capdag 1.226.626 → 1.240.679

package/capdag.test.js

@@ -89,6 +89,19 @@ function assertThrowsMediaUrn(fn, expectedErrorCode, message) {
   }
 }
 
+function assertThrowsMessage(fn, expectedMessage, message) {
+  try {
+    fn();
+  } catch (error) {
+    assert(
+      typeof error.message === 'string' && error.message.includes(expectedMessage),
+      `${message}: expected error containing ${JSON.stringify(expectedMessage)}, got ${JSON.stringify(error.message)}`
+    );
+    return;
+  }
+  throw new Error(`Assertion failed: ${message}: expected function to throw`);
+}
+
 function runTest(name, fn) {
   try {
     const result = fn();
@@ -126,14 +139,14 @@ function test6204_Urn(tags) {
 // Helper to create a Cap for testing
 function makeCap(urnString, title) {
   const capUrn = CapUrn.fromString(urnString);
-  return new Cap(capUrn, title, 'test', title);
+  return new Cap(capUrn, title, ['test'], title);
 }
 
 // Helper to create caps with specific in/out media URNs for graph testing
 function makeGraphCap(inUrn, outUrn, title) {
   const urnString = `cap:in="${inUrn}";convert;out="${outUrn}"`;
   const capUrn = CapUrn.fromString(urnString);
-  return new Cap(capUrn, title, 'convert', title);
+  return new Cap(capUrn, title, ['convert'], title);
 }
 
 // ============================================================================
@@ -715,7 +728,7 @@ function test050_matchingSemanticsDirectionMismatch() {
   assert(!cap.accepts(request), 'Incompatible direction types should not match');
 }
 
-// TEST890: Semantic direction matching - generic provider matches specific request
+// TEST890: Semantic direction matching - generic candidate matches specific request
 function test890_directionSemanticMatching() {
   // Generic wildcard cap accepts specific pdf request
   const genericCap = CapUrn.fromString(
@@ -1271,7 +1284,7 @@ function test116_capArgConstructors() {
 // TEST150: JSON roundtrip
 function test150_capManifestJsonSerialization() {
   const capUrn = CapUrn.fromString(test6204_Urn('extract;target=metadata'));
-  const cap = new Cap(capUrn, 'Extract Metadata', 'extract-metadata');
+  const cap = new Cap(capUrn, 'Extract Metadata', ['extract-metadata']);
   cap.addArg(new CapArg('media:ext=pdf', true, [new ArgSource({ stdin: 'media:ext=pdf' })]));
   cap.addArg(new CapArg(
     'media:chunk-size;enc=utf-8;numeric',
@@ -1409,14 +1422,14 @@ function test6208_CapFabGetOutgoingConformsToMatching() {
 // the renderer colours/groups edges by provenance in browse mode.
 function test6224_CapFabDistinctRegistryNames() {
   const graph = new CapFab();
-  graph.addCap(makeGraphCap('media:ext=pdf', 'media:enc=utf-8', 'PDF to Text'), 'providers');
+  graph.addCap(makeGraphCap('media:ext=pdf', 'media:enc=utf-8', 'PDF to Text'), 'bundled-cartridges');
   graph.addCap(makeGraphCap('media:enc=utf-8', 'media:embedding-vector', 'Embed'), 'cartridges');
 
   const edges = graph.getEdges();
   assertEqual(edges.length, 2, 'Two caps must produce two edges');
 
   const names = new Set(edges.map(e => e.registryName));
-  assert(names.has('providers'), 'providers registry name must be preserved');
+  assert(names.has('bundled-cartridges'), 'bundled-cartridges registry name must be preserved');
   assert(names.has('cartridges'), 'cartridges registry name must be preserved');
 }
 
@@ -1719,7 +1732,7 @@ function test6242_JS_resolveMediaUrnFromSpecs() {
 // TEST6246: J s cap j s o n serialization
 function test6246_JS_capJSONSerialization() {
   const urn = CapUrn.fromString(test6204_Urn('test'));
-  const cap = new Cap(urn, 'Test Cap', 'test_command');
+  const cap = new Cap(urn, 'Test Cap', ['test_command']);
   cap.arguments = {
     required: [{ name: 'input', media_urn: MEDIA_STRING }],
     optional: []
@@ -1742,7 +1755,7 @@ function test6246_JS_capJSONSerialization() {
 // surface as failures here.
 function test6249_JS_capDocumentationRoundTrip() {
   const urn = CapUrn.fromString(test6204_Urn('documented'));
-  const cap = new Cap(urn, 'Documented Cap', 'documented');
+  const cap = new Cap(urn, 'Documented Cap', ['documented']);
   const body = '# Documented Cap\r\n\nDoes the thing.\n\n```bash\necho "hi"\n```\n\nSee also: \u2605\n';
   cap.setDocumentation(body);
   assertEqual(cap.getDocumentation(), body, 'Setter must store the body verbatim');
@@ -1764,7 +1777,7 @@ function test6249_JS_capDocumentationRoundTrip() {
 // (which has no null sentinel) and pollute generated JSON.
 function test6253_JS_capDocumentationOmittedWhenNull() {
   const urn = CapUrn.fromString(test6204_Urn('undocumented'));
-  const cap = new Cap(urn, 'Undocumented Cap', 'undocumented');
+  const cap = new Cap(urn, 'Undocumented Cap', ['undocumented']);
   assertEqual(cap.getDocumentation(), null, 'Default documentation must be null');
 
   const json = cap.toJSON();
@@ -1854,8 +1867,10 @@ function test6269_JS_mediaDefConstruction() {
 // to assert on. Tests that need an empty channel use literals inline.
 const sampleRegistry = {
   schemaVersion: '5.0',
+  registryVersion: 1,
   lastUpdated: '2026-02-07T16:48:28Z',
   registryUrl: 'https://test.example/manifest',
+  fabricRegistryUrl: 'https://fabric.test',
   channels: {
     release: { cartridges: {
     pdfcartridge: {
@@ -2089,7 +2104,7 @@ function test323_cartridgeRepoServerValidateRegistry() {
   // Missing channels object
   threw = false;
   try {
-    new CartridgeRepoServer({schemaVersion: '5.0', registryUrl: 'https://test.example/manifest'});
+    new CartridgeRepoServer({schemaVersion: '5.0', registryVersion: 1, fabricRegistryUrl: 'https://fabric.test', registryUrl: 'https://test.example/manifest'});
   } catch (e) {
     threw = true;
     assert(e.message.includes('channels'), 'Should reject missing channels');
@@ -2099,7 +2114,7 @@ function test323_cartridgeRepoServerValidateRegistry() {
   // Missing one of the two required channels
   threw = false;
   try {
-    new CartridgeRepoServer({schemaVersion: '5.0', registryUrl: 'https://test.example/manifest', channels: {release: {cartridges: {}}}});
+    new CartridgeRepoServer({schemaVersion: '5.0', registryVersion: 1, fabricRegistryUrl: 'https://fabric.test', registryUrl: 'https://test.example/manifest', channels: {release: {cartridges: {}}}});
   } catch (e) {
     threw = true;
     assert(e.message.includes('nightly'), 'Should require nightly channel');
@@ -2581,7 +2596,9 @@ function test1874_registryUrlFromBuildEnvRejectsEmptyString() {
 function discoveryInstallFixture(root, slug, channelFolder, name, version, cartridgeJson, entry) {
   const fs = require('fs');
   const path = require('path');
-  const dir = path.join(root, slug, channelFolder, name, version);
+  // {slug}/v1/{channel}/{name}/{version} — the version level pins to the host
+  // registry version (the tests construct identities at cartridgeRegistryVersion 1).
+  const dir = path.join(root, slug, 'v1', channelFolder, name, version);
   fs.mkdirSync(dir, { recursive: true });
   if (cartridgeJson !== null && cartridgeJson !== undefined) {
     fs.writeFileSync(path.join(dir, 'cartridge.json'), cartridgeJson);
@@ -2634,7 +2651,7 @@ async function test1875_scanAllReachesBothDevAndRegistrySlugs() {
     const url = 'https://cartridges.example.com/manifest';
     const rslug = slugForSync(url);
     // Host baked for a DIFFERENT registry than the on-disk registry cartridge.
-    const host = new DiscoveryIdentity({ channel: 'nightly', registryUrl: 'https://other.example.com/manifest', fabricManifestVersion: 1 });
+    const host = new DiscoveryIdentity({ channel: 'nightly', registryUrl: 'https://other.example.com/manifest', fabricManifestVersion: 1, cartridgeRegistryVersion: 1 });
     discoveryInstallFixture(root, 'dev', 'nightly', 'devcart', '1.0.0', discoveryDevCartridgeJson('nightly', 1), 'cart');
     discoveryInstallFixture(root, rslug, 'nightly', 'regcart', '1.0.0', discoveryRegistryCartridgeJson(url, 'nightly', 1), 'cart');
     const out = await discoverCartridges(root, host);
@@ -2658,7 +2675,7 @@ async function test1876_otherChannelSubtreeIsSkipped() {
     const url = 'https://cartridges.example.com/manifest';
     const rslug = slugForSync(url);
     discoveryInstallFixture(root, rslug, 'release', 'regcart', '1.0.0', discoveryRegistryCartridgeJson(url, 'release', 1), 'cart');
-    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1 }));
+    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1, cartridgeRegistryVersion: 1 }));
     assertEqual(out.length, 0, 'a release-only slug must be invisible to a nightly host');
   } finally {
     discoveryRemoveRoot(root);
@@ -2675,7 +2692,7 @@ async function test1877_registryCartridgeUnderWrongSlugIsBadInstall() {
     const wrongSlug = slugForSync('https://somewhere-else.example.com/manifest');
     const json = discoveryRegistryCartridgeJson(url, 'nightly', 1);
     discoveryInstallFixture(root, wrongSlug, 'nightly', 'cart', '1.0.0', json, 'cart');
-    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1 }));
+    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1, cartridgeRegistryVersion: 1 }));
     discoveryExpectIncompatible(out, CartridgeAttachmentErrorKind.BAD_INSTALLATION);
   } finally {
     discoveryRemoveRoot(root);
@@ -2683,11 +2700,11 @@ async function test1877_registryCartridgeUnderWrongSlugIsBadInstall() {
 }
 
 // TEST1878: a cartridge marked `installed_from: bundle` with no baked hash in
-// BUNDLED_PROVIDER_HASHES (empty in this mirror) is rejected as BadInstallation
+// BUNDLED_CARTRIDGE_HASHES (empty in this mirror) is rejected as BadInstallation
 // — the bundled-integrity gate fires before the probe. Non-macOS only: on macOS
 // the baked-hash path is intentionally absent (OS code-signature is the guard),
-// so a bundled provider is accepted there and would instead end at the probe.
-async function test1878_bundledProviderWithoutBakedHashIsRejected() {
+// so a bundled cartridge is accepted there and would instead end at the probe.
+async function test1878_bundledCartridgeWithoutBakedHashIsRejected() {
   if (process.platform === 'darwin') {
     // Mirrors the Rust #[cfg(not(target_os = "macos"))] gate: on macOS the
     // baked-hash path does not exist, so this scenario is not exercised.
@@ -2703,9 +2720,9 @@ async function test1878_bundledProviderWithoutBakedHashIsRejected() {
       installed_at: '2024-01-01T00:00:00Z', installed_from: 'bundle', fabric_manifest_version: 1,
     });
     discoveryInstallFixture(root, 'dev', 'nightly', 'cart', '1.0.0', json, 'cart');
-    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1 }));
+    const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1, cartridgeRegistryVersion: 1 }));
     discoveryExpectIncompatible(out, CartridgeAttachmentErrorKind.BAD_INSTALLATION);
-    assert(out[0].error.message.includes('bundled provider integrity'),
+    assert(out[0].error.message.includes('bundled cartridge integrity'),
       `message should name the bundled-integrity failure: ${out[0].error.message}`);
   } finally {
     discoveryRemoveRoot(root);
@@ -2954,7 +2971,7 @@ function test6544_builderRejectsStructuralKeys() {
 // TEST1294: RULE11 - void-input cap with stdin source rejected
 function test1294_rule11VoidInputWithStdinRejected() {
   const urn = CapUrn.fromString('cap:in="media:void";test;out="media:string"');
-  const cap = new Cap(urn, 'Test', 'test-cmd');
+  const cap = new Cap(urn, 'Test', ['test-cmd']);
   const stdinSource = ArgSource.fromJSON({ stdin: 'media:string' });
   cap.args = [new CapArg('media:string', true, [stdinSource])];
   try {
@@ -2969,7 +2986,7 @@ function test1294_rule11VoidInputWithStdinRejected() {
 // TEST1295: RULE11 - non-void-input cap without stdin source rejected
 function test1295_rule11NonVoidInputWithoutStdinRejected() {
   const urn = CapUrn.fromString('cap:in="media:string";test;out="media:string"');
-  const cap = new Cap(urn, 'Test', 'test-cmd');
+  const cap = new Cap(urn, 'Test', ['test-cmd']);
   const posSource = ArgSource.fromJSON({ cli_flag: '--name' });
   cap.args = [new CapArg('media:string', true, [posSource])];
   try {
@@ -2984,7 +3001,7 @@ function test1295_rule11NonVoidInputWithoutStdinRejected() {
 // TEST1296: RULE11 - void-input cap with only cli_flag sources passes
 function test1296_rule11VoidInputCliFlagOnly() {
   const urn = CapUrn.fromString('cap:in="media:void";test;out="media:string"');
-  const cap = new Cap(urn, 'Test', 'test-cmd');
+  const cap = new Cap(urn, 'Test', ['test-cmd']);
   const flagSource = ArgSource.fromJSON({ cli_flag: '--name' });
   cap.args = [new CapArg('media:string', true, [flagSource])];
   // Should not throw
@@ -2994,7 +3011,7 @@ function test1296_rule11VoidInputCliFlagOnly() {
 // TEST1297: RULE11 - non-void-input cap with stdin source passes
 function test1297_rule11NonVoidInputWithStdin() {
   const urn = CapUrn.fromString('cap:in="media:string";test;out="media:string"');
-  const cap = new Cap(urn, 'Test', 'test-cmd');
+  const cap = new Cap(urn, 'Test', ['test-cmd']);
   const stdinSource = ArgSource.fromJSON({ stdin: 'media:string' });
   cap.args = [new CapArg('media:string', true, [stdinSource])];
   // Should not throw
@@ -3191,11 +3208,11 @@ function test127_invalidEffectNoneFailsHard() {
 
 // TEST128: omitted effect means declared; unconstrained effect must be explicit
 function test128_effectDispatchRequiresExplicitWildcard() {
-  const noneProvider = CapUrn.fromString('cap:effect=none');
+  const noneCandidate = CapUrn.fromString('cap:effect=none');
   const declaredRequest = CapUrn.fromString('cap:raw');
   const anyRequest = CapUrn.fromString('cap:?effect');
-  assert(!noneProvider.isDispatchable(declaredRequest), 'effect=none should not silently satisfy declared request');
-  assert(noneProvider.isDispatchable(anyRequest), 'explicit ?effect should accept any provider effect');
+  assert(!noneCandidate.isDispatchable(declaredRequest), 'effect=none should not silently satisfy declared request');
+  assert(noneCandidate.isDispatchable(anyRequest), 'explicit ?effect should accept any candidate effect');
 }
 
 // ============================================================================
@@ -4292,7 +4309,7 @@ function test6467_Machine_capRegistryEntry_construction() {
     command: 'extract',
     cap_description: 'Extracts text from PDF',
     args: [{ media_urn: 'media:ext=pdf', required: true }],
-    output: { media_urn: 'media:enc=utf-8;ext=txt', output_description: 'Extracted text' },
+    output: { media_urn: 'media:enc=utf-8;ext=txt', output_description: 'Digitized text' },
     media_defs: [],
     urn_tags: { op: 'extract' },
     in_spec: 'media:ext=pdf',
@@ -4337,7 +4354,7 @@ function test6470_Machine_capRegistryEntry_defaults() {
   assertEqual(entry.urn, 'cap:in=media:;test;out=media:', 'URN should match');
   assertEqual(entry.title, '', 'Title should default to empty');
   assertEqual(entry.description, '', 'Description should default to empty');
-  assertEqual(entry.command, '', 'Command should default to empty');
+  assert(Array.isArray(entry.aliases) && entry.aliases.length === 0, 'Aliases should default to an empty array');
   assert(Array.isArray(entry.args), 'Args should default to array');
   assertEqual(entry.args.length, 0, 'Args should be empty');
 }
@@ -4563,8 +4580,16 @@ function test6483_Renderer_buildBrowseGraphData_rejectsMissingMediaTitles() {
 
 // ---------------- strand builder ----------------
 
+let fixtureStepToken = 0;
+
+function nextFixtureStepToken() {
+  fixtureStepToken += 1;
+  return `fixture-step-${fixtureStepToken}`;
+}
+
 function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: {
       Cap: {
         cap_urn: capUrn,
@@ -4572,6 +4597,7 @@ function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
         specificity: 0,
         input_is_sequence: inSeq,
         output_is_sequence: outSeq,
+        inputs: [{ arg_urn: fromSpec, source: 'StrandInput' }],
       },
     },
     from_spec: fromSpec,
@@ -4581,6 +4607,7 @@ function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
 
 function makeForEachStep(mediaDef) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: { ForEach: { media_def: mediaDef } },
     from_spec: mediaDef,
     to_spec: mediaDef,
@@ -4589,12 +4616,34 @@ function makeForEachStep(mediaDef) {
 
 function makeCollectStep(mediaDef) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: { Collect: { media_def: mediaDef } },
     from_spec: mediaDef,
     to_spec: mediaDef,
   };
 }
 
+// Build an intentionally linear fixture while still spelling the canonical
+// stable-token producer graph that production payloads carry. ForEach changes
+// cardinality but does not replace the current value producer; Collect does.
+function wireLinearStepInputs(steps) {
+  let producerToken = null;
+  for (const step of steps) {
+    if (step.step_type.Cap) {
+      step.step_type.Cap.inputs = [{
+        arg_urn: step.from_spec,
+        source: producerToken === null
+          ? 'StrandInput'
+          : { Step: { token_id: producerToken } },
+      }];
+      producerToken = step.token_id;
+    } else if (step.step_type.Collect) {
+      producerToken = step.token_id;
+    }
+  }
+  return steps;
+}
+
 // TEST6484: Renderer validate strand step rejects unknown variant
 function test6484_Renderer_validateStrandStep_rejectsUnknownVariant() {
   // A step with an unknown variant must fail hard at validation; no
@@ -4602,6 +4651,7 @@ function test6484_Renderer_validateStrandStep_rejectsUnknownVariant() {
   let threw = false;
   try {
     rendererValidateStrandStep({
+      token_id: nextFixtureStepToken(),
       step_type: { WrongVariant: {} },
       from_spec: 'media:a',
       to_spec: 'media:a',
@@ -4620,6 +4670,7 @@ function test6486_Renderer_validateStrandStep_requiresBooleanIsSequence() {
   let threw = false;
   try {
     rendererValidateStrandStep({
+      token_id: nextFixtureStepToken(),
       step_type: { Cap: {
         cap_urn: 'cap:in="media:a";x;out="media:b"',
         title: 't',
@@ -4641,13 +4692,13 @@ function test6487_Renderer_classifyStrandCapSteps_capFlags() {
   // Strand: ForEach → cap1 → cap2 → cap3 → Collect. cap1 should have
   // prevForEach=true; cap3 should have nextCollect=true; cap2 should
   // have neither.
-  const steps = [
+  const steps = wireLinearStepInputs([
     makeForEachStep('media:ext=pdf;list'),
     makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=png;image"', 'a', 'media:ext=pdf', 'media:ext=png;image', false, false),
     makeCapStep('cap:in="media:ext=png;image";b;out="media:ext=jpg"', 'b', 'media:ext=png;image', 'media:ext=jpg', false, false),
     makeCapStep('cap:in="media:ext=jpg";c;out="media:ext=txt"', 'c', 'media:ext=jpg', 'media:ext=txt', false, false),
     makeCollectStep('media:ext=txt'),
-  ];
+  ]);
   const { capStepIndices, capFlags } = rendererClassifyStrandCapSteps(steps);
   assertEqual(capStepIndices.length, 3, 'three cap steps');
   assert(capFlags.get(1).prevForEach, 'cap1 has prevForEach');
@@ -4663,7 +4714,7 @@ function test6488_Renderer_classifyStrandCapSteps_nestedForks() {
   // Nested strand: ForEach → cap1 → ForEach → cap2 → Collect → cap3 → Collect.
   // cap1 has prevForEach (outer), cap2 has prevForEach (inner) and
   // nextCollect (inner), cap3 has nextCollect (outer).
-  const steps = [
+  const steps = wireLinearStepInputs([
     makeForEachStep('media:a;list'),
     makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
     makeForEachStep('media:b;list'),
@@ -4671,7 +4722,7 @@ function test6488_Renderer_classifyStrandCapSteps_nestedForks() {
     makeCollectStep('media:c'),
     makeCapStep('cap:in="media:c";c;out="media:d"', 'c', 'media:c', 'media:d', false, false),
     makeCollectStep('media:d'),
-  ];
+  ]);
   const { capFlags } = rendererClassifyStrandCapSteps(steps);
   assert(capFlags.get(1).prevForEach && !capFlags.get(1).nextCollect, 'cap1 outer entry');
   assert(capFlags.get(3).prevForEach && capFlags.get(3).nextCollect, 'cap2 inner both');
@@ -4698,9 +4749,9 @@ function test6489_Renderer_buildStrandGraphData_singleCapPlain() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -4724,9 +4775,9 @@ function test6491_Renderer_buildStrandGraphData_sequenceShowsCardinality() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a;list',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a;list";x;out="media:b"', 'x', 'media:a;list', 'media:b', true, false),
-    ],
+    ]),
   }, {
     'media:a;list': 'Source A List',
     'media:b': 'Target B',
@@ -4755,11 +4806,11 @@ function test6492_Renderer_buildStrandGraphData_foreachCollectSpan() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   }, {
     'media:ext=pdf;list': 'PDF List',
     'media:ext=txt': 'Plain Text',
@@ -4798,10 +4849,10 @@ function test6493_Renderer_buildStrandGraphData_standaloneCollect() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
       makeCollectStep('media:b'),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -4827,11 +4878,11 @@ function test6494_Renderer_buildStrandGraphData_unclosedForEachBody() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
       makeForEachStep('media:b'),
       makeCapStep('cap:in="media:b";b;out="media:c"', 'b', 'media:b', 'media:c', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Intermediate B',
@@ -4865,11 +4916,11 @@ function test6495_Renderer_buildStrandGraphData_nestedForEachThrows() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a;list',
     target_media_urn: 'media:a',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:a;list'),
       makeForEachStep('media:a'),
       makeCapStep('cap:in="media:a";x;out="media:a"', 'x', 'media:a', 'media:a', false, false),
-    ],
+    ]),
   }, {
     'media:a;list': 'Source A List',
     'media:a': 'Source A',
@@ -4903,11 +4954,11 @@ function test6496_Renderer_collapseStrand_singleCapBodyKeepsCapOwnLabel() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   }, {
     'media:ext=pdf;list': 'PDF List',
     'media:ext=txt': 'Plain Text',
@@ -4953,11 +5004,11 @@ function test6497_Renderer_collapseStrand_unclosedForEachBodyCollapses() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
       makeForEachStep('media:b'),
       makeCapStep('cap:in="media:b";b;out="media:c"', 'b', 'media:b', 'media:c', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Intermediate B',
@@ -5011,10 +5062,10 @@ function test6498_Renderer_collapseStrand_standaloneCollectCollapses() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
       makeCollectStep('media:b'),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5060,11 +5111,11 @@ function test6499_Renderer_collapseStrand_sequenceProducingCapBeforeForeach() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   }, {
     'media:ext=pdf': 'PDF',
     'media:page': 'Page',
@@ -5116,9 +5167,9 @@ function test6500_Renderer_collapseStrand_plainCapMergesTrailingOutput() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5149,9 +5200,9 @@ function test6501_Renderer_collapseStrand_plainCapDistinctTargetNoMerge() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5180,24 +5231,175 @@ function test6502_Renderer_validateStrandPayload_missingSourceMediaUrn() {
   assert(threw, 'missing source_media_urn must throw');
 }
 
+// TEST7120: Renderer requires the authoritative cap input graph
+function test7120_Renderer_validateStrandPayload_requiresAuthoritativeInputs() {
+  const step = makeCapStep(
+    'cap:in="media:a";x;out="media:b"',
+    'x', 'media:a', 'media:b', false, false
+  );
+  const payload = { source_media_urn: 'media:a', target_media_urn: 'media:b', steps: [step] };
+
+  const missing = JSON.parse(JSON.stringify(payload));
+  delete missing.steps[0].step_type.Cap.inputs;
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(missing),
+    'inputs must be an array',
+    'a cap cannot omit its data-flow graph'
+  );
+
+  const empty = JSON.parse(JSON.stringify(payload));
+  empty.steps[0].step_type.Cap.inputs = [];
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(empty),
+    'must include the primary input',
+    'a cap cannot omit its primary input'
+  );
+
+  const duplicate = JSON.parse(JSON.stringify(payload));
+  duplicate.steps[0].step_type.Cap.inputs.push(
+    { arg_urn: 'media:a', source: 'StrandInput' }
+  );
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(duplicate),
+    "duplicates 'media:a'",
+    'one cap cannot bind the same argument slot twice'
+  );
+
+  const unresolved = JSON.parse(JSON.stringify(payload));
+  unresolved.steps[0].step_type.Cap.inputs[0].source = { Step: { token_id: 'missing-step' } };
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(unresolved),
+    'does not resolve to a strand step',
+    'a cap input cannot name an unknown producer'
+  );
+}
+
 // ---------------- run builder ----------------
 
 function test6503_Renderer_validateBodyOutcome_rejectsNegativeIndex() {
   let threw = false;
   try {
-    rendererValidateBodyOutcome({ body_index: -1, success: true, cap_urns: [] }, 'test');
+    rendererValidateBodyOutcome({ body_index: -1, foreach_token_id: null, success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null }, 'test');
   } catch (e) {
     threw = true;
   }
   assert(threw, 'negative body_index must throw');
 }
 
+// TEST7121: Renderer body outcomes require an explicit stable failure coordinate
+function test7121_Renderer_validateBodyOutcome_requiresExplicitFailureCoordinate() {
+  rendererValidateBodyOutcome(
+    { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+    'unattributed'
+  );
+  let threw = false;
+  try {
+    rendererValidateBodyOutcome({ body_index: 0, success: false, cap_urns: [] }, 'missing');
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('foreach_token_id must be present as null or a stable ForEach step token'),
+      'missing execution-region coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting foreach_token_id must fail hard');
+
+  threw = false;
+  try {
+    rendererValidateBodyOutcome(
+      { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_arg_urn: null },
+      'missing-failure-coordinate'
+    );
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('must be present as null or a stable step token'),
+      'missing failure coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting failed_token_id must fail hard');
+
+  threw = false;
+  try {
+    rendererValidateBodyOutcome(
+      { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_token_id: null },
+      'missing-argument-coordinate'
+    );
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('must be present as null or an attributed argument URN'),
+      'missing argument coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting failed_arg_urn must fail hard');
+
+  assertThrowsMessage(
+    () => rendererValidateBodyOutcome(
+      { body_index: 1, foreach_token_id: null, success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+      'nonzero-linear'
+    ),
+    'linear and must use body_index 0',
+    'a bare ordinal cannot address a second linear body'
+  );
+
+  assertThrowsMessage(
+    () => rendererValidateBodyOutcome(
+      { body_index: Number.MAX_SAFE_INTEGER + 1, foreach_token_id: 'tok-foreach', success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+      'unsafe-coordinate'
+    ),
+    'non-negative safe integer',
+    'JSON transport must not round a body coordinate'
+  );
+}
+
+// TEST7122: Renderer body outcomes reject execution-region tokens for non-ForEach steps
+function test7122_Renderer_validateRunPayload_requiresForEachRegionCoordinate() {
+  const strand = {
+    source_media_urn: 'media:a',
+    target_media_urn: 'media:b',
+    steps: wireLinearStepInputs([
+      makeCapStep('cap:in="media:a";convert;out="media:b"', 'convert', 'media:a', 'media:b', false, false),
+    ]),
+  };
+  const payload = {
+    resolved_strand: strand,
+    body_outcomes: [{
+      body_index: 0,
+      foreach_token_id: strand.steps[0].token_id,
+      success: true,
+      cap_urns: [],
+      failed_token_id: null,
+      failed_arg_urn: null,
+    }],
+    visible_success_count: 1,
+    visible_failure_count: 0,
+    total_body_count: 1,
+  };
+  assertThrowsMessage(
+    () => rendererValidateRunPayload(payload),
+    'does not resolve to a ForEach strand step',
+    'a body outcome cannot use a cap token as its execution-region coordinate'
+  );
+
+  const duplicateCoordinate = {
+    ...payload,
+    body_outcomes: [0, 1].map(() => ({
+      body_index: 0,
+      foreach_token_id: null,
+      success: true,
+      cap_urns: [],
+      failed_token_id: null,
+      failed_arg_urn: null,
+    })),
+  };
+  assertThrowsMessage(
+    () => rendererValidateRunPayload(duplicateCoordinate),
+    "duplicate body coordinate 'linear:0'",
+    'one execution coordinate cannot acquire two outcomes'
+  );
+}
+
 // TEST6504: Renderer build run graph data pages successes and failures
 function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   // 6 successes, 4 failures. visible=3+2, total=10. Body has 2
   // caps (a, b). Each body replica is a chain of:
   //   entry node + body_step_0 (cap a) + body_step_1 (cap b)
-  // = 3 nodes per body. Failed bodies truncate at failed_cap
+  // = 3 nodes per body. Failed bodies truncate at failed_token_id
   // (cap b, idx=1) so `traceEnd=2` — same 3-node chain.
   //
   // Total replica nodes: (3 success × 3) + (2 failure × 3) = 15.
@@ -5207,26 +5409,28 @@ function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:ext=txt',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=png;image"', 'a', 'media:ext=pdf', 'media:ext=png;image', false, false),
       makeCapStep('cap:in="media:ext=png;image";b;out="media:ext=txt"', 'b', 'media:ext=png;image', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const outcomes = [];
   for (let i = 0; i < 6; i++) {
-    outcomes.push({ body_index: i, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 });
+    outcomes.push({ body_index: i, foreach_token_id: strand.steps[0].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null });
   }
   for (let i = 6; i < 10; i++) {
     outcomes.push({
       body_index: i,
+      foreach_token_id: strand.steps[0].token_id,
       success: false,
       cap_urns: [],
       saved_paths: [],
       total_bytes: 0,
       duration_ms: 0,
-      failed_cap: 'cap:in="media:ext=png;image";b;out="media:ext=txt"',
+      failed_token_id: strand.steps[2].token_id,
+      failed_arg_urn: null,
       error: 'oom',
     });
   }
@@ -5263,22 +5467,21 @@ function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   assertEqual(failureShowMore.data.hiddenCount, 2, 'failure hidden count = 2');
 }
 
-// TEST6505: Renderer build run graph data failure without failed cap renders full trace
-function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullTrace() {
-  // A failure without failed_cap (infrastructure failure) must
-  // still render the full body trace — the builder must not
-  // crash or produce zero replicas.
+// TEST6505: Renderer run graph keeps an unattributed body failure at its entry
+function test6505_Renderer_buildRunGraphData_unattributedFailureStopsAtEntry() {
+  // A failure without failed_token_id is machine-scoped. The body remains
+  // visible, but no cap is falsely presented as the failure location.
   //
   // Strand [ForEach, Cap, Collect] → body has 1 cap. Each body
   // replica emits 1 entry node + 1 body cap node = 2 nodes.
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:ext=txt',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=txt"', 'a', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5288,7 +5491,7 @@ function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullT
       'media:ext=txt': 'Text',
     },
     body_outcomes: [
-      { body_index: 0, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, error: 'unknown' },
+      { body_index: 0, foreach_token_id: strand.steps[0].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null, error: 'unknown' },
     ],
     visible_success_count: 0,
     visible_failure_count: 5,
@@ -5299,19 +5502,15 @@ function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullT
   for (const n of built.replicaNodes) {
     if (n.classes === 'body-failure') failureNodes++;
   }
-  assertEqual(failureNodes, 2, 'entry + body cap = 2 failure replica nodes');
+  assertEqual(failureNodes, 1, 'only the body entry is shown for an unattributed failure');
 }
 
-// TEST6506: Renderer build run graph data uses cap urn is equivalent for failed cap
-function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap() {
-  // The renderer matches failed_cap against step cap URNs via
-  // CapUrn.isEquivalent, NOT string equality. Feed a payload where
-  // failed_cap and the step's cap_urn differ only in tag order — they
-  // should still match, proving URNs are not treated as strings.
+// TEST6506: Renderer run graph resolves a failure by exact stable step token
+function test6506_Renderer_buildRunGraphData_resolvesExactFailedStepToken() {
   const strand = {
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:a;list'),
       // Canonical form places tags alphabetically: op after in/out.
       makeCapStep(
@@ -5323,11 +5522,8 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
         'y', 'media:b', 'media:c', false, false
       ),
       makeCollectStep('media:c'),
-    ],
+    ]),
   };
-  // The failed_cap URN is semantically the same as step 1 (cap y). If
-  // CapUrn.fromString canonicalizes (it should), any equivalent form
-  // will match. Feed a fully-specified form that is equivalent.
   const payload = {
     resolved_strand: strand,
     media_display_names: {
@@ -5339,12 +5535,14 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
     body_outcomes: [
       {
         body_index: 0,
+        foreach_token_id: strand.steps[0].token_id,
         success: false,
         cap_urns: [],
         saved_paths: [],
         total_bytes: 0,
         duration_ms: 0,
-        failed_cap: 'cap:in=media:b;out=media:c;y',  // different tag order
+        failed_token_id: strand.steps[2].token_id,
+        failed_arg_urn: null,
         error: 'fail',
       },
     ],
@@ -5359,7 +5557,19 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
   }
   // 1 entry + 2 body step nodes (cap x and cap y, truncated
   // at cap y) = 3 failure replica nodes.
-  assertEqual(failureNodes, 3, 'trace truncates at cap y via isEquivalent, yielding entry + 2 cap nodes');
+  assertEqual(failureNodes, 3, 'trace truncates at cap y by stable token, yielding entry + 2 cap nodes');
+
+  const invalid = JSON.parse(JSON.stringify(payload));
+  invalid.body_outcomes[0].failed_token_id = 'missing-step-token';
+  let threw = false;
+  try {
+    rendererBuildRunGraphData(invalid);
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('does not resolve to a strand step'),
+      'unknown token failure must identify the unresolved coordinate');
+  }
+  assert(threw, 'unknown failed_token_id must fail hard');
 }
 
 // TEST6507: Renderer build run graph data backbone has no foreach node
@@ -5378,11 +5588,11 @@ function test6507_Renderer_buildRunGraphData_backboneHasNoForeachNode() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5427,13 +5637,12 @@ function test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
-  const failedCapUrn = 'cap:in="media:page";decide;out="media:decision"';
   const payload = {
     resolved_strand: strand,
     media_display_names: {
@@ -5442,8 +5651,8 @@ function test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder() {
       'media:decision': 'Decision',
     },
     body_outcomes: [
-      { body_index: 0, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_cap: failedCapUrn, error: 'boom' },
-      { body_index: 1, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_cap: failedCapUrn, error: 'boom' },
+      { body_index: 0, foreach_token_id: strand.steps[1].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: strand.steps[2].token_id, failed_arg_urn: null, error: 'boom' },
+      { body_index: 1, foreach_token_id: strand.steps[1].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: strand.steps[2].token_id, failed_arg_urn: null, error: 'boom' },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -5498,11 +5707,11 @@ function test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5512,7 +5721,7 @@ function test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge() {
       'media:decision': 'Decision',
     },
     body_outcomes: [
-      { body_index: 0, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 },
+      { body_index: 0, foreach_token_id: strand.steps[1].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -5558,11 +5767,11 @@ function test6510_Renderer_buildRunGraphData_closedForeachSuccessMergesAtCollect
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5573,7 +5782,7 @@ function test6510_Renderer_buildRunGraphData_closedForeachSuccessMergesAtCollect
       'media:txt;list': 'Text List',
     },
     body_outcomes: [
-      { body_index: 0, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 },
+      { body_index: 0, foreach_token_id: strand.steps[0].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -6337,7 +6546,7 @@ function test6736_axisWeightingDecodedLayout() {
 // TEST6737: Cap with version=0 round-trips with no `version` key on wire
 function test6737_capVersionZeroOmittedOnWire() {
   const urn = CapUrn.fromString('cap:in="media:void";test-op;out="media:enc=utf-8;record"');
-  const cap = new Cap(urn, 'Test Cap', 'test-op');
+  const cap = new Cap(urn, 'Test Cap', ['test-op']);
   // version defaults to 0
   assertEqual(cap.version, 0, 'Default version should be 0');
   const json = cap.toJSON();
@@ -6349,7 +6558,7 @@ function test6737_capVersionZeroOmittedOnWire() {
 // TEST1848: Cap with version=N round-trips with `version: N` on wire
 function test1848_capVersionNonZeroOnWire() {
   const urn = CapUrn.fromString('cap:in="media:void";versioned-op;out="media:enc=utf-8;record"');
-  const cap = new Cap(urn, 'Versioned Cap', 'versioned-op');
+  const cap = new Cap(urn, 'Versioned Cap', ['versioned-op']);
   cap.version = 42;
   const json = cap.toJSON();
   assert('version' in json, 'version!=0 must appear on wire');
@@ -6358,6 +6567,139 @@ function test1848_capVersionNonZeroOnWire() {
   assertEqual(restored.version, 42, 'Restored version must equal 42');
 }
 
+// ===========================================================================
+// Shared parity tests 7100-7104: CapArg.streamUrn / CapArg.isMainInput.
+// Same substantive assertions in every capdag mirror (rust, go, js, objc, py).
+// ===========================================================================
+
+// TEST7100: streamUrn() returns the stdin source's URN when it differs from the declared slot media_urn — the stdin URN, not the slot URN, is what the runtime demuxes the arg's input stream by.
+function test7100_streamUrnReturnsStdinSourceUrnWhenItDiffersFromSlotUrn() {
+  const arg = new CapArg(
+    'media:enc=utf-8;file-path',
+    true,
+    [new ArgSource({ stdin: 'media:ext=pdf;pdf-stream' })]
+  );
+  assertEqual(arg.streamUrn(), 'media:ext=pdf;pdf-stream',
+    'streamUrn must return the stdin source URN');
+  assert(arg.streamUrn() !== arg.media_urn,
+    'stream URN must differ from the declared slot media_urn here');
+}
+
+// TEST7101: streamUrn() falls back to the declared slot media_urn when the arg declares no stdin source — a producer-fed arg may be delivered by its declared URN without ever appearing on stdin.
+function test7101_streamUrnFallsBackToDeclaredMediaUrnWithoutStdinSource() {
+  const arg = new CapArg(
+    'media:enc=utf-8;system-prompt',
+    true,
+    [new ArgSource({ cli_flag: '--system-prompt' })]
+  );
+  assertEqual(arg.streamUrn(), 'media:enc=utf-8;system-prompt',
+    'streamUrn must fall back to the declared media_urn');
+}
+
+// TEST7102: isMainInput() is true when the stdin URN is order-theoretically EQUIVALENT to the cap's in= spec even when the two strings list their tags in a different order — the comparison is the MediaUrn equivalence predicate, never a string comparison.
+function test7102_isMainInputTrueOnTagOrderInsensitiveEquivalenceToInSpec() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+  const arg = new CapArg(
+    'media:enc=utf-8;file-path',
+    true,
+    [new ArgSource({ stdin: 'media:pdf-stream;ext=pdf' })] // same tags, different order
+  );
+  assert(arg.isMainInput(inSpec),
+    'tag-order-insensitive equivalent stdin URN must be the main input');
+  // The raw strings genuinely differ — proves the match is equivalence,
+  // not string equality.
+  assert(inSpec.toString() !== 'media:pdf-stream;ext=pdf',
+    'raw spec strings must differ for this test to be meaningful');
+}
+
+// TEST7103: isMainInput() is false for cli_flag-only and position-only args (no stdin source means never the main input, whatever the declared slot URN says), and false when the stdin URN is not equivalent to in=.
+function test7103_isMainInputFalseWithoutEquivalentStdinSource() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+
+  const cliFlagOnly = new CapArg(
+    'media:ext=pdf;pdf-stream', // slot URN even matches in= — irrelevant
+    true,
+    [new ArgSource({ cli_flag: '--input' })]
+  );
+  assert(!cliFlagOnly.isMainInput(inSpec), 'cli_flag-only arg is never the main input');
+
+  const positionOnly = new CapArg(
+    'media:ext=pdf;pdf-stream',
+    true,
+    [new ArgSource({ position: 0 })]
+  );
+  assert(!positionOnly.isMainInput(inSpec), 'position-only arg is never the main input');
+
+  const nonEquivalentStdin = new CapArg(
+    'media:enc=utf-8;system-prompt',
+    false,
+    [new ArgSource({ stdin: 'media:enc=utf-8;system-prompt' })]
+  );
+  assert(!nonEquivalentStdin.isMainInput(inSpec),
+    'stdin URN not equivalent to in= must not be the main input');
+}
+
+// TEST7104: A realistic multi-arg cap (one stdin main input; one required, defaultless cli_flag arg; several defaulted cli_flag args): exactly one arg is the main input, and partitioning the remaining args by required-without-default vs has-default yields the expected sets.
+function test7104_multiArgCapExactlyOneMainInputAndPartitionOfRest() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+
+  const args = [
+    new CapArg(
+      'media:enc=utf-8;file-path',
+      true,
+      // Main input may ALSO be delivered by cli-flag; stdin is the
+      // defining route.
+      [new ArgSource({ stdin: 'media:pdf-stream;ext=pdf' }), new ArgSource({ cli_flag: '--input' })]
+    ),
+    new CapArg(
+      'media:enc=utf-8;question',
+      true,
+      [new ArgSource({ cli_flag: '--question' })]
+    ),
+    new CapArg(
+      'media:max-tokens;numeric',
+      false,
+      [new ArgSource({ cli_flag: '--max-tokens' })],
+      { default_value: 1024 }
+    ),
+    new CapArg(
+      'media:numeric;temperature',
+      false,
+      [new ArgSource({ cli_flag: '--temperature' })],
+      { default_value: 0.7 }
+    ),
+    new CapArg(
+      'media:enc=utf-8;system-prompt',
+      false,
+      [new ArgSource({ cli_flag: '--system-prompt' })],
+      { default_value: 'You are a helpful assistant.' }
+    ),
+  ];
+
+  const mainInputs = args.filter(a => a.isMainInput(inSpec)).map(a => a.media_urn);
+  const rest = args.filter(a => !a.isMainInput(inSpec));
+  const requiredWithoutDefault = rest
+    .filter(a => a.required && a.default_value === null)
+    .map(a => a.media_urn);
+  const withDefault = rest
+    .filter(a => a.default_value !== null)
+    .map(a => a.media_urn);
+
+  assertEqual(JSON.stringify(mainInputs),
+    JSON.stringify(['media:enc=utf-8;file-path']),
+    'exactly one arg must be the main input');
+  assertEqual(JSON.stringify(requiredWithoutDefault),
+    JSON.stringify(['media:enc=utf-8;question']),
+    'required-without-default partition');
+  assertEqual(JSON.stringify(withDefault),
+    JSON.stringify([
+      'media:max-tokens;numeric',
+      'media:numeric;temperature',
+      'media:enc=utf-8;system-prompt',
+    ]),
+    'has-default partition');
+}
+
 // ===========================================================================
 // Fabric alias tests (shared numbers 1880-1882, 1887)
 //
@@ -6519,6 +6861,167 @@ function test1196_aliasedSerializationUsesAliasAndDropsHeader() {
 // Test runner
 // ============================================================================
 
+
+// ============================================================================
+// Unified planner plan-space (planner.js) — TEST1450+
+// ============================================================================
+
+const plannerNS = require('./planner.js');
+
+/** Planner-specific throw assertion: any PlanStateError counts. */
+function assertThrowsPlanState(fn, message) {
+  try {
+    fn();
+  } catch (error) {
+    if (error instanceof plannerNS.PlanStateError) return;
+    throw new Error(`Expected PlanStateError but got ${error.name}: ${error.message} (${message})`);
+  }
+  throw new Error(`Expected PlanStateError but function succeeded: ${message}`);
+}
+
+// TEST1450: a defaults-only request is AUTO with every knob at its default,
+// and the proto JSON carries the documented wire shape.
+function test1450_planRequestDefaults() {
+  const request = new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+  });
+  assertEqual(request.isConfigured, false, 'defaults are not configured');
+  const wire = request.toProtoJSON();
+  assertEqual(wire.mode, 0, 'AUTO mode');
+  assertEqual(wire.ranking, 0, 'intent ranking');
+  assertEqual(wire.convergence.presence, 0, 'auto presence');
+  assertEqual(wire.convergence.mechanism, 0, 'any mechanism');
+  assertEqual(wire.sources[0].media_urn, 'media:ext=pdf', 'snake_case source field');
+  assertEqual(wire.sources[0].is_sequence, false, 'snake_case sequence field');
+  assertEqual(wire.max_depth, 0, '0 = engine default depth');
+}
+
+// TEST1451: at-depth REQUIRES a positive depth; a depth anywhere else is
+// invalid; ranking never flips the request to CONFIGURED but any
+// space-constraining knob does (mode is forced to CONFIGURED on the wire).
+function test1451_planRequestKnobValidation() {
+  assertThrowsPlanState(() => new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+    convergenceLocation: 'at-depth',
+  }), 'at-depth without a depth must throw');
+
+  assertThrowsPlanState(() => new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+    convergenceAtDepth: 2,
+  }), 'a depth without at-depth must throw');
+
+  const ranked = new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+    ranking: 'shortest',
+  });
+  assertEqual(ranked.isConfigured, false, 'ranking alone never configures');
+  assertEqual(ranked.toProtoJSON().mode, 0, 'ranking alone stays AUTO');
+
+  const constrained = new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+    convergenceMechanism: 'collect',
+  });
+  assertEqual(constrained.isConfigured, true, 'a mechanism constrains');
+  assertEqual(constrained.toProtoJSON().mode, 1, 'constrained ⇒ CONFIGURED on the wire');
+
+  assertThrowsPlanState(() => new plannerNS.PlanRequest({
+    sources: [],
+    exactTargets: ['media:enc=utf-8;ext=txt'],
+  }), 'no sources must throw');
+  assertThrowsPlanState(() => new plannerNS.PlanRequest({
+    sources: [{ mediaUrn: 'media:ext=pdf', isSequence: false }],
+    exactTargets: [],
+  }), 'no targets must throw');
+}
+
+// TEST1452: every knob round-trips value → proto number → value, and an
+// unknown value/number fails hard in both directions.
+function test1452_knobProtoRoundTrip() {
+  const knobs = [
+    plannerNS.ConvergencePresence, plannerNS.ConvergenceLocation,
+    plannerNS.ConvergenceMechanism, plannerNS.ConvergenceArity,
+    plannerNS.DivergencePresence, plannerNS.DivergenceLocation,
+    plannerNS.RankPolicy, plannerNS.PlanMode,
+  ];
+  for (const knob of knobs) {
+    for (const value of knob.values) {
+      assertEqual(knob.fromProto(knob.toProto(value)), value, `${knob.name} round-trips ${value}`);
+    }
+    assertThrowsPlanState(() => knob.toProto('no-such-value'), `${knob.name} rejects unknown value`);
+    assertThrowsPlanState(() => knob.fromProto(999), `${knob.name} rejects unknown number`);
+  }
+}
+
+// TEST1453: candidate/target parsers accept realistic proto-JSON and sort
+// candidates by rank; malformed payloads (missing field, wrong type) fail
+// hard with the offending path in the message.
+function test1453_planResponseParsers() {
+  const candidates = plannerNS.parsePlanCandidates({
+    candidates: [
+      {
+        notation: '[n0 -> edge_1 -> n1]',
+        label: 'Convert each',
+        rank: 1,
+        profile: { source_media: ['media:ext=pdf'], target_media: ['media:enc=utf-8;ext=txt'], apexes: [], converged: false, diverged: false },
+        cost: { cap_steps: 2, total_steps: 2, max_leg_depth: 0, intent_score: 0.5 },
+      },
+      {
+        notation: '[(n0, n1) -> edge_0 -> n2]',
+        label: 'Combine via text',
+        rank: 0,
+        profile: {
+          source_media: ['media:ext=pdf', 'media:ext=md'],
+          target_media: ['media:enc=utf-8;ext=txt'],
+          apexes: [{ media_urn: 'media:enc=utf-8;page', mechanism: 2, depth: 1 }],
+          converged: true,
+          diverged: false,
+        },
+        cost: { cap_steps: 3, total_steps: 4, max_leg_depth: 1, intent_score: 0.8 },
+      },
+    ],
+  });
+  assertEqual(candidates.length, 2, 'two candidates');
+  assertEqual(candidates[0].rank, 0, 'sorted by rank');
+  assertEqual(candidates[0].profile.apexes[0].mechanism, 'collect', 'proto mechanism decoded to knob value');
+  assertEqual(candidates[0].profile.converged, true, 'converged carried');
+
+  assertThrowsPlanState(
+    () => plannerNS.parsePlanCandidates({ candidates: [{ label: 'missing notation', rank: 0 }] }),
+    'a candidate without notation must fail hard'
+  );
+
+  const targets = plannerNS.parseConvergentTargets({
+    targets: [
+      {
+        media_def: 'media:enc=utf-8;ext=txt',
+        display_name: 'Plain Text',
+        min_total_steps: 3,
+        apex: { media_urn: 'media:enc=utf-8;page', mechanism: 2, depth: 1 },
+        convergent: true,
+        file_extension: 'txt',
+      },
+      {
+        media_def: 'media:ext=png;image',
+        display_name: 'PNG Image',
+        min_total_steps: 2,
+        convergent: false,
+        file_extension: 'png',
+      },
+    ],
+  });
+  assertEqual(targets[0].apex.mediaUrn, 'media:enc=utf-8;page', 'apex carried');
+  assertEqual(targets[1].apex, null, 'independent target has no apex');
+  assertThrowsPlanState(
+    () => plannerNS.parseConvergentTargets({ targets: [{ display_name: 'no media_def' }] }),
+    'a target without media_def must fail hard'
+  );
+}
+
 async function runTests() {
   console.log('Running capdag-js tests...\n');
 
@@ -6721,7 +7224,7 @@ async function runTests() {
   await runTest('TEST1875: scan_all_reaches_both_dev_and_registry_slugs', test1875_scanAllReachesBothDevAndRegistrySlugs);
   await runTest('TEST1876: other_channel_subtree_is_skipped', test1876_otherChannelSubtreeIsSkipped);
   await runTest('TEST1877: registry_cartridge_under_wrong_slug_is_bad_install', test1877_registryCartridgeUnderWrongSlugIsBadInstall);
-  await runTest('TEST1878: bundled_provider_without_baked_hash_is_rejected', test1878_bundledProviderWithoutBakedHashIsRejected);
+  await runTest('TEST1878: bundled_cartridge_without_baked_hash_is_rejected', test1878_bundledCartridgeWithoutBakedHashIsRejected);
 
   // media_urn.rs: TEST1312-TEST1315, TEST1298-TEST1302 (MediaUrn predicates)
   console.log('\n--- media_urn.rs (predicates) ---');
@@ -6912,12 +7415,14 @@ async function runTests() {
   runTest('RENDERER: collapseStrand_plainCapMergesOutput',    test6500_Renderer_collapseStrand_plainCapMergesTrailingOutput);
   runTest('RENDERER: collapseStrand_plainCapDistinctTarget',  test6501_Renderer_collapseStrand_plainCapDistinctTargetNoMerge);
   runTest('RENDERER: validateStrand_missingSourceMediaUrn',   test6502_Renderer_validateStrandPayload_missingSourceMediaUrn);
+  runTest('RENDERER: validateStrand_requiresCapInputs',       test7120_Renderer_validateStrandPayload_requiresAuthoritativeInputs);
 
   console.log('\n--- cap-fab-renderer run builder ---');
   runTest('RENDERER: validateBodyOutcome_negativeIndex',      test6503_Renderer_validateBodyOutcome_rejectsNegativeIndex);
+  runTest('RENDERER: validateBodyOutcome_failureCoordinate',  test7121_Renderer_validateBodyOutcome_requiresExplicitFailureCoordinate);
   runTest('RENDERER: buildRun_pagesSuccessesAndFailures',     test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures);
-  runTest('RENDERER: buildRun_failureWithoutFailedCap',       test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullTrace);
-  runTest('RENDERER: buildRun_usesIsEquivalentForFailedCap',  test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap);
+  runTest('RENDERER: buildRun_unattributedFailureAtEntry',    test6505_Renderer_buildRunGraphData_unattributedFailureStopsAtEntry);
+  runTest('RENDERER: buildRun_resolvesFailedStepToken',       test6506_Renderer_buildRunGraphData_resolvesExactFailedStepToken);
   runTest('RENDERER: buildRun_backboneHasNoForeachNode',      test6507_Renderer_buildRunGraphData_backboneHasNoForeachNode);
   runTest('RENDERER: buildRun_allFailedDropsPlaceholder',     test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder);
   runTest('RENDERER: buildRun_unclosedForeachNoMerge',        test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge);
@@ -6976,6 +7481,13 @@ async function runTests() {
   runTest('TEST1847: cap_version_zero_omitted_on_wire',     test6737_capVersionZeroOmittedOnWire);
   runTest('TEST1848: cap_version_nonzero_on_wire',          test1848_capVersionNonZeroOnWire);
 
+  console.log('\n--- CapArg stream URN + main input (test7100–test7104) ---');
+  runTest('TEST7100: stream_urn_prefers_stdin_source_urn',   test7100_streamUrnReturnsStdinSourceUrnWhenItDiffersFromSlotUrn);
+  runTest('TEST7101: stream_urn_falls_back_to_media_urn',    test7101_streamUrnFallsBackToDeclaredMediaUrnWithoutStdinSource);
+  runTest('TEST7102: is_main_input_by_urn_equivalence',      test7102_isMainInputTrueOnTagOrderInsensitiveEquivalenceToInSpec);
+  runTest('TEST7103: is_main_input_false_without_stdin',     test7103_isMainInputFalseWithoutEquivalentStdinSource);
+  runTest('TEST7104: multi_arg_main_input_partition',        test7104_multiArgCapExactlyOneMainInputAndPartitionOfRest);
+
   runTest('TEST1880: alias_name_normalization_rules',       test1880_aliasNameNormalizationRules);
   runTest('TEST1881: token_urn_vs_alias_detection',         test1881_tokenUrnVsAliasDetection);
   runTest('TEST1882: classify_alias_target_by_prefix',      test1882_classifyAliasTargetByPrefix);
@@ -6987,6 +7499,13 @@ async function runTests() {
   runTest('TEST1896: cached_cap_aliases_filters_to_cap',     test1896_cachedCapAliasesFiltersToCapTargets);
   runTest('TEST1196: aliased_serialization_uses_alias',      test1196_aliasedSerializationUsesAliasAndDropsHeader);
 
+  // planner.js: unified plan-space vocabulary
+  console.log('--- planner.js ---');
+  runTest('TEST1450: plan_request_defaults', test1450_planRequestDefaults);
+  runTest('TEST1451: plan_request_knob_validation', test1451_planRequestKnobValidation);
+  runTest('TEST1452: knob_proto_round_trip', test1452_knobProtoRoundTrip);
+  runTest('TEST1453: plan_response_parsers', test1453_planResponseParsers);
+
   // Summary
   console.log(`\n${passCount + failCount} tests: ${passCount} passed, ${failCount} failed`);
   if (failCount > 0) {