dominds 1.22.1 → 1.23.0

package/dist/access-control.js

@@ -311,12 +311,12 @@ function getAccessDeniedMessage(operation, targetPath, language = 'en') {
         lines.push('');
         if (language === 'zh') {
             lines.push(`- 说明：\`*.tsk/\` 是封装差遣牒。通用文件工具无法读/写/列目录/删除其中内容（硬编码无条件拒绝）。`);
-            lines.push(`- 提示：新增章节请使用 \`do_mind\`；少量追加请使用 \`mind_more\`（默认 progress：\`mind_more({\"items\":[\"...\"]})\`）；改写已有整章请使用 \`change_mind\`（顶层：\`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\"})\`；额外章节：\`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\"})\`）。`);
+            lines.push(`- 提示：新增章节请使用 \`do_mind\`；少量追加请使用 \`mind_more\`（默认 progress：\`mind_more({\"items\":[\"...\"]})\`）；改写已有整章请使用带当前内容哈希的 \`change_mind\`（顶层：\`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`；额外章节：先 \`recall_taskdoc\` 取得 \`content_hash\`，再 \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`）。`);
             lines.push(`- 提示：读取额外章节请使用函数工具 \`recall_taskdoc\`：\`recall_taskdoc({\"category\":\"<category>\",\"selector\":\"<selector>\"})\`。`);
         }
         else {
             lines.push(`- Note: \`*.tsk/\` is an encapsulated Taskdoc. It is hard-denied for all general file tools.`);
-            lines.push(`- Hint: To create a section, use \`do_mind\`; for small append-only updates, use \`mind_more\` (defaults to progress: \`mind_more({\"items\":[\"...\"]})\`); for full-section replacements of existing sections, use \`change_mind\` (top-level: \`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\"})\`; extra sections: \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\"})\`).`);
+            lines.push(`- Hint: To create a section, use \`do_mind\`; for small append-only updates, use \`mind_more\` (defaults to progress: \`mind_more({\"items\":[\"...\"]})\`); for full-section replacements, use \`change_mind\` with the current content hash (top-level: \`change_mind({\"selector\":\"goals|constraints|progress\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`; extra sections: call \`recall_taskdoc\` for \`content_hash\` first, then \`change_mind({\"category\":\"<category>\",\"selector\":\"<selector>\",\"content\":\"...\",\"previous_content_hash\":\"sha256:...\"})\`).`);
             lines.push(`- Hint: To read extra sections, use \`recall_taskdoc({\"category\":\"<category>\",\"selector\":\"<selector>\"})\`.`);
         }
     }

package/dist/docs/dialog-system.md

@@ -821,7 +821,7 @@ Invoke the function tool `clear_mind` with:
 
 - `do_mind`: create one new section; fails if the target already exists.
 - `mind_more`: append small entries to an existing section; defaults to `progress`.
-- `change_mind`: replace one existing section; fails if the target does not exist.
+- `change_mind`: replace one existing section; fails if the target does not exist or `previous_content_hash` does not match the current content hash.
 - `never_mind`: delete one existing section.
 
 **Common section arguments**:
@@ -829,11 +829,12 @@ Invoke the function tool `clear_mind` with:
 - `selector: "goals" | "constraints" | "progress"` for top-level sections; or a valid selector with `category`
 - `category?: string`
 - `content: string` for `do_mind` / `change_mind`
+- `previous_content_hash: string` for `change_mind`
 
 Example:
 
 ```text
-Invoke `do_mind` to create a missing section, or `change_mind` to replace an existing section.
+Invoke `do_mind` to create a missing section, or `change_mind` with the current `content_hash` as `previous_content_hash` to replace an existing section.
 ```
 
 **Behavior**:

package/dist/docs/dialog-system.zh.md

@@ -798,7 +798,7 @@ async function checkSideDialogRevival(askerDialog: Dialog): Promise<void> {
 
 - `do_mind`：创建一个新章节；若目标已存在则失败。
 - `mind_more`：向已有章节追加少量条目；默认追加到 `progress`。
-- `change_mind`：替换一个已有章节；若目标不存在则失败。
+- `change_mind`：替换一个已有章节；若目标不存在，或 `previous_content_hash` 与当前内容哈希不匹配，则失败。
 - `never_mind`：删除一个已有章节。
 
 **通用章节参数**：
@@ -806,11 +806,12 @@ async function checkSideDialogRevival(askerDialog: Dialog): Promise<void> {
 - 顶层章节使用 `selector: "goals" | "constraints" | "progress"`；额外章节使用有效 `selector` 加 `category`
 - `category?: string`
 - `do_mind` / `change_mind` 使用 `content: string`
+- `change_mind` 还需要 `previous_content_hash: string`
 
 示例：
 
 ```text
-调用 `do_mind` 创建缺失章节，或调用 `change_mind` 替换已有章节。
+调用 `do_mind` 创建缺失章节，或调用 `change_mind` 并带上当前 `content_hash` 作为 `previous_content_hash` 替换已有章节。
 ```
 
 **行为**：

package/dist/docs/encapsulated-taskdoc.md

@@ -174,7 +174,7 @@ Taskdoc mutation function tools each affect **exactly one** section file of the
 
 - `do_mind` creates a new section file and MUST fail if the target already exists.
 - `mind_more` appends entries without deduplicating or rewriting old content.
-- `change_mind` replaces an existing section file and MUST fail if the target does not exist.
+- `change_mind` replaces an existing section file and MUST fail if the target does not exist or if the supplied `previous_content_hash` does not match the current section content hash.
 - `never_mind` deletes an existing section file.
 
 Critically:
@@ -191,6 +191,7 @@ They take:
 
 - `selector` (required)
 - `content` (required)
+- `previous_content_hash` (required for `change_mind`)
 - `category` (optional)
 
 When `category` is missing/empty, `selector` targets the **top-level** section files:
@@ -218,6 +219,13 @@ Hard prohibitions:
 - `contracts|acceptance|grants|runbook|decisions|risks` MUST NOT be written outside `category="bearinmind"`.
 - No other category is auto-injected into the system prompt (only an index may be shown).
 
+`previous_content_hash` is the `sha256:...` hash of the current section content after Dominds' canonical Markdown file-ending normalization. It is not stored as extra state.
+
+- For auto-injected top-level sections (`goals`, `constraints`, `progress`), the injected Taskdoc status block shows each current `content_hash`.
+- For non-auto-injected sections, call `recall_taskdoc({ category, selector })`; its result includes `content_hash`.
+- On hash mismatch, the write MUST fail. The agent must re-read/review the current section and retry only after fully merging existing content.
+- If the proposed replacement would overwrite, delete, or materially replace existing content, the agent must have either direct human confirmation for that replacement, or a human-approved explicit SOP/acceptance standard that authorizes the replacement after considering the existing content.
+
 ### `recall_taskdoc` (read-only; for non-auto-injected sections)
 
 Because general file tools cannot read anything under `*.tsk/`, Dominds provides a dedicated read tool:
@@ -230,6 +238,7 @@ Behavior:
 
 - Reads `bearinmind/<whitelisted>.md` or `<category>/<selector>.md`.
 - The top-level three sections (`goals` / `constraints` / `progress`) are already auto-injected, so `recall_taskdoc` does not read them.
+- Returns the section `content_hash` for use as `change_mind.previous_content_hash`.
 
 Example (bearinmind):
 
@@ -249,7 +258,7 @@ Example:
 
 ```text
 Call the function tool `change_mind` with:
-{ "selector": "constraints", "content": "- MUST not browse the web.\n- MUST keep responses under 10 lines unless asked otherwise.\n" }
+{ "selector": "constraints", "content": "- MUST not browse the web.\n- MUST keep responses under 10 lines unless asked otherwise.\n", "previous_content_hash": "sha256:..." }
 ```
 
 ### Behavioral rules

package/dist/docs/encapsulated-taskdoc.zh.md

@@ -185,7 +185,7 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 
 - `do_mind` 创建新章节文件；如果目标已存在，必须失败。
 - `mind_more` 追加条目，不会自动去重或改写旧内容。
-- `change_mind` 替换已有章节文件；如果目标不存在，必须失败。
+- `change_mind` 替换已有章节文件；如果目标不存在，或传入的 `previous_content_hash` 与当前章节内容哈希不匹配，必须失败。
 - `never_mind` 删除已有章节文件。
 
 关键点：
@@ -202,6 +202,7 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 
 - `selector`（必需）
 - `content`（必需）
+- `previous_content_hash`（`change_mind` 必需）
 - `category`（可选）
 
 当 `category` 缺失/为空时，`selector` 指向**顶层**部分文件：
@@ -229,6 +230,13 @@ Dominds 必须从任务包构造一个**有效差遣牒**用于提示词和 UI
 - `contracts|acceptance|grants|runbook|decisions|risks` 不得在 `category="bearinmind"` 之外编写。
 - 没有其他类别会自动注入系统提示（只会显示一个索引）。
 
+`previous_content_hash` 是当前章节内容在 Dominds 规范化 Markdown 文件结尾之后得到的 `sha256:...` 哈希；它不是额外持久状态。
+
+- 顶层自动注入章节（`goals`、`constraints`、`progress`）的当前 `content_hash` 会显示在注入的差遣牒状态块中。
+- 非自动注入章节需要先调用 `recall_taskdoc({ category, selector })`；返回结果会包含 `content_hash`。
+- 哈希不匹配时写入必须失败。智能体必须重新读取/回顾当前章节，并且只在充分合并原有内容后重试。
+- 如果拟替换内容会冲掉、删除或实质替换原有内容，智能体必须已获得该替换的直接人类确认，或存在人类认可的明确 SOP/验收标准，并且已按该标准考虑过原有内容。
+
 ### `recall_taskdoc`（只读；用于非自动注入的部分）
 
 因为通用文件工具无法读取 `*.tsk/` 下的任何内容，Dominds 提供了一个专门的读取工具：
@@ -241,6 +249,7 @@ recall_taskdoc({ category, selector })
 
 - 读取 `bearinmind/<whitelisted>.md` 或 `<category>/<selector>.md`。
 - 顶层三段（`goals` / `constraints` / `progress`）已经自动注入，因此 `recall_taskdoc` 不会读取它们。
+- 返回章节 `content_hash`，供 `change_mind.previous_content_hash` 使用。
 
 示例（bearinmind）：
 

package/dist/docs/llm-provider-isolation.md

@@ -12,7 +12,7 @@ This means:
 - `apiType: anthropic` owns official Anthropic Messages semantics, including object-shaped `model_params.anthropic.thinking`.
 - `apiType: anthropic-compatible` owns Anthropic-compatible gateway semantics, including boolean `model_params.anthropic-compatible.thinking` mapped to provider `enabled` / `disabled` request objects.
 
-Some providers expose OpenAI-compatible or Anthropic-compatible endpoints while still requiring explicit provider quirks. Volcano Engine Ark Coding Plan now uses the OpenAI-compatible Chat Completions shape with its dedicated `/api/coding/v3` endpoint; the historical Anthropic-compatible Volcano tool-call quirks have been removed. See [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md) for the design record.
+Some providers expose OpenAI-compatible or Anthropic-compatible endpoints while still requiring explicit provider quirks. Volcano Engine Ark Coding Plan now uses the OpenAI-compatible Chat Completions shape with its dedicated `/api/coding/v3` endpoint; the historical Anthropic-compatible Volcano tool-call quirks have been removed. Kimi Code also uses the OpenAI-compatible Chat Completions shape, but must use the built-in `kimi-code` provider's dedicated `/coding/v1` endpoint, real Dominds User-Agent, `prompt_cache_key`, and Kimi-specific `thinking`/`reasoning_effort` request shaping. See [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md) for the Volcano migration design record.
 
 Similar field names across wrappers do not imply compatibility. For example, `reasoning_effort`, `verbosity`, `parallel_tool_calls`, and web search controls may look similar but can still differ in accepted values, payload shape, lifecycle events, validation rules, and runtime meaning.
 

package/dist/docs/llm-provider-isolation.zh.md

@@ -12,7 +12,7 @@ Dominds 把每个 LLM provider wrapper 视为独立的协议适配器，而不
 - `apiType: anthropic` 只负责 Anthropic 官方 Messages 语义，包括 object 形态的 `model_params.anthropic.thinking`。
 - `apiType: anthropic-compatible` 负责 Anthropic 兼容网关语义，包括 boolean 形态的 `model_params.anthropic-compatible.thinking`，并映射为 provider 请求里的 `enabled` / `disabled` object。
 
-某些 provider 虽然暴露 OpenAI-compatible 或 Anthropic-compatible endpoint，但仍可能需要明确的 provider quirk profile。火山方舟 Coding Plan 现在走 OpenAI-compatible Chat Completions 形态，并使用专属 `/api/coding/v3` endpoint；历史 Anthropic-compatible 火山工具调用 quirk 已取消。设计记录见 [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md)。
+某些 provider 虽然暴露 OpenAI-compatible 或 Anthropic-compatible endpoint，但仍可能需要明确的 provider quirk profile。火山方舟 Coding Plan 现在走 OpenAI-compatible Chat Completions 形态，并使用专属 `/api/coding/v3` endpoint；历史 Anthropic-compatible 火山工具调用 quirk 已取消。Kimi Code 也走 OpenAI-compatible Chat Completions 形态，但必须使用内置 `kimi-code` provider 的专属 `/coding/v1` endpoint、真实 Dominds User-Agent、`prompt_cache_key` 和 Kimi 专用 `thinking`/`reasoning_effort` 请求整形。火山迁移设计记录见 [`volcengine-coding-plan-openai-compatible.zh.md`](./volcengine-coding-plan-openai-compatible.zh.md)。
 
 不同 wrapper 下看起来同名的字段，不代表它们可以互相兼容。比如 `reasoning_effort`、`verbosity`、`parallel_tool_calls`、web search 相关开关，名字可能相似，但可接受值、请求载荷形状、流事件生命周期、校验规则和运行时含义都可能不同。
 

package/dist/docs/team_mgmt-toolset.md

@@ -328,6 +328,7 @@ used in `.minds/team.yaml` member configurations.
 - `anthropic`: uses the official Anthropic **Messages API**. `model_params.anthropic.thinking` uses the official Anthropic object shape.
 - `anthropic-compatible`: uses Anthropic-compatible **Messages API**. `model_params.anthropic-compatible.thinking` uses the Dominds boolean switch: `true` sends `thinking.type=enabled`; `false` sends `thinking.type=disabled`.
 - `openai-compatible`: uses the OpenAI **Chat Completions API** (best for most “OpenAI-compatible” third-party/proxy endpoints; e.g. a manually configured Ark `.../api/v3` endpoint; Volcano Engine Ark Coding Plan must use its dedicated `.../api/coding/v3` endpoint)
+  - Kimi Code uses the built-in `kimi-code` provider (`https://api.kimi.com/coding/v1`, `KIMI_CODE_API_KEY`, model `kimi-for-coding`) rather than a generic Moonshot/Open Platform endpoint.
   - **Vision support**: if the provider/model supports multimodal Chat Completions, Dominds will pass tool-output images (`func_result_msg.contentItems[].type=input_image`, e.g. from MCP tools) to the model as `image_url` inputs after reading the persisted artifact; unsupported mime types are downgraded to text.
 
 ```yaml

package/dist/docs/team_mgmt-toolset.zh.md

@@ -269,6 +269,7 @@
 - `anthropic`：使用 Anthropic 官方 **Messages API**。`model_params.anthropic.thinking` 使用 Anthropic 官方 object 形态。
 - `anthropic-compatible`：使用 Anthropic 兼容的 **Messages API**。`model_params.anthropic-compatible.thinking` 使用 Dominds boolean 开关：`true` 发送 `thinking.type=enabled`，`false` 发送 `thinking.type=disabled`。
 - `openai-compatible`：使用 OpenAI **Chat Completions API**（适用于多数“OpenAI 兼容”第三方/代理；例如手动配置的 Ark `.../api/v3` 端点；火山方舟 Coding Plan 必须使用专属 `.../api/coding/v3` 端点）
+  - Kimi Code 使用内置 `kimi-code` provider（`https://api.kimi.com/coding/v1`、`KIMI_CODE_API_KEY`、模型 `kimi-for-coding`），不要配置成普通 Moonshot/Open Platform endpoint。
   - **识图支持**：如果该 provider/model 支持 Chat Completions 的多模态输入，Dominds 会把工具输出里的图片（`func_result_msg.contentItems[].type=input_image`，来自 MCP 等工具）读取 artifact 后作为 `image_url` 形式喂给模型；不支持的 mimeType 会降级成文本提示。
 
 ```yaml

package/dist/llm/defaults.yaml

@@ -449,6 +449,49 @@ providers:
         input_length: 128000
         output_length: 8192
         context_window: '128K'
+  kimi-code:
+    name: Kimi Code
+    apiType: openai-compatible
+    apiQuirks:
+      - kimi-code
+      - kimi-cli-cloak # TODO: remove this once Kimi officially admits Dominds
+    baseUrl: https://api.kimi.com/coding/v1
+    apiKeyEnvVar: KIMI_CODE_API_KEY
+    tech_spec_url: https://www.kimi.com/code/docs/en/third-party-tools/other-coding-agents.html
+    api_mgmt_url: https://www.kimi.com/code/console
+    model_param_options:
+      openai-compatible:
+        thinking:
+          prominent: true
+          default: medium
+          type: enum
+          values: [auto, off, low, medium, high]
+          description: Kimi Code thinking mode. auto leaves thinking/reasoning_effort unset; off sends thinking.type=disabled; low/medium/high send thinking.type=enabled plus the matching reasoning_effort.
+        reasoning_effort:
+          type: enum
+          values: [low, medium, high]
+          description: Advanced Kimi Code wire-level reasoning effort override. Prefer the prominent thinking enum for normal setup; do not combine with auto/off/disabled thinking.
+        temperature:
+          type: number
+          min: 0
+          max: 2
+          description: Sampling temperature. Leave unset unless you have verified the current Kimi Code API accepts the chosen value.
+        top_p:
+          type: number
+          min: 0
+          max: 1
+          description: Nucleus sampling parameter.
+    models:
+      kimi-for-coding:
+        name: Kimi For Coding
+        supports_thinking: true
+        default_thinking: true
+        supports_tool_choice: false
+        supports_image_input: true
+        context_length: 262144
+        input_length: 262144
+        output_length: 32768
+        context_window: '262K'
   volcano-engine-coding-plan:
     name: Volcano Ark Coding Plan
     apiType: openai-compatible

package/dist/llm/gen/openai-compatible.d.ts

@@ -18,11 +18,14 @@ import { type LlmBatchResult, type LlmFailureDisposition, type LlmGenerator, typ
 type OpenAiCompatibleChatExtraParams = {
     thinking?: boolean | Record<string, unknown>;
     reasoning_effort?: NonNullable<Team.ModelParams['openai-compatible']>['reasoning_effort'];
+    prompt_cache_key?: string;
 };
 export declare function resolveOpenAiCompatibleToolChoice(funcTools: readonly FuncTool[], requestContext: LlmRequestContext, modelInfo?: ModelInfo): 'none' | 'auto' | 'required' | undefined;
 export declare function buildOpenAiCompatibleExtraParamsForTest(args: {
+    providerConfig?: ProviderConfig;
     agent: Team.Member;
     openAiParams: NonNullable<Team.ModelParams['openai-compatible']>;
+    requestContext?: LlmRequestContext;
 }): OpenAiCompatibleChatExtraParams;
 export declare function wrapOpenAiCompatibleRejectedRequestErrorForTest(args: {
     error: unknown;