tonedial 0.1.1 → 0.1.3

package/dist/core/selfupdate.js

@@ -1,12 +1,14 @@
 // Bounded release download and extraction; the candidate installer owns package replacement.
 import { spawnSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { accessSync, constants, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
-import { join } from "node:path";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { gunzipSync } from "node:zlib";
 import { ConfigError } from "./config.js";
 import { decodeUtf8, getBounded, urlIdentity } from "./net.js";
+import { fileIdentity, onPath } from "./paths.js";
 /** Where releases come from. Overridable for tests, exactly as `install.sh` overrides it. */
 export const REGISTRY = "https://registry.npmjs.org";
 /**
@@ -23,12 +25,76 @@ const METADATA_BOUNDS = { maxBytes: 1024 * 1024, timeoutMs: RELEASE_TIMEOUT_MS }
 export function installedVersion(paths) {
     try {
         const raw = JSON.parse(readFileSync(join(paths.lib, "package.json"), "utf8"));
-        return typeof raw.version === "string" ? raw.version : null;
+        return raw.name === "tonedial" && typeof raw.version === "string" && /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.+-]+)?$/.test(raw.version)
+            ? raw.version : null;
     }
     catch {
         return null;
     }
 }
+/** Bind npm's global target to this running copy before allowing package-manager writes. */
+export function inspectNpmInstall(env, t) {
+    const executable = onPath("npm", env);
+    if (executable === null)
+        throw new ConfigError(t.update.npmMissing);
+    const entry = resolve(executable);
+    const query = (args) => {
+        const result = spawnSync(entry, args, { env, encoding: "utf8", timeout: RELEASE_TIMEOUT_MS, maxBuffer: 1024 * 1024, stdio: ["ignore", "pipe", "pipe"] });
+        const value = result.stdout?.trim();
+        if (result.status !== 0 || !value || !isAbsolute(value) || /[\r\n\0]/.test(value))
+            throw new ConfigError(t.update.npmScopeUnknown);
+        return resolve(value);
+    };
+    const prefix = query(["prefix", "-g"]);
+    const root = join(query(["root", "-g", "--prefix", prefix]), "tonedial");
+    let install;
+    try {
+        const own = fileURLToPath(new URL("../../", import.meta.url));
+        const current = fileIdentity(own);
+        const target = fileIdentity(root);
+        const version = installedVersion({ lib: root });
+        if (lstatSync(root, { throwIfNoEntry: false })?.isSymbolicLink() || current === null || target === null || current.dev !== target.dev || current.ino !== target.ino || version === null) {
+            throw new ConfigError(t.update.npmScopeMismatch);
+        }
+        install = { entry, prefix, root, version };
+    }
+    catch {
+        throw new ConfigError(t.update.npmScopeMismatch);
+    }
+    try {
+        // npm replaces the package by renaming it in this parent, not by editing its files.
+        accessSync(dirname(root), constants.W_OK | constants.X_OK);
+    }
+    catch (cause) {
+        const code = cause.code;
+        if (code === "EACCES" || code === "EPERM")
+            throw new ConfigError(t.update.npmPermissionDenied(code, prefix));
+        throw new ConfigError(t.update.npmScopeUnknown);
+    }
+    return install;
+}
+/** npm owns replacement; captured output cannot corrupt JSON or disclose npm configuration. */
+export function updateNpmInstall(install, env, t) {
+    const current = inspectNpmInstall(env, t);
+    if (current.entry !== install.entry || current.prefix !== install.prefix || current.root !== install.root || current.version !== install.version)
+        throw new ConfigError(t.update.npmScopeMismatch);
+    const result = spawnSync(install.entry, ["update", "-g", "tonedial", "--prefix", install.prefix, "--json"], { env, encoding: "utf8", timeout: 120_000, maxBuffer: RELEASE_MAX_BYTES, stdio: ["ignore", "pipe", "pipe"] });
+    if (result.status !== 0) {
+        let code;
+        try {
+            code = JSON.parse(result.stdout ?? "null")?.error?.code;
+        }
+        catch { /* npm may fail before JSON output. */ }
+        code ??= /^npm (?:error|ERR!) code (EACCES|EPERM)\s*$/m.exec(result.stderr ?? "")?.[1];
+        if (code === "EACCES" || code === "EPERM")
+            throw new ConfigError(t.update.npmPermissionDenied(code, install.prefix));
+        throw new ConfigError(t.update.npmFailed);
+    }
+    const version = installedVersion({ lib: install.root });
+    if (version === null)
+        throw new ConfigError(t.update.versionUnknown);
+    return version;
+}
 /** Whether the one external tool this needs is here. Checked before anything is downloaded. */
 export function haveTar() {
     return spawnSync("tar", ["--version"], { stdio: "ignore" }).status === 0;

package/dist/core/skill.js

@@ -29,7 +29,14 @@ or repair decision. Never edit or recreate them directly.
 /** Both entry points distinguish current tone settings from saved profiles. */
 const PRESETS_MD = `## Current settings and saved presets
 
-\`tonedial show --json\` reports the current settings. \`show <slug> --json\` previews that
+\`tonedial get --json\` reports the current editable settings in a flat \`values\` object.
+\`get <key> --json\` selects one of those keys, preserving numbers, literal text and nulls.
+The keys are the twelve axes, \`language\`, \`speech_level\`, \`safeword\`, and
+\`persona.age\`, \`persona.gender\`, \`persona.self_ref\`, \`persona.user_ref\`,
+\`persona.note\`, \`persona.user\`, and \`persona.agent\`.
+\`language\` selects the CLI interface, not the agent's reply language.
+Read-only \`get\` neither changes settings nor reloads this conversation.
+\`tonedial show --json\` adds the overview and artifact metadata. \`show <slug> --json\` previews that
 preset's saved tone settings. \`unsaved\` on the current result means the current tone settings
 have not been saved back to a profile; the current configuration itself is persisted.
 For an explicit request to save a profile, use \`tonedial save "<display name>" --json\`.
@@ -86,7 +93,7 @@ Persona, address, safeword, and \`speech_level\` are separate from the axes.
 \`playfulness\` increases the frequency and exaggeration of the chosen role's expressions:
 literal wording at 1, one restrained touch at 2, two recognizable touches at 3,
 frequent theatrical idioms at 4, and a character voice throughout at 5.
-Role slang and figurative language are not filtered; the CLI warns about rude or violent idioms.
+Role slang and figurative language are not filtered.
 \`profanity\` still grades actual swearing; \`bravado\` grades claims about effort.
 Change one only when the user explicitly asks for that setting; preserve every other setting.
 Use the user's chosen text and values, not the illustrative values below.
@@ -107,6 +114,7 @@ interpolating it into shell code.
 | Persona manner or role note | \`tonedial set "persona.note=Patient guide" --json\` |
 | Safeword phrase | \`tonedial set "safeword=plain answer please" --json\` |
 | Honorific register system | \`tonedial set speech_level=polite --json\` |
+| Rough, cheeky non-honorific endings | \`tonedial set speech_level=rough --json\` |
 
 Age bands are \`unspecified\`, \`teens\`, \`20s\`, \`30s\`, \`40s\`, and \`50s+\`.
 Gender values are \`unspecified\`, \`masculine\`, \`feminine\`, and \`neutral\`.
@@ -121,15 +129,17 @@ Agent experience and specialty are roleplay, not verified credentials or tool ca
 Both descriptions lose to axes and task/permission rules, and may influence content.
 A persona note expresses manner or role, loses to axes, and may also influence
 content; it is not a way to override task or permission rules.
-The CLI warns above 200 Unicode code points instead of rejecting the note; report its warnings.
+Persona notes have no length limit.
 
 ToneDial has no guard toggle or automatic emergency register. All axis levels 1–5 are choices
 the user can request. Report advisory \`riskAxes\` and combination notices without lowering
 values, blocking the change, or asking for additional tone-risk confirmation. The host's task
 and permission rules still apply independently.
-For \`speech_level\`, choose \`polite\`, \`plain\`, or \`auto\` only when the user requests that
+For \`speech_level\`, choose \`auto\`, \`polite\`, \`plain\`, or \`rough\` only when the user requests that
 register system. \`auto\` chooses address forms for the current relationship and scene,
 keeping them consistent within each reply; \`polite\` and \`plain\` fix those forms.
+\`plain\` means ordinary non-honorific forms; \`rough\` requests rough, cheeky non-honorific
+sentence endings. Preserve the configured address terms and every independent axis.
 It has no effect where the language lacks an honorific distinction. A request for more or
 less formality changes wording and distance within the chosen forms, without silently changing
 \`speech_level\`. Familiar polite, formal plain and affectionate swearing are valid combinations;
@@ -198,12 +208,13 @@ the user to complete CLI installation and explicit setup; do not install it or g
 ## Read the current state first
 
 \`\`\`bash
-tonedial show --json
+tonedial get --json
 \`\`\`
 
-The payload carries \`axes\` (twelve axes, each 1–5), \`defaults\`, \`groups\`, \`kinds\`,
-\`riskAxes\`, \`persona\`, \`safeword\`, \`speech_level\`, and \`chars\`. Every command takes \`--json\` and answers with a
-\`schema\` field.
+The \`values\` object carries the twelve axis levels and the separate settings under their
+editable keys. An unset setting is \`null\`; description text is returned in full.
+For the formatted overview, preset state and advisory \`riskAxes\`, use \`tonedial show --json\`.
+Every command takes \`--json\` and answers with a \`schema\` field.
 ${JSON_MD}
 Otherwise report the failed step
 and stop that flow. Never report a failed mutation as saved; failures after a successful mutation
@@ -230,7 +241,7 @@ Report the movement back to the user in their own terms, from the \`moves\` fiel
 - "stop flattering me" → \`flattery=1\`. Not \`warmth\`, which is a different observable.
 - "be brief" → \`verbosity\` down. Change \`care\` only for requested coverage or organization changes.
 - "more casual" → \`formality\` down. Change the register system only on an explicit request,
-  such as "use plain forms" → \`speech_level=plain\`.
+  such as "use plain forms" → \`speech_level=plain\`, or "use rough, cheeky plain forms" → \`speech_level=rough\`.
 
 For a named preset, run \`tonedial list --json\` then \`tonedial use <slug> --json\`.
 An explicit agent character or role request uses \`persona.agent\`; an explicit request to
@@ -308,7 +319,7 @@ During a test conversation, do not mutate ToneDial settings or perform work thro
  */
 export const SKILL_TRAITS_MD = `# Axes
 
-Twelve axes, each 1 to 5. Read the live values with \`tonedial show --json\`; this file says what
+Twelve axes, each 1 to 5. Read the live values with \`tonedial get --json\`; this file says what
 each one **owns**, which is what tells you which axis a request is actually about.
 
 Axes name distinct aspects of a reply. Map the aspect the user named rather than changing
@@ -369,7 +380,6 @@ depends on the host and model.
 - Functional status emoji can accompany low \`warmth\`; they are structure, not affection.
 - Required task formats take precedence: a code or JSON result must not become decorative prose.
 - \`refusal\` ≥ 4 with \`compliance\` ≥ 4 contradicts itself. The CLI warns and does not block.
-- \`formality\` ≥ 4 with \`profanity\` ≥ 4 holds but reads oddly.
 - \`warmth\` ≥ 4 with \`profanity\` ≥ 4, and \`compliance\` ≤ 2 with \`conviction\` ≤ 2, each get a
   composite sentence in the artifact rather than being left to collide.
 - Care 5 adds a caring organizer signature; high playfulness with high bravado adds a cocky expert signature. These are static instructions selected by the combination layer.
@@ -381,9 +391,11 @@ do not prove actual host activation or model compliance.
 
 ## Settings that are not axes
 
-\`speech_level\` picks address forms — \`auto\`, \`polite\`, or \`plain\` — where the language
+\`speech_level\` picks address forms — \`auto\`, \`polite\`, \`plain\`, or \`rough\` — where the language
 has an honorific distinction, and does nothing where it does not. Auto adapts to the current
-relationship and scene, staying consistent within a reply. \`formality\` sets distance inside
+relationship and scene, staying consistent within a reply. Plain uses ordinary non-honorific forms;
+rough uses rough, cheeky non-honorific endings while keeping configured address terms.
+\`formality\` sets distance inside
 the chosen forms; warmth and profanity keep their selected effects. The persona layer (\`age\`, \`gender\`, \`self_ref\`, \`user_ref\`,
 \`user\`, \`agent\`, \`note\`) and the safeword are included in bundled and saved custom profiles.
 \`persona.user\` is user context and \`persona.agent\` a fictional agent role, each limited to
@@ -393,7 +405,7 @@ them, and \`export\`/\`import\` transfer them. Older axis-only presets keep the
 The seven bundled profiles supply localized role and address defaults; custom text remains literal.
 Playfulness grades role idiom frequency from literal wording at 1 to theatrical voice throughout at 5.
 Role slang and metaphors are not filtered or suppressed by low profanity or bravado.
-Profanity grades actual swearing; bravado grades effort claims. The CLI carries advisory examples.
+Profanity grades actual swearing; bravado grades effort claims.
 `;
 /**
  * The Claude Code `/tone` command, installed only by `init --commands`.
@@ -403,12 +415,12 @@ Profanity grades actual swearing; bravado grades effort claims. The CLI carries
  * command name stays `/tone` even though the tool is `tonedial`: it is what a person types
  * mid-sentence, and the two extra characters are paid every time.
  */
-export const TONE_COMMAND_VERSION = 8;
+export const TONE_COMMAND_VERSION = 11;
 export const TONE_COMMAND_MD = `---
 description: Check, change, or reload this agent's tone, preset, or ToneDial settings
 ---
 
-Run \`tonedial show --json\` and report the requested current settings in plain language.
+Run \`tonedial get --json\` and report the requested current settings from \`values\` in plain language.
 Use the same installed CLI and environment throughout.
 ${JSON_MD}
 Otherwise report the failed step and stop that flow.

package/dist/ui/format.js

@@ -11,7 +11,7 @@ export function nextStep(command, ui) {
 /** One advisory notice from the shared axis metadata, without changing selected levels. */
 export function riskWarnings(axes, t) {
     const risks = riskyAxes(axes);
-    return [...(risks.length ? [t.notice.riskAxes(risks)] : []), ...(axes.playfulness >= 4 ? [t.notice.roleplay] : [])];
+    return risks.length ? [t.notice.riskAxes(risks)] : [];
 }
 /** Two retained phases restore their shared config in reverse order, with copyable IDs. */
 export function recoveryRollbackLines(t, appId, nativeId) {
@@ -64,10 +64,7 @@ export function num(n) {
 export function artifactSize(size, t) {
     return t.artifact.size(num(size.chars));
 }
-/** Render combination warnings with the same layer distinction in every command. */
+/** Contradictions stay advisory and never block the selected values. */
 export function combination(w, t) {
-    const sentence = t.combos[w.id];
-    return w.layer === "forbidden"
-        ? `${t.combos.contradiction(w.rule)} ${sentence} ${t.combos.nothingBlocked}`
-        : `${t.combos.reads(w.rule)} ${sentence}`;
+    return `${t.combos.contradiction(w.rule)} ${t.combos[w.id]} ${t.combos.nothingBlocked}`;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tonedial",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Set a coding agent's manner once and keep it across every project.",
   "license": "MIT",
   "type": "module",