@securecoms/agent-bridge 0.25.2 → 0.25.4

package/dist/bin.js

@@ -7436,10 +7436,10 @@ var HANDOFF = {
   balanced: "If the message needs files, tools, memory lookups, current data, or any work you cannot do instantly, say in one sentence that you are checking and end your reply with the exact token [[DEFER]] so the full agent answers next. For greetings, small talk, and anything you can answer completely yourself, answer completely and do NOT add the token.",
   self: "Answer yourself whenever you reasonably can. Only when the message clearly needs files, tools, or current data you cannot see, say in one sentence that you are checking and end your reply with the exact token [[DEFER]]."
 };
-function compileVoicePrompt(s) {
+function compileVoicePrompt(s, agentName) {
   const parts = [];
   const persona = s.persona.trim();
-  const displayName = s.displayName.trim();
+  const displayName = (agentName ?? "").trim();
   if (displayName && !persona.toLowerCase().includes(displayName.toLowerCase())) {
     parts.push(`You are ${displayName}.`);
   }
@@ -7491,6 +7491,9 @@ var Row = z.object({
   voice_id: z.string().nullable().optional(),
   pace: z.enum(PACES).default("normal"),
   display_name: z.string().max(40).default(""),
+  // Owner decision 2026-10-01 ("one name"). Lenient: a bad value is dropped
+  // (see identityName below), never a reason to reject the whole row.
+  identity_display_name: z.unknown().optional(),
   persona: z.string().max(600).default(""),
   warmth: z.enum(WARMTHS).default("friendly"),
   formality: z.enum(FORMALITIES).default("neutral"),
@@ -7501,8 +7504,14 @@ var Row = z.object({
   avoid_topics: z.array(z.string().max(80)).max(10).default([]),
   handoff: z.enum(HANDOFFS).default("balanced")
 }).passthrough();
+function identityName(v) {
+  if (typeof v !== "string") return void 0;
+  const name = v.trim();
+  return name && name.length <= 200 ? name : void 0;
+}
 function parseVoiceSettings(raw) {
   const r = Row.parse(raw);
+  const identityDisplayName = identityName(r.identity_display_name);
   return {
     version: r.version,
     voiceId: r.voice_id ?? null,
@@ -7516,7 +7525,8 @@ function parseVoiceSettings(raw) {
     quirks: r.quirks,
     greetingStyle: r.greeting_style,
     avoidTopics: r.avoid_topics,
-    handoff: r.handoff
+    handoff: r.handoff,
+    ...identityDisplayName ? { identityDisplayName } : {}
   };
 }
 function settingsToVoiceConfig(s, proxy) {
@@ -7577,10 +7587,11 @@ function parseVoiceConfig(raw, env) {
     }
   };
 }
-function systemPrompt(p, settings) {
+function systemPrompt(p, settings, agentName) {
   const core = p.persona.trim().endsWith(CONTINUITY_CLAUSE) ? p.persona.trim().slice(0, -CONTINUITY_CLAUSE.length).trim() : p.persona.trim();
   return compileVoicePrompt(
-    settings ?? { ...DEFAULT_VOICE_SETTINGS, displayName: p.displayName ?? "", persona: core, quirks: p.quirks }
+    settings ?? { ...DEFAULT_VOICE_SETTINGS, persona: core, quirks: p.quirks },
+    agentName
   );
 }
 
@@ -28350,7 +28361,7 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
 }
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? 4e3;
-  const sp = systemPrompt(args2.persona, args2.settings);
+  const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
   const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
@@ -28827,6 +28838,70 @@ function pruneManagedMemory(home, identityId, hashes, deps = REAL_FS) {
 
 // src/bridge-agent.ts
 import { homedir as homedir2 } from "node:os";
+
+// src/status-gate.ts
+var STATUS_WORKING_DELAY_MS = 3e3;
+var StatusGate = class {
+  constructor(publish, opts = {}) {
+    this.publish = publish;
+    this.opts = opts;
+  }
+  entries = /* @__PURE__ */ new Map();
+  chains = /* @__PURE__ */ new Map();
+  /** The agent reported a status. Resolves once any publish it starts has settled. */
+  async report(channelId, state, detail) {
+    if (state === "working") {
+      this.holdWorking(channelId, detail);
+      return;
+    }
+    const entry = this.entries.get(channelId);
+    this.entries.delete(channelId);
+    if (entry?.timer) clearTimeout(entry.timer);
+    if (state === "idle" && entry && !entry.published) return;
+    await this.enqueue(channelId, state, detail);
+  }
+  /** A reply body is about to publish on the channel. */
+  replyStarted(channelId) {
+    const entry = this.entries.get(channelId);
+    if (!entry?.timer) return;
+    clearTimeout(entry.timer);
+    entry.timer = null;
+  }
+  /** Drop every pending "working" (bridge shutdown). */
+  close() {
+    for (const entry of this.entries.values()) if (entry.timer) clearTimeout(entry.timer);
+    this.entries.clear();
+  }
+  holdWorking(channelId, detail) {
+    const existing = this.entries.get(channelId);
+    if (existing && (existing.timer || existing.published)) return;
+    const entry = { timer: null, published: false };
+    this.entries.set(channelId, entry);
+    entry.timer = setTimeout(() => {
+      entry.timer = null;
+      if (this.entries.get(channelId) !== entry) return;
+      entry.published = true;
+      this.enqueue(channelId, "working", detail).catch(() => {
+      });
+    }, this.opts.delayMs ?? STATUS_WORKING_DELAY_MS);
+    entry.timer.unref?.();
+  }
+  /** Publishes in order per channel; rejects with the publish error. */
+  enqueue(channelId, state, detail) {
+    const prev = this.chains.get(channelId) ?? Promise.resolve();
+    const run = prev.then(() => this.publish(channelId, state, detail));
+    const settled = run.catch((err) => {
+      this.opts.onError?.(state, err);
+    });
+    this.chains.set(channelId, settled);
+    void settled.then(() => {
+      if (this.chains.get(channelId) === settled) this.chains.delete(channelId);
+    });
+    return run;
+  }
+};
+
+// src/bridge-agent.ts
 function logSendSupersededAdoption(kind) {
   switch (kind) {
     case "adopted":
@@ -29250,8 +29325,23 @@ var BridgeAgent = class _BridgeAgent {
    * `roomDisplayName`. Kept across a later failed refresh, so a transient
    * members-fetch error does not make the agent deaf to its own name; a
    * successful refresh after a rename replaces it.
+   *
+   * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+   * ("You are <name>."). A voice settings fetch that carries
+   * `identity_display_name` writes it too (the backend pings
+   * `voice_settings_changed` on a rename), so the latest observation from
+   * either source wins; both read the same identity column.
    */
   lastOwnDisplayName;
+  /**
+   * Thinking-indicator gate (owner rule, 2026-10-01): the agent-facing status
+   * routes go through it, so a reply inside 3 s raises no "thinking..." strip.
+   * See status-gate.ts.
+   */
+  statusGate = new StatusGate(
+    (channelId, state, detail) => this.reportStatus(channelId, state, detail),
+    { onError: (state) => writeServiceLog("warn", "status.publish_failed", { working: state === "working", idle: state === "idle" }) }
+  );
   /**
    * Task 8 (owner-attested Reset Secure Session): per-channel STRUCTURAL owner
    * cache, fed by resolveAndPinOwner() on every roster refresh and consumed by
@@ -29653,6 +29743,7 @@ var BridgeAgent = class _BridgeAgent {
       const res = await this.fetchBounded("voice_settings", "read", url, { headers: { authorization: `Bearer ${this.cfg.apiKey}` } });
       if (!res.ok) throw new Error(`voice-settings ${res.status}`);
       const s = parseVoiceSettings(await res.json());
+      if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
@@ -30782,6 +30873,7 @@ var BridgeAgent = class _BridgeAgent {
    */
   async publishBody(channelId, body, id, onEnvelope) {
     this.enforceBodyRateFloor(channelId, body);
+    this.statusGate.replyStarted(channelId);
     const joined = await this.reconcileJoin(channelId);
     if (!joined) throw new ChannelPendingError(channelId);
     const sendStart = performance.now();
@@ -31550,7 +31642,8 @@ var BridgeAgent = class _BridgeAgent {
         memory,
         speaker,
         text,
-        settings: this.voiceSettings ?? void 0
+        settings: this.voiceSettings ?? void 0,
+        agentName: this.voiceAgentName()
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const { reply, defer } = splitFastReply(await this.fastLlm.complete(messages), 200, maxSentences);
@@ -31894,6 +31987,14 @@ var BridgeAgent = class _BridgeAgent {
     if (TRACE) writeServiceLog("debug", "identity.owner_pin_resolved");
     return { identityId: cached.identityId, publicKeyHex: pin.publicKeyHex };
   }
+  /**
+   * The agent-facing status entry (HTTP /v1/status, WS "status"): "working"
+   * is held 3 s and dropped if the turn ends or a reply starts first. See
+   * status-gate.ts. Resolves at once for "working".
+   */
+  async reportStatusGated(channelId, state, detail) {
+    await this.statusGate.report(channelId, state, detail);
+  }
   async reportStatus(channelId, state, detail) {
     const joined = await this.reconcileJoin(channelId);
     if (!joined) throw new ChannelPendingError(channelId);
@@ -32857,6 +32958,16 @@ var BridgeAgent = class _BridgeAgent {
   ownRoomDisplayName() {
     return this.lastOwnDisplayName;
   }
+  /**
+   * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+   * The agent's CURRENT identity display name (roster or voice settings
+   * fetch, whichever saw it last); before either has, the credential's
+   * agent_name (the same identity name as of credential issue). Never the
+   * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+   */
+  voiceAgentName() {
+    return this.lastOwnDisplayName ?? this.cfg.agentName;
+  }
   /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
   loopSenderIsAgent(channelId, senderId, envelopeSaysAgent, relayedHumanTurn) {
     if (relayedHumanTurn) return false;
@@ -33188,6 +33299,7 @@ var BridgeAgent = class _BridgeAgent {
   }
   async close() {
     this.closingDown = true;
+    this.statusGate.close();
     for (const t of this.pauseRecheckTimers.values()) clearTimeout(t);
     this.pauseRecheckTimers.clear();
     for (const t of this.supersedeRecheckTimers.values()) clearTimeout(t);
@@ -33534,7 +33646,7 @@ function createHttpServer(agent, opts) {
       if (method === "POST" && path === "/v1/status") {
         const parsed = statusSchema.safeParse(JSON.parse(await readBody(req, OTHER_CAP)));
         if (!parsed.success) return jsonError(res, "invalid_request", parsed.error.issues);
-        await agent.reportStatus(parsed.data.channel_id, parsed.data.state, parsed.data.detail);
+        await agent.reportStatusGated(parsed.data.channel_id, parsed.data.state, parsed.data.detail);
         return json(res, 200, { ok: true });
       }
       if (method === "POST" && path === "/v1/memory/record") {
@@ -33904,7 +34016,7 @@ async function handleInbound(sock, agent, data, inflight, flush, session) {
     }
     const detail = typeof m.detail === "string" ? m.detail : void 0;
     try {
-      await agent.reportStatus(m.channel_id, m.state, detail);
+      await agent.reportStatusGated(m.channel_id, m.state, detail);
       sendJson(sock, { type: "ok" });
     } catch (e) {
       if (e instanceof ChannelPendingError) {

package/dist/bridge-agent.d.ts

@@ -567,8 +567,20 @@ export declare class BridgeAgent {
      * `roomDisplayName`. Kept across a later failed refresh, so a transient
      * members-fetch error does not make the agent deaf to its own name; a
      * successful refresh after a rename replaces it.
+     *
+     * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+     * ("You are <name>."). A voice settings fetch that carries
+     * `identity_display_name` writes it too (the backend pings
+     * `voice_settings_changed` on a rename), so the latest observation from
+     * either source wins; both read the same identity column.
      */
     private lastOwnDisplayName;
+    /**
+     * Thinking-indicator gate (owner rule, 2026-10-01): the agent-facing status
+     * routes go through it, so a reply inside 3 s raises no "thinking..." strip.
+     * See status-gate.ts.
+     */
+    private readonly statusGate;
     /**
      * Task 8 (owner-attested Reset Secure Session): per-channel STRUCTURAL owner
      * cache, fed by resolveAndPinOwner() on every roster refresh and consumed by
@@ -1813,6 +1825,12 @@ export declare class BridgeAgent {
      * never trusted on its own, it is always reconfirmed against the store.
      */
     private resolvePinnedOwnerHook;
+    /**
+     * The agent-facing status entry (HTTP /v1/status, WS "status"): "working"
+     * is held 3 s and dropped if the turn ends or a reply starts first. See
+     * status-gate.ts. Resolves at once for "working".
+     */
+    reportStatusGated(channelId: string, state: "idle" | "working" | "stalled" | "error", detail?: string): Promise<void>;
     reportStatus(channelId: string, state: "idle" | "working" | "stalled" | "error", detail?: string): Promise<void>;
     /** `runId` must exist and not have settled yet — settle() is terminal. */
     private requireActionRun;
@@ -2001,6 +2019,14 @@ export declare class BridgeAgent {
      * the identity id.
      */
     private ownRoomDisplayName;
+    /**
+     * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+     * The agent's CURRENT identity display name (roster or voice settings
+     * fetch, whichever saw it last); before either has, the credential's
+     * agent_name (the same identity name as of credential issue). Never the
+     * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+     */
+    private voiceAgentName;
     /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
     private loopSenderIsAgent;
     private noteAgentTurnSuppressed;

package/dist/index.js

@@ -28041,10 +28041,10 @@ var HANDOFF = {
   balanced: "If the message needs files, tools, memory lookups, current data, or any work you cannot do instantly, say in one sentence that you are checking and end your reply with the exact token [[DEFER]] so the full agent answers next. For greetings, small talk, and anything you can answer completely yourself, answer completely and do NOT add the token.",
   self: "Answer yourself whenever you reasonably can. Only when the message clearly needs files, tools, or current data you cannot see, say in one sentence that you are checking and end your reply with the exact token [[DEFER]]."
 };
-function compileVoicePrompt(s) {
+function compileVoicePrompt(s, agentName) {
   const parts = [];
   const persona = s.persona.trim();
-  const displayName = s.displayName.trim();
+  const displayName = (agentName ?? "").trim();
   if (displayName && !persona.toLowerCase().includes(displayName.toLowerCase())) {
     parts.push(`You are ${displayName}.`);
   }
@@ -28096,6 +28096,9 @@ var Row = z.object({
   voice_id: z.string().nullable().optional(),
   pace: z.enum(PACES).default("normal"),
   display_name: z.string().max(40).default(""),
+  // Owner decision 2026-10-01 ("one name"). Lenient: a bad value is dropped
+  // (see identityName below), never a reason to reject the whole row.
+  identity_display_name: z.unknown().optional(),
   persona: z.string().max(600).default(""),
   warmth: z.enum(WARMTHS).default("friendly"),
   formality: z.enum(FORMALITIES).default("neutral"),
@@ -28106,8 +28109,14 @@ var Row = z.object({
   avoid_topics: z.array(z.string().max(80)).max(10).default([]),
   handoff: z.enum(HANDOFFS).default("balanced")
 }).passthrough();
+function identityName(v) {
+  if (typeof v !== "string") return void 0;
+  const name = v.trim();
+  return name && name.length <= 200 ? name : void 0;
+}
 function parseVoiceSettings(raw) {
   const r = Row.parse(raw);
+  const identityDisplayName = identityName(r.identity_display_name);
   return {
     version: r.version,
     voiceId: r.voice_id ?? null,
@@ -28121,7 +28130,8 @@ function parseVoiceSettings(raw) {
     quirks: r.quirks,
     greetingStyle: r.greeting_style,
     avoidTopics: r.avoid_topics,
-    handoff: r.handoff
+    handoff: r.handoff,
+    ...identityDisplayName ? { identityDisplayName } : {}
   };
 }
 function settingsToVoiceConfig(s, proxy) {
@@ -28182,10 +28192,11 @@ function parseVoiceConfig(raw, env) {
     }
   };
 }
-function systemPrompt(p, settings) {
+function systemPrompt(p, settings, agentName) {
   const core = p.persona.trim().endsWith(CONTINUITY_CLAUSE) ? p.persona.trim().slice(0, -CONTINUITY_CLAUSE.length).trim() : p.persona.trim();
   return compileVoicePrompt(
-    settings ?? { ...DEFAULT_VOICE_SETTINGS, displayName: p.displayName ?? "", persona: core, quirks: p.quirks }
+    settings ?? { ...DEFAULT_VOICE_SETTINGS, persona: core, quirks: p.quirks },
+    agentName
   );
 }
 
@@ -28199,7 +28210,7 @@ function clampContent(content, max = MAX_MESSAGE_CHARS) {
 }
 function buildFastMessages(args2) {
   const cap = args2.charCap ?? 4e3;
-  const sp = systemPrompt(args2.persona, args2.settings);
+  const sp = systemPrompt(args2.persona, args2.settings, args2.agentName);
   const head = sp.slice(0, sp.length - CONTINUITY_CLAUSE.length).trimEnd();
   const system = `${head} ${args2.guidance.trim()} ${CONTINUITY_CLAUSE}`;
   const recent = args2.memory.recent.map((t) => ({
@@ -28676,6 +28687,70 @@ function pruneManagedMemory(home, identityId, hashes, deps = REAL_FS) {
 
 // src/bridge-agent.ts
 import { homedir as homedir2 } from "node:os";
+
+// src/status-gate.ts
+var STATUS_WORKING_DELAY_MS = 3e3;
+var StatusGate = class {
+  constructor(publish, opts = {}) {
+    this.publish = publish;
+    this.opts = opts;
+  }
+  entries = /* @__PURE__ */ new Map();
+  chains = /* @__PURE__ */ new Map();
+  /** The agent reported a status. Resolves once any publish it starts has settled. */
+  async report(channelId, state, detail) {
+    if (state === "working") {
+      this.holdWorking(channelId, detail);
+      return;
+    }
+    const entry = this.entries.get(channelId);
+    this.entries.delete(channelId);
+    if (entry?.timer) clearTimeout(entry.timer);
+    if (state === "idle" && entry && !entry.published) return;
+    await this.enqueue(channelId, state, detail);
+  }
+  /** A reply body is about to publish on the channel. */
+  replyStarted(channelId) {
+    const entry = this.entries.get(channelId);
+    if (!entry?.timer) return;
+    clearTimeout(entry.timer);
+    entry.timer = null;
+  }
+  /** Drop every pending "working" (bridge shutdown). */
+  close() {
+    for (const entry of this.entries.values()) if (entry.timer) clearTimeout(entry.timer);
+    this.entries.clear();
+  }
+  holdWorking(channelId, detail) {
+    const existing = this.entries.get(channelId);
+    if (existing && (existing.timer || existing.published)) return;
+    const entry = { timer: null, published: false };
+    this.entries.set(channelId, entry);
+    entry.timer = setTimeout(() => {
+      entry.timer = null;
+      if (this.entries.get(channelId) !== entry) return;
+      entry.published = true;
+      this.enqueue(channelId, "working", detail).catch(() => {
+      });
+    }, this.opts.delayMs ?? STATUS_WORKING_DELAY_MS);
+    entry.timer.unref?.();
+  }
+  /** Publishes in order per channel; rejects with the publish error. */
+  enqueue(channelId, state, detail) {
+    const prev = this.chains.get(channelId) ?? Promise.resolve();
+    const run = prev.then(() => this.publish(channelId, state, detail));
+    const settled = run.catch((err) => {
+      this.opts.onError?.(state, err);
+    });
+    this.chains.set(channelId, settled);
+    void settled.then(() => {
+      if (this.chains.get(channelId) === settled) this.chains.delete(channelId);
+    });
+    return run;
+  }
+};
+
+// src/bridge-agent.ts
 function logSendSupersededAdoption(kind) {
   switch (kind) {
     case "adopted":
@@ -29099,8 +29174,23 @@ var BridgeAgent = class _BridgeAgent {
    * `roomDisplayName`. Kept across a later failed refresh, so a transient
    * members-fetch error does not make the agent deaf to its own name; a
    * successful refresh after a rename replaces it.
+   *
+   * 2026-10-01 ("one name"): also the name the voice fast path speaks as
+   * ("You are <name>."). A voice settings fetch that carries
+   * `identity_display_name` writes it too (the backend pings
+   * `voice_settings_changed` on a rename), so the latest observation from
+   * either source wins; both read the same identity column.
    */
   lastOwnDisplayName;
+  /**
+   * Thinking-indicator gate (owner rule, 2026-10-01): the agent-facing status
+   * routes go through it, so a reply inside 3 s raises no "thinking..." strip.
+   * See status-gate.ts.
+   */
+  statusGate = new StatusGate(
+    (channelId, state, detail) => this.reportStatus(channelId, state, detail),
+    { onError: (state) => writeServiceLog2("warn", "status.publish_failed", { working: state === "working", idle: state === "idle" }) }
+  );
   /**
    * Task 8 (owner-attested Reset Secure Session): per-channel STRUCTURAL owner
    * cache, fed by resolveAndPinOwner() on every roster refresh and consumed by
@@ -29502,6 +29592,7 @@ var BridgeAgent = class _BridgeAgent {
       const res = await this.fetchBounded("voice_settings", "read", url, { headers: { authorization: `Bearer ${this.cfg.apiKey}` } });
       if (!res.ok) throw new Error(`voice-settings ${res.status}`);
       const s = parseVoiceSettings(await res.json());
+      if (s.identityDisplayName) this.lastOwnDisplayName = s.identityDisplayName;
       const proxy = settingsToVoiceConfig(s, { baseUrl: this.cfg.apiBase, apiKey: this.cfg.apiKey });
       if (s.version === 0 && this.fileVoiceConfig) {
         const merged = {
@@ -30631,6 +30722,7 @@ var BridgeAgent = class _BridgeAgent {
    */
   async publishBody(channelId, body, id, onEnvelope) {
     this.enforceBodyRateFloor(channelId, body);
+    this.statusGate.replyStarted(channelId);
     const joined = await this.reconcileJoin(channelId);
     if (!joined) throw new ChannelPendingError(channelId);
     const sendStart = performance.now();
@@ -31399,7 +31491,8 @@ var BridgeAgent = class _BridgeAgent {
         memory,
         speaker,
         text,
-        settings: this.voiceSettings ?? void 0
+        settings: this.voiceSettings ?? void 0,
+        agentName: this.voiceAgentName()
       });
       const maxSentences = this.voiceSettings?.brevity === "one" ? 1 : 2;
       const { reply, defer } = splitFastReply(await this.fastLlm.complete(messages), 200, maxSentences);
@@ -31743,6 +31836,14 @@ var BridgeAgent = class _BridgeAgent {
     if (TRACE) writeServiceLog2("debug", "identity.owner_pin_resolved");
     return { identityId: cached.identityId, publicKeyHex: pin.publicKeyHex };
   }
+  /**
+   * The agent-facing status entry (HTTP /v1/status, WS "status"): "working"
+   * is held 3 s and dropped if the turn ends or a reply starts first. See
+   * status-gate.ts. Resolves at once for "working".
+   */
+  async reportStatusGated(channelId, state, detail) {
+    await this.statusGate.report(channelId, state, detail);
+  }
   async reportStatus(channelId, state, detail) {
     const joined = await this.reconcileJoin(channelId);
     if (!joined) throw new ChannelPendingError(channelId);
@@ -32706,6 +32807,16 @@ var BridgeAgent = class _BridgeAgent {
   ownRoomDisplayName() {
     return this.lastOwnDisplayName;
   }
+  /**
+   * 2026-10-01 (owner decision, "one name"): the name the voice prompt uses.
+   * The agent's CURRENT identity display name (roster or voice settings
+   * fetch, whichever saw it last); before either has, the credential's
+   * agent_name (the same identity name as of credential issue). Never the
+   * legacy voice settings `display_name` or the file `voice.persona.display_name`.
+   */
+  voiceAgentName() {
+    return this.lastOwnDisplayName ?? this.cfg.agentName;
+  }
   /** Phase 3 F3: the loop guard's view of the sender — server roster first. */
   loopSenderIsAgent(channelId, senderId, envelopeSaysAgent, relayedHumanTurn) {
     if (relayedHumanTurn) return false;
@@ -33037,6 +33148,7 @@ var BridgeAgent = class _BridgeAgent {
   }
   async close() {
     this.closingDown = true;
+    this.statusGate.close();
     for (const t of this.pauseRecheckTimers.values()) clearTimeout(t);
     this.pauseRecheckTimers.clear();
     for (const t of this.supersedeRecheckTimers.values()) clearTimeout(t);
@@ -33490,7 +33602,7 @@ function createHttpServer(agent, opts) {
       if (method === "POST" && path === "/v1/status") {
         const parsed = statusSchema.safeParse(JSON.parse(await readBody(req, OTHER_CAP)));
         if (!parsed.success) return jsonError(res, "invalid_request", parsed.error.issues);
-        await agent.reportStatus(parsed.data.channel_id, parsed.data.state, parsed.data.detail);
+        await agent.reportStatusGated(parsed.data.channel_id, parsed.data.state, parsed.data.detail);
         return json(res, 200, { ok: true });
       }
       if (method === "POST" && path === "/v1/memory/record") {
@@ -33860,7 +33972,7 @@ async function handleInbound(sock, agent, data, inflight, flush, session) {
     }
     const detail = typeof m.detail === "string" ? m.detail : void 0;
     try {
-      await agent.reportStatus(m.channel_id, m.state, detail);
+      await agent.reportStatusGated(m.channel_id, m.state, detail);
       sendJson(sock, { type: "ok" });
     } catch (e) {
       if (e instanceof ChannelPendingError) {

package/dist/status-gate.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Thinking-indicator gate (owner rule, 2026-10-01): a reply that comes back
+ * within {@link STATUS_WORKING_DELAY_MS} shows no "thinking..." strip at all;
+ * a longer turn shows it.
+ *
+ * Every status is an MLS publish (about 4.4 s in prod) on the same per-tenant
+ * send path as the reply, so an eager "working" made quick replies wait behind
+ * it. The gate holds "working" for the delay and publishes it only if the turn
+ * is still running then:
+ *
+ *   - "idle" before the delay cancels the pending "working" and publishes
+ *     nothing (the strip was never shown, so there is nothing to clear);
+ *   - a reply starting to publish on the channel also cancels it, because
+ *     some runtimes (OpenClaw) send "idle" only after the reply publish has
+ *     settled, which would otherwise raise the strip under a visible answer;
+ *   - once "working" is published, "idle" is published after it, in order;
+ *   - "stalled" / "error" publish at once (after anything queued) and drop a
+ *     pending "working".
+ *
+ * Only the agent-facing status routes (HTTP /v1/status, WS "status") go
+ * through the gate. BridgeAgent.reportStatus itself still publishes at once.
+ */
+export declare const STATUS_WORKING_DELAY_MS = 3000;
+export type AgentStatusState = "idle" | "working" | "stalled" | "error";
+type Publish = (channelId: string, state: AgentStatusState, detail?: string) => Promise<void>;
+export declare class StatusGate {
+    private readonly publish;
+    private readonly opts;
+    private readonly entries;
+    private readonly chains;
+    constructor(publish: Publish, opts?: {
+        delayMs?: number;
+        onError?: (state: AgentStatusState, err: unknown) => void;
+    });
+    /** The agent reported a status. Resolves once any publish it starts has settled. */
+    report(channelId: string, state: AgentStatusState, detail?: string): Promise<void>;
+    /** A reply body is about to publish on the channel. */
+    replyStarted(channelId: string): void;
+    /** Drop every pending "working" (bridge shutdown). */
+    close(): void;
+    private holdWorking;
+    /** Publishes in order per channel; rejects with the publish error. */
+    private enqueue;
+}
+export {};

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const BRIDGE_VERSION = "0.25.2";
+export declare const BRIDGE_VERSION = "0.25.4";

package/dist/voice/fast-prompt.d.ts

@@ -35,6 +35,9 @@ export declare function buildFastMessages(args: {
      *  from these backend-loaded dials (compileVoicePrompt) instead of the
      *  credential file's persona block. */
     settings?: VoiceSettings;
+    /** The agent's identity display name ("one name", 2026-10-01): the only
+     *  source of the prompt's "You are <name>." line. */
+    agentName?: string;
 }): ChatMessage[];
 /** The fast model appends this when the full agent must answer next. */
 export declare const DEFER_TOKEN = "[[DEFER]]";

package/dist/voice/persona.d.ts

@@ -1,5 +1,11 @@
 import { type VoiceSettings } from "./settings.js";
 export declare const CONTINUITY_CLAUSE: string;
+/**
+ * `displayName` is legacy (the credential file's `voice.persona.display_name`,
+ * or the backend's voice settings `display_name`). It is still parsed so old
+ * credentials and payloads load, but the prompt never reads it: the agent's
+ * name comes from its identity display name (owner decision 2026-10-01, "one name").
+ */
 export interface VoicePersona {
     displayName?: string;
     persona: string;
@@ -20,4 +26,4 @@ export interface VoiceConfig {
     settings?: VoiceSettings;
 }
 export declare function parseVoiceConfig(raw: unknown, env: Record<string, string | undefined>): VoiceConfig | undefined;
-export declare function systemPrompt(p: VoicePersona, settings?: VoiceSettings): string;
+export declare function systemPrompt(p: VoicePersona, settings?: VoiceSettings, agentName?: string): string;

package/dist/voice/prompt-compiler.d.ts

@@ -1,4 +1,11 @@
 import type { VoiceSettings } from "./settings.js";
-export declare function compileVoicePrompt(s: VoiceSettings): string;
+/**
+ * `agentName` is the agent's identity display name (`ConnectIdentity.display_name`,
+ * the one name shown in rosters and the Directory). Owner decision 2026-10-01
+ * ("one name"): the voice settings `display_name` (`s.displayName`) is a legacy
+ * field that is still parsed for compatibility but never read here, so a
+ * rename reaches calls too.
+ */
+export declare function compileVoicePrompt(s: VoiceSettings, agentName?: string): string;
 export declare const VOICE_CALL_START_MARKER = "[voice call started]";
 export declare function greetingTurnFor(s: VoiceSettings, callerName?: string): string;

package/dist/voice/settings.d.ts

@@ -10,7 +10,13 @@ export interface VoiceSettings {
     version: number;
     voiceId: string | null;
     pace: (typeof PACES)[number];
+    /** Legacy voice-only name (backend `display_name`). Parsed for compatibility
+     *  with older backends/web clients, never used for the prompt ("one name",
+     *  2026-10-01). */
     displayName: string;
+    /** The agent's identity display name at fetch time (backend
+     *  `identity_display_name`), when the backend sends it. */
+    identityDisplayName?: string;
     persona: string;
     warmth: (typeof WARMTHS)[number];
     formality: (typeof FORMALITIES)[number];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@securecoms/agent-bridge",
-  "version": "0.25.2",
+  "version": "0.25.4",
   "type": "module",
   "engines": {
     "node": ">=22.5.0"