specs once (through one command that carries it), not on every use;
@@ -214,6 +214,9 @@ scope is reported as explicitly incomplete); V1 passes with the tool named in
 - V1 passes (standalone `screenplay` required when cascades are specified); report tool and
   version.
 - Run V4 through standalone `screenplay test` or MCP `run-specifications`;
+  on **Screenplay 4.145.0 and later**, propose → review → run with `proposalId` →
+  apply. PLAY0285 (impossible `then`) unbinds
+  the whole model; no spec runs.
   if not executed, report the actual host/input reason, not a blanket no-route
   claim. Stage's runner is target-engine evidence, never V4; V1/V3 do not prove pass. V5 is "not run" unless rendering was attempted; report admission, publication, build and
   tests separately.

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/berth-reservations.md

@@ -41,17 +41,11 @@ module Berths
           boatLength > 0    message "Boat length must be positive"
           boatLength <= 24  message "Guest berths take boats up to 24 metres"
           night >= today    message "The night must not be in the past"
-        produces BerthReserved
-          for reservationId
-          berth      = berth
-          night      = night
-          boatName   = boatName
-          boatLength = boatLength
-      event BerthReserved
-        berth      BerthCode
-        night      Date
-        boatName   String
-        boatLength Decimal
+        produces event BerthReserved
+          berth BerthCode = berth
+          night Date = night
+          boatName String = boatName
+          boatLength Decimal = boatLength
       constraint OneBoatPerBerthNight
         unique berth, night on BerthReserved
         released by ReservationCancelled
@@ -226,11 +220,8 @@ module Berths
           reason not empty  message "Say why the reservation is cancelled"
           require booking.status == "reserved"
             message "Only a live reservation can be cancelled"
-        produces ReservationCancelled
-          for reservationId
-          reason = reason
-      event ReservationCancelled
-        reason String
+        produces event ReservationCancelled
+          reason String = reason
       constraint CancelOrDepart
         unique event ReservationCancelled
         unique event BoatDeparted
@@ -351,12 +342,10 @@ module Berths
         validate
           require booking.status == "reserved"
             message "Only a live reservation can record a departure"
-        produces BoatDeparted
-          for reservationId
+        produces event BoatDeparted
         produces when damageObserved == true
           BerthDamageReported
             for reservationId
-      event BoatDeparted
       event BerthDamageReported
 
       specification RecordingACleanDeparture

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/invoicing-dues-design.md

@@ -46,13 +46,9 @@ module Invoicing
         invoiceId InvoiceId identifier
         member    MemberId
         amount    Decimal
-        produces InvoiceIssued
-          for invoiceId
-          member = member
-          amount = amount
-      event InvoiceIssued
-        member MemberId
-        amount Decimal
+        produces event InvoiceIssued
+          member MemberId = member
+          amount Decimal = amount
       constraint IssueOnce
         unique event InvoiceIssued
 
@@ -115,8 +111,7 @@ module Invoicing
         validate
           require invoice.amount > 0
             message "Only an open invoice can be settled"   // NOT enforced: the view lags (PLAY0268 at binding)
-        produces InvoiceSettled
-          for invoiceId
+        produces event InvoiceSettled
       command VoidInvoice
         invoiceId InvoiceId identifier
         reason    String
@@ -124,12 +119,8 @@ module Invoicing
         validate
           require invoice.amount > 0
             message "Only an open, unpaid invoice can be voided"   // NOT enforced: the view lags (PLAY0268 at binding)
-        produces InvoiceVoided
-          for invoiceId
-          reason = reason
-      event InvoiceSettled
-      event InvoiceVoided
-        reason String
+        produces event InvoiceVoided
+          reason String = reason
       constraint SettleOrVoid
         unique event InvoiceSettled
         unique event InvoiceVoided
@@ -179,11 +170,8 @@ module Invoicing
         validate
           require payment.invoiceId == invoiceId
             message "Only a received, not yet reversed payment can be reversed"   // NOT enforced: the view lags (PLAY0268 at binding)
-        produces PaymentReversed
-          for invoiceId
-          amount = amount
-      event PaymentReversed
-        amount Decimal
+        produces event PaymentReversed
+          amount Decimal = amount
 
       specification ReversingAReceivedPayment
         given caller