@cratis/pi 7.38.2 → 7.39.0

package/package/corpus/skills/cratis-screenplay-toolchain/references/executable-example.md

@@ -22,17 +22,13 @@ module Gallery
         authorize IsCurator
         validate
           insuredValue > 0  message "An insured value must be positive"
-        produces ArtworkRegistered
-          for artworkId
-          title        = title
-          insuredValue = insuredValue
+        produces event ArtworkRegistered
+          title ArtworkTitle = title
+          insuredValue Decimal = insuredValue
         produces when insuredValue > 100000
           HighValueArtworkFlagged
             for artworkId
             insuredValue = insuredValue
-      event ArtworkRegistered
-        title        ArtworkTitle
-        insuredValue Decimal
       event HighValueArtworkFlagged
         insuredValue Decimal
       constraint UniqueArtworkTitle

package/package/corpus/skills/cratis-screenplay-toolchain/references/executable-subset.md

@@ -4,6 +4,7 @@
 
 - Caller and compliance boundary (4.142.0)
 - Admitted on both compilers
+- Equality query filters (ESM v14, since 4.143.0)
 - Admitted from Screenplay 4.61 (ESM v6): standalone tool and cratis 3.28.2 or later
 - Generated values and responses (ESM v7): standalone 4.68.0 or later; the cratis 3.53.1 bundle binds them too
 - Released public boundaries and observer routes
@@ -16,12 +17,13 @@ Current pins: `versions.md`. Detailed
 4.66.0/4.68.0 binder probes below retain their historical labels. Current source
 admits routes as ESM v8, public/direction constructs as v9, identity/overrides/filters
 as v10, qualifying non-route Double literals as v11 (exact lowering of Double-mode literals)
-and non-positional enum numbers as v12; concept compliance as v13. Operations, the `numbers exact` **source mode** (PLAY0268) and
+and non-positional enum numbers as v12; concept compliance as v13; caller-supplied
+collection equality filters as v14 since 4.143.0. Operations, the `numbers exact` **source mode** (PLAY0268) and
 reaction refusals/redelivery remain unadmitted. Use the actual
 binder before promoting an older probe to a current capability claim.
 
 What the binder admits, and what it refuses with which code. The answer depends on the
-compiler version: the standalone tool (4.142.0) binds through v13; the compiler bundled in cratis
+compiler version: the standalone tool (4.145.0) binds through v14; the compiler bundled in cratis
 3.53.1 (4.137.0) binds ESM through v10 for rendering and refuses non-positional enum numbers at
 binding; older bundles (4.66.0 in cratis 3.28.x, admitting v1 to v6; 4.60.1 before 3.28.2, v1 to v5)
 are history.
@@ -61,8 +63,8 @@ caller and purpose guidance retains v4.127.0 `context.md`, `identity.md`, `purpo
 ## Admitted on both compilers
 
 - `StateChange` and `StateView` slices.
-- A command with one `identifier`; `produces <Event>` with `for <identifier>` on every
-  production.
+- A command with one `identifier`; inline `produces event <Name>` (omit `for`) for a command-owned event, or
+  plain `produces <Event>` with explicit `for <identifier>` for a shared event.
 - `produces when` with `==`/`!=` on scalar text, enum, number or boolean, and ordering on
   numbers.
 - Mappings from command properties, string and number literals, `$context.occurred`,
@@ -84,8 +86,9 @@ caller and purpose guidance retains v4.127.0 `context.md`, `identity.md`, `purpo
   Queryless read models need an explicit `key`. Explicit single keys preserve
   equivalent inferred ESM bytes. Composite read-model keys, query `by` blocks and
   their fixtures remain PLAY0268 (#599), not the 4.129.0 authoring delivery's
-  executable admission. Collections and observable delivery bind; filters, scope,
-  performer and context-derived `by` remain separate blockers.
+  executable admission. Collections and observable delivery bind. Since 4.143.0,
+  caller-supplied equality filters on collections also bind as ESM v14; context
+  sources, single-result filters, scope, performer and composite `by` remain blocked.
 - One projection per read model: `from`, `every`, `all` (one block per level), `join`,
   `children`, `nested`, `remove with`, `remove via join` (binds; blocks the execution plan at the projection level, see below), `clear with`, counters, `add`,
   `subtract`, `set`, `clear`, variants, and the identifier mapped from the projection's key (`xId = $eventSourceId` only for an event-source key).
@@ -96,6 +99,19 @@ caller and purpose guidance retains v4.127.0 `context.md`, `identity.md`, `purpo
 - `seed`. Personas, screens and descriptions are PLAY0270/PLAY0269 information, not
   blocking.
 
+## Equality query filters (ESM v14, since 4.143.0)
+
+`filter <name> <Type> [optional]` binds on collections with no `from`, targeting a
+same-named scalar primitive/concept/enum property of the same nominal type
+(ignoring optionality). Distinct filter names must not repeat `by`. All supplied
+filters AND with `by`; optional omission does not narrow, supplied null is refused.
+`then query … arguments` and `when query` accept both `by` and filters; PLAY0468
+reports unknown/repeated/missing required arguments. Collection results match by
+read model/key regardless of row order. The standalone 4.145.0 pin admits this;
+CLI 3.53.1's 4.137.0 compiler does not. Stage 4.73.1 admits through v10 and the
+latest checked Stage 4.80.0 through v13, neither v14. Complete compiled specs:
+read-surface [equality filters](../../cratis-screenplay-read-surface/references/equality-filters.md).
+
 ## Admitted from Screenplay 4.61 (ESM v6): standalone tool and cratis 3.28.2 or later
 
 - `slice Automation` with `reaction`: `when <Event>` (with values) then `produces` (no
@@ -223,7 +239,7 @@ bodies still leave their owner non-executable.
 | Unquoted `import Other.Contract` | PLAY0268 | external contract import is not bound |
 | `pii` or `secret` on a concept | PLAY0268 | Blanket refusal on CLI 3.53.1's 4.137.0 bundle only. Standalone 4.142.0 admits v13 except enum/identity compliance and events mixing personal or explicitly subject-scoped secret values with explicit subject marks; see `compliance.md` in command-surface references |
 | `query` with a composite `by` block, or `by ... from` context-derived arguments | PLAY0268 | composite `by` blocks remain unadmitted (#599). An optional scalar snapshot lookup, an unfiltered list (`RM[]`) and a list narrowed by one caller-supplied `by` key bind, in their `observable` form too (since 4.105.0) |
-| `filter`, `scoped to`, `performer` queries | PLAY0268 | "uses delivery, filtering, scope, or implementation behavior outside the first ESM v1 vertical." `observable` is not the blocker: it goes in the return position (`=> observable RM[]`); as a body line it is PLAY0048 |
+| Context `from`, single-result filters, `scoped to`, `performer` queries | PLAY0268 | Typed query context, filtering of single results, opaque scope and query implementation remain unadmitted; each refusal names its reason. Caller-supplied collection equality filters bind as v14. `observable` goes in the return position (`=> observable RM[]`); as a body line it is PLAY0048 |
 | `contains` or `starts with` in conditions | PLAY0268 | equality and numeric ordering only |
 | Date or DateTime comparison, `today` | PLAY0268 | no runtime date value |
 | Rule on a nested path (`lines.qty all > 0`) | PLAY0268 | put the rule on the nested value's concept |
@@ -252,7 +268,7 @@ bodies still leave their owner non-executable.
 ## Not refused, but do not rely on it
 
 - Plain `produces` without `for` binds (PLAY0478, information) but means allocation in the
-  ESM and "the identifier" in rendered Arc code. Always write `for`.
+  ESM and "the identifier" in rendered Arc code. Always write `for` on a plain `produces <Name>`; inline `produces event` omits it.
 - A projection-level (root) `remove via join` binds, but the reference execution plan refuses it (`UnsupportedProjectionBlock`), so no specification in the application runs; Chronicle wires it as a child pull. See the blocked-plan rows above.
 - At Screenplay 4.125.0, V1 reports absent projection/children/nested targets
   with PLAY0514 and unknown removal/capture events with PLAY0166. An unmapped

package/package/corpus/skills/cratis-screenplay-toolchain/references/pdl-example.md

@@ -25,20 +25,12 @@ module Shop
         orderId    OrderId identifier
         customerId CustomerId
         total      Decimal
-        produces OrderPlaced
-          for orderId
-          customerId = customerId
-          total      = total
-        produces LineAdded
-          for orderId
-          lineNumber = 1
-          sku        = "A-1"
-      event OrderPlaced
-        customerId CustomerId
-        total      Decimal
-      event LineAdded
-        lineNumber Int
-        sku        String
+        produces event OrderPlaced
+          customerId CustomerId = customerId
+          total Decimal = total
+        produces event LineAdded
+          lineNumber Int = 1
+          sku String = "A-1"
       specification PlacingAnOrder
         when PlaceOrder
           orderId    = "7a1c2e30-4b5d-4e6f-8a9b-0c1d2e3f4a5b"
@@ -64,29 +56,19 @@ module Shop
       command RemoveLine
         orderId    OrderId identifier
         lineNumber Int
-        produces LineRemoved
-          for orderId
-          lineNumber = lineNumber
-      event LineRemoved
-        lineNumber Int
+        produces event LineRemoved
+          lineNumber Int = lineNumber
     slice StateChange ShipOrder
       command ShipOrder
         orderId OrderId identifier
         carrier String
-        produces Shipped
-          for orderId
-          carrier = carrier
-        produces ShippingCleared
-          for orderId
-      event Shipped
-        carrier String
-      event ShippingCleared
+        produces event Shipped
+          carrier String = carrier
+        produces event ShippingCleared
     slice StateChange CancelOrder
       command CancelOrder
         orderId OrderId identifier
-        produces OrderCancelled
-          for orderId
-      event OrderCancelled
+        produces event OrderCancelled
       specification CancellingAnOrder
         given OrderPlaced
           for "7a1c2e30-4b5d-4e6f-8a9b-0c1d2e3f4a5b"
@@ -101,14 +83,9 @@ module Shop
       command RenameCustomer
         customerId CustomerId identifier
         name       String
-        produces CustomerRenamed
-          for customerId
-          name = name
-        produces CustomerDeleted
-          for customerId
-      event CustomerRenamed
-        name String
-      event CustomerDeleted
+        produces event CustomerRenamed
+          name String = name
+        produces event CustomerDeleted
     slice StateView OrderOverview
       readmodel OrderView
         orderId      OrderId
@@ -156,28 +133,17 @@ module Work
       command OpenIssue
         issueId IssueId identifier
         title   String
-        produces IssueCreated
-          for issueId
-          title = title
-        produces IssueTitleCorrected
-          for issueId
-          title = title
-      event IssueCreated
-        title String
-      event IssueTitleCorrected
-        title String
+        produces event IssueCreated
+          title String = title
+        produces event IssueTitleCorrected
+          title String = title
     slice StateChange OpenPullRequest
       command OpenPullRequest
         issueId IssueId identifier
         status  String
-        produces PullRequestCreated
-          for issueId
-        produces BuildCompleted
-          for issueId
-          status = status
-      event PullRequestCreated
-      event BuildCompleted
-        status String
+        produces event PullRequestCreated
+        produces event BuildCompleted
+          status String = status
     slice StateView WorkItems
       readmodel BacklogItem
         issueId IssueId
@@ -207,19 +173,11 @@ module Bank
         accountId AccountId identifier
         amount    Decimal
         code      Code
-        produces Deposited
-          for accountId
-          amount = amount
-        produces Withdrawn
-          for accountId
-          amount = amount
-        produces Frozen
-          for accountId
-      event Deposited
-        amount Decimal
-      event Withdrawn
-        amount Decimal
-      event Frozen
+        produces event Deposited
+          amount Decimal = amount
+        produces event Withdrawn
+          amount Decimal = amount
+        produces event Frozen
       specification Depositing
         when Deposit
           accountId = "5d1f0c2e-8a47-4c1b-9b3e-6f2a7c9d1e10"

package/package/corpus/skills/cratis-screenplay-toolchain/references/preferred-syntax.md

@@ -0,0 +1,73 @@
+<!-- Copyright (c) Cratis. All rights reserved. -->
+<!-- Licensed under the MIT license. See LICENSE file in the project root for full license information. -->
+
+# Preferred Screenplay syntax
+
+Use these forms when writing or reviewing `.play`. Acceptance of an older
+spelling is not a recommendation to teach it. Information diagnostics do not
+fail `--warnaserror`; the corpus verification gate rejects the nine style codes
+below even when a fence declares `expect`, unless an exact, reasoned migration
+exception exists in the verifier's preferred-syntax allowlist. That allowlist also
+covers deliberate legacy explanations in prose; stale entries fail.
+
+## Forms
+
+| Construct | Preferred form | Accepted older form or redundancy | Diagnostic |
+| --- | --- | --- | --- |
+| Optional type | `T optional`, `T[] optional` | `T?`, `T[]?` | PLAY0479 (information) |
+| Compliance | Header `concept X : String pii` or `secret`; body settings `pii reason`, `pii special health`, `secret scope namespace` | `@pii`, `@sensitive`, `sensitive`; `personal` is an accepted alias without a diagnostic | PLAY0565 (information); repeated markers warn PLAY0653 |
+| Inline code | A construct header such as `validate`, followed by an indented language-tagged fence; descriptions use a tagged `text` fence, event documentation `markdown` | `validate csharp`, a language line above a bare fence, or a bare description fence | PLAY0397 (warning) |
+| Event identity | Omit `id` for a new event; preserve `id "OldName"` for a renamed stored contract | `id` equal to the current event name | PLAY0471 (information) |
+| Source/stream identity | Omit `id` unless preserving a previous stored name | A pin equal to the current name | PLAY0507 (information) |
+| Production route | Inherit the command's route | Repeating the same `stream` / `streamId` on a production | PLAY0664 (warning) |
+| Imports | Import only declarations not already declared by the application | Importing the application's own names | PLAY0290 (warning) |
+| Interaction guard | Block-form `when` alternatives | Opaque interaction `where` on click, double click or select | PLAY0564 (warning or information) |
+| Projection transition cardinality | Source binding emits `One` | Constructed/deserialized ESM v1–v3 `ZeroOrOne` / `Many` | PLAY0445 (warning; ESM-only, not a source spelling) |
+
+`query Q => observable?` is not a legacy optional type suffix and has no keyword
+replacement. Reaction/Translate `where` is current syntax, not an interaction
+legacy guard. Keep a real rename pin; do not remove it to resemble a new event.
+
+## Command productions
+
+**Cratis convention:** prefer inline `produces event <Name>` when one command
+owns the event. Declare payload types and mappings together; omit `for` to use
+the command identifier and never copy that identifier into the event payload.
+For an event shared by commands or reactions, keep a standalone `event` and use
+plain `produces <Name>` with explicit `for <identifier>` on commands. Reactions
+cannot declare inline events; omission there follows the triggering event's
+source, and clock/application triggers require a destination.
+
+Plain command production omission is accepted *legacy omission behavior*, not
+identifier inference: it can use allocation or a sibling's resolved destination.
+PLAY0478 is advice, not a forbidden style code or permission to retarget a stored
+contract automatically. PLAY0469 concerns payload design and contract impact;
+it is not a syntax-style ban either. Neither are PLAY0516, PLAY0553 or PLAY0520.
+Read command-surface [inline events and destinations](../../cratis-screenplay-command-surface/references/inline-events.md)
+for mixed destinations, extraction and generation evolution.
+
+**Stage caveat:** rendered Arc commands ignore production `for` (Stage#187).
+An authored destination is not proof of rendered routing; verify the target
+implementation separately.
+
+## Navigation `by` and form `columns`
+
+Both are current, not legacy (settled in Screenplay#688, v4.145.1). Screen
+navigation passes the target's key with `by <parameter>` (`on row-click navigate
+to InvoiceDetail by invoiceId`) and further values with `parameter <name> from
+<binding>`; navigation inside an interaction block passes values with `with <name>
+from <binding>`. A form's `columns auto|manual` chooses which command properties
+it shows and in which order; `layout`/`place` positions them. Use whichever the
+case needs; neither has a style diagnostic.
+
+## Verified product sources
+
+Screenplay **v4.145.0** (syntax unchanged from 4.144.0):
+`Documentation/screenplay/types.md:23-25`, `concepts.md:34-37,142-146`,
+`ast-compatibility.md:68`, `commands.md:80-90,136-176,503`,
+`events.md:114,118-120`, `event-sources.md:7,86,132`, `reactions.md:298-312`,
+`interactions.md:105-107`, `folders.md:418-421`, `diagnostics.md:825,979-987,1013,1084,1105-1120,1271`.
+Printer: `Source/DotNET/Screenplay/Printing/ScreenplaySyntaxText.cs:41`,
+`ScreenplayPrinter.Expressions.cs:18-32`, `ScreenplayPrinter.Commands.cs:481-530`.
+Navigation and forms: Screenplay v4.145.1 `glossary.md:65`, `forms.md:40`; https://github.com/Cratis/Screenplay/issues/688.
+The published contract is the selector's authority, not this hand-written table.

package/package/corpus/skills/cratis-screenplay-toolchain/references/renderable-subset.md

@@ -46,7 +46,7 @@ version; each construct it does not render refuses with its own code before any
 | Area | Renders at 4.73.1 | Refused (code) |
 | --- | --- | --- |
 | Slice kinds | `StateChange`, `StateView` | `Automation`, `Translate`, every reaction, capture, application trigger and clock specification (`STAGE-ESM-001`/`-024`); a reaction that both produces and invokes (`-037`, Stage#207; Arc 22.72.0+ can run it, and the Arc the scaffold pins needs a proven override; hand-write one reactor, never split the reaction) |
-| Queries | optional keyed snapshot lookups; observable collections, keyed or unkeyed (since 4.49.0) | a snapshot list: `STAGE-ESM-010`; `filter`, `scoped to`, `performer`, composite `by`: `PLAY0268` at binding |
+| Queries | optional keyed snapshot lookups; observable collections, keyed or unkeyed (since 4.49.0) | a snapshot list: `STAGE-ESM-010`; context/single-result filters, opaque `scoped to`/`performer` and composite `by`: PLAY0268. Caller-supplied collection equality filters bind since 4.143.0 as v14, above this bundle's v10 admission ceiling |
 | Authorization | role-only, authenticated, opaque pure policies, claim conditions with Uuid, Date, DateTime or text targets (numeric and Boolean claim matches render as always false; Stage 4.73.1 `IsSupportedClaimPath`), `not`/and/or; roles read through the identity's `RoleClaimType` | role-claim URIs, nested opaque policies, unresolved or non-portable policies, no single identifier, opaque-policy subjects that are not text, Uuid, Date or DateTime (`STAGE-ESM-015`; Stage 4.73.1 `IsTextualSubject`, a restriction separate from declarative claim targets) |
 | Event sources, streams, routes (ESM v8) | rendered, with routed specifications | reserved stored names, unformattable routed fixtures, unsupported routed replay (`STAGE-ESM-030`) |
 | Numbers, case tables | whole numbers as `long` from ESM v8; case tables | out-of-`int` literals below v8 (`STAGE-ESM-031`) |
@@ -87,7 +87,7 @@ whole automation is hand-written (gap-fill).
 | Constraints | unique property value, unique event occurrence; admitted even though Chronicle#4123 means index updates run after commit | intra-command multi-event change to one constraint; multi-claim in one command: 014 |
 | Authorization | authenticated, role, claim and logical policies; caller fixtures; ownership claims against text-backed targets | opaque policy code, role-claim URIs, a claim matched against a Uuid-backed subject or path: 015 |
 | Specifications | command-action scenarios: given events, `when <Command>`, `then` events (ordered or any order), `then readmodel`, `then query`, `then error` (naming a rendered constraint or message), `then denied`, `given caller`. Two narrow when-less routes: an unprotected single `then query` seeded by exactly one `given readmodel` whose key and values match (no given events, no caller), and a query-only denial (`given caller`, one `then query` with no results, `then denied`, a protected query, no role claims) | `then no readmodel`, `when append`, composite values, error codes not naming a rendered constraint: 011. Any other when-less specification (for example given events with `then query`) fails 011 |
-| Compliance | none | any `@pii` or `@sensitive` already fails binding (PLAY0268). The C# provider mapping (Stage v4.29.0, Stage#197) is `@pii` to `[PII]`, `@sensitive` to `[Encrypted]` + `[NotAudited]`, both to `[PII]` only |
+| Compliance | none | any `pii` or `secret` already fails binding (PLAY0268) on the pinned CLI. The C# provider mapping (Stage v4.29.0, Stage#197) is personal data to `[PII]`, operational secrets to `[Encrypted]` + `[NotAudited]`, both to `[PII]` only |
 
 At standalone 4.127.0, compliance uses bare `pii`/`secret` (legacy markers are
 accepted with PLAY0565 information); either still refuses binding on that compiler.

package/package/corpus/skills/cratis-screenplay-toolchain/references/screenplay-contract-exceptions.json

@@ -1,4 +1,25 @@
 [
+  {
+    "file": ".cratis/ai/skills/cratis-screenplay-model-authoring/references/mcp-loop.md",
+    "text": "   3 unsupported/unbound. `test` rejects `--no-color`. Hand off to the verdict",
+    "kind": "cliOption",
+    "value": "--no-color",
+    "reason": "Explicitly documents a rejected option, not a supported CLI argument; Screenplay v4.145.0 ModelTest.cs:22-26. Remove with the warning."
+  },
+  {
+    "file": ".cratis/ai/skills/cratis-screenplay-model-authoring/references/mcp-tools.md",
+    "text": "or unbound. `--no-color` is rejected (exit 2); there is no proposal or paging option.",
+    "kind": "cliOption",
+    "value": "--no-color",
+    "reason": "Explicit warning that test does not accept this flag; Screenplay v4.145.0 ModelTest.cs:22-26. Remove with the warning."
+  },
+  {
+    "file": ".cratis/ai/skills/cratis-screenplay-toolchain/references/verdicts.md",
+    "text": "is not proof of coverage. `test` rejects `--no-color` (exit 2).",
+    "kind": "cliOption",
+    "value": "--no-color",
+    "reason": "Negative option guidance, not a command recommendation; Screenplay v4.145.0 ModelTest.cs:22-26. Remove with the warning."
+  },
   {
     "file": ".cratis/ai/skills/cratis-screenplay-model-authoring/references/mcp-loop.md",
     "text": "4.63.1. Cratis CLI 3.28.2 bundles Screenplay 4.66.0 (probed: 29 tools and the same views);",

package/package/corpus/skills/cratis-screenplay-toolchain/references/screenplay-contract.json

@@ -24512,12 +24512,17 @@
         "expectedSourceRevision",
         "limit",
         "offset",
+        "proposalId",
         "scope",
         "specification"
       ],
       "inputSchema": {
         "type": "object",
         "properties": {
+          "proposalId": {
+            "type": "string",
+            "description": "Outstanding proposal from this connection. Runs its retained candidate and identity catalog without refreshing, applying or mutating it; an externally changed base does not replace the snapshot."
+          },
           "specification": {
             "type": "string"
           },
@@ -24534,7 +24539,8 @@
             "maximum": 200
           },
           "expectedSourceRevision": {
-            "type": "string"
+            "type": "string",
+            "description": "Echo sourceRevision from the first execution response on continuation. With proposalId, pins the candidate source rather than the current model."
           }
         },
         "required": [],

package/package/corpus/skills/cratis-screenplay-toolchain/references/screenplay-contract.version

@@ -1 +1 @@
-4.144.0
+4.145.0

package/package/corpus/skills/cratis-screenplay-toolchain/references/sources-and-streams.md

@@ -11,7 +11,7 @@
 ## Admission
 
 Sources, streams and command/specification routes bind and reference-execute as
-**ESM v8** on Screenplay 4.125.0. Current evidence: released `event-sources.md`,
+**ESM v8** since Screenplay 4.125.0. Current evidence: released `event-sources.md`,
 `specifications.md`, `Versions.cs`; the complete example below compiled with
 `--warnaserror` and passed `screenplay test` on 4.125.0.
 

package/package/corpus/skills/cratis-screenplay-toolchain/references/traps.md

@@ -7,9 +7,9 @@ bind as v8, v7 reaches Stage planning, reference tests have CLI/MCP routes, and
 exact numbers are documented in the grammar. Compiler syntax: `cheat-sheet.md`.
 
 1. Clean V1 is not executable: binding errors appear through MCP (V2), `render` or `cratis screenplay validate --executable` (bundled compiler, writes nothing). Neither `screenplay <folder>` nor plain `cratis screenplay validate` binds. [probed]
-2. The Screenplay samples validate clean but are not all executable; copying their idioms (filtered queries, `@pii`, `today`, `reads`, `$causedBy`, templates, performers) breaks V3. [probed]
+2. The Screenplay samples validate clean but are not all executable; copying their idioms (context-filtered queries, enum/identity compliance, `today`, `reads`, `$causedBy`, templates, performers) can block V3. Caller-supplied collection equality filters bind since 4.143.0 (ESM v14); read read-surface `references/equality-filters.md`. [historical probes; current filter source checked]
 3. Know the target mode (design/executable/renderable) before writing; state it.
-4. Plain `produces` without `for` means allocation in the ESM but "the identifier" in rendered code. Always write `for <identifier>`. [PLAY0478 probed]
+4. Plain `produces` without `for` means allocation in the ESM but "the identifier" in rendered code. Always write `for <identifier>` on a plain `produces <Name>`; inline `produces event <Name>` omits `for` and defaults to the identifier. [PLAY0478 probed]
 5. PLAY0029 is a warning: a misspelled keyword (or `type` inside a slice) drops the construct silently. Use `--warnings-as-errors`. [probed]
 6. Validate the folder: `cratis screenplay validate file.play` ignores imports and reports false unknown-name warnings (cli#244, open); the standalone tool follows them. [probed on 3.28.2 and 4.66.0]
 7. Current V1 warns on absent projection/children/nested targets (PLAY0514) and unknown removal/capture events (PLAY0166). Opt-in field-origins checks find unmapped declared fields (PLAY0534) where coverage is known; still walk lineage for skipped/opaque shapes.

package/package/corpus/skills/cratis-screenplay-toolchain/references/verdicts.md

@@ -104,13 +104,25 @@ never "specifications pass".
 ## V4: reference specifications run
 
 Run `screenplay test <root> [--filter <exact-address>] [--format text|json]` on
-4.125.0, or MCP `run-specifications`. The compile command alone still does not
+the standalone pin, or MCP `run-specifications`. The compile command alone still does not
 execute scenarios. Reference execution is in-memory: no external services or
 opaque code run. Record route, expected versus discovered/selected counts,
 passed, failed and unsupported outcomes. Exit 0 means all selected passed; 1
 failed, 2 could not run/invalid input or selection, 3 unbound or unsupported.
 Unknown filters refuse rather than select zero. No discovered specifications
-is not proof of coverage.
+is not proof of coverage. `test` rejects `--no-color` (exit 2).
+
+MCP selectors are `specification` (exact address/id) and `scope` (prefix);
+both supplied mean intersection. `offset`/`limit` page results; continuation
+requires `expectedSourceRevision`. On **Screenplay 4.145.0 and later**, pass
+`proposalId` between proposal review and `apply` to run the retained candidate
+read-only. Without that argument it runs the workspace. A candidate
+V4 belongs only to its returned source revision, not to the disk model.
+Unknown/applied/discarded/reopened proposals give `UnknownProposal`.
+A statically impossible `then` reports PLAY0285: the whole model is unbound,
+exit 3, and no specifications run. Details and source evidence:
+[reference execution](../../cratis-screenplay-model-authoring/references/mcp-tools.md#run-reference-specifications).
+
 The reference runner returns unsupported for a specification that reads a reducer-built read
 model and for any construct whose evaluation needs an opaque body.
 

package/package/corpus/skills/cratis-screenplay-toolchain/references/versions.md

@@ -3,6 +3,7 @@
 ## Contents
 
 - Pin set
+- Equality-filter rendering boundary
 - Two compilers, one rule
 - Commands and exit codes
 - Model notes gate
@@ -18,11 +19,11 @@ probe; older probes retain their original labels in the other references.
 
 | Source | Pin | Evidence |
 | --- | --- | --- |
-| Screenplay language, standalone tool and MCP | **4.144.0** (`b5da55a2`) | Released tag `v4.144.0` and its unchanged published contract; committed model notes and the standalone open-question gate; equality query filters admitted as ESM v14 since 4.143.0 |
+| Screenplay language, standalone tool and MCP | **4.145.0** (`bf58b489`) | Released tag `v4.145.0`, published NuGet tool and byte-identical Golden contract; read-only proposal specification execution with `proposalId`; model notes/open-question gate and ESM v14 equality filters retained |
 | cratis CLI | **3.53.1** | Released tag `v3.53.1`; source-checked, not a new render/browser probe |
 | Screenplay bundled by CLI | **4.137.0** | CLI `v3.53.1:Directory.Packages.props`; enum-number authoring, not v12 binding |
 | Stage bundled by CLI | **4.73.1** | Same file; Stage's own `Directory.Packages.props` also pins Screenplay 4.137.0 |
-| Latest standalone Stage released when this was checked | **4.76.0** (Screenplay 4.139.0) | Released tag `v4.76.0`; no cli release bundles Stage 4.74.0 to 4.76.0, so a cli user observes none of it. It admits ESM v1 to v12 (v11 from 4.75.0, v12 from 4.76.0), renders UUID-concept generated values and responses (4.74.0) and explicit enum numbers (4.76.0). Its scaffold pins match 4.73.1 (Arc 22.68.0, Chronicle 19.45.0, frontend pins); `Directory.Packages.props` takes Scene 4.21.0 |
+| Historical standalone Stage source baseline | **4.76.0** (Screenplay 4.139.0) | Released tag `v4.76.0`; no cli release bundles Stage 4.74.0 to 4.76.0, so a cli user observes none of it. It admits ESM v1 to v12 (v11 from 4.75.0, v12 from 4.76.0), renders UUID-concept generated values and responses (4.74.0) and explicit enum numbers (4.76.0). Its scaffold pins match 4.73.1 (Arc 22.68.0, Chronicle 19.45.0, frontend pins); `Directory.Packages.props` takes Scene 4.21.0 |
 | Screenplay.Generation / CritterStack / Prologue bundled by CLI | **0.18.0 / 0.24.0 / 2.0.0** | CLI `v3.53.1:Directory.Packages.props`. Latest released: Generation 0.18.1, CritterStack 0.26.0, Prologue 2.0.0 (no release after 2.0.0); the newer Generation and CritterStack releases are not in a cli |
 | Cratis.Arc.Screenplay bundled by CLI | **22.54.0** | Same file; this is the generator package, not a blanket rendered-app dependency pin |
 | Chronicle / Fundamentals bundled by CLI | **19.32.0 / 7.22.8** | Same file |
@@ -52,9 +53,25 @@ and `Source/Cli.Specs/for_AiMcpRegistration/when_installing/with_a_composed_prof
 at tag `v3.46.1` (CLI#322 / CLI#311). This minimum does not re-label the compiler
 or renderer probes below as results from the newer bundle.
 
+## Equality-filter rendering boundary
+
+Caller-supplied collection equality filters shipped in Screenplay **4.143.0**
+(decision 0069), selecting ESM v14; the standalone **4.145.0** pin binds and
+reference-tests them. No-filter models retain their version/bytes/revision.
+The latest released Stage checked for this boundary, **4.80.0**, admits through
+v13 (`Source/Rendering.Cratis/Semantics/SemanticVersionFeatures.cs:100`,
+`EsmSchemaV13Support`) and refuses authored filters in its legacy renderer
+(`Renderers/QueryAdmission.cs:13-22`); it pins Screenplay 4.141.0. It does not
+admit v14. CLI **3.53.1** still bundles Screenplay **4.137.0** / Stage **4.73.1**,
+whose audited pair ceiling is v10 (`SemanticVersionFeatures.cs:89`). These are
+source checks at Stage `v4.80.0` / `v4.73.1` and CLI `v3.53.1`, not new render
+probes or scaffold dependency upgrades. A future consumer must explicitly admit
+v14 and preserve equality selection rather than drop filters. Complete examples:
+read-surface [equality filters](../../cratis-screenplay-read-surface/references/equality-filters.md).
+
 ## Two compilers, one rule
 
-Standalone Screenplay 4.144.0 and CLI 3.53.1's 4.137.0 bundle are different releases.
+Standalone Screenplay 4.145.0 and CLI 3.53.1's 4.137.0 bundle are different releases.
 Prefer standalone for the current language checks; CLI owns generation, Prologue
 and rendering. Name the tool/version with every verdict. No verdict transfers
 between differing compilers without checking the same inputs there.
@@ -76,13 +93,16 @@ conflicts: `cratis-screenplay-model-authoring`.
 | Completeness | Add `--check <name>[,<name>]` (repeatable) or `--check all` | Opt-in warnings; whole-source errors skip checks, not pass them |
 | CLI source validation | `cratis screenplay validate <root> --warnings-as-errors -o json-compact` | Read producer exit and JSON errors/warnings/file count. Passing source-only probe on CLI 3.41.0: dependencies example, exit 0 |
 | Binding | MCP workspace readiness and `executable-diagnostics` | V2 reads diagnostics; V3 requires binding with no blocking diagnostics |
-| Reference specifications | `screenplay test <root> [--filter <address>] [--format text|json]`, or MCP `run-specifications` | 0 all selected passed; 1 failed; 2 could not run/invalid selection; 3 unsupported or unbound. Counts of zero do not prove coverage |
+| Reference specifications | `screenplay test <root> [--filter <address>] [--format text|json]`, or MCP `run-specifications` (`specification`, `scope`, `offset`, `limit`, `expectedSourceRevision`; `proposalId` from 4.145.0) | 0 all selected passed; 1 failed; 2 invalid arguments/input/selection or IO; 3 unsupported or unbound. `test` rejects `--no-color`; counts of zero do not prove coverage |
 | Rendering | `cratis render` | Separate admission, publication, target build and target tests (V5) |
 
 Source validation does not bind or run attached code. Reference execution is
 in-memory and does not run opaque attachments or external services. CLI-derived
 specification IDs need not match persisted MCP identities after renames; use MCP
-for identity-stable selection.
+for identity-stable selection. On Screenplay **4.145.0 and later**, run a retained
+proposal read-only with `proposalId` after review and before apply. Without that
+argument it runs the current workspace. An impossible `then` (PLAY0285)
+unbinds the entire model and prevents every specification running.
 
 ## Model notes gate
 

package/package/corpus/skills/cratis-screenplay-ui-composition/SKILL.md

@@ -6,6 +6,8 @@ license: MIT
 
 # UI composition in Screenplay
 
+Read [preferred syntax](../cratis-screenplay-toolchain/references/preferred-syntax.md) when writing or reviewing `.play`.
+
 Event Modeling's wireframe step is a first-class part of the language. The shell,
 the reusable shapes inside it, the forms bound to commands, and the navigation
 entries other modules contribute are all declared in the `.play` model.
@@ -17,17 +19,11 @@ a trigger value named `file` is written `@file`.
 
 ## Locate the model
 
-Look first for the project's existing `.play` files: the folder holding them is the
-model. A new model goes under the repository's `Source/` or `src/` folder, else in a
-`Screenplay/` folder at the repository root; never under `.cratis/`, which holds
-configuration and the shared AI corpus only. This is the
-conventional home for consumer-owned `.play` source; do not invent another
-location or search the whole repository before checking it.
-
-`cratis ai install` manages `.cratis/ai/`, never model files. Never
-hand-copy Screenplay source between repositories. Keep Markdown that explains,
-questions or navigates the model in the repository's documentation; the `.play`
-source is the single flow model.
+Look first for the project's existing `.play` files: their folder is the model.
+For a new model, check `Source/` or `src/`, else use `Screenplay/` at the repository
+root. Never put a model under `.cratis/` or hand-copy it between repositories.
+`cratis ai install` manages `.cratis/ai/`, never model files. Keep explanatory
+Markdown in project documentation; `.play` is the single flow model.
 
 ## Verified product sources
 

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/admission.md

@@ -70,7 +70,7 @@ model owner's decision.
 | `STAGE-ESM-005` | Code validation or rule predicate bodies; or a command beyond the first capability (optional event property, event revision other than the first, validation or requirement that cannot be rendered, no `produces`) | Use declarative validation; non-initial event generations are not rendered |
 | `STAGE-ESM-006` | `produces` that cannot render without changing its destination or mappings (`produces when`, literal or computed mappings, `for` not a command identifier, mappings not one-to-one with event properties, duplicate tags) | Map properties one to one; conditional outcomes (`produces when`) are a different behavior, so gap-fill unless the owner accepts splitting them into commands |
 | `STAGE-ESM-007`, `-008`, `-009` | Projection count per read model (exactly one projection or reducer each); unresolvable properties or no single read-model transition (**flat** projections only); affected instance not one, not keyed by an event property, or not the event-source identity (flat projections only) | One projection per read model; see "Projections" below |
-| `STAGE-ESM-010` | A query is neither an optional snapshot lookup by the read-model identifier nor an observable collection query (for example a snapshot list); each query is checked on its own. Observable list queries (keyed or unkeyed) render since Stage 4.49.0. Through Stage 4.79.0 (so in cratis CLI 3.53.1, which bundles 4.73.1) an optional snapshot lookup whose key concept has validation rules is refused; Stage 4.79.1 renders a scalar validated key, in keyed lookups and filtered observable collections, as its primitive and converts it inside the query, so an out-of-rule key finds no instance instead of failing validation, and still refuses a validated concept inside a composite or collection argument (Stage `v4.79.1` `Source/Rendering.Cratis/Semantics/SemanticCratisAdmission.StateView.cs:117-141`) | Keyed `XById => X optional` queries or `observable` lists; a snapshot list is gap-fill. `filter`, `scoped to`, `performer` queries do not bind (`PLAY0268`) |
+| `STAGE-ESM-010` | A query is neither an optional snapshot lookup by the read-model identifier nor an observable collection query (for example a snapshot list); each query is checked on its own. Observable list queries (keyed or unkeyed) render since Stage 4.49.0. Through Stage 4.79.0 (so in cratis CLI 3.53.1, which bundles 4.73.1) an optional snapshot lookup whose key concept has validation rules is refused; Stage 4.79.1 renders a scalar validated key, in keyed lookups and filtered observable collections, as its primitive and converts it inside the query, so an out-of-rule key finds no instance instead of failing validation, and still refuses a validated concept inside a composite or collection argument (Stage `v4.79.1` `Source/Rendering.Cratis/Semantics/SemanticCratisAdmission.StateView.cs:117-141`) | Keyed `XById => X optional` queries or `observable` lists; a snapshot list is gap-fill. Caller-supplied collection equality filters bind as v14 since 4.143.0 but exceed this Stage 4.73.1 v10 ceiling (latest checked 4.80.0 admits through v13). Context/single-result filters, opaque scope/performer and composite `by` remain PLAY0268 |
 | `STAGE-ESM-011` | A specification cannot render (see the rules below) | Reshape it only if the assertion keeps its meaning; otherwise keep the specification, record the gap, and gap-fill with the specification as the oracle. Never weaken or delete it to get a render |
 | `STAGE-ESM-012` | Generated C# names collide (properties, types, namespaces, constraints) | Rename |
 | `STAGE-ESM-013` | An event-context value other than `$context.occurred` mapped in `produces` | Map a command property when that preserves the meaning; otherwise gap-fill |
@@ -249,7 +249,7 @@ Whole-model admission needs ESM schema v1 to v4; v5 and v6 are `STAGE-ESM-016`.
 Not rendered: `Automation` and `Translate` slices (Stage#79, open: the whole automation
 is gap-fill), reactions and captures, list, observable, filtered and scoped queries,
 `produces when`, command `handler`s, code validation and opaque policies (they refuse),
-composite-key projections, `all`, and compliance attributes (`@pii`, `@sensitive`, which
+composite-key projections, `all`, and compliance markers (`pii`, `secret`, which
 already fail binding with `PLAY0268`). Any one blocking diagnostic fails the whole plan.
 A refusal is not a licence to weaken the model: drop no specification, event generation
 or protection to get a render; keep the model, record the capability gap and gap-fill.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.38.2",
+  "version": "7.39.0",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [