@unbrained/pm-cli 2026.8.24 → 2026.8.25

package/dist/sdk/read-output/continuation.d.ts

@@ -1,6 +1,19 @@
 import type { PmReadOutputCursorEnvelope, PmReadOutputSurface } from "../read-output-contracts.js";
-/** Fingerprint the complete canonical row snapshot so changed evidence fails closed. */
-export declare function readOutputCollectionFingerprint(path: string, value: unknown[] | Record<string, unknown>): string;
+/** Stable snapshot policy for a read surface whose probes refresh observation metadata. */
+export interface PmReadOutputContinuationFingerprintPolicy {
+    /** Version included in fingerprints so policy changes invalidate older cursors. */
+    version: 3;
+    /** Declared continuation row paths governed by this policy. */
+    paths: readonly string[];
+    /** Exact direct detail fields excluded for each named dynamic row. */
+    ignored_detail_field_names_by_row: Readonly<Record<string, readonly string[]>>;
+    /** Promise that verdicts, stable configuration, and nonvolatile evidence remain bound. */
+    guarantee: "nonvolatile_snapshot_and_stable_configuration";
+}
+/** Command-specific exceptions to complete-row continuation fingerprinting. */
+export declare const PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES: Readonly<Partial<Record<PmReadOutputSurface, PmReadOutputContinuationFingerprintPolicy>>>;
+/** Fingerprint the policy-normalized row snapshot so stable evidence changes fail closed. */
+export declare function readOutputCollectionFingerprint(path: string, value: unknown[] | Record<string, unknown>, command?: PmReadOutputSurface): string;
 /** Encode one stable declared-row continuation for CLI, SDK, and MCP callers. */
 export declare function encodeReadOutputContinuationCursor(cursor: Omit<PmReadOutputCursorEnvelope, "version">): string;
 /** Decode and validate one universal declared-row continuation cursor. */

package/dist/sdk/read-output/continuation.js

@@ -6,7 +6,7 @@
  * resolution and budget policy.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="1c73c31e-6246-5730-8c8a-d3ba7c9ec112")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="9e63b4b0-09a5-50bf-9f56-5f239c75ffe5")}catch(e){}}();
 import { createHash } from "node:crypto";
 import { EXIT_CODE } from "../../core/shared/constants.js";
 import { PmCliError } from "../../core/shared/errors.js";
@@ -14,13 +14,93 @@ import { stableStringify } from "../../core/shared/serialization.js";
 import { resolveReadOutputSurface } from "../read-output-contracts.js";
 import { readOutputContinuationRowCollections, sliceReadOutputRowCollection, } from "../read-output-rows.js";
 const MAX_READ_OUTPUT_CURSOR_LENGTH = 4096;
+const HEALTH_TELEMETRY_VOLATILE_DETAIL_FIELDS = Object.freeze([
+    "queue_draining",
+    "queue_entries",
+    "queue_exists",
+    "queue_high_retry_entries",
+    "queue_invalid_rows",
+    "queue_max_attempts",
+    "queue_rows_total",
+    "queue_size_bytes",
+    "pending_otel_spans",
+    "last_attempted_flush_at",
+    "last_failed_flush_at",
+    "last_otel_attempt_at",
+    "last_otel_failure_at",
+    "last_otel_success_at",
+    "last_successful_flush_at",
+]);
+/** Command-specific exceptions to complete-row continuation fingerprinting. */
+export const PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES = Object.freeze({
+    health: Object.freeze({
+        version: 3,
+        paths: Object.freeze(["checks"]),
+        ignored_detail_field_names_by_row: Object.freeze({
+            telemetry: HEALTH_TELEMETRY_VOLATILE_DETAIL_FIELDS,
+        }),
+        guarantee: "nonvolatile_snapshot_and_stable_configuration",
+    }),
+});
 function isRecord(value) {
     return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-/** Fingerprint the complete canonical row snapshot so changed evidence fails closed. */
-export function readOutputCollectionFingerprint(path, value) {
+function normalizeReadOutputFingerprintValue(value) {
+    if (Array.isArray(value)) {
+        return value.map(normalizeReadOutputFingerprintValue);
+    }
+    if (!isRecord(value))
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+        key,
+        normalizeReadOutputFingerprintValue(entry),
+    ]));
+}
+function normalizeReadOutputFingerprintRow(value, policy) {
+    if (!isRecord(value))
+        return normalizeReadOutputFingerprintValue(value);
+    const rowName = typeof value.name === "string" ? value.name : undefined;
+    const ignoredDetailFields = rowName !== undefined &&
+        Object.hasOwn(policy.ignored_detail_field_names_by_row, rowName)
+        ? policy.ignored_detail_field_names_by_row[rowName]
+        : undefined;
+    return Object.fromEntries(Object.entries(value)
+        .map(([key, entry]) => {
+        if (key !== "details" || !ignoredDetailFields || !isRecord(entry)) {
+            return [key, normalizeReadOutputFingerprintValue(entry)];
+        }
+        return [
+            key,
+            Object.fromEntries(Object.entries(entry)
+                .filter(([detailKey]) => !ignoredDetailFields.includes(detailKey))
+                .map(([detailKey, detailValue]) => [
+                detailKey,
+                normalizeReadOutputFingerprintValue(detailValue),
+            ])),
+        ];
+    }));
+}
+function normalizeReadOutputFingerprintSnapshot(value, policy) {
+    return Array.isArray(value)
+        ? value.map((row) => normalizeReadOutputFingerprintRow(row, policy))
+        : normalizeReadOutputFingerprintRow(value, policy);
+}
+/** Fingerprint the policy-normalized row snapshot so stable evidence changes fail closed. */
+export function readOutputCollectionFingerprint(path, value, command) {
+    const policy = command
+        ? PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES[command]
+        : undefined;
+    const policyApplies = policy?.paths.includes(path) === true;
     return createHash("sha256")
-        .update(stableStringify({ path, value }))
+        .update(stableStringify({
+        path,
+        value: policyApplies
+            ? normalizeReadOutputFingerprintSnapshot(value, policy)
+            : value,
+        ...(policyApplies
+            ? { fingerprint_policy_version: policy.version }
+            : {}),
+    }))
         .digest("base64url")
         .slice(0, 16);
 }
@@ -105,11 +185,11 @@ export function applyReadOutputContinuation(result, command, cursor) {
     if (!collection ||
         totalRows !== cursor.total_rows ||
         cursor.offset > totalRows ||
-        readOutputCollectionFingerprint(cursor.path, collection.value) !==
+        readOutputCollectionFingerprint(cursor.path, collection.value, command) !==
             cursor.fingerprint) {
         throw new PmCliError("The read-output continuation no longer matches the declared row collection; restart the bounded read.", EXIT_CODE.USAGE, { code: "read_output_cursor_stale" });
     }
     return sliceReadOutputRowCollection(result, cursor.path, cursor.offset);
 }
 //# sourceMappingURL=continuation.js.map
-//# debugId=1c73c31e-6246-5730-8c8a-d3ba7c9ec112
+//# debugId=9e63b4b0-09a5-50bf-9f56-5f239c75ffe5

package/dist/sdk/read-output-contracts.d.ts

@@ -1,6 +1,7 @@
 export { resolveReadOutputRecoveryBudget } from "./read-output-budget.js";
 export type { PmReadOutputRecoveryBudget, PmReadOutputRecoveryBudgetInput, } from "./read-output-budget.js";
-export { decodeReadOutputContinuationCursor, encodeReadOutputContinuationCursor, } from "./read-output/continuation.js";
+export { decodeReadOutputContinuationCursor, encodeReadOutputContinuationCursor, PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES, readOutputCollectionFingerprint, } from "./read-output/continuation.js";
+export type { PmReadOutputContinuationFingerprintPolicy } from "./read-output/continuation.js";
 import { type PmReadOutputSessionReceipt, type PmReadOutputSessionState } from "./read-output-session.js";
 /** Stable output dimensions shared by every read surface. */
 export declare const PM_READ_OUTPUT_DIMENSIONS: readonly ["include", "amount", "cost", "encoding"];
@@ -61,6 +62,8 @@ export interface PmReadOutputSurfaceContract {
     precedence: readonly ["canonical", "legacy", "intent", "default"];
     /** Stable policy used before budget compaction selects retained rows. */
     budget_retention_policy: "ordered_prefix" | "verdict_priority";
+    /** Exact command-local whole-result modes accepted by `outputInclude`. */
+    projection_modes?: readonly string[];
 }
 /** Source that selected an effective output dimension. */
 export type PmReadOutputDimensionSource = "canonical" | "legacy" | "intent" | "default";

package/dist/sdk/read-output-contracts.js

@@ -5,7 +5,7 @@
  * surface without coupling package authors to command-specific option names.
  */
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="76c9c2d0-951d-579e-916e-e8d54d4a8be9")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="d084da05-c967-58f1-afe4-069f09838e6f")}catch(e){}}();
 import { EXIT_CODE } from "../core/shared/constants.js";
 import { PmCliError } from "../core/shared/errors.js";
 import { compactReadOutputToBudget, estimateReadOutputTokens, resolveReadOutputRecoveryBudget, updateReadOutputReceiptEstimate, } from "./read-output-budget.js";
@@ -13,7 +13,7 @@ export { resolveReadOutputRecoveryBudget } from "./read-output-budget.js";
 import { resolvePmCommandOutputBudget } from "./cli-contracts/agent-output-contracts.js";
 import { boundReadOutputRows, countReadOutputRows, mapReadOutputRows, readOutputBudgetCollections, readOutputContinuationRowCollections, readOutputRowPaths, } from "./read-output-rows.js";
 import { applyReadOutputContinuation, decodeReadOutputContinuationCursor, encodeReadOutputContinuationCursor, prioritizeAssuranceAssertions, readOutputCollectionFingerprint, } from "./read-output/continuation.js";
-export { decodeReadOutputContinuationCursor, encodeReadOutputContinuationCursor, } from "./read-output/continuation.js";
+export { decodeReadOutputContinuationCursor, encodeReadOutputContinuationCursor, PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES, readOutputCollectionFingerprint, } from "./read-output/continuation.js";
 import { applyReadOutputSessionReferences, attachReadOutputSessionReceipt, parseReadOutputSession, readOutputSessionRemainingTokens, } from "./read-output-session.js";
 import { decodeQueryCursorEnvelope, encodeQueryCursor } from "./pagination.js";
 /** Stable output dimensions shared by every read surface. */
@@ -205,6 +205,9 @@ function buildSurfaceContract(command) {
         dimensions,
         precedence: READ_OUTPUT_PRECEDENCE,
         budget_retention_policy: command === "assurance" ? "verdict_priority" : "ordered_prefix",
+        projection_modes: Object.freeze([
+            ...readOutputIncludeModeOptions(command).keys(),
+        ]),
     });
 }
 /** Universal output contract for every built-in read surface. */
@@ -1092,7 +1095,7 @@ function rebaseBudgetCompactedCursor(projected, originalItemCount, cursorSource,
     }
     return true;
 }
-function captureReadOutputContinuationState(projected, cursor, options) {
+function captureReadOutputContinuationState(projected, command, cursor, options) {
     const collectionsBeforeBudget = new Map(readOutputContinuationRowCollections(projected).map((collection) => {
         const rows = Array.isArray(collection.value)
             ? collection.value.length
@@ -1106,7 +1109,7 @@ function captureReadOutputContinuationState(projected, cursor, options) {
                 baseOffset: continued ? cursor.offset : 0,
                 fingerprint: continued
                     ? cursor.fingerprint
-                    : readOutputCollectionFingerprint(collection.path, collection.value),
+                    : readOutputCollectionFingerprint(collection.path, collection.value, command),
             },
         ];
     }));
@@ -1154,7 +1157,7 @@ export function applyReadOutputDimensions(command, options, result) {
     const continuationReadyResult = attachValidateDiagnosticRowContract(resolved.command, result);
     const bindingBudget = resolveBindingReadOutputBudget(resolved, session);
     let projected = projectReadOutputRows(continuationReadyResult, resolved, session, cursor);
-    const continuationState = captureReadOutputContinuationState(projected, cursor, options);
+    const continuationState = captureReadOutputContinuationState(projected, resolved.command, cursor, options);
     const receipt = {
         contract_version: 1,
         command: resolved.command,
@@ -1207,4 +1210,4 @@ export function resolveReadOutputEncoding(command, options) {
         : undefined;
 }
 //# sourceMappingURL=read-output-contracts.js.map
-//# debugId=76c9c2d0-951d-579e-916e-e8d54d4a8be9
+//# debugId=d084da05-c967-58f1-afe4-069f09838e6f

package/docs/MERGE_SAFETY.md

@@ -2,6 +2,9 @@
 
 Tracked by [pm-wc1r](../.agents/pm/features/pm-wc1r.toon), with the integrity and concurrency fixes [pm-9q2t](../.agents/pm/issues/pm-9q2t.toon), [pm-cxyv](../.agents/pm/issues/pm-cxyv.toon), [pm-gpo7](../.agents/pm/issues/pm-gpo7.toon), [pm-m3nl](../.agents/pm/issues/pm-m3nl.toon), [pm-wwfd](../.agents/pm/issues/pm-wwfd.toon), and [pm-xdn6](../.agents/pm/issues/pm-xdn6.toon). Fresh-init fence ownership is tracked by [pm-1w3ljt](../.agents/pm/issues/pm-1w3ljt.toon); runtime-cache index governance by [pm-hous](../.agents/pm/issues/pm-hous.toon); local allocation safety by [pm-khdq](../.agents/pm/issues/pm-khdq.toon); fence-coverage completeness and drift detection by [pm-i4fx](../.agents/pm/issues/pm-i4fx.toon); package-defined item coverage by [pm-5rexki](../.agents/pm/issues/pm-5rexki.toon); non-item JSON coverage by [pm-gjicmx](../.agents/pm/issues/pm-gjicmx.toon); portable driver identity by [pm-w91mvg](../.agents/pm/issues/pm-w91mvg.toon); pending receipt validation by [pm-ysqb6n](../.agents/pm/issues/pm-ysqb6n.toon); receipt classification by [pm-jtwsct](../.agents/pm/issues/pm-jtwsct.toon); direction-independent item conflict selection by [pm-dlx7v7](../.agents/pm/issues/pm-dlx7v7.toon); corrected reconciliation guidance by [pm-lwmstb](../.agents/pm/issues/pm-lwmstb.toon); cross-branch id collision safety by [pm-pibw](../.agents/pm/issues/pm-pibw.toon); auditable merge history by [pm-9j2r3b](../.agents/pm/tasks/pm-9j2r3b.toon); durable conflict decisions by [pm-rh98vo](../.agents/pm/issues/pm-rh98vo.toon); continuous conformance by [pm-76dnfg](../.agents/pm/tasks/pm-76dnfg.toon); workspace-wide CI enforcement by [pm-pdr8t1](../.agents/pm/tasks/pm-pdr8t1.toon); post-merge reconciliation by [pm-mfkv92](../.agents/pm/issues/pm-mfkv92.toon); linked-command execution trust by [pm-ed28wi](../.agents/pm/issues/pm-ed28wi.toon); this repository's own adoption by [pm-iwsj](../.agents/pm/chores/pm-iwsj.toon).
 
+Lossless receipt health gating is tracked by
+[pm-baksix](../.agents/pm/issues/pm-baksix.toon).
+
 pm stores project context as reviewable repository files. Concurrent agents can therefore use ordinary branches and worktrees, but tracker artifacts need semantic merge behavior: raw line merging cannot preserve TOON collection counts, JSON object structure, or append-only history hash chains.
 
 ## Install the repository merge contract
@@ -118,11 +121,37 @@ pm merge reconcile --force --message "Accept reviewed merge decisions" --json
 ```
 
 The preview reports every drifted stream and pending receipt without mutation.
-Lossless receipts are reported as provenance but do not become blocking merge
-decisions. Receipts with discarded scalar values remain blocking and the apply
-pass refuses them unless the coordinator explicitly supplies `--force` after
-review. This prevents a routine history repair from silently accepting data
-loss while preserving a zero-noise path for merges that retained both changes.
+Lossless receipts do not become discarded-value decisions and reconcile without
+`--force`, but `pm health` reports `merge_receipts_pending:<n>` and remains
+non-green until the apply pass settles them. `pm history-repair` cannot clear
+that receipt finding. When a drifted item also has a pending receipt, the
+`history_drift` remediation map prioritizes `pm merge reconcile --dry-run` only
+when canonical item path, changed-field, and merged-value hash evidence all
+attribute that finding to one or more receipts loaded from the clone-local Git
+evidence store. Every field declared by each receipt must match its current merged-value
+hash, even when only a subset appears in the history reconciliation diff.
+Disjoint valid receipts may collectively cover a multi-field reconciliation;
+the audit and settlement then retain every individually proven receipt id.
+Serialized source claims are ignored. Receipt readers validate the complete
+bounded schema, safe identifiers, filename and item-path identity, timestamps,
+and bounded decision structure before a sidecar enters health or
+reconciliation. Reads use size-preflighted, no-follow regular-file descriptors;
+durable decisions must retain hash-only values. Legacy or durable-only receipts,
+receipts whose declared fields disagree with their hashes, same-item tampering,
+and drift on unrelated items fail closed to the normal `pm history-repair`
+guidance. Health indexes clone-local evidence once by item and reconciliation
+uses the same per-item groups with a fixed receipt-only worker pool, so committed
+sidecars cannot amplify drift scans into unbounded parallel repair work.
+Apply-mode reconciliation repeats the same proof against the exact
+item snapshot used by the audited history rewrite. The audit event and
+settlement include only the individually proven receipt id, so one valid receipt
+cannot authorize an untrusted same-item sibling. Failed or unproven receipts
+remain pending unless the coordinator explicitly reviews and supplies `--force`.
+Receipts with discarded scalar values retain the distinct
+`merge_decisions_unreviewed:<n>` finding, and the apply pass refuses them unless
+the coordinator explicitly supplies `--force` after review. This prevents a
+routine history repair from hiding unfinished reconciliation or silently
+accepting data loss.
 It exits nonzero while either merge-critical validation check is non-green, so
 CI and explicit post-merge hooks cannot approve unresolved receipts or drift.
 The apply pass uses the audited history rewrite boundary to append a

package/docs/OUTPUT_PROJECTION_CONTRACTS.md

@@ -16,7 +16,10 @@ selectors are tracked by
 and canonical TOON tables are tracked by
 [pm-gjjurs](../.agents/pm/issues/pm-gjjurs.toon) and
 [pm-5y05kq](../.agents/pm/issues/pm-5y05kq.toon). Nested evidence continuation
-is tracked by [pm-8nev0o](../.agents/pm/issues/pm-8nev0o.toon).
+is tracked by [pm-8nev0o](../.agents/pm/issues/pm-8nev0o.toon) and
+[pm-oahhyc](../.agents/pm/issues/pm-oahhyc.toon). Exact command-local
+projection discovery is tracked by
+[pm-q4isdq](../.agents/pm/issues/pm-q4isdq.toon).
 
 ## Agent Quick Context
 
@@ -112,6 +115,15 @@ machine-iterable without a command-specific selector. `fields` is always explici
 shape. NDJSON event streams do not carry an envelope and therefore do not
 publish a row contract.
 
+Projection mode discovery is command-local even though the compatibility
+degradation ladder is global. Read
+`output_projection_contracts.commands` from a command-scoped contracts call or
+the full contracts matrix before selecting a whole-result mode. The
+contract labels the global ladder `union_not_per_command`, so clients cannot
+infer that `list` accepts `summary` or that `health` accepts `compact`.
+`PM_READ_OUTPUT_SURFACE_CONTRACTS[].projection_modes` provides the identical
+canonical matrix to SDK and package consumers.
+
 SDK and package authors can import `PM_READ_ROW_CONTRACTS`,
 `PM_READ_ROW_JQ_SELECTOR`, and `resolveReadRowContract` from
 `@unbrained/pm-cli/sdk`. Existing package declarations are preserved only

package/docs/READ_OUTPUT_CONTRACTS.md

@@ -1,6 +1,6 @@
 # Universal Read Output Contracts
 
-Tracker references: [pm-hb7ug8](../.agents/pm/features/pm-hb7ug8.toon), [pm-cxr0jb](../.agents/pm/features/pm-cxr0jb.toon), [pm-hid9g1](../.agents/pm/features/pm-hid9g1.toon), [pm-h8tpeh](../.agents/pm/features/pm-h8tpeh.toon), [pm-5t33or](../.agents/pm/features/pm-5t33or.toon), [pm-srns](../.agents/pm/issues/pm-srns.toon), [pm-sb0tns](../.agents/pm/issues/pm-sb0tns.toon), [pm-gjjurs](../.agents/pm/issues/pm-gjjurs.toon), [pm-eugaqy](../.agents/pm/issues/pm-eugaqy.toon), [pm-jt8aa2](../.agents/pm/issues/pm-jt8aa2.toon), [pm-kyjdne](../.agents/pm/issues/pm-kyjdne.toon), [pm-8nev0o](../.agents/pm/issues/pm-8nev0o.toon), [pm-e5gl05](../.agents/pm/issues/pm-e5gl05.toon), [pm-cha95z](../.agents/pm/tasks/pm-cha95z.toon), [pm-2qvq7a](../.agents/pm/issues/pm-2qvq7a.toon), and [pm-xam9bt](../.agents/pm/issues/pm-xam9bt.toon).
+Tracker references: [pm-hb7ug8](../.agents/pm/features/pm-hb7ug8.toon), [pm-cxr0jb](../.agents/pm/features/pm-cxr0jb.toon), [pm-hid9g1](../.agents/pm/features/pm-hid9g1.toon), [pm-h8tpeh](../.agents/pm/features/pm-h8tpeh.toon), [pm-5t33or](../.agents/pm/features/pm-5t33or.toon), [pm-srns](../.agents/pm/issues/pm-srns.toon), [pm-sb0tns](../.agents/pm/issues/pm-sb0tns.toon), [pm-gjjurs](../.agents/pm/issues/pm-gjjurs.toon), [pm-eugaqy](../.agents/pm/issues/pm-eugaqy.toon), [pm-jt8aa2](../.agents/pm/issues/pm-jt8aa2.toon), [pm-kyjdne](../.agents/pm/issues/pm-kyjdne.toon), [pm-8nev0o](../.agents/pm/issues/pm-8nev0o.toon), [pm-oahhyc](../.agents/pm/issues/pm-oahhyc.toon), [pm-q4isdq](../.agents/pm/issues/pm-q4isdq.toon), [pm-e5gl05](../.agents/pm/issues/pm-e5gl05.toon), [pm-cha95z](../.agents/pm/tasks/pm-cha95z.toon), [pm-2qvq7a](../.agents/pm/issues/pm-2qvq7a.toon), and [pm-xam9bt](../.agents/pm/issues/pm-xam9bt.toon).
 
 ## Agent Quick Context
 
@@ -60,6 +60,17 @@ removing spelling receipts and volatile run metadata. A selector that matches
 neither a declared mode nor any field on any returned row is refused with the
 legal domain, rather than returning rows with every field removed.
 
+Runtime discovery publishes the same exact vocabulary before invocation.
+`pm contracts --command <command> --summary` returns
+`output_projection_contracts.commands`, while
+`output_projection_contracts.global_ladder_scope: "union_not_per_command"`
+explicitly marks `output_policy.degradation_ladder` as a cross-command union,
+not a promise that every member is accepted by the selected command. For
+example, `list` declares `brief`, `compact`, and `full`; `health` declares
+`brief`, `full`, and `summary`. The full `read_output_dimensions` matrix also
+includes `projection_modes` for every canonical read surface, including an
+explicit empty array when a surface has no whole-result modes.
+
 ## Cross-Call Context Sessions
 
 `--output-session <json>` / `outputSession` composes the four per-call
@@ -164,6 +175,18 @@ an unbounded multi-megabyte response;
 `recovery_budget_multiplier: 1` declares that each next page retains the same
 useful-result ceiling.
 
+Health continuation fingerprints use a versioned nonvolatile-snapshot policy
+for the `checks` row. Command-lifecycle telemetry may refresh timestamps, queue
+counters, and pending spans between pages, so the policy excludes only those
+explicit direct fields from the `telemetry` row's `details`. The row identity,
+verdict, enabled state, capture level, endpoint, environment overrides, probe
+result, and failure errors remain fingerprinted. Every other health check also
+remains fully fingerprinted; changing storage, integrity, history, or another
+stable check fails closed. `PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES`
+publishes the exact ignored detail fields per dynamic row. Other commands still
+fingerprint every field, including fields with the same spelling, and any
+policy-version change fails closed against an older cursor.
+
 When compaction affects a nested collection that is not declared resumable,
 the recovery budget is derived from the larger of the binding ceiling plus one
 and the measured pre-compaction result. The SDK adds a 25% envelope margin and
@@ -221,7 +244,7 @@ const result = await pm.list({
 });
 ```
 
-Package authors should use the exported read-output contracts instead of inventing package-local limit or projection vocabularies. `PM_READ_OUTPUT_SURFACE_CONTRACTS` is the machine-readable matrix and `resolveReadOutputDimensions` plus `applyReadOutputDimensions` are the shared execution primitives.
+Package authors should use the exported read-output contracts instead of inventing package-local limit or projection vocabularies. `PM_READ_OUTPUT_SURFACE_CONTRACTS` is the machine-readable matrix, `PM_READ_OUTPUT_CONTINUATION_FINGERPRINT_POLICIES` declares stable-snapshot exceptions, and `resolveReadOutputDimensions` plus `applyReadOutputDimensions` are the shared execution primitives.
 
 ## Drift Gates
 

package/docs/generated/REFUSAL_CLOSURE_CENSUS.md

@@ -4,12 +4,12 @@ Tracker: `pm-f05lsg`.
 
 Every catalog code is listed. An `uncovered` row is an explicit closure obligation, never an omission or implied approval.
 
-- Catalog error codes: 338
+- Catalog error codes: 342
 - Executable error codes: 16
 - Executable-code ratchet floor: 16
 - Required executable canonical codes: `bulk_ids_input_empty`, `bulk_ids_input_missing_path`, `bulk_ids_input_unreadable`, `invalid_argument_value`, `missing_lifecycle_target`, `missing_required_argument`, `projection_options_mutually_exclusive`, `tracker_not_initialized`, `tracker_root_missing`, `tracker_root_not_directory`, `tracker_root_unreadable`, `unknown_context_intent`, `unknown_field_projection`, `unknown_option`, `unknown_subcommand`
-- Uncovered error codes: 322
-- Coverage fraction: 0.047337
+- Uncovered error codes: 326
+- Coverage fraction: 0.046784
 - Closed-domain probes: 18
 - Grammar probes: 95
 
@@ -111,6 +111,7 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `history_author_acknowledge_target_unreadable` | `history_author_acknowledge_target_unreadable` | uncovered | none | 0 |
 | `history_drift_chain_mismatch` | `history_drift_chain_mismatch` | uncovered | none | 0 |
 | `history_drift_hash_mismatch` | `history_drift_hash_mismatch` | uncovered | none | 0 |
+| `history_drift_merge_receipt` | `history_drift_merge_receipt` | uncovered | none | 0 |
 | `history_drift_missing_stream` | `history_drift_missing_stream` | uncovered | none | 0 |
 | `history_drift_unreadable_stream` | `history_drift_unreadable_stream` | uncovered | none | 0 |
 | `history_merge_conflict_markers_detected` | `merge_conflict_markers_detected` | uncovered | none | 0 |
@@ -180,7 +181,10 @@ Every catalog code is listed. An `uncovered` row is an explicit closure obligati
 | `merge_conflict_markers_detected` | `merge_conflict_markers_detected` | uncovered | none | 0 |
 | `merge_decisions_unreviewed` | `merge_decisions_unreviewed` | uncovered | none | 0 |
 | `merge_git_config_unwritable` | `merge_git_config_unwritable` | uncovered | none | 0 |
+| `merge_receipt_evidence_invalid` | `merge_receipt_evidence_invalid` | uncovered | none | 0 |
+| `merge_receipts_pending` | `merge_receipts_pending` | uncovered | none | 0 |
 | `merge_reconcile_discards_require_acceptance` | `merge_reconcile_discards_require_acceptance` | uncovered | none | 0 |
+| `merge_reconcile_receipt_evidence_untrusted` | `merge_reconcile_receipt_evidence_untrusted` | uncovered | none | 0 |
 | `merge_root_not_found` | `merge_root_not_found` | uncovered | none | 0 |
 | `missing_allowed_values` | `missing_allowed_values` | uncovered | none | 0 |
 | `missing_budget` | `missing_budget` | uncovered | none | 0 |

package/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Official marketplace for pm CLI — native git-based project management for Claude Code and AI coding agents.",
-    "version": "2026.8.24"
+    "version": "2026.8.25"
   },
   "plugins": [
     {
       "name": "pm-claude",
       "source": "./plugins/pm-claude",
       "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents, hybrid TUI task tracking, session context injection, and coordination subagents for git-based project management without leaving Claude Code.",
-      "version": "2026.8.24",
+      "version": "2026.8.25",
       "author": {
         "name": "unbrained",
         "url": "https://github.com/unbraind/pm-cli"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-cli",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "description": "Git-native project management CLI for humans and agents.",
   "type": "module",
   "packageManager": "pnpm@11.10.0",

package/packages/pm-beads/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-beads",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for importing Beads JSONL records.",

package/packages/pm-calendar/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-calendar",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for calendar and agenda views.",

package/packages/pm-command-kit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-command-kit",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm exemplar package for the commands capability: registerCommand, registerFlags, and registerParser.",

package/packages/pm-digital-twin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-digital-twin",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a temporal production-facility digital twin built entirely on public pm SDK and extension primitives.",

package/packages/pm-governance-audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-governance-audit",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for governance audit and normalization workflows.",

package/packages/pm-guide-shell/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-guide-shell",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for guide and shell completion workflows.",

package/packages/pm-kanban/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-kanban",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm archetype package: a complete Kanban continuous-flow profile built on public SDK primitives.",

package/packages/pm-lifecycle-hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-lifecycle-hooks",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package demonstrating safe lifecycle hook registration.",

package/packages/pm-linked-test-adapters/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-linked-test-adapters",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for optional linked-test run management adapters and reporters.",

package/packages/pm-search-advanced/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-search-advanced",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for semantic, hybrid, and reindex search workflows.",

package/packages/pm-templates/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-templates",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for reusable create templates.",

package/packages/pm-todos/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-todos",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "First-party pm package for Todo markdown import and export.",

package/packages/pm-vcs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unbrained/pm-vcs-sdk-exemplar",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "private": true,
   "type": "module",
   "description": "Beyond-PM exemplar: a VCS-style changeset workflow built entirely on public pm SDK and extension primitives.",

package/plugins/pm-claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "pm-claude",
   "description": "Native pm CLI integration for Claude Code — 28 MCP tools, 5 workflow skills, 14 slash commands, 4 subagents (coordinator, delivery-chain, triage, verification), hybrid TUI task tracking (pm as persistent store + Claude Code task panel as live view), session context injection, and full git-based project management without leaving Claude Code.",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "author": {
     "name": "unbrained",
     "url": "https://github.com/unbraind/pm-cli"

package/plugins/pm-codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "pm-codex",
-  "version": "2026.8.24",
+  "version": "2026.8.25",
   "description": "Native Codex integration for pm-cli with bundled MCP tools, skills, commands, and agent workflows.",
   "author": {
     "name": "unbrained",