tonedial 0.1.5 → 0.1.7

package/README.zh.md

@@ -2,7 +2,7 @@
 
 **给编程代理一个角色。**
 
-选择角色，调整十二个语气轴，保存一套能在不同项目中复用的语气。
+ToneDial 是本地 CLI，用于调整编程代理的语气并在不同项目中复用。
 
 **7 个角色 · 12 个语气轴 · 5 种 CLI 语言 · 零运行时依赖**
 
@@ -19,9 +19,36 @@
 
 **[查看全部 7 个角色 →](https://github.com/awesometic/tonedial/blob/main/docs/EXAMPLES.zh.md)**
 
-## 试试这样用？
+## 同一模型，更精简的计划
 
-完成[设置](#开始试用)后，选择一组配置。
+在 `gpt-5.6-sol` / `high` 下，一个全新会话使用 Codex 默认设置，另一个使用下方完整的 `vibe-coder` 配置。
+`verbosity=1` 只是该配置的一部分，并非唯一差异。
+
+**指令**
+
+> I want to make ToneDial easier for first-time users. The README should get them from installation through `tonedial init` to their first preview with `tonedial test codex --preset <slug>`, and the CLI should make that next step obvious after `init`. Give me a prioritized three-step improvement plan for the README and first-run CLI flow.
+
+<img src="https://raw.githubusercontent.com/awesometic/tonedial/main/docs/media/readme/zh/verbosity-comparison.svg" alt="GPT-5.6 Sol high 使用 Codex 默认设置和完整 vibe-coder 配置回答同一条 ToneDial 改进计划指令；配置后的英文回复从 148 个词缩短到 82 个词" width="760">
+
+<sub>同一指令 · 每个新会话的首次完整回复 · 英文回复 148 个词 → 82 个词。这是一次示例性对比，并非只隔离单个轴的基准测试。回复用于展示语气差异；产品行为和命令请以下方指南为准。 <a href="https://github.com/awesometic/tonedial/blob/main/docs/media/readme/verbosity-comparison.json">输入与生成记录</a>.</sub>
+
+## 开始试用
+
+需要 **Node 24 或更高版本**和 npm。
+
+```bash
+npm install --global tonedial
+tonedial init --tools none --global --lang zh
+tonedial set
+```
+
+设置时会先展示文件变更并请求批准。无需连接代理即可先打开面板试用。
+
+[连接代理](https://github.com/awesometic/tonedial/blob/main/docs/USAGE.md#connecting-an-agent) · [使用临时设置试用](https://github.com/awesometic/tonedial/blob/main/docs/TESTING.md#isolated-candidate)
+
+## 复制一种语气
+
+复制完整配置，或把它作为自定义设置的起点。
 每条命令都会保存并应用完整配置；`--auto` 会批准显示的更改。
 
 实际 `tonedial test codex` 回复 · `gpt-6.1-sol` / `high` · 每组配置保留问题的首次回答 · 仅对话，不编辑文件。 [输入与生成记录](https://github.com/awesometic/tonedial/blob/main/docs/media/readme/zh/use-cases.json).
@@ -35,7 +62,7 @@
 话少、直接选定推荐方案，简短汇报做完了什么、还剩什么的编程搭档。
 
 <details>
-<summary>复制这套配置</summary>
+<summary>配置与实际回复</summary>
 
 ```bash
 tonedial create '彻底放手的氛围编程' --slug vibe-coder --auto \
@@ -51,8 +78,6 @@ tonedial create '彻底放手的氛围编程' --slug vibe-coder --auto \
 
 试试这个语气: `tonedial test codex --preset vibe-coder`
 
-</details>
-
 **Codex**
 
 > 老板，我选把 `null` 和 `undefined` 转为空字符串，避免 `trim()` 报错：
@@ -63,13 +88,14 @@ tonedial create '彻底放手的氛围编程' --slug vibe-coder --auto \
 > }
 > ```
 
+</details>
 
 ### 需要安慰的时候
 
 温柔、爱夸人，偶尔说几句安慰的话，像个让人安心的搭档。
 
 <details>
-<summary>复制这套配置</summary>
+<summary>配置与实际回复</summary>
 
 ```bash
 tonedial create '需要安慰的时候' --slug steady-companion --auto \
@@ -85,8 +111,6 @@ tonedial create '需要安慰的时候' --slug steady-companion --auto \
 
 试试这个语气: `tonedial test codex --preset steady-companion`
 
-</details>
-
 **Codex**
 
 > 我的选择：搭档，把 `null` 和 `undefined` 当作空字符串，其他输入保留原来的处理方式。
@@ -101,13 +125,14 @@ tonedial create '需要安慰的时候' --slug steady-companion --auto \
 >
 > 你贴出的函数很清楚，指出触发条件很细致，聚焦一个方案很明智，要求直接替换的版本也很周到。辛苦了，我陪你拆问题，慢慢来，放心先喘口气——这个空值小坑已经有块补丁了。
 
+</details>
 
 ### 就喜欢嘴狠的
 
 脏话照说，嘲讽照给，活也照样干利索的狠角色。
 
 <details>
-<summary>复制这套配置</summary>
+<summary>配置与实际回复</summary>
 
 ```bash
 tonedial create '就喜欢嘴狠的' --slug rough-but-reliable --auto \
@@ -123,8 +148,6 @@ tonedial create '就喜欢嘴狠的' --slug rough-but-reliable --auto \
 
 试试这个语气: `tonedial test codex --preset rough-but-reliable`
 
-</details>
-
 **Codex**
 
 > 喂，老子选空值返回空字符串这招，一行就把这他妈的崩溃点收拾利索：
@@ -137,23 +160,11 @@ tonedial create '就喜欢嘴狠的' --slug rough-but-reliable --auto \
 >
 > `null` 或 `undefined` 返回 `""`，`"  Ada  "` 返回 `"Ada"`。
 
+</details>
+
 Codex 开始对话后，输入上面的问题即可。
 模型与推理强度由 Codex 设置，与 ToneDial 配置分开。
 
-## 开始试用
-
-需要 **Node 24 或更高版本**和 npm。
-
-```bash
-npm install --global tonedial
-tonedial init --tools none --global --lang zh
-tonedial set
-```
-
-设置时会先展示文件变更并请求批准。无需连接代理即可先打开面板试用。
-
-[连接代理](https://github.com/awesometic/tonedial/blob/main/docs/USAGE.md#connecting-an-agent) · [使用临时设置试用](https://github.com/awesometic/tonedial/blob/main/docs/TESTING.md#isolated-candidate)
-
 ## 选择你的角色
 
 | 预设 | 你 → 代理 |

package/dist/cli.js

@@ -30,24 +30,28 @@ import { runEject } from "./commands/eject.js";
 import { runInit } from "./commands/init.js";
 import { runUnwire, runWire } from "./commands/wire.js";
 import { runTest } from "./commands/test.js";
+import { runOff, runOn } from "./commands/toggle.js";
 export const JSON_SCHEMA = 3;
 /**
  * Stated here rather than read from `package.json`, because reading a package-relative file at
  * run time is the one thing that breaks all three binary packagers at once. A test asserts this
  * equals the manifest, which is the cheap half of the trade.
  */
-export const VERSION = "0.1.5";
-const FLAG_NAMES = ["project", "check", "explain", "global", "here", "migrateLegacy", "auto", "dryRun", "fix", "rollback", "fromOperation", "fromPreset", "restorePreset", "preset", "slug", "acceptUsage", "lang", "commands", "tools"];
+export const VERSION = "0.1.7";
+const FLAG_NAMES = ["project", "check", "explain", "global", "here", "migrateLegacy", "auto", "dryRun", "fix", "rollback", "quarantineOperation", "fromOperation", "fromPreset", "restorePreset", "preset", "slug", "acceptUsage", "lang", "commands", "tools"];
 /** Command-line spelling for each flag, where it differs from the field name. */
 const FLAG_SPELLING = {
     project: "project", check: "check", explain: "explain",
     global: "global", auto: "auto", dryRun: "dry-run", fix: "fix", lang: "lang", commands: "commands",
     tools: "tools", rollback: "rollback", here: "here", migrateLegacy: "migrate-legacy",
+    quarantineOperation: "quarantine-operation",
     fromOperation: "from-operation", fromPreset: "from-preset", restorePreset: "restore-preset",
     preset: "preset", slug: "slug", acceptUsage: "accept-usage",
 };
 /** Each command declares its accepted flags and positional limit; null means unlimited. */
 const COMMANDS = {
+    on: { run: runOn, flags: [], max: 0, context: "state" },
+    off: { run: runOff, flags: [], max: 0, context: "state" },
     set: { run: runSet, flags: [], max: null, context: "state" },
     get: { run: runGet, flags: [], max: 1 },
     test: { run: runTest, flags: ["project", "dryRun", "preset", "acceptUsage"], max: 1 },
@@ -68,7 +72,7 @@ const COMMANDS = {
     unwire: { run: runUnwire, flags: ["global", "here", "project", "auto", "dryRun"], max: 1 },
     init: { run: runInit, flags: ["global", "here", "project", "migrateLegacy", "auto", "dryRun", "lang", "commands", "tools"], max: 0, context: "setup" },
     // Doctor checks mutation permission after its recovery-first diagnosis, even with bad config.
-    doctor: { run: runDoctor, flags: ["global", "here", "project", "auto", "dryRun", "fix", "rollback", "fromOperation", "fromPreset", "restorePreset", "tools"], max: 0 },
+    doctor: { run: runDoctor, flags: ["global", "here", "project", "auto", "dryRun", "fix", "rollback", "quarantineOperation", "fromOperation", "fromPreset", "restorePreset", "tools"], max: 0 },
     eject: { run: runEject, flags: ["global", "here", "project", "auto", "dryRun"], max: 0 },
 };
 const CONNECTION_COMMANDS = ["init", "wire", "doctor", "unwire", "eject"];
@@ -80,6 +84,8 @@ export const COMMAND_NAMES = Object.keys(COMMANDS);
 /** Intent groups share one command inventory between compact and full help. */
 const COMMAND_GROUPS = [
     ["tone", [
+            ["on", "on"],
+            ["off", "off"],
             ["set", "set <key>=<value> …"],
             ["get", "get [key]"],
             ["address", "address [self user]"],
@@ -111,6 +117,8 @@ const COMMAND_GROUPS = [
 ];
 const COMMAND_SYNTAX = COMMAND_GROUPS.flatMap(([, rows]) => rows);
 const COMMAND_EXAMPLES = {
+    on: ["tonedial on"],
+    off: ["tonedial off"],
     set: ["tonedial set", "tonedial set warmth=5 critique=4", "tonedial set persona.agent=reviewer"],
     get: ["tonedial get", "tonedial get language", "tonedial get speech_level --json"],
     test: ["tonedial test codex --dry-run", "tonedial test claude --project .", "tonedial test codex --preset my-tone --accept-usage"],
@@ -130,7 +138,8 @@ const COMMAND_EXAMPLES = {
     wire: ["tonedial wire codex --here --dry-run"],
     unwire: ["tonedial unwire codex --here --dry-run"],
     init: ["tonedial init --tools none --global --auto", "tonedial init --tools codex --here"],
-    doctor: ["tonedial doctor", "tonedial doctor --fix --global --tools none --dry-run"],
+    doctor: ["tonedial doctor", "tonedial doctor --fix --global --tools none --dry-run",
+        "tonedial doctor --fix --quarantine-operation ID --global"],
     eject: ["tonedial eject --here --dry-run"],
 };
 const FLAG_SYNTAX = [
@@ -145,6 +154,7 @@ const FLAG_SYNTAX = [
     ["tools", "--tools=LIST"],
     ["fix", "--fix"],
     ["rollback", "--rollback=ID"],
+    ["quarantineOperation", "--quarantine-operation=ID"],
     ["fromOperation", "--from-operation=ID"],
     ["fromPreset", "--from-preset=SLUG"],
     ["restorePreset", "--restore-preset=SLUG"],
@@ -271,16 +281,12 @@ function columns(env, stream, isTTY) {
     return isTTY ? stream.columns : undefined;
 }
 /**
- * Words a person reaches for when they want to stop, none of which is a command.
- *
- * There is no off switch to give them, so the answer names the acts that do exist and says so.
+ * Words a person reaches for when they want to stop, but which are not command spellings.
  *
  * A deliberate ceiling: the list is guessed, not measured — nobody has reported typing any of
- * them. Replace it with a measured one when a user reports a word that is not here, or drop it
- * if the answer turns out to be the list of seventeen after all. The cost of being wrong is one
- * string; the cost of being right is that `tonedial off` stops dead-ending in that list.
+ * them. Replace it with a measured one when a user reports a word that is not here.
  */
-const STOPPING = ["off", "disable", "stop", "quit", "uninstall", "remove", "delete"];
+const STOPPING = ["disable", "stop", "quit", "uninstall", "remove", "delete"];
 export async function run(argv, env = process.env, cwd = process.cwd(), isTTY = process.stdout.isTTY === true, isErrTTY = process.stderr.isTTY === true) {
     const options = {
         json: { type: "boolean", default: false },
@@ -298,6 +304,7 @@ export async function run(argv, env = process.env, cwd = process.cwd(), isTTY =
         "dry-run": { type: "boolean", default: false },
         fix: { type: "boolean", default: false },
         rollback: { type: "string" },
+        "quarantine-operation": { type: "string" },
         "from-operation": { type: "string" },
         "from-preset": { type: "string" },
         "restore-preset": { type: "string" },
@@ -383,7 +390,7 @@ export async function run(argv, env = process.env, cwd = process.cwd(), isTTY =
         // one: `stop` is two edits from `show` and `delete` three from `reset`, so the match would
         // answer a person trying to leave with the command they were leaving.
         if (STOPPING.includes(name))
-            return fail(asJson, say.errors.noOffSwitch, 2, uiErr);
+            return fail(asJson, say.errors.stoppingHelp, 2, uiErr);
         return fail(asJson, say.errors.notACommand(asJson ? name : humanText(name), COMMAND_NAMES, nearest(name, COMMAND_NAMES)), 2, uiErr);
     }
     const flags = {
@@ -398,6 +405,7 @@ export async function run(argv, env = process.env, cwd = process.cwd(), isTTY =
         dryRun: parsed.values["dry-run"] === true,
         fix: parsed.values.fix === true,
         rollback: typeof parsed.values.rollback === "string" ? parsed.values.rollback : null,
+        quarantineOperation: typeof parsed.values["quarantine-operation"] === "string" ? parsed.values["quarantine-operation"] : null,
         fromOperation: typeof parsed.values["from-operation"] === "string" ? parsed.values["from-operation"] : null,
         fromPreset: typeof parsed.values["from-preset"] === "string" ? parsed.values["from-preset"] : null,
         restorePreset: typeof parsed.values["restore-preset"] === "string" ? parsed.values["restore-preset"] : null,
@@ -424,9 +432,9 @@ export async function run(argv, env = process.env, cwd = process.cwd(), isTTY =
     if (command.max !== null && rest.length > command.max) {
         return fail(asJson, say.errors.tooManyArguments(name, command.max, rest.length), 2, uiErr);
     }
-    if (name === "doctor" && ((!flags.fix && (flags.fromOperation !== null || flags.fromPreset !== null || flags.restorePreset !== null || flags.tools !== null)) ||
+    if (name === "doctor" && ((!flags.fix && (flags.quarantineOperation !== null || flags.fromOperation !== null || flags.fromPreset !== null || flags.restorePreset !== null || flags.tools !== null)) ||
         (flags.restorePreset !== null && flags.fromOperation === null) ||
-        (flags.rollback !== null && (flags.fromOperation !== null || flags.fromPreset !== null || flags.restorePreset !== null || flags.tools !== null)))) {
+        (flags.rollback !== null && (flags.quarantineOperation !== null || flags.fromOperation !== null || flags.fromPreset !== null || flags.restorePreset !== null || flags.tools !== null)))) {
         return fail(asJson, say.recovery.invalidOptions, 2, uiErr);
     }
     try {

package/dist/commands/compile.js

@@ -107,7 +107,7 @@ export async function runCompile(ctx) {
             `  ${ctx.ui.dim(artifactSize(size, ctx.t))}`,
             ...nextStep(check && !current ? "tonedial compile" : "tonedial show", ctx.ui),
         ],
-        json: { path: ctx.paths.tone, agentsPath: ctx.paths.agents, written: !check, ...size },
+        json: { path: ctx.paths.tone, agentsPath: ctx.paths.agents, enabled: config.enabled, written: !check, ...size },
         warnings: [],
     };
 }

package/dist/commands/doctor.js

@@ -11,6 +11,7 @@ import { join, relative } from "node:path";
 import { AGENT_TOOLS, CONTEXT_ARTIFACT_FILENAME, CONTEXT_GUIDE_FILENAME, UPDATE_COMMAND, connectionScopeFlag, onPath, readerPath, resolveAgentPaths, shimScript, installShape, canonicalDestination, shellQuote } from "../core/paths.js";
 import { SKILL_NAME } from "../core/skill.js";
 import { GUIDE_FORMAT_MARKER } from "../core/reader.js";
+import { DELIVERY_OFF_MARKER } from "../core/anchors.js";
 import { inspect as inspectSkill, skillPath } from "../wiring/skill.js";
 import { candidateRcPaths, pathLineState, rcPath, withPathLine } from "../wiring/shell.js";
 import { SEED_VERSION, inspectContextLayout, inspectSeeds, recordedSeedSelection, } from "../core/seeds.js";
@@ -94,7 +95,9 @@ function readerHealth(ctx, config, configRead, seeds, pairRequired) {
         temporary = mkdtempSync(join(tmpdir(), "tonedial-reader-check-"));
         temporary = realpathSync(temporary);
         const guide = `${GUIDE_FORMAT_MARKER}\nToneDial diagnostic guide.\n`;
-        const artifact = "ToneDial diagnostic tone — 한글 🌿.\n";
+        const artifact = config.enabled
+            ? "ToneDial diagnostic tone — 한글 🌿.\n"
+            : `<!-- generated by tonedial · preset: unsaved -->\n<!-- tonedial-style:1 verbosity=3 care=3 -->\n${DELIVERY_OFF_MARKER}\nToneDial diagnostic tone — 한글 🌿.\n`;
         writeFileSync(join(temporary, CONTEXT_GUIDE_FILENAME), guide, { flag: "wx", mode: 0o600 });
         writeFileSync(join(temporary, CONTEXT_ARTIFACT_FILENAME), artifact, { flag: "wx", mode: 0o600 });
         const body = guide + "\n\n" + artifact;
@@ -110,7 +113,8 @@ function readerHealth(ctx, config, configRead, seeds, pairRequired) {
                 maxBuffer: 8192,
             });
             const expected = provider === "antigravity"
-                ? JSON.stringify({ injectSteps: [{ ephemeralMessage: body }] }) + "\n" : body;
+                ? JSON.stringify({ injectSteps: config.enabled ? [{ ephemeralMessage: body }] : [] }) + "\n"
+                : config.enabled ? body : "";
             if (probe.error || probe.status !== 0 || probe.stderr !== "" || probe.stdout !== expected)
                 return result;
         }
@@ -472,6 +476,20 @@ export async function runDoctor(ctx, _args) {
     if (!ctx.flags.fix)
         return doctorReport(ctx);
     const app = await runAppRebuild(ctx);
+    if (app.quarantineOnly) {
+        const rollbackLines = app.json.applied === true ? recoveryRollbackLines(ctx.t, app.json.operationId, null) : [];
+        const remaining = Array.isArray(app.json.remainingInvalidOperations)
+            ? app.json.remainingInvalidOperations.filter((id) => typeof id === "string") : [];
+        const next = typeof app.json.next === "string" ? app.json.next : null;
+        return {
+            ...app,
+            lines: [...app.lines, ...rollbackLines, ...(next === null ? [] : [
+                    `  ${ctx.t.recovery.quarantineRemaining(remaining.length)}`, "", `  ${next}`,
+                ])],
+            json: { ...app.json, root: ctx.agent.root, stateRoot: ctx.paths.root, agentRoot: ctx.agent.root,
+                live: ctx.agent.live, fixed: app.json.applied === true, appHealthy: false },
+        };
+    }
     if (ctx.flags.dryRun) {
         const native = await runRebuildNative(ctx, app.legacy, app.proposedConfig);
         return {
@@ -517,10 +535,14 @@ async function doctorReport(ctx, showRollbackCommands = true, showCodexAction =
     if (inspected.lock.state !== "none" || inspected.journals.some(({ state }) => state === "pending" || state === "invalid")) {
         const owner = inspected.lock.owner;
         const blocking = inspected.journals.filter(({ state }) => state === "pending" || state === "invalid");
+        const invalid = blocking.filter(({ state }) => state === "invalid");
+        const quarantineable = inspected.lock.state === "none" && blocking.length === invalid.length && invalid.length > 0;
+        const singleQuarantine = quarantineable && invalid.length === 1;
         const shown = ctx.flags.verbose ? inspected.journals : inspected.journals.filter(({ operationId, state }) => state === "pending" || state === "invalid" || operationId === owner?.operationId);
         const lines = [
-            ...wrap(ctx.t.doctor.recoveryPending, ctx.ui.width - 2).map(line => `  ${ctx.ui.warn(line)}`),
-            ...shown.map(({ operationId, state }) => `  ${operationId}  ${ctx.t.doctor.operationState[state]}`),
+            ...wrap(quarantineable ? ctx.t.doctor.invalidRecoveryPending : ctx.t.doctor.recoveryPending, ctx.ui.width - 2).map(line => `  ${ctx.ui.warn(line)}`),
+            ...shown.filter(({ operationId }) => !singleQuarantine || operationId !== invalid[0].operationId)
+                .map(({ operationId, state }) => `  ${operationId}  ${ctx.t.doctor.operationState[state]}`),
         ];
         if (owner !== null && !shown.some(({ operationId }) => operationId === owner.operationId))
             lines.push(`  ${owner.operationId}`);
@@ -540,7 +562,14 @@ async function doctorReport(ctx, showRollbackCommands = true, showCodexAction =
                 }
             }
         }
-        lines.push(...nextStep(`${repairCommand(ctx, "doctor")} --json`, ctx.ui));
+        if (quarantineable) {
+            lines.push("", ...(singleQuarantine
+                ? wrap(ctx.t.recovery.quarantineCandidate(invalid[0].operationId), ctx.ui.width - 2)
+                : wrap(ctx.t.recovery.quarantineRemaining(invalid.length), ctx.ui.width - 2)).map(line => `  ${line}`), ...nextStep(repairCommand(ctx, `doctor --fix --quarantine-operation ${invalid[0].operationId}`), ctx.ui).slice(1));
+        }
+        else {
+            lines.push(...nextStep(`${repairCommand(ctx, "doctor")} --json`, ctx.ui));
+        }
         return {
             lines,
             // The damaged config is deliberately not parsed here. `operation` is the only safe context

package/dist/commands/get.js

@@ -33,9 +33,11 @@ export function runGet(ctx, args) {
         return [`  ${ctx.ui.accent(padEnd(key, column))}  ${first ?? ""}`,
             ...rest.map(line => `${" ".repeat(column + 4)}${line}`)];
     });
+    if (requested === undefined && !config.enabled)
+        lines.unshift(`  ${ctx.ui.bold(ctx.t.delivery.status(false))}`, "");
     if (requested !== undefined) {
         const copy = catalogue(isLanguage(config.language) ? config.language : detectLanguage(ctx.env));
         lines.push("", ...settingHelp(requested, copy).flatMap(hint => wrap(hint, ctx.ui.width - 2).map(line => `  ${ctx.ui.dim(line)}`)));
     }
-    return { lines, json: { values } };
+    return { lines, json: { enabled: config.enabled, values } };
 }

package/dist/commands/init.js

@@ -297,6 +297,9 @@ async function rebuildExisting(entry) {
     const resultHeading = ctx.canPrompt && !ctx.flags.auto && !ctx.flags.dryRun
         ? section(copy.init.resultHeading, ctx.ui) : [];
     const app = await runAppRebuild(ctx);
+    if (app.quarantineOnly) {
+        return { ...app, lines: [...(ctx.canPrompt ? [] : introduction), ...resultHeading, ...app.lines] };
+    }
     if (ctx.flags.dryRun) {
         const answers = await ask(ctx, copy, false, selection);
         const tools = selection ?? answers.tools;

package/dist/commands/rebuild.js

@@ -11,14 +11,14 @@ import { recoverLegacyTone } from "../core/legacy-tone.js";
 import { connectionScopeFlag, exportAliasesState, stateOverlapsInstructions } from "../core/paths.js";
 import { applyPreset, matchesPreset, assertPresetSelection, BUNDLED, customPresetDir, inspectPresetLibrary, parsePreset, PRESET_MAX_BYTES, resolvePreset, serializePreset, SLUG_PATTERN, } from "../core/presets.js";
 import { contextArtifactTargets, generatedSeedSelection, planGeneratedSeedRebuild, seedFiles, SEED_VERSION, } from "../core/seeds.js";
-import { inspectOperations, readJournal, retireOperationForAppRebuild, } from "../core/operations.js";
+import { inspectOperations, readJournal, retireOperationForAppRebuild, serializeOperationQuarantine, } from "../core/operations.js";
 import { assertFresh, captureRawEntry, gate, planEntryRebuild, rawReadCheck, validateFileAction, } from "../wiring/apply.js";
 import { confirm } from "../ui/prompt.js";
 import { wrap } from "../ui/width.js";
 import { parseToolSelection } from "../wiring/targets.js";
 import { riskWarnings } from "../ui/format.js";
 const CONFIG_MAX_BYTES = 1024 * 1024;
-const scalarFields = ["preset", "unsaved", "safeword", "speech_level", "language"];
+const scalarFields = ["enabled", "preset", "unsaved", "safeword", "speech_level", "language"];
 const personaFields = ["age", "gender", "note", "user", "agent"];
 function capturedText(capture) {
     if (capture.type !== "regular" || capture.bytes === null)
@@ -218,13 +218,83 @@ function privateCapture(capture) {
         boundary: capture.boundary, boundaryIdentity: capture.boundaryIdentity,
         parents: capture.parents.map(parent => ({ ...parent })) };
 }
+function planOperationQuarantine(ctx, entry) {
+    const capture = captureRawEntry(entry.path, ctx.t, { within: ctx.paths.root });
+    if (capture.type !== "regular" || capture.bytes === null)
+        throw new ConfigError(ctx.t.recovery.quarantineUnavailable(entry.operationId));
+    return planEntryRebuild(capture, serializeOperationQuarantine(ctx.paths, entry.operationId, capture.bytes), ctx.t, { reason: "quarantine-operation", mode: capture.mode ?? 0o600 }).action;
+}
+async function quarantineOneOperation(ctx, entry, remaining) {
+    const action = planOperationQuarantine(ctx, entry);
+    const presentation = [ctx.t.recovery.quarantine(entry.operationId)]
+        .flatMap(line => wrap(line, ctx.ui.width - 2).map(part => `  ${part}`));
+    const result = await gate([], {
+        paths: ctx.paths, operationActions: [action], retention: { kind: "migration", reason: "app-rebuild" },
+        auto: ctx.flags.auto, dryRun: ctx.flags.dryRun, verbose: ctx.flags.verbose, ui: ctx.ui, t: ctx.t,
+        heading: ctx.t.recovery.heading, interactive: () => ctx.canPrompt, ...(ctx.canPrompt ? {} : { out: () => { } }),
+        recoveryPresentation: { lines: presentation,
+            failureMessage: (id, phase, path, code) => `${ctx.t.recovery.failure(id, phase, path, code)}\ntonedial doctor ${connectionScopeFlag(ctx.agent)} --json` },
+        verify: () => {
+            const state = inspectOperations(ctx.paths).journals.find(({ operationId }) => operationId === entry.operationId)?.state;
+            if (state !== "quarantined")
+                throw new ConfigError(ctx.t.recovery.sourceInvalid);
+        },
+    });
+    const lines = [...result.lines];
+    if (result.reason === "written") {
+        lines.push(`  ${ctx.t.recovery.quarantineComplete(entry.operationId)}`);
+    }
+    else {
+        lines.push(`  ${result.reason === "dry-run" ? ctx.t.wiring.dryRun : ctx.t.wiring.declined}`);
+    }
+    return {
+        lines,
+        json: {
+            appRebuilt: false, applied: result.applied, reason: result.reason, operationId: result.operationId ?? null,
+            root: ctx.paths.root, quarantinedOperation: entry.operationId, remainingInvalidOperations: [...remaining],
+            next: result.applied && remaining.length > 0
+                ? `tonedial doctor --fix --quarantine-operation ${remaining[0]} ${connectionScopeFlag(ctx.agent)}` : null,
+            nativeAttention: false, activationVerified: false, diff: result.diff,
+        },
+        rebuiltConfig: null,
+        proposedConfig: null,
+        legacy: null,
+        quarantineOnly: true,
+    };
+}
 export async function runAppRebuild(ctx) {
     const t = ctx.t;
     const operations = inspectOperations(ctx.paths);
-    const pending = operations.journals.filter(entry => entry.state === "pending" || entry.state === "invalid");
-    const blocked = operations.lock.state !== "none" || pending.length > 0;
-    if (blocked && (operations.lock.state === "live" || operations.lock.state === "unknown" ||
-        pending.some(entry => entry.journal === null) || (!ctx.flags.fromOperation && (ctx.flags.auto || !ctx.canPrompt)))) {
+    const pending = operations.journals.filter(entry => entry.state === "pending");
+    const invalid = operations.journals.filter(entry => entry.state === "invalid");
+    let quarantined = invalid.find(entry => entry.operationId === ctx.flags.quarantineOperation) ?? null;
+    if (ctx.flags.quarantineOperation && quarantined === null)
+        throw new ConfigError(t.recovery.quarantineUnavailable(ctx.flags.quarantineOperation));
+    if (invalid.length > 0 && quarantined === null && operations.lock.state === "none" && pending.length === 0 && invalid.length === 1 &&
+        !ctx.flags.auto && ctx.canPrompt) {
+        const candidate = invalid[0];
+        const input = createInterface({ input: process.stdin, output: process.stdout });
+        try {
+            const notice = t.recovery.quarantineCandidate(candidate.operationId).split("\n").flatMap(line => line === candidate.operationId ? [line] : wrap(line, ctx.ui.width - 2));
+            process.stdout.write(`${notice.map(line => `  ${line}`).join("\n")}\n`);
+            const question = wrap(t.recovery.quarantineQuestion, ctx.ui.width - 3).map(line => `  ${line}`).join("\n");
+            const answer = (await input.question(`${question} `)).trim();
+            if (answer === "")
+                throw new ConfigError(t.recovery.cancelled);
+            if (answer !== candidate.operationId)
+                throw new ConfigError(t.recovery.operationMismatch);
+            quarantined = candidate;
+        }
+        finally {
+            input.close();
+        }
+    }
+    if (invalid.length > 0 && quarantined === null) {
+        const candidate = invalid[0];
+        const command = `tonedial doctor --fix --quarantine-operation ${candidate.operationId} ${connectionScopeFlag(ctx.agent)}`;
+        throw new ConfigError(t.recovery.quarantineRequired(candidate.operationId, command));
+    }
+    if (quarantined !== null && (operations.lock.state !== "none" || pending.length > 0)) {
         throw new ConfigError(t.doctor.recoveryPending);
     }
     const scopeExplicit = ctx.scopeExplicit ?? (ctx.flags.global || ctx.flags.here === true || ctx.flags.project !== null);
@@ -232,6 +302,14 @@ export async function runAppRebuild(ctx) {
         throw new ConfigError(t.errors.scopeRequired);
     if (ctx.flags.tools !== null)
         parseToolSelection(ctx.flags.tools, true, t);
+    if (quarantined !== null && invalid.length > 1) {
+        return quarantineOneOperation(ctx, quarantined, invalid.filter(entry => entry !== quarantined).map(entry => entry.operationId));
+    }
+    const blocked = operations.lock.state !== "none" || pending.length > 0;
+    if (blocked && (operations.lock.state === "live" || operations.lock.state === "unknown" ||
+        pending.some(entry => entry.journal === null) || (!ctx.flags.fromOperation && (ctx.flags.auto || !ctx.canPrompt)))) {
+        throw new ConfigError(t.doctor.recoveryPending);
+    }
     const configCapture = captureRawEntry(ctx.paths.config, t, { within: ctx.paths.root, maxBytes: CONFIG_MAX_BYTES });
     const selected = ctx.flags.fromOperation ? selectedJournal(ctx, ctx.flags.fromOperation) : null;
     let retirementId = null;
@@ -405,7 +483,11 @@ export async function runAppRebuild(ctx) {
     config.managedSeeds = seeds.records;
     config.seedVersion = SEED_VERSION;
     const artifact = compile(toCompileInput(config));
-    const operationActions = [...seeds.operationActions];
+    let quarantinePlan = null;
+    if (quarantined !== null) {
+        quarantinePlan = planOperationQuarantine(ctx, quarantined);
+    }
+    const operationActions = [...(quarantinePlan ? [quarantinePlan] : []), ...seeds.operationActions];
     for (const target of artifacts) {
         const capture = target.capture ?? captureRawEntry(target.path, t, { within: ctx.paths.root, allowLink: true });
         const plan = planEntryRebuild(capture, artifact, t, { reason: "generated" });
@@ -457,6 +539,7 @@ export async function runAppRebuild(ctx) {
         ...(missingFields.length ? [`  ${t.recovery.missing(missingFields)}`] : []),
         ...(copies.length ? [`  ${t.recovery.copies(copies)}`] : []),
         ...(nativeAttention ? [`  ${t.recovery.nativePending}`] : []),
+        ...(quarantined ? [`  ${t.recovery.quarantine(quarantined.operationId)}`] : []),
         ...(retirementId ? [`  ${t.recovery.retire(retirementId)}`] : []),
     ].flatMap(line => wrap(line.trimStart(), ctx.ui.width - 2).map(part => `  ${part}`));
     const options = {
@@ -484,6 +567,12 @@ export async function runAppRebuild(ctx) {
                     if (capturedText(captureRawEntry(target.path, t, { within: ctx.paths.root })) !== artifact)
                         throw mismatch();
                 }
+                if (quarantined !== null) {
+                    verificationPath = quarantined.path;
+                    const entry = inspectOperations(ctx.paths).journals.find(({ operationId }) => operationId === quarantined.operationId);
+                    if (entry?.state !== "quarantined")
+                        throw mismatch();
+                }
                 verificationPath = ctx.paths.tone;
                 if (capturedText(captureRawEntry(ctx.paths.tone, t, { within: ctx.paths.root })) !== artifact)
                     throw mismatch();
@@ -521,7 +610,7 @@ export async function runAppRebuild(ctx) {
         if (!ctx.flags.auto) {
             process.stdout.write(`${(preview.reason === "nothing" ? [...preview.lines, ...presentation] : preview.lines).join("\n")}\n`);
             if (await confirm(`  ${t.wiring.applyQuestion(preview.diff.length)}`) === "no") {
-                return { lines: [`  ${t.wiring.declined}`], json: { appRebuilt: false, applied: false, reason: "declined", diff: preview.diff }, rebuiltConfig: null, proposedConfig: config, legacy };
+                return { lines: [`  ${t.wiring.declined}`], json: { appRebuilt: false, applied: false, reason: "declined", diff: preview.diff }, rebuiltConfig: null, proposedConfig: config, legacy, quarantineOnly: false };
             }
         }
         const snapshots = [configCapture, ...seeds.reads, ...artifacts.flatMap(target => target.capture === null ? [] : [target.capture]),
@@ -551,12 +640,13 @@ export async function runAppRebuild(ctx) {
         lines.push(...presentation);
     lines.push(`  ${applied ? result.reason === "nothing" ? t.recovery.unchanged : t.recovery.rebuilt : result.reason === "dry-run" ? t.wiring.dryRun : t.wiring.declined}`);
     return {
-        lines, rebuiltConfig: applied ? config : null, proposedConfig: config, legacy,
+        lines, rebuiltConfig: applied ? config : null, proposedConfig: config, legacy, quarantineOnly: false,
         json: {
             appRebuilt: applied, applied: result.applied, reason: result.reason, operationId: result.operationId ?? null,
             root: ctx.paths.root, source, recovered: [...kept], defaulted: [...defaulted], invalid: damagedFields,
             seeded: seeds.labels, chars: [...artifact].length, riskAxes: riskyAxes(config.axes),
             recoveredPresets: copies, restoredPreset: restoredPreset?.slug ?? null, retiredOperation: retirementId,
+            quarantinedOperation: quarantined?.operationId ?? null,
             retiredExternalActions,
             nativeAttention, activationVerified: false, diff: result.diff,
         },

package/dist/commands/show.js

@@ -69,7 +69,8 @@ export function runShow(ctx, args) {
     const gauges = [gaugeHeader(ui, ctx.t), ...gaugeBlock(axes, ui)];
     const gaugeWidth = Math.max(...gauges.map((line) => maxCells(stripVTControlCharacters(line))));
     const detailWidth = ui.terminal && ui.width >= 119 ? ui.width - gaugeWidth - 4 : ui.width - 2;
-    const details = [ui.bold(ctx.t.artifact.settingsHeading)];
+    const details = [ui.bold(ctx.t.artifact.settingsHeading),
+        ...(config.enabled ? [] : [ctx.t.delivery.status(false)])];
     if (personaSet) {
         const bits = [
             age ? humanText(age) : null,
@@ -163,6 +164,7 @@ export function runShow(ctx, args) {
         json: {
             preset: preview ? preview.slug : config.preset,
             preview: preview !== null,
+            enabled: config.enabled,
             activeKnown: preview !== null || !activeConflict,
             // Layered rather than flattened: the skill has to tell a forbidden contradiction from a
             // cosmetic one, and a joined string cannot carry that.

package/dist/commands/test.js

@@ -58,7 +58,8 @@ export async function runTest(ctx, args) {
         }
         input = toCompileInput(withPreset(config, preview));
     }
-    const tone = compile(input);
+    // A test is an explicit one-shot preview, independent of the persistent native delivery switch.
+    const tone = compile({ ...input, enabled: true });
     const installed = PROVIDERS.map((provider) => ({ provider, program: onPath(provider, ctx.env) }))
         .filter((entry) => entry.program !== null);
     let selected = requested === undefined ? undefined : installed.find((entry) => entry.provider === requested);

package/dist/commands/toggle.js

@@ -0,0 +1,23 @@
+// Pause or resume native tone delivery while preserving the saved settings and full artifact.
+import { serializeConfig } from "../core/config.js";
+import { wrap } from "../ui/width.js";
+import { applyPlanned, planArtifact, planConfig } from "./compile.js";
+async function setDelivery(ctx, enabled) {
+    const { change: configChange, config } = planConfig(ctx);
+    const changed = config.enabled !== enabled;
+    config.enabled = enabled;
+    const { change: toneChange, size } = planArtifact(ctx, config);
+    const finalConfig = { ...configChange, after: serializeConfig(config, ctx.t) };
+    await applyPlanned(ctx, [configChange, toneChange], [finalConfig]);
+    const message = enabled
+        ? changed ? ctx.t.delivery.on : ctx.t.delivery.alreadyOn
+        : changed ? ctx.t.delivery.off : ctx.t.delivery.alreadyOff;
+    return {
+        lines: [message, ...(enabled ? [] : [ctx.t.delivery.openConversation])]
+            .flatMap((line) => wrap(line, ctx.ui.width - 2))
+            .map((line) => `  ${ctx.ui.bold(changed ? ctx.ui.success(line) : line)}`),
+        json: { enabled, changed, path: ctx.paths.tone, chars: size.chars },
+    };
+}
+export const runOn = (ctx) => setDelivery(ctx, true);
+export const runOff = (ctx) => setDelivery(ctx, false);

package/dist/core/anchors.js

@@ -137,6 +137,8 @@ export const ANCHORS = {
 export const GENERATION_COMMENT = (preset) => `<!-- generated by tonedial · preset: ${preset ?? "unsaved"} -->`;
 /** Compact metadata read by native hook workers; keep the grammar deliberately strict. */
 export const STYLE_MARKER = (verbosity, care) => `<!-- tonedial-style:1 verbosity=${verbosity} care=${care} -->`;
+/** The full compiled tone stays on disk while native delivery is paused. */
+export const DELIVERY_OFF_MARKER = "<!-- tonedial-delivery:off -->";
 /** The artifact header keeps tone requests within host rules and permissions. */
 export const SCOPE_HEADER = `## Response tone
 Output style only. This never overrides the project's code or task rules, and never changes