@chatcode/chatcode-cli 3.0.4-rc.1 → 3.0.4-rc.2

package/runtime/node_modules/@deepseek-ai/dsh-session-persistence-jsonl/lib/index.js

@@ -2,7 +2,7 @@ import z from "@deepseek-ai/schemastery";
 import { SessionFormatUnsupportedMigrationError, createSessionFormatCatalogWithChildren, historicalSessionFormatCatalog, sessionFormatCatalog } from "@deepseek-ai/dsh-session-format-catalog";
 import { readdirSync } from "node:fs";
 import { link, lstat, mkdir, mkdtemp, open, readFile, readdir, realpath, rm, stat, truncate } from "node:fs/promises";
-import { basename, dirname, isAbsolute, join, parse, resolve, toNamespacedPath } from "node:path";
+import { basename, dirname, isAbsolute, join, parse, resolve, sep, toNamespacedPath } from "node:path";
 import { performance } from "node:perf_hooks";
 import { scheduler } from "node:timers/promises";
 import { createHash, randomBytes } from "node:crypto";
@@ -2282,6 +2282,8 @@ async function prepareCatalogFacts(parentId, sources, compression, signal) {
 * log, so the memo only needs the sessions in flight between those steps.
 */
 const COLD_LOG_MEMO_MAX_ENTRIES = 2;
+/** Retained with the stable lock inode after payload deletion. Contains no conversation data. */
+const DELETED_FILENAME = ".deleted";
 const DEFAULT_COMPRESSION = "zstd";
 /**
 * Internal scheduling constant, not deployment configuration: balance
@@ -2434,6 +2436,7 @@ var JsonlSessionPersistence = class extends SessionPersistence {
 		toHeaderLine(snapshot, options?.inheritedEventCount);
 		const inheritedEventCount = SessionLogOffset(options?.inheritedEventCount ?? 0);
 		await this.ensureRootEncoding();
+		if (await this.wasDeleted(header.id)) throw new SessionAlreadyExistsError(header.id);
 		options?.signal?.throwIfAborted();
 		if (this.tracker.hasPending(snapshot.id) || await this.findLog(snapshot.id, options?.signal) !== void 0) throw new SessionAlreadyExistsError(snapshot.id);
 		options?.signal?.throwIfAborted();
@@ -2596,6 +2599,88 @@ var JsonlSessionPersistence = class extends SessionPersistence {
 		signal?.throwIfAborted();
 		return snapshots;
 	}
+	async prepareDeletion(sessionIds) {
+		const claimed = [];
+		const held = [];
+		let closed = false;
+		const release = async () => {
+			if (closed) return;
+			closed = true;
+			try {
+				const failures = (await Promise.allSettled(held.map((item) => item.lease.release()))).flatMap((result) => result.status === "rejected" ? [result.reason] : []);
+				if (failures.length > 0) throw new AggregateError(failures, "Session deletion lock release failed");
+			} finally {
+				for (const id of claimed) this.tracker.releaseClaim(id);
+			}
+		};
+		try {
+			await this.ensureRootEncoding();
+			const root = await realpath(this.root).catch((error) => {
+				if (isENOENT(error)) return this.root;
+				throw error;
+			});
+			for (const id of [...new Set(sessionIds)].sort()) {
+				this.tracker.claimWrite(id);
+				claimed.push(id);
+				await this.stat(id);
+				for (const project of await this.listProjectDirs()) {
+					const dir = join(project, encodeSegment(id));
+					const info = await lstat(dir).catch((error) => {
+						if (isENOENT(error)) return void 0;
+						throw error;
+					});
+					if (info === void 0) continue;
+					if (!info.isDirectory()) throw new Error("Session deletion requires an owned directory");
+					const resolved = await realpath(dir).catch((error) => {
+						if (isENOENT(error)) return void 0;
+						throw error;
+					});
+					if (resolved === void 0) continue;
+					if (!resolved.startsWith(root + sep)) throw new Error("Session deletion path escapes its storage root");
+					held.push({
+						dir,
+						lease: await SessionWriteLease.acquire(dir, id)
+					});
+				}
+			}
+			return {
+				commit: async () => {
+					if (closed) throw new Error("Session deletion reservation is closed");
+					for (const { dir } of held) {
+						const marker = await open(join(dir, DELETED_FILENAME), "a", 384);
+						try {
+							await marker.sync();
+						} finally {
+							await marker.close();
+						}
+						await this.syncDirPosix(dir);
+						for (const entry of await readdir(dir)) if (entry !== "session.lock" && entry !== DELETED_FILENAME) await rm(join(dir, entry), {
+							recursive: true,
+							force: true
+						});
+						await this.syncDirPosix(dir);
+					}
+					for (const id of claimed) {
+						this.coldLogMemo.delete(id);
+						this.migrationPreparations.delete(id);
+					}
+				},
+				[Symbol.asyncDispose]: release
+			};
+		} catch (error) {
+			await release();
+			throw error;
+		}
+	}
+	async wasDeleted(id) {
+		for (const project of await this.listProjectDirs()) try {
+			await stat(join(project, encodeSegment(id), DELETED_FILENAME));
+			return true;
+		} catch (error) {
+			if (!isENOENT(error)) throw error;
+		}
+		return false;
+	}
 	/** Resolve and read one stored log, refusing loudly when the artifact is absent. */
 	async requireStoredLog(id, signal) {
 		const selected = await this.findLog(id, signal);
@@ -2931,7 +3016,14 @@ var JsonlSessionPersistence = class extends SessionPersistence {
 	*/
 	async acquireWriteLease(header) {
 		await this.rejectOppositeArtifact(header.cwd, header.id);
-		return this.acquireLease(header.id, header.cwd);
+		const lease = await this.acquireLease(header.id, header.cwd);
+		try {
+			if (await this.wasDeleted(header.id)) throw new SessionAlreadyExistsError(header.id);
+			return lease;
+		} catch (error) {
+			await lease.release();
+			throw error;
+		}
 	}
 	/** Decode complete frames and retain complete JSONL records from a torn final frame. */
 	async readZstdPrefix(buffer, signal) {
@@ -3334,6 +3426,7 @@ var JsonlSessionPersistence = class extends SessionPersistence {
 			throw error;
 		}
 		signal?.throwIfAborted();
+		if (entries.some((entry) => entry.name === DELETED_FILENAME)) return void 0;
 		const generations = [];
 		const opposite = [];
 		for (const entry of entries) {

package/runtime/node_modules/@deepseek-ai/dsh-session-persistence-jsonl/lib/types/index.d.ts

@@ -7,7 +7,7 @@
  */
 import { Context } from '@deepseek-ai/cordis';
 import z from '@deepseek-ai/schemastery';
-import { SessionPersistence, type SessionAccess, type SessionHandle, type SessionHandleReadResult, type SessionPersistenceCreateOptions, type SessionPersistenceListOptions, type SessionPersistenceOpenOptions, type SessionPersistenceSnapshot, type SessionPersistenceStatOptions, type SessionPersistenceRevision as PersistenceRevision } from '@deepseek-ai/dsh-session-persistence';
+import { SessionPersistence, type SessionAccess, type SessionHandle, type SessionDeletion, type SessionHandleReadResult, type SessionPersistenceCreateOptions, type SessionPersistenceListOptions, type SessionPersistenceOpenOptions, type SessionPersistenceSnapshot, type SessionPersistenceStatOptions, type SessionPersistenceRevision as PersistenceRevision } from '@deepseek-ai/dsh-session-persistence';
 import { JsonlSessionHandle } from './storage.ts';
 import { SessionWriteLease } from './lease.ts';
 import type { SessionEvent, SessionId, SessionHeader, SessionLogOffset as SessionLogOffsetType } from '@deepseek-ai/dsh-session';
@@ -118,6 +118,8 @@ declare class JsonlSessionPersistence extends SessionPersistence {
      * @returns one snapshot per session, in no promised order.
      */
     list(options?: SessionPersistenceListOptions): Promise<readonly SessionPersistenceSnapshot[]>;
+    prepareDeletion(sessionIds: readonly SessionId[]): Promise<SessionDeletion>;
+    private wasDeleted;
     /** Resolve and read one stored log, refusing loudly when the artifact is absent. */
     private requireStoredLog;
     /** Probe the memo and otherwise decode one historical generation under backend cancellation. */

package/runtime/node_modules/@deepseek-ai/dsh-session-projection-cache/lib/index.js

@@ -155,6 +155,7 @@ var SessionProjectionCache = class extends Service {
 	listingTable;
 	writes = Promise.resolve();
 	closed = false;
+	deleted = /* @__PURE__ */ new Set();
 	dirty = /* @__PURE__ */ new Map();
 	constructor(ctx, config) {
 		super(ctx, "sessionProjectionCache");
@@ -173,6 +174,24 @@ var SessionProjectionCache = class extends Service {
 			await this.writes;
 		}, "sessionProjectionCache.writeDrain");
 		this.installWritePath();
+		const cleanup = (ids) => {
+			for (const id of ids) this.deleted.add(id);
+			return this.enqueueWrite(async () => {
+				for (const id of ids) {
+					await this.requireTable().delete(id);
+					await this.requireListingTable().delete(id);
+				}
+			});
+		};
+		this.ctx.on("session/deleting", ({ sessionIds }) => cleanup(sessionIds));
+		this.ctx.on("session/deleted", (ids) => {
+			cleanup(ids).catch((error) => {
+				this.ctx.logger.warn(`session projection cache: deletion cleanup failed: ${String(error)}`);
+			});
+		});
+		this.ctx.inject(["workspaceRegistry"], async (ctx) => {
+			await cleanup(ctx.workspaceRegistry.deletedSessionIds);
+		});
 	}
 	/**
 	* The stored record for one session, accepted only when its bound log
@@ -185,6 +204,7 @@ var SessionProjectionCache = class extends Service {
 	* @returns the identity-matching record, or `undefined` (absent or unrelated).
 	*/
 	async recordFor(id, expected) {
+		if (this.deleted.has(id)) return void 0;
 		const record = await this.requireTable().read(id);
 		if (record === void 0) return void 0;
 		return identityMatches(record.identity, expected) ? record : void 0;
@@ -240,14 +260,17 @@ var SessionProjectionCache = class extends Service {
 	/** Read a small listing record, deriving it once from an older full checkpoint when needed. */
 	async listingRecord(id) {
 		await this.writes;
+		if (this.deleted.has(id)) return void 0;
 		const signature = this.ctx.sessionProjections.checkpointViewSignature();
 		const stored = await this.requireListingTable().read(id);
 		if (stored?.signature === signature) return stored.checkpoint;
+		if (this.deleted.has(id)) return void 0;
 		const record = await this.requireTable().read(id);
 		if (record === void 0) return void 0;
 		const listing = this.listingOf(record, signature);
 		await this.enqueueWrite(async () => {
-			if (await this.requireTable().read(id) === record) await this.requireListingTable().put(id, listing);
+			const current = await this.requireTable().read(id);
+			if (!this.deleted.has(id) && current === record) await this.requireListingTable().put(id, listing);
 		}).catch((error) => {
 			this.ctx.logger.warn(`session projection cache: listing write-back for "${id}" failed: ${String(error)}`);
 		});
@@ -402,6 +425,7 @@ var SessionProjectionCache = class extends Service {
 			rows: detached
 		};
 		await this.enqueueWrite(async () => {
+			if (this.deleted.has(id)) return;
 			await this.requireTable().put(id, record);
 			const listing = this.listingOf(record, this.ctx.sessionProjections.checkpointViewSignature());
 			await this.requireListingTable().put(id, listing);

package/runtime/node_modules/@deepseek-ai/dsh-session-projection-cache/lib/types/index.d.ts

@@ -57,6 +57,7 @@ export declare class SessionProjectionCache extends Service {
     private listingTable?;
     private writes;
     private closed;
+    private readonly deleted;
     private readonly dirty;
     constructor(ctx: Context, config: Config);
     /** Open both on-demand domains and install the write-behind listeners. */

package/runtime/node_modules/@deepseek-ai/dsh-session-projection-cache/package.json

@@ -45,6 +45,7 @@
     "@deepseek-ai/dsh-session-projection": "workspace:*",
     "@deepseek-ai/dsh-storage": "workspace:*",
     "@deepseek-ai/dsh-storage-domain": "workspace:*",
-    "@deepseek-ai/dsh-storage-json": "workspace:*"
+    "@deepseek-ai/dsh-storage-json": "workspace:*",
+    "@deepseek-ai/dsh-workspace": "workspace:*"
   }
 }

package/runtime/node_modules/@deepseek-ai/dsh-session-query/lib/index.js

@@ -331,6 +331,13 @@ var SessionObservationReader = class {
 	cacheCapacity;
 	cache = /* @__PURE__ */ new Map();
 	/**
+	* Drop deleted identities while existing observation leases settle independently.
+	* @param ids - permanently deleted Session identities.
+	*/
+	forget(ids) {
+		for (const id of ids) this.cache.delete(id);
+	}
+	/**
 	* @param ctx - context carrying Session and optional persistence/projection services.
 	* @param cacheCapacity - maximum unpinned cold observations retained for reuse.
 	*/
@@ -1055,6 +1062,12 @@ var SessionQueryEngine = class extends Service {
 		if (!Number.isSafeInteger(preparedSessionCacheSize) || preparedSessionCacheSize < 1) throw new SessionQueryError("session-query: preparedSessionCacheSize must be a positive safe integer", "SESSION_QUERY_INVALID_CONFIG");
 		this._corpus = new SessionCorpus(ctx, persistedReadConcurrency);
 		this._observations = new SessionObservationReader(ctx, preparedSessionCacheSize);
+		ctx.on("session/deleting", ({ sessionIds }) => {
+			this._observations.forget(sessionIds);
+		});
+		ctx.on("session/deleted", (ids) => {
+			this._observations.forget(ids);
+		});
 	}
 	/**
 	* Observe one exact live or prepared Session without a persistence listing preflight.

package/runtime/node_modules/@deepseek-ai/dsh-session-query/lib/types/observation.d.ts

@@ -50,6 +50,11 @@ export declare class SessionObservationReader {
     private readonly ctx;
     private readonly cacheCapacity;
     private readonly cache;
+    /**
+     * Drop deleted identities while existing observation leases settle independently.
+     * @param ids - permanently deleted Session identities.
+     */
+    forget(ids: readonly SessionId[]): void;
     /**
      * @param ctx - context carrying Session and optional persistence/projection services.
      * @param cacheCapacity - maximum unpinned cold observations retained for reuse.

package/runtime/node_modules/@deepseek-ai/dsh-session-query-sqlite/lib/index.js

@@ -529,6 +529,32 @@ var SqliteSessionQueryEngine = class extends SessionQueryEngine {
 			return () => this._optionalPersistenceFiber.dispose();
 		}, "sessionQuerySqlite.optionalPersistence");
 		ctx.effect(() => async () => this.close(), "sessionQuerySqlite.close");
+		const cleanup = (ids) => this._serialized(void 0, async () => {
+			if (ids.length === 0 || this.config.openAt === "never") return;
+			await this._ensureReady(void 0);
+			const db = this._requireDb();
+			db.exec("BEGIN IMMEDIATE");
+			try {
+				for (const id of ids) {
+					this._deleteSession("persisted", id);
+					this._deleteSession("live", id);
+				}
+				db.exec("COMMIT");
+			} catch (error) {
+				db.exec("ROLLBACK");
+				throw error;
+			}
+			this._globalGeneration += 1;
+		});
+		ctx.on("session/deleting", ({ sessionIds }) => cleanup(sessionIds));
+		ctx.on("session/deleted", (ids) => {
+			cleanup(ids).catch((error) => {
+				ctx.logger.warn(`session query: deletion cleanup failed: ${String(error)}`);
+			});
+		});
+		ctx.inject(["workspaceRegistry"], async (ctx) => {
+			await cleanup(ctx.workspaceRegistry.deletedSessionIds);
+		});
 	}
 	/** Open eagerly only when activation owns the configured readiness boundary. */
 	async [Service.init]() {

package/runtime/node_modules/@deepseek-ai/dsh-session-query-sqlite/package.json

@@ -47,6 +47,7 @@
     "@deepseek-ai/dsh-session-persistence-jsonl": "workspace:*",
     "@deepseek-ai/dsh-session-query": "workspace:*",
     "@deepseek-ai/cordis": "workspace:~",
-    "@deepseek-ai/dsh-session-projection": "workspace:*"
+    "@deepseek-ai/dsh-session-projection": "workspace:*",
+    "@deepseek-ai/dsh-workspace": "workspace:*"
   }
 }

package/runtime/node_modules/@deepseek-ai/dsh-storage-domain/lib/index.js

@@ -337,9 +337,13 @@ var KvTableImpl = class {
 	}
 	delete(key) {
 		return this.host.enqueue(async () => {
-			if (!this.records.has(key)) return false;
+			if (!(this.records.has(key) || this.host.readStored !== void 0 && await this.host.unit.readRecord(this.tableName, key) !== void 0)) {
+				this.loaded.add(key);
+				return false;
+			}
 			await this.host.unit.deleteRecord(this.tableName, key);
 			this.records.delete(key);
+			this.loaded.add(key);
 			this.host.emitChanged({
 				domain: this.host.domainName,
 				table: this.tableName,

package/runtime/node_modules/@deepseek-ai/dsh-storage-domain/lib/types/domain.d.ts

@@ -115,8 +115,8 @@ export interface Domain<S extends DomainSpec> {
      */
     close(): Promise<void>;
 }
-/** Keyed reads and complete replacements without whole-table enumeration. */
-export type RecordTable<K extends string, V> = Pick<KvTable<K, V>, 'read' | 'put'>;
+/** Keyed reads, complete replacements, and removals without whole-table enumeration. */
+export type RecordTable<K extends string, V> = Pick<KvTable<K, V>, 'read' | 'put' | 'delete'>;
 /** Per-record domain opened without loading its records. No global slot is exposed. */
 export interface RecordDomain<S extends DomainSpec> {
     /** Domain name from the spec. */

package/runtime/node_modules/@deepseek-ai/dsh-subagent/lib/types/control.d.ts

@@ -12,8 +12,8 @@ declare const CONTROL_ID_SCHEMAS: {
         childSessionId: z.ZodString;
         mode: z.ZodLiteral<"continuable">;
         delivery: z.ZodEnum<{
-            steer: "steer";
             queue: "queue";
+            steer: "steer";
         }>;
     }, z.core.$strip>;
     readonly 'subagent.interrupt': z.ZodObject<{

package/runtime/node_modules/@deepseek-ai/dsh-tianti/lib/index.js

@@ -121,15 +121,14 @@ function environmentSwitch(name) {
 	throw new Error(`${name} must be a boolean switch.`);
 }
 /** Get tianti runtime config for Tianti operations.
-* @returns The invocation's configured endpoints and current integration switches. */
-function getTiantiRuntimeConfig() {
-	const runtime = operation().runtime;
-	const settings = getInitialSettings().tianti;
-	const enabled = environmentSwitch("TIANTI_ENABLED") ?? settings?.enabled ?? runtime.config.enabled;
+* @param runtime Mounted Tianti runtime; defaults to the current invocation.
+* @returns The runtime's configured endpoints and effective integration switches. */
+function getTiantiRuntimeConfig(runtime = operation().runtime) {
+	const enabled = environmentSwitch("TIANTI_ENABLED") ?? runtime.switches.enabled ?? runtime.config.enabled;
 	return {
 		enabled,
 		enableModelTools: enabled && runtime.config.enableModelTools,
-		enableWriteActions: environmentSwitch("TIANTI_WRITE_ACTIONS_ENABLED") ?? settings?.enableWriteActions ?? false,
+		enableWriteActions: environmentSwitch("TIANTI_WRITE_ACTIONS_ENABLED") ?? runtime.switches.enableWriteActions ?? runtime.config.enableWriteActions,
 		environment: "prod",
 		baseUrl: runtime.config.baseUrl.replace(/\/+$/u, "")
 	};
@@ -2313,7 +2312,15 @@ async function handleList(flags) {
 async function call$1(args) {
 	const parsed = parseArgs(args);
 	const [command, subCommand, third] = parsed.positionals;
-	if (!command || command === "help" || command === "-h") return text$1(help$1());
+	if (!command) return text$1([
+		`天梯功能当前${getTiantiRuntimeConfig().enabled ? "已开启（on）" : "已关闭（off）"}，默认关闭。`,
+		"",
+		"  /tianti on   打开天梯功能",
+		"  /tianti off  关闭天梯功能",
+		"",
+		"开启后可使用天梯相关功能；运行 /tianti help 查看完整命令。"
+	].join("\n"));
+	if (command === "help" || command === "-h") return text$1(help$1());
 	if (command === "status") return handleStatus$1();
 	if (command === "on" || command === "enable") {
 		await updateTiantiSettings({
@@ -4922,7 +4929,7 @@ function getLatestRunMessage() {
 	return "没有找到本地研发流程记录。可以先运行 /tianti-deliver latest 或 /tianti-deliver workitem <id> --title <title>。";
 }
 function ensureTiantiEnabled() {
-	if (!getTiantiRuntimeConfig().enabled) return "Tianti integration is off. Run /tianti on before using /tianti-deliver latest.";
+	if (!getTiantiRuntimeConfig().enabled) return "Tianti integration is off. Run /tianti on before using /tianti-deliver.";
 }
 async function createAndSaveRun(workItem, scenario) {
 	return saveDevelopmentRun(createDevelopmentRun({
@@ -4931,8 +4938,6 @@ async function createAndSaveRun(workItem, scenario) {
 	}));
 }
 async function handleLatest(flags) {
-	const disabled = ensureTiantiEnabled();
-	if (disabled) return text(disabled);
 	const workItem = latestTaskToWorkItem(await createTiantiClient().getLatestDevelopmentTaskForCurrentUser({ includeDetail: true }));
 	if (!workItem) return text("没有读取到可交付的天梯开发任务。");
 	if (isCompletedWorkItemState(workItem.stateName)) return text(`最新开发任务 ${workItem.id} 当前状态为「${workItem.stateName}」，已完成任务不会进入研发交付流程。请指定一个新建或活动中的开发任务。`);
@@ -5182,6 +5187,8 @@ async function call(args) {
 	const parsed = parseArgs(args);
 	const [command] = parsed.positionals;
 	if (!command || command === "help" || command === "-h") return text(help());
+	const disabled = ensureTiantiEnabled();
+	if (disabled) return text(disabled);
 	if (command === "latest") return handleLatest(parsed.flags);
 	if (command === "workitem" || command === "task") return handleWorkItem(parsed);
 	if (command === "status") return handleStatus(void 0, parsed.positionals[1] ?? taskIdFlag(parsed));
@@ -5218,7 +5225,7 @@ async function call(args) {
 //#region lib/types/config.js
 /** Deployment configuration for the Tianti integration. */
 const Config = z.object({
-	enabled: z.boolean().default(true),
+	enabled: z.boolean().default(false),
 	enableWriteActions: z.boolean().default(false),
 	enableModelTools: z.boolean().default(true),
 	baseUrl: z.string().default("https://devops.chinaunicom.cn"),
@@ -5251,10 +5258,10 @@ const id = {
 	required: true,
 	description: "Tianti numeric id/globalId, rather than the internal Mongo _id."
 };
-/** Install reversible model tools with invocation-owned cancellation.
+/** Install model tools for one enabled Tianti activation; its owner unregisters them on off.
 * @param ctx Harness tool registry.
 * @param runtime Plugin-owned endpoint and switch state.
-* @param signal Plugin lifetime cancellation.
+* @param signal Cancellation for this activation, aborted on off or plugin disposal.
 * @param track Track active work until plugin disposal settles.
 * @returns Registration disposers, removed before active work is drained.
 */
@@ -5397,13 +5404,18 @@ function validateEndpoint(value) {
 /** Register migrated commands without changing the agent loop or existing model providers.
 * @param ctx Harness command and tool registries.
 * @param config Deployment endpoints, switches, and timeouts.
+* @returns Startup after persisted switches and command descriptions are ready.
 */
-function apply(ctx, config) {
+async function apply(ctx, config) {
 	validateEndpoint(config.baseUrl);
 	validateEndpoint(config.cvpApiBaseUrl);
 	const runtime = new TiantiRuntime(ctx, config);
+	await runtime.loadSwitches();
 	const lifetime = new AbortController();
 	const active = /* @__PURE__ */ new Set();
+	const switchCommands = [];
+	let disposeModelTools;
+	let appliedState;
 	const track = (task) => {
 		active.add(task);
 		task.then(() => active.delete(task), () => active.delete(task));
@@ -5416,56 +5428,94 @@ function apply(ctx, config) {
 		cwd: invocation.agent.session.header.cwd ?? process.cwd()
 	}, async () => {
 		await runtime.loadSwitches();
-		return {
-			kind: "success",
-			text: (await command(invocation.rawInput)).value
-		};
+		try {
+			return {
+				kind: "success",
+				text: (await command(invocation.rawInput)).value
+			};
+		} finally {
+			refreshIntegration();
+		}
 	}));
+	const disposeSwitchCommands = () => {
+		for (const dispose of switchCommands.splice(0)) dispose();
+	};
+	const unloadModelTools = () => {
+		const disposal = disposeModelTools?.();
+		disposeModelTools = void 0;
+		runtime.auth.clear();
+		return disposal;
+	};
+	const refreshIntegration = () => {
+		if (lifetime.signal.aborted) return;
+		const enabled = getTiantiRuntimeConfig(runtime).enabled;
+		if (enabled === appliedState) return;
+		const state = enabled ? "on" : "off";
+		unloadModelTools();
+		if (enabled && config.enableModelTools) {
+			const activation = new AbortController();
+			const signal = AbortSignal.any([lifetime.signal, activation.signal]);
+			disposeModelTools = ctx.effect(function* () {
+				yield ctx.on("tools/pre-execute", async (exec, next) => {
+					if (exec.name !== "TiantiProjectSwitch") return next();
+					const decision = await next();
+					if (decision.kind !== "allow") return decision;
+					return {
+						kind: "ask",
+						reason: "Switch the shared Tianti project context.",
+						displayReason: {
+							en: "Switch the Tianti project?",
+							zh: "切换当前天梯项目？"
+						}
+					};
+				});
+				yield* installTools(ctx, runtime, signal, track);
+				yield () => {
+					activation.abort();
+				};
+			}, "enabled tianti model tools");
+		}
+		disposeSwitchCommands();
+		for (const name of ["tianti", "tt"]) switchCommands.push(ctx.commands.register({
+			name,
+			description: `天梯功能（当前：${state}，默认关闭）：on 打开，off 关闭${name === "tt" ? "（/tianti 的别名）" : ""}`,
+			handler: handler(call$1),
+			input: {
+				hint: `当前：${state} | on 打开 | off 关闭（默认关闭）`,
+				suggestions: [{
+					value: "on",
+					description: `打开天梯功能${enabled ? "（当前：on）" : ""}`
+				}, {
+					value: "off",
+					description: `关闭天梯功能${enabled ? "" : "（当前：off）"}`
+				}]
+			}
+		}));
+		appliedState = enabled;
+	};
 	ctx.effect(function* () {
 		yield async () => {
 			lifetime.abort();
 			await Promise.allSettled(active);
 			runtime.auth.clear();
 		};
-		yield ctx.on("tools/pre-execute", async (exec, next) => {
-			if (exec.name !== "TiantiProjectSwitch") return next();
-			const decision = await next();
-			if (decision.kind !== "allow") return decision;
-			return {
-				kind: "ask",
-				reason: "Switch the shared Tianti project context.",
-				displayReason: {
-					en: "Switch the Tianti project?",
-					zh: "切换当前天梯项目？"
-				}
-			};
-		});
-		for (const command of [
-			{
-				name: "tianti",
-				description: "查询天梯任务、项目、SCM 和流水线，审核外部写操作",
-				handler: handler(call$1)
-			},
-			{
-				name: "tt",
-				description: "天梯工具箱（/tianti 的别名）",
-				handler: handler(call$1)
-			},
-			{
-				name: "tianti-deliver",
-				description: "引导天梯任务从需求、验证到研发交付",
-				handler: handler(call)
-			},
-			{
-				name: "td",
-				description: "天梯研发交付（/tianti-deliver 的别名）",
-				handler: handler(call)
-			}
-		]) yield ctx.commands.register({
-			...command,
+		yield disposeSwitchCommands;
+		yield unloadModelTools;
+		refreshIntegration();
+		for (const command of [{
+			name: "tianti-deliver",
+			description: "引导天梯任务从需求、验证到研发交付",
+			handler: handler(call),
 			input: { hint: "help | status | 子命令与参数" }
-		});
-		yield* installTools(ctx, runtime, lifetime.signal, track);
+		}, {
+			name: "td",
+			description: "天梯研发交付（/tianti-deliver 的别名）",
+			handler: handler(call),
+			input: { hint: "help | status | 子命令与参数" }
+		}]) yield ctx.commands.register(command);
+		yield () => {
+			lifetime.abort();
+		};
 	}, "tianti lifecycle");
 }
 //#endregion

package/runtime/node_modules/@deepseek-ai/dsh-tianti/lib/types/config.d.ts

@@ -2,11 +2,11 @@
 import z from '@deepseek-ai/schemastery';
 /** Tianti endpoints, switches, and bounded execution settings. */
 export interface Config {
-    /** Enable Tianti resource commands without contacting the platform at boot. */
+    /** Initially enable Tianti; defaults off until the user runs /tianti on. */
     enabled: boolean;
     /** Allow execution of human-approved external write reviews. */
     enableWriteActions: boolean;
-    /** Publish model-facing Tianti query and review-proposal tools. */
+    /** Register model-facing query and review-proposal tools only while Tianti is on. */
     enableModelTools: boolean;
     /** Tianti DevOps origin; HTTPS except for loopback test deployments. */
     baseUrl: string;

package/runtime/node_modules/@deepseek-ai/dsh-tianti/lib/types/index.d.ts

@@ -7,6 +7,7 @@ export declare const inject: string[];
 /** Register migrated commands without changing the agent loop or existing model providers.
  * @param ctx Harness command and tool registries.
  * @param config Deployment endpoints, switches, and timeouts.
+ * @returns Startup after persisted switches and command descriptions are ready.
  */
-export declare function apply(ctx: Context, config: Config): void;
+export declare function apply(ctx: Context, config: Config): Promise<void>;
 //# sourceMappingURL=index.d.ts.map

package/runtime/node_modules/@deepseek-ai/dsh-tianti/lib/types/services/tianti/config.d.ts

@@ -1,3 +1,4 @@
+import type { TiantiRuntime } from '../../runtime.ts';
 import type { TiantiRuntimeConfig } from './types.ts';
 /** Tianti write actions disabled message for Tianti operations.
  */
@@ -6,8 +7,9 @@ export declare const TIANTI_WRITE_ACTIONS_DISABLED_MESSAGE = "\u7814\u53D1\u5E73
  */
 export declare const TIANTI_WRITE_ACTIONS_ENABLED_MESSAGE = "\u7814\u53D1\u5E73\u53F0\u5199\u64CD\u4F5C\u6267\u884C\u6743\u9650\u5DF2\u5F00\u542F\u3002\u6240\u6709\u5916\u90E8\u5199\u64CD\u4F5C\u4ECD\u5FC5\u987B\u5148\u751F\u6210\u5BA1\u6838\u9879\uFF0C\u5E76\u901A\u8FC7 /tianti approve <reviewId> --execute \u660E\u786E\u6279\u51C6\u540E\u624D\u4F1A\u6267\u884C\u3002";
 /** Get tianti runtime config for Tianti operations.
- * @returns The invocation's configured endpoints and current integration switches. */
-export declare function getTiantiRuntimeConfig(): TiantiRuntimeConfig;
+ * @param runtime Mounted Tianti runtime; defaults to the current invocation.
+ * @returns The runtime's configured endpoints and effective integration switches. */
+export declare function getTiantiRuntimeConfig(runtime?: TiantiRuntime): TiantiRuntimeConfig;
 /** Is tianti enabled for Tianti operations.
  * @returns Whether Tianti resource operations are enabled. */
 export declare function isTiantiEnabled(): boolean;