@cratis/pi 7.69.1 → 7.70.1

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/references/sandbox-and-specrunner.md

@@ -32,18 +32,18 @@ port `35000` (a plain `http://` request gets no reply; the certificate is self-s
 The entrypoint takes a model file or folder, default `/eventmodel`. Deployment settings
 come from `cratis-stage.json` (path override `STAGE_CONFIG`), not `appsettings.json`.
 Implementation `file` references stay symbolic: the sandbox never opens them.
-`cratis run` has no `--engine` option; engine selection is the environment setting below.
+Requires Cratis CLI 3.64.0 for `--engine`; from CLI 3.73.0 `cratis run` runs the `semantic` engine by default and always passes `Stage__Runtime__Engine`, while older CLIs default to `eventmodel`. The EventModel engine is legacy and refuses newer constructs (for example v27 composite keys); do not rely on it. Running the image directly, the environment setting below selects the engine.
 
 Two engines:
 
 | Engine | Selected by | Behaviour |
 | --- | --- | --- |
-| EventModel (default) | nothing | Commands evaluate their modeled `produces` mappings, append the facts to Chronicle and echo the payload. **Only part of modeled validation is enforced, and no authorization.** See [What the default engine enforces](#what-the-default-engine-enforces). It registers Chronicle projections. Named event sources, streams and routes are refused with `STAGE-ESM-030` (`/stage/status` reports `state: "unsupported"` and `/api/**` answers 501), so a routed model does not run here |
-| Semantic | `Stage__Runtime__Engine=semantic` | Evaluates validation, requirements, authorization, conditional production and constraints before accepting a command; appends one batch; denied is HTTP 403, validation or constraint failure HTTP 400, an unsupported command HTTP 501. `GET /stage/semantic/admission` lists what is admitted. Executes routes and event-triggered reactions (including `where`, `runs as`, `from`, productions, invocations and cascades), settling them with the initiating command in one batch. Refuses a model it cannot execute (`state: "unsupported"`, `/api/**` returns 501). Read models are in-process, not Chronicle projections in the Workbench; the history is unbounded, so use it for short sessions |
+| EventModel (legacy; the image's default) | nothing | Commands evaluate their modeled `produces` mappings, append the facts to Chronicle and echo the payload. **Only part of modeled validation is enforced, and no authorization.** See [What the EventModel engine enforces](#what-the-eventmodel-engine-enforces). It registers Chronicle projections. Named event sources, streams and routes are refused with `STAGE-ESM-030` (`/stage/status` reports `state: "unsupported"` and `/api/**` answers 501), so a routed model does not run here |
+| Semantic (`cratis run`'s default) | `Stage__Runtime__Engine=semantic` | Evaluates validation, requirements, authorization, conditional production and constraints before accepting a command; appends one batch; denied is HTTP 403, validation or constraint failure HTTP 400, an unsupported command HTTP 501. `GET /stage/semantic/admission` lists what is admitted. Executes routes and event-triggered reactions (including `where`, `runs as`, `from`, productions, invocations and cascades), settling them with the initiating command in one batch. Refuses a model it cannot execute (`state: "unsupported"`, `/api/**` returns 501). Read models are in-process, not Chronicle projections in the Workbench; the history is unbounded, so use it for short sessions |
 
 Do not read an answering sandbox as evidence of correct authorization. Callers are
 built from unsigned `x-ms-client-principal` headers that anyone who can reach the host can
-forge, the default engine enforces no authorization, and the session should stay private (loopback
+forge, the EventModel engine enforces no authorization, and the session should stay private (loopback
 ports or an authenticated proxy). Rendered applications use the renderer's admitted Arc
 authorization instead, which is the thing to test for production behavior (Debug tests
 of a render, [render-example.md](render-example.md)).
@@ -68,12 +68,12 @@ registration failure if the model was admitted.
 The semantic Host/specification executor admits v24 literal `contains`, `not contains`,
 `starts with` and `ends with` rules as ordinal UTF-16 comparisons; absence passes.
 Empty operands pass contains/starts/ends and fail not-contains for present text.
-The legacy EventModel default engine drops these rules: its list below is not evidence
+The legacy EventModel engine drops these rules: its list below is not evidence
 of semantic support. Generated applications render these comparisons without regex.
 
-### What the default engine enforces
+### What the EventModel engine enforces
 
-When a command that declares at least one `produces` executes, the default engine
+When a command that declares at least one `produces` executes, the EventModel engine
 refuses it with a validation result naming the property, and appends nothing, if:
 
 - a property the command's schema requires is missing or `null`;
@@ -99,7 +99,7 @@ Everything else passes unchecked:
 - every check on a command without `produces`, and the `/validate` route, which runs none
   of these checks.
 
-A refusal or an acceptance from the default engine therefore proves nothing beyond the
+A refusal or an acceptance from the EventModel engine therefore proves nothing beyond the
 lists above. Use the semantic engine, or Debug tests of a render, for
 evidence about the rest.
 
@@ -108,7 +108,7 @@ evidence about the rest.
 Requires Stage 4.129.0 for semantic Host and specification-executor protected reads;
 older engines refuse them with `STAGE-ESM-044`. The default EventModel Host and
 structural runner still refuse the preamble with `STAGE-ESM-044`; the structural
-runner exits `1` without a report. The Cratis C# renderer also retains `-044`:
+runner exits `1` without a report. The Cratis renderer renders protected reads only from Stage 4.138.0 and refuses unpreservable shapes with `-044`:
 executing a model here does not make it renderable.
 
 After authorization and property/concept rules, each declared read must exist at

package/package/corpus/skills/cratis-stage-rendering-and-sandbox/verification.json

@@ -21,10 +21,10 @@
     { "kind": "skill-contains", "value": "`Customizations/`" },
     { "kind": "skill-contains", "value": "`Stage__Runtime__Engine=semantic`" },
     { "kind": "skill-contains", "value": "`--engine semantic`" },
-    { "kind": "skill-contains", "value": "`cratis run` has no `--engine` option", "file": "references/sandbox-and-specrunner.md" },
+    { "kind": "skill-contains", "value": "Requires Cratis CLI 3.64.0 for `--engine`", "file": "references/sandbox-and-specrunner.md" },
     { "kind": "skill-contains", "value": "the environment setting below", "file": "references/sandbox-and-specrunner.md" },
     { "kind": "skill-contains", "value": "fresh in-memory Chronicle log per specification", "file": "references/sandbox-and-specrunner.md" },
-    { "kind": "skill-contains", "value": "exact ESM v1–v21 and v23–v26 pairs" },
+    { "kind": "skill-contains", "value": "exact ESM v1–v21 and v23–v27 pairs" },
     { "kind": "skill-contains", "value": "STAGE-ESM-044" },
     { "kind": "skill-contains", "value": "STAGE-IMPL-002" },
     { "kind": "skill-contains", "value": "all-Proven rules permit unpinned rendered", "file": "references/admission.md" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.69.1",
+  "version": "7.70.1",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [