@openbrt/audioctl 0.1.12 → 0.1.14

package/README.md

@@ -83,8 +83,13 @@ audioctl light set all --color amber --brightness 0.35
 audioctl light timeline ./hero.light.json
 audioctl light bind ./hero.light-bindings.json
 audioctl light clear
+audioctl wakeword status --json
+audioctl wakeword configure ./wakeword.json --json
+audioctl wakeword bind ./wakeword-bindings.json --json
+audioctl wakeword trigger work_mode --source agent --json
 audioctl firmware check --json
 audioctl firmware update --yes --json
+audioctl report "center LED active=true but user cannot see it" --kind capability_mismatch --area light --include-inspect --json
 audioctl feedback signal ready
 audioctl feedback flash cyan --repeat 2
 audioctl feedback volume 66
@@ -103,6 +108,41 @@ provisioning state, wake-word capability, playback, VM/app status, firmware
 runtime version, and health without receiving Wi-Fi passwords, MQTT
 credentials, or music-platform secrets.
 
+`wakeword` is the logical voice-trigger binding layer. It does not train or
+replace the low-level acoustic wake model. It maps existing device wake events,
+ASR phrases, or agent-injected test phrases to VM/app events or safe local
+actions. Agents should read `audioctl inspect --json` first and use reported
+`wakeword.commands` / `voice.wakeword.*` capabilities, not product-specific
+vendor research.
+
+```bash
+audioctl wakeword status --json
+audioctl wakeword configure ./wakeword.json --json
+audioctl wakeword bind ./wakeword-bindings.json --json
+audioctl wakeword trigger work_mode --source agent --json
+audioctl wakeword clear --json
+```
+
+Example wakeword config:
+
+```json
+{
+  "schema": "weclawbot.wakeword.config.v1",
+  "mode": "logical_voice_trigger",
+  "language": "zh",
+  "phrases": [
+    { "id": "work_mode", "text": "开始工作", "aliases": ["工作模式"] }
+  ],
+  "bindings": [
+    {
+      "phrase_id": "work_mode",
+      "action": "app.event",
+      "feedback": ["feedback.beep", "feedback.signal:wake"]
+    }
+  ]
+}
+```
+
 `firmware check` reads the official firmware index from
 `https://weclawbot.link/firmware/audio/manifest.json`, compares it with
 `inspect.firmware.version`, and reports whether a host/runtime update is
@@ -285,6 +325,62 @@ Light messages use a distinct command envelope:
 Supported light commands are `describe`, `set`, `timeline`, `bind`, and
 `clear`. Continuous light timing and event reactions run on the device VM.
 
+## Agent feedback reports
+
+`audioctl report` is the agent-to-maintainer feedback channel for issues,
+suggestions, capability mismatches, UX gaps, and documentation gaps. It writes a
+redacted JSON report to `~/WeClawBot/agent-feedback` by default, or to
+`WEC_AUDIO_REPORTS_DIR` / `--reports-dir DIR` when set.
+
+User observation wins over status. A device returning `applied`, `active=true`,
+or a capability entry only means the runtime accepted the command; it does not
+prove the user can physically see, hear, or feel the result. If a user reports
+that a center LED is not visible, a touch gesture is unreliable, or a beep is not
+audible, agents should fall back to a confirmed visible/audible/controllable
+behavior, then create a local report:
+
+```bash
+audioctl report "center LED surface is reported active but not visually observable by the user" \
+  --kind capability_mismatch \
+  --area light \
+  --observed "light_active=true, user still cannot see center LED" \
+  --expected "visible center-light cue or capability should be marked unavailable" \
+  --include-inspect \
+  --json
+```
+
+Reports are local by default. Agents must ask the user before posting a report
+to a public issue tracker, chat, email, or any other external system. Reports
+must not include MQTT credentials, music-platform tokens, Wi-Fi passwords, or
+other secrets.
+
+Wakeword messages configure the logical voice-trigger layer:
+
+```json
+{
+  "schema": "weclawbot.control.v1",
+  "id": "wakeword_<uuid>",
+  "kind": "wakeword_command",
+  "wakeword": {
+    "command": "configure",
+    "config": {
+      "schema": "weclawbot.wakeword.config.v1",
+      "mode": "logical_voice_trigger",
+      "phrases": [
+        { "id": "work_mode", "text": "开始工作" }
+      ],
+      "bindings": [
+        { "phrase_id": "work_mode", "action": "app.event" }
+      ]
+    }
+  }
+}
+```
+
+Supported wakeword commands are `status`, `configure`, `bind`, `trigger`, and
+`clear`. This is a VM/app event binding layer, not low-level acoustic-model
+training.
+
 Firmware update messages also use the same MQTT envelope, but carry only an
 official release descriptor. The device downloads the artifact itself from
 `weclawbot.link`, enforces HTTPS, checks SHA-256 and byte size, installs from a
@@ -303,10 +399,10 @@ staging directory, restarts local services, and reports health through
       "schema": "weclawbot.firmware.release.v1",
       "device_class": "audio_voice_ambient_endpoint",
       "runtime": "rokid_music_runtime",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "channel": "stable",
       "artifact": {
-        "url": "https://weclawbot.link/firmware/audio/rokid-music-runtime-0.1.1.tar",
+        "url": "https://weclawbot.link/firmware/audio/rokid-music-runtime-0.1.2.tar",
         "sha256": "<64 hex chars>",
         "bytes": 123456
       }

package/agent-plugin.json

@@ -39,6 +39,17 @@
     "music_platform_auth": "音乐平台授权属于 agent 侧能力，由 agent 的连接器、OAuth、secret store 或用户明确提供的运行环境凭据完成。",
     "device_purpose": "设备用途由 agent 安装的 VM app 和显式 capabilities 决定，不由配网流程决定。"
   },
+  "agent_feedback_channel": {
+    "purpose": "让用户 agent 在能力声明、控制回执、真实体验、文档或插件引导不一致时留下结构化反馈。",
+    "primary_command": "audioctl report \"MESSAGE\" --kind issue --area other --json",
+    "rules": [
+      "用户的现场视觉、听觉、触控反馈优先于设备返回的 active=true、applied 或 capability 声明。",
+      "如果用户说某个 surface 看不到、按键不灵、蜂鸣不明显或体验不符合目标，agent 不要继续用状态回执证明它应该可用；先降级到用户确认可见/可听/可控的方案。",
+      "出现 capability mismatch 时运行 audioctl report \"MESSAGE\" --kind capability_mismatch --area light --include-inspect --json 生成本地脱敏报告。",
+      "报告默认只保存到本机，不自动提交外部系统；外发前必须获得用户确认。",
+      "报告不得包含 MQTT 凭据、音乐平台 token、Wi-Fi 密码、AppSecret、PrivateKey 或其他密钥。"
+    ]
+  },
   "device_classes": [
     "audio_io",
     "audio_output",
@@ -82,6 +93,10 @@
     "light.timeline",
     "light.bind",
     "light.clear",
+    "voice.wakeword.configure",
+    "voice.wakeword.bind",
+    "voice.wakeword.trigger",
+    "voice.event.bind",
     "event.bind",
     "iot.control",
     "device.inspect",
@@ -113,14 +128,26 @@
     {
       "intent": "帮我把设备灯效、音量灯和按键反馈音接上",
       "primary_command": "audioctl feedback signal ready",
-      "agent_strategy": "先运行 audioctl inspect --json 或 audioctl light describe --json 读取 light.surfaces、events、limits 以及 feedback/input capabilities。MQTT 是控制面，不是实时灯效数据面；不要读取 MQTT 凭据、不要 import mqtt、不要保持 MQTT 长连接、不要写 agent 端 BPM/while/sleep 循环去刷 LED。一次性语义提示可用 audioctl feedback signal/flash/volume/beep/clear；复杂灯效优先使用 audioctl light timeline 和 audioctl light bind，把外圈、中心等 surface 的 keyframes 与 media/input 事件绑定到设备本地。feedback effect 只是兼容/demo 入口，不要把 music_beat/pulse/breathing 当成能力边界。物理按键/触控属于 VM app 的 input.button.bind 能力，具体绑定由 agent 根据用户目标和 capabilities 自行规划。",
-      "if_missing_capability": "不要伪造灯效或按键能力；如果 inspect 未报告对应 capability，只说明当前设备适配未提供该能力，并建议安装或升级设备 VM。"
+      "agent_strategy": "先运行 audioctl inspect --json 或 audioctl light describe --json 读取 light.surfaces、events、limits 以及 feedback/input capabilities。MQTT 是控制面，不是实时灯效数据面；不要读取 MQTT 凭据、不要 import mqtt、不要保持 MQTT 长连接、不要写 agent 端 BPM/while/sleep 循环去刷 LED。一次性语义提示可用 audioctl feedback signal/flash/volume/beep/clear；复杂灯效优先使用 audioctl light timeline 和 audioctl light bind，把外圈、中心等 surface 的 keyframes 与 media/input 事件绑定到设备本地。feedback effect 只是兼容/demo 入口，不要把 music_beat/pulse/breathing 当成能力边界。物理按键/触控属于 VM app 的 input.button.bind 能力，具体绑定由 agent 根据用户目标和 capabilities 自行规划。用户的现场视觉/听觉/触控反馈优先于 active=true、applied 或 capability 声明；如果用户说 center LED 或任何 surface 肉眼不可见，不要继续堆亮度并声称成功，先降级到可见的 ring/all/声音反馈，再生成本地报告。",
+      "if_missing_capability": "不要伪造灯效或按键能力；如果 inspect 未报告对应 capability，只说明当前设备适配未提供该能力，并建议安装或升级设备 VM。",
+      "if_user_reports_mismatch": "运行 audioctl report \"User reports requested feedback is not physically observable despite applied/active status\" --kind capability_mismatch --area light --include-inspect --json；报告只保存本机，外发前必须问用户。"
+    },
+    {
+      "intent": "反馈设备、插件或 VM app 的问题/建议",
+      "primary_command": "audioctl report \"MESSAGE\" --kind issue --area other --json",
+      "agent_strategy": "把用户反馈整理为 observed/expected/reproduction/recommendation。需要设备状态佐证时加 --include-inspect；报告会脱敏并默认保存到本机。不要把 MQTT 凭据、音乐平台 token、Wi-Fi 密码或私钥写进报告；外发到 issue、聊天、邮件或其他系统前必须获得用户明确确认。"
     },
     {
       "intent": "让音箱作为语音遥控、家庭智能或语音互动端点",
       "primary_command": "audioctl app install MANIFEST.json APP.wasm",
       "agent_strategy": "不要把设备假定为音乐播放器。先运行 audioctl inspect --json 读取设备能力，再生成声明最小 capabilities 的 VM app。语音、TTS、家居控制等能力必须通过 manifest capabilities 显式声明；设备侧只执行授权范围内的 I/O。"
     },
+    {
+      "intent": "配置唤醒词或语音短语来执行某个操作",
+      "primary_command": "audioctl wakeword configure WAKEWORD.json --json",
+      "agent_strategy": "先运行 audioctl inspect --json 读取 wakeword.configurable、wakeword.commands、voice.wakeword.* 和 voice.event.bind capabilities。把 wakeword 视为逻辑语音触发绑定层：它把设备已有唤醒事件、ASR 短语或 agent 注入的测试短语映射到 VM/app 事件或本地动作。不要搜索品牌/型号/厂家资料，不要尝试训练或替换底层声学唤醒模型。需要让 VM app 处理时，在 app manifest 里声明最小 voice.wakeword.bind / voice.event.bind 能力和 wakeword_bindings；需要只测试触发时用 audioctl wakeword trigger WORD --json。",
+      "if_missing_capability": "如果 inspect 未报告 wakeword.configurable 或 voice.wakeword.*，先运行 audioctl firmware check --json；发现官网新版后向用户说明并请求确认升级。"
+    },
     {
       "intent": "检查并升级设备固件",
       "primary_command": "audioctl firmware check --json",
@@ -154,6 +181,10 @@
       "name": "light",
       "usage": "audioctl light describe | set SURFACE --color COLOR [--brightness 0..1] | timeline TIMELINE.json | bind BINDINGS.json | clear"
     },
+    {
+      "name": "wakeword",
+      "usage": "audioctl wakeword status | configure CONFIG.json | bind BINDINGS.json | trigger WORD [--source NAME] | clear"
+    },
     {
       "name": "led",
       "usage": "audioctl led flash COLOR [--repeat N]"
@@ -178,6 +209,10 @@
       "name": "firmware",
       "usage": "audioctl firmware check [--manifest URL] | firmware update [--manifest URL] --yes"
     },
+    {
+      "name": "report",
+      "usage": "audioctl report MESSAGE [--kind issue|suggestion|capability_mismatch|ux_feedback|docs_feedback] [--area light|audio|input|wakeword|firmware|vm|plugin|docs|other] [--include-inspect] --json"
+    },
     {
       "name": "workbgm",
       "usage": "audioctl workbgm --play"

package/bin/audioctl.mjs

@@ -8,6 +8,7 @@ import {
   DEFAULT_CREDENTIALS_PATH,
   DEFAULT_ENDPOINT,
   DEFAULT_FIRMWARE_MANIFEST_URL,
+  DEFAULT_REPORTS_DIR,
   DEEPNIGHT_RULE,
   PACKAGE_NAME,
   bindAgent,
@@ -18,6 +19,7 @@ import {
   buildFirmwareUpdateControl,
   buildLightControl,
   buildQueueControl,
+  buildWakewordControl,
   buildWorkBgmAppInstallControl,
   expandPath,
   normalizeCredentials,
@@ -27,6 +29,7 @@ import {
   readCredentials,
   redactAgentFacingValue,
   remediationForStatus,
+  saveAgentFeedbackReport,
   summarizeInspect,
   summarizePlayback,
   testConnection,
@@ -52,6 +55,7 @@ async function run(name, values) {
   if (name === "inspect") return commandInspect(values);
   if (name === "prompt") return commandPrompt(values);
   if (name === "manifest") return commandManifest();
+  if (name === "report") return commandReport(values);
   if (name === "firmware") return commandFirmware(values);
   if (name === "app") return commandApp(values);
   if (name === "queue") return commandQueue(values);
@@ -61,6 +65,7 @@ async function run(name, values) {
   if (name === "volume") return commandVolume(values);
   if (name === "seek") return commandSeek(values);
   if (name === "light") return commandLight(values);
+  if (name === "wakeword" || name === "voice") return commandWakeword(values);
   if (name === "feedback" || name === "led") return commandFeedback(values);
   return commandControl(name, values);
 }
@@ -71,6 +76,7 @@ function usage(exitCode = 0) {
   ${COMMAND_NAME} doctor [--online] [--json]
   ${COMMAND_NAME} inspect [--json]
   ${COMMAND_NAME} prompt CODE [--agent AGENT] [--alias NAME]
+  ${COMMAND_NAME} report MESSAGE [--kind issue|suggestion|capability_mismatch|ux_feedback|docs_feedback] [--area light|audio|input|wakeword|firmware|vm|plugin|docs|other]
   ${COMMAND_NAME} play|pause|toggle|next|previous|volumeup|volumedown|status
   ${COMMAND_NAME} volume 0..100
   ${COMMAND_NAME} seek MILLISECONDS
@@ -85,6 +91,11 @@ function usage(exitCode = 0) {
   ${COMMAND_NAME} light timeline TIMELINE.json
   ${COMMAND_NAME} light bind BINDINGS.json
   ${COMMAND_NAME} light clear
+  ${COMMAND_NAME} wakeword status
+  ${COMMAND_NAME} wakeword configure CONFIG.json
+  ${COMMAND_NAME} wakeword bind BINDINGS.json
+  ${COMMAND_NAME} wakeword trigger WORD [--source NAME]
+  ${COMMAND_NAME} wakeword clear
   ${COMMAND_NAME} firmware check [--manifest URL]
   ${COMMAND_NAME} firmware update [--manifest URL] [--yes]
   ${COMMAND_NAME} rule RULE.json
@@ -98,6 +109,7 @@ Options:
   --credentials FILE   override audioctl-managed local credential file
   --endpoint URL       default: ${DEFAULT_ENDPOINT}
   --manifest URL       default: ${DEFAULT_FIRMWARE_MANIFEST_URL}
+  --reports-dir DIR    default: ${DEFAULT_REPORTS_DIR}
   --timeout SECONDS    default: 12
   --json               machine-readable output
   --nowait             publish without waiting for device status
@@ -216,6 +228,45 @@ async function commandManifest() {
   process.stdout.write(`${JSON.stringify(manifest, null, 2)}\n`);
 }
 
+async function commandReport(values) {
+  const options = parseOptions(values, {
+    credentials: credentialsPath(),
+    timeout: 12,
+    json: false,
+    include_inspect: false,
+    kind: "issue",
+    area: "other",
+    severity: "medium",
+    reports_dir: process.env.WEC_AUDIO_REPORTS_DIR || DEFAULT_REPORTS_DIR,
+  });
+  const message = String(options._.join(" ") || options.message || "").trim();
+  if (!message) throw new Error("report_requires_message");
+  let inspect = null;
+  if (options.include_inspect) {
+    const credentials = await readCredentials(options.credentials);
+    const delivery = await publishAudioControl(credentials, buildAudioControl("status"), {
+      timeoutMs: Number(options.timeout) * 1000,
+    });
+    inspect = delivery.status?.inspect || delivery.status || null;
+  }
+  const saved = await saveAgentFeedbackReport({
+    kind: options.kind || options.type,
+    area: options.area || options.component,
+    severity: options.severity,
+    title: options.title,
+    message,
+    observed: options.observed || options.actual,
+    expected: options.expected,
+    reproduction: options.reproduction || options.steps,
+    recommendation: options.recommendation || options.suggestion,
+    agent: options.agent || options.name,
+    inspect,
+  }, {
+    reportsDir: options.reports_dir,
+  });
+  print(saved, options.json);
+}
+
 async function commandFirmware(values) {
   const subcommand = String(values[0] || "check").replace(/-/gu, "_").toLowerCase();
   if (!new Set(["check", "update", "upgrade"]).has(subcommand)) {
@@ -456,6 +507,56 @@ async function commandLight(values) {
   if (delivery.status?.kind === "rejected") process.exitCode = 1;
 }
 
+async function commandWakeword(values) {
+  const subcommand = String(values[0] || "status").replace(/-/gu, "_").toLowerCase();
+  const options = parseOptions(values.slice(1), {
+    credentials: credentialsPath(),
+    timeout: 12,
+    json: false,
+    nowait: false,
+    source: "agent",
+  });
+  let control;
+  if (subcommand === "status" || subcommand === "describe" || subcommand === "info") {
+    control = buildWakewordControl("status");
+  } else if (subcommand === "configure" || subcommand === "config" || subcommand === "set") {
+    const file = String(options._[0] || "");
+    if (!file) throw new Error("wakeword_configure_requires_file");
+    control = buildWakewordControl("configure", {
+      config: JSON.parse(await fs.readFile(file, "utf8")),
+    });
+  } else if (subcommand === "bind" || subcommand === "bindings") {
+    const file = String(options._[0] || "");
+    if (!file) throw new Error("wakeword_bind_requires_file");
+    const payload = JSON.parse(await fs.readFile(file, "utf8"));
+    control = buildWakewordControl("bind", {
+      bindings: Array.isArray(payload) ? payload : payload.bindings,
+    });
+  } else if (subcommand === "trigger" || subcommand === "test" || subcommand === "event") {
+    control = buildWakewordControl("trigger", {
+      word: options._[0] || options.word || options.phrase || "factory_wake",
+      source: options.source,
+    });
+  } else if (subcommand === "clear" || subcommand === "reset") {
+    control = buildWakewordControl("clear");
+  } else {
+    throw new Error(`wakeword_subcommand_unsupported: ${subcommand}`);
+  }
+
+  const credentials = await readCredentials(options.credentials);
+  const delivery = await publishAudioControl(credentials, control, {
+    timeoutMs: Number(options.timeout) * 1000,
+    wait: !options.nowait,
+  });
+  if (control.wakeword.command === "status" && options.json) {
+    const wakeword = delivery.status?.inspect?.wakeword || delivery.status?.wakeword || {};
+    process.stdout.write(`${JSON.stringify(redactAgentFacingValue(wakeword))}\n`);
+  } else {
+    print(delivery.status || delivery, options.json);
+  }
+  if (delivery.status?.kind === "rejected") process.exitCode = 1;
+}
+
 async function commandFeedback(values) {
   const subcommand = String(values[0] || "").replace(/-/gu, "_").toLowerCase();
   const shorthandSignals = new Set([
@@ -564,8 +665,8 @@ function parseOptions(values, defaults = {}) {
       options._.push(value);
       continue;
     }
-    const key = value.slice(2);
-    if (key === "json" || key === "online" || key === "nowait" || key === "play" || key === "yes" || key === "force") {
+    const key = value.slice(2).replace(/-/gu, "_");
+    if (key === "json" || key === "online" || key === "nowait" || key === "play" || key === "yes" || key === "force" || key === "include_inspect") {
       options[key] = true;
       continue;
     }
@@ -580,15 +681,33 @@ function parseOptions(values, defaults = {}) {
       "endpoint",
       "effect",
       "channel",
+      "actual",
+      "area",
+      "component",
+      "expected",
+      "kind",
       "level",
       "manifest",
+      "message",
       "name",
+      "observed",
       "pattern",
       "profile",
       "repeat",
+      "phrase",
+      "recommendation",
+      "reports_dir",
+      "reproduction",
+      "severity",
+      "source",
+      "steps",
+      "suggestion",
       "surface",
       "timeout",
+      "title",
+      "type",
       "volume",
+      "word",
     ]).has(key)) {
       throw new Error(`option_unknown: --${key}`);
     }

package/lib/index.mjs

@@ -16,6 +16,11 @@ export const DEFAULT_CREDENTIALS_PATH = path.join(
   "weclawbot",
   "audio-mqtt.json",
 );
+export const DEFAULT_REPORTS_DIR = path.join(
+  os.homedir(),
+  "WeClawBot",
+  "agent-feedback",
+);
 export const ABSTRACT_HARDWARE_TYPE = "audio_voice_ambient_endpoint";
 export const ABSTRACT_HARDWARE_NAME = "Audio Voice Ambient Endpoint";
 
@@ -52,6 +57,7 @@ export const WORKBGM_RULE = Object.freeze({
 export const PLAYABLE_QUEUE_SCHEMA = "weclawbot.playable_queue.v1";
 export const LIGHT_TIMELINE_SCHEMA = "weclawbot.light.timeline.v1";
 export const LIGHT_BINDINGS_SCHEMA = "weclawbot.light.bind.v1";
+export const WAKEWORD_CONFIG_SCHEMA = "weclawbot.wakeword.config.v1";
 export const FIRMWARE_INDEX_SCHEMA = "weclawbot.firmware.index.v1";
 export const FIRMWARE_RELEASE_SCHEMA = "weclawbot.firmware.release.v1";
 
@@ -106,6 +112,13 @@ export const LIGHT_EVENTS = Object.freeze([
   "input.ring.single_click",
   "input.ring.clockwise",
   "input.ring.counter_clockwise",
+  "voice.wakeword.triggered",
+  "voice.phrase.matched",
+]);
+
+export const WAKEWORD_EVENTS = Object.freeze([
+  "voice.wakeword.triggered",
+  "voice.phrase.matched",
 ]);
 
 const WORKBGM_APP_WASM_BASE64 =
@@ -257,6 +270,16 @@ export function buildLightControl(command, options = {}) {
   };
 }
 
+export function buildWakewordControl(command, options = {}) {
+  const wakeword = normalizeWakewordCommand(command, options);
+  return {
+    schema: "weclawbot.control.v1",
+    id: string(options.id) || `wakeword_${crypto.randomUUID()}`,
+    kind: "wakeword_command",
+    wakeword,
+  };
+}
+
 export function buildQueueControl(options = {}) {
   return buildAudioControl("set_queue", {
     id: options.id,
@@ -719,6 +742,157 @@ function normalizeLightEvent(value) {
   return event;
 }
 
+export function normalizeWakewordCommand(command, options = {}) {
+  const aliases = new Map([
+    ["info", "status"],
+    ["describe", "status"],
+    ["config", "configure"],
+    ["set", "configure"],
+    ["update", "configure"],
+    ["bindings", "bind"],
+    ["binding", "bind"],
+    ["event", "trigger"],
+    ["phrase", "trigger"],
+    ["test", "trigger"],
+    ["reset", "clear"],
+  ]);
+  const raw = string(command || options.command || options.action || "status")
+    .replace(/-/gu, "_")
+    .toLowerCase();
+  const normalized = aliases.get(raw) || raw;
+  if (!new Set(["status", "configure", "bind", "trigger", "clear"]).has(normalized)) {
+    throw new Error(`wakeword_command_unsupported: ${command}`);
+  }
+  const wakeword = { command: normalized };
+  if (normalized === "configure") {
+    wakeword.config = normalizeWakewordConfig(
+      options.config && typeof options.config === "object" ? options.config : options,
+    );
+  }
+  if (normalized === "bind") {
+    const source =
+      Array.isArray(options.bindings)
+        ? { bindings: options.bindings }
+        : Array.isArray(options.binding)
+          ? { bindings: options.binding }
+          : options.bindings && typeof options.bindings === "object"
+            ? options.bindings
+            : options.binding && typeof options.binding === "object"
+              ? options.binding
+              : options.config && typeof options.config === "object"
+                ? options.config
+                : options;
+    wakeword.bindings = Array.isArray(source.bindings)
+      ? source.bindings.slice(0, 32).map(normalizeWakewordBinding)
+      : [];
+  }
+  if (normalized === "trigger") {
+    const word = string(
+      options.word ||
+        options.phrase ||
+        options.phrase_id ||
+        options.phraseId ||
+        options.value ||
+        "factory_wake",
+    );
+    wakeword.word = word.slice(0, 80) || "factory_wake";
+    wakeword.source = string(options.source || "agent").slice(0, 80) || "agent";
+  }
+  return wakeword;
+}
+
+export function normalizeWakewordConfig(value = {}) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) {
+    throw new Error("wakeword_config_invalid");
+  }
+  const phrasesInput = Array.isArray(value.phrases) ? value.phrases : [];
+  const bindingsInput = Array.isArray(value.bindings) ? value.bindings : [];
+  return {
+    schema: WAKEWORD_CONFIG_SCHEMA,
+    mode: "logical_voice_trigger",
+    language: string(value.language || "zh").slice(0, 16),
+    runtime_detection: "factory_wake_or_agent_injected_phrase",
+    phrases: phrasesInput.slice(0, 12).map(normalizeWakewordPhrase),
+    bindings: bindingsInput.slice(0, 32).map(normalizeWakewordBinding),
+  };
+}
+
+export function normalizeWakewordPhrase(value, index = 0) {
+  const text = string(value?.text || value?.phrase || value?.word);
+  const id = normalizeWakewordIdentifier(
+    value?.id || value?.phrase_id,
+    `phrase_${index + 1}`,
+  );
+  if (!text || text.length > 40) {
+    throw new Error(`wakeword_phrase_invalid:${index + 1}`);
+  }
+  const aliases = Array.isArray(value.aliases)
+    ? value.aliases.map(string).filter(Boolean).slice(0, 8)
+    : [];
+  for (const alias of aliases) {
+    if (alias.length > 40) throw new Error(`wakeword_alias_invalid:${index + 1}`);
+  }
+  const sensitivity = Number(value.sensitivity);
+  return {
+    id,
+    text,
+    aliases,
+    enabled: value.enabled !== false,
+    sensitivity: Number.isFinite(sensitivity)
+      ? Math.max(0, Math.min(1, Math.round(sensitivity * 1000) / 1000))
+      : 0.5,
+  };
+}
+
+export function normalizeWakewordBinding(value, index = 0) {
+  const phraseId = normalizeWakewordIdentifier(
+    value?.phrase_id || value?.phraseId || value?.id || "*",
+    "*",
+    { wildcard: true },
+  );
+  const action = string(value?.action || "app.event")
+    .replace(/-/gu, "_")
+    .toLowerCase()
+    .slice(0, 80);
+  if (
+    !new Set([
+      "app.event",
+      "music.play",
+      "music.pause",
+      "music.toggle",
+      "music.next",
+      "music.previous",
+      "feedback.beep",
+      "light.clear",
+    ]).has(action) &&
+    !action.startsWith("feedback.signal:")
+  ) {
+    throw new Error(`wakeword_action_unsupported:${index + 1}`);
+  }
+  const feedback = Array.isArray(value.feedback)
+    ? value.feedback.map(string).filter(Boolean).slice(0, 8)
+    : [];
+  return {
+    phrase_id: phraseId,
+    action,
+    target: string(value?.target).slice(0, 120),
+    feedback,
+  };
+}
+
+function normalizeWakewordIdentifier(value, fallback = "", options = {}) {
+  if (options.wildcard && string(value || fallback) === "*") return "*";
+  const text = string(value || fallback)
+    .toLowerCase()
+    .replace(/[^a-z0-9_.:-]+/gu, "_")
+    .replace(/^_+|_+$/gu, "")
+    .slice(0, 80);
+  if (!/^[a-z0-9][a-z0-9_.:-]{0,79}$/u.test(text)) {
+    throw new Error("wakeword_identifier_invalid");
+  }
+  return text;
+}
+
 export async function readFirmwareIndex(source = DEFAULT_FIRMWARE_MANIFEST_URL, options = {}) {
   const location = string(source) || DEFAULT_FIRMWARE_MANIFEST_URL;
   let payload;
@@ -993,6 +1167,10 @@ export function normalizeAppManifest(manifest, artifact = {}) {
     "audio.output.write",
     "audio.tts",
     "voice.wakeword",
+    "voice.wakeword.configure",
+    "voice.wakeword.bind",
+    "voice.wakeword.trigger",
+    "voice.event.bind",
     "voice.capture",
     "input.touch.read",
     "input.button.bind",
@@ -1028,6 +1206,7 @@ export function normalizeAppManifest(manifest, artifact = {}) {
   if (wasmBytes < 1 || wasmBytes > wasmLimit) {
     throw new Error("app_wasm_size_invalid");
   }
+  const wakeword = normalizeAppWakewordSpec(manifest);
   return {
     schema: "weclawbot.app.v1",
     app_id: string(manifest.app_id),
@@ -1063,12 +1242,30 @@ export function normalizeAppManifest(manifest, artifact = {}) {
       persist_on_reboot: manifest.install?.persist_on_reboot !== false,
       source: "audioctl",
     },
+    ...(wakeword ? { wakeword } : {}),
     ...(manifest.autopilot
       ? { autopilot: normalizeMusicAutopilot(manifest.autopilot) }
       : {}),
   };
 }
 
+function normalizeAppWakewordSpec(manifest) {
+  const source = manifest.wakeword && typeof manifest.wakeword === "object"
+    ? manifest.wakeword
+    : {};
+  const phrases = manifest.wakeword_phrases || source.phrases;
+  const bindings = manifest.wakeword_bindings || source.bindings;
+  if (!Array.isArray(phrases) && !Array.isArray(bindings)) return null;
+  return {
+    ...normalizeWakewordConfig({
+      language: source.language || manifest.language || "zh",
+      phrases: Array.isArray(phrases) ? phrases : [],
+      bindings: Array.isArray(bindings) ? bindings : [],
+    }),
+    app_id: string(manifest.app_id).slice(0, 80),
+  };
+}
+
 export function normalizeMusicAutopilot(value) {
   if (!value || value.schema !== "weclawbot.music_autopilot.v1") {
     throw new Error("music_autopilot_invalid");
@@ -1152,6 +1349,187 @@ export async function publishAudioControl(credentials, control, options = {}) {
   });
 }
 
+export function buildAgentFeedbackReport(options = {}) {
+  const kind = normalizeFeedbackReportKind(options.kind || options.type || "issue");
+  const area = normalizeFeedbackReportArea(options.area || options.component || "other");
+  const severity = normalizeFeedbackReportSeverity(options.severity || "medium");
+  const title = textField(options.title || summarizeReportTitle(kind, area, options.message), 120);
+  const message = textField(options.message || options.summary || options.description, 2000);
+  if (!message) throw new Error("report_message_required");
+  const inspect = options.inspect ? redactAgentFacingValue(options.inspect) : null;
+  return redactAgentFeedbackReport({
+    schema: "weclawbot.agent_feedback.v1",
+    id: string(options.id) || `report_${crypto.randomUUID()}`,
+    package: PACKAGE_NAME,
+    command: COMMAND_NAME,
+    device_type:
+      textField(options.deviceType || inspect?.device?.abstract_hardware || inspect?.device_type, 80) ||
+      ABSTRACT_HARDWARE_TYPE,
+    kind,
+    area,
+    severity,
+    title,
+    message,
+    observed: textField(options.observed || options.actual, 2000),
+    expected: textField(options.expected, 2000),
+    reproduction: textField(options.reproduction || options.steps, 2000),
+    recommendation: textField(options.recommendation || options.suggestion, 2000),
+    evidence: Array.isArray(options.evidence)
+      ? options.evidence.map((item) => textField(item, 240)).filter(Boolean).slice(0, 12)
+      : [],
+    inspect,
+    agent: textField(options.agent || options.agentName || process.env.WEC_AGENT_NAME || "", 80),
+    local_context: {
+      os: `${os.platform()} ${os.release()}`,
+      arch: os.arch(),
+      node: process.version,
+      cwd: textField(options.cwd || process.cwd(), 240),
+    },
+    privacy: {
+      secrets_redacted: true,
+      user_permission_required_before_external_submission: true,
+      note:
+        "audioctl saves this report locally. The agent must ask the user before posting it to a public issue tracker, chat, email, or other external system.",
+    },
+    created_at: new Date().toISOString(),
+  });
+}
+
+export async function saveAgentFeedbackReport(report, options = {}) {
+  const normalized = buildAgentFeedbackReport(report);
+  const reportsDir = expandReportDirectory(options.reportsDir || options.directory);
+  await fs.mkdir(reportsDir, { recursive: true, mode: 0o700 });
+  const file = path.join(
+    reportsDir,
+    `${normalized.created_at.replace(/[:.]/gu, "-")}-${normalized.id}.json`,
+  );
+  await fs.writeFile(file, `${JSON.stringify(normalized, null, 2)}\n`, {
+    mode: 0o600,
+  });
+  await fs.chmod(file, 0o600);
+  return {
+    schema: "weclawbot.agent_feedback.saved.v1",
+    ok: true,
+    report_path: file,
+    report: normalized,
+    next_step:
+      "Tell the user this local feedback report was created. Ask before submitting it externally.",
+  };
+}
+
+export function expandReportDirectory(value) {
+  const directory =
+    string(value) ||
+    string(process.env.WEC_AUDIO_REPORTS_DIR) ||
+    DEFAULT_REPORTS_DIR;
+  return expandPath(directory);
+}
+
+function normalizeFeedbackReportKind(value) {
+  const kind = string(value).replace(/-/gu, "_").toLowerCase();
+  const aliases = new Map([
+    ["bug", "issue"],
+    ["problem", "issue"],
+    ["capability_gap", "capability_mismatch"],
+    ["gap", "capability_mismatch"],
+    ["feature", "suggestion"],
+    ["idea", "suggestion"],
+  ]);
+  const normalized = aliases.get(kind) || kind;
+  if (!new Set([
+    "issue",
+    "suggestion",
+    "capability_mismatch",
+    "ux_feedback",
+    "docs_feedback",
+  ]).has(normalized)) {
+    throw new Error("report_kind_invalid");
+  }
+  return normalized;
+}
+
+function normalizeFeedbackReportArea(value) {
+  const area = string(value).replace(/-/gu, "_").toLowerCase();
+  const normalized = area || "other";
+  if (!new Set([
+    "audio",
+    "music",
+    "light",
+    "led",
+    "feedback",
+    "input",
+    "wakeword",
+    "firmware",
+    "vm",
+    "plugin",
+    "docs",
+    "provisioning",
+    "other",
+  ]).has(normalized)) {
+    throw new Error("report_area_invalid");
+  }
+  return normalized;
+}
+
+function normalizeFeedbackReportSeverity(value) {
+  const severity = string(value).replace(/-/gu, "_").toLowerCase() || "medium";
+  if (!new Set(["low", "medium", "high", "critical"]).has(severity)) {
+    throw new Error("report_severity_invalid");
+  }
+  return severity;
+}
+
+function summarizeReportTitle(kind, area, message) {
+  const text = textField(message, 80);
+  return text || `${kind}:${area}`;
+}
+
+function textField(value, maximum) {
+  return redactReportText(String(value ?? ""))
+    .replace(/[\u0000-\u001f\u007f]+/gu, " ")
+    .replace(/\s+/gu, " ")
+    .trim()
+    .slice(0, maximum);
+}
+
+function redactAgentFeedbackReport(report) {
+  return redactAgentFacingValue(redactReportValue(report));
+}
+
+function redactReportValue(value) {
+  if (Array.isArray(value)) return value.map(redactReportValue);
+  if (!value || typeof value !== "object") {
+    return typeof value === "string" ? redactReportText(value) : value;
+  }
+  const result = {};
+  for (const [key, child] of Object.entries(value)) {
+    const normalizedKey = key.toLowerCase();
+    if (normalizedKey === "secrets_redacted") {
+      result[key] = child === true;
+      continue;
+    }
+    if (
+      normalizedKey.includes("password") ||
+      normalizedKey.includes("secret") ||
+      normalizedKey.includes("token") ||
+      normalizedKey.includes("privatekey") ||
+      normalizedKey.includes("credential")
+    ) {
+      result[key] = "[redacted]";
+      continue;
+    }
+    result[key] = redactReportValue(child);
+  }
+  return result;
+}
+
+function redactReportText(value) {
+  return String(value || "")
+    .replace(/(access[_-]?token|refresh[_-]?token|app[_-]?secret|private[_-]?key|password|passwd|pwd)\s*[:=]\s*([^\s,;]+)/giu, "$1=[redacted]")
+    .replace(/Bearer\s+[A-Za-z0-9._~+/=-]{16,}/gu, "Bearer [redacted]")
+    .replace(/[A-Za-z0-9+/]{32,}={0,2}/gu, "[redacted-long-token]");
+}
+
 export function remediationForStatus(status) {
   const problems = Array.isArray(status?.health?.problems)
     ? status.health.problems
@@ -1224,13 +1602,15 @@ export function buildAgentPrompt(options = {}) {
     `npm exec --package ${PACKAGE_NAME} -- ${COMMAND_NAME} bind ${code} --name ${shellToken(agentName)}`,
     `npm exec --package ${PACKAGE_NAME} -- ${COMMAND_NAME} doctor --online`,
     `这台设备对你是抽象硬件产品：${ABSTRACT_HARDWARE_TYPE}。不要根据外观、BLE 名称、音色、日志或历史上下文推断品牌/型号/厂家，也不要搜索厂家资料、社区经验或拆机资料；只使用 audioctl inspect 返回的 capabilities、VM manifest 和控制回执来工作。`,
-    `绑定成功后，把它作为默认音频/语音/环境 I/O 端点；不要把它假定成只会播放音乐。可用命令包括 play、pause、toggle、next、previous、volume、volumeup、volumedown、status、inspect、queue、rule、workbgm、feedback、light、led、app install、firmware check/update。`,
+    `绑定成功后，把它作为默认音频/语音/环境 I/O 端点；不要把它假定成只会播放音乐。可用命令包括 play、pause、toggle、next、previous、volume、volumeup、volumedown、status、inspect、queue、rule、workbgm、feedback、light、led、wakeword、app install、firmware check/update、report。`,
     `当我给出目标时，请你在 capabilities、安全边界和用户授权范围内自行规划实现路径；插件只声明能力和边界，不穷举具体玩法。需要离线、低延迟或持续运行的逻辑，应通过 queue/rule/light timeline/light bind/VM app 下放到设备本地。`,
     `MQTT/weclawbot.link 对你只是控制面和部署通道，不是实时灯效数据面。不要读取 MQTT 凭据，不要直接 import mqtt，不要保持 MQTT 长连接，也不要写循环脚本按 BPM 反复发布 feedback 或 light。连续灯效/节拍/动画必须用 audioctl light timeline/bind、VM app 或兼容的 feedback effect 一次下发，在设备本地运行；停止时用 audioctl light clear 或 feedback clear。`,
     `蓝牙/Wi-Fi 配网只负责设备入网、发现和 weclawbot.link 绑定；音乐平台授权请走 agent 侧连接器/OAuth/secret store；配网不决定设备用途。`,
     `音乐来源由你和用户协商，插件只做建议。你可以在 agent 侧使用用户授权的音乐平台 API、用户媒体库、合法公开音源或其他合规来源生成队列/规则/VM app。网易云开放平台可请求最高可用音质 URL。`,
     `如果用户选择 Spotify，必须走 Spotify 官方 Spotify Connect/Web Playback SDK 或控制用户已有 Spotify 播放设备；不要假设 Spotify Web API 能提供完整歌曲直链。`,
     `灯效、音量灯、蜂鸣和按键/触控反馈要先 inspect 或 light describe 确认 feedback/input/light capabilities。一次性语义反馈可用 feedback signal/flash/volume/beep/clear；复杂灯效请优先生成 light timeline 和 light bind，把外圈、中心等 surface 与 media/input 事件绑定到设备本地。feedback effect 只作为兼容/demo 入口，不要把 music_beat/pulse/breathing 当成能力边界。具体按键绑定请根据用户目标和 capabilities 自行规划，不要套固定模板。`,
+    `用户的现场视觉、听觉、触控反馈优先于设备返回的 active=true、applied 或 capability 声明。如果用户说某个 surface 看不到、按键不灵或反馈不明显，不要用状态回执反驳用户；先降级到用户确认可见/可听/可控的方案，再运行 audioctl report "..." --kind capability_mismatch --area light --include-inspect --json 生成本地脱敏报告。报告默认只保存在本机，外发前必须获得用户确认。`,
+    `唤醒词/语音触发配置要通过 inspect 读取 wakeword.configurable、wakeword.commands 和 capabilities。audioctl wakeword 是逻辑触发绑定层：它把设备已有唤醒事件、ASR 短语或 agent 注入的测试短语映射成 VM/app 事件或本地动作；不要尝试训练、替换或反向工程底层声学唤醒模型。`,
     `如果你当前没有音乐平台身份，请只告诉我：我需要你把音乐平台身份连接到当前 agent 的官方连接器、OAuth 流程或 secret store；完成后回复“已授权”。不要反复重试，不要让我理解内部授权包，也不要要求我把 AppSecret、PrivateKey、accessToken 或 refreshToken 发到聊天里。`,
     `如果返回 health.problems 包含 netease_auth_refresh_failed，说明设备侧内置网易运行时授权失效；优先改走 agent 侧 queue/app 驱动。只有我明确要求继续使用设备侧网易运行时时，才提示需要独立的设备侧音乐账号设置入口；不要混入蓝牙/Wi-Fi 配网流程。`,
     `固件更新由 agent 端发现新版、用户确认后执行：先运行 audioctl firmware check --json，只展示官网来源、当前版本、新版本和 release notes；只有用户明确同意升级后，才运行 audioctl firmware update --yes --json。固件只从 weclawbot.link 官方 manifest 下载，更新设备 host/runtime，不等同于 VM app，也不要用固件更新去实现普通应用需求。`,
@@ -1261,6 +1641,12 @@ export function summarizeInspect(inspect) {
   const bluetooth = inspect?.bluetooth || {};
   const ble = bluetooth.ble || {};
   const wakeword = inspect?.wakeword || {};
+  const wakewordPhraseCount = Array.isArray(wakeword.configured_phrases)
+    ? wakeword.configured_phrases.length
+    : Number(wakeword.configured_phrase_count) || 0;
+  const wakewordBindingCount = Array.isArray(wakeword.bindings)
+    ? wakeword.bindings.length
+    : Number(wakeword.binding_count) || 0;
   const playback = summarizePlayback(inspect || {});
   const vm = inspect?.vm || {};
   const health = inspect?.health || {};
@@ -1276,7 +1662,7 @@ export function summarizeInspect(inspect) {
       `${bluetooth.service?.active || "unknown"} ${string(ble.name || "-")} ${string(ble.state || "-")}`
         .trim(),
     wakeword:
-      `${wakeword.available ? "available" : "unavailable"} ${Array.isArray(wakeword.wake_words) && wakeword.wake_words.length ? wakeword.wake_words.join("/") : "-"} wake_runtime=${wakeword.services?.wake_runtime?.active || "unknown"} voice_runtime=${wakeword.services?.voice_runtime?.active || "unknown"}`
+      `${wakeword.available ? "available" : "unavailable"} configurable=${wakeword.configurable === true} phrases=${wakewordPhraseCount} bindings=${wakewordBindingCount} wake_runtime=${wakeword.services?.wake_runtime?.active || "unknown"} voice_runtime=${wakeword.services?.voice_runtime?.active || "unknown"}`
         .trim(),
     playback:
       `${playback.desired}, volume ${playback.volume ?? "-"}, ${playback.track || "no track"}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openbrt/audioctl",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "description": "Generic WeClawBot audio/voice endpoint control CLI and AI-agent plugin.",
   "type": "module",
   "license": "MIT",