@cratis/pi 7.38.3 → 7.39.0

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/invoicing-dues-example.md

@@ -48,13 +48,9 @@ module Invoicing
         amount    Decimal
         validate
           amount > 0 message "An invoice needs an amount above zero"
-        produces InvoiceIssued
-          for invoiceId
-          member = member
-          amount = amount
-      event InvoiceIssued
-        member MemberId
-        amount Decimal
+        produces event InvoiceIssued
+          member MemberId = member
+          amount Decimal = amount
       constraint IssueOnce
         unique event InvoiceIssued
 
@@ -94,17 +90,12 @@ module Invoicing
       description "An invoice ends either settled or voided, never both: SettleOrVoid declares the exclusivity per invoice, enforced at append. Rules about the invoice's stored state are in invoicing-dues-design.md."
       command SettleInvoice
         invoiceId InvoiceId identifier
-        produces InvoiceSettled
-          for invoiceId
+        produces event InvoiceSettled
       command VoidInvoice
         invoiceId InvoiceId identifier
         reason    String
-        produces InvoiceVoided
-          for invoiceId
-          reason = reason
-      event InvoiceSettled
-      event InvoiceVoided
-        reason String
+        produces event InvoiceVoided
+          reason String = reason
       constraint SettleOrVoid
         unique event InvoiceSettled
         unique event InvoiceVoided
@@ -170,9 +161,7 @@ module Invoicing
       description "Starts a payment attempt. PaymentRequested says only that we asked the gateway; it is NOT the outcome. The outcome arrives later as an external fact (slice PaymentGatewayResults). A request may be repeated after a decline, so there is deliberately no once-only constraint here."
       command RequestPayment
         invoiceId InvoiceId identifier
-        produces PaymentRequested
-          for invoiceId
-      event PaymentRequested
+        produces event PaymentRequested
 
       specification RequestingPayment
         given caller
@@ -374,11 +363,8 @@ module Invoicing
         amount Decimal
         validate
           amount > 0 message "A top-up needs an amount above zero"
-        produces CreditToppedUp
-          for member
-          amount = amount
-      event CreditToppedUp
-        amount Decimal
+        produces event CreditToppedUp
+          amount Decimal = amount
 
       specification ToppingUpCredit
         given caller

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/scenario-examples.md

@@ -26,7 +26,7 @@ Screenplay specifications.
 |---|---|---|
 | Given | the facts that exist, each with its `for` source: `given InvoiceIssued` with `for "<invoice id>"` | "given an invoice" with no fact, no source |
 | When | one action with every input stated | an action with inputs left to defaults |
-| Then (success) | every production with payload and `for` | "an event is produced" |
+| Then (success) | every expected event with payload and an explicit `for`, including events the command declares inline (the inline default applies to the `produces event` declaration, not to the expectation) | "an event is produced" |
 | Then (refusal) | `then error "Invoice already settled"`, the rule's own message | `then error` with no message, or `then error ""` |
 | Then (denial) | `then denied` | `then error` for a caller who is not allowed |
 | Reason | slice `documentation` says why the rule exists | the rule appears only in a spec title |
@@ -204,7 +204,13 @@ specification MemberCreditAccumulatesTopUps
 ```
 
 ## 6. Views: list contents and the empty list
-A list query asserts one `result` block per expected row (count and order are exact), and the
+A list query asserts one `result` block per expected row: count is exact, but rows
+match by read model and key regardless of order. The
 empty-list intent is a separate claim from a keyed row being absent (`view-and-story-specs.md`
 "Removal is a positive obligation"). The backing example proves the keyed forms only; whole-list
-queries are executable too (`ListOpenInvoices` in the backing example); only `filter`, `scoped to` and `performer` queries stay design-mode expectations recorded in the coverage matrix.
+queries are executable too (`ListOpenInvoices` in the backing example); caller-supplied equality filters on collections bind as ESM v14 since 4.143.0.
+Pass `by` and filters in query arguments; PLAY0468 reports unknown, repeated or
+missing required arguments. Optional filters may be omitted, supplied null is refused.
+Context-sourced/single-result filters, opaque `scoped to`/`performer`, and composite
+`by` remain PLAY0268. Compiled coverage and renderer ceilings:
+read-surface [equality filters](../../cratis-screenplay-read-surface/references/equality-filters.md).

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/spec-forms-by-mode.md

@@ -17,7 +17,8 @@ Typed example/override forms: `cratis-screenplay-specifications`
 | `when append <Event>` | yes | yes | no |
 | `then readmodel` / `then query` (keyed `ById`, `arguments`, `result`) | yes | yes | yes |
 | `then query` on an unfiltered list or a list narrowed by one `by` key (observable too) | yes | yes since 4.105.0: no `arguments` for an unkeyed list, one `result` per row stating the read-model identifier, no `result` = empty list | observable lists render, a non-observable list is `STAGE-ESM-010` (Stage 4.73.1) |
-| `then query` on `filter`, `scoped to`, `performer` or `by ... from` queries | yes | no: PLAY0268 at binding | no |
+| Collection query with caller-supplied equality `filter`, including observable | yes | yes since 4.143.0, ESM v14: same-named scalar property/type, AND with `by`; optional omission allowed, supplied null refused; PLAY0468 checks arguments; row order does not matter | no on Stage 4.73.1 (v10 ceiling) or latest checked 4.80.0 (v13 ceiling) |
+| Context `from`, single-result filters, `scoped to`, `performer` or composite `by` | yes | PLAY0268: query context, collection-only filtering, opaque scope/implementation or multipart lookup are unadmitted | no |
 | `then no readmodel <RM> for "<key>"` | yes | yes | no |
 | `when query` -> `then result` / `then no result` | yes | yes | same as `then query`: only the query-only cases below |
 | `given clock` / `when clock`, `when trigger`, `given`/`when capture` | yes | yes (standalone and any current cratis; history: a cratis before 3.28.2 bundle no, see versions.md) | no |
@@ -40,7 +41,7 @@ cratis before 3.28.2 bundle is available). Mark each such spec in the coverage m
 `gap: <reason>` for the narrower modes so the verification and render phases know what will not execute.
 
 ## Executable mode
-- Every gated spec has `given caller`; every production and every given/expected event has `for`.
+- Every gated spec has `given caller`; every given/expected event has `for`, and so does every plain `produces <Name>` (inline `produces event` omits it and defaults to the identifier).
 - Each read model has one key shared by its keyed `=> RM optional` queries; the identifier equals
   the projection's effective key (`cratis-screenplay-slice-design` `references/read-model-design.md`
   decision table). View specs assert through a keyed query.

package/package/corpus/skills/cratis-screenplay-scenario-coverage/references/view-and-story-specs.md

@@ -119,7 +119,8 @@ Keep three claims apart:
 - one stored instance is absent: `then no readmodel`;
 - a query returns no rows: `then query` without `result`, or `when query` + `then no result`;
 - a list-valued property is empty: assert that property as `[]`.
-List-query results use repeated `result` blocks; count and order are exact. A keyed lookup does
+List-query results use repeated `result` blocks; count is exact and rows match
+by read model and instance key regardless of order. A keyed lookup does
 not prove an entire list is empty: assert the unkeyed list query itself (an unkeyed query takes no
 `arguments`; each `result` row states the read-model identifier, else PLAY0351). A snapshot list does not render
 (`STAGE-ESM-010`, Stage 4.73.1); an `observable` list does. Record that rendering limit.

package/package/corpus/skills/cratis-screenplay-slice-design/SKILL.md

@@ -73,7 +73,7 @@ report and slice `documentation`, and continue.
    `Save`, `Set`, `Change`, `Manage` + noun) means several decisions share a form: ask which
    separate reasons change these values, then split (`references/slicing.md` *Generic edits*).
    One input per thing the caller decides or supplies; `identifier` on the property naming the
-   instance (omit only for allocation); `for <identifier>` on every `produces`. Trace each input
+   instance (omit only for allocation); inline `produces event <Name>` (no `for`) when the command owns the event; plain `produces <Name>` needs `for <identifier>`. Trace each input
    (`references/field-lineage.md`). A conditional input is a granularity question: two
    decisions are two commands; one decision with a dependent rule is an implication
    (`require a == false or b > c`). Never a boolean attestation input (`confirmsX == true`)
@@ -157,9 +157,12 @@ report and slice `documentation`, and continue.
   conventional `*Id` only with an admitted list query and no single-instance identifier).
   Queryless read models need explicit `key`.
 - At most one builder (projection or reducer) per read model (`PLAY0191`).
-- A query's `by` goes on its own body line. At 4.135.0, optional keyed and collection
-  queries bind, including observable delivery; scalar `by` must be caller-supplied.
-  Filtered, scoped, performer-backed and composite-block queries remain `PLAY0268`.
+- A query's `by` goes on its own body line. Optional keyed and collection queries
+  bind, including observable delivery. Caller-supplied equality filters on collections
+  bind as ESM v14 since 4.143.0; `by` ANDs with supplied filters. `from`, single-result
+  filters, scope, performer and composite `by` remain PLAY0268 for their respective
+  context/cardinality/opaque/multipart gaps. Read read-surface
+  [equality filters](../cratis-screenplay-read-surface/references/equality-filters.md).
 - A `unique` constraint names a property the event declares directly; the constraint name is
   its identity (renaming starts an empty index).
 - Unauthorized is `then denied`; a broken rule is `then error`; authorization runs first.

package/package/corpus/skills/cratis-screenplay-slice-design/references/model-reasoning.md

@@ -37,11 +37,8 @@ module Billing
           ```
         recordId String identifier
         amount Int
-        produces AmountRecorded
-          for recordId
-          amount = amount
-      event AmountRecorded
-        amount Int
+        produces event AmountRecorded
+          amount Int = amount
       specification RecordingAnAmount
         description "Witnesses that the agreed amount is retained"
         when RecordAmount amount = 10

package/package/corpus/skills/cratis-screenplay-slice-design/references/read-model-design.md

@@ -136,8 +136,8 @@ it stays.
 | The person... | Design-mode query | Executable/renderable scope |
 |---|---|---|
 | opens one thing | `XById => RM optional` + `by xId XId` | binds at 4.135.0 with caller-supplied `by`; check target renderer |
-| scans a list | `ListX => RM[]` (optionally `observable`, `filter`) | collection and observable delivery bind at 4.135.0; filters remain PLAY0268; check target renderer |
-| sees their own rows | list with scope/`from` on the caller | scope and context-derived `by` remain PLAY0268; access rules are part of the view, enforced by the target |
+| scans a list | `ListX => RM[]` (optionally `observable`, `filter`) | collection/observable delivery bind; caller-supplied equality filters bind since 4.143.0 as ESM v14; check target renderer |
+| sees their own rows | list with scope/`from` on the caller | scope and context-derived `by`/`filter` remain PLAY0268 because portable scope/query context is unadmitted; caller-supplied filters are not access control |
 | sees a site-wide figure | singleton read model, `from <Event> key literal "global"` on every `from` (a projection-level `key` routes nothing, PLAY0381; example in Screenplay `projections/keys.md`, "Literal keys") | check the binding (V3, `cratis-screenplay-toolchain`) |
 
 - `observable` when people are expected to see others' or automation's changes while looking
@@ -231,11 +231,8 @@ module Berths
       command BookBerth
         bookingId BookingId identifier
         berth BerthName
-        produces BerthBooked
-          for bookingId
-          berth = berth
-      event BerthBooked
-        berth BerthName
+        produces event BerthBooked
+          berth BerthName = berth
       specification BookingABerth
         given caller
           authenticated
@@ -250,9 +247,7 @@ module Berths
       description "A skipper cancels a booking they no longer need"
       command CancelBooking
         bookingId BookingId identifier
-        produces BookingCancelled
-          for bookingId
-      event BookingCancelled
+        produces event BookingCancelled
 
     slice StateView OpenBookings
       description "The harbour office lists bookings that still hold a berth. BerthBooked sets berth: the booking enters the list. BookingCancelled removes it: a cancelled booking never shows."

package/package/corpus/skills/cratis-screenplay-slice-design/references/worked-example.md

@@ -62,13 +62,9 @@ module Lockers
         number LockerNumber
         volume   Litres
         authorize IsAttendant
-        produces LockerInstalled
-          for lockerId
-          number = number
-          volume   = volume
-      event LockerInstalled
-        number LockerNumber
-        volume   Litres
+        produces event LockerInstalled
+          number LockerNumber = number
+          volume Litres = volume
       constraint UniqueLockerNumber
         unique number on LockerInstalled
         message "That locker number is already installed"
@@ -141,13 +137,9 @@ module Lockers
       command RequestLocker
         requestId RequestId identifier
         preferredVolume Litres
-        produces LockerRequested
-          for requestId
-          preferredVolume = preferredVolume
-          requestedAt   = $context.occurred
-      event LockerRequested
-        preferredVolume Litres
-        requestedAt   DateTime
+        produces event LockerRequested
+          preferredVolume Litres = preferredVolume
+          requestedAt DateTime = $context.occurred
       specification RequestingALocker
         given caller
           authenticated
@@ -180,11 +172,8 @@ module Lockers
             message "The locker is not free"
           require request.state == "waiting"
             message "The request is not waiting for a locker"
-        produces LockerAssigned
-          for lockerId
-          requestId = requestId
-      event LockerAssigned
-        requestId RequestId
+        produces event LockerAssigned
+          requestId RequestId = requestId
       constraint OneRequestPerLocker
         unique event LockerAssigned
         message "The locker is already assigned"

package/package/corpus/skills/cratis-screenplay-specifications/SKILL.md

@@ -6,23 +6,19 @@ license: MIT
 
 # Screenplay specifications
 
+Read [preferred syntax](../cratis-screenplay-toolchain/references/preferred-syntax.md) when writing or reviewing `.play`.
+
 A `specification` is the acceptance criterion for a slice, written in the same
 document as the behavior it pins. Given/when/then, in business language, with
 concrete data.
 
 ## Locate the model
 
-Look first for the project's existing `.play` files: the folder holding them is the
-model. A new model goes under the repository's `Source/` or `src/` folder, else in a
-`Screenplay/` folder at the repository root; never under `.cratis/`, which holds
-configuration and the shared AI corpus only. This is the
-conventional home for consumer-owned `.play` source; do not invent another
-location or search the whole repository before checking it.
-
-`cratis ai install` manages `.cratis/ai/`, never model files. Never
-hand-copy Screenplay source between repositories. Keep Markdown that explains,
-questions or navigates the model in the repository's documentation; the `.play`
-source is the single flow model.
+Look first for the project's existing `.play` files: their folder is the model.
+For a new model, check `Source/` or `src/`, else use `Screenplay/` at the repository
+root. Never put a model under `.cratis/` or hand-copy it between repositories.
+`cratis ai install` manages `.cratis/ai/`, never model files. Keep explanatory
+Markdown in project documentation; `.play` is the single flow model.
 
 ## Verified product sources
 
@@ -34,20 +30,15 @@ Specification syntax was checked against Screenplay v4.127.0 `specifications.md`
 older probes in the table remain historical. Pins: `cratis-screenplay-toolchain`
 `references/versions.md`. Compile commands check source, not reference execution.
 Use `screenplay test` or MCP `run-specifications` for V4; Stage/target tests are
-separate evidence. Unsupported/unbound is never a pass. Typed examples and
+separate evidence. On Screenplay **4.145.0 and later**, propose → review →
+`run-specifications` with `proposalId` → apply.
+PLAY0285 (an impossible `then`) unbinds the whole model and blocks every spec.
+Unsupported/unbound is never a pass. Typed examples and
 route assertions are in [examples and routes](references/examples-and-routes.md).
 
-Checked against the Screenplay repository at tag `v4.31.0` (commit `355dffb`):
-`Documentation/screenplay/{specifications,policies,constraints,readmodels,diagnostics}.md`.
-The original worked example had reference-runner evidence at that tag. The
-example below now uses inline events and canonical optionality; keep its current
-compile check distinct from that historical execution evidence.
-
-The specification actions beyond commands (`given clock`, `when clock`,
-`when trigger`, `given capture`, `when capture`, `when query`, `then result`,
-`then no result`) were checked against tag `v4.48.0` (commit `3baf4a4`):
-`Documentation/screenplay/{specifications,diagnostics}.md` and the proposed
-decision 0022. They do not exist before v4.48.0.
+Read [source notes](references/source-notes.md) for the original v4.31.0
+reference-runner evidence and v4.48.0 action syntax. Historical evidence is not
+current execution evidence; run the changed examples at the standalone pin.
 
 ## Reference execution — what actually runs
 
@@ -171,8 +162,9 @@ the one-rejection rule (`PLAY0273`) are reported only when the model binds, so
   `when append`, a model before ESM v6 expects the appended fact itself; from
   ESM v6 the appended event is the action and `then` lists only what followed it.
 - **Read models and query rows:** only the asserted properties must match
-  (subset); add `exactly` to require every property. Row count and order are
-  always exact. A missing property does not match an asserted `null`.
+  (subset); add `exactly` to require every property. Query row count is exact;
+  collection rows match by read model/key regardless of order. Ordering within a
+  collection-valued property is unchanged. A missing property does not match an asserted `null`.
 - **Rejections:** `then error "<message>"` matches the message whatever the rule's
   validation severity; no form asserts severity. Bare `then error` never matches
   a denial. Quote a localized key: `then error "$strings.invoices.reasonRequired"`.

package/package/corpus/skills/cratis-screenplay-specifications/references/actions-beyond-commands.md

@@ -21,7 +21,8 @@ report the complete example in [reactions-and-cascades.md](reactions-and-cascade
 
 - **Screenplay 4.66.0 (ESM v6, from 4.61.0), standalone and `cratis` 3.28.2:** the clock, trigger
   and capture actions, and the `Automation` and `Translate` slices, reactions and
-  captures they drive, bind. The reference runner executes them as library code, with
+  captures they drive, bind. The reference runner executes them through `screenplay test` or MCP
+   `run-specifications`, with
   the semantics in [Reactions and cascades](reactions-and-cascades.md).
 - **`cratis` before 3.28.2 (Screenplay 4.60.1, ESM v1-v5):**
   **`when query` executed. The clock, trigger and capture actions did not.** They parsed, printed and were

package/package/corpus/skills/cratis-screenplay-specifications/references/persona-callers-and-cases.md

@@ -63,11 +63,8 @@ module Billing
         validate
           require amount > 0
             message "The amount must be positive"
-        produces AmountRecorded
-          for recordId
-          amount = amount
-      event AmountRecorded
-        amount Int
+        produces event AmountRecorded
+          amount Int = amount
       specification RecordingAmounts
         description "An accountant can record a positive amount"
         parameter amount Int

package/package/corpus/skills/cratis-screenplay-specifications/references/source-notes.md

@@ -3,6 +3,16 @@
 
 # Retained source notes
 
+Original evidence: Screenplay v4.31.0 (`355dffb`),
+`Documentation/screenplay/{specifications,policies,constraints,readmodels,diagnostics}.md`.
+The original worked example had reference-runner evidence at that tag; inline
+events and canonical optionality added later need their own current check.
+
+Actions beyond commands (`given clock`, `when clock`, `when trigger`, `given capture`,
+`when capture`, `when query`, `then result`, `then no result`) were checked at
+v4.48.0 (`3baf4a4`), `Documentation/screenplay/{specifications,diagnostics}.md`
+and proposed decision 0022. These actions do not exist before v4.48.0.
+
 | Package | Version | Purpose |
 | --- | --- | --- |
 | `Cratis.Screenplay` | `4.31.0` | Original parser, binder and reference execution evidence |

package/package/corpus/skills/cratis-screenplay-streams-and-consistency/references/streams-example.md

@@ -49,13 +49,9 @@ module Membership
         email    Email
         name     String
         authorize IsCoordinator
-        produces MemberRegistered
-          for memberId
-          email = email
-          name  = name
-      event MemberRegistered
-        email Email
-        name  String
+        produces event MemberRegistered
+          email Email = email
+          name String = name
       constraint UniqueMemberEmail
         unique email on MemberRegistered
         ignore casing
@@ -102,11 +98,8 @@ module Courses
       command OpenCourse
         courseId CourseId identifier
         seats    Int
-        produces CourseOpened
-          for courseId
-          seats = seats
-      event CourseOpened
-        seats Int
+        produces event CourseOpened
+          seats Int = seats
       specification OpeningACourse
         given caller
           authenticated
@@ -176,13 +169,9 @@ module Courses
         validate
           require course.openSeats > 0
             message "The course is full"                 // NOT enforced: the view lags (PLAY0268 at binding)
-        produces MemberEnrolled
-          for enrolmentId
-          courseId = courseId                  // cross-stream references are payload
-          memberId = memberId
-      event MemberEnrolled
-        courseId CourseId
-        memberId MemberId
+        produces event MemberEnrolled
+          courseId CourseId = courseId          // cross-stream references are payload
+          memberId MemberId = memberId
       constraint OneActiveEnrolmentPerMemberAndCourse
         unique courseId, memberId on MemberEnrolled
         released by EnrolmentWithdrawn
@@ -276,11 +265,8 @@ module Courses
         validate
           require enrolment.courseId == courseId
             message "The enrolment does not belong to that course"   // NOT enforced today
-        produces EnrolmentWithdrawn
-          for enrolmentId
-          courseId = courseId
-      event EnrolmentWithdrawn
-        courseId CourseId
+        produces event EnrolmentWithdrawn
+          courseId CourseId = courseId
       constraint WithdrawOnce
         unique event EnrolmentWithdrawn
       specification WithdrawingAnEnrolment

package/package/corpus/skills/cratis-screenplay-toolchain/SKILL.md

@@ -6,6 +6,8 @@ license: MIT
 
 # Screenplay toolchain
 
+Read [preferred syntax](references/preferred-syntax.md) when writing or reviewing `.play`.
+
 Which tool to run, what its result means, and what each tool can and cannot admit. This
 skill answers "does it compile, bind, render, and which compiler said so". The method
 (what to model, in which order, with which gates) lives in
@@ -22,7 +24,7 @@ files is one application: always check the folder, never one file of it.
 
 When choosing or upgrading a tool, or checking version-specific capabilities, read `references/versions.md`; it is the only version table, and other skills point to it. For exact diagnostic codes, MCP names/parameters and standalone CLI options, search the large published [references/screenplay-contract.json](references/screenplay-contract.json), pinned by [references/screenplay-contract.version](references/screenplay-contract.version), rather than loading it in full. Locate a diagnostic by its exact `code` (for example `"code": "PLAY0029"`), a tool by its exact `name` (for example `"name": "read-workspace"`), or a command in `cliCommands`; read the matched object for retirement, parameters or options. [references/screenplay-contract-exceptions.json](references/screenplay-contract-exceptions.json) records reasoned exceptions for historical statements; it does not change the current contract.
 
-The standalone pin is Screenplay 4.142.0.
+The standalone pin is Screenplay 4.145.0.
 CLI and bundled package pins: `references/versions.md`. The single version table records
 released source evidence and historical probes separately; do not relabel an old
 render/browser result as a probe of the current packages.
@@ -31,7 +33,7 @@ Historical screens-release evidence: CLI 3.40.7 / Stage 4.51.1 / bundled
 Screenplay 4.114.0 opened the canonical corpus with `executableReady true`
 and the stdio transcript exposed 37 tools; standalone language 4.122.0 was
 recorded in that vector. These retained results are not a rerun on CLI 3.53.1
-or Screenplay 4.142.0.
+or Screenplay 4.145.0.
 
 ## Ground rules
 
@@ -44,7 +46,7 @@ or Screenplay 4.142.0.
 3. **Pick the compiler deliberately and name it.** Standalone `screenplay` for
    current language checks and reference specifications; `cratis` for rendering
    and generation. Bundled and standalone versions differ (CLI 3.53.1 bundles 4.137.0;
-   the standalone pin is 4.142.0). Report both tool and
+   the standalone pin is 4.145.0). Report both tool and
    version, rather than transferring a verdict across releases.
 4. **Know the mode** (design, executable, renderable) and write from its subset.
 5. **Capability is not correctness.** The tool you ran decides what is accepted today; the
@@ -91,7 +93,7 @@ server with a fixed root when the tool is older than 4.63.2 (the roots bug hit 4
 4.60.1 bundled by cratis before 3.28.2; 4.66.0 and later and cratis 3.28.2 are fine). A subagent without MCP reports "V2 not run: no MCP in this agent".
 
 One line per verdict, tool first, for example `V1 pass (screenplay 4.142.0, 3 files)` and
-`V3 blocked: PLAY0268 x3 (filter query, enum compliance)`. Name the source identity (commit plus the digest from
+`V3 blocked: PLAY0268 x3 (context filter, enum compliance)`. Name the source identity (commit plus the digest from
 the source-identity helper (`cratis-screenplay-modeling-lifecycle` `references/verdicts-and-modes.md` "Source identity")) the verdict ran on; keep it apart from the MCP
 `modelRevision`, which is semantic and, without `.screenplay/identities.json`,
 changes with the root folder name.
@@ -101,7 +103,10 @@ changes with the root folder name.
 - **Design**: every construct family parses; use it to model first. Compiled shapes:
   `references/cheat-sheet.md`. Read [references/cheat-sheet-example.md](references/cheat-sheet-example.md) when you need one complete design-mode document with every construct family.
 - **Executable** (binds, V3): `references/executable-subset.md`. Optional keyed lookups, unfiltered
-  lists and lists narrowed by one `by` key (observable too); `filter`, `scoped to`, `performer` and composite `by` do not bind; no handler (PLAY0268, with or without `implementation`/`hint`); `reads` and
+  lists and lists narrowed by one `by` key (observable too); caller-supplied equality
+  filters on collections bind as v14 since 4.143.0. Context `from`, single-result
+  filters, opaque `scoped to`/`performer` and composite `by` remain PLAY0268. Read
+  read-surface [equality filters](../cratis-screenplay-read-surface/references/equality-filters.md). No handler (PLAY0268, with or without `implementation`/`hint`); `reads` and
   `concurrency` do not bind (PLAY0271); concept compliance binds as v13 on standalone
   4.142.0 (since 4.141.0), not the pinned CLI (precise refusals: command-surface `references/compliance.md`);
   v6 constructs bind on Screenplay 4.61 or
@@ -168,7 +173,7 @@ All 44, with fixes: `references/traps.md`. Read `references/traps.md` when diagn
 Read [references/diagnostics.md](references/diagnostics.md) when a PLAY, STAGE or CLI-RENDER diagnostic needs its meaning and fix. Read [references/doc-contradictions.md](references/doc-contradictions.md) when the Screenplay documentation and the compiler disagree and you must decide which to trust.
 
 1. Clean V1 is not executable: only MCP (V2) or `render` binds.
-2. Write `for <identifier>` on every `produces`.
+2. Prefer inline `produces event` for a command-owned event; plain command productions need explicit `for <identifier>`.
 3. PLAY0029 is a warning: validate with warnings as errors.
 4. Validate the folder; name the compiler (cli#244, cli#242).
 5. V1 warns on undeclared projection targets (`PLAY0514`) and removal/capture

package/package/corpus/skills/cratis-screenplay-toolchain/references/automation-translate-example.md

@@ -17,11 +17,8 @@ module Membership
     slice StateChange Subscribe
       command Subscribe
         memberId MemberId identifier
-        produces MemberSubscribed
-          for memberId
-          subscribedAt = $context.occurred
-      event MemberSubscribed
-        subscribedAt DateTime
+        produces event MemberSubscribed
+          subscribedAt DateTime = $context.occurred
       specification SubscribingAMember
         given clock "2026-10-05T09:00:00Z"
         when Subscribe
@@ -39,11 +36,8 @@ module Membership
         months   Int
         validate
           months > 0  message "Renew for at least one month"
-        produces MembershipRenewed
-          for memberId
-          months = months
-      event MembershipRenewed
-        months Int
+        produces event MembershipRenewed
+          months Int = months
       specification RejectingAZeroRenewal
         when Renew
           memberId = "5b6c1f7e-2d3a-4e8b-9c0d-1a2b3c4d5e6f"

package/package/corpus/skills/cratis-screenplay-toolchain/references/cheat-sheet-example.md

@@ -2,7 +2,7 @@
 
 One complete document with every construct family. Design mode, not executable. Prose rules: [cheat-sheet.md](cheat-sheet.md); tool versions: [versions.md](versions.md); what binds: [executable-subset.md](executable-subset.md).
 
-Binding blockers: unquoted import, `reads` (PLAY0271), `starts with`, a `filter` query (lists and observable lists bind). Executable shapes are in the sibling examples. The bare-marker fence compiles warning-free on standalone 4.127.0; the earlier legacy-marker version compiled on 4.66.0 and CLI 3.28.2. `RecordingAPayment` lists the `InvoiceClosed` cascade, which the cratis 3.27.1 bundle (4.60.1) rejected with a false PLAY0285 ("outcome cannot be produced by 'RecordPayment'"); 3.28.2 accepts it.
+Binding blockers: unquoted import, `reads` (PLAY0271), `starts with`. Caller-supplied collection equality filters bind as ESM v14 since 4.143.0; context/single-result filters remain blocked. Executable shapes are in the sibling examples. The bare-marker fence compiles warning-free on standalone 4.127.0; the earlier legacy-marker version compiled on 4.66.0 and CLI 3.28.2. `RecordingAPayment` lists the `InvoiceClosed` cascade, which the cratis 3.27.1 bundle (4.60.1) rejected with a false PLAY0285 ("outcome cannot be produced by 'RecordPayment'"); 3.28.2 accepts it.
 
 Concept compliance itself binds as ESM v13 on standalone 4.142.0 (first released
 in 4.141.0); reasons remain report-only PLAY0270. CLI 3.53.1 bundles Screenplay
@@ -135,9 +135,7 @@ module Billing
       command CancelInvoice
         invoiceId InvoiceId identifier
         authorize CanManage
-        produces InvoiceCancelled
-          for invoiceId
-      event InvoiceCancelled
+        produces event InvoiceCancelled
       specification CancellingAnInvoice
         given caller
           authenticated
@@ -161,7 +159,7 @@ module Billing
         number    String
       query InvoiceById => InvoiceRow optional        // keyed optional lookup (unfiltered lists bind too)
         by invoiceId InvoiceId
-      query ListInvoices => observable InvoiceRow[]   // design mode only: the `filter` below is PLAY0268 at binding
+      query ListInvoices => observable InvoiceRow[]   // caller-supplied equality filter: ESM v14 since 4.143.0
         filter number String optional
       projection InvoiceList => InvoiceRow
         from InvoiceRegistered
@@ -214,13 +212,9 @@ module Billing
         paymentId PaymentId identifier
         invoiceId InvoiceId
         amount    Decimal
-        produces PaymentRecorded
-          for paymentId
-          invoiceId = invoiceId                       // cross-stream reference is payload
-          amount    = amount
-      event PaymentRecorded
-        invoiceId InvoiceId
-        amount    Decimal
+        produces event PaymentRecorded
+          invoiceId InvoiceId = invoiceId             // cross-stream reference is payload
+          amount Decimal = amount
       specification RecordingAPayment
         given caller
           authenticated
@@ -242,9 +236,7 @@ module Housekeeping                                   // no gates: this reaction
     slice StateChange CloseInvoice
       command CloseInvoice
         invoiceId InvoiceId identifier
-        produces InvoiceClosed
-          for invoiceId
-      event InvoiceClosed
+        produces event InvoiceClosed
       specification ClosingAnInvoice
         when CloseInvoice
           invoiceId = "9c858901-8a57-4791-81fe-4c455b099bc9"
@@ -254,11 +246,8 @@ module Housekeeping                                   // no gates: this reaction
     slice StateChange MarkOverdue
       command MarkOverdue
         invoiceId InvoiceId identifier
-        produces InvoiceMarkedOverdue
-          for invoiceId
-          overdueAt = $context.occurred
-      event InvoiceMarkedOverdue
-        overdueAt DateTime
+        produces event InvoiceMarkedOverdue
+          overdueAt DateTime = $context.occurred
       // No command spec here: under ESM v6 it must list the ReminderSent cascade. The file is
       // RecordingAPayment's cascade got a false PLAY0285 on cratis before 3.28.2; 3.28.2 accepts it.
       // The cascade form: automation-translate-example.md (SubscribingAMember).

package/package/corpus/skills/cratis-screenplay-toolchain/references/doc-contradictions.md

@@ -41,13 +41,14 @@ read from source or documentation.
 | 7 | interaction examples | `D/interactions.md:33` uses `button` | PLAY0103; `on double click` on `table` compiles though not in the EBNF |
 | 8 | where screens live | `D/screens.md:3` "inside `StateView` slices" | samples also put dialogs in `StateChange` |
 | 9 | where reducers live | `D/slices.md:74` and `D/glossary.md:21` call a reducer an `Automation` thing vs `D/slices.md:87` (`StateView`) | `StateView` (samples) |
+| Query rows | Older specification guidance promises authored result-row order | Screenplay v4.145.0 `specifications.md:307-319,426`: compare collections without regard to order, by read-model/key and exact count. Event ordering and collection-valued property ordering are separate |
 | 10 | `then` after `when append` | `D/specifications.md:67` "must match exactly the appended fact" vs `:232` and `:282` (v6: what followed it) | v6 text on the standalone tool; before v6, `:67` |
 | 11 | constraint collision across sources | `D/constraints.md:118` "cannot yet show" vs `D/specifications.md:77` (`for` lets a spec claim a value on another source) | `specifications.md` (newer) |
 | 12 | capture backtick `when` | opaque (`D/captures/grammar.md:321`) vs small portable grammar (`D/captures.md:94`) | both: storage versus binder |
 | 13 | clock boundary | resolved: an occurrence fires if due **after** the given clock and **at or before** the when clock (`D/specifications.md:282-284`; `Semantics/Execution/SemanticClock.cs`, `at > from && at <= to`). Given equal to when fires nothing, so the Screenplay sample `Samples/Commerce/Fulfillment/Shipping/ReleasePickingWave.play:20-22` (06:00 to 06:00, expecting `PickingWaveReleased`) is wrong | the code; never write given equal to when. A Screenplay issue for the sample is a candidate |
 | 14 | `$causedBy` | not evaluable (#4119), not ESM | showcase only |
 | 15 | literal keys | `key literal "global"` vs `key "global"` | both compile; prefer `literal` |
-| 16 | query admission | `D/queries.md:74` now says live, filtered, scoped and performer queries are not admitted | the binder also rejects collection queries and a missing `by`, which stay undocumented [probed] |
+| 16 | query admission | Older `D/queries.md:74` and historical binder probes rejected live/collection/filter queries | Current v4.145.0 `queries.md` admits collection/observable queries and caller-supplied equality filters (ESM v14 since 4.143.0). Context `from`, single-result filters, opaque scope/performer and composite `by` remain PLAY0268 with specific reasons; source/refusal details: read-surface `references/equality-filters.md` |
 | 17 | `@pii` | `D/concepts.md:3,33` "Chronicle applies `@pii` and `@sensitive` rules automatically" | the historical binder rejected any compliance attribute (PLAY0268); standalone 4.142.0 admits concept compliance as v13 (since 4.141.0) with narrower enum/identity/subject-lineage refusals (command-surface `references/compliance.md`). Keep protection; the pinned CLI still reports V3 blocked. `@sensitive` means an operational secret (`[Encrypted]` + `[NotAudited]`; Screenplay decision 0034); the historically probed tools (standalone 4.68.0, bundle 4.66.0) do **not** report `PLAY0515` (`@pii` from 4.69.1, `@sensitive` from 4.84.1): there only Chronicle catches either attribute on an event-source identifier, at build time of the generated code (CHR0034 for `@pii`, CHR0052 for `@sensitive`) |
 | 18 | read-model identity | `D/readmodels.md:32` "from the keyed query" | at 4.135.0 explicit `key` wins; else single-instance queries agree on one read-model `by` property; only with none and an admitted list query does conventional `*Id` inference run (collection-key exclusions: read-surface `references/named-keys.md`). Queryless views need explicit `key` |
 | 19 | `$strings` constraint messages | `D/constraints.md:31` vs `D/internationalization.md:55` | the compiler keeps the key; realization localizes |