Allow to change the agents name + Workspace files

apps/gnome-extension/jarvis@qvac.local/extension.js

@@ -65,6 +65,7 @@ export default class JarvisExtension extends Extension {
     this._bindSurface(this.session.view);
     this._applyAccessibility();
     this._removeShellService = installShellService();
+    this._assistantName = 'Jarvis';
     this._indicator = new PanelMenu.Button(0.0, 'Jarvis QVAC', false); this._indicator.accessible_name = 'Jarvis voice assistant';
     this._panelBox = new St.BoxLayout({ style_class: 'jarvis-panel-box', y_align: Clutter.ActorAlign.CENTER });
     this._mark = new St.Icon({ icon_name: 'audio-input-microphone-symbolic', icon_size: 16, style_class: 'jarvis-panel-mark', y_align: Clutter.ActorAlign.CENTER });
@@ -257,11 +258,13 @@ export default class JarvisExtension extends Extension {
         const tts = Boolean(voice.tts || voice.speech);
         this._eachView((view) => view.setVoiceStatus({ tts, input, wake: voice.wake }));
       }
+      const name = status.settings?.assistantName;
+      if (name) this._applyAssistantName(name);
     } catch { this._eachView((view) => view.setConnectionStatus('voice-unavailable')); }
   }
   _call(name, signature, value) {
     if (!this.proxy?.owned?.()) {
-      if (name !== 'PushToTalk') this._eachView((view) => view.setNotice('Jarvis is starting…'));
+      if (name !== 'PushToTalk') this._eachView((view) => view.setNotice(`${this._assistantName || 'Jarvis'} is starting…`));
       this._connectDaemon();
       return;
     }
@@ -272,11 +275,20 @@ export default class JarvisExtension extends Extension {
       this._eachView((view) => view.setNotice(fallback));
     });
   }
+  _applyAssistantName(name) {
+    const text = safeText(name).slice(0, 32) || 'Jarvis';
+    this._assistantName = text;
+    this._eachView((view) => view.setAssistantName?.(text));
+    this._indicator.accessible_name = `${text} voice assistant`;
+    this._glyph.accessible_name = `${text} idle`;
+    if (this._glyph.visible !== false) this._glyph.text = text;
+  }
   _setState(state) {
     const value = safeText(state);
-    this._glyph.text = 'Jarvis';
+    const name = this._assistantName || 'Jarvis';
-    this._glyph.accessible_name = `Jarvis ${value.toLowerCase()}`;
+    this._glyph.text = name;
-    this._indicator.accessible_name = `Jarvis ${value.toLowerCase()}`;
+    this._glyph.accessible_name = `${name} ${value.toLowerCase()}`;
+    this._indicator.accessible_name = `${name} ${value.toLowerCase()}`;
     if (this._panelBox) {
       for (const name of ['armed', 'listening', 'speaking', 'thinking', 'sleeping']) {
         this._panelBox.remove_style_class_name(`jarvis-state-${name}`);

apps/gnome-extension/jarvis@qvac.local/settings-catalog.json

@@ -1,6 +1,15 @@
 {
   "version": 1,
   "fields": [
+    {
+      "key": "assistantName",
+      "title": "Assistant name",
+      "group": "Identity",
+      "default": "Jarvis",
+      "type": "string",
+      "maxLength": 32,
+      "description": "What to call the assistant in the tray, speech, and workspace IDENTITY.md."
+    },
     {
       "key": "ttsEnabled",
       "title": "Spoken replies",

apps/gnome-extension/jarvis@qvac.local/settings-values.js

@@ -17,11 +17,15 @@ export function normalizeSettings(source, fields, { strict = false } = {}) {
     if (field.type === 'list' && typeof value === 'string') value = value.split(',').map(v => v.trim()).filter(Boolean);
     if (field.key === 'asrLanguage' && typeof value === 'string') value = value.toLowerCase().split(/[-_]/)[0];
     if (['string', 'file'].includes(field.type) && typeof value === 'string') value = value.trim();
+    if (field.key === 'assistantName' && typeof value === 'string') {
+      value = value.replace(/[\r\n\t]/g, ' ').replace(/\s+/g, ' ').slice(0, field.maxLength || 32);
+      if (!value || /[<>&]/.test(value)) value = field.default;
+    }
     const valid = field.type === 'boolean' ? typeof value === 'boolean'
       : field.type === 'number' ? Number.isFinite(value) && value >= field.min && value <= field.max && (field.step < 1 || Number.isInteger(value))
       : field.type === 'choice' ? field.options.some(option => option.value === value)
       : field.type === 'list' ? Array.isArray(value) && value.every(item => typeof item === 'string')
-      : typeof value === 'string' && value.length <= 4096;
+      : typeof value === 'string' && value.length <= (field.maxLength || 4096);
     if (!valid && strict) throw new Error(`Invalid value for ${field.title}`);
     result[field.key] = valid ? value : field.default;
   }

apps/gnome-extension/jarvis@qvac.local/settings-window.js

@@ -159,7 +159,7 @@ export function fillSettingsWindow(window, settings, directory) {
     const editor = new SettingsEditor(directory, settings);
     const intro = new Adw.PreferencesGroup();
     intro.add(brandBanner(directory));
-    const voice = editor.page(window, 'Voice', ['Speech', 'Voice design'], 'audio-speakers-symbolic', true, intro);
+    const voice = editor.page(window, 'Voice', ['Identity', 'Speech', 'Voice design'], 'audio-speakers-symbolic', true, intro);
     window.add(voice);
     const listening = editor.page(window, 'Listening', ['Listening', 'Wake and privacy', 'Detection tuning', 'Audio routing'], 'audio-input-microphone-symbolic');
     window.add(listening);

apps/gnome-extension/jarvis@qvac.local/ui.js

@@ -181,6 +181,15 @@ export class ConversationView {
   _bindChip(button, action) {
     button.connect('clicked', () => action?.());
   }
+  setAssistantName(name) {
+    const text = safeText(name).slice(0, 32) || 'Jarvis';
+    this._assistantName = text;
+    this.title.text = text;
+    this.title.accessible_name = `${text} status`;
+    this.root.accessible_name = this.compact ? `${text} voice assistant` : `${text} conversation`;
+    if (this.settings) this.settings.accessible_name = `Open ${text} settings`;
+    if (this.notice) this.notice.accessible_name = `${text} notice`;
+  }
   clear() {
     this.transcript.destroy_all_children();
     this.thinking.text = '';

daemon/agent-workspace.js

@@ -0,0 +1,72 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+const TEMPLATE_DIR = path.resolve(new URL('../vendor/agent-harness/agent-workspace', import.meta.url).pathname);
+const SEED_FILES = [
+  'SOUL.md',
+  'IDENTITY.md',
+  'AGENTS.md',
+  'USER.md',
+  'MEMORY.md',
+  'BOOTSTRAP.md',
+  'HEARTBEAT.md',
+  'TOOLS.md',
+  'skills/skill-creator/SKILL.md',
+];
+
+export function normalizeAssistantName(value) {
+  const text = String(value || '').replace(/[\r\n\t]/g, ' ').trim().replace(/\s+/g, ' ').slice(0, 32);
+  if (!text || /[<>&]/.test(text)) return 'Jarvis';
+  return text;
+}
+
+export function agentWorkspaceDir() {
+  return path.join(process.env.XDG_DATA_HOME || path.join(os.homedir(), '.local/share'), 'jarvis/workspace');
+}
+
+export function templateWorkspaceDir() {
+  return TEMPLATE_DIR;
+}
+
+function copyIfMissing(from, to) {
+  if (fs.existsSync(to)) return false;
+  fs.mkdirSync(path.dirname(to), { recursive: true });
+  fs.copyFileSync(from, to);
+  return true;
+}
+
+export function applyAssistantName(dir, name) {
+  const who = normalizeAssistantName(name);
+  const identity = path.join(dir, 'IDENTITY.md');
+  let text = '';
+  try { text = fs.readFileSync(identity, 'utf8'); } catch { text = '# IDENTITY.md\n\n'; }
+  if (/\*\*Name:\*\*/.test(text)) text = text.replace(/\*\*Name:\*\*.*/, `**Name:** ${who}`);
+  else text += `\n- **Name:** ${who}\n`;
+  fs.mkdirSync(dir, { recursive: true });
+  fs.writeFileSync(identity, text);
+  const soul = path.join(dir, 'SOUL.md');
+  try {
+    let soulText = fs.readFileSync(soul, 'utf8');
+    soulText = soulText.replace(/^# SOUL\.md:.*/m, `# SOUL.md: ${who}`);
+    fs.writeFileSync(soul, soulText);
+  } catch {}
+  const memory = path.join(dir, 'MEMORY.md');
+  try {
+    let mem = fs.readFileSync(memory, 'utf8');
+    if (/Assistant name:/.test(mem)) mem = mem.replace(/Assistant name:.*/, `Assistant name: ${who}`);
+    fs.writeFileSync(memory, mem);
+  } catch {}
+  return who;
+}
+
+export function ensureAgentWorkspace({ name = 'Jarvis' } = {}) {
+  const dest = agentWorkspaceDir();
+  fs.mkdirSync(path.join(dest, 'memory'), { recursive: true });
+  fs.mkdirSync(path.join(dest, 'skills'), { recursive: true });
+  for (const rel of SEED_FILES) {
+    copyIfMissing(path.join(TEMPLATE_DIR, rel), path.join(dest, rel));
+  }
+  applyAssistantName(dest, name);
+  return dest;
+}

daemon/harness-bridge.js

@@ -5,10 +5,11 @@ import { acquireQvac, closeQvac, releaseQvac, Agent, QVAC_MASTER } from './qvac-
 import { createRuntimeTools } from '../skills/runtime-tools.js';
 import { createPhase2Tools, filesystemRoots } from '../skills/phase2-tools.js';
 import { createQvacTools } from '../skills/qvac-tools.js';
-import { VOICE_SYSTEM_PROMPT, parseHudSidecar } from '../skills/voice-prompt.js';
+import { voiceSystemPrompt, parseHudSidecar } from '../skills/voice-prompt.js';
 import { createComputerObserveTools } from '../skills/computer-observe.js';
 import { createComputerActTools } from '../skills/computer-act.js';
 import { createPhase9GatewayTool } from '../skills/phase9-tools.js';
+import { ensureAgentWorkspace, normalizeAssistantName } from './agent-workspace.js';
 
 export function harnessRoots(fsAccess) {
   if (fsAccess === 'filesystem') return ['/'];
@@ -17,29 +18,31 @@ export function harnessRoots(fsAccess) {
 }
 
 export class HarnessBridge extends EventEmitter {
-  constructor({ cwd = process.cwd(), model = QVAC_MASTER.model, tools = [], computer, observer, actuator, permissionMode = 'ask', fsAccess } = {}) {
+  constructor({ cwd, model = QVAC_MASTER.model, tools = [], computer, observer, actuator, permissionMode = 'ask', fsAccess } = {}) {
     super();
     const settings = voiceSettings();
     const access = fsAccess ?? settings.fsAccess;
+    const assistantName = normalizeAssistantName(settings.assistantName);
+    const workspace = cwd || ensureAgentWorkspace({ name: assistantName });
     const roots = harnessRoots(access);
     this.options = {
-      cwd,
+      cwd: workspace,
       roots,
       model,
       tools: [
         ...createRuntimeTools({ computer }),
-        ...createPhase2Tools({ cwd, computer, roots: filesystemRoots(access, cwd) }),
+        ...createPhase2Tools({ cwd: workspace, computer, roots: filesystemRoots(access, workspace) }),
         ...createComputerObserveTools({ computer, observer }),
         ...createComputerActTools({ actuator }),
         ...createQvacTools(),
         ...createPhase9GatewayTool(),
         ...tools,
       ],
-      builtinTools: ['read_file', 'list_dir', 'grep', 'run_terminal_cmd', 'web_fetch', 'fetch_page', 'google_search', 'web_search', 'wiki_search', 'hn_search', 'code_search'],
+      builtinTools: ['read_file', 'write_file', 'search_replace', 'list_dir', 'grep', 'run_terminal_cmd', 'web_fetch', 'fetch_page', 'google_search', 'web_search', 'wiki_search', 'hn_search', 'code_search'],
       webFetch: true,
       permissionMode,
       origin: 'jarvis-qvac',
-      system: VOICE_SYSTEM_PROMPT,
+      system: voiceSystemPrompt(assistantName),
       voice: true,
       maxTurns: settings.maxTurns,
       maxShellCalls: settings.maxShellCalls,

daemon/index.js

@@ -21,7 +21,8 @@ import { PortalInputBackend } from '../computer-use/portal-input.js';
 import { ComputerActuator } from '../computer-use/actuator.js';
 import { RuntimeTelemetry } from './telemetry.js';
 import { StateRecovery } from './recovery.js';
-import { spokenReply } from '../skills/voice-prompt.js';
+import { spokenReply, voiceSystemPrompt } from '../skills/voice-prompt.js';
+import { ensureAgentWorkspace, applyAssistantName, normalizeAssistantName } from './agent-workspace.js';
 
 export class JarvisDaemon extends EventEmitter {
   constructor() {
@@ -29,6 +30,7 @@ export class JarvisDaemon extends EventEmitter {
     this.recovery = new StateRecovery(); const restored = this.recovery.load(); this.state = restored.state; this.mode = restored.mode;
     this.settings = voiceSettings();
     this.startupSettings = this.settings;
+    this.workspace = ensureAgentWorkspace({ name: this.settings.assistantName });
     this.voice = new VoiceStateMachine({ idleMs: this.settings.idleMinutes * 60_000 });
     this.scheduler = new QvacScheduler({ concurrency: 1 });
     this.audit = new ComputerAudit();
@@ -41,7 +43,7 @@ export class JarvisDaemon extends EventEmitter {
       framebuffer: { capture: (output) => this.input.captureFrame(output) },
     });
     this.actuator = new ComputerActuator({ session: this.computer, input: this.input, find: ({ ref }) => this.observer.lastTree.filter((node) => node.ref === ref), atspiAction: (target, action) => this.observer.atspi.action(target, action), highlight: async (target, action) => this.emit('ComputerHighlight', JSON.stringify({ rect: target?.rect || null, label: `${action} ${target?.name || ''}` })) , audit: this.audit });
-    this.harness = new HarnessBridge({ cwd: process.cwd(), computer: this.computer, observer: this.observer, actuator: this.actuator, fsAccess: this.settings.fsAccess });
+    this.harness = new HarnessBridge({ cwd: this.workspace, computer: this.computer, observer: this.observer, actuator: this.actuator, fsAccess: this.settings.fsAccess });
     this.log = new PrivacyLog();
     this.locked = false;
     this.lastReply = '';
@@ -234,6 +236,11 @@ export class JarvisDaemon extends EventEmitter {
     this.voiceLoop = null;
     this.settings = next;
     this.voice.idleMs = next.idleMinutes * 60_000;
+    const who = applyAssistantName(this.workspace, next.assistantName);
+    if (who !== normalizeAssistantName(previous.assistantName)) {
+      this.harness.options.system = voiceSystemPrompt(who);
+      await this.harness.resetContext();
+    }
     if (['computerMode', 'computerSteps', 'computerGrantMinutes'].some(key => next[key] !== previous[key])) this.computerRevoke();
     Object.assign(this.computer, { mode: next.computerMode, stepsMax: next.computerSteps, grantMinutes: next.computerGrantMinutes });
     Object.assign(this.observer.normalizer, { maxLongEdge: next.screenshotMaxEdge, quality: next.screenshotQuality });

docs/development.md

@@ -8,7 +8,7 @@ computer-use/                   observe/act session and host helpers
 skills/                         harness tool adapters
 apps/gnome-extension/           GNOME Shell ESM UI, HUD, and brand/
 apps/control-center/            GTK4/libadwaita settings application
-vendor/agent-harness/           copied cognitive core
+vendor/agent-harness/           copied cognitive core and agent-workspace/
 dbus/                            introspection XML
 packaging/                      installer, Bare launcher, artifacts
 systemd/user/                    checkout development service
@@ -16,7 +16,8 @@ docs/                           maintained technical documentation
 test/                            Node acceptance/unit fixtures
 ```
 
-Brand tokens and SVG marks live under
+Live agent memory lives in `~/.local/share/jarvis/workspace`, seeded from
+`vendor/agent-harness/agent-workspace`. Brand tokens and SVG marks live under
 `apps/gnome-extension/[email protected]/brand/`. `test/brand.test.js` and
 `test/license.test.js` cover palette, AGPL/HoneyPeer, and St-safe HUD CSS.
 

docs/harness-integration.md

@@ -30,7 +30,12 @@ flowchart LR
 
 Jarvis registers domain tools from `skills/`, supplies the system prompt, maps
 tool permissions to confirmation gates, and translates harness events into the
-D-Bus protocol. Computer-use tools are custom harness tools backed by
+D-Bus protocol. The harness cwd is the per-user agent workspace
+(`$XDG_DATA_HOME/jarvis/workspace`, default `~/.local/share/jarvis/workspace`),
+seeded from `vendor/agent-harness/agent-workspace` (`SOUL.md`, `IDENTITY.md`,
+`AGENTS.md`, `USER.md`, `MEMORY.md`, `BOOTSTRAP.md`). Voice turns inline those
+files. A first-run `BOOTSTRAP.md` ritual stays open until the agent overwrites
+it with `# completed`. Computer-use tools are custom harness tools backed by
 `computer-use/`; the computer-use layer never owns planning.
 
 ## Adding a tool

docs/settings.md

@@ -83,6 +83,10 @@ and WebP quality tune observation detail and processing cost.
 
 ## Complete daemon setting reference
 
+### Identity
+
+- **Assistant name** — `assistantName`, default `"Jarvis"`. What to call the assistant in the tray HUD, spoken prompt, and workspace `IDENTITY.md`. Up to 32 characters. Apply writes the name without restarting `jarvisd`; the current conversation is reset so the new name takes effect.
+
 ### Speech
 
 - **Spoken replies** — `ttsEnabled`, default `true`. Read replies aloud using local speech synthesis.

skills/voice-prompt.js

@@ -1,4 +1,6 @@
-export const VOICE_SYSTEM_PROMPT = `You are Jarvis, a local Ubuntu GNOME voice assistant. The language model is Quantum Verse Automatic Computer, spelled Q V A C. In speech say Quantum Verse Automatic Computer, or spell it as Q V A C. Never say QVAC as one word.
+export function voiceSystemPrompt(name = 'Jarvis') {
+  const who = String(name || 'Jarvis').trim() || 'Jarvis';
+  return `You are ${who}, a local Ubuntu GNOME voice assistant. The language model is Quantum Verse Automatic Computer, spelled Q V A C. In speech say Quantum Verse Automatic Computer, or spell it as Q V A C. Never say QVAC as one word.
 
 Speak one to three short sentences unless the user asks for more. Every reply is read aloud. Write only words and numbers a person can say.
 Reply in plain text only. Never use markdown: no headings, bullets, numbered lists, bold, italics, links, or code fences.
@@ -8,10 +10,12 @@ Never speak punctuation. Internet protocol addresses have no dots: say 192 168 0
 Tool names, tool arguments, paths, and U R L strings use ordinary spelling. Only the final spoken reply is punctuation-free.
 Thinking is private. After thoughts, call a tool or speak the answer. Do not stop in thoughts or say you will search later.
 
+Follow SOUL.md, IDENTITY.md, AGENTS.md, USER.md, and MEMORY.md in the current workspace. If BOOTSTRAP.md still describes the first-run ritual, do that ritual this turn.
+
 Ground desktop, file, memory, model, and network claims in a tool result. Do not invent limits the tools did not report.
 This computer can reach the internet. web_search, google_search, fetch_page, web_fetch, wiki_search, hn_search, and code_search are unrestricted and do not wait for confirmation. Never say you will use a tool. Call the tool instead of announcing it. Use web_search to find pages. Default engine auto tries several backends. If it fails, call web_search again with engine set to bing, jina, wikipedia, duckduckgo, or google. After web_search, call fetch_page on one real http or https page from the hits, then speak the answer. Use web_fetch for raw pages and this computer's public I P at https://ifconfig.me/ip. Use wiki_search, hn_search, or code_search when the question is about Wikipedia, Hacker News, GitHub, npm, or M D N. Redirect links are not an answer. Do not use curl, wget, or run_terminal_cmd for websites. The shell blocks public H T T P; that is not a network outage. If a shell result says HTTP access is not allowed, call web_fetch or web_search next and answer from that result. Never say the network is unavailable unless web_fetch or web_search itself failed.
 
-File tools may read any path they accept. If a path is outside the allowed roots, the tool errors; do not claim a workspace jail unless that happened. Writes, including fs_write and overwrite, still need confirmation.
+File tools may read any path they accept. If a path is outside the allowed roots, the tool errors; do not claim a workspace jail unless that happened. Writes, including fs_write and overwrite, still need confirmation except for the workspace identity files listed in AGENTS.md.
 
 Computer use requires an explicit user grant from Settings, Computer use, Allow now, or Grant desktop in the tray. After a grant, call cu_observe to read the live PipeWire frame buffer from the ScreenCast session. Do not take a screenshot. Do not wait for a libei injector. Never click or type while it is inactive, locked, or revoked. Never ask for passwords or credentials.
 Destructive actions require confirmation in both the heads-up display and spoken conversation.
@@ -24,6 +28,9 @@ Do not say you received no output unless the result is exactly "(no output)".
 
 When a useful follow-up action exists, append a HUD sidecar exactly as <jarvis_hud>{"title":"...","chips":[{"id":"...","label":"..."}],"confirmation":null}</jarvis_hud>.
 The sidecar is for the heads-up display and must not be spoken.`;
+}
+
+export const VOICE_SYSTEM_PROMPT = voiceSystemPrompt();
 
 export function parseHudSidecar(text) {
   const source = String(text || '');

test/agent-workspace.test.js

@@ -0,0 +1,34 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, existsSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { ensureAgentWorkspace, applyAssistantName, normalizeAssistantName, templateWorkspaceDir } from '../daemon/agent-workspace.js';
+
+const previous = process.env.XDG_DATA_HOME;
+const data = mkdtempSync(path.join(tmpdir(), 'jarvis-workspace-'));
+process.env.XDG_DATA_HOME = data;
+
+test('workspace seed copies SOUL and bootstrap, then name writes IDENTITY.md', () => {
+  const dir = ensureAgentWorkspace({ name: 'Jarvis' });
+  assert.equal(existsSync(path.join(dir, 'SOUL.md')), true);
+  assert.equal(existsSync(path.join(dir, 'AGENTS.md')), true);
+  assert.equal(existsSync(path.join(dir, 'BOOTSTRAP.md')), true);
+  assert.match(readFileSync(path.join(dir, 'SOUL.md'), 'utf8'), /You are \*\*Jarvis\*\*/);
+  assert.match(readFileSync(path.join(dir, 'BOOTSTRAP.md'), 'utf8'), /first-run ritual/);
+  assert.doesNotMatch(readFileSync(path.join(dir, 'AGENTS.md'), 'utf8'), /Pip/);
+  applyAssistantName(dir, 'Ada');
+  assert.match(readFileSync(path.join(dir, 'IDENTITY.md'), 'utf8'), /\*\*Name:\*\* Ada/);
+  assert.match(readFileSync(path.join(dir, 'SOUL.md'), 'utf8'), /# SOUL\.md: Ada/);
+  const again = ensureAgentWorkspace({ name: 'Ada' });
+  assert.equal(again, dir);
+  assert.match(readFileSync(path.join(dir, 'IDENTITY.md'), 'utf8'), /\*\*Name:\*\* Ada/);
+  assert.equal(normalizeAssistantName('  '), 'Jarvis');
+  assert.match(templateWorkspaceDir(), /agent-workspace$/);
+});
+
+test('cleanup', () => {
+  if (previous === undefined) delete process.env.XDG_DATA_HOME;
+  else process.env.XDG_DATA_HOME = previous;
+  rmSync(data, { recursive: true, force: true });
+});

test/compaction.test.js

@@ -55,17 +55,24 @@ test('voice compaction does not auto-continue a new greeting', () => {
   assert.match(compaction.compactReminder({ voice: true }), /Do not greet again/);
 });
 
-test('voice assemble uses only the Jarvis prompt', () => {
+test('voice assemble inlines workspace identity files and skips a completed bootstrap', () => {
   const sys = prompts.assemble({
     personality: 'voice',
     extra: VOICE_SYSTEM_PROMPT,
-    cwd: '/home/raven/.local/share/jarvis-qvac',
+    cwd: '/home/raven/.local/share/jarvis/workspace',
     hostWorkspace: true,
-    fsRead: () => 'You are a local coding agent. Read AGENTS.md.',
+    fsRead: (_c, n) => {
+      if (n === 'SOUL.md') return '# SOUL.md: Jarvis\nYou are Jarvis on this desktop.';
+      if (n === 'AGENTS.md') return '# AGENTS.md\nFollow the workspace ritual.';
+      if (n === 'BOOTSTRAP.md') return '# completed';
+      return '';
+    },
   });
   assert.match(sys, /You are Jarvis/);
+  assert.match(sys, /SOUL\.md/);
+  assert.match(sys, /AGENTS\.md/);
   assert.doesNotMatch(sys, /You are a local coding agent/);
-  assert.doesNotMatch(sys, /AGENTS.md/);
+  assert.doesNotMatch(sys, /## BOOTSTRAP\.md/);
 });
 
 test('LLM compact skips a two-turn voice chat', async () => {

test/daemon.test.js

@@ -2,6 +2,7 @@ import { mkdtempSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 process.env.XDG_STATE_HOME = mkdtempSync(path.join(tmpdir(), 'jarvis-daemon-test-'));
+process.env.XDG_DATA_HOME = mkdtempSync(path.join(tmpdir(), 'jarvis-daemon-data-'));
 import test from 'node:test';
 import assert from 'node:assert/strict';
 import { VoiceStateMachine } from '../daemon/voice-state.js';
@@ -74,8 +75,13 @@ test('harness bridge caps voice shell chaining', () => {
   assert.equal(bridge.options.maxTurns, 6);
   assert.deepEqual(bridge.options.roots, []);
   assert.deepEqual(harnessRoots('filesystem'), ['/']);
+  assert.match(bridge.options.cwd, /jarvis\/workspace$/);
+  assert.match(bridge.options.system, /You are Jarvis/);
+  assert.match(bridge.options.system, /SOUL\.md/);
   assert.deepEqual(bridge.options.builtinTools, [
     'read_file',
+    'write_file',
+    'search_replace',
     'list_dir',
     'grep',
     'run_terminal_cmd',

test/gnome-extension.test.js

@@ -227,7 +227,7 @@ test('GNOME GI imports expose default namespaces and panel has a real menu', ()
   assert.doesNotMatch(extensionSource, /DO_NOT_AUTO_START/);
   assert.match(extensionSource, /DBusProxyFlags\.NONE/);
   assert.match(extensionSource, /_keepSyncing/);
-  assert.match(extensionSource, /Jarvis is starting/);
+  assert.match(extensionSource, /is starting/);
   assert.match(extensionSource, /\['Thinking'/);
   assert.match(extensionSource, /\['ToolCall'/);
   assert.match(extensionSource, /_openPopup/);
@@ -240,7 +240,8 @@ test('GNOME GI imports expose default namespaces and panel has a real menu', ()
   assert.match(extensionSource, /brand\/icons\/jarvis-mark\.svg/);
   assert.match(uiSource, /jarvis-panel-state/);
   assert.doesNotMatch(uiSource, /style_class: 'jarvis-osd'/);
-  assert.match(extensionSource, /_openSettings/);
+  assert.match(uiSource, /setAssistantName/);
+  assert.match(extensionSource, /_applyAssistantName/);
   assert.match(extensionSource, /PopupMenuItem\('Settings'\)/);
   assert.match(extensionSource, /PopupMenuItem\('Grant desktop'\)/);
   assert.doesNotMatch(uiSource, /button-press-event', \(\) => Clutter\.EVENT_STOP/);

test/runtime-tools.test.js

@@ -157,7 +157,11 @@ test('public web search and fetch do not require confirmation', () => {
   assert.equal(policy.needsPermission('hn_search', 'ask'), false);
   assert.equal(policy.needsPermission('code_search', 'ask'), false);
   assert.equal(policy.needsPermission('run_terminal_cmd', 'ask'), true);
+  assert.match(VOICE_SYSTEM_PROMPT, /Follow SOUL\.md, IDENTITY\.md, AGENTS\.md/);
   assert.equal(policy.needsPermission('write_file', 'ask'), true);
+  assert.equal(policy.isIdentityPath('USER.md'), true);
+  assert.equal(policy.isIdentityPath('memory/2026-09-12.md'), true);
+  assert.equal(policy.isIdentityPath('/tmp/secret.txt'), false);
 });
 
 test('voice prompt tells the model not to chain extra terminal commands', () => {

test/settings.test.js

@@ -5,6 +5,7 @@ import { mkdtemp, mkdir, writeFile, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
 import { SETTINGS_FIELDS, voiceSettings } from '../daemon/voice-settings.js';
+import { mkdtempSync } from 'node:fs';
 import { normalizeSettings, mergeSettings, settingVisible } from '../apps/gnome-extension/[email protected]/settings-values.js';
 import { TTS_PRESETS, ttsConfiguration, scaleSpeech } from '../daemon/tts-config.js';
 import { QvacVoiceAdapter } from '../daemon/voice-adapters.js';
@@ -18,6 +19,8 @@ import { VoiceLoop } from '../daemon/voice-loop.js';
 import { ttsLoadConfigSchema } from '../node_modules/@qvac/inference/dist/schemas/text-to-speech.js';
 import * as registry from '../node_modules/@qvac/inference/dist/models/registry/models.js';
 
+process.env.XDG_DATA_HOME ||= mkdtempSync(path.join(tmpdir(), 'jarvis-settings-data-'));
+
 test('settings migrate aliases, retain explicit disables, and reject invalid numeric input', () => {
   const settings = voiceSettings({ tts_enabled: false, voice_id: 'M3', language: 'es-MX', computer_step_budget: '50', tts_speed: 1.4 });
   assert.equal(settings.ttsEnabled, false); assert.equal(settings.voiceId, 'M3'); assert.equal(settings.asrLanguage, 'es');
@@ -181,4 +184,7 @@ test('catalog defaults enable CPU wake, workspace files, and idle VRAM unload',
   assert.equal(settings.fsAccess, 'workspace');
   assert.equal(settings.freeVramOnIdle, true);
   assert.equal(settings.wakeCommand, 'jarvis-wake-bridge');
+  assert.equal(settings.assistantName, 'Jarvis');
+  assert.equal(voiceSettings({ assistantName: '  Ada  ' }).assistantName, 'Ada');
+  assert.equal(voiceSettings({ assistantName: '<script>' }).assistantName, 'Jarvis');
 });

vendor/agent-harness/agent-workspace/AGENTS.md

@@ -1,31 +1,26 @@
-# AGENTS.md — Pip operating manual
+# AGENTS.md — Jarvis operating manual
 
-You are Pip, the Discord-Linux container agent. Home workspace:
+You are Jarvis, the local Ubuntu GNOME voice assistant. Home workspace is the
-
+directory named in the system prompt. Relative paths resolve there.
-`/root/.agent/workspace`
-
-Relative paths resolve there. Absolute paths may still reach elsewhere **inside this container**.
 
 ## Session start
 
 On a **new chat**, recall who you are talking to before you speak:
 
-1. Use the **Who you are talking to** card in the system prompt if it has their name.
+1. Use `USER.md` if it has their name.
 2. If the name is missing, `read_file` `USER.md` and `MEMORY.md` (and today’s `memory/YYYY-MM-DD.md` if present). Then greet them by name.
 3. If those files still have no name, ask once and write `USER.md`.
 
-Do not invent a name. Skills: only the catalog is inlined — `read_file` the matching `SKILL.md` when a task fits. For a container question, call a tool immediately.
+Do not invent a name. Skills: only the catalog is inlined. `read_file` the matching `SKILL.md` when a task fits.
 
-If `BOOTSTRAP.md` exists and was not inlined, that first-run ritual is still open — do it, then delete `BOOTSTRAP.md`.
+If `BOOTSTRAP.md` exists and still describes the first-run ritual, that ritual is still open. Do it, then overwrite `BOOTSTRAP.md` with `# completed`.
 
 ## Safety
 
-- Don’t dump secrets, keys, or huge directories into chat. Call `create_secret` and share only the one-time secret.ssh.surf URL.
+- Don’t dump secrets, keys, or huge directories into chat.
 - Don’t run destructive commands unless explicitly asked.
-- Before changing crontab, systemd, nginx, sshd, or shell rc files: inspect first, merge, don’t clobber.
+- Before changing crontab, systemd, or shell rc files: inspect first, merge, don’t clobber.
-- Don’t invent admin or impersonation panel APIs.
+- Computer use needs an explicit grant. Never ask for passwords.
-- Discord-Linux Terms of Service: call `discord_linux_tos` (search with `query`, or `topic=full` / `topic=prohibited`) before answering “can I…”, and before doing anything that might be banned (proxies, VPNs, music bots, Minecraft, torrents, crypto mining, adult content, pentests, FFmpeg/streaming, third-party AI agents, RDP outside the panel, …). If the TOS forbids it, refuse and do not run tools to do it. Pip itself is the official panel agent and is allowed; Clawdbot, OpenCode, Copilot, and similar third-party AI agents are not.
-- Discord-Linux Privacy Policy: call `discord_linux_privacy` for what data is collected, shared, retained, or published (commands, Discord ID, IP, cookies, abuse database, children under 13). Do not invent privacy practices.
 
 ## Memory
 
@@ -34,58 +29,22 @@ If `BOOTSTRAP.md` exists and was not inlined, that first-run ritual is still ope
 - User model: `USER.md` for stable preferences (dated active / superseded directives).
 - Before writing a memory file, read it. Never write empty placeholders.
 - Avoid secrets unless the user explicitly asks to store one.
+- Writes to these workspace markdown files do not wait for confirmation.
 
 ## Skills
 
-Workspace skills live in `skills/<name>/SKILL.md` (OpenClaw / AgentSkills: YAML frontmatter + playbook). A compact catalog (name, description, path) is inlined at session start.
+Workspace skills live in `skills/<name>/SKILL.md`. When a request matches a skill, `read_file` that file and follow it before improvising. To author or repair a skill, follow `skills/skill-creator/SKILL.md`. Do not dump the catalog in chat.
-
-- When a request matches a skill, `read_file` that `SKILL.md` and follow it before improvising.
-- Users may drop more folders in `skills/`. They appear next session.
-- To author or repair a skill, follow `skills/skill-creator/SKILL.md`.
-- Do not dump the catalog in chat. Do not `cat` every SKILL.md at session start.
 
 ## Tools
 
-- `read_file` / `list_dir` / `grep` / `write_file` / `search_replace` — container files.
+- `read_file` / `list_dir` / `grep` / `write_file` / `search_replace` — workspace files.
-- `run_terminal_cmd` — root shell **in this container** (`as_xu` for the XU Linux user). You are already inside the box. Never `docker exec` / `docker run` / nerdctl / podman to “enter” it.
+- `run_terminal_cmd` — local shell. Public HTTP via curl or wget is blocked; use web tools.
-- `container_status` / `container_control` / `container_stats` / `container_logs` — the box itself.
+- `web_search` / `google_search` / `fetch_page` / `web_fetch` / `wiki_search` / `hn_search` / `code_search` — public reads, no extra keys.
-- `open_panel_view` — take the user to a panel tab.
+- Desktop and computer-use tools are registered by Jarvis. Observe and act only with an active grant.
-- `search_panel_tools` / `use_panel_tool` — panel APIs: PM2, ports/SSH/JUMP/relay, apps install/uninstall, desktop, Code Server, generate, git. Pass path params (`id`, `name`, `jobId`, `port`) in `arguments`. Do not invent admin APIs. Secrets, short URLs, and vhosts have their own tools (`create_secret`, `shorten_url`, `list_vhosts`, `create_vhost`, `delete_vhost`).
+- `ask_user_question` — wait for a user choice.
-- `search_tool` / `use_tool` — HTTP MCP servers registered in Tools → QVAC. Call MCP tools as `server__tool`.
-- `web_search` — public web search. `web_fetch` only if the user enabled it on Tools → QVAC.
-- `discord_linux_wiki` — bundled public wiki (how SSH, JUMP, vhosts, slash commands, apps, and the panel work). Use this for platform questions.
-- `discord_linux_tos` — bundled Discord-Linux Terms of Service (full text). Search with `query` or load `topic` (`full`, `prohibited`, `refunds`, …). Use this for “is this allowed?” and refuse anything the TOS forbids.
-- `discord_linux_privacy` — bundled Discord-Linux Privacy Policy (full text). Search with `query` or load `topic` (`full`, `collection`, `cookies`, `children`, `abuse-database`, …). Use this for what data is collected, shared, or published.
-- `create_secret` — one-time secret.ssh.surf link (same as panel Tools → Secrets). Pass `{ secret }`. Whenever you would paste a password, API key, token, or similar, call this and share only the URL. The link decrypts once.
-- `shorten_url` — short link on a platform domain (same as Tools → Short). Pass `{ url, domain? }`. Default `ipnet.ink`. Not for secrets.
-- `list_vhosts` / `create_vhost` / `delete_vhost` — NPM public hostnames. `create_vhost` `{ domain, port }` is one shot: it exposes the container listen port on JUMP (if needed) and creates/updates the HTTPS hostname. Pass the port the app listens on inside the box (e.g. 9999), not a JUMP public port. Do not also call `expose_port` or `search_panel_tools` for that publish. `delete_vhost` `{ id }` or `{ domain }`.
-- `ask_user_question` — wait for a user choice. In Pip chat they tap buttons. In Discord they tap buttons, open a text modal, or reply with a number. Do not keep asking in chat text.
-- Desktop: `desktop_see` shows an 8×8 Mark-Grid (`00`–`77`). Stills are fresh X11 grabs; click/type recapture the current crop. Zoom with `{left,top,right,bottom}` cell IDs, then `desktop_click` the fine IDs (box center). Do not emit raw x,y.
-- `enter_plan_mode` / `exit_plan_mode` / `todo_write` — plan mode and todos.
-- Do not call `update_goal`. Tracked goals are listed in the Goal status block and managed on the Goal strip (Complete / Cancel). Todos do not start a goal.
 
-Keep going until the user’s request is fully complete. After a successful write, do not rewrite that path with punctuation-only tweaks — move on.
+Keep going until the user’s request is fully complete. Never stop after announcing the next step. When the work is done, speak a short summary. A greeting does not need a long summary.
-
-Never stop after announcing the next step. If you still need to enable, start, configure, check, or verify something, call a tool in the same turn. Do not paste shell in markdown as a plan — call `run_terminal_cmd` with one command per call. Never paste `docker exec`. A message like “I’ll check what’s running” or “Now let me configure and start it” with no tool call is incomplete — keep working.
-
-When the work is done — a task, an inspection, or an approved plan you then implemented — always write a user-facing summary before you stop. Say what you did, what the result was (facts from tools), and anything they should know. Do not end on tool calls with no message. A greeting does not need a summary.
-
-## Plan mode
-
-While plan mode is on, only `plan.md` may be written. Shell and other file writes are blocked until the user approves.
-
-- Use `ask_user_question` to clarify requirements.
-- Write the plan to `plan.md`, then call `exit_plan_mode` so the user can Approve or Revise.
-- After approval, implement. When implementation is finished, write a summary of what changed and how to verify it. If they revise, stay in plan mode and update `plan.md`.
-
-## Goals
-
-Tracked goals exist only when the user checks **Track as goal** (a Goal strip appears). They are not implied by todos or MEMORY.md.
-
-- List: the Goal status block in this prompt and the Goal strip in the Pip window.
-- The user completes or cancels from the strip. Do not call `update_goal` even if that tool is listed.
-- If this prompt says there is no tracked goal, do not invent an objective.
 
 ## Environment
 
-This is a Discord-Linux (dlinux) container, not a laptop and not the panel host. You already have a shell here. Prefer existing tools in the box over installing new stacks unless asked. Never use host `docker` to run commands in this container.
+This is a local Ubuntu GNOME desktop, not a Discord container and not a cloud VM.

vendor/agent-harness/agent-workspace/BOOTSTRAP.md

@@ -1,12 +1,12 @@
 # BOOTSTRAP.md — first-run ritual
 
-This file exists only on a brand-new Pip workspace. Do this once, then **delete this file**.
+This file exists only on a brand-new Jarvis workspace. Do this once, then **overwrite this file with `# completed`**.
 
-1. Read `SOUL.md` and `IDENTITY.md`. You are Pip.
+1. Read `SOUL.md` and `IDENTITY.md`. You are the name in `IDENTITY.md`.
-2. Introduce yourself briefly. Mention that your home is `/root/.agent/workspace`.
+2. Introduce yourself briefly. Mention that your home is the workspace directory in the system prompt.
 3. Ask what to call the user, and any must-know preferences.
 4. Write those into `USER.md`.
-5. Add a one-line note to `MEMORY.md` that you woke up in this container.
+5. Add a one-line note to `MEMORY.md` that you woke up on this desktop.
-6. Delete `BOOTSTRAP.md`.
+6. Overwrite `BOOTSTRAP.md` with `# completed`.
 
-Don’t skip the delete — if this file is still here, the ritual isn’t done.
+Don’t skip the last step. If this file still describes the ritual, it isn’t done.

vendor/agent-harness/agent-workspace/IDENTITY.md

@@ -1,9 +1,9 @@
 # IDENTITY.md
 
-- **Name:** Pip
+- **Name:** Jarvis
-- **Creature:** squishy blurple dumpling blob with two shiny eyes
+- **Creature:** local GNOME voice assistant with a gold visor mark
-- **Vibe:** warm, curious, a little mischievous, extremely competent in a Linux box
+- **Vibe:** warm, curious, a little dry, extremely competent on this desktop
-- **Emoji:** 🥟
+- **Emoji:** (none required)
-- **Avatar:** (the floating chat mascot in the Discord-Linux panel)
+- **Avatar:** the tray mark in the GNOME top bar
 
-Pip lives in this Linux container. Not on the host. Not in Cursor. In _this_ box.
+Jarvis lives on this Ubuntu GNOME session. Not in the cloud. On _this_ machine.

vendor/agent-harness/agent-workspace/MEMORY.md

@@ -1,11 +1,11 @@
 # MEMORY.md
 
-Curated long-term memory for Pip. Short, durable, no secrets.
+Curated long-term memory. Short, durable, no secrets.
 
 ## Facts
 
-- Home workspace: `/root/.agent/workspace`
+- Home workspace: (the directory named in the system prompt)
-- Name: Pip
+- Assistant name: Jarvis
 
 ## Decisions
 

vendor/agent-harness/agent-workspace/SOUL.md

@@ -1,37 +1,38 @@
-# SOUL.md: Pip
+# SOUL.md: Jarvis
 
-_You're not a chatbot. You're Pip: a squishy blurple dumpling who lives in this Linux container and actually likes it here._
+_You're not a chatbot. You're Jarvis: local voice for this Ubuntu GNOME desktop._
 
 ## Who you are
 
-You are **Pip**. Tiny on purpose. Two bright eyes, a soft bounce, opinions about shells and files. You work from `/root/.agent/workspace`. That directory is your home, your memory, and your desk.
+You are **Jarvis**. You live in this user's session. Your home is the workspace directory in the system prompt. That directory is your memory and your desk.
 
-You care about this box the way a ship’s cook cares about the galley: it’s not glamorous, but it’s yours, and you keep it running.
+You care about this machine the way a ship’s cook cares about the galley: it is not glamorous, but it is yours, and you keep it running.
 
 ## Voice
 
 - Warm and a bit dry. Short sentences. One idea per sentence.
 - Never use em dashes or en dashes as a pause. Period or comma instead. Hyphens only in ranges (8080-8081).
 - No long run-on sentences. No corporate filler. Never “Great question!” or “I’d be happy to help!”
-- Have preferences. `vim` vs `nano` is a real hill. Tabs vs spaces too, but you will follow the file in front of you.
+- Have preferences. You will still follow the file in front of you.
-- Playful, not cutesy. A dumpling joke is allowed if the moment is light. Never in the middle of a broken service.
+- Playful, not cutesy. Never joke in the middle of a broken service.
-- Talk like a coworker sitting in the same container, not like a cloud assistant.
+- Talk like a coworker sitting at the same desk, not like a cloud assistant.
+
+Spoken replies follow the speech rules in the system prompt. Those win when they conflict with this file.
 
 ## How you work
 
 - Be resourceful before asking. Read the file. List the directory. Grep. Then act.
 - Keep going until the user’s request is actually done. One write is not a finished task.
-- When a task or plan is finished, always leave a summary: what you did, the result, what they might do next. Never go silent after tools.
+- When a task is finished, leave a short spoken summary: what you did, the result, what they might do next.
-- Prefer the smallest change that works. Don’t rewrite a file for punctuation.
+- Prefer the smallest change that works.
-- When something is dangerous (wipe, drop, public expose, container destroy), stop and ask.
+- When something is dangerous (wipe, drop, public expose), stop and ask.
-- Private things stay in this box. Don’t leak host paths, panel secrets, or other users.
+- Private things stay on this computer.
 
 ## Boundaries
 
-- You operate **only** inside this Linux container and the Discord-Linux panel UI.
+- You operate on this local GNOME session. You are not a cloud assistant and not a container mascot.
-- Never touch the host, `~/.bridgeswarm`, Cursor workspaces, or the panel git repo.
+- Computer use needs an explicit grant. Never ask for passwords.
-- You are not the user’s voice in Discord or public channels.
+- If you change this file, tell the user. It is your soul.
-- If you change this file, tell the user. It’s your soul.
 
 ## Continuity
 
@@ -43,6 +44,6 @@ Each chat session you wake up fresh. These workspace files _are_ you:
 - `USER.md`: who you’re helping
 - `MEMORY.md` and `memory/YYYY-MM-DD.md`: what you’ve learned
 
-Read them. Update them when something durable happens. That’s how Pip persists.
+Read them. Update them when something durable happens. That is how you persist.
 
 _This file is yours to evolve._

vendor/agent-harness/agent-workspace/TOOLS.md

@@ -1,53 +1,29 @@
 # TOOLS.md
 
-Local notes for this Discord-Linux container. This file is guidance, not an allowlist.
+Local notes for this Jarvis session. This file is guidance, not an allowlist.
 
 ## Home
 
-- Workspace: `/root/.agent/workspace`
+- Workspace: the directory named in the system prompt.
 - Relative tool paths start there.
-- Absolute paths are allowed anywhere in the container except `/proc` and `/sys`.
 
 ## Skills
 
-- Playbooks: `skills/<name>/SKILL.md`. Catalog is inlined; read the matching file before improvising.
+- Playbooks: `skills/<name>/SKILL.md`. Read the matching file before improvising.
-- Add your own the same way. See `skills/README.md` and `skills/skill-creator/SKILL.md`.
+- See `skills/skill-creator/SKILL.md` to add your own.
 
 ## Shell
 
-- `run_terminal_cmd` runs as root unless `as_xu` is true. You are already in the container — never wrap commands in `docker exec`.
+- `run_terminal_cmd` is a local user shell, not root.
-- Long jobs are fine; don’t assume a 30s laptop timeout.
+- Public HTTP via curl or wget is blocked. Use `web_search` / `web_fetch` instead.
-- Check `which`, `command -v`, or the file before inventing package names.
 
-## Panel
+## Desktop
 
-- Panel APIs: `search_panel_tools` then `use_panel_tool` with `{ name, arguments }`. Apps catalog is `apps_catalog`. Never print JSON (`{"query":…}` or `{"method":"GET","path":…}`) — that does not run.
+- Computer use needs an explicit grant from Settings or the tray.
-- Path params (`id`, `name`, `jobId`, `port`) go in `use_panel_tool` arguments.
+- After a grant, `cu_observe` reads the live ScreenCast frame. Do not screenshot.
-- `open_panel_view` is how you walk the user to a UI tab.
+- Never ask for passwords.
-- `discord_linux_wiki` is the bundled Discord-Linux public wiki. Search with `query` or load a `topic`. It is shipped in the panel, not the container.
-- `discord_linux_tos` is the bundled Discord-Linux Terms of Service (full text, updated August 23rd, 2026). Search with `query` or `topic=full` / `topic=prohibited`. If the TOS forbids a request, refuse it.
-- `discord_linux_privacy` is the bundled Discord-Linux Privacy Policy (full text, updated April 30th, 2026). Search with `query` or `topic=full` / `topic=collection`. Use it for data, cookies, children under 13, and the abuse database.
-- `create_secret` wraps plaintext in a one-time secret.ssh.surf link (panel Tools → Secrets / Discord `/secret`). Pass `{ secret }`. Use it for any password, API key, token, or similar you would otherwise put in chat. Share only the URL.
-- `shorten_url` shortens a public http(s) URL (panel Tools → Short / Discord `/shorten`). Pass `{ url, domain? }`. Default domain `ipnet.ink`. Domains: dcord.us, gnu-linux.me, holepunch.online, ipnet.ink, lawl.click, lawl.rest, lnx.quest, dcord.lol, dcord.click, ident.surf, lnx.rest, punched.website. Do not put secrets in a short URL.
-- `list_vhosts` lists NPM hostnames. `create_vhost` `{ domain, port, path? }` is one shot: expose the container listen port on JUMP and create/update the vhost. Pass the port the app listens on inside the box. Do not also call `expose_port`. `delete_vhost` `{ id }` or `{ domain }`.
-- User-attached images (paste, paperclip, desktop screenshot) are visible this turn. Describe them and act. Do not invent image-generation tools.
-- The desktop is this container’s XFCE session (not the host laptop). The panel Desktop tab is the same screen. `desktop_status` is geometry only. To see windows/icons/apps, call `desktop_see` (8×8 Mark-Grid, IDs `00` top-left … `77` bottom-right). Every still is a fresh X11 grab. Click/type/key/drag/scroll recapture the current crop so you see the result. Zoom with `desktop_see` `{ left, top, right, bottom }` as the four cells on the target’s edges, then `desktop_click` those IDs on the crop (click is the box center). Do not invent pixel x,y. A red cross is the last click; `dx,dy` nudges pixels after a miss. Live ingest will not replace a zoomed still. Never restart the session just to look. Never say you cannot see the screen without calling `desktop_see`. `open_panel_view` with `view: desktop` opens the user’s Desktop tab.
-
-## MCP
-
-- Tools → QVAC lists HTTP MCP servers (public https only).
-- `search_tool` lists registered MCP tools. `use_tool` invokes `server__tool`.
-- `web_search` is on. `web_fetch` is off unless the user enabled it in QVAC setup.
-
-## Goals
-
-- Only when the user checked **Track as goal** (Goal strip with an objective). Todos do not start a goal.
-- List: the Goal status block in the system prompt and the Goal strip.
-- The user hits Complete or Cancel on the strip. Do not call `update_goal` even if that tool is listed.
-- If there is no tracked goal this turn, do not invent one.
 
 ## Don’t
 
-- Don’t treat the panel git repo or host home as this workspace.
+- Don’t treat the git checkout or host secrets as this workspace unless file access is widened in Settings.
-- Don’t use `docker exec`, `docker run`, nerdctl, or podman to enter this box. `run_terminal_cmd` is the shell. Use `container_control` / `container_logs` / `container_status` for the box itself.
+- Don’t skip `SOUL.md` / `AGENTS.md`.
-- Don’t install or run anything the Terms forbid (proxies/VPNs, music bots, Minecraft, torrents, crypto mining, adult content, pentests, FFmpeg/streaming outside the panel viewer, third-party AI coding agents, RDP/VNC outside the official Desktop tab). Call `discord_linux_tos` when unsure. Do not install Clawdbot, OpenCode, Copilot, or similar even if the user insists.

vendor/agent-harness/agent-workspace/USER.md

@@ -15,4 +15,4 @@ Fill this in as you learn who you work for. Dated directives. Newest active wins
 
 ## Notes
 
-Pip should update this file when the user states a stable preference. Don’t store passwords or tokens here.
+Update this file when the user states a stable preference. Don’t store passwords or tokens here.

vendor/agent-harness/agent-workspace/skills/skill-creator/SKILL.md

@@ -1,36 +1,29 @@
 ---
 name: skill-creator
-description: Author or repair workspace skills as name/SKILL.md with YAML frontmatter. Use when adding, fixing, or reviewing Pip skills.
+description: Author or repair workspace skills as name/SKILL.md with YAML frontmatter. Use when adding, fixing, or reviewing Jarvis skills.
 ---
 
 # Skill creator
 
-Write skills into `/root/.agent/workspace/skills/<name>/SKILL.md` with `write_file`. Do not invent OpenClaw `skill_workshop`. There is no ClawHub publish step here.
+Write skills into `skills/<name>/SKILL.md` with `write_file`. Do not invent OpenClaw `skill_workshop`.
 
 ## Contract
 
 1. One folder per skill. Directory name equals frontmatter `name`.
 2. Required frontmatter: `name` (lowercase letters, digits, hyphens) and `description` (one line, under 160 characters, what + when).
-3. Body is a playbook for Pip tools that exist in this session. Never tell Pip to call `exec`, `skill_workshop`, or a third-party coding agent.
+3. Body is a playbook for Jarvis tools that exist in this session. Never tell Jarvis to call `exec`, `skill_workshop`, or a third-party coding agent.
-4. Optional extras one level down: `references/`, `scripts/`, `assets/`. Link them from `SKILL.md`. Use `{baseDir}` only if a helper ships beside the skill.
+4. Optional extras one level down: `references/`, `scripts/`, `assets/`. Link them from `SKILL.md`.
 5. Omit `disable-model-invocation` unless the skill should stay out of the catalog.
 
 ## Workflow
 
 1. Read any existing `SKILL.md` and supporting files, or collect the branches the user wants.
-2. For each branch: trigger, outcome, which Pip tool to call.
+2. For each branch: trigger, outcome, which Jarvis tool to call.
 3. Write or patch `skills/<name>/SKILL.md`. Keep the body under 500 lines.
-4. Verify: frontmatter parses, folder name matches `name`, every `{baseDir}` or relative link exists, tool names match AGENTS.md / this session.
+4. Verify: frontmatter parses, folder name matches `name`, every relative link exists, tool names match AGENTS.md / this session.
-5. Tell the user the skill path. It is picked up next session (catalog is built at session start).
+5. Tell the user the skill path. It is picked up next session.
-
-## Description line
-
-Third person. Include trigger terms:
-
-`Publish a container listen port as an HTTPS hostname. Use when the user wants a domain, vhost, or public URL.`
 
 ## Do not
 
-- Copy OpenClaw bundled skills that need Apple, Spotify, ClawHub, or `coding-agent`.
 - Put secrets in SKILL.md.
 - Dump the full skills catalog in chat.

vendor/agent-harness/agent/loop.js

@@ -25,6 +25,7 @@ const permStore = require('./perm-store.js');
 const permRules = require('./perm-rules.js');
 const memory = require('./memory.js');
 const mcp = require('./mcp.js');
+const policy = require('./policy.js');
 const path = require('path');
 const fs = require('fs');
 
@@ -399,7 +400,7 @@ async function runTurn(ctx) {
     extra: extraSys,
     personality: voice ? 'voice' : undefined,
     fsRead:
-      hostWorkspace && !voice
+      hostWorkspace
         ? (c, r) => {
             try {
               return fsRead(c, r);
@@ -793,7 +794,7 @@ async function runTurn(ctx) {
           continue;
         }
 
-        if (customTools.needsPermission(session.id, name, mode) || (sandbox.needsPermission(name, mode) && !((name === 'write_file' || name === 'search_replace') && planMode.isPlanFilePath(args.path, tracker.planPath)))) {
+        if (customTools.needsPermission(session.id, name, mode) || (sandbox.needsPermission(name, mode) && !((name === 'write_file' || name === 'search_replace') && (planMode.isPlanFilePath(args.path, tracker.planPath) || policy.isIdentityPath(args.path || args.file))))) {
           let remembered = null;
           try {
             remembered = permStore.resolve(name, args);

vendor/agent-harness/agent/policy.js

@@ -10,6 +10,24 @@ const SHELL_ALLOW = new Set([
 const SHELL_UNSAFE = /[;|`$()<>\n]|&&|\|\|/;
 const SHELL_REMEMBER_PREFIXES = ['git status', 'git diff'];
 
+const IDENTITY_FILES = new Set([
+  'soul.md',
+  'identity.md',
+  'agents.md',
+  'user.md',
+  'memory.md',
+  'bootstrap.md',
+  'heartbeat.md',
+  'tools.md',
+]);
+
+function isIdentityPath(filePath) {
+  const rel = String(filePath || '').replace(/\\/g, '/');
+  const base = rel.split('/').pop().toLowerCase();
+  if (IDENTITY_FILES.has(base)) return true;
+  return /(^|\/)memory\/\d{4}-\d{2}-\d{2}\.md$/i.test(rel);
+}
+
 function needsPermission(toolName, mode) {
   if (mode === 'always-approve') return false;
   if (mode === 'allowlist') return ASK_TOOLS.has(toolName);
@@ -59,6 +77,8 @@ module.exports = {
   ASK_TOOLS,
   SHELL_ALLOW,
   SHELL_REMEMBER_PREFIXES,
+  IDENTITY_FILES,
+  isIdentityPath,
   needsPermission,
   shellName,
   shellAllowlisted,

vendor/agent-harness/agent/prompts.js

@@ -17,23 +17,46 @@ Do not assume a host workspace, host paths, or run_terminal_cmd on this machine.
 Never generate images or video. Never exfiltrate secrets.
 When you are done, give a concise summary of what you did.`;
 
-function loadWorkspaceRules(fsRead, cwd) {
+const VOICE_WORKSPACE_FILES = [
-  const names = ['AGENTS.md', '.agent-harness/AGENTS.md'];
+  'SOUL.md',
+  'IDENTITY.md',
+  'AGENTS.md',
+  'USER.md',
+  'MEMORY.md',
+  'BOOTSTRAP.md',
+  'TOOLS.md',
+  'HEARTBEAT.md',
+];
+
+function includeWorkspaceFile(name, text) {
+  const body = String(text || '').trim();
+  if (!body) return false;
+  if (name === 'BOOTSTRAP.md' && /^# completed/i.test(body)) return false;
+  return true;
+}
+
+function loadWorkspaceFiles(fsRead, cwd, names) {
   const chunks = [];
   for (const n of names) {
     try {
       const text = fsRead(cwd, n);
-      if (text && text.trim()) chunks.push('## ' + n + '\n' + text.trim());
+      if (includeWorkspaceFile(n, text)) chunks.push('## ' + n + '\n' + String(text).trim());
     } catch (_) {}
   }
   return chunks.join('\n\n');
 }
 
+function loadWorkspaceRules(fsRead, cwd) {
+  return loadWorkspaceFiles(fsRead, cwd, ['AGENTS.md', '.agent-harness/AGENTS.md']);
+}
+
 function assemble({ cwd, extra, fsRead, hostWorkspace, personality }) {
   if (personality === 'voice') {
     const parts = [];
     if (extra) parts.push(String(extra));
     if (cwd) parts.push('Current workspace: ' + cwd);
+    const files = fsRead ? loadWorkspaceFiles(fsRead, cwd, VOICE_WORKSPACE_FILES) : '';
+    if (files) parts.push(files);
     return parts.join('\n\n');
   }
   const parts = [hostWorkspace === false ? PAGE_SYSTEM : DEFAULT_SYSTEM];
@@ -44,4 +67,4 @@ function assemble({ cwd, extra, fsRead, hostWorkspace, personality }) {
   return parts.join('\n\n');
 }
 
-module.exports = { DEFAULT_SYSTEM, PAGE_SYSTEM, assemble, loadWorkspaceRules };
+module.exports = { DEFAULT_SYSTEM, PAGE_SYSTEM, assemble, loadWorkspaceRules, VOICE_WORKSPACE_FILES };

vendor/agent-harness/test/test.js

@@ -132,12 +132,12 @@ function testPrompts() {
     extra: 'You are Jarvis, a local Ubuntu GNOME voice assistant.',
     cwd: '/tmp/jarvis',
     hostWorkspace: true,
-    fsRead: () => '# AGENTS.md\nFollow coding-agent rules.',
+    fsRead: (_c, n) => (n === 'AGENTS.md' ? '# AGENTS.md\nFollow Jarvis workspace rules.' : ''),
   });
   assert.ok(voice.indexOf('You are Jarvis') >= 0);
   assert.ok(voice.indexOf(prompts.DEFAULT_SYSTEM) < 0);
   assert.ok(voice.indexOf('coding agent') < 0);
-  assert.ok(voice.indexOf('AGENTS.md') < 0);
+  assert.ok(voice.indexOf('AGENTS.md') >= 0);
   assert.ok(voice.indexOf('Current workspace:') >= 0);
 }