@securecoms/agent-bridge 0.25.1 → 0.25.3

package/dist/bin.js

@@ -7436,10 +7436,10 @@ var HANDOFF = {
   balanced: "If the message needs files, tools, memory lookups, current data, or any work you cannot do instantly, say in one sentence that you are checking and end your reply with the exact token [[DEFER]] so the full agent answers next. For greetings, small talk, and anything you can answer completely yourself, answer completely and do NOT add the token.",
   self: "Answer yourself whenever you reasonably can. Only when the message clearly needs files, tools, or current data you cannot see, say in one sentence that you are checking and end your reply with the exact token [[DEFER]]."
 };
-function compileVoicePrompt(s) {
+function compileVoicePrompt(s, agentName) {
   const parts = [];
   const persona = s.persona.trim();
-  const displayName = s.displayName.trim();
+  const displayName = (agentName ?? "").trim();
   if (displayName && !persona.toLowerCase().includes(displayName.toLowerCase())) {
     parts.push(`You are ${displayName}.`);
   }
@@ -7491,6 +7491,9 @@ var Row = z.object({
   voice_id: z.string().nullable().optional(),
   pace: z.enum(PACES).default("normal"),
   display_name: z.string().max(40).default(""),
+  // Owner decision 2026-10-01 ("one name"). Lenient: a bad value is dropped
+  // (see identityName below), never a reason to reject the whole row.
+  identity_display_name: z.unknown().optional(),
   persona: z.string().max(600).default(""),
   warmth: z.enum(WARMTHS).default("friendly"),
   formality: z.enum(FORMALITIES).default("neutral"),
@@ -7501,8 +7504,14 @@ var Row = z.object({
   avoid_topics: z.array(z.string().max(80)).max(10).default([]),
   handoff: z.enum(HANDOFFS).default("balanced")
 }).passthrough();
+function identityName(v) {
+  if (typeof v !== "string") return void 0;
+  const name = v.trim();
+  return name && name.length <= 200 ? name : void 0;
+}
 function parseVoiceSettings(raw) {
   const r = Row.parse(raw);
+  const identityDisplayName = identityName(r.identity_display_name);
   return {
     version: r.version,
     voiceId: r.voice_id ?? null,
@@ -7516,7 +7525,8 @@ function parseVoiceSettings(raw) {
     quirks: r.quirks,
     greetingStyle: r.greeting_style,
     avoidTopics: r.avoid_topics,
-    handoff: r.handoff
+    handoff: r.handoff,
+    ...identityDisplayName ? { identityDisplayName } : {}
   };
 }
 function settingsToVoiceConfig(s, proxy) {
@@ -7577,10 +7587,11 @@ function parseVoiceConfig(raw, env) {
     }
   };
 }
-function systemPrompt(p, settings) {
+function systemPrompt(p, settings, agentName) {
   const core = p.persona.trim().endsWith(CONTINUITY_CLAUSE) ? p.persona.trim().slice(0, -CONTINUITY_CLAUSE.length).trim() : p.persona.trim();
   return compileVoicePrompt(
-    settings ?? { ...DEFAULT_VOICE_SETTINGS, displayName: p.displayName ?? "", persona: core, quirks: p.quirks }
+    settings ?? { ...DEFAULT_VOICE_SETTINGS, persona: core, quirks: p.quirks },
+    agentName
   );
 }
 
@@ -28350,7 +28361,7 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
 }
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? 4e3;
-  const sp = systemPrompt(args2.persona, args2.settings);
+  const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
   const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
@@ -28583,6 +28594,13 @@ function assertManagedName(name) {
   if (!name || name.includes("/") || name.includes("\\") || name === "." || name === ".." || name !== basename2(name)) {
     throw new Error(`refusing managed config file name ${JSON.stringify(name)}: not a plain filename`);
   }
+  if (isLocalOnlyName(name)) {
+    throw new Error(`refusing managed config file name ${JSON.stringify(name)}: reserved for a local writer`);
+  }
+}
+function isLocalOnlyName(name) {
+  const n = name.toLowerCase().replace(/[. ]+$/, "");
+  return n === "llm.key" || n.startsWith("llm.key.") || n === "local-config.json";
 }
 function atomicWrite(path, body, deps) {
   const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
@@ -29243,6 +29261,12 @@ var BridgeAgent = class _BridgeAgent {
    * `roomDisplayName`. Kept across a later failed refresh, so a transient
    * members-fetch error does not make the agent deaf to its own name; a
    * successful refresh after a rename replaces it.
+   *
+   * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+   * ("You are <name>."). A voice settings fetch that carries
+   * `identity_display_name` writes it too (the backend pings
+   * `voice_settings_changed` on a rename), so the latest observation from
+   * either source wins; both read the same identity column.
    */
   lastOwnDisplayName;
   /**
@@ -29646,6 +29670,7 @@ var BridgeAgent = class _BridgeAgent {
       const res = await this.fetchBounded("voice_settings", "read", url, { headers: { authorization: `Bearer ${this.cfg.apiKey}` } });
       if (!res.ok) throw new Error(`voice-settings ${res.status}`);
       const s = parseVoiceSettings(await res.json());
+      if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
@@ -31543,7 +31568,8 @@ var BridgeAgent = class _BridgeAgent {
         memory,
         speaker,
         text,
-        settings: this.voiceSettings ?? void 0
+        settings: this.voiceSettings ?? void 0,
+        agentName: this.voiceAgentName()
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const { reply, defer } = splitFastReply(await this.fastLlm.complete(messages), 200, maxSentences);
@@ -32850,6 +32876,16 @@ var BridgeAgent = class _BridgeAgent {
   ownRoomDisplayName() {
     return this.lastOwnDisplayName;
   }
+  /**
+   * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+   * The agent's CURRENT identity display name (roster or voice settings
+   * fetch, whichever saw it last); before either has, the credential's
+   * agent_name (the same identity name as of credential issue). Never the
+   * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+   */
+  voiceAgentName() {
+    return this.lastOwnDisplayName ?? this.cfg.agentName;
+  }
   /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
   loopSenderIsAgent(channelId, senderId, envelopeSaysAgent, relayedHumanTurn) {
     if (relayedHumanTurn) return false;

package/dist/bridge-agent.d.ts

@@ -567,6 +567,12 @@ export declare class BridgeAgent {
      * `roomDisplayName`. Kept across a later failed refresh, so a transient
      * members-fetch error does not make the agent deaf to its own name; a
      * successful refresh after a rename replaces it.
+     *
+     * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+     * ("You are <name>."). A voice settings fetch that carries
+     * `identity_display_name` writes it too (the backend pings
+     * `voice_settings_changed` on a rename), so the latest observation from
+     * either source wins; both read the same identity column.
      */
     private lastOwnDisplayName;
     /**
@@ -2001,6 +2007,14 @@ export declare class BridgeAgent {
      * the identity id.
      */
     private ownRoomDisplayName;
+    /**
+     * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+     * The agent's CURRENT identity display name (roster or voice settings
+     * fetch, whichever saw it last); before either has, the credential's
+     * agent_name (the same identity name as of credential issue). Never the
+     * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+     */
+    private voiceAgentName;
     /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
     private loopSenderIsAgent;
     private noteAgentTurnSuppressed;

package/dist/index.js

@@ -28041,10 +28041,10 @@ var HANDOFF = {
   balanced: "If the message needs files, tools, memory lookups, current data, or any work you cannot do instantly, say in one sentence that you are checking and end your reply with the exact token [[DEFER]] so the full agent answers next. For greetings, small talk, and anything you can answer completely yourself, answer completely and do NOT add the token.",
   self: "Answer yourself whenever you reasonably can. Only when the message clearly needs files, tools, or current data you cannot see, say in one sentence that you are checking and end your reply with the exact token [[DEFER]]."
 };
-function compileVoicePrompt(s) {
+function compileVoicePrompt(s, agentName) {
   const parts = [];
   const persona = s.persona.trim();
-  const displayName = s.displayName.trim();
+  const displayName = (agentName ?? "").trim();
   if (displayName && !persona.toLowerCase().includes(displayName.toLowerCase())) {
     parts.push(`You are ${displayName}.`);
   }
@@ -28096,6 +28096,9 @@ var Row = z.object({
   voice_id: z.string().nullable().optional(),
   pace: z.enum(PACES).default("normal"),
   display_name: z.string().max(40).default(""),
+  // Owner decision 2026-10-01 ("one name"). Lenient: a bad value is dropped
+  // (see identityName below), never a reason to reject the whole row.
+  identity_display_name: z.unknown().optional(),
   persona: z.string().max(600).default(""),
   warmth: z.enum(WARMTHS).default("friendly"),
   formality: z.enum(FORMALITIES).default("neutral"),
@@ -28106,8 +28109,14 @@ var Row = z.object({
   avoid_topics: z.array(z.string().max(80)).max(10).default([]),
   handoff: z.enum(HANDOFFS).default("balanced")
 }).passthrough();
+function identityName(v) {
+  if (typeof v !== "string") return void 0;
+  const name = v.trim();
+  return name && name.length <= 200 ? name : void 0;
+}
 function parseVoiceSettings(raw) {
   const r = Row.parse(raw);
+  const identityDisplayName = identityName(r.identity_display_name);
   return {
     version: r.version,
     voiceId: r.voice_id ?? null,
@@ -28121,7 +28130,8 @@ function parseVoiceSettings(raw) {
     quirks: r.quirks,
     greetingStyle: r.greeting_style,
     avoidTopics: r.avoid_topics,
-    handoff: r.handoff
+    handoff: r.handoff,
+    ...identityDisplayName ? { identityDisplayName } : {}
   };
 }
 function settingsToVoiceConfig(s, proxy) {
@@ -28182,10 +28192,11 @@ function parseVoiceConfig(raw, env) {
     }
   };
 }
-function systemPrompt(p, settings) {
+function systemPrompt(p, settings, agentName) {
   const core = p.persona.trim().endsWith(CONTINUITY_CLAUSE) ? p.persona.trim().slice(0, -CONTINUITY_CLAUSE.length).trim() : p.persona.trim();
   return compileVoicePrompt(
-    settings ?? { ...DEFAULT_VOICE_SETTINGS, displayName: p.displayName ?? "", persona: core, quirks: p.quirks }
+    settings ?? { ...DEFAULT_VOICE_SETTINGS, persona: core, quirks: p.quirks },
+    agentName
   );
 }
 
@@ -28199,7 +28210,7 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
 }
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? 4e3;
-  const sp = systemPrompt(args2.persona, args2.settings);
+  const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
   const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
@@ -28432,6 +28443,13 @@ function assertManagedName(name) {
   if (!name || name.includes("/") || name.includes("\\") || name === "." || name === ".." || name !== basename2(name)) {
     throw new Error(`refusing managed config file name ${JSON.stringify(name)}: not a plain filename`);
   }
+  if (isLocalOnlyName(name)) {
+    throw new Error(`refusing managed config file name ${JSON.stringify(name)}: reserved for a local writer`);
+  }
+}
+function isLocalOnlyName(name) {
+  const n = name.toLowerCase().replace(/[. ]+$/, "");
+  return n === "llm.key" || n.startsWith("llm.key.") || n === "local-config.json";
 }
 function atomicWrite(path, body, deps) {
   const tmp = `${path}.${process.pid}.${randomUUID()}.tmp`;
@@ -29092,6 +29110,12 @@ var BridgeAgent = class _BridgeAgent {
    * `roomDisplayName`. Kept across a later failed refresh, so a transient
    * members-fetch error does not make the agent deaf to its own name; a
    * successful refresh after a rename replaces it.
+   *
+   * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+   * ("You are <name>."). A voice settings fetch that carries
+   * `identity_display_name` writes it too (the backend pings
+   * `voice_settings_changed` on a rename), so the latest observation from
+   * either source wins; both read the same identity column.
    */
   lastOwnDisplayName;
   /**
@@ -29495,6 +29519,7 @@ var BridgeAgent = class _BridgeAgent {
       const res = await this.fetchBounded("voice_settings", "read", url, { headers: { authorization: `Bearer ${this.cfg.apiKey}` } });
       if (!res.ok) throw new Error(`voice-settings ${res.status}`);
       const s = parseVoiceSettings(await res.json());
+      if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
@@ -31392,7 +31417,8 @@ var BridgeAgent = class _BridgeAgent {
         memory,
         speaker,
         text,
-        settings: this.voiceSettings ?? void 0
+        settings: this.voiceSettings ?? void 0,
+        agentName: this.voiceAgentName()
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const { reply, defer } = splitFastReply(await this.fastLlm.complete(messages), 200, maxSentences);
@@ -32699,6 +32725,16 @@ var BridgeAgent = class _BridgeAgent {
   ownRoomDisplayName() {
     return this.lastOwnDisplayName;
   }
+  /**
+   * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+   * The agent's CURRENT identity display name (roster or voice settings
+   * fetch, whichever saw it last); before either has, the credential's
+   * agent_name (the same identity name as of credential issue). Never the
+   * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+   */
+  voiceAgentName() {
+    return this.lastOwnDisplayName ?? this.cfg.agentName;
+  }
   /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
   loopSenderIsAgent(channelId, senderId, envelopeSaysAgent, relayedHumanTurn) {
     if (relayedHumanTurn) return false;

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.25.1";
+export declare const BRIDGE_VERSION = "0.25.3";

package/dist/voice/fast-prompt.d.ts

@@ -35,6 +35,9 @@ export declare function buildFastMessages(args: {
      *  from these backend-loaded dials (compileVoicePrompt) instead of the
      *  credential file's persona block. */
     settings?: VoiceSettings;
+    /** The agent's identity display name ("one name", 2026-10-01): the only
+     *  source of the prompt's "You are <name>." line. */
+    agentName?: string;
 }): ChatMessage[];
 /** The fast model appends this when the full agent must answer next. */
 export declare const DEFER_TOKEN = "[[DEFER]]";

package/dist/voice/persona.d.ts

@@ -1,5 +1,11 @@
 import { type VoiceSettings } from "./settings.js";
 export declare const CONTINUITY_CLAUSE: string;
+/**
+ * `displayName` is legacy (the credential file's `voice.persona.display_name`,
+ * or the backend's voice settings `display_name`). It is still parsed so old
+ * credentials and payloads load, but the prompt never reads it: the agent's
+ * name comes from its identity display name (owner decision 2026-10-01, "one name").
+ */
 export interface VoicePersona {
     displayName?: string;
     persona: string;
@@ -20,4 +26,4 @@ export interface VoiceConfig {
     settings?: VoiceSettings;
 }
 export declare function parseVoiceConfig(raw: unknown, env: Record<string, string | undefined>): VoiceConfig | undefined;
-export declare function systemPrompt(p: VoicePersona, settings?: VoiceSettings): string;
+export declare function systemPrompt(p: VoicePersona, settings?: VoiceSettings, agentName?: string): string;

package/dist/voice/prompt-compiler.d.ts

@@ -1,4 +1,11 @@
 import type { VoiceSettings } from "./settings.js";
-export declare function compileVoicePrompt(s: VoiceSettings): string;
+/**
+ * `agentName` is the agent's identity display name (`ConnectIdentity.display_name`,
+ * the one name shown in rosters and the Directory). Owner decision 2026-10-01
+ * ("one name"): the voice settings `display_name` (`s.displayName`) is a legacy
+ * field that is still parsed for compatibility but never read here, so a
+ * rename reaches calls too.
+ */
+export declare function compileVoicePrompt(s: VoiceSettings, agentName?: string): string;
 export declare const VOICE_CALL_START_MARKER = "[voice call started]";
 export declare function greetingTurnFor(s: VoiceSettings, callerName?: string): string;

package/dist/voice/settings.d.ts

@@ -10,7 +10,13 @@ export interface VoiceSettings {
     version: number;
     voiceId: string | null;
     pace: (typeof PACES)[number];
+    /** Legacy voice-only name (backend `display_name`). Parsed for compatibility
+     *  with older backends/web clients, never used for the prompt ("one name",
+     *  2026-10-01). */
     displayName: string;
+    /** The agent's identity display name at fetch time (backend
+     *  `identity_display_name`), when the backend sends it. */
+    identityDisplayName?: string;
     persona: string;
     warmth: (typeof WARMTHS)[number];
     formality: (typeof FORMALITIES)[number];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.25.1",
+  "version": "0.25.3",
   "type": "module",
   "engines": {
     "node": ">=22.5.0"