@cratis/pi 7.66.0 → 7.68.0

package/package/corpus/product-sync.json

@@ -171,9 +171,9 @@
         }
       ],
       "synced": {
-        "version": "4.201.0",
+        "version": "4.204.0",
         "date": "2026-10-16",
-        "by": "Cratis/AI#733"
+        "by": "Cratis/AI#743"
       },
       "covers": {
         "skills": [
@@ -201,7 +201,7 @@
         ],
         "rules": []
       },
-      "notes": "Standalone 4.201.0 and byte-identical compiler contract pinned. Cratis/AI#733: the ui profile root template, shell options, appearance and new screens default (PLAY0788-PLAY0799, quick fix for the legacy layout line, ui-profiles MCP tool, 44 tools). Cratis/AI#735: chronological Date/DateTime ordering in command conditions and command/property literal validation (ESM v26), UTC tick precision and pre-rule offset validation; then matching remains ordinal. Source-checked Screenplay v4.199.0 commands, diagnostics, interoperability and specifications documentation plus decision 0087. Stage v4.127.1 still refuses v26 with STAGE-ESM-016 (stage-rendering.md and SemanticVersionFeatures.Supports); no render/runtime probe. Cratis/AI#576: prior mechanical compiler catch-up. Language batch #717/#722/#723/#724/#720/#728/#734 teaches atomic reaction batches (v22), described payload handlers (v23), portable linear matching, ordinal text rules (v24), protected command reads (v25), diagnostic arguments and event-source invokes mappings. Facts read at Screenplay v4.198.0 and introducing tags; Stage v4.127.0 admits exact v1-v21 and v23-v25 pairs but refuses v22/v26 and mixed pairs (STAGE-ESM-016), protected reads (044), atomic mode (043) and described handlers (STAGE-IMPL-002), even Stub mode. Stage text rules execute/render; no new renderer/runtime probe or Stage pin uplift. Cratis/AI#706: application navigation regions (module inherit, extend or override), toolbar slice buttons, blueprint template references and sample data packs in cratis-screenplay-ui-composition (references/application-shell.md), with the canonical shell vector and the rejection codes PLAY0710-PLAY0722 and PLAY0740-PLAY0765. Examples moved to the executable-state rules since 4.164: translator reactions in an Automation slice beside the Translate slice (PLAY0694) and the first record of a capture key appended with `when added`. Earlier: Standalone 4.164.0 and byte-identical compiler contract pinned. Cratis/AI#663: one origin per capture (PLAY0687). #668: executable no-event/redelivery v17. #684: concept query-argument validation in every version and query-error assertions v18. #681: executable refusal branches and refusal values v19. #666: proposal summary/severity counts and exact structural source proposals. Generated-concept rules select v20 with PLAY0688/0689 proofs and derived-matches repair; generated secrets and preview strategies remain refused. Release-baseline from-esm admission reads storedName. Standalone binding is not renderer admission: Stage 4.103.0 admits v1-v17 and v19; CLI 3.62.0 bundles Screenplay 4.159.0 / Stage 4.99.0 and renders through v16. Prior evidence remains unless superseded; no new renderer, Docker or browser probe."
+      "notes": "Standalone 4.204.0 and byte-identical compiler contract pinned. Cratis/AI#702 and #691: PLAY0690 reducer identity (Screenplay 4.170.0, native compiler only) and the screenplay.json validation gate (Screenplay 4.165.0; cratis screenplay validate reads it from CLI 3.65.0) are taught and probed against the 4.204.0 compiler. Cratis/AI#743: flat composite read-model keys (ESM v27): untyped projection key blocks on root from and remove with, equality-filter lists, single-instance by blocks and per-part fixtures, with PLAY0661/PLAY0662/PLAY0268 refusals checked against the 4.204.0 compiler; Stage origin/main still refuses v27 with STAGE-ESM-016 (stage-rendering.md); Stage v4.135.0 v26 admission (Host and executor run date comparisons; renderer STAGE-ESM-046) was source-checked for this sync; no render or runtime probe. Prior: Standalone 4.201.0 and byte-identical compiler contract pinned. Cratis/AI#733: the ui profile root template, shell options, appearance and new screens default (PLAY0788-PLAY0799, quick fix for the legacy layout line, ui-profiles MCP tool, 44 tools). Cratis/AI#735: chronological Date/DateTime ordering in command conditions and command/property literal validation (ESM v26), UTC tick precision and pre-rule offset validation; then matching remains ordinal. Source-checked Screenplay v4.199.0 commands, diagnostics, interoperability and specifications documentation plus decision 0087. Stage v4.127.1 still refuses v26 with STAGE-ESM-016 (stage-rendering.md and SemanticVersionFeatures.Supports); no render/runtime probe. Cratis/AI#576: prior mechanical compiler catch-up. Language batch #717/#722/#723/#724/#720/#728/#734 teaches atomic reaction batches (v22), described payload handlers (v23), portable linear matching, ordinal text rules (v24), protected command reads (v25), diagnostic arguments and event-source invokes mappings. Facts read at Screenplay v4.198.0 and introducing tags; Stage v4.127.0 admits exact v1-v21 and v23-v25 pairs but refuses v22/v26 and mixed pairs (STAGE-ESM-016), protected reads (044), atomic mode (043) and described handlers (STAGE-IMPL-002), even Stub mode. Stage text rules execute/render; no new renderer/runtime probe or Stage pin uplift. Cratis/AI#706: application navigation regions (module inherit, extend or override), toolbar slice buttons, blueprint template references and sample data packs in cratis-screenplay-ui-composition (references/application-shell.md), with the canonical shell vector and the rejection codes PLAY0710-PLAY0722 and PLAY0740-PLAY0765. Examples moved to the executable-state rules since 4.164: translator reactions in an Automation slice beside the Translate slice (PLAY0694) and the first record of a capture key appended with `when added`. Earlier: Standalone 4.164.0 and byte-identical compiler contract pinned. Cratis/AI#663: one origin per capture (PLAY0687). #668: executable no-event/redelivery v17. #684: concept query-argument validation in every version and query-error assertions v18. #681: executable refusal branches and refusal values v19. #666: proposal summary/severity counts and exact structural source proposals. Generated-concept rules select v20 with PLAY0688/0689 proofs and derived-matches repair; generated secrets and preview strategies remain refused. Release-baseline from-esm admission reads storedName. Standalone binding is not renderer admission: Stage 4.103.0 admits v1-v17 and v19; CLI 3.62.0 bundles Screenplay 4.159.0 / Stage 4.99.0 and renders through v16. Prior evidence remains unless superseded; no new renderer, Docker or browser probe."
     },
     {
       "id": "scene",

package/package/corpus/skills/cratis-screenplay-automations-and-translations/references/realization-and-gap-fill.md

@@ -23,7 +23,7 @@ rejected model renderable, and never claim a whole-application V5 from a subset.
 with `cratis-screenplay-render-and-gap-fill`.
 
 Application-root `reaction batches atomic` also blocks Stage delivery: v22
-refuses STAGE-ESM-016; mode in admitted v23–v25 refuses STAGE-ESM-043. Preserve the
+refuses STAGE-ESM-016; mode in admitted v23–v26 refuses STAGE-ESM-043. Preserve the
 per-occurrence/selected-branch batch boundary and independent invoked commands.
 Atomic appends do not prove redelivery deduplication or external exactly-once effects.
 

package/package/corpus/skills/cratis-screenplay-captures-and-reactions/references/atomic-batches-and-source-mappings.md

@@ -36,7 +36,7 @@ batch and unchanged read models with evaluator world/read-model assertions; earl
 accepted work can remain. `then no events` means accepted zero outcomes and cannot
 accompany `then error`. Do not invent a mixed success/error specification form.
 
-Stage refuses ESM v22 with STAGE-ESM-016. Even an admitted v23–v25 model carrying
+Stage refuses ESM v22 with STAGE-ESM-016. Even an admitted v23–v26 model carrying
 atomic mode is refused with STAGE-ESM-043 by renderer, Host and specification executor.
 Keep the declaration and report authorized gap-fill; do not promise a render date or
 strip atomicity to lower the version.

package/package/corpus/skills/cratis-screenplay-command-surface/SKILL.md

@@ -155,8 +155,9 @@ reads/concurrency cannot combine (PLAY0783). The Cratis C# renderer refuses prot
 semantic Host/executor support is separate.
 Uniqueness still uses a constraint; reference success is not target realization.
 
-Do not use `reads` to fetch data the caller could supply. A composite-key view's `by` block is
-`PLAY0268` (read-surface `references/named-keys.md`).
+Do not use `reads` to fetch data the caller could supply. A composite-key view's `by` block in a
+command read is `PLAY0271`, or `PLAY0781` ByParts under `command reads protected`
+(read-surface `references/named-keys.md`).
 
 ## `validate`
 
@@ -182,7 +183,7 @@ Requires Screenplay 4.199.0 (ESM v26; `screenplay --version`) for Date/DateTime
 comparisons; older binders report PLAY0268. Read [date comparisons](references/date-comparisons.md)
 when ordering a retention window with `require to >= from`, comparing instants
 across offsets, or rejecting offset-less inputs before rules. It covers admitted
-positions, PLAY0268/0273, ordinal `then` matching and Stage's v26 refusal.
+positions, PLAY0268/0273, ordinal `then` matching and Stage's STAGE-ESM-046 renderer refusal.
 
 **Rules whose logic is code.** A bare `rule <Name>` has no portable meaning (`PLAY0268`) and a bodied rule binds only as
 opaque code. Read [references/validate-rules.md](references/validate-rules.md) when a rule's logic must live in a `file`

package/package/corpus/skills/cratis-screenplay-command-surface/references/date-comparisons.md

@@ -3,6 +3,11 @@
 
 # Chronological command date comparisons
 
+## Contents
+
+- Retention window and rejection specifications
+- Missing-offset input rejection
+
 Requires Screenplay 4.199.0 (ESM v26; `screenplay --version`); older binders refuse date comparisons with PLAY0268. Upgrade the compiler without weakening the rule.
 
 Use `==`, `!=`, `>`, `>=`, `<` or `<=` with matching primitives: Date/Date or
@@ -27,13 +32,19 @@ Targets must enforce this before deserialization attaches a local offset, and
 preserve tick precision or refuse the comparison; JavaScript `Date` alone truncates
 precision. Client validators omit date ordering rules. Optional absent values still
 pass validation rules other than `not empty`; optional condition operands refuse.
+A .NET host that executes commands itself can reuse the reference evaluator's date semantics (Requires Screenplay 4.203.0): see [date comparison checks](https://github.com/Cratis/Screenplay/blob/main/Documentation/screenplay/date-comparison-checks.md) for `SemanticDateComparisons` and `SemanticConditionEvaluator`.
 
 PLAY0268 still refuses mixed Date/DateTime, `$context` operands (including
 `$context.occurred`), `today`, protected read paths, date rules on concepts and
 reaction `where`. A refused whole comparison reports only PLAY0268, without
 validating its literals. A `given clock` does not admit `today` or now.
-Stage refuses v26 with STAGE-ESM-016; standalone binding/reference execution is
-not rendering. Preserve the rule and route delivery to authorized gap-fill.
+Requires Stage 4.135.0 for v26 admission; older Stage refuses v26 with STAGE-ESM-016.
+The semantic Host and specification executor run the comparisons, including through
+concepts, and reject an offset-less DateTime input after authorization and before any
+rule. The renderer, legacy engines and default sandbox engine refuse them with
+STAGE-ESM-046, naming the property, and emit no artifacts or date validators. Standalone
+binding/reference execution is not rendering: preserve the rule and route delivery to
+authorized gap-fill.
 
 ## Retention window and rejection specifications
 

package/package/corpus/skills/cratis-screenplay-model-authoring/references/language-reference.md

@@ -272,9 +272,9 @@ See read-surface `references/named-keys.md` for the collection-key exclusion alg
 | Described handlers (ESM v23) | Pending implementation beside unconditional produces; payload-only contract, reached body Unsupported ImplementationBody; Stage STAGE-IMPL-002 even Stub mode |
 | Ordinal text rules (ESM v24) | contains/not contains/starts with/ends with on scalar non-enum text properties; quoted literals, not conditions; Stage semantic engines execute/render |
 | Protected command reads (ESM v25) | Root `command reads protected`; eligible read paths in requirements and production mappings, absence Validation, concurrent matching facts Conflict; Stage admits v25; Cratis C# rendering refuses STAGE-ESM-044, semantic Host/executor execute admitted reads with non-Error protected requirements refused STAGE-ESM-045 |
-| Chronological command dates (ESM v26) | Same-primitive Date/DateTime `==`, `!=`, `>`, `>=`, `<`, `<=` in require/produces-when (property or literal RHS) and command/property rules (literal RHS only). DateTime uses UTC ticks, participating offset-less inputs reject Validation before rules; then matching stays ordinal. Requires Screenplay 4.199.0 (`screenplay --version`); older binders refuse PLAY0268. Stage refuses v26 STAGE-ESM-016. Read command-surface `references/date-comparisons.md`. |
+| Chronological command dates (ESM v26) | Same-primitive Date/DateTime `==`, `!=`, `>`, `>=`, `<`, `<=` in require/produces-when (property or literal RHS) and command/property rules (literal RHS only). DateTime uses UTC ticks, participating offset-less inputs reject Validation before rules; then matching stays ordinal. Requires Screenplay 4.199.0 (`screenplay --version`); older binders refuse PLAY0268. The Stage Host and executor run v26 (older Stage refuses STAGE-ESM-016); the renderer and legacy engines refuse STAGE-ESM-046 (toolchain `language-admission.md`). Read command-surface `references/date-comparisons.md`. |
 | Current routing and actor admission | Sources/streams and command/specification routes bind and reference-execute as v8; reaction `runs as system role` supplies the invocation actor as v10. Whole-workspace binding determines executable availability; CLI/Stage realization remains separate |
-| Blocks binding (`PLAY0268`) | enum/identity compliance and events combining personal or explicitly subject-scoped secret values with explicit subject marks; a compiler that stops before v13 refuses all `pii`/`secret` concepts ("compliance attributes require portable data-subject semantics"), while v13 binds them and Stage renders protection; attached command `handler` (PLAY0035 beside productions; pending described intent instead binds v23), bare `rule <Name>`, read paths without protected opt-in or in unsupported positions such as `produces when`, date comparisons with mixed primitives, optional condition operands, `$context`, protected read paths or `today`, date rules on concepts or reaction `where`, `$context.tenant`/claims/roles/causation in `produces`, `$env` conditions, `file` constraints, unquoted `import` of an external contract, a read model with neither explicit `key` nor unambiguous query-based identity as described above (composite keys remain unadmitted), queries with context `from` sources (typed query context is unadmitted), single-result filters (collections only), `scoped to` (opaque scope), `performer` (opaque implementation) or composite `by` blocks; optional keyed and collection queries, including caller-supplied equality filters and observable delivery, bind, `$causedBy` and templates in projections |
+| Blocks binding (`PLAY0268`) | enum/identity compliance and events combining personal or explicitly subject-scoped secret values with explicit subject marks; a compiler that stops before v13 refuses all `pii`/`secret` concepts ("compliance attributes require portable data-subject semantics"), while v13 binds them and Stage renders protection; attached command `handler` (PLAY0035 beside productions; pending described intent instead binds v23), bare `rule <Name>`, read paths without protected opt-in or in unsupported positions such as `produces when`, date comparisons with mixed primitives, optional condition operands, `$context`, protected read paths or `today`, date rules on concepts or reaction `where`, `$context.tenant`/claims/roles/causation in `produces`, `$env` conditions, `file` constraints, unquoted `import` of an external contract, a read model with neither explicit `key` nor unambiguous query-based identity as described above (several key marks bind as v27; older binders refuse PLAY0268; toolchain `language-admission.md`), queries with context `from` sources (typed query context is unadmitted), single-result filters (collections only), `scoped to` (opaque scope), `performer` (opaque implementation) or a `by` block on a list query or non-optional single result; optional keyed and collection queries, including caller-supplied equality filters and observable delivery, bind, `$causedBy` and templates in projections |
 | Blocks binding (`PLAY0271`, legacy meaning) | Command reads without protected opt-in and `concurrency`; combined protected reads/concurrency is PLAY0783 |
 | Deferred (`PLAY0269`, information) | Screens, layouts, templates, forms, contributions, UI profiles, themes, behaviors and `on`/`uses` |
 | Metadata only (`PLAY0270`, information) | `domain`, `seed`, `persona`, trigger and other descriptions, and `file` provenance on declarations |

package/package/corpus/skills/cratis-screenplay-model-authoring/references/state-and-recovery.md

@@ -4,6 +4,7 @@ This reference holds identity-state, journal and recovery rules and the readines
 
 ## Preserve state and recover explicitly
 
+`.screenplay/` is tool-owned; the only authored file beside it is `screenplay.json`, the validation gate, which no MCP operation writes.
 Commit `.screenplay/identities.json` with the model. Only `apply` writes it;
 `open-workspace` never creates it; text-only models have none. Never delete or
 overwrite conflicting identity state, silently mint IDs on restart, or text-rename

package/package/corpus/skills/cratis-screenplay-model-review/references/checklist.md

@@ -180,7 +180,7 @@ Nebulit (`provenance.md`).
 | Id | Check | Evidence | Tier |
 |---|---|---|---|
 | H1 | Query shape follows the business view (list where people scan; lookup where they open one) | queries, screens | D |
-| H2 | Executable scope: a keyed `=> RM optional` query with `by` named like a read-model property, or a collection (`=> RM[]`, observable too) with caller-supplied `by` and/or equality filters. `from`, single-result filters, opaque `scoped to`/`performer` and composite `by` remain PLAY0268. The projection routes by the same identity (a `from` key or an event property, or `$eventSourceId`; `$eventSourceId` is not mandated). Filtered models: supported v14 equality filters render within the CLI bundle's ESM ceiling. Renderable scope only: Stage-specific identity/filter limits; keyed optional snapshot lookups and snapshot/observable collections render (Requires Stage 4.90.0 for snapshot lists; older renderers report `STAGE-ESM-010`). Check query concept-validation parity separately; primitive-argument targets answer absence instead of Validation | queries, projections | C (executable); C (render admission, renderable only) |
+| H2 | Executable scope: a keyed `=> RM optional` query with `by` named like a read-model property, or a collection (`=> RM[]`, observable too) with caller-supplied `by` and/or equality filters. `from`, single-result filters, opaque `scoped to`/`performer` and a list-query `by` block remain PLAY0268. A read model with several key parts binds as v27 (Requires Screenplay 4.204.0). The projection routes by the same identity (a `from` key or an event property, or `$eventSourceId`; `$eventSourceId` is not mandated). Filtered models: supported v14 equality filters render within the CLI bundle's ESM ceiling. Renderable scope only: Stage-specific identity/filter limits; keyed optional snapshot lookups and snapshot/observable collections render (Requires Stage 4.90.0 for snapshot lists; older renderers report `STAGE-ESM-010`). Check query concept-validation parity separately; primitive-argument targets answer absence instead of Validation | queries, projections | C (executable); C (render admission, renderable only) |
 | H3 | One builder per read model; projection `key` only on `from` | projections | C |
 | H4 | Screens show one actor's point of view; a form submits one command | screens, forms | D |
 

package/package/corpus/skills/cratis-screenplay-model-review/references/public-keys-and-routes.md

@@ -16,8 +16,10 @@ Add these to the element sweep, with evidence pinned to the declaration:
 - Is the view identity explicitly marked `key` or unambiguously inferred? Does each
   single-instance query/read supply every part exactly once, with compatible types,
   and do state fixtures contain all parts? Do PDL keys align with the view's key?
-  Composite view keys still refuse binding (PLAY0268); compilation
-  is not executable evidence. Read read-surface `references/named-keys.md`.
+  Flat composite view keys bind as ESM v27 (older binders refuse with PLAY0268;
+  compiler requirement in read-surface `references/named-keys.md`); compilation alone is not executable evidence. Does
+  each projection `from` and `remove with` name every part in an untyped `key` block?
+  Read read-surface `references/named-keys.md`.
 - Does a production override replace the whole source/stream/id route, rather than
   assume partial inheritance? Is its `for` destination still explicit and compatible?
   Are skipped production routes valid, so eager resolution cannot fail unexpectedly?

package/package/corpus/skills/cratis-screenplay-model-review/references/report-template.md

@@ -167,8 +167,8 @@ it. Verify the answer became a specification, a description or a project-owned
 decision record; a resolved note is not behavioral proof. Ask the owner to reanchor
 or resolve affected notes before source apply; resolution alone leaves an orphan.
 
-The optional `--open-questions fail` gate is a standalone `screenplay` option; the
-CLI-bundled compiler can lack it. Report it separately from V1–V5. Evidence: Screenplay
+The optional `--open-questions fail` gate exists on the standalone `screenplay` tool and on
+`cratis screenplay validate` (CLI 3.60.0 or later). Report it separately from V1–V5. Evidence: Screenplay
 `Documentation/screenplay/model-notes.md`,
 `Documentation/screenplay/mcp/reference.md`; source lines in the linked guide.
 

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/SKILL.md

@@ -75,7 +75,7 @@ or **critic** (P4-P5: strict, report first, fix in a separate batch).
 ## Verdicts (independent evidence, not a ladder)
 | Verdict | Meaning | Does not prove |
 |---|---|---|
-| V1 authorable | compiles, warnings as errors | meaning, binding |
+| V1 authorable | compiles, warnings as errors (declared gate) | meaning, binding |
 | V2 executable diagnostics | the executable model produces none | that specs run |
 | V3 binding-ready | the model binds | that any spec passes |
 | V4 reference specs run | engine, expected vs discovered | rendering or build health |

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/references/phases.md

@@ -109,7 +109,7 @@ phase, a decision important enough that a later reader could misread the model (
 ## P6 Accept (the user)
 - **Input**: the reviewed source identity.
 - **Carry-forward**: the accepted **source identity** (`verdicts-and-modes.md`).
-- **Commit at P6**: the accepted `.play` files and `.screenplay/identities.json` when present.
+- **Commit at P6**: the accepted `.play` files, `screenplay.json` (the authored validation gate) when the repository has one, and `.screenplay/identities.json` when present.
   The user commits, or explicitly authorizes the owning session to commit; the modeler never
   commits on its own. Run `cratis-screenplay-modeling-lifecycle`'s `scripts/model-first-status.mjs` to check acceptance, drafts and model changes in progress.
 - **Gate**: explicit acceptance and the model commit before P7-P9. After committing, recompute

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/references/stop-or-assume.md

@@ -64,7 +64,7 @@ consequential policy. Resolving is not implementation; a known refusal still
 needs `then error` or `then denied`. Reopen when the evidence ceases to answer it.
 
 Question gating is separate from V1: standalone Screenplay 4.144.0 has
-`--open-questions fail`; Cratis CLI 3.53.1 does not. Read toolchain
+`--open-questions fail`, and `cratis screenplay validate` has it from CLI 3.60.0. Read toolchain
 `references/verdicts.md` "Model notes gate" when a phase requires no open questions.
 Product evidence: Screenplay `Documentation/screenplay/model-notes.md`,
 `decisions/0045-model-notes-sidecar.md` and the model-authoring source table.

package/package/corpus/skills/cratis-screenplay-modeling-lifecycle/references/verdicts-and-modes.md

@@ -48,6 +48,11 @@ V5 rules:
 ## Commands (enough to check without loading the toolchain skill)
 - V1, preferred: `screenplay <model-folder> --warnaserror --no-color` (check "N file(s) compiled").
 - V1, fallback: `cratis screenplay validate <model-folder> --warnings-as-errors`.
+- The repository's gate file: V1 runs through a `screenplay.json` at the model root when one exists
+  (checks, warnings as errors, scope, open questions), so it is part of the verification contract.
+  Read the effective gate with `screenplay <model-folder> --print-gate`, name it on the V1 line, and
+  never bypass it with `--no-gate-file` without saying so. A refused file is `V1 not run: gate file
+  refused`, not a pass. Commands and precedence: toolchain `references/verdicts.md`.
 - V2, V3: the MCP workspace readiness and executable diagnostics.
 - Name tool and version on each line. A tool older than the model's constructs reports false
   failures; see the toolchain skill.
@@ -56,7 +61,7 @@ V5 rules:
 
 ```text
 Mode: executable   Source: <commit+digest from the source-identity helper> / ws <revision> cat <catalogRevision>
-V1 authorable:   pass (N files)                      | fail: PLAYnnnn at file:line - meaning
+V1 authorable:   pass (N files, gate: <screenplay.json or flags>) | fail: PLAYnnnn at file:line - meaning | not run: gate file refused
 V2 diagnostics:  none (executable model)             | n diagnostics | not run: <reason>
 V3 binding:      ready                               | blocked: PLAYnnnn ... | not run: design mode
 V4 specs:        12 expected / 12 discovered, 11 passed, 1 unsupported (route) | not run: no route

package/package/corpus/skills/cratis-screenplay-projections/SKILL.md

@@ -100,6 +100,7 @@ the executable model routes any event by it, and it is not a default for the
 | From-level block | indented `key invoiceId` inside the `from` |
 | Per event, several events | `from A key idA, B key idB, C` |
 | Composite | `key OrderKey` with indented `<property> = <expr>` parts |
+| Flat composite parts | untyped `key` block naming every key part (Requires 4.204.0; ESM v27) |
 | Literal (constant) | `key literal "site-stats"` — every event updates the **same** instance |
 | Children identity | `children lines identified by lineNumber` |
 | **Default** | **the event source id** — `from X` ≡ `from X key $eventSourceId` |
@@ -120,6 +121,10 @@ subscribe to it exactly like a standalone event. Verified extraction preserves
 canonical ESM and identities, so it changes no projection contract. Removing a
 payload property is different and requires consumer/persistence review.
 
+A read model with several flat `key` parts needs that block in every root `from` and
+`remove with` (`PLAY0661`/`PLAY0662`); other blocks and reducers there are `PLAY0268`
+(`references/pdl-grammar.md`).
+
 A second key on one `from` is error `PLAY0060`. A template expression in a
 composite key is error `PLAY0073`; an empty composite key is `PLAY0074`.
 
@@ -256,7 +261,9 @@ What the executable model does with it (ESM v3):
   rules is `PLAY0398`; two rules for one event is `PLAY0399`; a reducer with no
   bodies is rejected with a hint to write a projection.
 - The key is **always the event source id** — a reducer cannot route by an event
-  property. State starts at null; returning null deletes the instance.
+  property. State starts at null; returning null deletes the instance. A query
+  `by` another identity type warns `PLAY0690`; use a projection keyed on each `from`
+  or a join ([reducer identity](references/reducer-identity.md)).
 - The body is an opaque attachment identified by a content hash, never compiled
   or run by Screenplay. The reference runner cannot compute reducer state, so a
   specification that reads a reducer-built read model reports unsupported and

package/package/corpus/skills/cratis-screenplay-projections/references/pdl-grammar.md

@@ -6,6 +6,7 @@
 - Parser regexes
 - Diagnostics
 - Syntax that parses but means something else
+- Flat composite read-model keys
 - Worked examples
 
 Checked against `Documentation/screenplay/projections/{grammar,semantic-model,keys,variants}.md`
@@ -69,11 +70,11 @@ NestedBlock     = "nested", Ident, NL,
 ClearWithBlock  = "clear", "with", TypeRef, NL ;
 
 RemoveWithBlock = "remove", "with", TypeRef, [ "key", Expr ], NL,
-                  [ INDENT, [ ParentDecl ], DEDENT ] ;
+                  [ INDENT, [ CompositeKeyDecl ], [ ParentDecl ], DEDENT ] ;
 RemoveWithJoinBlock = "remove", "via", "join", "on", TypeRef, [ "key", Expr ], NL ;
 
 KeyDecl         = "key", Expr, NL ;
-CompositeKeyDecl= "key", TypeRef, [ "{" ], NL,
+CompositeKeyDecl= "key", [ TypeRef ], [ "{" ], NL,
                   INDENT, KeyPart, { NL, KeyPart }, DEDENT, [ "}", NL ] ;
 KeyPart         = Ident, "=", Expr ;
 
@@ -172,6 +173,45 @@ LiteralKeyword  = "literal", " ", Literal ;   (* parsed at the Expr level *)
 | `all` beside removals, `children` or `nested` | Binds, but the reference execution plan refuses it |
 | `join`, `children` or `remove via join` inside `nested` | Not wired by Chronicle's engine; binds, but the reference execution plan refuses it |
 
+## Flat composite read-model keys
+
+Requires Screenplay 4.204.0 (ESM v27; `screenplay --version`); older binders refuse a
+read model with two or more `key` marks with PLAY0268.
+
+A read model with several flat `key` properties takes an **untyped** `key` block (no
+type name) in each root `from` and `remove with`, naming every key part once as
+`<property> = <expr>`. It differs from the typed composite key above, which fills one
+single property of composite type.
+
+```screenplay excerpt
+projection PaymentTotals => PaymentTotals
+  no automap
+  from PaymentReceived
+    key
+      invoiceId = invoice
+      method = method
+    total = amount
+  remove with PaymentRemoved
+    key
+      invoiceId = invoice
+      method = method
+```
+
+The block applies to every event the `from` names. Part order does not matter; creating
+an instance writes each part to its property even with `no automap`, and a mapping that
+contradicts a part fails the projection. `remove with` deletes only the instance whose
+parts all match, and a later `from` recreates it.
+
+| Written | Code |
+| --- | --- |
+| `from` or `remove with` with no key, `key <expr>`, an inline `from A key x`, or `parent` | PLAY0661 |
+| A part missing from the block | PLAY0661 |
+| An unknown, repeated or ill-typed part, a non-simple expression, or a typed key block on a composite-keyed read model | PLAY0662 |
+| `join`, `children`, `remove via join`, `every`, `all`, `nested`, `clear with`, `variant`, or a reducer on the read model | PLAY0268 |
+
+The complete executable example, with queries and specifications, is in read-surface
+`references/named-keys.md`.
+
 ## Worked examples
 
 Each example is an excerpt: the events and read models it names are declared

package/package/corpus/skills/cratis-screenplay-projections/references/reducer-identity.md

@@ -0,0 +1,88 @@
+# Reducer instance identity (PLAY0690)
+
+A reducer instance is keyed by the **event-source id** of the event it reduces. A reducer cannot be re-keyed by a payload value, a read-model `key` or a stream partition. A view that must be looked up by anything other than that event-source identity needs a projection.
+
+Requires Screenplay 4.170.0 or later (`screenplay --version`) for PLAY0690; an older compiler does not report it, so a clean run there does not clear the mismatch.
+
+## What PLAY0690 reports
+
+A warning (it fails `--warnaserror`) in two cases:
+
+- A reducer-backed query returns one instance `by` a scalar whose nominal type differs from the identity type of an observed event whose producers are all known, for example `by month Month` while the events live on `ResourceId` streams.
+- The producers of one reducer's events use several different nominal identity types, so no single identity can key the instances. One reducer warning replaces the repeated query warnings.
+
+This example reports PLAY0690 on `ByMonth`: the instances follow `ResourceId`, not `Month`.
+
+```screenplay expect PLAY0690
+concept ResourceId : String
+concept Month : String
+module Work
+  feature Reporting
+    slice StateView Totals
+      event Recorded
+        month Month
+        hours Decimal
+      readmodel Totals
+        month Month key
+        hours Decimal
+      reducer Fold => Totals
+        on Recorded
+          ```csharp
+          return context.State is null
+              ? new(context.Event.month, context.Event.hours)
+              : context.State with { hours = context.State.hours + context.Event.hours };
+          ```
+      query ByMonth => Totals optional
+        by month Month
+    slice StateChange Record
+      command Record
+        resource ResourceId identifier
+        month Month
+        hours Decimal
+        produces Recorded
+          for resource
+          month = month
+          hours = hours
+```
+
+## Fix
+
+To aggregate by a payload value, replace the reducer with a projection that declares a property key on each `from`. The read-model `key` and the `from` key then agree, and the warning is gone:
+
+```screenplay
+concept ResourceId : String
+concept Month : String
+module Work
+  feature Reporting
+    slice StateView Totals
+      event Recorded
+        month Month
+        hours Decimal
+      readmodel Totals
+        month Month key
+        hours Decimal
+      projection Fold => Totals
+        from Recorded key month
+          add hours by hours
+      query ByMonth => Totals optional
+        by month Month
+    slice StateChange Record
+      command Record
+        resource ResourceId identifier
+        month Month
+        hours Decimal
+        produces Recorded
+          for resource
+          month = month
+          hours = hours
+```
+
+When instances already exist under their own identity and another event only enriches them, use a [join](joins.md) instead: it updates the existing instances and never creates one. There is no automatic repair from a reducer to a projection.
+
+## What the check compares
+
+- It compares declared **nominal** identity types (`Month` and `ResourceId` differ even though both wrap text), never property names, primitive backing, stream ids or fixture values. Equal types do not prove equal runtime ids, and distinct concepts can hold equal values, so a finding is a likely modeling mistake rather than proof.
+- It compares only where the producer is known: a command production with `for`, an implicit or generated command identifier, and a reaction production with an explicit `for`. All producers across the application count, after source and stream filters and production-route overrides.
+- Not compared (unknown provenance): a plain `produces` without `for` (it lands on an identity the request allocates), a reaction without `for`, captures, seeds and code. An unknown producer suppresses the query comparison for that event.
+- Collection queries, performer-served or unbuilt views, projection-backed views and public-event reducer targets do not trigger it.
+- It is a native C# compiler diagnostic: the standalone tool, `cratis screenplay validate` (when its bundled compiler is new enough) and MCP diagnostics report it. The TypeScript compiler and editors only pass through findings the host supplies, so a clean editor is not evidence.

package/package/corpus/skills/cratis-screenplay-projections/verification.json

@@ -16,6 +16,7 @@
     { "kind": "skill-contains", "value": "**routes nothing** (`PLAY0381`)" },
     { "kind": "skill-contains", "value": "The key is **always the event source id**" },
     { "kind": "skill-contains", "value": "**A join never creates an" },
-    { "kind": "skill-contains", "value": "Inline code uses a tagged fence" }
+    { "kind": "skill-contains", "value": "Inline code uses a tagged fence" },
+    { "kind": "skill-contains", "value": "PLAY0690", "file": "references/reducer-identity.md" }
   ]
 }

package/package/corpus/skills/cratis-screenplay-read-surface/SKILL.md

@@ -54,11 +54,13 @@ identity (all such queries must agree). Only with no single-instance identifier
 and an admitted list query does the binder infer an unambiguous `*Id`; queryless
 read models need an explicit `key`. See named keys below for collection-key exclusions.
 One explicit key binds byte-identically to equivalent inference. Several marks
-form a composite key, supplied by name in query/read
-`by` blocks. Composite keys and block queries remain
-**authoring-only** (PLAY0268); the scalar optional snapshot shape binds.
-Read [named keys](references/named-keys.md) for complete examples, trigger/command
-reads, all-parts fixtures, PLAY0660–0662 and command-read-only PLAY0661 repair.
+form a flat composite key: an optional single-instance query names every part in a
+`by` block, a list query narrows with equality filters, and fixtures state every part.
+Requires Screenplay 4.204.0 (ESM v27; `screenplay --version`); older binders refuse
+several key marks with PLAY0268. A list query over such a read model cannot use a
+`by` block (PLAY0268).
+Read [named keys](references/named-keys.md) for one complete executable example,
+trigger/command reads, all-parts fixtures, PLAY0660–0662 and command-read-only PLAY0661 repair.
 A `=>` target resolving to an event is an event-target builder, not a read model;
 keep event and read-model names distinct (see projections' public-event targets).
 
@@ -78,7 +80,7 @@ query ListInvoices => InvoiceListReadModel[]
 **Name the compiler and renderer.** Optional keyed queries and collection queries
 bind, including `observable`. Caller-supplied equality
 filters on collections bind as ESM v14; `from`, single-result filters, `scoped to`,
-`performer` and composite `by` remain PLAY0268, each with its reason. Read
+`performer` and a `by` block on a list query (or on a non-optional single result) remain PLAY0268, each with its reason. Read
 [equality filters](references/equality-filters.md) for the admitted shape, a complete
 compiled specification model and the Stage/CLI ceilings. Keep a list the domain needs.
 
@@ -177,13 +179,17 @@ primitive/concept/enum properties, same nominal type ignoring optionality, no
 `from`, distinct names not repeating `by`. `by` and supplied filters AND together;
 optional filters may be omitted, but supplied null is refused. PLAY0268 still
 rejects context sources, single-result filters, opaque scope/performer and
-composite `by`; a single non-optional result remains unadmitted too.
+a `by` block on a list query (or on a non-optional single result).
 Authorization runs before lookup, ANDed with module/feature gates; policies see
 only `by`, never filters. Pin denial with `given caller` and `then denied`.
 Specs pass `by` and filters by name (PLAY0468 for unknown, repeated or missing
 required arguments); collection results match by read model/key regardless of
 row order. Details and renderer limits: [equality filters](references/equality-filters.md).
 
+A reducer-built view is keyed by event-source id, so a single-instance `by` of another
+nominal type warns `PLAY0690`. Rebuild it as a projection keyed on each `from`: projections
+[reducer identity](../cratis-screenplay-projections/references/reducer-identity.md).
+
 ## `screen` — three levels
 
 The examples below are excerpts: each screen sits in a slice, and the queries,
@@ -301,6 +307,7 @@ binding failures are errors.
 - [ ] Every authorized query has a specification with `given caller`, including a
       `then denied` case.
 - [ ] Each read model has exactly one builder and every field traces to an event.
+- [ ] A reducer-built view's `by` type matches its events' event-source identity (`PLAY0690`).
 - [ ] No screen reference is left ambiguous or unresolved.
 - [ ] Every UI binding that consumes screen data (component context, toolbar
       parameter, dialog input, outlet route) has a source in the screen contract

package/package/corpus/skills/cratis-screenplay-read-surface/references/equality-filters.md

@@ -40,7 +40,7 @@ Each binding refusal reports PLAY0268 with its query/filter and reason:
 | Filter on a single-result query | Equality filters are admitted only for collections |
 | `scoped to` | The named scope has no portable executable scope contract |
 | `performer` | Query implementation code is opaque, not a portable declarative lookup |
-| Composite `by` block | Multipart lookup admission remains deferred (Screenplay#599) |
+| `by` block on a collection query | A composite lookup is admitted only for an optional single-instance query; narrow a list by composite-keyed read-model parts with equality filters instead |
 | Filter on a collection/composite property, missing property or mismatched nominal type | The v14 filter contract requires a same-named scalar primitive, concept or enum property with the same type |
 
 Keep those intents when the domain needs them; never drop a context source or