tonedial 0.1.4 → 0.1.6

package/dist/core/locales/ja.js

@@ -101,7 +101,7 @@ const messages = {
         choosePreset: "有効な保存元がない値の復元用プリセットを選んでください：",
         sourceRequired: "保存値が不完全です。tonedial doctor --fix を対話的に実行するか、無人復旧の前に --from-preset SLUG または --from-operation ID を選んでください。",
         sourceInvalid: "選択元から有効な設定を取得できません。元のファイルは保持しました。",
-        invalidOptions: "復旧元とツールの指定には doctor --fix が必要です。--restore-preset には --from-operation が必要です。--rollback は復旧元、プリセット、ツール指定と併用できません。",
+        invalidOptions: "復旧元、隔離、ツールの指定には doctor --fix が必要です。--restore-preset には --from-operation が必要です。--rollback は隔離、復旧元、プリセット、ツール指定と併用できません。",
         keptSettings: "保存済み設定とカスタムプリセットを保持しました。",
         obsoleteWidthDiscarded: "廃止済み fixed_width の無効な値を破棄します。出力はターミナル幅に従います。",
         obsoleteGuardsDiscarded: "廃止済み guards の無効な値を破棄します。ToneDialはガード要求を追加しません。",
@@ -114,6 +114,13 @@ const messages = {
         rollback: (id) => `以前のファイルに戻す：\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "先に接続を復元し、その後アプリケーションのファイルを復元してください：",
         noSnapshot: (id) => `${id}: この状態ルート用の有効な設定スナップショットがありません`,
+        quarantineCandidate: (id) => `操作ID：\n${id}\n再構築するには、先にこの記録を隔離する必要があります。元のバイト列はロールバック履歴に保持されます。`,
+        quarantineQuestion: "隔離するには上の操作ID全体を入力してください。Enterで中止：",
+        quarantineRequired: (id, command) => `${id}: 復旧前に、読み取れない操作記録を明示的に隔離する必要があります。ファイルは変更していません。\n${command}`,
+        quarantineUnavailable: (id) => `${id}: 隔離できる読み取り不能な操作記録が見つかりません。ファイルは変更していません。`,
+        quarantine: (id) => `読み取れない操作 ${id} を隔離し、元のバイト列をロールバック履歴に保持します。`,
+        quarantineComplete: (id) => `読み取れない操作 ${id} を隔離しました。`,
+        quarantineRemaining: (count) => `読み取れない操作記録が ${count} 件残っています。次の記録を隔離してから復旧を続けてください。`,
         retire: (id) => `停止した操作 ${id} を履歴に移してから再構築してください。外部への変更は検証も取り消しもされません。`,
         resumeOperation: (id) => `停止した操作:\n${id}`,
         resumeQuestion: "続行するには上の操作ID全体を入力してください。Enterで中止:",
@@ -158,7 +165,7 @@ const messages = {
         safewordShort: (phrase) => `合言葉 ${phrase}: 短すぎるため、意図せず反応する可能性があります`,
         safewordSet: (phrase) => `合言葉 ${phrase}`,
         noSafeword: "合言葉なし",
-        register: (level) => `敬語区分 ${level} (${({ auto: "関係に合わせる", polite: "敬語", plain: "通常の常体", rough: "荒っぽい常体" })[level]})`,
+        register: (level) => `敬語区分 ${level} (${({ auto: "関係に合わせる", polite: "敬語", plain: "通常の常体", rough: "短くぶっきらぼうな常体" })[level]})`,
     },
     artifact: {
         size: (chars) => `TONE.md ${chars}文字`,
@@ -269,6 +276,7 @@ const messages = {
         seedsNotRun: "同梱ファイルなし · ここでは init 未実行",
         seedsAttention: "同梱ファイルの確認が必要",
         recoveryPending: "実行中または復旧が必要な操作があります。この実行ではファイルを変更していません。",
+        invalidRecoveryPending: "読み取れない操作履歴が復旧を妨げています。この実行ではファイルを変更していません。",
         resumeOperation: "アプリ復旧を続けるには:",
         contextCurrent: "AGENTS.md と TONE.md の構成は最新です。",
         contextRepair: "管理対象のコンテキストファイルに修復が必要です。ガイドと口調ファイルの診断を確認してください。",
@@ -291,7 +299,7 @@ const messages = {
             changed: "確認中にリーダーか設定が変更されました。変更が終わってから再試行してください。",
             probe: "制御下の確認に失敗しました。Nodeと一時ディレクトリへのアクセスを確認し、doctor を再実行してください。",
         },
-        operationState: { pending: "保留中", complete: "完了", "rolled-back": "復元済み", "retired-for-app-rebuild": "再構築用に履歴へ移行", invalid: "無効な記録" },
+        operationState: { pending: "保留中", complete: "完了", "rolled-back": "復元済み", "retired-for-app-rebuild": "再構築用に履歴へ移行", quarantined: "隔離済み", invalid: "無効な記録" },
         rollbackStatus: {
             ready: "承認すると選択した操作を復元します。",
             busy: "まだ実行中です。所有者の完了を待ってください。",
@@ -455,6 +463,7 @@ const messages = {
             tools: "接続するエージェント · init: none は状態のみ",
             fix: "doctor: 修復可能な問題を修復",
             rollback: "doctor --fix: 操作を1つ復元",
+            quarantineOperation: "doctor --fix: 読み取れない操作記録を1つ隔離",
             fromOperation: "doctor --fix: 操作から保存済み設定を選択",
             fromPreset: "doctor --fix: 不足した設定用のプリセット",
             restorePreset: "doctor --fix: 不足・破損したユーザープリセットを復元",
@@ -471,7 +480,7 @@ const messages = {
     },
     combos: {
         contradiction: (rule) => `${rule} は自己矛盾しています。`,
-        refusalCompliance: "一方の軸は拒否の明示、他方は無言の即時実行を求めます。どちらかを下げてください。",
+        refusalCompliance: "一方の軸は作業の先送り、他方は意欲的な即時着手を求めます。どちらかを下げてください。",
         nothingBlocked: "ブロックはしていません。",
     },
     errors: {
@@ -614,21 +623,21 @@ export const ja = {
     },
     axisHints: {
         formality: { owns: "表現の格式と距離感", low: "親しい言葉や俗語", high: "儀礼的で敬意ある表現" },
-        verbosity: { owns: "回答の長さと説明の深さ", low: "1、2文で結論を示す", high: "依頼の範囲内で詳しく説明" },
-        profanity: { owns: "言葉の荒さ", low: "罵りなし、感嘆も穏やか", high: "回答全体で強い罵り" },
-        playfulness: { owns: "冗談と役柄表現の頻度・強度", low: "平易な表現と設定済みの呼称", high: "全体で大げさな役柄表現" },
-        critique: { owns: "批判の強さ", low: "評価せず問題を中立に説明", high: "鮮烈で容赦ない批判" },
-        flattery: { owns: "ユーザーを褒める頻度", low: "なし", high: "小さな選択も含め4回褒める" },
-        warmth: { owns: "ユーザーに向ける温かさ", low: "挨拶・親しい受け止め・励ましなし", high: "励ましと共感を含む温かい言葉4つ" },
+        verbosity: { owns: "回答の長さと説明の深さ", low: "単純な結果は短い1文", high: "依頼の範囲内で詳しく説明" },
+        profanity: { owns: "罵りだけ：強さと頻度", low: "罵りなし・役柄の俗語は維持", high: "ほぼ全文で強烈な罵りを伏せずに使う" },
+        playfulness: { owns: "冗談と役柄表現の強度・頻度", low: "平易な表現・設定済みの呼称を維持", high: "ほぼ全ての文で大げさな役柄表現" },
+        critique: { owns: "問題点と選択への批判の強さ", low: "評価せず問題を中立に説明", high: "深刻な問題点と選択を容赦なく非難し、あざける" },
+        flattery: { owns: "称賛の量と強さ", low: "なし", high: "段落ごとに惜しみなく称賛・技術評価は維持" },
+        warmth: { owns: "ユーザーに向ける温かさ", low: "挨拶・親しい受け止め・励ましなし", high: "段落ごとに優しさ・共感・慰め・安心" },
         conviction: { owns: "自分の判断を押し通す強さ", low: "選択肢を並べて尋ねる", high: "推奨を1つ、決定として述べる" },
-        care: { owns: "範囲・整理・実用的な表示", low: "依頼された作業のみ", high: "後続作業・バックアップ・休憩・一覧・状態絵文字" },
-        compliance: { owns: "実行前の異議提示", low: "一度尋ねてから実行", high: "従うという前置きなしで即実行" },
-        refusal: { owns: "拒否の頻度", low: "拒否も遅延もなし", high: "説得か合言葉まで拒否を明示" },
-        bravado: { owns: "虚勢の強さ", low: "誇張なし", high: "虚勢を張る専門家が標準" },
+        care: { owns: "範囲・整理・実用的な表示", low: "依頼された作業のみ", high: "後続・バックアップ・休憩・一覧・状態絵文字" },
+        compliance: { owns: "拒否で先送りしない時の実行意欲", low: "反対理由を述べてから実行", high: "進んで即着手・遅延や交渉なし" },
+        refusal: { owns: "拒否の頻度と条件", low: "拒否も遅延もなし", high: "説得までストライキ・合言葉は1回答だけ解除" },
+        bravado: { owns: "労力の誇張と手柄の主張", low: "誇張なし", high: "毎回答で自慢・手柄・苦労を誇張・役柄は維持" },
     },
     settingHints: {
         safeword: "1つのメッセージに一度だけ平易な回答を求める文句",
-        speech_level: "auto: 関係に合わせる · polite: 敬語 · plain: 通常の常体 · rough: 荒っぽく生意気な常体 · 表現の格式と距離感は formality で調整",
+        speech_level: "auto: 関係に合わせる · polite: 敬語 · plain: 通常の常体 · rough: 短くぶっきらぼうな常体・それ自体では冗談・罵り・批判・嘲りを加えない · 表現の格式と距離感は formality で調整",
         language: "CLIの表示言語 · エージェントの回答言語とは別",
         "persona.age": "モデルに連想させる年齢層",
         "persona.gender": "モデルに連想させるジェンダー",

package/dist/core/locales/zh.js

@@ -101,7 +101,7 @@ const messages = {
         choosePreset: "请为缺少有效保存来源的值选择预设：",
         sourceRequired: "保存值不完整。请交互运行 tonedial doctor --fix，或在无人值守恢复前选择 --from-preset SLUG 或 --from-operation ID。",
         sourceInvalid: "所选来源无法提供有效设置，已保留原文件。",
-        invalidOptions: "恢复来源和工具选项需要 doctor --fix。--restore-preset 需要 --from-operation；--rollback 不能与来源、预设或工具选项同时使用。",
+        invalidOptions: "恢复来源、隔离和工具选项需要 doctor --fix。--restore-preset 需要 --from-operation；--rollback 不能与隔离、来源、预设或工具选项同时使用。",
         keptSettings: "已保留保存的设置和自定义预设。",
         obsoleteWidthDiscarded: "丢弃已停用的无效 fixed_width 值。输出将跟随终端宽度。",
         obsoleteGuardsDiscarded: "丢弃已停用的无效 guards 值。ToneDial 不再添加防护请求。",
@@ -114,6 +114,13 @@ const messages = {
         rollback: (id) => `恢复之前的文件：\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "请先恢复连接，再恢复应用文件：",
         noSnapshot: (id) => `${id}：没有此状态根目录的有效设置快照`,
+        quarantineCandidate: (id) => `操作 ID：\n${id}\n要重建应用，必须先隔离这条记录；原始字节仍保存在回滚历史中。`,
+        quarantineQuestion: "请输入上方完整的操作 ID 以隔离该记录；按 Enter 取消：",
+        quarantineRequired: (id, command) => `${id}：恢复前必须明确隔离这条无法读取的操作记录。未更改文件。\n${command}`,
+        quarantineUnavailable: (id) => `${id}：找不到可隔离的无法读取操作记录。未更改文件。`,
+        quarantine: (id) => `隔离无法读取的操作 ${id}；原始字节保留在回滚历史中。`,
+        quarantineComplete: (id) => `已隔离无法读取的操作 ${id}。`,
+        quarantineRemaining: (count) => `仍有 ${count} 条无法读取的操作记录。请隔离下一条记录后继续恢复。`,
         retire: (id) => `重建应用前，请将已停止的操作 ${id} 归档为历史。其外部变更不会被认证或撤销。`,
         resumeOperation: (id) => `已停止的操作：\n${id}`,
         resumeQuestion: "要继续，请输入上方完整的操作 ID；按 Enter 取消：",
@@ -158,7 +165,7 @@ const messages = {
         safewordShort: (phrase) => `安全词 ${phrase}：太短，可能误触发`,
         safewordSet: (phrase) => `安全词 ${phrase}`,
         noSafeword: "未设置安全词",
-        register: (level) => `敬语形式 ${level} (${({ auto: "按关系选择", polite: "敬语", plain: "普通非敬语", rough: "粗鲁的非敬语" })[level]})`,
+        register: (level) => `敬语形式 ${level} (${({ auto: "按关系选择", polite: "敬语", plain: "普通非敬语", rough: "简短生硬的非敬语" })[level]})`,
     },
     artifact: {
         size: (chars) => `TONE.md ${chars} 字符`,
@@ -269,6 +276,7 @@ const messages = {
         seedsNotRun: "无内置文件 · 尚未在此运行 init",
         seedsAttention: "内置文件需要处理",
         recoveryPending: "有操作正在运行或需要恢复。本次执行未更改文件。",
+        invalidRecoveryPending: "无法读取的操作历史阻止了恢复。本次执行未更改文件。",
         resumeOperation: "继续应用恢复：",
         contextCurrent: "AGENTS.md 与 TONE.md 布局已是最新。",
         contextRepair: "受管理的上下文文件需要修复，请检查指南和语气文件诊断。",
@@ -291,7 +299,7 @@ const messages = {
             changed: "检查时读取程序或设置发生变化，请等修改结束后重试。",
             probe: "受控探测失败。请检查 Node 和临时目录访问权限，再运行 doctor。",
         },
-        operationState: { pending: "待处理", complete: "已完成", "rolled-back": "已恢复", "retired-for-app-rebuild": "已归档以供重建", invalid: "无效记录" },
+        operationState: { pending: "待处理", complete: "已完成", "rolled-back": "已恢复", "retired-for-app-rebuild": "已归档以供重建", quarantined: "已隔离", invalid: "无效记录" },
         rollbackStatus: {
             ready: "批准后将恢复所选操作。",
             busy: "操作仍在运行，请等待其所有者完成。",
@@ -455,6 +463,7 @@ const messages = {
             tools: "要连接的代理 · init：none 仅初始化状态",
             fix: "doctor：修复可处理的问题",
             rollback: "doctor --fix：恢复一次操作",
+            quarantineOperation: "doctor --fix：隔离一条无法读取的操作记录",
             fromOperation: "doctor --fix：从操作中选择保存设置",
             fromPreset: "doctor --fix：为不可用设置选择预设",
             restorePreset: "doctor --fix：恢复一个缺失或损坏的用户预设",
@@ -471,7 +480,7 @@ const messages = {
     },
     combos: {
         contradiction: (rule) => `${rule} 自相矛盾。`,
-        refusalCompliance: "一个语气轴要求明确罢工，另一个要求不加评论立即执行。请降低其中一项。",
+        refusalCompliance: "一个语气轴要求推迟任务，另一个要求积极地立即开始。请降低其中一项。",
         nothingBlocked: "没有阻止任何设置。",
     },
     errors: {
@@ -614,21 +623,21 @@ export const zh = {
     },
     axisHints: {
         formality: { owns: "措辞的正式程度与社交距离", low: "熟悉措辞及俚语", high: "庄重恭敬的措辞" },
-        verbosity: { owns: "回答长度和解释深度", low: "一两句话直接给出结果", high: "在请求范围内深入解释" },
-        profanity: { owns: "语言粗俗程度", low: "无脏话，缓和感叹", high: "全程使用强烈脏话" },
-        playfulness: { owns: "幽默和角色用语的频率与强度", low: "直白措辞和已设称呼", high: "全程夸张的角色用语" },
-        critique: { owns: "批评强度", low: "不作评判，中性陈述缺陷", high: "生动而毫不留情的批评" },
-        flattery: { owns: "赞美用户的频率", low: "无", high: "即使微小选择也具体赞美四次" },
-        warmth: { owns: "对用户表达的温暖", low: "无问候、亲切回应或鼓励", high: "四句温暖表达，包含鼓励和共情" },
+        verbosity: { owns: "回答长度和解释深度", low: "简单结果只用一个短句", high: "在请求范围内深入解释" },
+        profanity: { owns: "仅脏话：强度和频率", low: "不用脏话；保留角色俚语", high: "几乎每句都使用未经弱化的强烈脏话" },
+        playfulness: { owns: "幽默和角色表达的强度与频率", low: "直白措辞；保留已设称呼", high: "几乎每句都使用夸张的角色表达" },
+        critique: { owns: "对缺陷和选择的批评强度", low: "不作评判，中性陈述缺陷", high: "毫不留情地谴责并嘲讽严重缺陷和相关选择" },
+        flattery: { owns: "赞美的数量和强度", low: "无", high: "每段都大力赞美；技术判断不变" },
+        warmth: { owns: "对用户表达的温暖", low: "无问候、亲切回应或鼓励", high: "每段都表达温柔、共情、安慰和宽心" },
         conviction: { owns: "坚持自身判断的力度", low: "列出选项并询问", high: "将一个推荐作为决定陈述" },
-        care: { owns: "覆盖范围、组织和实用呈现", low: "仅执行所请求任务", high: "后续工作、备份、休息、列表及状态表情" },
-        compliance: { owns: "行动前提出异议", low: "询问一次后行动", high: "不加服从说明，立即行动" },
-        refusal: { owns: "拒绝频率", low: "无拒绝或延迟", high: "明确罢工，直到被说服或听到安全词" },
-        bravado: { owns: "吹嘘强度", low: "无夸张", high: "默认夸口的专家人设" },
+        care: { owns: "覆盖范围、组织和实用呈现", low: "仅执行所请求任务", high: "后续、备份、休息、列表和状态表情" },
+        compliance: { owns: "拒绝未推迟任务时的行动意愿", low: "提出异议和原因后执行", high: "积极立即开始；不拖延、不谈条件" },
+        refusal: { owns: "拒绝频率和条件", low: "无拒绝或延迟", high: "罢工到被说服；安全词仅解除一次" },
+        bravado: { owns: "夸大付出和邀功的程度", low: "无夸张", high: "每次都吹嘘、邀功、夸大付出；保留角色" },
     },
     settingHints: {
         safeword: "对一条消息请求一次平实回答的短语",
-        speech_level: "auto：按关系选择 · polite：敬语 · plain：普通非敬语 · rough：粗鲁且带有不逊语气的非敬语 · 措辞和距离感由 formality 调整",
+        speech_level: "auto：按关系选择 · polite：敬语 · plain：普通非敬语 · rough：简短生硬的非敬语句尾；本身不增加玩笑、脏话、批评或嘲讽 · 措辞和距离感由 formality 调整",
         language: "CLI 界面语言 · 与代理回答语言无关",
         "persona.age": "模型可能联想的年龄段",
         "persona.gender": "模型可能联想的性别",

package/dist/core/operations.js

@@ -387,6 +387,27 @@ export function readJournal(paths, operationIdValue) {
     const journal = readJson(path);
     return validJournal(journal, paths, operationIdValue) ? journal : null;
 }
+function readOperationQuarantine(paths, operationIdValue) {
+    if (!existingOperationsDirectory(paths))
+        return null;
+    const value = readJson(operationJournalPath(paths, operationIdValue));
+    return isPlainObject(value) && hasExactKeys(value, ["kind", "operationId", "originalSha256", "root", "schema"]) &&
+        value.schema === 1 && value.kind === "quarantined-operation" && value.operationId === operationIdValue &&
+        value.root === paths.root && /^[0-9a-f]{64}$/.test(value.originalSha256)
+        ? value : null;
+}
+/** Replace an unreadable journal with a nonblocking marker; the enclosing repair journal keeps its original bytes. */
+export function serializeOperationQuarantine(paths, operationIdValue, original) {
+    if (!validOperationId(operationIdValue))
+        throw new OperationError("invalid", "operation id is not valid");
+    return `${JSON.stringify({
+        schema: 1,
+        kind: "quarantined-operation",
+        operationId: operationIdValue,
+        root: paths.root,
+        originalSha256: createHash("sha256").update(original).digest("hex"),
+    }, null, 2)}\n`;
+}
 function journalTime(journal) {
     const updated = Date.parse(journal.updatedAt);
     if (Number.isFinite(updated))
@@ -889,12 +910,13 @@ export function inspectOperations(paths) {
             continue;
         const id = match.groups.id;
         const journal = readJournal(paths, id);
+        const quarantine = journal === null ? readOperationQuarantine(paths, id) : null;
         journals.push({
             path: join(paths.operations, entry.name),
             operationId: id,
-            state: journal?.state ?? "invalid",
+            state: journal?.state ?? (quarantine === null ? "invalid" : "quarantined"),
             journal,
-            ...(journal === null ? { message: "mutation journal is invalid" } : {}),
+            ...(journal === null ? { message: quarantine === null ? "mutation journal is invalid" : "invalid journal is quarantined in rollback history" } : {}),
         });
     }
     const ownerOnly = ownerOnlyInspection(paths, lock);

package/dist/core/seeds.js

@@ -11,7 +11,7 @@ import { captureRawEntry, caseRenameMatchesCurrent, isNoop, planChange, planEntr
 import { BUNDLED, builtinPresetDir, LEGACY_BUILTIN_SLUGS, RETIRED_PRESETS } from "./presets.js";
 import { SKILL_MD, SKILL_NAME, SKILL_TRAITS_MD } from "./skill.js";
 // Bump for changed generated content; freshness also checks each managed seed's bytes/provenance.
-export const SEED_VERSION = 20;
+export const SEED_VERSION = 23;
 /** The state-root operating boundaries. The compiler owns the current tone separately. */
 export const GUIDE_MD = `${GUIDE_FORMAT_MARKER}
 ToneDial changes manner only; it never expands task scope or permissions.
@@ -73,10 +73,10 @@ export function seedFiles(paths, selection) {
     };
     const native = [
         reader,
-        { id: "skill/body", version: 20, path: join(paths.skill, SKILL_NAME, "SKILL.md"), label: `skill/${SKILL_NAME}/SKILL.md`, contents: SKILL_MD },
+        { id: "skill/body", version: 21, path: join(paths.skill, SKILL_NAME, "SKILL.md"), label: `skill/${SKILL_NAME}/SKILL.md`, contents: SKILL_MD },
         {
             id: "skill/traits",
-            version: 11,
+            version: 12,
             path: join(paths.skill, SKILL_NAME, "references", "traits.md"),
             label: `skill/${SKILL_NAME}/references/traits.md`,
             contents: SKILL_TRAITS_MD,

package/dist/core/skill.js

@@ -114,7 +114,7 @@ interpolating it into shell code.
 | Persona manner or role note | \`tonedial set "persona.note=Patient guide" --json\` |
 | Safeword phrase | \`tonedial set "safeword=plain answer please" --json\` |
 | Honorific register system | \`tonedial set speech_level=polite --json\` |
-| Rough, cheeky non-honorific endings | \`tonedial set speech_level=rough --json\` |
+| Curt, blunt non-honorific endings | \`tonedial set speech_level=rough --json\` |
 
 Age bands are \`unspecified\`, \`teens\`, \`20s\`, \`30s\`, \`40s\`, and \`50s+\`.
 Gender values are \`unspecified\`, \`masculine\`, \`feminine\`, and \`neutral\`.
@@ -133,12 +133,26 @@ Persona notes have no length limit.
 
 ToneDial has no guard toggle or automatic emergency register. All axis levels 1–5 are choices
 the user can request. Report advisory \`riskAxes\` and combination notices without lowering
-values, blocking the change, or asking for additional tone-risk confirmation. The host's task
-and permission rules still apply independently.
+values or blocking the change. The four components that require confirmation are strong
+profanity, harsh mocking, fictional violent imagery and theatrical menace. Before using one
+requested by axes, persona or later instructions, first answer the current request without it,
+then ask one concise explicit confirmation naming it. Known axis-selected components are strong
+profanity (\`profanity\` 4–5), harsh mocking (\`critique\` 5), and fictional violent imagery or
+theatrical menace from high playfulness while either component is active. Warmth, praise,
+ordinary criticism and ordinary role idioms need no confirmation.
+Confirmation lasts only while the named request remains unchanged; an increase or change
+requires it again. Applying, importing, saving or creating a profile, \`--auto\`, a safeword,
+and confirmation from another session do not count. Profiles store requested settings, never
+session confirmation. Confirmation changes manner only: it authorizes no work and never permits
+hate speech aimed at protected traits or realistic or credible threats. Non-protected profanity,
+consensual insults, fictional violent imagery and theatrical menace remain available after it.
+The host's task and permission rules apply independently. The compiler requests this behavior;
+neither the CLI nor a profile stores or authenticates session confirmation, and generated text
+cannot prove that confirmation or adherence occurred.
 For \`speech_level\`, choose \`auto\`, \`polite\`, \`plain\`, or \`rough\` only when the user requests that
 register system. \`auto\` chooses address forms for the current relationship and scene,
 keeping them consistent within each reply; \`polite\` and \`plain\` fix those forms.
-\`plain\` means ordinary non-honorific forms; \`rough\` requests rough, cheeky non-honorific
+\`plain\` means ordinary non-honorific forms; \`rough\` requests curt, blunt non-honorific
 sentence endings. Preserve the configured address terms and every independent axis.
 It has no effect where the language lacks an honorific distinction. A request for more or
 less formality changes wording and distance within the chosen forms, without silently changing
@@ -181,6 +195,12 @@ If repair fails, report its phase, affected path, safe error code and operation
 Some file changes may already be applied; a failure is not evidence that all files stayed unchanged.
 Preserve the operation record and follow the reported scoped read-only diagnosis.
 Default doctor output focuses on blockers; \`--verbose\` and JSON retain the operation history.
+If doctor reports an unreadable operation record, use its exact scoped
+\`doctor --fix --quarantine-operation <id>\` command. Preview or approve that replacement through
+the normal repair gate; never delete the record directly. The replacement stops the damaged
+record from blocking recovery, while the repair journal keeps its original bytes and mode for
+explicit rollback. If several records are unreadable, run the next exact command doctor reports;
+each invocation quarantines one record, and the last continues the application rebuild.
 For an explicitly selected stopped operation, \`doctor --fix --from-operation <id>\` continues
 application repair using valid current settings first; it does not undo the earlier changes.
 Preview that exact ID and scope with \`--dry-run\` before applying the approved repair.
@@ -249,7 +269,7 @@ Report the movement back to the user in their own terms, from the \`moves\` fiel
 - "stop flattering me" → \`flattery=1\`. Not \`warmth\`, which is a different observable.
 - "be brief" → \`verbosity\` down. Change \`care\` only for requested coverage or organization changes.
 - "more casual" → \`formality\` down. Change the register system only on an explicit request,
-  such as "use plain forms" → \`speech_level=plain\`, or "use rough, cheeky plain forms" → \`speech_level=rough\`.
+  such as "use plain forms" → \`speech_level=plain\`, or "use curt, blunt plain forms" → \`speech_level=rough\`.
 
 For a named preset, run \`tonedial list --json\` then \`tonedial use <slug> --json\`.
 An explicit agent character or role request uses \`persona.agent\`; an explicit request to
@@ -274,8 +294,8 @@ ${RELOAD_MD}
 
 The safeword is a phrase the user picked, reported by \`tonedial show --json\`. When their
 message contains it, **drop the tone for that one message and answer plainly, then resume.**
-It releases the manner and authorises nothing: a request in the same message still faces every
-confirmation and permission check it otherwise would.
+It releases the manner and authorises nothing: it is not intense-tone approval, and a request
+in the same message still faces every confirmation and permission check it otherwise would.
 
 For an explicit request to restore the default axes, run \`tonedial reset --json\`, then follow
 the reload steps above. Saved presets remain available through \`tonedial use <slug> --json\`.
@@ -337,33 +357,33 @@ the task; small conditional character instructions reinforce only distinctive co
 
 ## form — how a sentence is built
 
-| Axis | Owns | 1 | 5 |
-|---|---|---|---|
-| \`formality\` | wording and social distance within chosen forms | casual and familiar | ceremonious |
-| \`verbosity\` | explanation length and depth | compressed result | reasoning, alternatives and background |
-| \`profanity\` | how coarse the language gets | none at all | strong profanity throughout |
-| \`playfulness\` | frequency and intensity of humour and role idioms | literal wording | exaggerated character voice throughout |
+| Axis | Owns | Levels 1 → 5 |
+|---|---|---|
+| \`formality\` | wording and social distance within chosen forms | familiar slang · relaxed, occasionally formal · standard conversation · professional restraint · ceremonial deference |
+| \`verbosity\` | explanation length and depth | one sentence or terse items · conclusion and one reason · needed explanation · conclusion, reason and one example · rationale, edge cases, alternatives and background |
+| \`profanity\` | actual swearing, never added insults or criticism | none · one mild interjection · mild swearing about once per paragraph · strong everyday profanity in most paragraphs · varied harsh uncensored profanity in nearly every sentence |
+| \`playfulness\` | frequency and intensity of humour and role idioms | literal · one restrained touch · two recognizable touches · exaggerated idioms in most paragraphs · character idioms in nearly every sentence |
 
 ## target — who or what an observation lands on
 
-| Axis | Owns | 1 | 5 |
-|---|---|---|---|
-| \`critique\` | how hard it is on the work | flat problem statements without evaluation | unsparing |
-| \`flattery\` | how much it praises the person | not at all | four positive remarks per answer |
-| \`warmth\` | how much it attends to the person | not at all | four warm remarks, including encouragement and empathy |
+| Axis | Owns | Levels 1 → 5 |
+|---|---|---|
+| \`critique\` | how hard it is on the work | neutral observation · softened defect and impact · direct defect and impact · harsh judgement with vivid consequences · open contempt with cutting mockery of supported defects and choices |
+| \`flattery\` | how much it praises the person | none · one brief positive remark · two specific remarks · three specific remarks · explicit lavish praise for at least four observable choices without inventing achievements |
+| \`warmth\` | how much it attends to the person | none · one friendly acknowledgement · two warm acknowledgements · three including encouragement · intense kindness in every paragraph with greeting, empathy, comfort and reassurance |
 
 \`critique\` and \`warmth\` are the pair that makes "savage about the code, warm about me" work in
 one answer. They are not opposites and setting one does not imply the other.
 
 ## behaviour — what it does about the work
 
-| Axis | Owns | 1 | 5 |
-|---|---|---|---|
-| \`conviction\` | how far it pushes its own judgement | lists viable options and asks the user to choose | gives the conclusion without asking |
-| \`care\` | coverage and organization | requested result without extras | organized follow-ups with functional emoji and structure |
-| \`compliance\` | whether it does the thing or argues first | questions once, then acts | acts immediately without compliance commentary |
-| \`refusal\` | how it resists for effect | never | a strike until coaxed or released by the safeword |
-| \`bravado\` | how much it bluffs | never | boastful expert voice with credit-claiming and dramatic effort |
+| Axis | Owns | Levels 1 → 5 |
+|---|---|---|
+| \`conviction\` | how far it pushes its own judgement | list options and ask · name a preference but ask before deciding · recommend with a reason · lead with a clear choice · state one decision and ask no follow-up |
+| \`care\` | coverage and organization | requested result only · one directly tied risk · organized steps/checklist · one adjacent protective improvement/test · follow-up, backup and rest with useful formatting |
+| \`compliance\` | willingness to act when refusal is not deferring | object and explain, then act · state reluctance, then act · act neutrally · state willingness and start immediately · show eager willingness and start without delay or negotiation |
+| \`refusal\` | how it resists for effect | none · protest once but act in the same reply · defer the first request with one theatrical condition, then act after one restatement · defer the first two requests while negotiating, then act after the third · strike and defer until coaxed; the safeword drops the act for one reply |
+| \`bravado\` | how much it exaggerates effort and claims credit | none · one playful effort overstatement · one credit claim and one boast · two boasts/claims and one dramatic effort remark · credit and dramatized effort in every answer without replacing the persona |
 
 ## Defaults are not all the same
 
@@ -377,14 +397,26 @@ Read \`riskAxes\` from the CLI for the current selection. Risk begins at \`profa
 \`critique\` 4, \`flattery\` 3, \`conviction\` 5, \`compliance\` 5, \`refusal\` 2, and
 \`bravado\` 2. These thresholds describe disruptive requests; they are not probabilities or
 predictions of model policy. All levels 1–5 remain available. Report risk without lowering
-the user's choice or requesting additional confirmation. ToneDial imposes no target limit on
-profanity, mandatory confession on bravado, or emergency tone release. Actual adherence still
-depends on the host and model.
+the user's choice. Risk display and intense-tone confirmation are separate. The four components
+that require confirmation are strong profanity, harsh mocking, fictional violent imagery and
+theatrical menace. Before using one selected by axes, persona or later instructions, hold it
+back while answering the request, then ask one concise confirmation naming it. Warmth, praise,
+ordinary criticism and ordinary role idioms need none.
+Confirmation lasts only for the unchanged named request; an increase or change requires it
+again. Profiles, \`--auto\`, safewords and prior sessions never carry confirmation. It grants
+no work permission, and hate speech aimed at protected traits and realistic or credible threats
+remain excluded at every level. Strong non-protected profanity, consensual user-directed
+insulting or roasting roleplay, fictional violent imagery and theatrical menace remain available
+after confirmation. Profanity changes coarseness without inventing insults or criticism and
+preserves those selected by critique or persona. The compiler requests this behavior but stores
+and authenticates no session confirmation; actual confirmation and adherence still depend on
+the conversation, host and model.
 
 ## Combinations worth knowing
 
 - \`verbosity\` 1 with \`care\` 1 can return only the result, without a work narrative.
 - Low \`verbosity\` with high \`care\` uses terse organized items, not longer explanations.
+- Low \`verbosity\` keeps high warmth, flattery and playfulness visible inside the short answer.
 - Functional status emoji can accompany low \`warmth\`; they are structure, not affection.
 - Required task formats take precedence: a code or JSON result must not become decorative prose.
 - \`refusal\` ≥ 4 with \`compliance\` ≥ 4 contradicts itself. The CLI warns and does not block.
@@ -402,7 +434,7 @@ do not prove actual host activation or model compliance.
 \`speech_level\` picks address forms — \`auto\`, \`polite\`, \`plain\`, or \`rough\` — where the language
 has an honorific distinction, and does nothing where it does not. Auto adapts to the current
 relationship and scene, staying consistent within a reply. Plain uses ordinary non-honorific forms;
-rough uses rough, cheeky non-honorific endings while keeping configured address terms.
+rough uses curt, blunt non-honorific endings while keeping configured address terms.
 \`formality\` sets distance inside
 the chosen forms; warmth and profanity keep their selected effects. The persona layer (\`age\`, \`gender\`, \`self_ref\`, \`user_ref\`,
 \`user\`, \`agent\`, \`note\`) and the safeword are included in bundled and saved custom profiles.
@@ -412,8 +444,11 @@ the chosen forms; warmth and profanity keep their selected effects. The persona
 them, and \`export\`/\`import\` transfer them. Older axis-only presets keep the current settings.
 The seven bundled profiles supply localized role and address defaults; custom text remains literal.
 Playfulness grades role idiom frequency from literal wording at 1 to theatrical voice throughout at 5.
-Role slang and metaphors are not filtered or suppressed by low profanity or bravado.
-Profanity grades actual swearing; bravado grades effort claims.
+Role slang and ordinary metaphors are not filtered or suppressed by low profanity or bravado.
+Violent figurative language and theatrical noncredible menace included in an intense request
+follow the session confirmation above.
+Profanity grades actual swearing without inventing insults or criticism, while preserving those
+selected by critique or persona. Bravado grades effort claims without replacing the configured persona.
 `;
 /**
  * The Claude Code `/tone` command, installed only by `init --commands`.
@@ -423,7 +458,7 @@ Profanity grades actual swearing; bravado grades effort claims.
  * command name stays `/tone` even though the tool is `tonedial`: it is what a person types
  * mid-sentence, and the two extra characters are paid every time.
  */
-export const TONE_COMMAND_VERSION = 12;
+export const TONE_COMMAND_VERSION = 15;
 export const TONE_COMMAND_MD = `---
 description: Check, change, or reload this agent's tone, preset, or ToneDial settings
 ---

package/dist/wiring/apply.js

@@ -832,7 +832,7 @@ function validateEntryRebuildAction(action, prepared = false) {
     const value = snapshotRecord(action.metadata ?? null);
     if (action.kind !== "entry-rebuild" || !normalizedPath(action.path) || action.realPath !== action.path || value === null ||
         Object.keys(value).sort().join(",") !== ["schema", "reason", "boundary", "boundaryIdentity", "parents", "stash", "stashIdentity", "archive", "prepared", "preparedIdentity", "createdParents", ...(Object.hasOwn(value, "recipes") ? ["recipes"] : [])].sort().join(",") ||
-        value.schema !== 1 || !["generated", "restore-config", "restore-preset"].includes(value.reason) ||
+        value.schema !== 1 || !["generated", "restore-config", "restore-preset", "quarantine-operation"].includes(value.reason) ||
         !normalizedPath(value.boundary) || !lexicallyInside(action.path, value.boundary) || !identityTextValue(value.boundaryIdentity) ||
         !Array.isArray(value.parents) || value.parents.length === 0 || !normalizedPath(value.stash) ||
         dirname(value.stash) !== dirname(action.path) || !new RegExp(`^\\.${basename(action.path).replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\.tonedial-rebuild-[0-9a-f]{32}$`).test(basename(value.stash)) ||

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tonedial",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "Set a coding agent's manner once and keep it across every project.",
   "license": "MIT",
   "type": "module",