Settle the suite-wide fallout of the wave

- The record-settings contract, slug-list, and section-frame tests
  follow the slugs that left the registry (layout children resolve
  their headings from the layout namespace, like production).
- The orphaned settings.sections.<module>.title/description keys leave
  all six locales; the reverse-coverage guard flagged them the moment
  their nav entries stopped existing.
- The operator-cap ledger read fails open on a read error — the
  reservation layer still meters against the same ledger, and a
  transient blip must not take the fallback chain down.
- The reaper queue joins the subsystem surface; its healed count and
  the sweep's nag_dismissed join the job-fact vocabulary.
- The intake-event contract fixture carries the full row the resource
  now declares; the workouts empty-state test asserts the
  source-neutral cue; the persister poll gates on rendered content
  first.

src/lib/ai/provider-runner.ts

@@ -409,7 +409,10 @@ async function runRawChain(
     // candidate run; an exhausted cap skips the candidate exactly like a
     // failed hop (next entry, or AllProvidersFailedError at the end).
     if (isOperatorFundedProvider(candidate.providerType)) {
-      const spent = await readDailySpend(userId);
+      // Fail OPEN on a ledger read error: the reservation layer still
+      // meters every call against the same ledger, so a transient read
+      // failure here must not take the whole fallback chain down with it.
+      const spent = await readDailySpend(userId).catch(() => 0);
       if (spent >= OPERATOR_COST_CAP) {
         const hop: FallbackHop = {
           providerType: candidate.providerType,

src/lib/jobs/job-outcome.ts

@@ -128,6 +128,8 @@ export const JOB_FACT_ALLOWLIST: ReadonlySet<string> = new Set([
   "module_off",
   "mood_entries_migrated",
   "mood_pruned",
+  // v1.37.19 (A3-6) — ignored Coach reminders auto-dismissed at the nag cap.
+  "nag_dismissed",
   "notifications_dispatched",
   "notifications_failed",
   "notified",
@@ -195,6 +197,8 @@ export const JOB_FACT_ALLOWLIST: ReadonlySet<string> = new Set([
   "stored",
   "subscription_repair_failed",
   "summaries_enqueued",
+  // v1.37.19 (A7-4) — stale-PENDING summary rows the hourly reaper healed.
+  "summary_pending_healed",
   "suppressed_client_managed",
   "suppressed_discreet",
   "thumbnails_enqueued",

src/lib/jobs/subsystem-surface.ts

@@ -127,6 +127,8 @@ const subsystemSurface = {
   "mcp-token-cleanup": { audience: "system" },
   "med-notes-encryption-backfill": { audience: "system" },
   "document-tombstone-purge": { audience: "system" },
+  // v1.37.19 (A7-4) — hourly heal of summary rows stuck on PENDING.
+  "document-summary-reaper": { audience: "system" },
   "document-content-index-backfill": { audience: "account" },
   "document-index": { audience: "account" },
   "document-thumbnail": { audience: "account" },

src/lib/openapi/__tests__/medication-auth-contract-drift.test.ts

@@ -91,6 +91,8 @@ describe("medications — documented shapes match the handlers", () => {
   });
 
   it("admits APPLE_HEALTH as an intake source (IntakeSource enum, v1.28)", () => {
+    // v1.37.19 (A4-8) — the resource declares the FULL row both intake
+    // responses return, so the fixture carries every field.
     const event = {
       id: "cm000000000000000000000",
       userId: "cm111111111111111111111",
@@ -98,9 +100,18 @@ describe("medications — documented shapes match the handlers", () => {
       scheduledFor: "2026-07-19T08:00:00.000Z",
       takenAt: "2026-07-19T08:05:00.000Z",
       skipped: false,
+      autoMissed: false,
+      attributionSource: "AUTO",
       source: "APPLE_HEALTH",
       idempotencyKey: null,
       createdAt: "2026-07-19T08:05:00.000Z",
+      updatedAt: "2026-07-19T08:05:00.000Z",
+      injectionSite: null,
+      doseTaken: null,
+      inventoryConsumption: null,
+      externalId: "hk-intake-1",
+      syncVersion: 1,
+      deletedAt: null,
     };
     const parsed = medicationIntakeEventResource.safeParse(event);
     expect(parsed.success, JSON.stringify(parsed.error?.issues)).toBe(true);