@tryinget/pi-agent-vent 0.2.0 → 0.2.1

package/docs/project/2026-06-05-self-toolbox-agent-vent-diagnostic-boundary.md

@@ -48,6 +48,9 @@ Rules:
 - `toolbox` activation only makes the `agent_vent` tool callable; it does not create or preview a diagnostic record.
 - `agent_vent action=preview` sanitizes the would-be record and runs the anti-junk quality check without writing the store.
 - `agent_vent action=record` writes only if the local quality check accepts the payload.
+- `self.diagnostic_candidate.v1` exposes separate `agentVentSuggestionAllowed` and `agentVentRecordAllowed` permissions. Plain `no agent_vent` / `no-agent_vent` constraints suppress activation, preview, and record guidance. Record-only `no agent_vent record` / `no-agent_vent-record` constraints preserve non-mutating preview guidance while marking durable recording forbidden.
+- ASC category `context_alignment` is accepted by `agent_vent` as a compatibility alias and normalized to canonical category `other`; the alias does not add a new canonical category.
+- The toolbox bundle currently exposes only its `default` diagnostic profile. Keep a call read-only by choosing `agent_vent` actions such as `preview`, `review`, or `stats`; do not invent `profile=read`.
 - Generic low-signal summaries such as `done` are rejected for `record`; use `preview` to inspect issues and warnings before writing.
 - Human/operator judgment still decides whether any recurrence should become an AK task, GitHub issue, incident review, evidence record, publication, or owner-surface handoff.
 

package/extensions/agent-vent.ts

@@ -1,3 +1,9 @@
+// ---
+// summary: registers the agent_vent tool and command for local diagnostic review workflows
+// read_when:
+//   - changing agent vent actions, command parsing, tool schemas, or authority boundaries
+// ---
+
 import path from "node:path";
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
@@ -92,6 +98,7 @@ const CATEGORY_ALIAS_INPUTS = [
   "docs_gap",
   "context_window",
   "context_friction",
+  "context_alignment",
   "tooling_friction",
 ] as const;
 const CATEGORY_INPUTS = [...CATEGORIES, ...CATEGORY_ALIAS_INPUTS] as const;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryinget/pi-agent-vent",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Local pi tool for agents to record recurring frustrations, bugs, and workflow friction without creating incidents or external telemetry",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
@@ -87,8 +87,8 @@
   },
   "devDependencies": {
     "@biomejs/biome": "2.3.14",
-    "@earendil-works/pi-ai": "0.80.6",
-    "@earendil-works/pi-coding-agent": "0.80.6"
+    "@earendil-works/pi-ai": "0.83.0",
+    "@earendil-works/pi-coding-agent": "0.83.0"
   },
   "overrides": {
     "fast-xml-parser": "5.3.6"
@@ -99,6 +99,6 @@
     "typebox": "*"
   },
   "dependencies": {
-    "typebox": "*"
+    "typebox": "1.3.7"
   }
 }

package/scripts/docs-list.sh

@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+# ---
+# summary: locates and invokes documentation listing support for pi-agent-vent
+# read_when:
+#   - enumerating package docs or overriding the docs-list implementation
+# ---
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"

package/scripts/quality-gate.sh

@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+# ---
+# summary: runs pi-agent-vent quality stages through the root gate or package fallback
+# read_when:
+#   - checking lint, types, tests, or scaffold structure in varied checkout layouts
+# ---
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"

package/scripts/release-artifact-check.mjs

@@ -1,3 +1,9 @@
+// ---
+// summary: validates packed file whitelists and local links in published markdown
+// read_when:
+//   - changing pi-agent-vent package contents or release artifact policy
+// ---
+
 import fs from "node:fs";
 import path from "node:path";
 
@@ -10,7 +16,7 @@ export const assertSafePackPath = (filePath) => {
   return filePath;
 };
 
-export const parsePackJson = (packJsonText) => {
+export const parsePackJson = (packJsonText, expectedIdentity = null) => {
   let pack;
   try {
     pack = JSON.parse(packJsonText || "[]");
@@ -18,11 +24,30 @@ export const parsePackJson = (packJsonText) => {
     throw new Error(`Could not parse npm pack --dry-run --json output: ${error.message}`);
   }
 
-  if (!Array.isArray(pack) || !pack[0] || !Array.isArray(pack[0].files)) {
+  let packEntry = null;
+  if (Array.isArray(pack) && pack.length === 1) {
+    [packEntry] = pack;
+  } else if (pack && typeof pack === "object") {
+    const entries = Object.entries(pack);
+    if (entries.length === 1 && entries[0][0] === entries[0][1]?.name) {
+      packEntry = entries[0][1];
+    }
+  }
+  if (!packEntry || !Array.isArray(packEntry.files)) {
     throw new Error("Could not parse npm pack --dry-run --json output.");
   }
+  if (
+    expectedIdentity &&
+    (packEntry.name !== expectedIdentity.name ||
+      packEntry.version !== expectedIdentity.version ||
+      packEntry.id !== `${expectedIdentity.name}@${expectedIdentity.version}`)
+  ) {
+    throw new Error(
+      `npm pack identity mismatch: expected ${expectedIdentity.name}@${expectedIdentity.version}.`,
+    );
+  }
 
-  return pack[0].files
+  return packEntry.files
     .map((file) => normalizePackPath(String(file.path || "")))
     .filter(Boolean)
     .map(assertSafePackPath)
@@ -182,8 +207,13 @@ export const runReleaseArtifactCheck = ({
   cwd = process.cwd(),
   log = console.log,
 }) => {
-  const actualFiles = parsePackJson(packJsonText);
-  const filesEntries = readPackageFilesContract(path.join(cwd, "package.json"));
+  const manifestPath = path.join(cwd, "package.json");
+  const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+  const actualFiles = parsePackJson(packJsonText, {
+    name: manifest.name,
+    version: manifest.version,
+  });
+  const filesEntries = readPackageFilesContract(manifestPath);
   const whitelist = validatePackageFilesWhitelist({ actualFiles, filesEntries, cwd });
 
   if (whitelist.missing.length || whitelist.extra.length) {

package/scripts/release-check.sh

@@ -1,9 +1,42 @@
 #!/usr/bin/env bash
+# ---
+# summary: exercises pi-agent-vent packaging, isolated installation, and release smoke gates
+# read_when:
+#   - preparing a release or investigating tarball and pi installation failures
+# ---
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+REPO_ROOT="$(cd "$ROOT_DIR/../.." && pwd)"
 cd "$ROOT_DIR"
 
+# Scratch-root resolution, from first principles:
+# the invariant is "release-check scratch lands on a managed, disposable root",
+# NOT "the TMPDIR variable happens to be exported". A GitHub-hosted runner is
+# single-tenant and ephemeral; its RUNNER_TEMP is exactly a managed scratch
+# root for that job, so CI satisfies the invariant even though runners never
+# export TMPDIR. Locally the strict rule is unchanged: no TMPDIR, no run.
+if [[ -n "${TMPDIR:-}" ]]; then
+  TMP_ROOT="$TMPDIR"
+elif [[ "${GITHUB_ACTIONS:-}" == "true" && -n "${RUNNER_TEMP:-}" && -d "${RUNNER_TEMP:-}" ]]; then
+  TMP_ROOT="$RUNNER_TEMP"
+else
+  echo "TMPDIR must name the managed scratch root for release checks" >&2
+  exit 1
+fi
+mkdir -p "$TMP_ROOT"
+TMP_ROOT="$(cd "$TMP_ROOT" && pwd -P)"
+case "$TMP_ROOT" in
+  /|"$ROOT_DIR"|"$ROOT_DIR"/*)
+    echo "Release check refused unsafe TMPDIR: $TMP_ROOT" >&2
+    exit 1
+    ;;
+esac
+release_tmp_dir() {
+  local label="$1"
+  mktemp -d "$TMP_ROOT/pi-agent-vent-${label}-XXXXXX"
+}
+
 NAME="$(node -p "JSON.parse(require('node:fs').readFileSync('package.json', 'utf8')).name")"
 VERSION="$(node -p "JSON.parse(require('node:fs').readFileSync('package.json', 'utf8')).version")"
 REPOSITORY_URL="$(node -p "(() => { const pkg = JSON.parse(require('node:fs').readFileSync('package.json', 'utf8')); const repo = pkg.repository; if (typeof repo === 'string') return repo.trim(); if (repo && typeof repo === 'object' && typeof repo.url === 'string') return repo.url.trim(); return ''; })()")"
@@ -18,7 +51,7 @@ with_release_npm_policy() {
   local prefix="$2"
   shift 2
   case "$cache" in
-    /tmp/pi-agent-vent-*-npm-cache-*) ;;
+    "$TMP_ROOT"/pi-agent-vent-*-npm-cache-*) ;;
     *)
       echo "Release command refused non-isolated npm cache: $cache" >&2
       return 1
@@ -26,7 +59,7 @@ with_release_npm_policy() {
   esac
   if [[ "$prefix" != "-" ]]; then
     case "$prefix" in
-      /tmp/pi-agent-vent-*-npm-prefix-*) ;;
+      "$TMP_ROOT"/pi-agent-vent-*-npm-prefix-*) ;;
       *)
         echo "Release command refused non-isolated npm prefix: $prefix" >&2
         return 1
@@ -50,10 +83,10 @@ release_npm_install() {
   local prefix="$2"
   shift 2
   with_release_npm_policy "$cache" "$prefix" npm install \
-    --ignore-scripts --no-audit --fund=false "$@"
+    --include=optional --ignore-scripts --no-audit --fund=false "$@"
 }
 
-CONTROL_NPM_CACHE="$(mktemp -d /tmp/pi-agent-vent-control-npm-cache-XXXXXX)"
+CONTROL_NPM_CACHE="$(release_tmp_dir control-npm-cache)"
 TEST_AGENT_DIR=""
 TEST_NPM_PREFIX=""
 TEST_NPM_CACHE=""
@@ -97,6 +130,9 @@ fi
 echo "== npm pack --dry-run --json"
 PACK_JSON="$(npm --cache "$CONTROL_NPM_CACHE" pack --dry-run --json)"
 echo "$PACK_JSON"
+if [[ -f "$REPO_ROOT/scripts/npm-pack-json.mjs" ]]; then
+  PACK_JSON="$(printf '%s' "$PACK_JSON" | node "$REPO_ROOT/scripts/npm-pack-json.mjs")"
+fi
 
 PACK_JSON="$PACK_JSON" node ./scripts/release-artifact-check.mjs
 
@@ -120,8 +156,8 @@ TARBALL="$(npm --cache "$CONTROL_NPM_CACHE" pack --silent | tail -n 1)"
 TARBALL_PATH="$ROOT_DIR/$TARBALL"
 echo "Tarball: $TARBALL_PATH"
 
-TARBALL_CHECK_DIR="$(mktemp -d /tmp/pi-agent-vent-tarball-check-XXXXXX)"
-TARBALL_NPM_CACHE="$(mktemp -d /tmp/pi-agent-vent-tarball-npm-cache-XXXXXX)"
+TARBALL_CHECK_DIR="$(release_tmp_dir tarball-check)"
+TARBALL_NPM_CACHE="$(release_tmp_dir tarball-npm-cache)"
 echo "== unpacked tarball package contract"
 tar -xzf "$TARBALL_PATH" -C "$TARBALL_CHECK_DIR"
 (
@@ -132,9 +168,9 @@ tar -xzf "$TARBALL_PATH" -C "$TARBALL_CHECK_DIR"
   npm run check
 )
 
-ARTIFACT_NPM_PREFIX="$(mktemp -d /tmp/pi-agent-vent-artifact-npm-prefix-XXXXXX)"
-ARTIFACT_NPM_CACHE="$(mktemp -d /tmp/pi-agent-vent-artifact-npm-cache-XXXXXX)"
-ARTIFACT_TOOL_VENT_DIR="$(mktemp -d /tmp/pi-agent-vent-artifact-tool-store-XXXXXX)"
+ARTIFACT_NPM_PREFIX="$(release_tmp_dir artifact-npm-prefix)"
+ARTIFACT_NPM_CACHE="$(release_tmp_dir artifact-npm-cache)"
+ARTIFACT_TOOL_VENT_DIR="$(release_tmp_dir artifact-tool-store)"
 ARTIFACT_PACKAGE_ROOT="$(npm --prefix "$ARTIFACT_NPM_PREFIX" root -g)/$NAME"
 
 case "$ARTIFACT_PACKAGE_ROOT" in
@@ -173,9 +209,9 @@ else
     exit 1
   fi
 
-  TEST_AGENT_DIR="$(mktemp -d /tmp/pi-agent-vent-pi-agent-dir-XXXXXX)"
-  TEST_NPM_PREFIX="$(mktemp -d /tmp/pi-agent-vent-pi-npm-prefix-XXXXXX)"
-  TEST_NPM_CACHE="$(mktemp -d /tmp/pi-agent-vent-pi-npm-cache-XXXXXX)"
+  TEST_AGENT_DIR="$(release_tmp_dir pi-agent-dir)"
+  TEST_NPM_PREFIX="$(release_tmp_dir pi-npm-prefix)"
+  TEST_NPM_CACHE="$(release_tmp_dir pi-npm-cache)"
 
   cp "$HOME/.pi/agent/auth.json" "$TEST_AGENT_DIR/auth.json"
 

package/scripts/release-smoke-check.mjs

@@ -1,3 +1,9 @@
+// ---
+// summary: supplies assertions and isolated tool-path probes for release smoke testing
+// read_when:
+//   - changing installed-artifact validation or agent_vent release smoke behavior
+// ---
+
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/scripts/release-smoke.sh

@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+# ---
+# summary: smoke-tests the installed agent_vent package through isolated pi discovery
+# read_when:
+#   - verifying tarball installation, command output, or registered-tool execution
+# ---
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"

package/scripts/validate-structure.mjs

@@ -1,4 +1,9 @@
 #!/usr/bin/env node
+// ---
+// summary: enforces pi-agent-vent manifest, script, extension, and lane structure contracts
+// read_when:
+//   - editing package metadata, copier answers, publish files, or required npm scripts
+// ---
 
 import fs from "node:fs";
 

package/scripts/validate-structure.sh

@@ -1,4 +1,9 @@
 #!/usr/bin/env bash
+# ---
+# summary: verifies the pi-agent-vent scaffold tree, executables, and markdown frontmatter
+# read_when:
+#   - checking filesystem conformance after package scaffold or documentation changes
+# ---
 set -euo pipefail
 
 ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"

package/src/vent-store.js

@@ -1,3 +1,9 @@
+// ---
+// summary: implements private agent vent storage, review projections, and retention safeguards
+// read_when:
+//   - changing diagnostic record schemas, redaction, curation, review, export, or retention logic
+// ---
+
 import { createHash, randomUUID } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
@@ -32,6 +38,7 @@ export const CATEGORY_ALIASES = Object.freeze({
   docs_gap: "documentation",
   context_window: "context_loss",
   context_friction: "context_loss",
+  context_alignment: "other",
   tooling_friction: "friction",
 });
 export const SEVERITIES = ["low", "medium", "high", "critical"];

package/tests/agent-vent-extension.test.js

@@ -1,3 +1,9 @@
+// ---
+// summary: tests agent_vent tool registration, commands, actions, and authority-safe output
+// read_when:
+//   - modifying the extension schema, command surface, lifecycle actions, or smoke contracts
+// ---
+
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";
@@ -46,6 +52,7 @@ test("agent_vent tool schema stays aligned with retention candidate and compare
   assert.match(schemaText, /"compare"/);
   assert.match(schemaText, /"preview"/);
   assert.match(schemaText, /"workflow_friction"/);
+  assert.match(schemaText, /"context_alignment"/);
   assert.match(schemaText, /"candidates"/);
   assert.match(schemaText, /"history"/);
   assert.match(schemaText, /retentionCandidateState/);
@@ -549,6 +556,23 @@ test("agent_vent accepts category aliases for tool records and command filters",
       "workflow:workflow-friction-alias-should-normalize",
     );
 
+    const alignmentPreview = await tool.execute(
+      "tool-call-context-alignment-alias",
+      {
+        action: "preview",
+        summary: "Context alignment candidate should remain callable",
+        category: "context_alignment",
+      },
+      undefined,
+      undefined,
+      {
+        cwd: "/repo",
+        sessionManager: { getSessionFile: () => undefined },
+      },
+    );
+    assert.equal(alignmentPreview.details.wouldRecord, true);
+    assert.equal(alignmentPreview.details.recordPreview.category, "other");
+
     const reviewResult = await tool.execute(
       "tool-call-category-alias-review",
       { action: "review", category: "workflow_friction" },

package/tests/release-artifact-check.test.js

@@ -1,3 +1,9 @@
+// ---
+// summary: tests package whitelist parsing and published markdown link validation
+// read_when:
+//   - changing release artifact checks, pack output handling, or files-array policy
+// ---
+
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";
@@ -77,6 +83,28 @@ test("pack json parser fails closed for malformed, stale, or unsafe pack output"
   );
 });
 
+test("pack json parser accepts canonical arrays and npm 12 package-keyed objects", () => {
+  const entry = { name: "@tryinget/pi-agent-vent", files: [{ path: "package.json" }] };
+  assert.deepEqual(parsePackJson(JSON.stringify([entry])), ["package.json"]);
+  assert.deepEqual(parsePackJson(JSON.stringify({ "@tryinget/pi-agent-vent": entry })), [
+    "package.json",
+  ]);
+  assert.throws(
+    () =>
+      parsePackJson(
+        JSON.stringify({
+          "@tryinget/pi-agent-vent": entry,
+          "@tryinget/other": entry,
+        }),
+      ),
+    /Could not parse npm pack/,
+  );
+  assert.throws(
+    () => parsePackJson(JSON.stringify({ "@tryinget/wrong": entry })),
+    /Could not parse npm pack/,
+  );
+});
+
 test("package files whitelist fails closed for wildcard entries", () => {
   assert.throws(
     () =>
@@ -114,13 +142,19 @@ test("package files whitelist detects missing and extra artifact entries", () =>
 test("release artifact check accepts directory files entries and always-included metadata", () => {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), "agent-vent-release-check-ok-"));
   try {
-    fs.writeFileSync(path.join(dir, "package.json"), JSON.stringify({ files: ["docs"] }));
+    fs.writeFileSync(
+      path.join(dir, "package.json"),
+      JSON.stringify({ name: "@tryinget/pi-agent-vent", version: "0.2.0", files: ["docs"] }),
+    );
     fs.writeFileSync(path.join(dir, "README.md"), "[guide](docs/guide.md)\n");
     fs.writeFileSync(path.join(dir, "LICENSE"), "local test license\n");
     fs.mkdirSync(path.join(dir, "docs"));
     fs.writeFileSync(path.join(dir, "docs", "guide.md"), "# Guide\n");
     const packJsonText = JSON.stringify([
       {
+        id: "@tryinget/pi-agent-vent@0.2.0",
+        name: "@tryinget/pi-agent-vent",
+        version: "0.2.0",
         files: [
           { path: "README.md" },
           { path: "LICENSE" },
@@ -142,18 +176,51 @@ test("release artifact check accepts directory files entries and always-included
   }
 });
 
+test("release artifact check rejects pack identity that differs from the local manifest", () => {
+  const dir = fs.mkdtempSync(path.join(os.tmpdir(), "agent-vent-release-identity-"));
+  try {
+    fs.writeFileSync(
+      path.join(dir, "package.json"),
+      JSON.stringify({ name: "@tryinget/pi-agent-vent", version: "0.2.0", files: ["README.md"] }),
+    );
+    fs.writeFileSync(path.join(dir, "README.md"), "# Agent Vent\n");
+    const packJsonText = JSON.stringify([
+      {
+        id: "@tryinget/not-pi-agent-vent@999.0.0",
+        name: "@tryinget/not-pi-agent-vent",
+        version: "999.0.0",
+        files: [{ path: "README.md" }, { path: "package.json" }],
+      },
+    ]);
+
+    assert.throws(
+      () => runReleaseArtifactCheck({ cwd: dir, packJsonText, log: () => {} }),
+      /npm pack identity mismatch/,
+    );
+  } finally {
+    fs.rmSync(dir, { recursive: true, force: true });
+  }
+});
+
 test("release artifact check reports packaged markdown failures with actionable wording", () => {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), "agent-vent-release-check-"));
   try {
     fs.writeFileSync(
       path.join(dir, "package.json"),
-      JSON.stringify({ files: ["README.md", "docs/guide.md"] }),
+      JSON.stringify({
+        name: "@tryinget/pi-agent-vent",
+        version: "0.2.0",
+        files: ["README.md", "docs/guide.md"],
+      }),
     );
     fs.mkdirSync(path.join(dir, "docs"));
     fs.writeFileSync(path.join(dir, "README.md"), "[missing](docs/missing.md)\n");
     fs.writeFileSync(path.join(dir, "docs", "guide.md"), "# Guide\n");
     const packJsonText = JSON.stringify([
       {
+        id: "@tryinget/pi-agent-vent@0.2.0",
+        name: "@tryinget/pi-agent-vent",
+        version: "0.2.0",
         files: [{ path: "README.md" }, { path: "docs/guide.md" }, { path: "package.json" }],
       },
     ]);

package/tests/release-smoke-check.test.js

@@ -1,3 +1,9 @@
+// ---
+// summary: tests isolated release-smoke contracts for installed agent_vent artifacts
+// read_when:
+//   - changing tarball source validation, package discovery, or path-tool smoke probes
+// ---
+
 import assert from "node:assert/strict";
 import fs from "node:fs";
 import os from "node:os";
@@ -17,17 +23,17 @@ import {
 test("release smoke release-age bypass is gated by one exact host contract", () => {
   const packageJson = {
     devDependencies: {
-      "@earendil-works/pi-ai": "0.80.6",
-      "@earendil-works/pi-coding-agent": "0.80.6",
+      "@earendil-works/pi-ai": "0.83.0",
+      "@earendil-works/pi-coding-agent": "0.83.0",
     },
   };
-  assert.equal(assertExactHostContract({ packageJson, hostVersion: "0.80.6" }), "0.80.6");
+  assert.equal(assertExactHostContract({ packageJson, hostVersion: "0.83.0" }), "0.83.0");
   assert.throws(
-    () => assertExactHostContract({ packageJson, hostVersion: "^0.80.6" }),
+    () => assertExactHostContract({ packageJson, hostVersion: "^0.83.0" }),
     /requires an exact Pi host version/,
   );
   assert.throws(
-    () => assertExactHostContract({ packageJson, hostVersion: "0.80.7" }),
+    () => assertExactHostContract({ packageJson, hostVersion: "0.83.1" }),
     /host contract mismatch/,
   );
 });

package/tests/vent-store.test.js

@@ -1,3 +1,9 @@
+// ---
+// summary: tests agent vent persistence, redaction, review projections, and retention safety
+// read_when:
+//   - modifying vent-store records, filters, curation, exports, backups, or filesystem guards
+// ---
+
 import assert from "node:assert/strict";
 import { createHash } from "node:crypto";
 import fs from "node:fs";
@@ -121,18 +127,31 @@ test("category aliases normalize at record and review-filter boundaries", () =>
     summary: "Missing affordance alias should preserve meaning",
     category: "missing_affordance",
   });
+  const alignment = createVentRecord({
+    summary: "Context alignment candidate should remain callable",
+    category: "context_alignment",
+  });
 
   assert.equal(workflow.category, "workflow");
   assert.equal(workflow.recurrenceKey, "workflow:workflow-alias");
   assert.equal(missing.category, "missing_capability");
   assert.match(missing.recurrenceKey, /^missing_capability:/);
+  assert.equal(alignment.category, "other");
+  assert.match(alignment.recurrenceKey, /^other:/);
 
-  const queue = summarizeReviewQueue([workflow, missing], [], {
+  const queue = summarizeReviewQueue([workflow, missing, alignment], [], {
     filters: { category: "workflow_friction" },
   });
   assert.equal(queue.filters.category, "workflow");
   assert.equal(queue.matchingGroupCount, 1);
   assert.equal(queue.items[0].recurrenceKey, workflow.recurrenceKey);
+
+  const alignmentQueue = summarizeReviewQueue([workflow, missing, alignment], [], {
+    filters: { category: "context_alignment" },
+  });
+  assert.equal(alignmentQueue.filters.category, "other");
+  assert.equal(alignmentQueue.matchingGroupCount, 1);
+  assert.equal(alignmentQueue.items[0].recurrenceKey, alignment.recurrenceKey);
 });
 
 test("explicit recurrence keys are redacted before slugging", () => {