made-bridge 0.2.3 → 0.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "made-bridge",
-  "version": "0.2.3",
+  "version": "0.3.0",
   "description": "码得（made）独立语音编程设备的电脑侧桥接器：工作台 API、设备接口、任务调度与插件运行时。一条命令启动，配合 ESP32 固件使用，源码在 github.com/jobop/made。",
   "type": "module",
   "license": "MIT",

package/public/app.js

@@ -861,7 +861,58 @@ import { t, m, getLocale, setLocale, supportedLocales, applyStaticTranslations,
         });
         if (cards.length !== grid.children.length || cards.some((card, index) => grid.children[index] !== card)) grid.replaceChildren(...cards);
       }
-      function render() { renderSelects(); renderSessions(); renderJobs(); renderBoard(); renderPairing(); renderTunnel(); renderReceiver(); renderConnection(); renderModelSettings(); renderVoiceSettings(); renderProviders(); }
+      let firmwareBusy = false;
+      let firmwareView = null;
+      async function loadFirmware() {
+        if (!$('firmwareStatus')) return;
+        try {
+          firmwareView = await request('/api/firmware');
+          renderFirmware();
+        } catch (error) {
+          $('firmwareStatus').textContent = error.message || t('app.020');
+        }
+      }
+      function renderFirmware() {
+        if (!$('firmwareList') || !firmwareView) return;
+        const current = firmwareView.current;
+        $('firmwareStatus').textContent = current
+          ? `${current.version} · ${current.size} B`
+          : (firmwareView.otaUrl || t('static.161'));
+        const url = $('firmwareUrl');
+        if (url && document.activeElement !== url) url.value = firmwareView.otaUrl || '';
+        const list = $('firmwareList');
+        list.replaceChildren();
+        for (const item of firmwareView.items || []) {
+          const row = text('div', 'info-row');
+          row.append(text('span', 'info-name', item.current ? `${item.version} · ${t('static.162')}` : item.version));
+          const actions = text('span', 'info-value');
+          if (!item.current) {
+            const use = text('button', 'small-button', t('static.163'));
+            use.type = 'button';
+            use.addEventListener('click', () => firmwareAct({ action: 'current', id: item.id }, 'static.169'));
+            actions.append(use);
+          }
+          const del = text('button', 'small-button', t('static.164'));
+          del.type = 'button';
+          del.addEventListener('click', () => firmwareAct({ action: 'delete', id: item.id }, 'static.169'));
+          actions.append(del);
+          row.append(actions);
+          list.append(row);
+        }
+      }
+      async function firmwareAct(body, okKey) {
+        if (firmwareBusy) return;
+        firmwareBusy = true;
+        try {
+          const data = await post('/api/firmware', body);
+          firmwareView = data.firmware || data;
+          setUiMessage($('firmwareMessage'), m(okKey));
+          renderFirmware();
+        } catch (error) {
+          setUiMessage($('firmwareMessage'), error.message || '');
+        } finally { firmwareBusy = false; }
+      }
+      function render() { renderSelects(); renderSessions(); renderJobs(); renderBoard(); renderPairing(); renderTunnel(); renderReceiver(); renderFirmware(); renderConnection(); renderModelSettings(); renderVoiceSettings(); renderProviders(); }
       function applyLanguage(locale) {
         const changed = setLocale(locale);
         if (!changed && document.documentElement.lang === locale) {
@@ -1024,5 +1075,37 @@ import { t, m, getLocale, setLocale, supportedLocales, applyStaticTranslations,
       });
       applyStaticTranslations();
       $('languageSelect').value = getLocale();
-      render(); refresh(); setInterval(refresh, 4000);
+      $('firmwareForm')?.addEventListener('submit', (event) => {
+        event.preventDefault();
+        firmwareAct({ action: 'url', otaUrl: $('firmwareUrl').value }, 'static.165');
+      });
+      $('firmwareSync')?.addEventListener('click', () => firmwareAct({ action: 'sync' }, 'static.166'));
+      $('firmwareUseBridge')?.addEventListener('click', () => firmwareAct({ action: 'url', otaUrl: '/device/firmware/current' }, 'static.165'));
+      $('firmwareUploadForm')?.addEventListener('submit', async (event) => {
+        event.preventDefault();
+        const file = $('firmwareFile')?.files?.[0];
+        if (!file || firmwareBusy) return;
+        firmwareBusy = true;
+        try {
+          const token = await sessionToken();
+          const response = await fetch('/api/firmware', {
+            method: 'POST',
+            headers: {
+              'Content-Type': 'application/octet-stream',
+              'X-Vibe-Token': token,
+              'X-Firmware-Version': $('firmwareVersion').value.trim(),
+            },
+            body: await file.arrayBuffer(),
+          });
+          const data = await response.json().catch(() => ({}));
+          if (!response.ok) throw new Error(data.error || t('app.017', { v0: response.status }));
+          firmwareView = data;
+          $('firmwareFile').value = '';
+          setUiMessage($('firmwareMessage'), m('static.168'));
+          renderFirmware();
+        } catch (error) {
+          setUiMessage($('firmwareMessage'), error.message || '');
+        } finally { firmwareBusy = false; }
+      });
+      render(); refresh(); loadFirmware(); setInterval(refresh, 4000);
     })();

package/public/i18n-static.js

@@ -596,6 +596,29 @@ export const staticMessages = {
     "zh-CN": "主题包都在这里管理。应用到码得后，设备解锁并连上电脑时才会换上这套外观。",
     "en": "Theme packs are managed here. made applies one after it is unlocked and connected to this computer."
   },
+  "static.150": { "zh-CN": "固件更新", "en": "Firmware update" },
+  "static.151": {
+    "zh-CN": "这个地址写在码得读取的配置里。码得拿到后只从该地址下载，桥接器不会把地址推下去。填本机路径时，码得从这台桥接器取下面管理的当前固件包。",
+    "en": "This address is part of the config made requests. made downloads only from that address. Use the local path to have made fetch the current package stored on this bridge."
+  },
+  "static.152": { "zh-CN": "正在读取固件…", "en": "Loading firmware…" },
+  "static.153": { "zh-CN": "固件地址", "en": "Firmware URL" },
+  "static.154": { "zh-CN": "保存地址", "en": "Save URL" },
+  "static.155": { "zh-CN": "拉取到本地", "en": "Download locally" },
+  "static.156": { "zh-CN": "使用本机地址", "en": "Use this bridge" },
+  "static.157": { "zh-CN": "本地版本号", "en": "Local version" },
+  "static.158": { "zh-CN": "固件文件", "en": "Firmware file" },
+  "static.159": { "zh-CN": "保存到本地", "en": "Save locally" },
+  "static.160": { "zh-CN": "已保存固件", "en": "Saved firmware" },
+  "static.161": { "zh-CN": "还没有本地固件。", "en": "No local firmware yet." },
+  "static.162": { "zh-CN": "当前", "en": "Current" },
+  "static.163": { "zh-CN": "设为当前", "en": "Make current" },
+  "static.164": { "zh-CN": "删除", "en": "Delete" },
+  "static.165": { "zh-CN": "地址已保存。", "en": "URL saved." },
+  "static.166": { "zh-CN": "已拉取到本地。", "en": "Downloaded locally." },
+  "static.167": { "zh-CN": "已通知码得更新。", "en": "made was told to update." },
+  "static.168": { "zh-CN": "固件已保存到本地。", "en": "Firmware saved locally." },
+  "static.169": { "zh-CN": "本地固件已更新。", "en": "Local firmware updated." },
   "language.label": {
     "zh-CN": "语言",
     "en": "Language"

package/public/index.html

@@ -72,6 +72,22 @@
             <p id="receiverHelp" class="panel-intro receiver-help"><span data-i18n="static.041">独立接收端无需屏幕：通过 USB 插入电脑后，这里自动显示热点名称和密码。在码得内打开“齿轮 → 连接 → 接收端”，扫描并点选热点，再输入这里显示的密码并保存；无需退出到桌面设置。新固件的热点密码为 8 位数字，六位配对码随后单独核对。码得直接用 USB 插电脑时，无需填写热点信息。</span></p>
           </section>
 
+          <section id="firmware" class="panel info-panel" aria-labelledby="firmware-title">
+            <div class="panel-head"><div><h2 id="firmware-title"><span data-i18n="static.150">固件更新</span></h2><p class="panel-intro"><span data-i18n="static.151">这个地址写在码得读取的配置里。码得拿到后只从该地址下载，桥接器不会把地址推下去。填本机路径时，码得从这台桥接器取下面管理的当前固件包。</span></p></div></div>
+            <p id="firmwareStatus" class="pairing-state" role="status" aria-live="polite"><span data-i18n="static.152">正在读取固件…</span></p>
+            <form id="firmwareForm" class="voice-settings-form" autocomplete="off">
+              <div><label class="field-label" for="firmwareUrl"><span data-i18n="static.153">固件地址</span></label><input id="firmwareUrl" class="secret-input" type="text" inputmode="url" spellcheck="false" placeholder="https://example.com/made.bin"></div>
+              <div class="voice-settings-actions"><button id="firmwareSaveUrl" class="primary-button" type="submit"><span data-i18n="static.154">保存地址</span></button><button id="firmwareSync" class="small-button" type="button"><span data-i18n="static.155">拉取到本地</span></button><button id="firmwareUseBridge" class="small-button" type="button"><span data-i18n="static.156">使用本机地址</span></button></div>
+            </form>
+            <form id="firmwareUploadForm" class="voice-settings-form">
+              <div><label class="field-label" for="firmwareVersion"><span data-i18n="static.157">本地版本号</span></label><input id="firmwareVersion" class="secret-input" type="text" spellcheck="false" maxlength="32" placeholder="1.2.3"></div>
+              <div><label class="field-label" for="firmwareFile"><span data-i18n="static.158">固件文件</span></label><input id="firmwareFile" type="file" accept=".bin,application/octet-stream"></div>
+              <div class="voice-settings-actions"><button id="firmwareUpload" class="small-button" type="submit"><span data-i18n="static.159">保存到本地</span></button></div>
+            </form>
+            <div id="firmwareList" class="pairing-list" aria-label="已保存固件" data-i18n-aria-label="static.160"></div>
+            <p id="firmwareMessage" class="voice-settings-message" role="status" aria-live="polite"></p>
+          </section>
+
         </div>
         <div class="stack">
           <section id="voiceSettings" class="panel info-panel" aria-labelledby="voice-settings-title">

package/src/agent-sprites.mjs

@@ -17,10 +17,13 @@ export const SPRITE_MAX_CHUNK = 192 * 1024;
 export const SPRITE_MAX_FILE_BYTES = 256 * 1024;
 const MANIFEST_MAX_BYTES = 16 * 1024;
 const MAX_LAYERS = 8;
-const MAX_FRAMES = 4;
+const MAX_FRAMES = 8;
+// 情绪表允许的状态名（与固件 Mood 枚举一一对应）。
+const MOOD_NAMES = new Set(['idle', 'talking', 'running', 'waiting', 'success', 'sad', 'offline']);
 // ≤20 字符：固件 SPIFFS 缓存对象名 = '/' + "s<hash6>_" + 文件名 + "~"，
 // 而 SPIFFS 只给 31 字节，20 是留了 1 字节余量的上限。
 const FILE_NAME = /^[A-Za-z0-9_-]{1,16}\.png$/i;
+const GIF_NAME = /^[A-Za-z0-9_-]{1,16}\.gif$/i;
 const LAYER_ID = /^[A-Za-z][A-Za-z0-9_]{0,15}$/;
 const RESERVED_IDS = new Set(['__proto__', 'constructor', 'prototype']);
 
@@ -51,7 +54,7 @@ function readManifestFile(dir) {
 
 function validateManifest(raw) {
   if (!raw || typeof raw !== 'object' || Array.isArray(raw)) throw new SpriteError('manifest 必须是对象');
-  if (Object.keys(raw).some((key) => !['version', 'canvas', 'layers', 'motion'].includes(key))) {
+  if (Object.keys(raw).some((key) => !['version', 'canvas', 'layers', 'motion', 'emotions', 'actions'].includes(key))) {
     throw new SpriteError('manifest 包含不支持的字段');
   }
   if (!isInt(raw.version, 1, 2147483647)) throw new SpriteError('manifest.version 必须是正整数');
@@ -123,7 +126,88 @@ function validateManifest(raw) {
       throw new SpriteError('motion.sway_period_ms 范围 200–10000');
     }
   }
-  return { version: raw.version, canvas: canvas, layers: raw.layers, motion: raw.motion ?? null };
+  if (raw.emotions !== undefined) {
+    const emotions = raw.emotions;
+    if (!emotions || typeof emotions !== 'object' || Array.isArray(emotions)) {
+      throw new SpriteError('emotions 必须是对象');
+    }
+    for (const [mood, entry] of Object.entries(emotions)) {
+      if (!MOOD_NAMES.has(mood)) throw new SpriteError(`emotions 含未知状态：${mood}`);
+      if (!entry || typeof entry !== 'object' || Array.isArray(entry) ||
+          Object.keys(entry).length < 1) {
+        throw new SpriteError(`emotions.${mood} 必须是非空对象（层id → 帧序号 | "cycle"）`);
+      }
+      for (const [layerId, sel] of Object.entries(entry)) {
+        const layer = raw.layers.find((item) => item.id === layerId);
+        if (!layer) throw new SpriteError(`emotions.${mood} 引用未知层：${layerId}`);
+        const frameCount = (layer.frames !== undefined ? layer.frames : [layer.file]).length;
+        if (sel === 'cycle') continue;
+        if (!isInt(sel, 0, frameCount - 1)) {
+          throw new SpriteError(`emotions.${mood}.${layerId} 需要帧序号 0–${frameCount - 1} 或 "cycle"`);
+        }
+      }
+    }
+  }
+  // 行动系统：actions 表（可选）。两种动作形态二选一：
+  //   帧表动作 = { frame_ms, loops, tracks }（对既有层帧序的关键帧覆盖）；
+  //   GIF 动作  = { gif, ms }（整帧动画文件，播放 ms 毫秒）。
+  // 上限与固件一致：≤16 动作 / 每动作 ≤8 轨道 / 每轨道 ≤32 步。
+  const gifReferenced = new Set();
+  if (raw.actions !== undefined) {
+    const actions = raw.actions;
+    if (!actions || typeof actions !== 'object' || Array.isArray(actions)) {
+      throw new SpriteError('actions 必须是对象');
+    }
+    const names = Object.keys(actions);
+    if (names.length > 16) throw new SpriteError('actions 最多 16 个动作');
+    for (const [name, action] of Object.entries(actions)) {
+      if (!/^[a-z][a-z0-9_]{0,15}$/.test(name)) throw new SpriteError(`actions.${name} 名字须为小写字母开头的 [a-z0-9_]{0,15}`);
+      if (!action || typeof action !== 'object' || Array.isArray(action)) {
+        throw new SpriteError(`actions.${name} 必须是对象`);
+      }
+      if (action.gif !== undefined) {
+        // GIF 动作：整帧动画，ms 是播放时长（设备端流式解码，文件不分帧）
+        if (Object.keys(action).some((key) => !['gif', 'ms'].includes(key))) {
+          throw new SpriteError(`actions.${name} 包含不支持的字段（GIF 动作只支持 gif/ms）`);
+        }
+        if (typeof action.gif !== 'string' || !GIF_NAME.test(action.gif)) {
+          throw new SpriteError(`actions.${name}.gif 需要 1–16 位 [A-Za-z0-9_-] 的 .gif 文件名`);
+        }
+        if (action.ms !== undefined && !isInt(action.ms, 100, 10000)) {
+          throw new SpriteError(`actions.${name}.ms 范围 100–10000`);
+        }
+        gifReferenced.add(action.gif);
+        continue;
+      }
+      if (Object.keys(action).some((key) => !['frame_ms', 'loops', 'tracks'].includes(key))) {
+        throw new SpriteError(`actions.${name} 包含不支持的字段`);
+      }
+      if (action.frame_ms !== undefined && !isInt(action.frame_ms, 30, 2000)) {
+        throw new SpriteError(`actions.${name}.frame_ms 范围 30–2000`);
+      }
+      if (action.loops !== undefined && !isInt(action.loops, 1, 10)) {
+        throw new SpriteError(`actions.${name}.loops 范围 1–10`);
+      }
+      const tracks = action.tracks;
+      if (!tracks || typeof tracks !== 'object' || Array.isArray(tracks) ||
+          Object.keys(tracks).length < 1 || Object.keys(tracks).length > 8) {
+        throw new SpriteError(`actions.${name}.tracks 需要 1–8 条轨道（层id → 帧序号数组）`);
+      }
+      for (const [layerId, steps] of Object.entries(tracks)) {
+        const layer = raw.layers.find((item) => item.id === layerId);
+        if (!layer) throw new SpriteError(`actions.${name} 引用未知层：${layerId}`);
+        const frameCount = (layer.frames !== undefined ? layer.frames : [layer.file]).length;
+        if (!Array.isArray(steps) || steps.length < 1 || steps.length > 32 ||
+            steps.some((step) => !isInt(step, 0, frameCount - 1))) {
+          throw new SpriteError(`actions.${name}.tracks.${layerId} 需要 1–32 个帧序号（0–${frameCount - 1}）`);
+        }
+      }
+    }
+  }
+  return {
+    version: raw.version, canvas: canvas, layers: raw.layers, motion: raw.motion ?? null,
+    emotions: raw.emotions ?? null, actions: raw.actions ?? null,
+  };
 }
 
 /** 按目录内容 mtime 缓存读取结果；素材被替换时自动失效。
@@ -157,12 +241,23 @@ export function readSprite(packageDir) {
   const raw = readManifestFile(spriteDir);
   if (!raw) return null;
   const manifest = validateManifest(raw);
-  // 引用完整性：目录里的 PNG 必须全部被 manifest 引用，帮开发者抓住文件名拼写错误。
+  // 引用完整性：目录里的 PNG 必须全部被 manifest 层引用、GIF 必须被某个
+  // GIF 动作引用，帮开发者抓住文件名拼写错误。
+  const gifReferenced = new Set();
+  if (manifest.actions) {
+    for (const action of Object.values(manifest.actions)) {
+      if (action && typeof action.gif === 'string') gifReferenced.add(action.gif);
+    }
+  }
   for (const name of fs.readdirSync(spriteDir)) {
-    if (!name.toLowerCase().endsWith('.png')) continue;
-    const referenced = manifest.layers.some((layer) =>
-      (layer.frames !== undefined ? layer.frames : [layer.file]).includes(name));
-    if (!referenced) throw new SpriteError(`sprite/${name} 未被 manifest 引用`);
+    const lower = name.toLowerCase();
+    if (lower.endsWith('.png')) {
+      const referenced = manifest.layers.some((layer) =>
+        (layer.frames !== undefined ? layer.frames : [layer.file]).includes(name));
+      if (!referenced) throw new SpriteError(`sprite/${name} 未被 manifest 引用`);
+    } else if (lower.endsWith('.gif')) {
+      if (!gifReferenced.has(name)) throw new SpriteError(`sprite/${name} 未被任何 GIF 动作引用`);
+    }
   }
   let total = 0;
   const files = [];
@@ -182,9 +277,29 @@ export function readSprite(packageDir) {
       files.push({ file, bytes, sha256: createHash('sha256').update(data).digest('hex') });
     }
   }
+  // GIF 动作引用的动画文件（多个动作共用同一文件只下发一份）
+  if (manifest.actions) {
+    const listed = new Set(files.map((entry) => entry.file));
+    for (const action of Object.values(manifest.actions)) {
+      if (!action || typeof action.gif !== 'string' || listed.has(action.gif)) continue;
+      const target = path.join(spriteDir, action.gif);
+      let bytes;
+      try {
+        bytes = fs.statSync(target).size;
+      } catch {
+        throw new SpriteError(`GIF 动作引用的素材不存在：sprite/${action.gif}`);
+      }
+      if (bytes > SPRITE_MAX_FILE_BYTES) throw new SpriteError(`素材单文件超过 256 KB：${action.gif}`);
+      total += bytes;
+      if (total > SPRITE_MAX_TOTAL_BYTES) throw new SpriteError(`sprite/ 整包超过 512 KB`);
+      const data = fs.readFileSync(target);
+      files.push({ file: action.gif, bytes, sha256: createHash('sha256').update(data).digest('hex') });
+    }
+  }
   const value = Object.freeze({
     dir: spriteDir, version: manifest.version, canvas: manifest.canvas,
-    layers: manifest.layers, motion: manifest.motion,
+    layers: manifest.layers, motion: manifest.motion, emotions: manifest.emotions,
+    actions: manifest.actions,
     files: Object.freeze(files.map((file) => Object.freeze(file))),
   });
   cache.set(spriteDir, { stamp, value });

package/src/agents/events.mjs

@@ -88,5 +88,9 @@ export function assistantEvent(event, state, { append = false } = {}) {
   } else if (event.type === 'result') {
     if (typeof event.result === 'string') state.finalResult = event.result;
     if (event.is_error || (event.subtype && event.subtype !== 'success')) state.terminalError = '编程工具报告任务失败';
+    // 终局事件以最后 outcome 为准：部分 CLI 会先吐可恢复错误（如流断开重试）、
+    // 随后仍以 success 收尾（实测 2026-10-16 小鱼任务：codex 自身 task_complete，
+    // 桥接器却因早前的 error 事件判死）。先失败后成功 = 成功；只看首个终态会假失败。
+    else if (event.subtype === 'success' || event.is_error === false) state.terminalError = '';
   } else if (event.type === 'turn.failed') state.terminalError = '编程工具报告任务失败';
 }

package/src/agents/shared.mjs

@@ -81,16 +81,19 @@ export function gitState(cwd) {
 }
 
 function repositorySnapshot(cwd) {
-  if (!fs.existsSync(cwd)) {
-    fs.mkdirSync(cwd, { recursive: true });
-    spawnSync('git', ['init'], { cwd, encoding: 'utf8', timeout: 15000 });
-  }
+  if (!fs.existsSync(cwd)) fs.mkdirSync(cwd, { recursive: true });
   if (!fs.statSync(cwd).isDirectory()) {
     throw new Error(`代码目录不存在：${cwd}`);
   }
-  const repo = spawnSync('git', ['rev-parse', '--show-toplevel'], {
+  let repo = spawnSync('git', ['rev-parse', '--show-toplevel'], {
     cwd, encoding: 'utf8', timeout: 5000,
   });
+  if (repo.status !== 0) {
+    spawnSync('git', ['init'], { cwd, encoding: 'utf8', timeout: 15000 });
+    repo = spawnSync('git', ['rev-parse', '--show-toplevel'], {
+      cwd, encoding: 'utf8', timeout: 5000,
+    });
+  }
   if (repo.status !== 0) {
     throw new Error('目标项目必须是 Git 仓库，以便查看和恢复改动');
   }

package/src/agents/toolbox.mjs

@@ -0,0 +1,15 @@
+// CLI 执行工具箱：把 CLI 型助手插件需要的机制汇总成一份，经 config.runtime
+// 注入插件。权限边界指令统一在 runCli 里拼（设备侧唯一护栏，不允许各插件
+// 各写一遍）；平台差异（Windows .cmd、PATHEXT）统一在 plugin-runtime.mjs。
+//
+// 内置 CLI 助手（codex/cursor/qoder）自 2026-10 起已插件化为市场包，桥接器
+// 不再内置任何编程助手；这套机制是它们在桥接器侧的公共底座。
+import { probeCli, runCli, gitState } from './shared.mjs';
+import {
+  jsonLineEvents, assistantEvent, streamActivity, toolActivity, textBlocks,
+} from './events.mjs';
+
+export const cliToolbox = Object.freeze({
+  probeCli, runCli, gitState,
+  jsonLineEvents, assistantEvent, streamActivity, toolActivity, textBlocks,
+});

package/src/board-link.mjs

@@ -170,6 +170,19 @@ export function createBoardLink() {
         }
       }
     },
+    // 行动系统：动作是命令清单里的 action.<名> 条目（设备把可用动作并入
+    // 能力清单上报），这里从清单派生名单，给插件与桌面 UI 做参考——设备对
+    // 不认识的动作命令本来就会静默忽略，不拿名单做下发闸门。
+    actionsOf(deviceId) {
+      const catalog = catalogs.get(deviceId);
+      if (!catalog) return [];
+      return catalog.commands.map((item) => item.name)
+        .filter((name) => name.startsWith('action.'))
+        .map((name) => name.slice(7));
+    },
+    allActions() {
+      return Object.fromEntries([...catalogs.keys()].map((id) => [id, this.actionsOf(id)]));
+    },
     pending(deviceId) {
       return (queues.get(deviceId) || []).map((item) => ({
         id: item.id, name: item.name, fields: { ...item.fields }, audio: item.audio === true,

package/src/config.mjs

@@ -5,6 +5,7 @@ import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { loadOpenAIKey } from './openai-key.mjs';
 import { pluginRuntime } from './plugin-runtime.mjs';
+import { cliToolbox } from './agents/toolbox.mjs';
 import { DEFAULT_CODEX_MODEL, loadModelSettings, validateModelSettings, validateStoredModels } from './model-settings.mjs';
 import { DEFAULT_TRANSCRIBE_MODEL, DEFAULT_TRANSCRIBE_URL, loadVoiceSettings, validateTranscribeModel, validateTranscribeUrl } from './voice-settings.mjs';
 
@@ -198,14 +199,16 @@ export function loadConfig(env = process.env) {
     environmentOpenaiKey,
     transcribeUrl: savedVoiceSettings?.url || validateTranscribeUrl(env.VIBE_TRANSCRIBE_URL || DEFAULT_TRANSCRIBE_URL),
     transcribeModel: savedVoiceSettings?.model || validateTranscribeModel(env.VIBE_TRANSCRIBE_MODEL || DEFAULT_TRANSCRIBE_MODEL),
+    stateDir,
+    usbPort,
+    configFile: selected,
+    // workbuddy 插件的旧凭证入口，仅为兼容既有部署保留；新配置请用插件设置。
     workbuddyToken: env.WORKBUDDY_ACCESS_TOKEN || '',
     workbuddy: {
       allowUnscopedDispatch: raw.workbuddy?.allowUnscopedDispatch === true,
     },
-    stateDir,
-    usbPort,
-    configFile: selected,
-    // 插件可用的跨平台助手（命令查找、子进程、npm）。见 plugin-runtime.mjs。
-    runtime: pluginRuntime,
+    // 插件可用的助手：跨平台助手（命令查找、子进程、npm）加上 CLI 执行
+    // 工具箱（runCli、事件解析等）。见 plugin-runtime.mjs 与 agents/toolbox.mjs。
+    runtime: Object.freeze({ ...pluginRuntime, ...cliToolbox }),
   };
 }

package/src/firmware-store.mjs

@@ -0,0 +1,166 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+
+const MAX_BYTES = 8 * 1024 * 1024;
+const VERSION_RE = /^[0-9A-Za-z][0-9A-Za-z._-]{0,31}$/;
+const ID_RE = /^[0-9a-f]{12}$/;
+
+function emptyManifest() {
+  return { otaUrl: '', currentId: '', items: [] };
+}
+
+function readManifest(file) {
+  try {
+    const parsed = JSON.parse(fs.readFileSync(file, 'utf8'));
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return emptyManifest();
+    return {
+      otaUrl: typeof parsed.otaUrl === 'string' ? parsed.otaUrl : '',
+      currentId: typeof parsed.currentId === 'string' ? parsed.currentId : '',
+      items: Array.isArray(parsed.items) ? parsed.items.filter((item) => item && typeof item === 'object') : [],
+    };
+  } catch {
+    return emptyManifest();
+  }
+}
+
+export const BRIDGE_FIRMWARE_PATH = '/device/firmware/current';
+
+export function validateOtaUrl(value) {
+  const text = String(value || '').trim();
+  if (!text) return '';
+  if (text === BRIDGE_FIRMWARE_PATH) return text;
+  let url;
+  try { url = new URL(text); } catch { throw new Error('固件地址须是 http(s) URL，或本机路径 /device/firmware/current'); }
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') throw new Error('固件地址须是 http(s) URL，或本机路径 /device/firmware/current');
+  if (url.username || url.password) throw new Error('固件地址不能带账号密码');
+  return url.toString();
+}
+
+export function createFirmwareStore(directory) {
+  const root = path.resolve(directory);
+  const manifestPath = path.join(root, 'manifest.json');
+  fs.mkdirSync(root, { recursive: true, mode: 0o700 });
+
+  const load = () => readManifest(manifestPath);
+  const save = (manifest) => {
+    const temp = `${manifestPath}.${process.pid}.tmp`;
+    fs.writeFileSync(temp, JSON.stringify(manifest, null, 2), { mode: 0o600 });
+    fs.renameSync(temp, manifestPath);
+  };
+  const binPath = (id) => path.join(root, `${id}.bin`);
+
+  function publicItem(item) {
+    return {
+      id: item.id, version: item.version, size: item.size, sha256: item.sha256,
+      createdAt: item.createdAt, notes: item.notes || '',
+      current: item.id === load().currentId,
+    };
+  }
+
+  function currentItem(manifest = load()) {
+    return manifest.items.find((item) => item.id === manifest.currentId) || null;
+  }
+
+  return {
+    summary() {
+      const manifest = load();
+      const current = currentItem(manifest);
+      return {
+        otaUrl: manifest.otaUrl,
+        current: current ? publicItem(current) : null,
+        items: manifest.items.map(publicItem),
+      };
+    },
+    setOtaUrl(value) {
+      const manifest = load();
+      manifest.otaUrl = validateOtaUrl(value);
+      save(manifest);
+      return this.summary();
+    },
+    importBuffer({ version, bytes, notes = '' }) {
+      const name = String(version || '').trim();
+      if (!VERSION_RE.test(name)) throw new Error('版本号需为 1–32 位字母、数字、点或横线');
+      if (!Buffer.isBuffer(bytes) || bytes.length < 16 || bytes.length > MAX_BYTES) {
+        throw new Error('固件文件需在 16 字节到 8MB 之间');
+      }
+      const id = crypto.randomBytes(6).toString('hex');
+      const sha256 = crypto.createHash('sha256').update(bytes).digest('hex');
+      const file = binPath(id);
+      fs.writeFileSync(file, bytes, { mode: 0o600 });
+      const manifest = load();
+      manifest.items.unshift({
+        id, version: name, size: bytes.length, sha256,
+        createdAt: new Date().toISOString(), notes: String(notes || '').slice(0, 120),
+      });
+      manifest.currentId = id;
+      save(manifest);
+      return this.summary();
+    },
+    async syncFromUrl(fetchImpl = globalThis.fetch) {
+      const manifest = load();
+      const target = validateOtaUrl(manifest.otaUrl);
+      if (!target) throw new Error('请先填写固件地址');
+      if (!target.startsWith('http')) throw new Error('本机地址表示码得来这台桥接器取包，请先上传固件');
+      const response = await fetchImpl(target);
+      if (!response.ok) throw new Error(`拉取固件失败：HTTP ${response.status}`);
+      const bytes = Buffer.from(await response.arrayBuffer());
+      let version = 'remote';
+      try {
+        const leaf = decodeURIComponent(new URL(target).pathname.split('/').filter(Boolean).pop() || '');
+        version = leaf.replace(/\.bin$/i, '') || version;
+      } catch { /* 用默认版本名 */ }
+      if (!VERSION_RE.test(version)) version = `remote-${new Date().toISOString().slice(0, 10).replace(/-/g, '')}`;
+      return this.importBuffer({ version, bytes, notes: target });
+    },
+    remove(id) {
+      if (!ID_RE.test(id || '')) throw new Error('固件不存在');
+      const manifest = load();
+      const item = manifest.items.find((entry) => entry.id === id);
+      if (!item) throw new Error('固件不存在');
+      manifest.items = manifest.items.filter((entry) => entry.id !== id);
+      if (manifest.currentId === id) manifest.currentId = manifest.items[0]?.id || '';
+      save(manifest);
+      fs.rmSync(binPath(id), { force: true });
+      return this.summary();
+    },
+    setCurrent(id) {
+      if (!ID_RE.test(id || '')) throw new Error('固件不存在');
+      const manifest = load();
+      if (!manifest.items.some((entry) => entry.id === id)) throw new Error('固件不存在');
+      manifest.currentId = id;
+      save(manifest);
+      return this.summary();
+    },
+    deviceOffer() {
+      const manifest = load();
+      const current = currentItem(manifest);
+      if (!current) {
+        return { version: '', size: 0, sha256: '', url: manifest.otaUrl, path: '' };
+      }
+      return {
+        version: current.version,
+        size: current.size,
+        sha256: current.sha256,
+        url: manifest.otaUrl,
+        path: '/device/firmware/current',
+      };
+    },
+    readCurrent(offset, length) {
+      const item = currentItem();
+      if (!item) return null;
+      const file = binPath(item.id);
+      if (!fs.existsSync(file)) return null;
+      const start = Number.isInteger(offset) && offset >= 0 ? offset : 0;
+      const want = Number.isInteger(length) && length > 0 ? Math.min(length, 200 * 1024) : 128 * 1024;
+      const fd = fs.openSync(file, 'r');
+      try {
+        const buffer = Buffer.alloc(want);
+        const read = fs.readSync(fd, buffer, 0, want, start);
+        return { item, offset: start, bytes: buffer.subarray(0, read) };
+      } finally {
+        fs.closeSync(fd);
+      }
+    },
+  };
+}

package/src/installed.mjs

@@ -3,7 +3,8 @@ import path from 'node:path';
 import { randomUUID } from 'node:crypto';
 import { pathToFileURL } from 'node:url';
 import { BUILTIN_ROOT, packageRoots, packagesHome } from './config.mjs';
-import { loadConfiguredPlugins, validatePlugin } from './plugins/registry.mjs';
+import { validatePlugin } from './plugins/registry.mjs';
+import { reloadConfiguredPlugins } from './plugins/hot-reload.mjs';
 import { isPackageEntry, packageDirectories, readPackageSettings, writePackageSettings } from './plugin-package.mjs';
 
 const PLUGIN_ID = /^[a-z0-9][a-z0-9_-]{0,39}$/;
@@ -158,7 +159,7 @@ function writeConfig(config, mutate) {
 }
 
 async function reload(config) {
-  config.pluginsRuntime = await loadConfiguredPlugins(config);
+  await reloadConfiguredPlugins(config);
 }
 
 function covers(targetReal, candidateReal) {