@openbrt/audioctl 0.1.11 → 0.1.13

package/README.md

@@ -83,6 +83,12 @@ audioctl light set all --color amber --brightness 0.35
 audioctl light timeline ./hero.light.json
 audioctl light bind ./hero.light-bindings.json
 audioctl light clear
+audioctl wakeword status --json
+audioctl wakeword configure ./wakeword.json --json
+audioctl wakeword bind ./wakeword-bindings.json --json
+audioctl wakeword trigger work_mode --source agent --json
+audioctl firmware check --json
+audioctl firmware update --yes --json
 audioctl feedback signal ready
 audioctl feedback flash cyan --repeat 2
 audioctl feedback volume 66
@@ -97,8 +103,60 @@ audioctl prompt 123456 --agent codex --alias 视听房音箱
 
 `inspect` asks the device for a redacted configuration/status snapshot over the
 existing MQTT channel. Agent scripts can read Wi-Fi connection state, BLE
-provisioning state, wake-word capability, playback, VM/app status, and health
-without receiving Wi-Fi passwords, MQTT credentials, or music-platform secrets.
+provisioning state, wake-word capability, playback, VM/app status, firmware
+runtime version, and health without receiving Wi-Fi passwords, MQTT
+credentials, or music-platform secrets.
+
+`wakeword` is the logical voice-trigger binding layer. It does not train or
+replace the low-level acoustic wake model. It maps existing device wake events,
+ASR phrases, or agent-injected test phrases to VM/app events or safe local
+actions. Agents should read `audioctl inspect --json` first and use reported
+`wakeword.commands` / `voice.wakeword.*` capabilities, not product-specific
+vendor research.
+
+```bash
+audioctl wakeword status --json
+audioctl wakeword configure ./wakeword.json --json
+audioctl wakeword bind ./wakeword-bindings.json --json
+audioctl wakeword trigger work_mode --source agent --json
+audioctl wakeword clear --json
+```
+
+Example wakeword config:
+
+```json
+{
+  "schema": "weclawbot.wakeword.config.v1",
+  "mode": "logical_voice_trigger",
+  "language": "zh",
+  "phrases": [
+    { "id": "work_mode", "text": "开始工作", "aliases": ["工作模式"] }
+  ],
+  "bindings": [
+    {
+      "phrase_id": "work_mode",
+      "action": "app.event",
+      "feedback": ["feedback.beep", "feedback.signal:wake"]
+    }
+  ]
+}
+```
+
+`firmware check` reads the official firmware index from
+`https://weclawbot.link/firmware/audio/manifest.json`, compares it with
+`inspect.firmware.version`, and reports whether a host/runtime update is
+available. `firmware update` is intentionally gated: without `--yes` it only
+prints the update plan and `confirmation_required`. An agent must show the
+version, source and notes to the user first, then run `audioctl firmware update
+--yes --json` only after the user explicitly confirms. Firmware updates are for
+the device host/runtime and VM manager; they do not erase Wi-Fi, MQTT binding,
+music-platform settings, queues, rules, or installed VM app slots.
+
+```bash
+audioctl firmware check --json
+audioctl firmware update --json        # dry plan, no mutation
+audioctl firmware update --yes --json  # runs only after explicit user approval
+```
 
 `light` controls expose programmable visual surfaces. Agents should use
 `audioctl light describe --json` to inspect surfaces such as `all`, `ring`, and
@@ -265,3 +323,60 @@ Light messages use a distinct command envelope:
 
 Supported light commands are `describe`, `set`, `timeline`, `bind`, and
 `clear`. Continuous light timing and event reactions run on the device VM.
+
+Wakeword messages configure the logical voice-trigger layer:
+
+```json
+{
+  "schema": "weclawbot.control.v1",
+  "id": "wakeword_<uuid>",
+  "kind": "wakeword_command",
+  "wakeword": {
+    "command": "configure",
+    "config": {
+      "schema": "weclawbot.wakeword.config.v1",
+      "mode": "logical_voice_trigger",
+      "phrases": [
+        { "id": "work_mode", "text": "开始工作" }
+      ],
+      "bindings": [
+        { "phrase_id": "work_mode", "action": "app.event" }
+      ]
+    }
+  }
+}
+```
+
+Supported wakeword commands are `status`, `configure`, `bind`, `trigger`, and
+`clear`. This is a VM/app event binding layer, not low-level acoustic-model
+training.
+
+Firmware update messages also use the same MQTT envelope, but carry only an
+official release descriptor. The device downloads the artifact itself from
+`weclawbot.link`, enforces HTTPS, checks SHA-256 and byte size, installs from a
+staging directory, restarts local services, and reports health through
+`inspect`.
+
+```json
+{
+  "schema": "weclawbot.control.v1",
+  "id": "firmware_<uuid>",
+  "kind": "firmware_update",
+  "firmware": {
+    "schema": "weclawbot.firmware.update.v1",
+    "confirmed_by_user": true,
+    "release": {
+      "schema": "weclawbot.firmware.release.v1",
+      "device_class": "audio_voice_ambient_endpoint",
+      "runtime": "rokid_music_runtime",
+      "version": "0.1.2",
+      "channel": "stable",
+      "artifact": {
+        "url": "https://weclawbot.link/firmware/audio/rokid-music-runtime-0.1.2.tar",
+        "sha256": "<64 hex chars>",
+        "bytes": 123456
+      }
+    }
+  }
+}
+```

package/agent-plugin.json

@@ -18,7 +18,8 @@
       "不要读取或解析 audioctl 本地 MQTT 凭据文件",
       "不要直接 import mqtt、打开或保持 MQTT 长连接来控制设备",
       "不要写 agent 端 while/sleep/BPM loop 来反复发布 feedback/LED 命令",
-      "不要把 weclawbot.link 当作实时灯效、音频分析或本地交互的数据面"
+      "不要把 weclawbot.link 当作实时灯效、音频分析或本地交互的数据面",
+      "不要在未获得用户明确确认时执行固件更新；agent 只能先发现新版并说明变更、版本和来源"
     ],
     "continuous_feedback": "连续灯效、节拍灯、呼吸灯、动画和按键反馈必须通过 audioctl light timeline/bind、VM app 或兼容的 feedback effect 一次下发，在设备本地运行；停止使用 audioctl light clear 或 feedback clear。"
   },
@@ -28,7 +29,8 @@
       "把用户自然语言目标拆成需要的 I/O、媒体、反馈、输入绑定和持久运行需求",
       "在用户已授权的平台、连接器、OAuth 或 secret store 中选择合法数据来源",
       "决定使用 queue、rule、light timeline/bind、feedback、input binding 或 VM app install 的组合",
-      "在设备 VM 内放置需要离线、低延迟或持续运行的逻辑"
+      "在设备 VM 内放置需要离线、低延迟或持续运行的逻辑",
+      "运行 audioctl firmware check 发现官网固件新版，并在用户确认后运行 audioctl firmware update --yes"
     ],
     "not_prescribed": "插件不会也无法穷举所有 agent 方案；agent 应读取 capabilities 后自己想办法达到目标。"
   },
@@ -80,9 +82,14 @@
     "light.timeline",
     "light.bind",
     "light.clear",
+    "voice.wakeword.configure",
+    "voice.wakeword.bind",
+    "voice.wakeword.trigger",
+    "voice.event.bind",
     "event.bind",
     "iot.control",
     "device.inspect",
+    "firmware.update",
     "music.autopilot",
     "music.set_rule",
     "music.set_queue",
@@ -117,6 +124,19 @@
       "intent": "让音箱作为语音遥控、家庭智能或语音互动端点",
       "primary_command": "audioctl app install MANIFEST.json APP.wasm",
       "agent_strategy": "不要把设备假定为音乐播放器。先运行 audioctl inspect --json 读取设备能力，再生成声明最小 capabilities 的 VM app。语音、TTS、家居控制等能力必须通过 manifest capabilities 显式声明；设备侧只执行授权范围内的 I/O。"
+    },
+    {
+      "intent": "配置唤醒词或语音短语来执行某个操作",
+      "primary_command": "audioctl wakeword configure WAKEWORD.json --json",
+      "agent_strategy": "先运行 audioctl inspect --json 读取 wakeword.configurable、wakeword.commands、voice.wakeword.* 和 voice.event.bind capabilities。把 wakeword 视为逻辑语音触发绑定层：它把设备已有唤醒事件、ASR 短语或 agent 注入的测试短语映射到 VM/app 事件或本地动作。不要搜索品牌/型号/厂家资料，不要尝试训练或替换底层声学唤醒模型。需要让 VM app 处理时，在 app manifest 里声明最小 voice.wakeword.bind / voice.event.bind 能力和 wakeword_bindings；需要只测试触发时用 audioctl wakeword trigger WORD --json。",
+      "if_missing_capability": "如果 inspect 未报告 wakeword.configurable 或 voice.wakeword.*，先运行 audioctl firmware check --json；发现官网新版后向用户说明并请求确认升级。"
+    },
+    {
+      "intent": "检查并升级设备固件",
+      "primary_command": "audioctl firmware check --json",
+      "agent_strategy": "先运行 audioctl firmware check --json，从 https://weclawbot.link/firmware/audio/manifest.json 发现最新官方固件和当前设备版本。只向用户展示版本、来源、release notes 和风险提示；不得自行执行更新。只有用户明确确认后，才运行 audioctl firmware update --yes --json。固件更新是设备 host/runtime 更新，不等同于 VM app install；更新过程中不要读取 MQTT 凭据或私钥。",
+      "if_update_available": "向用户确认：官网发现新固件，是否现在更新？说明版本、预计会重启部分本地服务、不会清除 Wi-Fi/MQTT/音乐平台/VM app 配置。",
+      "if_user_confirms": "运行 audioctl firmware update --yes --json，并在完成后运行 audioctl inspect --json 验证 firmware.version、health 和 vm 状态。"
     }
   ],
   "commands": [
@@ -144,6 +164,10 @@
       "name": "light",
       "usage": "audioctl light describe | set SURFACE --color COLOR [--brightness 0..1] | timeline TIMELINE.json | bind BINDINGS.json | clear"
     },
+    {
+      "name": "wakeword",
+      "usage": "audioctl wakeword status | configure CONFIG.json | bind BINDINGS.json | trigger WORD [--source NAME] | clear"
+    },
     {
       "name": "led",
       "usage": "audioctl led flash COLOR [--repeat N]"
@@ -164,6 +188,10 @@
       "name": "app install",
       "usage": "audioctl app install MANIFEST.json APP.wasm"
     },
+    {
+      "name": "firmware",
+      "usage": "audioctl firmware check [--manifest URL] | firmware update [--manifest URL] --yes"
+    },
     {
       "name": "workbgm",
       "usage": "audioctl workbgm --play"

package/bin/audioctl.mjs

@@ -7,6 +7,7 @@ import {
   COMMAND_NAME,
   DEFAULT_CREDENTIALS_PATH,
   DEFAULT_ENDPOINT,
+  DEFAULT_FIRMWARE_MANIFEST_URL,
   DEEPNIGHT_RULE,
   PACKAGE_NAME,
   bindAgent,
@@ -14,12 +15,16 @@ import {
   buildAgentPrompt,
   buildAudioControl,
   buildFeedbackControl,
+  buildFirmwareUpdateControl,
   buildLightControl,
   buildQueueControl,
+  buildWakewordControl,
   buildWorkBgmAppInstallControl,
   expandPath,
   normalizeCredentials,
+  planFirmwareUpdate,
   publishAudioControl,
+  readFirmwareIndex,
   readCredentials,
   redactAgentFacingValue,
   remediationForStatus,
@@ -48,6 +53,7 @@ async function run(name, values) {
   if (name === "inspect") return commandInspect(values);
   if (name === "prompt") return commandPrompt(values);
   if (name === "manifest") return commandManifest();
+  if (name === "firmware") return commandFirmware(values);
   if (name === "app") return commandApp(values);
   if (name === "queue") return commandQueue(values);
   if (name === "rule") return commandRule(values);
@@ -56,6 +62,7 @@ async function run(name, values) {
   if (name === "volume") return commandVolume(values);
   if (name === "seek") return commandSeek(values);
   if (name === "light") return commandLight(values);
+  if (name === "wakeword" || name === "voice") return commandWakeword(values);
   if (name === "feedback" || name === "led") return commandFeedback(values);
   return commandControl(name, values);
 }
@@ -80,6 +87,13 @@ function usage(exitCode = 0) {
   ${COMMAND_NAME} light timeline TIMELINE.json
   ${COMMAND_NAME} light bind BINDINGS.json
   ${COMMAND_NAME} light clear
+  ${COMMAND_NAME} wakeword status
+  ${COMMAND_NAME} wakeword configure CONFIG.json
+  ${COMMAND_NAME} wakeword bind BINDINGS.json
+  ${COMMAND_NAME} wakeword trigger WORD [--source NAME]
+  ${COMMAND_NAME} wakeword clear
+  ${COMMAND_NAME} firmware check [--manifest URL]
+  ${COMMAND_NAME} firmware update [--manifest URL] [--yes]
   ${COMMAND_NAME} rule RULE.json
   ${COMMAND_NAME} queue QUEUE.json [--play]
   ${COMMAND_NAME} app install MANIFEST.json APP.wasm
@@ -90,6 +104,7 @@ function usage(exitCode = 0) {
 Options:
   --credentials FILE   override audioctl-managed local credential file
   --endpoint URL       default: ${DEFAULT_ENDPOINT}
+  --manifest URL       default: ${DEFAULT_FIRMWARE_MANIFEST_URL}
   --timeout SECONDS    default: 12
   --json               machine-readable output
   --nowait             publish without waiting for device status
@@ -208,6 +223,78 @@ async function commandManifest() {
   process.stdout.write(`${JSON.stringify(manifest, null, 2)}\n`);
 }
 
+async function commandFirmware(values) {
+  const subcommand = String(values[0] || "check").replace(/-/gu, "_").toLowerCase();
+  if (!new Set(["check", "update", "upgrade"]).has(subcommand)) {
+    throw new Error(`firmware_subcommand_unsupported: ${subcommand}`);
+  }
+  const options = parseOptions(values.slice(1), {
+    credentials: credentialsPath(),
+    manifest: process.env.WEC_FIRMWARE_MANIFEST || DEFAULT_FIRMWARE_MANIFEST_URL,
+    channel: "stable",
+    timeout: subcommand === "check" ? 20 : 120,
+    json: false,
+    nowait: false,
+    yes: false,
+    force: false,
+  });
+  const credentials = await readCredentials(options.credentials);
+  const firmwareIndex = await readFirmwareIndex(options.manifest, {
+    timeoutMs: Number(options.timeout) * 1000,
+  });
+  const statusDelivery = await publishAudioControl(credentials, buildAudioControl("status"), {
+    timeoutMs: Number(options.timeout) * 1000,
+  });
+  if (statusDelivery.status?.kind === "rejected") {
+    print(statusDelivery.status, options.json);
+    process.exitCode = 1;
+    return;
+  }
+  const inspect = statusDelivery.status?.inspect || statusDelivery.status || {};
+  const plan = planFirmwareUpdate(firmwareIndex, inspect, {
+    channel: options.channel,
+    force: options.force,
+  });
+  if (subcommand === "check") {
+    print(plan, options.json);
+    return;
+  }
+  if (!plan.supported) {
+    print({
+      ...plan,
+      update_started: false,
+      reason: "device_does_not_advertise_firmware.update",
+    }, options.json);
+    process.exitCode = 1;
+    return;
+  }
+  if (!plan.release || !plan.update_available) {
+    print({
+      ...plan,
+      update_started: false,
+    }, options.json);
+    return;
+  }
+  if (!options.yes) {
+    print({
+      ...plan,
+      update_started: false,
+      confirmation_required: true,
+      next_step: `Ask the user to confirm, then run: ${COMMAND_NAME} firmware update --yes`,
+    }, options.json);
+    return;
+  }
+  const control = buildFirmwareUpdateControl(plan.release, {
+    yes: true,
+  });
+  const delivery = await publishAudioControl(credentials, control, {
+    timeoutMs: Number(options.timeout) * 1000,
+    wait: !options.nowait,
+  });
+  print(delivery.status || delivery, options.json);
+  if (delivery.status?.kind === "rejected") process.exitCode = 1;
+}
+
 async function commandRule(values) {
   const options = parseOptions(values, {
     credentials: credentialsPath(),
@@ -376,6 +463,56 @@ async function commandLight(values) {
   if (delivery.status?.kind === "rejected") process.exitCode = 1;
 }
 
+async function commandWakeword(values) {
+  const subcommand = String(values[0] || "status").replace(/-/gu, "_").toLowerCase();
+  const options = parseOptions(values.slice(1), {
+    credentials: credentialsPath(),
+    timeout: 12,
+    json: false,
+    nowait: false,
+    source: "agent",
+  });
+  let control;
+  if (subcommand === "status" || subcommand === "describe" || subcommand === "info") {
+    control = buildWakewordControl("status");
+  } else if (subcommand === "configure" || subcommand === "config" || subcommand === "set") {
+    const file = String(options._[0] || "");
+    if (!file) throw new Error("wakeword_configure_requires_file");
+    control = buildWakewordControl("configure", {
+      config: JSON.parse(await fs.readFile(file, "utf8")),
+    });
+  } else if (subcommand === "bind" || subcommand === "bindings") {
+    const file = String(options._[0] || "");
+    if (!file) throw new Error("wakeword_bind_requires_file");
+    const payload = JSON.parse(await fs.readFile(file, "utf8"));
+    control = buildWakewordControl("bind", {
+      bindings: Array.isArray(payload) ? payload : payload.bindings,
+    });
+  } else if (subcommand === "trigger" || subcommand === "test" || subcommand === "event") {
+    control = buildWakewordControl("trigger", {
+      word: options._[0] || options.word || options.phrase || "factory_wake",
+      source: options.source,
+    });
+  } else if (subcommand === "clear" || subcommand === "reset") {
+    control = buildWakewordControl("clear");
+  } else {
+    throw new Error(`wakeword_subcommand_unsupported: ${subcommand}`);
+  }
+
+  const credentials = await readCredentials(options.credentials);
+  const delivery = await publishAudioControl(credentials, control, {
+    timeoutMs: Number(options.timeout) * 1000,
+    wait: !options.nowait,
+  });
+  if (control.wakeword.command === "status" && options.json) {
+    const wakeword = delivery.status?.inspect?.wakeword || delivery.status?.wakeword || {};
+    process.stdout.write(`${JSON.stringify(redactAgentFacingValue(wakeword))}\n`);
+  } else {
+    print(delivery.status || delivery, options.json);
+  }
+  if (delivery.status?.kind === "rejected") process.exitCode = 1;
+}
+
 async function commandFeedback(values) {
   const subcommand = String(values[0] || "").replace(/-/gu, "_").toLowerCase();
   const shorthandSignals = new Set([
@@ -485,7 +622,7 @@ function parseOptions(values, defaults = {}) {
       continue;
     }
     const key = value.slice(2);
-    if (key === "json" || key === "online" || key === "nowait" || key === "play") {
+    if (key === "json" || key === "online" || key === "nowait" || key === "play" || key === "yes" || key === "force") {
       options[key] = true;
       continue;
     }
@@ -499,14 +636,19 @@ function parseOptions(values, defaults = {}) {
       "credentials",
       "endpoint",
       "effect",
+      "channel",
       "level",
+      "manifest",
       "name",
       "pattern",
       "profile",
       "repeat",
+      "phrase",
+      "source",
       "surface",
       "timeout",
       "volume",
+      "word",
     ]).has(key)) {
       throw new Error(`option_unknown: --${key}`);
     }

package/lib/index.mjs

@@ -8,6 +8,8 @@ import mqtt from "mqtt";
 export const PACKAGE_NAME = "@openbrt/audioctl";
 export const COMMAND_NAME = "audioctl";
 export const DEFAULT_ENDPOINT = "https://weclawbot.link/byoa";
+export const DEFAULT_FIRMWARE_MANIFEST_URL =
+  "https://weclawbot.link/firmware/audio/manifest.json";
 export const DEFAULT_CREDENTIALS_PATH = path.join(
   os.homedir(),
   ".config",
@@ -50,6 +52,9 @@ export const WORKBGM_RULE = Object.freeze({
 export const PLAYABLE_QUEUE_SCHEMA = "weclawbot.playable_queue.v1";
 export const LIGHT_TIMELINE_SCHEMA = "weclawbot.light.timeline.v1";
 export const LIGHT_BINDINGS_SCHEMA = "weclawbot.light.bind.v1";
+export const WAKEWORD_CONFIG_SCHEMA = "weclawbot.wakeword.config.v1";
+export const FIRMWARE_INDEX_SCHEMA = "weclawbot.firmware.index.v1";
+export const FIRMWARE_RELEASE_SCHEMA = "weclawbot.firmware.release.v1";
 
 export const FEEDBACK_COLOR_NAMES = Object.freeze({
   red: Object.freeze({ red: 255, green: 0, blue: 0, alpha: 255 }),
@@ -102,6 +107,13 @@ export const LIGHT_EVENTS = Object.freeze([
   "input.ring.single_click",
   "input.ring.clockwise",
   "input.ring.counter_clockwise",
+  "voice.wakeword.triggered",
+  "voice.phrase.matched",
+]);
+
+export const WAKEWORD_EVENTS = Object.freeze([
+  "voice.wakeword.triggered",
+  "voice.phrase.matched",
 ]);
 
 const WORKBGM_APP_WASM_BASE64 =
@@ -253,6 +265,16 @@ export function buildLightControl(command, options = {}) {
   };
 }
 
+export function buildWakewordControl(command, options = {}) {
+  const wakeword = normalizeWakewordCommand(command, options);
+  return {
+    schema: "weclawbot.control.v1",
+    id: string(options.id) || `wakeword_${crypto.randomUUID()}`,
+    kind: "wakeword_command",
+    wakeword,
+  };
+}
+
 export function buildQueueControl(options = {}) {
   return buildAudioControl("set_queue", {
     id: options.id,
@@ -284,6 +306,20 @@ export function buildAppInstallControl(options = {}) {
   };
 }
 
+export function buildFirmwareUpdateControl(release, options = {}) {
+  const firmwareRelease = normalizeFirmwareRelease(release);
+  return {
+    schema: "weclawbot.control.v1",
+    id: string(options.id) || `firmware_${crypto.randomUUID()}`,
+    kind: "firmware_update",
+    firmware: {
+      schema: "weclawbot.firmware.update.v1",
+      release: firmwareRelease,
+      confirmed_by_user: options.confirmedByUser === true || options.yes === true,
+    },
+  };
+}
+
 export function buildWorkBgmAppInstallControl(options = {}) {
   const play = options.play === true || options.autoplay === true;
   return buildAppInstallControl({
@@ -701,6 +737,293 @@ function normalizeLightEvent(value) {
   return event;
 }
 
+export function normalizeWakewordCommand(command, options = {}) {
+  const aliases = new Map([
+    ["info", "status"],
+    ["describe", "status"],
+    ["config", "configure"],
+    ["set", "configure"],
+    ["update", "configure"],
+    ["bindings", "bind"],
+    ["binding", "bind"],
+    ["event", "trigger"],
+    ["phrase", "trigger"],
+    ["test", "trigger"],
+    ["reset", "clear"],
+  ]);
+  const raw = string(command || options.command || options.action || "status")
+    .replace(/-/gu, "_")
+    .toLowerCase();
+  const normalized = aliases.get(raw) || raw;
+  if (!new Set(["status", "configure", "bind", "trigger", "clear"]).has(normalized)) {
+    throw new Error(`wakeword_command_unsupported: ${command}`);
+  }
+  const wakeword = { command: normalized };
+  if (normalized === "configure") {
+    wakeword.config = normalizeWakewordConfig(
+      options.config && typeof options.config === "object" ? options.config : options,
+    );
+  }
+  if (normalized === "bind") {
+    const source =
+      Array.isArray(options.bindings)
+        ? { bindings: options.bindings }
+        : Array.isArray(options.binding)
+          ? { bindings: options.binding }
+          : options.bindings && typeof options.bindings === "object"
+            ? options.bindings
+            : options.binding && typeof options.binding === "object"
+              ? options.binding
+              : options.config && typeof options.config === "object"
+                ? options.config
+                : options;
+    wakeword.bindings = Array.isArray(source.bindings)
+      ? source.bindings.slice(0, 32).map(normalizeWakewordBinding)
+      : [];
+  }
+  if (normalized === "trigger") {
+    const word = string(
+      options.word ||
+        options.phrase ||
+        options.phrase_id ||
+        options.phraseId ||
+        options.value ||
+        "factory_wake",
+    );
+    wakeword.word = word.slice(0, 80) || "factory_wake";
+    wakeword.source = string(options.source || "agent").slice(0, 80) || "agent";
+  }
+  return wakeword;
+}
+
+export function normalizeWakewordConfig(value = {}) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("wakeword_config_invalid");
+  }
+  const phrasesInput = Array.isArray(value.phrases) ? value.phrases : [];
+  const bindingsInput = Array.isArray(value.bindings) ? value.bindings : [];
+  return {
+    schema: WAKEWORD_CONFIG_SCHEMA,
+    mode: "logical_voice_trigger",
+    language: string(value.language || "zh").slice(0, 16),
+    runtime_detection: "factory_wake_or_agent_injected_phrase",
+    phrases: phrasesInput.slice(0, 12).map(normalizeWakewordPhrase),
+    bindings: bindingsInput.slice(0, 32).map(normalizeWakewordBinding),
+  };
+}
+
+export function normalizeWakewordPhrase(value, index = 0) {
+  const text = string(value?.text || value?.phrase || value?.word);
+  const id = normalizeWakewordIdentifier(
+    value?.id || value?.phrase_id,
+    `phrase_${index + 1}`,
+  );
+  if (!text || text.length > 40) {
+    throw new Error(`wakeword_phrase_invalid:${index + 1}`);
+  }
+  const aliases = Array.isArray(value.aliases)
+    ? value.aliases.map(string).filter(Boolean).slice(0, 8)
+    : [];
+  for (const alias of aliases) {
+    if (alias.length > 40) throw new Error(`wakeword_alias_invalid:${index + 1}`);
+  }
+  const sensitivity = Number(value.sensitivity);
+  return {
+    id,
+    text,
+    aliases,
+    enabled: value.enabled !== false,
+    sensitivity: Number.isFinite(sensitivity)
+      ? Math.max(0, Math.min(1, Math.round(sensitivity * 1000) / 1000))
+      : 0.5,
+  };
+}
+
+export function normalizeWakewordBinding(value, index = 0) {
+  const phraseId = normalizeWakewordIdentifier(
+    value?.phrase_id || value?.phraseId || value?.id || "*",
+    "*",
+    { wildcard: true },
+  );
+  const action = string(value?.action || "app.event")
+    .replace(/-/gu, "_")
+    .toLowerCase()
+    .slice(0, 80);
+  if (
+    !new Set([
+      "app.event",
+      "music.play",
+      "music.pause",
+      "music.toggle",
+      "music.next",
+      "music.previous",
+      "feedback.beep",
+      "light.clear",
+    ]).has(action) &&
+    !action.startsWith("feedback.signal:")
+  ) {
+    throw new Error(`wakeword_action_unsupported:${index + 1}`);
+  }
+  const feedback = Array.isArray(value.feedback)
+    ? value.feedback.map(string).filter(Boolean).slice(0, 8)
+    : [];
+  return {
+    phrase_id: phraseId,
+    action,
+    target: string(value?.target).slice(0, 120),
+    feedback,
+  };
+}
+
+function normalizeWakewordIdentifier(value, fallback = "", options = {}) {
+  if (options.wildcard && string(value || fallback) === "*") return "*";
+  const text = string(value || fallback)
+    .toLowerCase()
+    .replace(/[^a-z0-9_.:-]+/gu, "_")
+    .replace(/^_+|_+$/gu, "")
+    .slice(0, 80);
+  if (!/^[a-z0-9][a-z0-9_.:-]{0,79}$/u.test(text)) {
+    throw new Error("wakeword_identifier_invalid");
+  }
+  return text;
+}
+
+export async function readFirmwareIndex(source = DEFAULT_FIRMWARE_MANIFEST_URL, options = {}) {
+  const location = string(source) || DEFAULT_FIRMWARE_MANIFEST_URL;
+  let payload;
+  if (/^https?:\/\//iu.test(location)) {
+    const response = await fetch(location, {
+      headers: { accept: "application/json" },
+      signal: AbortSignal.timeout(Math.max(1000, Number(options.timeoutMs) || 15_000)),
+    });
+    if (!response.ok) {
+      throw new Error(`firmware_manifest_http_${response.status}`);
+    }
+    payload = await response.json();
+  } else if (location.startsWith("file://")) {
+    payload = JSON.parse(await fs.readFile(new URL(location), "utf8"));
+  } else {
+    payload = JSON.parse(await fs.readFile(expandPath(location), "utf8"));
+  }
+  return normalizeFirmwareIndex(payload, location);
+}
+
+export function normalizeFirmwareIndex(value, source = DEFAULT_FIRMWARE_MANIFEST_URL) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("firmware_manifest_invalid");
+  }
+  const releasesInput = Array.isArray(value.releases) ? value.releases : [];
+  if (value.schema !== FIRMWARE_INDEX_SCHEMA || releasesInput.length < 1) {
+    throw new Error("firmware_manifest_invalid");
+  }
+  return {
+    schema: FIRMWARE_INDEX_SCHEMA,
+    device_class: string(value.device_class || ABSTRACT_HARDWARE_TYPE).slice(0, 80),
+    channel: string(value.channel || "stable").slice(0, 40),
+    generated_at: string(value.generated_at).slice(0, 80),
+    source: string(source).slice(0, 240),
+    releases: releasesInput.map(normalizeFirmwareRelease),
+  };
+}
+
+export function normalizeFirmwareRelease(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("firmware_release_invalid");
+  }
+  const artifact = value.artifact && typeof value.artifact === "object" ? value.artifact : {};
+  const url = string(artifact.url || value.url);
+  if (!/^https:\/\/(?:www\.)?weclawbot\.link\/firmware\//iu.test(url)) {
+    throw new Error("firmware_artifact_url_invalid");
+  }
+  const sha256 = string(artifact.sha256 || value.sha256).toLowerCase();
+  if (!/^[0-9a-f]{64}$/u.test(sha256)) {
+    throw new Error("firmware_artifact_sha256_invalid");
+  }
+  const bytes = Math.floor(Number(artifact.bytes || artifact.size || value.bytes || value.size) || 0);
+  if (bytes < 1 || bytes > 96 * 1024 * 1024) {
+    throw new Error("firmware_artifact_size_invalid");
+  }
+  const version = string(value.version).replace(/^v/iu, "");
+  if (!/^[0-9]+(?:\.[0-9]+){1,3}(?:[-+][A-Za-z0-9_.-]+)?$/u.test(version)) {
+    throw new Error("firmware_version_invalid");
+  }
+  return {
+    schema: FIRMWARE_RELEASE_SCHEMA,
+    device_class: string(value.device_class || ABSTRACT_HARDWARE_TYPE).slice(0, 80),
+    runtime: string(value.runtime || "rokid_music_runtime").slice(0, 80),
+    version,
+    channel: string(value.channel || "stable").slice(0, 40),
+    host_api: string(value.host_api || "weclawbot.host.v0").slice(0, 80),
+    released_at: string(value.released_at).slice(0, 80),
+    min_current_version: string(value.min_current_version || "0.0.0").replace(/^v/iu, "").slice(0, 40),
+    requires_user_confirmation: value.requires_user_confirmation !== false,
+    notes: Array.isArray(value.notes)
+      ? value.notes.map((note) => string(note).slice(0, 180)).filter(Boolean).slice(0, 12)
+      : [],
+    artifact: {
+      url,
+      sha256,
+      bytes,
+      format: string(artifact.format || "tar").slice(0, 32),
+    },
+  };
+}
+
+export function compareVersions(a, b) {
+  const parse = (value) => string(value)
+    .replace(/^v/iu, "")
+    .split(/[-+]/u)[0]
+    .split(".")
+    .map((part) => Number.parseInt(part, 10) || 0);
+  const left = parse(a);
+  const right = parse(b);
+  const length = Math.max(left.length, right.length, 3);
+  for (let index = 0; index < length; index += 1) {
+    const difference = (left[index] || 0) - (right[index] || 0);
+    if (difference !== 0) return difference > 0 ? 1 : -1;
+  }
+  return 0;
+}
+
+export function planFirmwareUpdate(index, inspect = {}, options = {}) {
+  const firmwareIndex = normalizeFirmwareIndex(index, index?.source || DEFAULT_FIRMWARE_MANIFEST_URL);
+  const deviceClass =
+    string(inspect.device_type) ||
+    string(inspect.device?.abstract_hardware) ||
+    ABSTRACT_HARDWARE_TYPE;
+  const channel = string(options.channel || firmwareIndex.channel || "stable");
+  const currentVersion =
+    string(inspect.firmware?.version || inspect.device?.firmware_version || "0.0.0")
+      .replace(/^v/iu, "") || "0.0.0";
+  const capabilities = new Set(Array.isArray(inspect.capabilities) ? inspect.capabilities : []);
+  const candidates = firmwareIndex.releases
+    .filter((release) => release.device_class === deviceClass)
+    .filter((release) => !channel || release.channel === channel)
+    .filter((release) => compareVersions(currentVersion, release.min_current_version || "0.0.0") >= 0)
+    .sort((a, b) => compareVersions(b.version, a.version));
+  const release = candidates[0] || null;
+  const supported = capabilities.size === 0 || capabilities.has("firmware.update");
+  const updateAvailable = Boolean(release) &&
+    (options.force === true || compareVersions(release.version, currentVersion) > 0);
+  return {
+    schema: "weclawbot.firmware.plan.v1",
+    device_class: deviceClass,
+    current_version: currentVersion,
+    channel,
+    supported,
+    update_available: updateAvailable,
+    latest_version: release?.version || "",
+    release,
+    source: firmwareIndex.source,
+    requires_user_confirmation: Boolean(updateAvailable && release?.requires_user_confirmation !== false),
+    summary: release
+      ? (updateAvailable
+          ? `Firmware ${release.version} is available for ${deviceClass}.`
+          : `Firmware ${currentVersion} is up to date for ${deviceClass}.`)
+      : `No firmware release found for ${deviceClass} on ${channel}.`,
+  };
+}
+
 function normalizeIdentifier(value, options = {}) {
   const text = string(value);
   const maximum = Number(options.maximum) || 80;
@@ -839,6 +1162,10 @@ export function normalizeAppManifest(manifest, artifact = {}) {
     "audio.output.write",
     "audio.tts",
     "voice.wakeword",
+    "voice.wakeword.configure",
+    "voice.wakeword.bind",
+    "voice.wakeword.trigger",
+    "voice.event.bind",
     "voice.capture",
     "input.touch.read",
     "input.button.bind",
@@ -874,6 +1201,7 @@ export function normalizeAppManifest(manifest, artifact = {}) {
   if (wasmBytes < 1 || wasmBytes > wasmLimit) {
     throw new Error("app_wasm_size_invalid");
   }
+  const wakeword = normalizeAppWakewordSpec(manifest);
   return {
     schema: "weclawbot.app.v1",
     app_id: string(manifest.app_id),
@@ -909,12 +1237,30 @@ export function normalizeAppManifest(manifest, artifact = {}) {
       persist_on_reboot: manifest.install?.persist_on_reboot !== false,
       source: "audioctl",
     },
+    ...(wakeword ? { wakeword } : {}),
     ...(manifest.autopilot
       ? { autopilot: normalizeMusicAutopilot(manifest.autopilot) }
       : {}),
   };
 }
 
+function normalizeAppWakewordSpec(manifest) {
+  const source = manifest.wakeword && typeof manifest.wakeword === "object"
+    ? manifest.wakeword
+    : {};
+  const phrases = manifest.wakeword_phrases || source.phrases;
+  const bindings = manifest.wakeword_bindings || source.bindings;
+  if (!Array.isArray(phrases) && !Array.isArray(bindings)) return null;
+  return {
+    ...normalizeWakewordConfig({
+      language: source.language || manifest.language || "zh",
+      phrases: Array.isArray(phrases) ? phrases : [],
+      bindings: Array.isArray(bindings) ? bindings : [],
+    }),
+    app_id: string(manifest.app_id).slice(0, 80),
+  };
+}
+
 export function normalizeMusicAutopilot(value) {
   if (!value || value.schema !== "weclawbot.music_autopilot.v1") {
     throw new Error("music_autopilot_invalid");
@@ -1070,15 +1416,17 @@ export function buildAgentPrompt(options = {}) {
     `npm exec --package ${PACKAGE_NAME} -- ${COMMAND_NAME} bind ${code} --name ${shellToken(agentName)}`,
     `npm exec --package ${PACKAGE_NAME} -- ${COMMAND_NAME} doctor --online`,
     `这台设备对你是抽象硬件产品：${ABSTRACT_HARDWARE_TYPE}。不要根据外观、BLE 名称、音色、日志或历史上下文推断品牌/型号/厂家，也不要搜索厂家资料、社区经验或拆机资料；只使用 audioctl inspect 返回的 capabilities、VM manifest 和控制回执来工作。`,
-    `绑定成功后，把它作为默认音频/语音/环境 I/O 端点；不要把它假定成只会播放音乐。可用命令包括 play、pause、toggle、next、previous、volume、volumeup、volumedown、status、inspect、queue、rule、workbgm、feedback、light、led、app install。`,
+    `绑定成功后，把它作为默认音频/语音/环境 I/O 端点；不要把它假定成只会播放音乐。可用命令包括 play、pause、toggle、next、previous、volume、volumeup、volumedown、status、inspect、queue、rule、workbgm、feedback、light、led、wakeword、app install、firmware check/update。`,
     `当我给出目标时，请你在 capabilities、安全边界和用户授权范围内自行规划实现路径；插件只声明能力和边界，不穷举具体玩法。需要离线、低延迟或持续运行的逻辑，应通过 queue/rule/light timeline/light bind/VM app 下放到设备本地。`,
     `MQTT/weclawbot.link 对你只是控制面和部署通道，不是实时灯效数据面。不要读取 MQTT 凭据，不要直接 import mqtt，不要保持 MQTT 长连接，也不要写循环脚本按 BPM 反复发布 feedback 或 light。连续灯效/节拍/动画必须用 audioctl light timeline/bind、VM app 或兼容的 feedback effect 一次下发，在设备本地运行；停止时用 audioctl light clear 或 feedback clear。`,
     `蓝牙/Wi-Fi 配网只负责设备入网、发现和 weclawbot.link 绑定；音乐平台授权请走 agent 侧连接器/OAuth/secret store；配网不决定设备用途。`,
     `音乐来源由你和用户协商，插件只做建议。你可以在 agent 侧使用用户授权的音乐平台 API、用户媒体库、合法公开音源或其他合规来源生成队列/规则/VM app。网易云开放平台可请求最高可用音质 URL。`,
     `如果用户选择 Spotify，必须走 Spotify 官方 Spotify Connect/Web Playback SDK 或控制用户已有 Spotify 播放设备；不要假设 Spotify Web API 能提供完整歌曲直链。`,
     `灯效、音量灯、蜂鸣和按键/触控反馈要先 inspect 或 light describe 确认 feedback/input/light capabilities。一次性语义反馈可用 feedback signal/flash/volume/beep/clear；复杂灯效请优先生成 light timeline 和 light bind，把外圈、中心等 surface 与 media/input 事件绑定到设备本地。feedback effect 只作为兼容/demo 入口，不要把 music_beat/pulse/breathing 当成能力边界。具体按键绑定请根据用户目标和 capabilities 自行规划，不要套固定模板。`,
+    `唤醒词/语音触发配置要通过 inspect 读取 wakeword.configurable、wakeword.commands 和 capabilities。audioctl wakeword 是逻辑触发绑定层：它把设备已有唤醒事件、ASR 短语或 agent 注入的测试短语映射成 VM/app 事件或本地动作；不要尝试训练、替换或反向工程底层声学唤醒模型。`,
     `如果你当前没有音乐平台身份，请只告诉我：我需要你把音乐平台身份连接到当前 agent 的官方连接器、OAuth 流程或 secret store；完成后回复“已授权”。不要反复重试，不要让我理解内部授权包，也不要要求我把 AppSecret、PrivateKey、accessToken 或 refreshToken 发到聊天里。`,
     `如果返回 health.problems 包含 netease_auth_refresh_failed，说明设备侧内置网易运行时授权失效；优先改走 agent 侧 queue/app 驱动。只有我明确要求继续使用设备侧网易运行时时，才提示需要独立的设备侧音乐账号设置入口；不要混入蓝牙/Wi-Fi 配网流程。`,
+    `固件更新由 agent 端发现新版、用户确认后执行：先运行 audioctl firmware check --json，只展示官网来源、当前版本、新版本和 release notes；只有用户明确同意升级后，才运行 audioctl firmware update --yes --json。固件只从 weclawbot.link 官方 manifest 下载，更新设备 host/runtime，不等同于 VM app，也不要用固件更新去实现普通应用需求。`,
     `如果我要播放「${profile}」，也可以执行：npm exec --package ${PACKAGE_NAME} -- ${COMMAND_NAME} deepnight`,
     `不要向设备写入全局音乐平台私钥；平台授权优先保存在 agent 运行环境。只有在我明确授权时，才把最小范围、可轮换、可撤销的 app-scoped 凭据随 VM app 写入设备。`,
   ].filter(Boolean).join("\n");
@@ -1106,6 +1454,12 @@ export function summarizeInspect(inspect) {
   const bluetooth = inspect?.bluetooth || {};
   const ble = bluetooth.ble || {};
   const wakeword = inspect?.wakeword || {};
+  const wakewordPhraseCount = Array.isArray(wakeword.configured_phrases)
+    ? wakeword.configured_phrases.length
+    : Number(wakeword.configured_phrase_count) || 0;
+  const wakewordBindingCount = Array.isArray(wakeword.bindings)
+    ? wakeword.bindings.length
+    : Number(wakeword.binding_count) || 0;
   const playback = summarizePlayback(inspect || {});
   const vm = inspect?.vm || {};
   const health = inspect?.health || {};
@@ -1121,7 +1475,7 @@ export function summarizeInspect(inspect) {
       `${bluetooth.service?.active || "unknown"} ${string(ble.name || "-")} ${string(ble.state || "-")}`
         .trim(),
     wakeword:
-      `${wakeword.available ? "available" : "unavailable"} ${Array.isArray(wakeword.wake_words) && wakeword.wake_words.length ? wakeword.wake_words.join("/") : "-"} wake_runtime=${wakeword.services?.wake_runtime?.active || "unknown"} voice_runtime=${wakeword.services?.voice_runtime?.active || "unknown"}`
+      `${wakeword.available ? "available" : "unavailable"} configurable=${wakeword.configurable === true} phrases=${wakewordPhraseCount} bindings=${wakewordBindingCount} wake_runtime=${wakeword.services?.wake_runtime?.active || "unknown"} voice_runtime=${wakeword.services?.voice_runtime?.active || "unknown"}`
         .trim(),
     playback:
       `${playback.desired}, volume ${playback.volume ?? "-"}, ${playback.track || "no track"}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openbrt/audioctl",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Generic WeClawBot audio/voice endpoint control CLI and AI-agent plugin.",
   "type": "module",
   "license": "MIT",