@cratis/pi 7.70.0 → 7.71.0

package/package/corpus/hooks/scripts/cratis-check-pr.mjs

@@ -79,16 +79,23 @@ function originRepository(cwd) {
     return repositoryName(git(['remote', 'get-url', 'origin'], cwd));
 }
 
-function targetCallers(repository, cwd) {
+function targetCallers(repository, cwd, warn) {
     if (cwd && repository?.toLowerCase() === originRepository(cwd)?.toLowerCase()) return callers(cwd);
-    let files;
-    try { files = JSON.parse(gh(['api', `repos/${repository}/contents/.github/workflows`])); }
-    catch (error) {
-        if (/HTTP 404/.test(error.message)) return [];
+    let listed = false;
+    try {
+        const files = JSON.parse(gh(['api', `repos/${repository}/contents/.github/workflows`]));
+        listed = true;
+        return files.filter(file => file.type === 'file' && /\.ya?ml$/.test(file.name)).flatMap(file =>
+            workflowCallers(gh(['api', '-H', 'Accept: application/vnd.github.raw', `repos/${repository}/contents/${file.path}`])));
+    } catch (error) {
+        // Only a missing workflows directory means no opt-in; a failed file fetch is an unknown.
+        if (!listed && /HTTP 404/.test(error.message)) return [];
+        if (/^Cratis\/[^/]+$/i.test(repository)) {
+            warn(`Could not determine release-workflow opt-in for ${repository} (${error.message}); checking against bundled reviewed rules`);
+            return [{ name: 'verify-release-notes', ref: reviewedRulesRef }];
+        }
         throw new Error(`Could not determine release-workflow opt-in for ${repository}: ${error.message}`);
     }
-    return files.filter(file => file.type === 'file' && /\.ya?ml$/.test(file.name)).flatMap(file =>
-        workflowCallers(gh(['api', '-H', 'Accept: application/vnd.github.raw', `repos/${repository}/contents/${file.path}`])));
 }
 
 function optedIn(cwd) {
@@ -126,7 +133,7 @@ function rules(warn, repositoryCallers) {
         renameSync(temporary, file);
         return file;
     } catch (error) {
-        if (floating) {
+        if (floating || ref === reviewedRulesRef) {
             const bundled = fileURLToPath(new URL('./cratis-release-notes-reviewed.cjs', import.meta.url));
             new Script(readFileSync(bundled, 'utf8'));
             warn(`Could not fetch release-note rules at ${ref}; using bundled reviewed ${reviewedRulesRef}. ${error.message}`);
@@ -193,7 +200,7 @@ function check(argv, repositoryCallers, lookupOptions) {
     // The release-intent check above still applies to bot-authored pull requests.
     if (author === 'dependabot[bot]') return 0;
     const base = values.base || pull?.baseRefName || defaultBranch;
-    const file = rules(warn, repositoryCallers || targetCallers(repository, process.cwd()));
+    const file = rules(warn, repositoryCallers || targetCallers(repository, process.cwd(), warn));
     if (!file) return 3;
     const env = { PATH: process.env.PATH, HOME: homedir(), LANG: 'C.UTF-8',
         PR_BODY: body, PR_LABELS: JSON.stringify([...labels]),
@@ -369,7 +376,7 @@ function hook() {
             throw new Error('Use a literal directory before gh pr create/edit.');
         }
         if (!/^Cratis\/[^/]+$/i.test(repository)) continue;
-        const repositoryCallers = targetCallers(repository, knownDirectory ? cwd : undefined);
+        const repositoryCallers = targetCallers(repository, knownDirectory ? cwd : undefined, message => warning(`Warning: ${message}`));
         if (!repositoryCallers.length) continue;
         if (!knownDirectory) throw new Error('Use a literal directory before gh pr create/edit.');
         const args = [];

package/package/corpus/skills/cratis-screenplay-command-surface/references/protected-reads.md

@@ -98,6 +98,23 @@ Execution orders authorization → property rules → required reads → derive/
 message `<ReadModel> '<key>' does not exist.` before evaluating requirements or
 mappings. Property-rule rejection therefore wins over absence.
 
+A read key the event store refuses is the same outcome as missing state. Refused
+shapes: empty, whitespace-only, exactly `*`, containing `#` anywhere, or with
+leading or trailing whitespace. A composite key is refused when any part is. The
+check runs before the world is consulted, so such a key rejects with
+`<ReadModel> '<key>' does not exist.` even when an instance is stored at that key.
+Only protected reads change: a command identifier or any other use of the same
+value keeps its meaning. Model read keys as concepts with rules, or as generated
+identifiers, so refused shapes cannot reach a protected read; a specification that
+uses such a key expects the missing-state rejection.
+
+Requires Screenplay 4.209.0 (`screenplay --version`) for this outcome in
+`screenplay test`; older compilers answer missing state or, when an instance is
+stored at the key, accept the read. A rendered Arc application or Stage host that
+does not map the store's refusal answers an error response for such a key (a
+server error, or a dependency failure for an empty key) instead of the rejection,
+which is one more reason to keep refused shapes out of read keys.
+
 Decide records the unfiltered fact-log boundary, read key and handled event types.
 A matching fact after that boundary makes commit return Conflict /
 DecisionStateChanged with no command facts, including publications. Irrelevant

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cratis/pi",
-  "version": "7.70.0",
+  "version": "7.71.0",
   "description": "Configuration-aware Cratis AI integration for Pi",
   "type": "module",
   "files": [