dominds 1.22.0 → 1.23.0

package/dist/access-control.js

@@ -311,12 +311,12 @@ function getAccessDeniedMessage(operation, targetPath, language = 'en') {
         lines.push('');
         if (language === 'zh') {
             lines.push(`- 说明：\`*.tsk/\` 是封装差遣牒。通用文件工具无法读/写/列目录/删除其中内容（硬编码无条件拒绝）。`);
-            lines.push(`- 提示：新增章节请使用 \`do_mind\`；少量追加请使用 \`mind_more\`（默认 progress：\`mind_more({\"items\":[\"...\"]})\`）；改写已有整章请使用 \`change_mind\`（顶层：\`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\"})\`；额外章节：\`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\"})\`）。`);
+            lines.push(`- 提示：新增章节请使用 \`do_mind\`；少量追加请使用 \`mind_more\`（默认 progress：\`mind_more({\"items\":[\"...\"]})\`）；改写已有整章请使用带当前内容哈希的 \`change_mind\`（顶层：\`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`；额外章节：先 \`recall_taskdoc\` 取得 \`content_hash\`，再 \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`）。`);
             lines.push(`- 提示：读取额外章节请使用函数工具 \`recall_taskdoc\`：\`recall_taskdoc({\"category\":\"<category>\",\"selector\":\"<selector>\"})\`。`);
         }
         else {
             lines.push(`- Note: \`*.tsk/\` is an encapsulated Taskdoc. It is hard-denied for all general file tools.`);
-            lines.push(`- Hint: To create a section, use \`do_mind\`; for small append-only updates, use \`mind_more\` (defaults to progress: \`mind_more({\"items\":[\"...\"]})\`); for full-section replacements of existing sections, use \`change_mind\` (top-level: \`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\"})\`; extra sections: \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\"})\`).`);
+            lines.push(`- Hint: To create a section, use \`do_mind\`; for small append-only updates, use \`mind_more\` (defaults to progress: \`mind_more({\"items\":[\"...\"]})\`); for full-section replacements, use \`change_mind\` with the current content hash (top-level: \`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`; extra sections: call \`recall_taskdoc\` for \`content_hash\` first, then \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`).`);
             lines.push(`- Hint: To read extra sections, use \`recall_taskdoc({\"category\":\"<category>\",\"selector\":\"<selector>\"})\`.`);
         }
     }

package/dist/dialog-instance-registry.js

@@ -85,10 +85,9 @@ async function getOrRestoreMainDialog(rootId, status) {
         ? latest.diligencePushRemainingBudget
         : undefined;
     const normalizedRemainingBudget = clampNonNegativeFiniteInt(persistedRemainingBudget, diligencePushMax > 0 ? diligencePushMax : 0);
-    mainDialog.diligencePushRemainingBudget =
-        diligencePushMax > 0
-            ? Math.min(normalizedRemainingBudget, diligencePushMax)
-            : normalizedRemainingBudget;
+    // `diligence-push-max` only seeds defaults. Persisted per-dialog budget is the runtime source of
+    // truth, including operator-added budget above (or despite) the current team default.
+    mainDialog.diligencePushRemainingBudget = normalizedRemainingBudget;
     mainDialog.setPersistenceStatus(status);
     dialog_global_registry_1.globalDialogRegistry.register(mainDialog);
     // Keep the in-memory main dialog fully hydrated regardless of persistence status

package/dist/dialog.d.ts

@@ -438,7 +438,7 @@ export declare abstract class Dialog {
     }): Promise<void>;
     persistAgentMessage(content: string, genseq: number, type: 'thinking_msg' | 'saying_msg', provider_data?: ProviderData, reasoning?: ReasoningPayload): Promise<void>;
     persistUiOnlyMarkdown(content: string, genseq: number): Promise<void>;
-    persistFunctionCall(id: string, name: string, rawArgumentsText: string, genseq: number): Promise<void>;
+    persistFunctionCall(id: string, name: string, rawArgumentsText: string, genseq: number, rawId?: string): Promise<void>;
     persistTellaskCall(id: string, name: TellaskCallRecordName, rawArgumentsText: string, genseq: number, options?: {
         deliveryMode?: 'tellask_call_start' | 'func_call_requested';
     }): Promise<void>;
@@ -670,7 +670,7 @@ export declare abstract class DialogStore {
     /**
      * Persist a function call to storage
      */
-    persistFunctionCall(_dialog: Dialog, _id: string, _name: string, _rawArgumentsText: string, _genseq: number): Promise<void>;
+    persistFunctionCall(_dialog: Dialog, _id: string, _name: string, _rawArgumentsText: string, _genseq: number, _rawId?: string): Promise<void>;
     persistTellaskCall(_dialog: Dialog, _id: string, _name: TellaskCallRecordName, _rawArgumentsText: string, _genseq: number, _options?: {
         deliveryMode?: 'tellask_call_start' | 'func_call_requested';
     }): Promise<void>;

package/dist/dialog.js

@@ -1452,8 +1452,8 @@ class Dialog {
     async persistUiOnlyMarkdown(content, genseq) {
         return await this.dlgStore.persistUiOnlyMarkdown(this, content, genseq);
     }
-    async persistFunctionCall(id, name, rawArgumentsText, genseq) {
-        return await this.dlgStore.persistFunctionCall(this, id, name, rawArgumentsText, genseq);
+    async persistFunctionCall(id, name, rawArgumentsText, genseq, rawId) {
+        return await this.dlgStore.persistFunctionCall(this, id, name, rawArgumentsText, genseq, rawId);
     }
     async persistTellaskCall(id, name, rawArgumentsText, genseq, options) {
         return await this.dlgStore.persistTellaskCall(this, id, name, rawArgumentsText, genseq, options);
@@ -1895,7 +1895,7 @@ class DialogStore {
     /**
      * Persist a function call to storage
      */
-    async persistFunctionCall(_dialog, _id, _name, _rawArgumentsText, _genseq) { }
+    async persistFunctionCall(_dialog, _id, _name, _rawArgumentsText, _genseq, _rawId) { }
     async persistTellaskCall(_dialog, _id, _name, _rawArgumentsText, _genseq, _options) { }
     /**
      * Start a new course in storage

package/dist/docs/dialog-system.md

@@ -821,7 +821,7 @@ Invoke the function tool `clear_mind` with:
 
 - `do_mind`: create one new section; fails if the target already exists.
 - `mind_more`: append small entries to an existing section; defaults to `progress`.
-- `change_mind`: replace one existing section; fails if the target does not exist.
+- `change_mind`: replace one existing section; fails if the target does not exist or `previous_content_hash` does not match the current content hash.
 - `never_mind`: delete one existing section.
 
 **Common section arguments**:
@@ -829,11 +829,12 @@ Invoke the function tool `clear_mind` with:
 - `selector: "goals" | "constraints" | "progress"` for top-level sections; or a valid selector with `category`
 - `category?: string`
 - `content: string` for `do_mind` / `change_mind`
+- `previous_content_hash: string` for `change_mind`
 
 Example:
 
 ```text
-Invoke `do_mind` to create a missing section, or `change_mind` to replace an existing section.
+Invoke `do_mind` to create a missing section, or `change_mind` with the current `content_hash` as `previous_content_hash` to replace an existing section.
 ```
 
 **Behavior**:

package/dist/docs/dialog-system.zh.md

@@ -798,7 +798,7 @@ async function checkSideDialogRevival(askerDialog: Dialog): Promise<void> {
 
 - `do_mind`：创建一个新章节；若目标已存在则失败。
 - `mind_more`：向已有章节追加少量条目；默认追加到 `progress`。
-- `change_mind`：替换一个已有章节；若目标不存在则失败。
+- `change_mind`：替换一个已有章节；若目标不存在，或 `previous_content_hash` 与当前内容哈希不匹配，则失败。
 - `never_mind`：删除一个已有章节。
 
 **通用章节参数**：
@@ -806,11 +806,12 @@ async function checkSideDialogRevival(askerDialog: Dialog): Promise<void> {
 - 顶层章节使用 `selector: "goals" | "constraints" | "progress"`；额外章节使用有效 `selector` 加 `category`
 - `category?: string`
 - `do_mind` / `change_mind` 使用 `content: string`
+- `change_mind` 还需要 `previous_content_hash: string`
 
 示例：
 
 ```text
-调用 `do_mind` 创建缺失章节，或调用 `change_mind` 替换已有章节。
+调用 `do_mind` 创建缺失章节，或调用 `change_mind` 并带上当前 `content_hash` 作为 `previous_content_hash` 替换已有章节。
 ```
 
 **行为**：

package/dist/docs/diligence-push.md

@@ -82,15 +82,20 @@ To avoid infinite loops, diligence-push has a per-dialog budget (per-member `dil
 how many auto-continued diligence prompts can be injected for a given dialog before the runtime stops
 issuing further automatic Diligence Pushes for that budget.
 
-- Default: **3**
-- If `< 1`, diligence-push is effectively disabled for that member
+- Default: **99**
+- If `< 1`, new dialogs start with no automatic Diligence Push budget
 - Configurable per-member via `diligence-push-max` in `.minds/team.yaml`
 
-### Reset on Q4H
+Important: `diligence-push-max` is only the default budget used when a dialog instance is created
+or reset. Runtime decisions must use the concrete dialog's remaining budget
+(`diligencePushRemainingBudget`), so a manually refilled dialog can keep auto-continuing even when
+the team default is `0`.
 
-When a dialog becomes suspended due to a pending Q4H (Questions for Human), the diligence-push injection
-counter is reset. This ensures that after the human answers the Q4H and the dialog is resumed, the
-dialog gets a fresh diligence-push budget again.
+### Q4H suspension
+
+When a dialog becomes suspended due to a pending Q4H (Questions for Human), Diligence Push stops
+while that suspension is active. Q4H does not reapply the member default budget; the dialog keeps its
+own remaining budget so operator adjustments survive the suspension boundary.
 
 ### Budget exhausted → stop auto-pushing for that budget
 
@@ -103,9 +108,8 @@ Diligence-push can be disabled per-rtws in either of these ways:
 
 - If the selected diligence file exists but its content is empty/whitespace, diligence-push is disabled (no injection).
 
-Diligence-push can be disabled per-member in either of these ways:
-
-- If `diligence-push-max < 1`, diligence-push is disabled for that member (no injection).
+To stop auto-continue for a specific dialog, set that dialog's remaining budget to `0` or use the
+per-dialog Diligence Push disable switch.
 
 ## Diligence prompt resolution
 
@@ -122,9 +126,10 @@ If the first existing file in the above order has empty/whitespace content, **di
 Note: YAML frontmatter in diligence files is **ignored** by the runtime. If present, it is treated as
 non-content metadata and stripped from the prompt body.
 
-### Team member cap: `diligence-push-max`
+### Team member default budget: `diligence-push-max`
 
-Each team member can optionally cap diligence-push via `.minds/team.yaml`:
+Each team member can optionally set the starting Diligence Push budget for new or reset dialogs via
+`.minds/team.yaml`:
 
 ```yaml
 members:
@@ -135,7 +140,9 @@ members:
 Rules:
 
 - If missing, `diligence-push-max` defaults to **99** for that member.
-- If `diligence-push-max < 1`, diligence-push is disabled for that member (no injection), even if the diligence file exists.
+- If `diligence-push-max < 1`, newly created dialogs start with remaining budget `0`.
+- After creation or reset, runtime business logic follows the dialog's own remaining budget rather
+  than treating `diligence-push-max` as runtime authority.
 - Built-in shadow members `fuxi` and `pangu` default to `diligence-push-max: 0` unless explicitly overridden in team.yaml.
 
 ## UX notes

package/dist/docs/diligence-push.zh.md

@@ -70,12 +70,15 @@ Dominds 主线对话旨在长期运行。主线对话"停止"（变为空闲）
 为避免无限循环，diligence-push 有一个按对话的预算（每个成员的 `diligence-push-max`），控制对于给定对话在当前预算内还能注入多少个自动继续的鞭策语；预算耗尽后，运行时会停止继续自动鞭策。
 
 - 默认值：**99**
-- 如果 `< 1`，则该成员的 diligence-push 有效禁用
+- 如果 `< 1`，则新建对话从 0 个自动鞭策预算开始
 - 可通过 `.minds/team.yaml` 中的 `diligence-push-max` 按成员配置
 
-### Q4H 时重置
+重要：`diligence-push-max` 只是在创建或重置对话实例时使用的默认预算。运行时业务判断必须以具体对话自己的剩余预算
+（`diligencePushRemainingBudget`）为准；因此即使团队默认值是 `0`，手工补充过预算的对话也应继续自动鞭策。
 
-当对话因待处理的 Q4H（Questions for Human）而暂停时，diligence-push 注入计数器会被重置。这确保在人类回答 Q4H 并恢复对话后，对话会获得新的 diligence-push 预算。
+### Q4H 暂停
+
+当对话因待处理的 Q4H（Questions for Human）而暂停时，鞭策会在该暂停期间停止。Q4H 不会重新套用成员默认预算；对话会保留自己的剩余预算，因此操作员调整过的预算能跨过暂停边界继续生效。
 
 ### 预算耗尽 → 停止继续自动鞭策当前预算
 
@@ -87,9 +90,7 @@ Dominds 主线对话旨在长期运行。主线对话"停止"（变为空闲）
 
 - 如果选中的鞭策语文件存在但其内容为空/仅空白，则禁用 diligence-push（不注入）。
 
-可以通过以下任一方式按成员禁用 diligence-push：
-
-- 如果 `diligence-push-max < 1`，则该成员的 diligence-push 被禁用（不注入）。
+若要停止某个具体对话的自动续推，应将该对话的剩余预算设为 `0`，或使用该对话自己的鞭策禁用开关。
 
 ## 鞭策语解析
 
@@ -105,9 +106,9 @@ Dominds 主线对话旨在长期运行。主线对话"停止"（变为空闲）
 
 注意：鞭策语文件中的 YAML frontmatter 会被运行时忽略。如果存在，它被视为非内容元数据并从提示正文中剥离。
 
-### 团队成员上限：`diligence-push-max`
+### 团队成员默认预算：`diligence-push-max`
 
-每个团队成员可以选择通过 `.minds/team.yaml` 限制 diligence-push：
+每个团队成员可以选择通过 `.minds/team.yaml` 设置新建或重置对话的鞭策起始预算：
 
 ```yaml
 members:
@@ -118,7 +119,8 @@ members:
 规则：
 
 - 如果缺失，`diligence-push-max` 对于该成员默认为 **99**。
-- 如果 `diligence-push-max < 1`，则该成员的 diligence-push 被禁用（不注入），即使鞭策语文件存在。
+- 如果 `diligence-push-max < 1`，则新建对话的剩余预算从 `0` 开始。
+- 创建或重置之后，运行时业务逻辑以对话自己的剩余预算为准，而不是再次把 `diligence-push-max` 当作启停闸门。
 - 内置影子成员 `fuxi` 和 `pangu` 默认为 `diligence-push-max: 0`，除非在 team.yaml 中显式覆盖。
 
 ## UX 备注

package/dist/docs/dominds-terminology.md

@@ -425,11 +425,11 @@ Example / 示例（概念）:
 
 ### Diligence Push（鞭策）
 
-- EN: A proactive continuation mechanism that nudges an agent forward when it's idle or blocked (a "Diligence Push"), using configurable prompts and budget limits. **Always use "Diligence Push"; never use "keep-going", "勤奋", "proactive-push", or "auto-continue".**
-- ZH: 一种主动继续机制，在智能体空闲或阻塞时通过可配置的提示词和预算上限进行"鞭策"。**统一使用"鞭策"；禁止使用"保持运行"、"勤奋"、"自动继续"、"催促"等变体。**
+- EN: A proactive continuation mechanism that nudges an agent forward when it's idle or blocked (a "Diligence Push"), using configurable prompts and per-dialog remaining budgets. **Always use "Diligence Push"; never use "keep-going", "勤奋", "proactive-push", or "auto-continue".**
+- ZH: 一种主动继续机制，在智能体空闲或阻塞时通过可配置的提示词和每个对话自己的剩余预算进行"鞭策"。**统一使用"鞭策"；禁止使用"保持运行"、"勤奋"、"自动继续"、"催促"等变体。**
 
 - EN: Related terms: "Diligence Push prompt" (prompt file), "Diligence Push-max" config, "Diligence Push injection" (prompt injection).
-- ZH: 相关术语："鞭策提示词"（提示词文件）、"鞭策上限"（配置项）、"鞭策注入"（注入机制）。
+- ZH: 相关术语："鞭策提示词"（提示词文件）、"鞭策默认预算"（配置项）、"鞭策注入"（注入机制）。
 
 ### 用词原则：者 / 器 与 -or / -er
 

package/dist/docs/encapsulated-taskdoc.md

@@ -174,7 +174,7 @@ Taskdoc mutation function tools each affect **exactly one** section file of the
 
 - `do_mind` creates a new section file and MUST fail if the target already exists.
 - `mind_more` appends entries without deduplicating or rewriting old content.
-- `change_mind` replaces an existing section file and MUST fail if the target does not exist.
+- `change_mind` replaces an existing section file and MUST fail if the target does not exist or if the supplied `previous_content_hash` does not match the current section content hash.
 - `never_mind` deletes an existing section file.
 
 Critically:
@@ -191,6 +191,7 @@ They take:
 
 - `selector` (required)
 - `content` (required)
+- `previous_content_hash` (required for `change_mind`)
 - `category` (optional)
 
 When `category` is missing/empty, `selector` targets the **top-level** section files:
@@ -218,6 +219,13 @@ Hard prohibitions:
 - `contracts|acceptance|grants|runbook|decisions|risks` MUST NOT be written outside `category="bearinmind"`.
 - No other category is auto-injected into the system prompt (only an index may be shown).
 
+`previous_content_hash` is the `sha256:...` hash of the current section content after Dominds' canonical Markdown file-ending normalization. It is not stored as extra state.
+
+- For auto-injected top-level sections (`goals`, `constraints`, `progress`), the injected Taskdoc status block shows each current `content_hash`.
+- For non-auto-injected sections, call `recall_taskdoc({ category, selector })`; its result includes `content_hash`.
+- On hash mismatch, the write MUST fail. The agent must re-read/review the current section and retry only after fully merging existing content.
+- If the proposed replacement would overwrite, delete, or materially replace existing content, the agent must have either direct human confirmation for that replacement, or a human-approved explicit SOP/acceptance standard that authorizes the replacement after considering the existing content.
+
 ### `recall_taskdoc` (read-only; for non-auto-injected sections)
 
 Because general file tools cannot read anything under `*.tsk/`, Dominds provides a dedicated read tool:
@@ -230,6 +238,7 @@ Behavior:
 
 - Reads `bearinmind/<whitelisted>.md` or `<category>/<selector>.md`.
 - The top-level three sections (`goals` / `constraints` / `progress`) are already auto-injected, so `recall_taskdoc` does not read them.
+- Returns the section `content_hash` for use as `change_mind.previous_content_hash`.
 
 Example (bearinmind):
 
@@ -249,7 +258,7 @@ Example:
 
 ```text
 Call the function tool `change_mind` with:
-{ "selector": "constraints", "content": "- MUST not browse the web.\n- MUST keep responses under 10 lines unless asked otherwise.\n" }
+{ "selector": "constraints", "content": "- MUST not browse the web.\n- MUST keep responses under 10 lines unless asked otherwise.\n", "previous_content_hash": "sha256:..." }
 ```
 
 ### Behavioral rules

package/dist/docs/encapsulated-taskdoc.zh.md

@@ -185,7 +185,7 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 
 - `do_mind` 创建新章节文件；如果目标已存在，必须失败。
 - `mind_more` 追加条目，不会自动去重或改写旧内容。
-- `change_mind` 替换已有章节文件；如果目标不存在，必须失败。
+- `change_mind` 替换已有章节文件；如果目标不存在，或传入的 `previous_content_hash` 与当前章节内容哈希不匹配，必须失败。
 - `never_mind` 删除已有章节文件。
 
 关键点：
@@ -202,6 +202,7 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 
 - `selector`（必需）
 - `content`（必需）
+- `previous_content_hash`（`change_mind` 必需）
 - `category`（可选）
 
 当 `category` 缺失/为空时，`selector` 指向**顶层**部分文件：
@@ -229,6 +230,13 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 - `contracts|acceptance|grants|runbook|decisions|risks` 不得在 `category="bearinmind"` 之外编写。
 - 没有其他类别会自动注入系统提示（只会显示一个索引）。
 
+`previous_content_hash` 是当前章节内容在 Dominds 规范化 Markdown 文件结尾之后得到的 `sha256:...` 哈希；它不是额外持久状态。
+
+- 顶层自动注入章节（`goals`、`constraints`、`progress`）的当前 `content_hash` 会显示在注入的差遣牒状态块中。
+- 非自动注入章节需要先调用 `recall_taskdoc({ category, selector })`；返回结果会包含 `content_hash`。
+- 哈希不匹配时写入必须失败。智能体必须重新读取/回顾当前章节，并且只在充分合并原有内容后重试。
+- 如果拟替换内容会冲掉、删除或实质替换原有内容，智能体必须已获得该替换的直接人类确认，或存在人类认可的明确 SOP/验收标准，并且已按该标准考虑过原有内容。
+
 ### `recall_taskdoc`（只读；用于非自动注入的部分）
 
 因为通用文件工具无法读取 `*.tsk/` 下的任何内容，Dominds 提供了一个专门的读取工具：
@@ -241,6 +249,7 @@ recall_taskdoc({ category, selector })
 
 - 读取 `bearinmind/<whitelisted>.md` 或 `<category>/<selector>.md`。
 - 顶层三段（`goals` / `constraints` / `progress`）已经自动注入，因此 `recall_taskdoc` 不会读取它们。
+- 返回章节 `content_hash`，供 `change_mind.previous_content_hash` 使用。
 
 示例（bearinmind）：
 

package/dist/docs/llm-provider-isolation.md

@@ -12,7 +12,7 @@ This means:
 - `apiType: anthropic` owns official Anthropic Messages semantics, including object-shaped `model_params.anthropic.thinking`.
 - `apiType: anthropic-compatible` owns Anthropic-compatible gateway semantics, including boolean `model_params.anthropic-compatible.thinking` mapped to provider `enabled` / `disabled` request objects.
 
-Some providers expose OpenAI-compatible or Anthropic-compatible endpoints while still requiring an explicit provider quirk profile. Volcano Engine Ark Coding Plan is the canonical example: its OpenAI-compatible integration reuses the Chat Completions transport shape, but `thinking`, `reasoning_content`, tool-call/thinking alternation, `<think>` compatibility, and model capability metadata must stay inside the `volcengine-coding-plan` quirk instead of becoming generic `openai-compatible` semantics. See [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md) for the design record.
+Some providers expose OpenAI-compatible or Anthropic-compatible endpoints while still requiring explicit provider quirks. Volcano Engine Ark Coding Plan now uses the OpenAI-compatible Chat Completions shape with its dedicated `/api/coding/v3` endpoint; the historical Anthropic-compatible Volcano tool-call quirks have been removed. Kimi Code also uses the OpenAI-compatible Chat Completions shape, but must use the built-in `kimi-code` provider's dedicated `/coding/v1` endpoint, real Dominds User-Agent, `prompt_cache_key`, and Kimi-specific `thinking`/`reasoning_effort` request shaping. See [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md) for the Volcano migration design record.
 
 Similar field names across wrappers do not imply compatibility. For example, `reasoning_effort`, `verbosity`, `parallel_tool_calls`, and web search controls may look similar but can still differ in accepted values, payload shape, lifecycle events, validation rules, and runtime meaning.
 

package/dist/docs/llm-provider-isolation.zh.md

@@ -12,7 +12,7 @@ Dominds 把每个 LLM provider wrapper 视为独立的协议适配器，而不
 - `apiType: anthropic` 只负责 Anthropic 官方 Messages 语义，包括 object 形态的 `model_params.anthropic.thinking`。
 - `apiType: anthropic-compatible` 负责 Anthropic 兼容网关语义，包括 boolean 形态的 `model_params.anthropic-compatible.thinking`，并映射为 provider 请求里的 `enabled` / `disabled` object。
 
-某些 provider 虽然暴露 OpenAI-compatible 或 Anthropic-compatible endpoint，但仍可能需要明确的 provider quirk profile。典型例子是火山方舟 Coding Plan：OpenAI-compatible 接入应复用 Chat Completions 的基础传输形态，但它的 `thinking`、`reasoning_content`、工具调用交替、`<think>` 兼容与模型能力表必须留在 `volcengine-coding-plan` 专项 quirk 中，不能进入通用 `openai-compatible` 语义。设计记录见 [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md)。
+某些 provider 虽然暴露 OpenAI-compatible 或 Anthropic-compatible endpoint，但仍可能需要明确的 provider quirk profile。火山方舟 Coding Plan 现在走 OpenAI-compatible Chat Completions 形态，并使用专属 `/api/coding/v3` endpoint；历史 Anthropic-compatible 火山工具调用 quirk 已取消。Kimi Code 也走 OpenAI-compatible Chat Completions 形态，但必须使用内置 `kimi-code` provider 的专属 `/coding/v1` endpoint、真实 Dominds User-Agent、`prompt_cache_key` 和 Kimi 专用 `thinking`/`reasoning_effort` 请求整形。火山迁移设计记录见 [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md)。
 
 不同 wrapper 下看起来同名的字段，不代表它们可以互相兼容。比如 `reasoning_effort`、`verbosity`、`parallel_tool_calls`、web search 相关开关，名字可能相似，但可接受值、请求载荷形状、流事件生命周期、校验规则和运行时含义都可能不同。
 

package/dist/docs/team_mgmt-toolset.md

@@ -327,7 +327,8 @@ used in `.minds/team.yaml` member configurations.
 - `openai`: uses the OpenAI **Responses API** (best for OpenAI official endpoints; requires a `/v1`-style `responses` endpoint)
 - `anthropic`: uses the official Anthropic **Messages API**. `model_params.anthropic.thinking` uses the official Anthropic object shape.
 - `anthropic-compatible`: uses Anthropic-compatible **Messages API**. `model_params.anthropic-compatible.thinking` uses the Dominds boolean switch: `true` sends `thinking.type=enabled`; `false` sends `thinking.type=disabled`.
-- `openai-compatible`: uses the OpenAI **Chat Completions API** (best for most “OpenAI-compatible” third-party/proxy endpoints; e.g. a manually configured Ark `.../api/v3` endpoint; Volcano Engine Ark Coding Plan must use its dedicated `.../api/coding/v3` endpoint and declare the matching quirk)
+- `openai-compatible`: uses the OpenAI **Chat Completions API** (best for most “OpenAI-compatible” third-party/proxy endpoints; e.g. a manually configured Ark `.../api/v3` endpoint; Volcano Engine Ark Coding Plan must use its dedicated `.../api/coding/v3` endpoint)
+  - Kimi Code uses the built-in `kimi-code` provider (`https://api.kimi.com/coding/v1`, `KIMI_CODE_API_KEY`, model `kimi-for-coding`) rather than a generic Moonshot/Open Platform endpoint.
   - **Vision support**: if the provider/model supports multimodal Chat Completions, Dominds will pass tool-output images (`func_result_msg.contentItems[].type=input_image`, e.g. from MCP tools) to the model as `image_url` inputs after reading the persisted artifact; unsupported mime types are downgraded to text.
 
 ```yaml

package/dist/docs/team_mgmt-toolset.zh.md

@@ -268,7 +268,8 @@
 - `openai`：使用 OpenAI **Responses API**（适用于 OpenAI 官方；需要 `/v1` 语义的 `responses` 端点）
 - `anthropic`：使用 Anthropic 官方 **Messages API**。`model_params.anthropic.thinking` 使用 Anthropic 官方 object 形态。
 - `anthropic-compatible`：使用 Anthropic 兼容的 **Messages API**。`model_params.anthropic-compatible.thinking` 使用 Dominds boolean 开关：`true` 发送 `thinking.type=enabled`，`false` 发送 `thinking.type=disabled`。
-- `openai-compatible`：使用 OpenAI **Chat Completions API**（适用于多数“OpenAI 兼容”第三方/代理；例如手动配置的 Ark `.../api/v3` 端点；火山方舟 Coding Plan 必须使用专属 `.../api/coding/v3` 端点并声明对应 quirk）
+- `openai-compatible`：使用 OpenAI **Chat Completions API**（适用于多数“OpenAI 兼容”第三方/代理；例如手动配置的 Ark `.../api/v3` 端点；火山方舟 Coding Plan 必须使用专属 `.../api/coding/v3` 端点）
+  - Kimi Code 使用内置 `kimi-code` provider（`https://api.kimi.com/coding/v1`、`KIMI_CODE_API_KEY`、模型 `kimi-for-coding`），不要配置成普通 Moonshot/Open Platform endpoint。
   - **识图支持**：如果该 provider/model 支持 Chat Completions 的多模态输入，Dominds 会把工具输出里的图片（`func_result_msg.contentItems[].type=input_image`，来自 MCP 等工具）读取 artifact 后作为 `image_url` 形式喂给模型；不支持的 mimeType 会降级成文本提示。
 
 ```yaml

package/dist/docs/volcengine-coding-plan-openai-compatible.zh.md

@@ -1,6 +1,6 @@
 # 火山方舟 Coding Plan OpenAI-Compatible 接入记录
 
-本文记录 Dominds 试行将火山方舟 Coding Plan 从 Anthropic-compatible 协议切换到 OpenAI-compatible 协议的调研结论、设计边界和实施计划。
+本文记录 Dominds 将火山方舟 Coding Plan 从 Anthropic-compatible 协议切换到 OpenAI-compatible 协议的调研结论、设计边界和实施记录。
 
 调研日期：2026-05-06
 
@@ -15,7 +15,7 @@ Dominds 现有火山方舟 Coding Plan 接入主要围绕 Anthropic-compatible
 
 官方明确提醒：Coding Plan 不应使用普通数据面 `https://ark.cn-beijing.volces.com/api/v3`，否则不会消耗 Coding Plan 额度，可能产生额外 API 调用费用。
 
-本轮试行目标是验证 OpenAI-compatible 路线是否更适合 Dominds 的工具调用、流式输出、thinking/saying 顺序与多模型支持。
+结论：Dominds 最终取消火山方舟 Coding Plan + Anthropic-compatible 组合，内置 `volcano-engine-coding-plan` 改用 OpenAI-compatible 路线，以降低工具调用、流式输出、thinking/saying 顺序与多模型支持上的兼容成本。
 
 ## 资料来源
 
@@ -56,19 +56,20 @@ Dominds 现有火山方舟 Coding Plan 接入主要围绕 Anthropic-compatible
 
 ### Provider Profile
 
-新增或调整为一个明确 provider profile，例如：
+当前内置 provider profile：
 
 ```yaml
 providers:
   volcano-engine-coding-plan:
     name: Volcano Engine Coding Plan
     apiType: openai-compatible
-    apiQuirks: volcengine-coding-plan
+    apiQuirks:
+      - same-context-empty-response
     baseUrl: https://ark.cn-beijing.volces.com/api/coding/v3
     apiKeyEnvVar: ARK_API_KEY
 ```
 
-`apiType: openai-compatible` 只表示底层 HTTP endpoint、Chat Completions 请求形态和 SSE 基础形态接近 OpenAI Chat Completions。所有火山行为差异都由 `apiQuirks: volcengine-coding-plan` 明确承接。
+`apiType: openai-compatible` 表示底层 HTTP endpoint、Chat Completions 请求形态和 SSE 基础形态接近 OpenAI Chat Completions。历史上用于火山 Anthropic-compatible 文本 tool_use / 空对象参数拼接的专项 quirks 已删除；当前内置只保留 `same-context-empty-response` 这类通用 provider 重试/诊断 quirk。
 
 ### 具体模型优先
 
@@ -86,9 +87,9 @@ Dominds 只声明具体模型，不声明 `ark-code-latest`。原因：
 建议边界：
 
 - 通用 OpenAI-compatible wrapper 保持 Chat Completions 标准假设。
-- 火山 Coding Plan request shaping 放在 quirk/profile 层。
-- 火山 Coding Plan stream delta 解释放在 quirk/profile 层。
-- 火山 Coding Plan 工具调用历史修复和字段校验放在 quirk/profile 层。
+- 火山 Coding Plan request shaping 以 OpenAI-compatible Chat Completions 形态为基准。
+- 火山 Coding Plan stream delta 解释以 OpenAI-compatible SSE 形态为基准。
+- 火山 Coding Plan 工具调用历史必须满足 Chat Completions 的 tool_calls / tool result 关联要求。
 - driver/storage/UI 只接收 Dominds 已解码后的 thinking/saying/calling 投影事件。
 
 ## 支持模型与能力草案
@@ -291,13 +292,13 @@ OpenAI Chat Completions 风格下，`delta.tool_calls` 可能按 index 分块返
 ### Phase 1：文档与配置边界
 
 - 新增本文档。
-- 更新 provider 隔离文档，注明火山 Coding Plan 作为 OpenAI-compatible quirk profile，而不是通用语义。
+- 更新 provider 隔离文档，注明火山 Coding Plan 使用 OpenAI-compatible + 专属 endpoint，不再支持 Anthropic-compatible 火山工具 quirks。
 - 在 defaults 中将 `volcano-engine-coding-plan` 调整为 OpenAI-compatible profile，仅列具体模型。
 - 不提供 `ark-code-latest`。
 
 ### Phase 2：请求构造
 
-- 在 OpenAI-compatible wrapper 中识别 `apiQuirks: volcengine-coding-plan`。
+- 使用 OpenAI-compatible wrapper 的标准工具调用与流式解析路径。
 - 增加火山模型能力表。
 - 为火山 provider 增加 `thinking` / `reasoning_effort` 参数冲突校验。
 - 确保 tool call history 满足 `type: function`、arguments string 等要求。

package/dist/llm/api-quirks.d.ts

@@ -3,8 +3,6 @@ import type { LanguageCode } from '@longrun-ai/kernel/types/language';
 import type { ProviderConfig } from './client';
 import type { LlmRetryStrategy } from './gen';
 export type LlmFailureKind = 'retriable' | 'rejected' | 'fatal';
-export declare const GLM_VIA_VOLCANO_API_QUIRK = "glm-via-volcano";
-export declare const VOLCANO_TOOL_USE_API_QUIRK = "volcano-tool-use";
 export declare const SAME_CONTEXT_EMPTY_RESPONSE_API_QUIRK = "same-context-empty-response";
 export type LlmFailureSummary = {
     kind: LlmFailureKind;

package/dist/llm/api-quirks.js

@@ -1,11 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.XCODE_BEST_STREAM_INTERNAL_ERROR_CODE = exports.SAME_CONTEXT_EMPTY_RESPONSE_API_QUIRK = exports.VOLCANO_TOOL_USE_API_QUIRK = exports.GLM_VIA_VOLCANO_API_QUIRK = void 0;
+exports.XCODE_BEST_STREAM_INTERNAL_ERROR_CODE = exports.SAME_CONTEXT_EMPTY_RESPONSE_API_QUIRK = void 0;
 exports.normalizeProviderApiQuirks = normalizeProviderApiQuirks;
 exports.createLlmFailureQuirkHandlerSession = createLlmFailureQuirkHandlerSession;
 const persistence_errors_1 = require("../persistence-errors");
-exports.GLM_VIA_VOLCANO_API_QUIRK = 'glm-via-volcano';
-exports.VOLCANO_TOOL_USE_API_QUIRK = 'volcano-tool-use';
 exports.SAME_CONTEXT_EMPTY_RESPONSE_API_QUIRK = 'same-context-empty-response';
 const DOMINDS_LLM_EMPTY_RESPONSE_ERROR_CODE = 'DOMINDS_LLM_EMPTY_RESPONSE';
 const XCODE_BEST_EMPTY_RESPONSE_SINGLE_RETRY_DELAY_MS = 3000;

package/dist/llm/client.d.ts

@@ -3,6 +3,7 @@ export interface ModelInfo {
     name?: string;
     default_thinking?: boolean;
     supports_thinking?: boolean;
+    supports_tool_choice?: boolean;
     context_length?: number;
     input_length?: number;
     output_length?: number;

package/dist/llm/defaults.yaml

@@ -12,12 +12,6 @@
 #   repeated empty-response deadlock detection for the same unchanged dialog context, plus conservative retry
 #   classification for gateway-returned HTML 502 Bad Gateway pages and
 #   `500 auth_unavailable: no auth available` infrastructure failures.
-#   `apiQuirks: glm-via-volcano` enables a narrow Anthropic-compatible stream quirk for
-#   Volcano Ark Coding Plan tool calls where an empty-object tool input may arrive as
-#   content_block_start.input={} followed by a lone `partial_json: "}"`.
-#   `apiQuirks: volcano-tool-use` enables a narrow Anthropic-compatible stream quirk for
-#   Volcano Ark Coding Plan text blocks that render a tool call as textual
-#   "Function call emitted by the assistant." metadata instead of protocol tool_use blocks.
 #   `apiQuirks: same-context-empty-response` detects repeated empty responses in the same
 #   dialog generation context and stops same-context retry loops with a deadlock-break prompt.
 # - tool_result_max_chars: optional transport-level cap for a single tool-result text payload
@@ -455,6 +449,49 @@ providers:
         input_length: 128000
         output_length: 8192
         context_window: '128K'
+  kimi-code:
+    name: Kimi Code
+    apiType: openai-compatible
+    apiQuirks:
+      - kimi-code
+      - kimi-cli-cloak # TODO: remove this once Kimi officially admits Dominds
+    baseUrl: https://api.kimi.com/coding/v1
+    apiKeyEnvVar: KIMI_CODE_API_KEY
+    tech_spec_url: https://www.kimi.com/code/docs/en/third-party-tools/other-coding-agents.html
+    api_mgmt_url: https://www.kimi.com/code/console
+    model_param_options:
+      openai-compatible:
+        thinking:
+          prominent: true
+          default: medium
+          type: enum
+          values: [auto, off, low, medium, high]
+          description: Kimi Code thinking mode. auto leaves thinking/reasoning_effort unset; off sends thinking.type=disabled; low/medium/high send thinking.type=enabled plus the matching reasoning_effort.
+        reasoning_effort:
+          type: enum
+          values: [low, medium, high]
+          description: Advanced Kimi Code wire-level reasoning effort override. Prefer the prominent thinking enum for normal setup; do not combine with auto/off/disabled thinking.
+        temperature:
+          type: number
+          min: 0
+          max: 2
+          description: Sampling temperature. Leave unset unless you have verified the current Kimi Code API accepts the chosen value.
+        top_p:
+          type: number
+          min: 0
+          max: 1
+          description: Nucleus sampling parameter.
+    models:
+      kimi-for-coding:
+        name: Kimi For Coding
+        supports_thinking: true
+        default_thinking: true
+        supports_tool_choice: false
+        supports_image_input: true
+        context_length: 262144
+        input_length: 262144
+        output_length: 32768
+        context_window: '262K'
   volcano-engine-coding-plan:
     name: Volcano Ark Coding Plan
     apiType: openai-compatible
@@ -568,6 +605,7 @@ providers:
         name: Kimi-K2.6
         supports_thinking: true
         default_thinking: true
+        supports_tool_choice: false
         supports_image_input: true
         context_length: 200000
         input_length: 200000
@@ -577,6 +615,7 @@ providers:
         name: Kimi-K2.5
         supports_thinking: true
         default_thinking: false
+        supports_tool_choice: false
         supports_image_input: true
         context_length: 200000
         input_length: 200000

package/dist/llm/gen/anthropic.d.ts

@@ -4,16 +4,10 @@ import type { Team } from '../../team';
 import type { FuncTool } from '../../tool';
 import type { ChatMessage, ProviderConfig } from '../client';
 import type { LlmBatchResult, LlmFailureDisposition, LlmGenerator, LlmRequestContext, LlmStreamReceiver, LlmStreamResult } from '../gen';
-export type AnthropicStreamConsumeQuirks = {
-    normalizeLoneClosingBraceEmptyToolInputDelta: boolean;
-    convertVolcanoTextToolUseBlocks: boolean;
-};
 export type AnthropicStreamConsumeOptions = {
     abortSignal?: AbortSignal;
     forcedJsonToolName?: string;
-    quirks?: AnthropicStreamConsumeQuirks;
     genseq?: number;
-    knownFunctionCallIds?: ReadonlySet<string>;
 };
 export type AnthropicStreamConsumeResult = {
     usage: LlmUsageStats;