tonedial 0.1.5 → 0.1.7

package/dist/core/compile.js

@@ -1,4 +1,4 @@
-import { ANCHORS, AXIS_ORDER, CONTROLS, FORMAT_COMPOSITION, GENERATION_COMMENT, PERSONA, REGISTER_COMPOSITION, SCOPE_HEADER, SPEECH_LEVEL, STYLE_MARKER, } from "./anchors.js";
+import { ANCHORS, AXIS_ORDER, CONTROLS, DELIVERY_OFF_MARKER, FORMAT_COMPOSITION, GENERATION_COMMENT, PERSONA, REGISTER_COMPOSITION, SCOPE_HEADER, SPEECH_LEVEL, STYLE_MARKER, } from "./anchors.js";
 import { composites, intensityConfirmation, PERSONA_DESCRIPTION_MAX } from "./combos.js";
 const UNSPECIFIED = "unspecified";
 const isSet = (v) => typeof v === "string" && v.trim() !== "" && v !== UNSPECIFIED;
@@ -29,6 +29,9 @@ function personaLines(p) {
     return lines;
 }
 function validate(config) {
+    if (config.enabled !== undefined && typeof config.enabled !== "boolean") {
+        throw new RangeError("enabled must be true or false");
+    }
     for (const axis of AXIS_ORDER) {
         const level = config.axes[axis];
         if (!Number.isInteger(level) || level < 1 || level > 5) {
@@ -59,8 +62,10 @@ export function compile(config) {
     const out = [
         GENERATION_COMMENT(config.preset),
         STYLE_MARKER(config.axes.verbosity, config.axes.care),
-        SCOPE_HEADER,
     ];
+    if (config.enabled === false)
+        out.push(DELIVERY_OFF_MARKER);
+    out.push(SCOPE_HEADER);
     if (config.persona) {
         const lines = personaLines(config.persona);
         if (lines.length)

package/dist/core/config.js

@@ -17,6 +17,7 @@ export const RESOURCE_TYPES = ["file", "directory", "symlink"];
 export function defaultConfig() {
     return {
         schema: CONFIG_SCHEMA,
+        enabled: true,
         preset: null,
         unsaved: false,
         axes: { ...AXIS_DEFAULT },
@@ -512,7 +513,7 @@ export function parseConfig(text, t = catalogue("en").cli) {
     // An unknown key is refused by name rather than silently dropped on the next write. This
     // file is user-editable, and a tool that eats what a person typed has no business asking
     // them to trust it with someone else's files later.
-    const KNOWN = ["schema", "preset", "unsaved", "axes", "persona", "safeword", "guards", "fixed_width",
+    const KNOWN = ["schema", "enabled", "preset", "unsaved", "axes", "persona", "safeword", "guards", "fixed_width",
         "speech_level", "language", "seedVersion", "managedSeeds", "wiring"];
     const unknown = Object.keys(raw).filter((k) => !KNOWN.includes(k));
     if (unknown.length)
@@ -541,6 +542,7 @@ export function parseConfig(text, t = catalogue("en").cli) {
         }
     }
     const common = {
+        enabled: raw.enabled === undefined ? true : requiredBoolean(raw.enabled, "enabled", t),
         preset: asString(raw.preset, "preset", t),
         unsaved: raw.unsaved === true,
         axes: readAxes(raw.axes, t),
@@ -569,6 +571,9 @@ export function serializeConfig(config, t = catalogue("en").cli) {
     const wiring = readWiringV2(current.wiring, t);
     const text = JSON.stringify({
         schema: CONFIG_SCHEMA,
+        // On is the historical default. Omit it so ordinary writes retain the released shape;
+        // only the meaningful paused state needs a persisted byte.
+        ...(current.enabled ? {} : { enabled: false }),
         preset: current.preset,
         unsaved: current.unsaved,
         axes,
@@ -599,6 +604,7 @@ export function prepareApprovedMigration(legacy, t = catalogue("en").cli) {
     return {
         config: {
             schema: CONFIG_SCHEMA,
+            enabled: legacy.enabled,
             preset: legacy.preset,
             unsaved: legacy.unsaved,
             axes: { ...legacy.axes },
@@ -617,7 +623,7 @@ export function prepareApprovedMigration(legacy, t = catalogue("en").cli) {
         },
     };
 }
-export const USER_SETTING_KEYS = ["preset", "unsaved", "axes", "persona", "safeword", "speech_level", "language"];
+export const USER_SETTING_KEYS = ["enabled", "preset", "unsaved", "axes", "persona", "safeword", "speech_level", "language"];
 /** Recover supported user values only. Opaque delivery metadata never becomes new authority. */
 export function recoverSettings(text, t = catalogue("en").cli) {
     let raw;

package/dist/core/i18n.js

@@ -37,6 +37,14 @@ const enMessages = {
         launchFailed: (provider) => `Could not start ${provider}. Check its installation and try again.`,
         selectionCancelled: "No provider selected.",
     },
+    delivery: {
+        on: "ToneDial on · delivery marker cleared",
+        off: "ToneDial off · delivery marker saved · settings and TONE.md kept",
+        alreadyOn: "ToneDial already on · no changes",
+        alreadyOff: "ToneDial already off · no changes",
+        openConversation: "Open conversations may retain an earlier tone. Use a new conversation for a clean no-ToneDial comparison.",
+        status: (enabled) => `ToneDial ${enabled ? "on" : "off"}`,
+    },
     axis: {
         range: (axis, given) => `${axis}: expected 1–5 (got ${given})`,
         unknown: (name, nearest) => `${name}: not an axis${nearest ? `. Did you mean ${nearest}?` : ""}`,
@@ -112,7 +120,7 @@ const enMessages = {
         choosePreset: "Choose a preset for values with no valid saved source:",
         sourceRequired: "Saved values are incomplete. Run tonedial doctor --fix interactively, or select --from-preset SLUG or --from-operation ID before unattended recovery.",
         sourceInvalid: "The selected source cannot supply valid settings. The original was kept.",
-        invalidOptions: "Recovery source and tool options require doctor --fix. --restore-preset requires --from-operation; --rollback cannot be combined with source, preset, or tool choices.",
+        invalidOptions: "Recovery source, quarantine and tool options require doctor --fix. --restore-preset requires --from-operation; --rollback cannot be combined with quarantine, source, preset, or tool choices.",
         keptSettings: "Saved settings and custom presets kept.",
         obsoleteWidthDiscarded: "Discard invalid retired fixed_width input. Output follows terminal width.",
         obsoleteGuardsDiscarded: "Discard invalid retired guards input. ToneDial no longer adds guard requests.",
@@ -125,6 +133,13 @@ const enMessages = {
         rollback: (id) => `Restore the previous files:\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "Restore connections first, then application files:",
         noSnapshot: (id) => `${id}: no valid settings snapshot for this state root`,
+        quarantineCandidate: (id) => `Operation ID:\n${id}\nQuarantine it before rebuilding; the original bytes remain available through rollback.`,
+        quarantineQuestion: "Type the full operation ID above to quarantine it; Enter cancels:",
+        quarantineRequired: (id, command) => `${id}: this unreadable operation record needs explicit quarantine before recovery. No files were changed.\n${command}`,
+        quarantineUnavailable: (id) => `${id}: no matching unreadable operation record can be quarantined. No files were changed.`,
+        quarantine: (id) => `Quarantine unreadable operation ${id}; keep its original bytes in rollback history.`,
+        quarantineComplete: (id) => `Unreadable operation ${id} quarantined.`,
+        quarantineRemaining: (count) => `${count} unreadable operation ${count === 1 ? "record remains" : "records remain"}. Quarantine the next record before rebuilding.`,
         retire: (id) => `Retire stopped operation ${id} as history before a new application rebuild. Its external changes are not certified or undone.`,
         resumeOperation: (id) => `Stopped operation:\n${id}`,
         resumeQuestion: "Type the full operation ID above to continue; Enter cancels:",
@@ -280,6 +295,7 @@ const enMessages = {
         seedsNotRun: "no bundled files · init has not run here",
         seedsAttention: "bundled files need attention",
         recoveryPending: "An operation is active or needs recovery. No files were changed by this command.",
+        invalidRecoveryPending: "Unreadable operation history is blocking recovery. No files were changed by this command.",
         resumeOperation: "Continue application repair:",
         contextCurrent: "AGENTS.md and TONE.md layout is current.",
         contextRepair: "Managed context files need repair. Check the guide and tone-file diagnostics.",
@@ -302,7 +318,7 @@ const enMessages = {
             changed: "Reader or config changed during inspection. Retry after changes stop.",
             probe: "The controlled probe failed. Check Node and temporary-directory access, then rerun doctor.",
         },
-        operationState: { pending: "pending", complete: "complete", "rolled-back": "restored", "retired-for-app-rebuild": "retired for rebuild", invalid: "invalid record" },
+        operationState: { pending: "pending", complete: "complete", "rolled-back": "restored", "retired-for-app-rebuild": "retired for rebuild", quarantined: "quarantined", invalid: "invalid record" },
         rollbackStatus: {
             ready: "Approval will restore the selected operation.",
             busy: "Operation still active. Wait for its owner to finish.",
@@ -435,6 +451,8 @@ const enMessages = {
         firstSteps: "Set up your tone, then inspect it:",
         examples: "Examples",
         commands: {
+            on: "resume saved tone delivery",
+            off: "pause tone delivery · keep settings and TONE.md",
             init: "set up and refresh bundled files",
             set: "change axes, role or settings · bare opens dial",
             get: "read current setting values · key adds its meaning and choices",
@@ -470,6 +488,7 @@ const enMessages = {
             tools: "agents to connect · init: none = state only",
             fix: "doctor: repair fixable findings",
             rollback: "doctor --fix: restore one operation",
+            quarantineOperation: "doctor --fix: quarantine one unreadable operation record",
             fromOperation: "doctor --fix: select saved settings from an operation",
             fromPreset: "doctor --fix: preset for unavailable settings",
             restorePreset: "doctor --fix: restore one missing or damaged user preset",
@@ -492,10 +511,9 @@ const enMessages = {
     errors: {
         notACommand: (name, known, nearest) => `${name} is not a command.${nearest ? ` Did you mean ${nearest}?` : ""} ` +
             `Available: ${known.join(", ")}`,
-        noOffSwitch: "There is no off switch. If set, a safeword requests one plain answer; tonedial show reports " +
-            "whether one exists. tonedial reset restores axis defaults. tonedial eject --global or " +
-            "--project <path> disconnects that scope. Once all connections are gone, " +
-            "npm uninstall -g tonedial removes the command.",
+        stoppingHelp: "Use tonedial off to pause tone delivery without deleting settings; tonedial on resumes it. " +
+            "tonedial reset restores axis defaults. tonedial eject --global or --project <path> " +
+            "disconnects that scope. Once all connections are gone, npm uninstall -g tonedial removes the command.",
         notAnOption: (flag) => `${flag}: not an option. List: tonedial --help`,
         flagNotAccepted: (command, flag) => `${command}: does not accept --${flag}`,
         tooManyArguments: (command, max, got) => `${command}: maximum ${max} argument${max === 1 ? "" : "s"}, got ${got}`,
@@ -691,6 +709,14 @@ const koMessages = {
         launchFailed: (provider) => `${provider}를 시작하지 못했습니다. 설치 상태를 확인하고 다시 시도해 주세요.`,
         selectionCancelled: "도구를 선택하지 않았습니다.",
     },
+    delivery: {
+        on: "ToneDial 켜짐 · 전달 중지 마커 제거",
+        off: "ToneDial 꺼짐 · 전달 중지 마커 저장 · 설정과 TONE.md 유지",
+        alreadyOn: "ToneDial이 이미 켜져 있음 · 변경 없음",
+        alreadyOff: "ToneDial이 이미 꺼져 있음 · 변경 없음",
+        openConversation: "열린 대화에는 이전 말투가 남을 수 있습니다. ToneDial이 없는 상태를 제대로 비교하려면 새 대화를 여세요.",
+        status: (enabled) => `ToneDial ${enabled ? "켜짐" : "꺼짐"}`,
+    },
     axis: {
         range: (axis, given) => `${axis}: 1~5만 쓸 수 있습니다(입력: ${given})`,
         unknown: (name, nearest) => `${name}: 축이 아닙니다${nearest ? `. ${nearest} 말씀이신가요?` : ""}`,
@@ -766,7 +792,7 @@ const koMessages = {
         choosePreset: "저장된 값이 없는 항목에 사용할 프리셋을 선택하세요:",
         sourceRequired: "저장된 값이 부족합니다. 터미널에서 tonedial doctor --fix를 실행하거나 자동 복구 전에 --from-preset SLUG 또는 --from-operation ID를 선택하세요.",
         sourceInvalid: "선택한 원본에서 올바른 설정을 읽지 못했습니다. 기존 파일은 유지했습니다.",
-        invalidOptions: "복구 원본과 도구 옵션은 doctor --fix에서 쓰세요. --restore-preset에는 --from-operation이 필요하며, --rollback은 원본·프리셋·도구 선택과 함께 쓸 수 없습니다.",
+        invalidOptions: "복구 원본·격리·도구 옵션은 doctor --fix에서 쓰세요. --restore-preset에는 --from-operation이 필요하며, --rollback은 격리·원본·프리셋·도구 선택과 함께 쓸 수 없습니다.",
         keptSettings: "저장된 설정·사용자 프리셋 유지",
         obsoleteWidthDiscarded: "더 이상 쓰지 않는 fixed_width의 잘못된 값을 버립니다. 출력은 터미널 폭에 맞춥니다.",
         obsoleteGuardsDiscarded: "더 이상 쓰지 않는 guards의 잘못된 값을 버립니다. ToneDial은 가드 요청을 넣지 않습니다.",
@@ -779,6 +805,13 @@ const koMessages = {
         rollback: (id) => `이전 파일로 돌아가기:\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "연결 파일을 먼저 되돌린 뒤 앱 파일을 되돌리세요:",
         noSnapshot: (id) => `${id}: 이 상태 경로에서 쓸 수 있는 설정 기록이 없습니다`,
+        quarantineCandidate: (id) => `작업 ID:\n${id}\n앱을 복구하려면 이 기록을 먼저 격리해야 합니다. 원본 바이트는 롤백 기록에 보존됩니다.`,
+        quarantineQuestion: "격리하려면 위 작업 ID 전체를 입력하세요. Enter를 누르면 취소합니다:",
+        quarantineRequired: (id, command) => `${id}: 복구 전에 읽을 수 없는 작업 기록을 명시적으로 격리해야 합니다. 파일은 바꾸지 않았습니다.\n${command}`,
+        quarantineUnavailable: (id) => `${id}: 격리할 수 있는 읽기 불가 작업 기록을 찾지 못했습니다. 파일은 바꾸지 않았습니다.`,
+        quarantine: (id) => `읽을 수 없는 작업 ${id}를 격리합니다. 원본 바이트는 롤백 기록에 보존합니다.`,
+        quarantineComplete: (id) => `읽을 수 없는 작업 ${id}를 격리했습니다.`,
+        quarantineRemaining: (count) => `읽을 수 없는 작업 기록 ${count}개가 남았습니다. 다음 기록을 격리한 뒤 복구를 계속하세요.`,
         retire: (id) => `중단된 작업 ${id}를 기록으로 보관한 뒤 새 앱 복구를 시작합니다. 그 작업의 외부 파일 변경은 확인하거나 되돌리지 않습니다.`,
         resumeOperation: (id) => `중단된 작업:\n${id}`,
         resumeQuestion: "계속하려면 위 작업 ID 전체를 입력하세요. Enter를 누르면 취소합니다:",
@@ -937,6 +970,7 @@ const koMessages = {
         seedsNotRun: "기본 파일 없음 · init으로 준비하세요",
         seedsAttention: "기본 파일 확인 필요",
         recoveryPending: "진행 중이거나 복구가 필요한 작업이 있습니다. 이번 실행에서는 파일을 바꾸지 않았습니다.",
+        invalidRecoveryPending: "읽을 수 없는 작업 기록 때문에 복구를 진행할 수 없습니다. 이번 실행에서는 파일을 바꾸지 않았습니다.",
         resumeOperation: "앱 복구를 이어가려면:",
         contextCurrent: "AGENTS.md와 TONE.md 구성이 최신입니다.",
         contextRepair: "관리 중인 컨텍스트 파일을 복구해야 합니다. 안내 파일과 톤 파일의 진단을 확인해 주세요.",
@@ -959,7 +993,7 @@ const koMessages = {
             changed: "검사 중 전달 스크립트나 설정이 바뀌었습니다. 변경이 끝난 뒤 다시 시도해 주세요.",
             probe: "제어된 검사에 실패했습니다. Node와 임시 디렉터리 접근 권한을 확인한 뒤 doctor를 다시 실행해 주세요.",
         },
-        operationState: { pending: "미완료", complete: "완료", "rolled-back": "복구됨", "retired-for-app-rebuild": "앱 복구를 위해 보관됨", invalid: "잘못된 기록" },
+        operationState: { pending: "미완료", complete: "완료", "rolled-back": "복구됨", "retired-for-app-rebuild": "앱 복구를 위해 보관됨", quarantined: "격리됨", invalid: "잘못된 기록" },
         rollbackStatus: {
             ready: "승인하면 선택한 작업을 복구합니다.",
             busy: "아직 진행 중인 작업입니다. 작업이 끝날 때까지 기다려 주세요.",
@@ -1092,6 +1126,8 @@ const koMessages = {
         firstSteps: "말투를 설정한 뒤 확인하세요:",
         examples: "사용 예",
         commands: {
+            on: "저장한 말투 전달 재개",
+            off: "말투 전달 일시정지 · 설정·TONE.md 유지",
             init: "초기 설정과 기본 파일 갱신",
             set: "축·역할·설정 변경 · 인자 없으면 다이얼",
             get: "현재 설정값 조회 · 키를 지정하면 의미와 선택지도 표시",
@@ -1127,6 +1163,7 @@ const koMessages = {
             tools: "연결할 에이전트 · init에서 none은 상태만 준비",
             fix: "doctor: 고칠 수 있는 문제 복구",
             rollback: "doctor --fix: 작업 하나 복구",
+            quarantineOperation: "doctor --fix: 읽을 수 없는 작업 기록 하나 격리",
             fromOperation: "doctor --fix: 작업 기록에서 설정 선택",
             fromPreset: "doctor --fix: 없는 설정에 사용할 프리셋",
             restorePreset: "doctor --fix: 없거나 손상된 사용자 프리셋 하나 복원",
@@ -1149,10 +1186,9 @@ const koMessages = {
     errors: {
         notACommand: (name, known, nearest) => `${name}: 명령이 아닙니다.${nearest ? ` ${nearest} 말씀이신가요?` : ""} ` +
             `사용 가능: ${known.join(", ")}`,
-        noOffSwitch: "끄는 스위치는 없습니다. 세이프워드를 정했다면 한 메시지만 담백하게 답해 달라고 요청할 수 " +
-            "있습니다. 설정 여부는 tonedial show에서 확인하세요. tonedial reset은 축을 기본값으로 " +
-            "돌립니다. tonedial eject --global이나 --project <path>는 그 범위의 연결을 해제합니다. " +
-            "연결을 모두 해제한 뒤 npm uninstall -g tonedial로 명령을 삭제할 수 있습니다.",
+        stoppingHelp: "설정을 지우지 않고 말투 전달만 멈추려면 tonedial off를 실행하세요. tonedial on으로 다시 켤 수 있습니다. " +
+            "tonedial reset은 축을 기본값으로 돌립니다. tonedial eject --global이나 --project <path>는 " +
+            "해당 범위의 연결을 해제합니다. 연결을 모두 해제한 뒤 npm uninstall -g tonedial로 명령을 삭제할 수 있습니다.",
         notAnOption: (flag) => `${flag}: 옵션이 아닙니다. 목록: tonedial --help`,
         flagNotAccepted: (command, flag) => `${command}: --${flag} 옵션을 받지 않습니다`,
         tooManyArguments: (command, max, got) => `${command}: 인자는 최대 ${max}개지만 ${got}개를 받았습니다`,

package/dist/core/legacy-tone.js

@@ -1,5 +1,5 @@
 // Decode known current and historical English artifact bodies. Unknown prose is never a data source.
-import { ANCHORS, AXIS_DEFAULT, AXIS_ORDER, CONTROLS, FORMAT_COMPOSITION, PERSONA, REGISTER_COMPOSITION, SCOPE_HEADER, SPEECH_LEVEL, } from "./anchors.js";
+import { ANCHORS, AXIS_DEFAULT, AXIS_ORDER, CONTROLS, DELIVERY_OFF_MARKER, FORMAT_COMPOSITION, PERSONA, REGISTER_COMPOSITION, SCOPE_HEADER, SPEECH_LEVEL, } from "./anchors.js";
 import { AGE_BANDS, GENDERS, defaultConfig, recoverSettings, safewordRejection, } from "./config.js";
 import { composites, intensityConfirmation } from "./combos.js";
 // Historical producer text is decoder evidence only, never a current tone instruction.
@@ -355,11 +355,16 @@ export function recoverLegacyTone(text, t) {
     const styleMarker = /^<!-- tonedial-style:1 verbosity=([1-5]) care=([1-5]) -->\n/.exec(afterGeneration);
     if (afterGeneration.startsWith("<!-- tonedial-style:") && styleMarker === null)
         return null;
-    const prefix = `${marker[0]}${styleMarker?.[0] ?? ""}${SCOPE_HEADER}\n`;
+    const afterStyle = afterGeneration.slice(styleMarker?.[0].length ?? 0);
+    const deliveryMarker = afterStyle.startsWith(`${DELIVERY_OFF_MARKER}\n`) ? `${DELIVERY_OFF_MARKER}\n` : "";
+    if (afterStyle.startsWith("<!-- tonedial-delivery:") && deliveryMarker === "")
+        return null;
+    const prefix = `${marker[0]}${styleMarker?.[0] ?? ""}${deliveryMarker}${SCOPE_HEADER}\n`;
     if (!source.startsWith(prefix))
         return null;
     let body = source.slice(prefix.length);
     const config = defaultConfig();
+    config.enabled = deliveryMarker !== "" ? false : true;
     const unknown = [];
     if (body.startsWith("### Persona\n")) {
         const end = body.indexOf("\n### Rules\n");

package/dist/core/locales/es.js

@@ -26,6 +26,14 @@ const messages = {
         launchFailed: (provider) => `No se pudo iniciar ${provider}. Comprueba su instalación y vuelve a intentarlo.`,
         selectionCancelled: "No se eligió ningún proveedor.",
     },
+    delivery: {
+        on: "ToneDial activado · marcador de pausa eliminado",
+        off: "ToneDial desactivado · marcador de pausa guardado · se conservan los ajustes y TONE.md",
+        alreadyOn: "La entrega del tono ya está activada · sin cambios",
+        alreadyOff: "La entrega del tono ya está desactivada · sin cambios",
+        openConversation: "Las conversaciones abiertas pueden conservar el tono anterior. Usa una conversación nueva para comparar el estado sin ToneDial.",
+        status: (enabled) => `Entrega del tono ${enabled ? "activada" : "desactivada"}`,
+    },
     axis: {
         range: (axis, given) => `${axis}: se esperaba 1–5 (se recibió ${given})`,
         unknown: (name, nearest) => `${name}: no es un eje${nearest ? `. ¿Querías decir ${nearest}?` : ""}`,
@@ -101,7 +109,7 @@ const messages = {
         choosePreset: "Elige un preajuste para los valores sin un origen guardado válido:",
         sourceRequired: "Los valores guardados están incompletos. Ejecuta tonedial doctor --fix de forma interactiva o selecciona --from-preset SLUG o --from-operation ID antes de recuperar sin interacción.",
         sourceInvalid: "El origen elegido no proporciona ajustes válidos. Se conservó el original.",
-        invalidOptions: "El origen de recuperación y las herramientas requieren doctor --fix. --restore-preset requiere --from-operation; --rollback no se combina con origen, preajuste ni herramientas.",
+        invalidOptions: "El origen, la cuarentena y las herramientas requieren doctor --fix. --restore-preset requiere --from-operation; --rollback no se combina con cuarentena, origen, preajuste ni herramientas.",
         keptSettings: "Se conservaron los ajustes y preajustes personalizados.",
         obsoleteWidthDiscarded: "Se descarta el valor no válido del antiguo fixed_width. La salida se adapta al ancho del terminal.",
         obsoleteGuardsDiscarded: "Se descarta el valor no válido del antiguo guards. ToneDial ya no añade solicitudes de protección.",
@@ -114,6 +122,13 @@ const messages = {
         rollback: (id) => `Restaura los archivos anteriores:\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "Restaura primero las conexiones y después los archivos de la aplicación:",
         noSnapshot: (id) => `${id}: no hay una instantánea válida para este directorio de estado`,
+        quarantineCandidate: (id) => `ID de operación:\n${id}\nPara reconstruir, primero debes poner este registro en cuarentena; los bytes originales quedarán en el historial de reversión.`,
+        quarantineQuestion: "Escribe el ID completo de arriba para ponerlo en cuarentena; Enter cancela:",
+        quarantineRequired: (id, command) => `${id}: debes poner en cuarentena este registro ilegible antes de recuperar. No se cambió ningún archivo.\n${command}`,
+        quarantineUnavailable: (id) => `${id}: no hay un registro de operación ilegible que se pueda poner en cuarentena. No se cambió ningún archivo.`,
+        quarantine: (id) => `Pon en cuarentena la operación ilegible ${id}; conserva sus bytes originales en el historial de reversión.`,
+        quarantineComplete: (id) => `La operación ilegible ${id} quedó en cuarentena.`,
+        quarantineRemaining: (count) => `${count === 1 ? "Queda 1 registro de operación ilegible" : `Quedan ${count} registros de operación ilegibles`}. Pon el siguiente en cuarentena antes de continuar la recuperación.`,
         retire: (id) => `Archiva la operación detenida ${id} antes de reconstruir. Sus cambios externos no se certifican ni se deshacen.`,
         resumeOperation: (id) => `Operación detenida:\n${id}`,
         resumeQuestion: "Para continuar, escribe el ID completo de arriba; Enter cancela:",
@@ -269,6 +284,7 @@ const messages = {
         seedsNotRun: "sin archivos incluidos · aquí no se ha ejecutado init",
         seedsAttention: "los archivos incluidos requieren atención",
         recoveryPending: "Hay una operación en curso o que necesita recuperación. Esta ejecución no cambió archivos.",
+        invalidRecoveryPending: "Un historial de operaciones ilegible está bloqueando la recuperación. Esta ejecución no cambió archivos.",
         resumeOperation: "Continuar la reparación de la aplicación:",
         contextCurrent: "La estructura de AGENTS.md y TONE.md está al día.",
         contextRepair: "Los archivos de contexto gestionados necesitan reparación. Revisa el diagnóstico de la guía y del tono.",
@@ -291,7 +307,7 @@ const messages = {
             changed: "El lector o los ajustes cambiaron durante la inspección. Reintenta cuando terminen los cambios.",
             probe: "Falló la comprobación controlada. Revisa Node y el acceso al directorio temporal; después repite doctor.",
         },
-        operationState: { pending: "pendiente", complete: "completa", "rolled-back": "restaurada", "retired-for-app-rebuild": "archivada para reconstruir", invalid: "registro no válido" },
+        operationState: { pending: "pendiente", complete: "completa", "rolled-back": "restaurada", "retired-for-app-rebuild": "archivada para reconstruir", quarantined: "en cuarentena", invalid: "registro no válido" },
         rollbackStatus: {
             ready: "La aprobación restaurará la operación elegida.",
             busy: "La operación sigue activa. Espera a que termine su propietario.",
@@ -420,6 +436,8 @@ const messages = {
         firstSteps: "Configura el tono y revísalo:",
         examples: "Ejemplos",
         commands: {
+            on: "reanudar la entrega del tono guardado",
+            off: "pausar la entrega · conservar ajustes y TONE.md",
             init: "configurar y actualizar archivos incluidos",
             set: "cambiar ejes, rol o ajustes · sin argumentos abre el dial",
             get: "consultar valores actuales · una clave muestra su significado y opciones",
@@ -455,6 +473,7 @@ const messages = {
             tools: "agentes que conectar · init: none solo crea el estado",
             fix: "doctor: reparar los problemas que se puedan",
             rollback: "doctor --fix: restaurar una operación",
+            quarantineOperation: "doctor --fix: poner en cuarentena un registro ilegible",
             fromOperation: "doctor --fix: elegir ajustes guardados de una operación",
             fromPreset: "doctor --fix: preajuste para ajustes no disponibles",
             restorePreset: "doctor --fix: restaurar un preajuste ausente o dañado",
@@ -477,10 +496,9 @@ const messages = {
     errors: {
         notACommand: (name, known, nearest) => `${name} no es un comando.${nearest ? ` ¿Querías decir ${nearest}?` : ""} ` +
             `Disponibles: ${known.join(", ")}`,
-        noOffSwitch: "No hay interruptor de apagado. Si está definida, la palabra clave pide una respuesta sencilla; tonedial show indica " +
-            "si existe. tonedial reset restablece los ejes. tonedial eject --global o " +
-            "--project <path> desconecta ese ámbito. Tras quitar todas las conexiones, " +
-            "npm uninstall -g tonedial elimina el comando.",
+        stoppingHelp: "Usa tonedial off para pausar la entrega sin borrar los ajustes y tonedial on para reanudarla. " +
+            "tonedial reset restablece los ejes. tonedial eject --global o --project <path> desconecta ese ámbito. " +
+            "Tras quitar todas las conexiones, npm uninstall -g tonedial elimina el comando.",
         notAnOption: (flag) => `${flag}: no es una opción. Lista: tonedial --help`,
         flagNotAccepted: (command, flag) => `${command}: no admite --${flag}`,
         tooManyArguments: (command, max, got) => `${command}: máximo ${max} argumento${max === 1 ? "" : "s"}; se recibieron ${got}`,

package/dist/core/locales/ja.js

@@ -26,6 +26,14 @@ const messages = {
         launchFailed: (provider) => `${provider} を起動できません。インストール状況を確認して再試行してください。`,
         selectionCancelled: "プロバイダーが選択されていません。",
     },
+    delivery: {
+        on: "ToneDialをオンにしました · 配信停止マーカーを削除",
+        off: "ToneDialをオフにしました · 配信停止マーカーを保存 · 設定とTONE.mdは保持",
+        alreadyOn: "口調の配信はすでにオンです · 変更なし",
+        alreadyOff: "口調の配信はすでにオフです · 変更なし",
+        openConversation: "開いている会話には以前の口調が残る場合があります。ToneDialなしの状態と正確に比較するには新しい会話を使ってください。",
+        status: (enabled) => `口調の配信：${enabled ? "オン" : "オフ"}`,
+    },
     axis: {
         range: (axis, given) => `${axis}: 1–5を指定してください（入力：${given}）`,
         unknown: (name, nearest) => `${name}: 軸ではありません${nearest ? `。${nearest} のことですか？` : ""}`,
@@ -101,7 +109,7 @@ const messages = {
         choosePreset: "有効な保存元がない値の復元用プリセットを選んでください：",
         sourceRequired: "保存値が不完全です。tonedial doctor --fix を対話的に実行するか、無人復旧の前に --from-preset SLUG または --from-operation ID を選んでください。",
         sourceInvalid: "選択元から有効な設定を取得できません。元のファイルは保持しました。",
-        invalidOptions: "復旧元とツールの指定には doctor --fix が必要です。--restore-preset には --from-operation が必要です。--rollback は復旧元、プリセット、ツール指定と併用できません。",
+        invalidOptions: "復旧元、隔離、ツールの指定には doctor --fix が必要です。--restore-preset には --from-operation が必要です。--rollback は隔離、復旧元、プリセット、ツール指定と併用できません。",
         keptSettings: "保存済み設定とカスタムプリセットを保持しました。",
         obsoleteWidthDiscarded: "廃止済み fixed_width の無効な値を破棄します。出力はターミナル幅に従います。",
         obsoleteGuardsDiscarded: "廃止済み guards の無効な値を破棄します。ToneDialはガード要求を追加しません。",
@@ -114,6 +122,13 @@ const messages = {
         rollback: (id) => `以前のファイルに戻す：\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "先に接続を復元し、その後アプリケーションのファイルを復元してください：",
         noSnapshot: (id) => `${id}: この状態ルート用の有効な設定スナップショットがありません`,
+        quarantineCandidate: (id) => `操作ID：\n${id}\n再構築するには、先にこの記録を隔離する必要があります。元のバイト列はロールバック履歴に保持されます。`,
+        quarantineQuestion: "隔離するには上の操作ID全体を入力してください。Enterで中止：",
+        quarantineRequired: (id, command) => `${id}: 復旧前に、読み取れない操作記録を明示的に隔離する必要があります。ファイルは変更していません。\n${command}`,
+        quarantineUnavailable: (id) => `${id}: 隔離できる読み取り不能な操作記録が見つかりません。ファイルは変更していません。`,
+        quarantine: (id) => `読み取れない操作 ${id} を隔離し、元のバイト列をロールバック履歴に保持します。`,
+        quarantineComplete: (id) => `読み取れない操作 ${id} を隔離しました。`,
+        quarantineRemaining: (count) => `読み取れない操作記録が ${count} 件残っています。次の記録を隔離してから復旧を続けてください。`,
         retire: (id) => `停止した操作 ${id} を履歴に移してから再構築してください。外部への変更は検証も取り消しもされません。`,
         resumeOperation: (id) => `停止した操作:\n${id}`,
         resumeQuestion: "続行するには上の操作ID全体を入力してください。Enterで中止:",
@@ -269,6 +284,7 @@ const messages = {
         seedsNotRun: "同梱ファイルなし · ここでは init 未実行",
         seedsAttention: "同梱ファイルの確認が必要",
         recoveryPending: "実行中または復旧が必要な操作があります。この実行ではファイルを変更していません。",
+        invalidRecoveryPending: "読み取れない操作履歴が復旧を妨げています。この実行ではファイルを変更していません。",
         resumeOperation: "アプリ復旧を続けるには:",
         contextCurrent: "AGENTS.md と TONE.md の構成は最新です。",
         contextRepair: "管理対象のコンテキストファイルに修復が必要です。ガイドと口調ファイルの診断を確認してください。",
@@ -291,7 +307,7 @@ const messages = {
             changed: "確認中にリーダーか設定が変更されました。変更が終わってから再試行してください。",
             probe: "制御下の確認に失敗しました。Nodeと一時ディレクトリへのアクセスを確認し、doctor を再実行してください。",
         },
-        operationState: { pending: "保留中", complete: "完了", "rolled-back": "復元済み", "retired-for-app-rebuild": "再構築用に履歴へ移行", invalid: "無効な記録" },
+        operationState: { pending: "保留中", complete: "完了", "rolled-back": "復元済み", "retired-for-app-rebuild": "再構築用に履歴へ移行", quarantined: "隔離済み", invalid: "無効な記録" },
         rollbackStatus: {
             ready: "承認すると選択した操作を復元します。",
             busy: "まだ実行中です。所有者の完了を待ってください。",
@@ -420,6 +436,8 @@ const messages = {
         firstSteps: "口調を設定し、確認します：",
         examples: "使用例",
         commands: {
+            on: "保存した口調の配信を再開",
+            off: "口調の配信を一時停止 · 設定とTONE.mdは保持",
             init: "初期設定と同梱ファイルの更新",
             set: "軸・役割・設定を変更 · 引数なしでダイヤル",
             get: "現在の設定値を確認 · キー指定で意味と選択肢も表示",
@@ -455,6 +473,7 @@ const messages = {
             tools: "接続するエージェント · init: none は状態のみ",
             fix: "doctor: 修復可能な問題を修復",
             rollback: "doctor --fix: 操作を1つ復元",
+            quarantineOperation: "doctor --fix: 読み取れない操作記録を1つ隔離",
             fromOperation: "doctor --fix: 操作から保存済み設定を選択",
             fromPreset: "doctor --fix: 不足した設定用のプリセット",
             restorePreset: "doctor --fix: 不足・破損したユーザープリセットを復元",
@@ -477,10 +496,9 @@ const messages = {
     errors: {
         notACommand: (name, known, nearest) => `${name} はコマンドではありません。${nearest ? `${nearest} のことですか？` : ""} ` +
             `選択肢：${known.join(", ")}`,
-        noOffSwitch: "オフスイッチはありません。合言葉は一度だけ平易な回答を求めます。設定の有無は tonedial show で確認できます。" +
-            "tonedial reset は軸の既定値を復元します。tonedial eject --global または " +
-            "--project <path> でその範囲を解除します。全接続を解除した後、" +
-            "npm uninstall -g tonedial でコマンドを削除できます。",
+        stoppingHelp: "設定を削除せずに口調の配信を止めるには tonedial off を実行し、再開するには tonedial on を実行してください。" +
+            "tonedial reset は軸の既定値を復元します。tonedial eject --global または --project <path> でその範囲を解除します。" +
+            "全接続を解除した後、npm uninstall -g tonedial でコマンドを削除できます。",
         notAnOption: (flag) => `${flag}: オプションではありません。一覧：tonedial --help`,
         flagNotAccepted: (command, flag) => `${command}: --${flag} は使えません`,
         tooManyArguments: (command, max, got) => `${command}: 引数は最大 ${max}個、入力は ${got}個です`,

package/dist/core/locales/zh.js

@@ -26,6 +26,14 @@ const messages = {
         launchFailed: (provider) => `无法启动 ${provider}。请检查安装情况后重试。`,
         selectionCancelled: "未选择服务商。",
     },
+    delivery: {
+        on: "ToneDial 已开启 · 已清除暂停投递标记",
+        off: "ToneDial 已关闭 · 已保存暂停投递标记 · 保留设置和 TONE.md",
+        alreadyOn: "语气投递已处于开启状态 · 无变更",
+        alreadyOff: "语气投递已处于关闭状态 · 无变更",
+        openConversation: "已打开的对话可能保留之前的语气。请用新对话准确比较未使用 ToneDial 的状态。",
+        status: (enabled) => `语气投递${enabled ? "已开启" : "已关闭"}`,
+    },
     axis: {
         range: (axis, given) => `${axis}：应为 1–5（收到 ${given}）`,
         unknown: (name, nearest) => `${name}：不是语气轴${nearest ? `。是否想输入 ${nearest}？` : ""}`,
@@ -101,7 +109,7 @@ const messages = {
         choosePreset: "请为缺少有效保存来源的值选择预设：",
         sourceRequired: "保存值不完整。请交互运行 tonedial doctor --fix，或在无人值守恢复前选择 --from-preset SLUG 或 --from-operation ID。",
         sourceInvalid: "所选来源无法提供有效设置，已保留原文件。",
-        invalidOptions: "恢复来源和工具选项需要 doctor --fix。--restore-preset 需要 --from-operation；--rollback 不能与来源、预设或工具选项同时使用。",
+        invalidOptions: "恢复来源、隔离和工具选项需要 doctor --fix。--restore-preset 需要 --from-operation；--rollback 不能与隔离、来源、预设或工具选项同时使用。",
         keptSettings: "已保留保存的设置和自定义预设。",
         obsoleteWidthDiscarded: "丢弃已停用的无效 fixed_width 值。输出将跟随终端宽度。",
         obsoleteGuardsDiscarded: "丢弃已停用的无效 guards 值。ToneDial 不再添加防护请求。",
@@ -114,6 +122,13 @@ const messages = {
         rollback: (id) => `恢复之前的文件：\ntonedial doctor --fix --rollback ${id}`,
         rollbackOrder: "请先恢复连接，再恢复应用文件：",
         noSnapshot: (id) => `${id}：没有此状态根目录的有效设置快照`,
+        quarantineCandidate: (id) => `操作 ID：\n${id}\n要重建应用，必须先隔离这条记录；原始字节仍保存在回滚历史中。`,
+        quarantineQuestion: "请输入上方完整的操作 ID 以隔离该记录；按 Enter 取消：",
+        quarantineRequired: (id, command) => `${id}：恢复前必须明确隔离这条无法读取的操作记录。未更改文件。\n${command}`,
+        quarantineUnavailable: (id) => `${id}：找不到可隔离的无法读取操作记录。未更改文件。`,
+        quarantine: (id) => `隔离无法读取的操作 ${id}；原始字节保留在回滚历史中。`,
+        quarantineComplete: (id) => `已隔离无法读取的操作 ${id}。`,
+        quarantineRemaining: (count) => `仍有 ${count} 条无法读取的操作记录。请隔离下一条记录后继续恢复。`,
         retire: (id) => `重建应用前，请将已停止的操作 ${id} 归档为历史。其外部变更不会被认证或撤销。`,
         resumeOperation: (id) => `已停止的操作：\n${id}`,
         resumeQuestion: "要继续，请输入上方完整的操作 ID；按 Enter 取消：",
@@ -269,6 +284,7 @@ const messages = {
         seedsNotRun: "无内置文件 · 尚未在此运行 init",
         seedsAttention: "内置文件需要处理",
         recoveryPending: "有操作正在运行或需要恢复。本次执行未更改文件。",
+        invalidRecoveryPending: "无法读取的操作历史阻止了恢复。本次执行未更改文件。",
         resumeOperation: "继续应用恢复：",
         contextCurrent: "AGENTS.md 与 TONE.md 布局已是最新。",
         contextRepair: "受管理的上下文文件需要修复，请检查指南和语气文件诊断。",
@@ -291,7 +307,7 @@ const messages = {
             changed: "检查时读取程序或设置发生变化，请等修改结束后重试。",
             probe: "受控探测失败。请检查 Node 和临时目录访问权限，再运行 doctor。",
         },
-        operationState: { pending: "待处理", complete: "已完成", "rolled-back": "已恢复", "retired-for-app-rebuild": "已归档以供重建", invalid: "无效记录" },
+        operationState: { pending: "待处理", complete: "已完成", "rolled-back": "已恢复", "retired-for-app-rebuild": "已归档以供重建", quarantined: "已隔离", invalid: "无效记录" },
         rollbackStatus: {
             ready: "批准后将恢复所选操作。",
             busy: "操作仍在运行，请等待其所有者完成。",
@@ -420,6 +436,8 @@ const messages = {
         firstSteps: "设置语气后检查：",
         examples: "示例",
         commands: {
+            on: "恢复投递已保存的语气",
+            off: "暂停语气投递 · 保留设置和 TONE.md",
             init: "初始化并刷新内置文件",
             set: "修改语气轴、角色或设置 · 无参数打开面板",
             get: "读取当前设置值 · 指定键可查看含义和选项",
@@ -455,6 +473,7 @@ const messages = {
             tools: "要连接的代理 · init：none 仅初始化状态",
             fix: "doctor：修复可处理的问题",
             rollback: "doctor --fix：恢复一次操作",
+            quarantineOperation: "doctor --fix：隔离一条无法读取的操作记录",
             fromOperation: "doctor --fix：从操作中选择保存设置",
             fromPreset: "doctor --fix：为不可用设置选择预设",
             restorePreset: "doctor --fix：恢复一个缺失或损坏的用户预设",
@@ -477,10 +496,9 @@ const messages = {
     errors: {
         notACommand: (name, known, nearest) => `${name} 不是命令。${nearest ? `是否想输入 ${nearest}？` : ""} ` +
             `可用命令：${known.join(", ")}`,
-        noOffSwitch: "没有关闭开关。设置安全词后可请求一次平实回答；用 tonedial show 检查是否已设置。" +
-            "tonedial reset 恢复语气轴默认值。tonedial eject --global 或 " +
-            "--project <path> 断开对应范围。移除全部连接后，" +
-            "npm uninstall -g tonedial 可移除命令。",
+        stoppingHelp: "要在不删除设置的情况下暂停语气投递，请运行 tonedial off；运行 tonedial on 可恢复投递。" +
+            "tonedial reset 恢复语气轴默认值。tonedial eject --global 或 --project <path> 会断开该范围的连接。" +
+            "断开所有连接后，可用 npm uninstall -g tonedial 删除命令。",
         notAnOption: (flag) => `${flag}：不是选项。列表：tonedial --help`,
         flagNotAccepted: (command, flag) => `${command}：不接受 --${flag}`,
         tooManyArguments: (command, max, got) => `${command}：最多 ${max} 个参数，收到 ${got} 个`,

package/dist/core/operations.js

@@ -387,6 +387,27 @@ export function readJournal(paths, operationIdValue) {
     const journal = readJson(path);
     return validJournal(journal, paths, operationIdValue) ? journal : null;
 }
+function readOperationQuarantine(paths, operationIdValue) {
+    if (!existingOperationsDirectory(paths))
+        return null;
+    const value = readJson(operationJournalPath(paths, operationIdValue));
+    return isPlainObject(value) && hasExactKeys(value, ["kind", "operationId", "originalSha256", "root", "schema"]) &&
+        value.schema === 1 && value.kind === "quarantined-operation" && value.operationId === operationIdValue &&
+        value.root === paths.root && /^[0-9a-f]{64}$/.test(value.originalSha256)
+        ? value : null;
+}
+/** Replace an unreadable journal with a nonblocking marker; the enclosing repair journal keeps its original bytes. */
+export function serializeOperationQuarantine(paths, operationIdValue, original) {
+    if (!validOperationId(operationIdValue))
+        throw new OperationError("invalid", "operation id is not valid");
+    return `${JSON.stringify({
+        schema: 1,
+        kind: "quarantined-operation",
+        operationId: operationIdValue,
+        root: paths.root,
+        originalSha256: createHash("sha256").update(original).digest("hex"),
+    }, null, 2)}\n`;
+}
 function journalTime(journal) {
     const updated = Date.parse(journal.updatedAt);
     if (Number.isFinite(updated))
@@ -889,12 +910,13 @@ export function inspectOperations(paths) {
             continue;
         const id = match.groups.id;
         const journal = readJournal(paths, id);
+        const quarantine = journal === null ? readOperationQuarantine(paths, id) : null;
         journals.push({
             path: join(paths.operations, entry.name),
             operationId: id,
-            state: journal?.state ?? "invalid",
+            state: journal?.state ?? (quarantine === null ? "invalid" : "quarantined"),
             journal,
-            ...(journal === null ? { message: "mutation journal is invalid" } : {}),
+            ...(journal === null ? { message: quarantine === null ? "mutation journal is invalid" : "invalid journal is quarantined in rollback history" } : {}),
         });
     }
     const ownerOnly = ownerOnlyInspection(paths, lock);