capdag 1.233.649 → 1.241.684

package/capdag.test.js

@@ -89,6 +89,19 @@ function assertThrowsMediaUrn(fn, expectedErrorCode, message) {
   }
 }
 
+function assertThrowsMessage(fn, expectedMessage, message) {
+  try {
+    fn();
+  } catch (error) {
+    assert(
+      typeof error.message === 'string' && error.message.includes(expectedMessage),
+      `${message}: expected error containing ${JSON.stringify(expectedMessage)}, got ${JSON.stringify(error.message)}`
+    );
+    return;
+  }
+  throw new Error(`Assertion failed: ${message}: expected function to throw`);
+}
+
 function runTest(name, fn) {
   try {
     const result = fn();
@@ -715,7 +728,7 @@ function test050_matchingSemanticsDirectionMismatch() {
   assert(!cap.accepts(request), 'Incompatible direction types should not match');
 }
 
-// TEST890: Semantic direction matching - generic provider matches specific request
+// TEST890: Semantic direction matching - generic candidate matches specific request
 function test890_directionSemanticMatching() {
   // Generic wildcard cap accepts specific pdf request
   const genericCap = CapUrn.fromString(
@@ -1409,14 +1422,14 @@ function test6208_CapFabGetOutgoingConformsToMatching() {
 // the renderer colours/groups edges by provenance in browse mode.
 function test6224_CapFabDistinctRegistryNames() {
   const graph = new CapFab();
-  graph.addCap(makeGraphCap('media:ext=pdf', 'media:enc=utf-8', 'PDF to Text'), 'providers');
+  graph.addCap(makeGraphCap('media:ext=pdf', 'media:enc=utf-8', 'PDF to Text'), 'bundled-cartridges');
   graph.addCap(makeGraphCap('media:enc=utf-8', 'media:embedding-vector', 'Embed'), 'cartridges');
 
   const edges = graph.getEdges();
   assertEqual(edges.length, 2, 'Two caps must produce two edges');
 
   const names = new Set(edges.map(e => e.registryName));
-  assert(names.has('providers'), 'providers registry name must be preserved');
+  assert(names.has('bundled-cartridges'), 'bundled-cartridges registry name must be preserved');
   assert(names.has('cartridges'), 'cartridges registry name must be preserved');
 }
 
@@ -2687,11 +2700,11 @@ async function test1877_registryCartridgeUnderWrongSlugIsBadInstall() {
 }
 
 // TEST1878: a cartridge marked `installed_from: bundle` with no baked hash in
-// BUNDLED_PROVIDER_HASHES (empty in this mirror) is rejected as BadInstallation
+// BUNDLED_CARTRIDGE_HASHES (empty in this mirror) is rejected as BadInstallation
 // — the bundled-integrity gate fires before the probe. Non-macOS only: on macOS
 // the baked-hash path is intentionally absent (OS code-signature is the guard),
-// so a bundled provider is accepted there and would instead end at the probe.
-async function test1878_bundledProviderWithoutBakedHashIsRejected() {
+// so a bundled cartridge is accepted there and would instead end at the probe.
+async function test1878_bundledCartridgeWithoutBakedHashIsRejected() {
   if (process.platform === 'darwin') {
     // Mirrors the Rust #[cfg(not(target_os = "macos"))] gate: on macOS the
     // baked-hash path does not exist, so this scenario is not exercised.
@@ -2709,7 +2722,7 @@ async function test1878_bundledProviderWithoutBakedHashIsRejected() {
     discoveryInstallFixture(root, 'dev', 'nightly', 'cart', '1.0.0', json, 'cart');
     const out = await discoverCartridges(root, new DiscoveryIdentity({ channel: 'nightly', registryUrl: null, fabricManifestVersion: 1, cartridgeRegistryVersion: 1 }));
     discoveryExpectIncompatible(out, CartridgeAttachmentErrorKind.BAD_INSTALLATION);
-    assert(out[0].error.message.includes('bundled provider integrity'),
+    assert(out[0].error.message.includes('bundled cartridge integrity'),
       `message should name the bundled-integrity failure: ${out[0].error.message}`);
   } finally {
     discoveryRemoveRoot(root);
@@ -3195,11 +3208,11 @@ function test127_invalidEffectNoneFailsHard() {
 
 // TEST128: omitted effect means declared; unconstrained effect must be explicit
 function test128_effectDispatchRequiresExplicitWildcard() {
-  const noneProvider = CapUrn.fromString('cap:effect=none');
+  const noneCandidate = CapUrn.fromString('cap:effect=none');
   const declaredRequest = CapUrn.fromString('cap:raw');
   const anyRequest = CapUrn.fromString('cap:?effect');
-  assert(!noneProvider.isDispatchable(declaredRequest), 'effect=none should not silently satisfy declared request');
-  assert(noneProvider.isDispatchable(anyRequest), 'explicit ?effect should accept any provider effect');
+  assert(!noneCandidate.isDispatchable(declaredRequest), 'effect=none should not silently satisfy declared request');
+  assert(noneCandidate.isDispatchable(anyRequest), 'explicit ?effect should accept any candidate effect');
 }
 
 // ============================================================================
@@ -4296,7 +4309,7 @@ function test6467_Machine_capRegistryEntry_construction() {
     command: 'extract',
     cap_description: 'Extracts text from PDF',
     args: [{ media_urn: 'media:ext=pdf', required: true }],
-    output: { media_urn: 'media:enc=utf-8;ext=txt', output_description: 'Extracted text' },
+    output: { media_urn: 'media:enc=utf-8;ext=txt', output_description: 'Digitized text' },
     media_defs: [],
     urn_tags: { op: 'extract' },
     in_spec: 'media:ext=pdf',
@@ -4567,8 +4580,16 @@ function test6483_Renderer_buildBrowseGraphData_rejectsMissingMediaTitles() {
 
 // ---------------- strand builder ----------------
 
+let fixtureStepToken = 0;
+
+function nextFixtureStepToken() {
+  fixtureStepToken += 1;
+  return `fixture-step-${fixtureStepToken}`;
+}
+
 function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: {
       Cap: {
         cap_urn: capUrn,
@@ -4576,6 +4597,7 @@ function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
         specificity: 0,
         input_is_sequence: inSeq,
         output_is_sequence: outSeq,
+        inputs: [{ arg_urn: fromSpec, source: 'StrandInput' }],
       },
     },
     from_spec: fromSpec,
@@ -4585,6 +4607,7 @@ function makeCapStep(capUrn, title, fromSpec, toSpec, inSeq, outSeq) {
 
 function makeForEachStep(mediaDef) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: { ForEach: { media_def: mediaDef } },
     from_spec: mediaDef,
     to_spec: mediaDef,
@@ -4593,12 +4616,34 @@ function makeForEachStep(mediaDef) {
 
 function makeCollectStep(mediaDef) {
   return {
+    token_id: nextFixtureStepToken(),
     step_type: { Collect: { media_def: mediaDef } },
     from_spec: mediaDef,
     to_spec: mediaDef,
   };
 }
 
+// Build an intentionally linear fixture while still spelling the canonical
+// stable-token producer graph that production payloads carry. ForEach changes
+// cardinality but does not replace the current value producer; Collect does.
+function wireLinearStepInputs(steps) {
+  let producerToken = null;
+  for (const step of steps) {
+    if (step.step_type.Cap) {
+      step.step_type.Cap.inputs = [{
+        arg_urn: step.from_spec,
+        source: producerToken === null
+          ? 'StrandInput'
+          : { Step: { token_id: producerToken } },
+      }];
+      producerToken = step.token_id;
+    } else if (step.step_type.Collect) {
+      producerToken = step.token_id;
+    }
+  }
+  return steps;
+}
+
 // TEST6484: Renderer validate strand step rejects unknown variant
 function test6484_Renderer_validateStrandStep_rejectsUnknownVariant() {
   // A step with an unknown variant must fail hard at validation; no
@@ -4606,6 +4651,7 @@ function test6484_Renderer_validateStrandStep_rejectsUnknownVariant() {
   let threw = false;
   try {
     rendererValidateStrandStep({
+      token_id: nextFixtureStepToken(),
       step_type: { WrongVariant: {} },
       from_spec: 'media:a',
       to_spec: 'media:a',
@@ -4624,6 +4670,7 @@ function test6486_Renderer_validateStrandStep_requiresBooleanIsSequence() {
   let threw = false;
   try {
     rendererValidateStrandStep({
+      token_id: nextFixtureStepToken(),
       step_type: { Cap: {
         cap_urn: 'cap:in="media:a";x;out="media:b"',
         title: 't',
@@ -4645,13 +4692,13 @@ function test6487_Renderer_classifyStrandCapSteps_capFlags() {
   // Strand: ForEach → cap1 → cap2 → cap3 → Collect. cap1 should have
   // prevForEach=true; cap3 should have nextCollect=true; cap2 should
   // have neither.
-  const steps = [
+  const steps = wireLinearStepInputs([
     makeForEachStep('media:ext=pdf;list'),
     makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=png;image"', 'a', 'media:ext=pdf', 'media:ext=png;image', false, false),
     makeCapStep('cap:in="media:ext=png;image";b;out="media:ext=jpg"', 'b', 'media:ext=png;image', 'media:ext=jpg', false, false),
     makeCapStep('cap:in="media:ext=jpg";c;out="media:ext=txt"', 'c', 'media:ext=jpg', 'media:ext=txt', false, false),
     makeCollectStep('media:ext=txt'),
-  ];
+  ]);
   const { capStepIndices, capFlags } = rendererClassifyStrandCapSteps(steps);
   assertEqual(capStepIndices.length, 3, 'three cap steps');
   assert(capFlags.get(1).prevForEach, 'cap1 has prevForEach');
@@ -4667,7 +4714,7 @@ function test6488_Renderer_classifyStrandCapSteps_nestedForks() {
   // Nested strand: ForEach → cap1 → ForEach → cap2 → Collect → cap3 → Collect.
   // cap1 has prevForEach (outer), cap2 has prevForEach (inner) and
   // nextCollect (inner), cap3 has nextCollect (outer).
-  const steps = [
+  const steps = wireLinearStepInputs([
     makeForEachStep('media:a;list'),
     makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
     makeForEachStep('media:b;list'),
@@ -4675,7 +4722,7 @@ function test6488_Renderer_classifyStrandCapSteps_nestedForks() {
     makeCollectStep('media:c'),
     makeCapStep('cap:in="media:c";c;out="media:d"', 'c', 'media:c', 'media:d', false, false),
     makeCollectStep('media:d'),
-  ];
+  ]);
   const { capFlags } = rendererClassifyStrandCapSteps(steps);
   assert(capFlags.get(1).prevForEach && !capFlags.get(1).nextCollect, 'cap1 outer entry');
   assert(capFlags.get(3).prevForEach && capFlags.get(3).nextCollect, 'cap2 inner both');
@@ -4702,9 +4749,9 @@ function test6489_Renderer_buildStrandGraphData_singleCapPlain() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -4728,9 +4775,9 @@ function test6491_Renderer_buildStrandGraphData_sequenceShowsCardinality() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a;list',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a;list";x;out="media:b"', 'x', 'media:a;list', 'media:b', true, false),
-    ],
+    ]),
   }, {
     'media:a;list': 'Source A List',
     'media:b': 'Target B',
@@ -4759,11 +4806,11 @@ function test6492_Renderer_buildStrandGraphData_foreachCollectSpan() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   }, {
     'media:ext=pdf;list': 'PDF List',
     'media:ext=txt': 'Plain Text',
@@ -4802,10 +4849,10 @@ function test6493_Renderer_buildStrandGraphData_standaloneCollect() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
       makeCollectStep('media:b'),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -4831,11 +4878,11 @@ function test6494_Renderer_buildStrandGraphData_unclosedForEachBody() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
       makeForEachStep('media:b'),
       makeCapStep('cap:in="media:b";b;out="media:c"', 'b', 'media:b', 'media:c', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Intermediate B',
@@ -4869,11 +4916,11 @@ function test6495_Renderer_buildStrandGraphData_nestedForEachThrows() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a;list',
     target_media_urn: 'media:a',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:a;list'),
       makeForEachStep('media:a'),
       makeCapStep('cap:in="media:a";x;out="media:a"', 'x', 'media:a', 'media:a', false, false),
-    ],
+    ]),
   }, {
     'media:a;list': 'Source A List',
     'media:a': 'Source A',
@@ -4907,11 +4954,11 @@ function test6496_Renderer_collapseStrand_singleCapBodyKeepsCapOwnLabel() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   }, {
     'media:ext=pdf;list': 'PDF List',
     'media:ext=txt': 'Plain Text',
@@ -4957,11 +5004,11 @@ function test6497_Renderer_collapseStrand_unclosedForEachBodyCollapses() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";a;out="media:b"', 'a', 'media:a', 'media:b', false, false),
       makeForEachStep('media:b'),
       makeCapStep('cap:in="media:b";b;out="media:c"', 'b', 'media:b', 'media:c', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Intermediate B',
@@ -5015,10 +5062,10 @@ function test6498_Renderer_collapseStrand_standaloneCollectCollapses() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
       makeCollectStep('media:b'),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5064,11 +5111,11 @@ function test6499_Renderer_collapseStrand_sequenceProducingCapBeforeForeach() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   }, {
     'media:ext=pdf': 'PDF',
     'media:page': 'Page',
@@ -5120,9 +5167,9 @@ function test6500_Renderer_collapseStrand_plainCapMergesTrailingOutput() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5153,9 +5200,9 @@ function test6501_Renderer_collapseStrand_plainCapDistinctTargetNoMerge() {
   const payload = withMediaDisplayNames({
     source_media_urn: 'media:a',
     target_media_urn: 'media:b;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:a";x;out="media:b"', 'x', 'media:a', 'media:b', false, false),
-    ],
+    ]),
   }, {
     'media:a': 'Source A',
     'media:b': 'Target B',
@@ -5184,24 +5231,175 @@ function test6502_Renderer_validateStrandPayload_missingSourceMediaUrn() {
   assert(threw, 'missing source_media_urn must throw');
 }
 
+// TEST7120: Renderer requires the authoritative cap input graph
+function test7120_Renderer_validateStrandPayload_requiresAuthoritativeInputs() {
+  const step = makeCapStep(
+    'cap:in="media:a";x;out="media:b"',
+    'x', 'media:a', 'media:b', false, false
+  );
+  const payload = { source_media_urn: 'media:a', target_media_urn: 'media:b', steps: [step] };
+
+  const missing = JSON.parse(JSON.stringify(payload));
+  delete missing.steps[0].step_type.Cap.inputs;
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(missing),
+    'inputs must be an array',
+    'a cap cannot omit its data-flow graph'
+  );
+
+  const empty = JSON.parse(JSON.stringify(payload));
+  empty.steps[0].step_type.Cap.inputs = [];
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(empty),
+    'must include the primary input',
+    'a cap cannot omit its primary input'
+  );
+
+  const duplicate = JSON.parse(JSON.stringify(payload));
+  duplicate.steps[0].step_type.Cap.inputs.push(
+    { arg_urn: 'media:a', source: 'StrandInput' }
+  );
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(duplicate),
+    "duplicates 'media:a'",
+    'one cap cannot bind the same argument slot twice'
+  );
+
+  const unresolved = JSON.parse(JSON.stringify(payload));
+  unresolved.steps[0].step_type.Cap.inputs[0].source = { Step: { token_id: 'missing-step' } };
+  assertThrowsMessage(
+    () => rendererValidateStrandPayload(unresolved),
+    'does not resolve to a strand step',
+    'a cap input cannot name an unknown producer'
+  );
+}
+
 // ---------------- run builder ----------------
 
 function test6503_Renderer_validateBodyOutcome_rejectsNegativeIndex() {
   let threw = false;
   try {
-    rendererValidateBodyOutcome({ body_index: -1, success: true, cap_urns: [] }, 'test');
+    rendererValidateBodyOutcome({ body_index: -1, foreach_token_id: null, success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null }, 'test');
   } catch (e) {
     threw = true;
   }
   assert(threw, 'negative body_index must throw');
 }
 
+// TEST7121: Renderer body outcomes require an explicit stable failure coordinate
+function test7121_Renderer_validateBodyOutcome_requiresExplicitFailureCoordinate() {
+  rendererValidateBodyOutcome(
+    { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+    'unattributed'
+  );
+  let threw = false;
+  try {
+    rendererValidateBodyOutcome({ body_index: 0, success: false, cap_urns: [] }, 'missing');
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('foreach_token_id must be present as null or a stable ForEach step token'),
+      'missing execution-region coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting foreach_token_id must fail hard');
+
+  threw = false;
+  try {
+    rendererValidateBodyOutcome(
+      { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_arg_urn: null },
+      'missing-failure-coordinate'
+    );
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('must be present as null or a stable step token'),
+      'missing failure coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting failed_token_id must fail hard');
+
+  threw = false;
+  try {
+    rendererValidateBodyOutcome(
+      { body_index: 0, foreach_token_id: null, success: false, cap_urns: [], failed_token_id: null },
+      'missing-argument-coordinate'
+    );
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('must be present as null or an attributed argument URN'),
+      'missing argument coordinate error must state the required wire shape');
+  }
+  assert(threw, 'omitting failed_arg_urn must fail hard');
+
+  assertThrowsMessage(
+    () => rendererValidateBodyOutcome(
+      { body_index: 1, foreach_token_id: null, success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+      'nonzero-linear'
+    ),
+    'linear and must use body_index 0',
+    'a bare ordinal cannot address a second linear body'
+  );
+
+  assertThrowsMessage(
+    () => rendererValidateBodyOutcome(
+      { body_index: Number.MAX_SAFE_INTEGER + 1, foreach_token_id: 'tok-foreach', success: true, cap_urns: [], failed_token_id: null, failed_arg_urn: null },
+      'unsafe-coordinate'
+    ),
+    'non-negative safe integer',
+    'JSON transport must not round a body coordinate'
+  );
+}
+
+// TEST7122: Renderer body outcomes reject execution-region tokens for non-ForEach steps
+function test7122_Renderer_validateRunPayload_requiresForEachRegionCoordinate() {
+  const strand = {
+    source_media_urn: 'media:a',
+    target_media_urn: 'media:b',
+    steps: wireLinearStepInputs([
+      makeCapStep('cap:in="media:a";convert;out="media:b"', 'convert', 'media:a', 'media:b', false, false),
+    ]),
+  };
+  const payload = {
+    resolved_strand: strand,
+    body_outcomes: [{
+      body_index: 0,
+      foreach_token_id: strand.steps[0].token_id,
+      success: true,
+      cap_urns: [],
+      failed_token_id: null,
+      failed_arg_urn: null,
+    }],
+    visible_success_count: 1,
+    visible_failure_count: 0,
+    total_body_count: 1,
+  };
+  assertThrowsMessage(
+    () => rendererValidateRunPayload(payload),
+    'does not resolve to a ForEach strand step',
+    'a body outcome cannot use a cap token as its execution-region coordinate'
+  );
+
+  const duplicateCoordinate = {
+    ...payload,
+    body_outcomes: [0, 1].map(() => ({
+      body_index: 0,
+      foreach_token_id: null,
+      success: true,
+      cap_urns: [],
+      failed_token_id: null,
+      failed_arg_urn: null,
+    })),
+  };
+  assertThrowsMessage(
+    () => rendererValidateRunPayload(duplicateCoordinate),
+    "duplicate body coordinate 'linear:0'",
+    'one execution coordinate cannot acquire two outcomes'
+  );
+}
+
 // TEST6504: Renderer build run graph data pages successes and failures
 function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   // 6 successes, 4 failures. visible=3+2, total=10. Body has 2
   // caps (a, b). Each body replica is a chain of:
   //   entry node + body_step_0 (cap a) + body_step_1 (cap b)
-  // = 3 nodes per body. Failed bodies truncate at failed_cap
+  // = 3 nodes per body. Failed bodies truncate at failed_token_id
   // (cap b, idx=1) so `traceEnd=2` — same 3-node chain.
   //
   // Total replica nodes: (3 success × 3) + (2 failure × 3) = 15.
@@ -5211,26 +5409,28 @@ function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:ext=txt',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=png;image"', 'a', 'media:ext=pdf', 'media:ext=png;image', false, false),
       makeCapStep('cap:in="media:ext=png;image";b;out="media:ext=txt"', 'b', 'media:ext=png;image', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const outcomes = [];
   for (let i = 0; i < 6; i++) {
-    outcomes.push({ body_index: i, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 });
+    outcomes.push({ body_index: i, foreach_token_id: strand.steps[0].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null });
   }
   for (let i = 6; i < 10; i++) {
     outcomes.push({
       body_index: i,
+      foreach_token_id: strand.steps[0].token_id,
       success: false,
       cap_urns: [],
       saved_paths: [],
       total_bytes: 0,
       duration_ms: 0,
-      failed_cap: 'cap:in="media:ext=png;image";b;out="media:ext=txt"',
+      failed_token_id: strand.steps[2].token_id,
+      failed_arg_urn: null,
       error: 'oom',
     });
   }
@@ -5267,22 +5467,21 @@ function test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures() {
   assertEqual(failureShowMore.data.hiddenCount, 2, 'failure hidden count = 2');
 }
 
-// TEST6505: Renderer build run graph data failure without failed cap renders full trace
-function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullTrace() {
-  // A failure without failed_cap (infrastructure failure) must
-  // still render the full body trace — the builder must not
-  // crash or produce zero replicas.
+// TEST6505: Renderer run graph keeps an unattributed body failure at its entry
+function test6505_Renderer_buildRunGraphData_unattributedFailureStopsAtEntry() {
+  // A failure without failed_token_id is machine-scoped. The body remains
+  // visible, but no cap is falsely presented as the failure location.
   //
   // Strand [ForEach, Cap, Collect] → body has 1 cap. Each body
   // replica emits 1 entry node + 1 body cap node = 2 nodes.
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:ext=txt',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";a;out="media:ext=txt"', 'a', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5292,7 +5491,7 @@ function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullT
       'media:ext=txt': 'Text',
     },
     body_outcomes: [
-      { body_index: 0, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, error: 'unknown' },
+      { body_index: 0, foreach_token_id: strand.steps[0].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null, error: 'unknown' },
     ],
     visible_success_count: 0,
     visible_failure_count: 5,
@@ -5303,19 +5502,15 @@ function test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullT
   for (const n of built.replicaNodes) {
     if (n.classes === 'body-failure') failureNodes++;
   }
-  assertEqual(failureNodes, 2, 'entry + body cap = 2 failure replica nodes');
+  assertEqual(failureNodes, 1, 'only the body entry is shown for an unattributed failure');
 }
 
-// TEST6506: Renderer build run graph data uses cap urn is equivalent for failed cap
-function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap() {
-  // The renderer matches failed_cap against step cap URNs via
-  // CapUrn.isEquivalent, NOT string equality. Feed a payload where
-  // failed_cap and the step's cap_urn differ only in tag order — they
-  // should still match, proving URNs are not treated as strings.
+// TEST6506: Renderer run graph resolves a failure by exact stable step token
+function test6506_Renderer_buildRunGraphData_resolvesExactFailedStepToken() {
   const strand = {
     source_media_urn: 'media:a',
     target_media_urn: 'media:c',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:a;list'),
       // Canonical form places tags alphabetically: op after in/out.
       makeCapStep(
@@ -5327,11 +5522,8 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
         'y', 'media:b', 'media:c', false, false
       ),
       makeCollectStep('media:c'),
-    ],
+    ]),
   };
-  // The failed_cap URN is semantically the same as step 1 (cap y). If
-  // CapUrn.fromString canonicalizes (it should), any equivalent form
-  // will match. Feed a fully-specified form that is equivalent.
   const payload = {
     resolved_strand: strand,
     media_display_names: {
@@ -5343,12 +5535,14 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
     body_outcomes: [
       {
         body_index: 0,
+        foreach_token_id: strand.steps[0].token_id,
         success: false,
         cap_urns: [],
         saved_paths: [],
         total_bytes: 0,
         duration_ms: 0,
-        failed_cap: 'cap:in=media:b;out=media:c;y',  // different tag order
+        failed_token_id: strand.steps[2].token_id,
+        failed_arg_urn: null,
         error: 'fail',
       },
     ],
@@ -5363,7 +5557,19 @@ function test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap(
   }
   // 1 entry + 2 body step nodes (cap x and cap y, truncated
   // at cap y) = 3 failure replica nodes.
-  assertEqual(failureNodes, 3, 'trace truncates at cap y via isEquivalent, yielding entry + 2 cap nodes');
+  assertEqual(failureNodes, 3, 'trace truncates at cap y by stable token, yielding entry + 2 cap nodes');
+
+  const invalid = JSON.parse(JSON.stringify(payload));
+  invalid.body_outcomes[0].failed_token_id = 'missing-step-token';
+  let threw = false;
+  try {
+    rendererBuildRunGraphData(invalid);
+  } catch (error) {
+    threw = true;
+    assert(error.message.includes('does not resolve to a strand step'),
+      'unknown token failure must identify the unresolved coordinate');
+  }
+  assert(threw, 'unknown failed_token_id must fail hard');
 }
 
 // TEST6507: Renderer build run graph data backbone has no foreach node
@@ -5382,11 +5588,11 @@ function test6507_Renderer_buildRunGraphData_backboneHasNoForeachNode() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5431,13 +5637,12 @@ function test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
-  const failedCapUrn = 'cap:in="media:page";decide;out="media:decision"';
   const payload = {
     resolved_strand: strand,
     media_display_names: {
@@ -5446,8 +5651,8 @@ function test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder() {
       'media:decision': 'Decision',
     },
     body_outcomes: [
-      { body_index: 0, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_cap: failedCapUrn, error: 'boom' },
-      { body_index: 1, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_cap: failedCapUrn, error: 'boom' },
+      { body_index: 0, foreach_token_id: strand.steps[1].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: strand.steps[2].token_id, failed_arg_urn: null, error: 'boom' },
+      { body_index: 1, foreach_token_id: strand.steps[1].token_id, success: false, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: strand.steps[2].token_id, failed_arg_urn: null, error: 'boom' },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -5502,11 +5707,11 @@ function test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge() {
   const strand = {
     source_media_urn: 'media:ext=pdf',
     target_media_urn: 'media:decision',
-    steps: [
+    steps: wireLinearStepInputs([
       makeCapStep('cap:in="media:ext=pdf";disbind;out="media:page"', 'Disbind', 'media:ext=pdf', 'media:page', false, true),
       makeForEachStep('media:page'),
       makeCapStep('cap:in="media:page";decide;out="media:decision"', 'Make a Decision', 'media:page', 'media:decision', false, false),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5516,7 +5721,7 @@ function test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge() {
       'media:decision': 'Decision',
     },
     body_outcomes: [
-      { body_index: 0, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 },
+      { body_index: 0, foreach_token_id: strand.steps[1].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -5562,11 +5767,11 @@ function test6510_Renderer_buildRunGraphData_closedForeachSuccessMergesAtCollect
   const strand = {
     source_media_urn: 'media:ext=pdf;list',
     target_media_urn: 'media:txt;list',
-    steps: [
+    steps: wireLinearStepInputs([
       makeForEachStep('media:ext=pdf;list'),
       makeCapStep('cap:in="media:ext=pdf";extract;out="media:ext=txt"', 'extract', 'media:ext=pdf', 'media:ext=txt', false, false),
       makeCollectStep('media:ext=txt'),
-    ],
+    ]),
   };
   const payload = {
     resolved_strand: strand,
@@ -5577,7 +5782,7 @@ function test6510_Renderer_buildRunGraphData_closedForeachSuccessMergesAtCollect
       'media:txt;list': 'Text List',
     },
     body_outcomes: [
-      { body_index: 0, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0 },
+      { body_index: 0, foreach_token_id: strand.steps[0].token_id, success: true, cap_urns: [], saved_paths: [], total_bytes: 0, duration_ms: 0, failed_token_id: null, failed_arg_urn: null },
     ],
     visible_success_count: 3,
     visible_failure_count: 3,
@@ -6362,6 +6567,139 @@ function test1848_capVersionNonZeroOnWire() {
   assertEqual(restored.version, 42, 'Restored version must equal 42');
 }
 
+// ===========================================================================
+// Shared parity tests 7100-7104: CapArg.streamUrn / CapArg.isMainInput.
+// Same substantive assertions in every capdag mirror (rust, go, js, objc, py).
+// ===========================================================================
+
+// TEST7100: streamUrn() returns the stdin source's URN when it differs from the declared slot media_urn — the stdin URN, not the slot URN, is what the runtime demuxes the arg's input stream by.
+function test7100_streamUrnReturnsStdinSourceUrnWhenItDiffersFromSlotUrn() {
+  const arg = new CapArg(
+    'media:enc=utf-8;file-path',
+    true,
+    [new ArgSource({ stdin: 'media:ext=pdf;pdf-stream' })]
+  );
+  assertEqual(arg.streamUrn(), 'media:ext=pdf;pdf-stream',
+    'streamUrn must return the stdin source URN');
+  assert(arg.streamUrn() !== arg.media_urn,
+    'stream URN must differ from the declared slot media_urn here');
+}
+
+// TEST7101: streamUrn() falls back to the declared slot media_urn when the arg declares no stdin source — a producer-fed arg may be delivered by its declared URN without ever appearing on stdin.
+function test7101_streamUrnFallsBackToDeclaredMediaUrnWithoutStdinSource() {
+  const arg = new CapArg(
+    'media:enc=utf-8;system-prompt',
+    true,
+    [new ArgSource({ cli_flag: '--system-prompt' })]
+  );
+  assertEqual(arg.streamUrn(), 'media:enc=utf-8;system-prompt',
+    'streamUrn must fall back to the declared media_urn');
+}
+
+// TEST7102: isMainInput() is true when the stdin URN is order-theoretically EQUIVALENT to the cap's in= spec even when the two strings list their tags in a different order — the comparison is the MediaUrn equivalence predicate, never a string comparison.
+function test7102_isMainInputTrueOnTagOrderInsensitiveEquivalenceToInSpec() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+  const arg = new CapArg(
+    'media:enc=utf-8;file-path',
+    true,
+    [new ArgSource({ stdin: 'media:pdf-stream;ext=pdf' })] // same tags, different order
+  );
+  assert(arg.isMainInput(inSpec),
+    'tag-order-insensitive equivalent stdin URN must be the main input');
+  // The raw strings genuinely differ — proves the match is equivalence,
+  // not string equality.
+  assert(inSpec.toString() !== 'media:pdf-stream;ext=pdf',
+    'raw spec strings must differ for this test to be meaningful');
+}
+
+// TEST7103: isMainInput() is false for cli_flag-only and position-only args (no stdin source means never the main input, whatever the declared slot URN says), and false when the stdin URN is not equivalent to in=.
+function test7103_isMainInputFalseWithoutEquivalentStdinSource() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+
+  const cliFlagOnly = new CapArg(
+    'media:ext=pdf;pdf-stream', // slot URN even matches in= — irrelevant
+    true,
+    [new ArgSource({ cli_flag: '--input' })]
+  );
+  assert(!cliFlagOnly.isMainInput(inSpec), 'cli_flag-only arg is never the main input');
+
+  const positionOnly = new CapArg(
+    'media:ext=pdf;pdf-stream',
+    true,
+    [new ArgSource({ position: 0 })]
+  );
+  assert(!positionOnly.isMainInput(inSpec), 'position-only arg is never the main input');
+
+  const nonEquivalentStdin = new CapArg(
+    'media:enc=utf-8;system-prompt',
+    false,
+    [new ArgSource({ stdin: 'media:enc=utf-8;system-prompt' })]
+  );
+  assert(!nonEquivalentStdin.isMainInput(inSpec),
+    'stdin URN not equivalent to in= must not be the main input');
+}
+
+// TEST7104: A realistic multi-arg cap (one stdin main input; one required, defaultless cli_flag arg; several defaulted cli_flag args): exactly one arg is the main input, and partitioning the remaining args by required-without-default vs has-default yields the expected sets.
+function test7104_multiArgCapExactlyOneMainInputAndPartitionOfRest() {
+  const inSpec = MediaUrn.fromString('media:ext=pdf;pdf-stream');
+
+  const args = [
+    new CapArg(
+      'media:enc=utf-8;file-path',
+      true,
+      // Main input may ALSO be delivered by cli-flag; stdin is the
+      // defining route.
+      [new ArgSource({ stdin: 'media:pdf-stream;ext=pdf' }), new ArgSource({ cli_flag: '--input' })]
+    ),
+    new CapArg(
+      'media:enc=utf-8;question',
+      true,
+      [new ArgSource({ cli_flag: '--question' })]
+    ),
+    new CapArg(
+      'media:max-tokens;numeric',
+      false,
+      [new ArgSource({ cli_flag: '--max-tokens' })],
+      { default_value: 1024 }
+    ),
+    new CapArg(
+      'media:numeric;temperature',
+      false,
+      [new ArgSource({ cli_flag: '--temperature' })],
+      { default_value: 0.7 }
+    ),
+    new CapArg(
+      'media:enc=utf-8;system-prompt',
+      false,
+      [new ArgSource({ cli_flag: '--system-prompt' })],
+      { default_value: 'You are a helpful assistant.' }
+    ),
+  ];
+
+  const mainInputs = args.filter(a => a.isMainInput(inSpec)).map(a => a.media_urn);
+  const rest = args.filter(a => !a.isMainInput(inSpec));
+  const requiredWithoutDefault = rest
+    .filter(a => a.required && a.default_value === null)
+    .map(a => a.media_urn);
+  const withDefault = rest
+    .filter(a => a.default_value !== null)
+    .map(a => a.media_urn);
+
+  assertEqual(JSON.stringify(mainInputs),
+    JSON.stringify(['media:enc=utf-8;file-path']),
+    'exactly one arg must be the main input');
+  assertEqual(JSON.stringify(requiredWithoutDefault),
+    JSON.stringify(['media:enc=utf-8;question']),
+    'required-without-default partition');
+  assertEqual(JSON.stringify(withDefault),
+    JSON.stringify([
+      'media:max-tokens;numeric',
+      'media:numeric;temperature',
+      'media:enc=utf-8;system-prompt',
+    ]),
+    'has-default partition');
+}
+
 // ===========================================================================
 // Fabric alias tests (shared numbers 1880-1882, 1887)
 //
@@ -6886,7 +7224,7 @@ async function runTests() {
   await runTest('TEST1875: scan_all_reaches_both_dev_and_registry_slugs', test1875_scanAllReachesBothDevAndRegistrySlugs);
   await runTest('TEST1876: other_channel_subtree_is_skipped', test1876_otherChannelSubtreeIsSkipped);
   await runTest('TEST1877: registry_cartridge_under_wrong_slug_is_bad_install', test1877_registryCartridgeUnderWrongSlugIsBadInstall);
-  await runTest('TEST1878: bundled_provider_without_baked_hash_is_rejected', test1878_bundledProviderWithoutBakedHashIsRejected);
+  await runTest('TEST1878: bundled_cartridge_without_baked_hash_is_rejected', test1878_bundledCartridgeWithoutBakedHashIsRejected);
 
   // media_urn.rs: TEST1312-TEST1315, TEST1298-TEST1302 (MediaUrn predicates)
   console.log('\n--- media_urn.rs (predicates) ---');
@@ -7077,12 +7415,14 @@ async function runTests() {
   runTest('RENDERER: collapseStrand_plainCapMergesOutput',    test6500_Renderer_collapseStrand_plainCapMergesTrailingOutput);
   runTest('RENDERER: collapseStrand_plainCapDistinctTarget',  test6501_Renderer_collapseStrand_plainCapDistinctTargetNoMerge);
   runTest('RENDERER: validateStrand_missingSourceMediaUrn',   test6502_Renderer_validateStrandPayload_missingSourceMediaUrn);
+  runTest('RENDERER: validateStrand_requiresCapInputs',       test7120_Renderer_validateStrandPayload_requiresAuthoritativeInputs);
 
   console.log('\n--- cap-fab-renderer run builder ---');
   runTest('RENDERER: validateBodyOutcome_negativeIndex',      test6503_Renderer_validateBodyOutcome_rejectsNegativeIndex);
+  runTest('RENDERER: validateBodyOutcome_failureCoordinate',  test7121_Renderer_validateBodyOutcome_requiresExplicitFailureCoordinate);
   runTest('RENDERER: buildRun_pagesSuccessesAndFailures',     test6504_Renderer_buildRunGraphData_pagesSuccessesAndFailures);
-  runTest('RENDERER: buildRun_failureWithoutFailedCap',       test6505_Renderer_buildRunGraphData_failureWithoutFailedCapRendersFullTrace);
-  runTest('RENDERER: buildRun_usesIsEquivalentForFailedCap',  test6506_Renderer_buildRunGraphData_usesCapUrnIsEquivalentForFailedCap);
+  runTest('RENDERER: buildRun_unattributedFailureAtEntry',    test6505_Renderer_buildRunGraphData_unattributedFailureStopsAtEntry);
+  runTest('RENDERER: buildRun_resolvesFailedStepToken',       test6506_Renderer_buildRunGraphData_resolvesExactFailedStepToken);
   runTest('RENDERER: buildRun_backboneHasNoForeachNode',      test6507_Renderer_buildRunGraphData_backboneHasNoForeachNode);
   runTest('RENDERER: buildRun_allFailedDropsPlaceholder',     test6508_Renderer_buildRunGraphData_allFailedDropsTargetPlaceholder);
   runTest('RENDERER: buildRun_unclosedForeachNoMerge',        test6509_Renderer_buildRunGraphData_unclosedForeachSuccessNoMerge);
@@ -7141,6 +7481,13 @@ async function runTests() {
   runTest('TEST1847: cap_version_zero_omitted_on_wire',     test6737_capVersionZeroOmittedOnWire);
   runTest('TEST1848: cap_version_nonzero_on_wire',          test1848_capVersionNonZeroOnWire);
 
+  console.log('\n--- CapArg stream URN + main input (test7100–test7104) ---');
+  runTest('TEST7100: stream_urn_prefers_stdin_source_urn',   test7100_streamUrnReturnsStdinSourceUrnWhenItDiffersFromSlotUrn);
+  runTest('TEST7101: stream_urn_falls_back_to_media_urn',    test7101_streamUrnFallsBackToDeclaredMediaUrnWithoutStdinSource);
+  runTest('TEST7102: is_main_input_by_urn_equivalence',      test7102_isMainInputTrueOnTagOrderInsensitiveEquivalenceToInSpec);
+  runTest('TEST7103: is_main_input_false_without_stdin',     test7103_isMainInputFalseWithoutEquivalentStdinSource);
+  runTest('TEST7104: multi_arg_main_input_partition',        test7104_multiArgCapExactlyOneMainInputAndPartitionOfRest);
+
   runTest('TEST1880: alias_name_normalization_rules',       test1880_aliasNameNormalizationRules);
   runTest('TEST1881: token_urn_vs_alias_detection',         test1881_tokenUrnVsAliasDetection);
   runTest('TEST1882: classify_alias_target_by_prefix',      test1882_classifyAliasTargetByPrefix);