voice: harden local voice stack and enforce UUID agent ids

packages/cli/src/cli.ts

@@ -144,10 +144,10 @@ export function createCli(): Command {
 
   // Internal voice MCP stdio bridge command (hidden).
   program
-    .command('__paseo_voice_mcp_bridge')
+    .command('__paseo_voice_mcp_bridge', { hidden: true })
     .description('Internal voice MCP bridge command')
-    .argument('<callerAgentId>')
     .requiredOption('--socket <path>')
+    .requiredOption('--caller-agent-id <id>')
     .action(runVoiceMcpBridgeCommand)
 
   return program

packages/cli/src/commands/voice-mcp-bridge.ts

@@ -2,16 +2,16 @@ import { runVoiceMcpBridgeCli } from "@getpaseo/server";
 
 type VoiceBridgeOptions = {
   socket: string;
+  callerAgentId: string;
 };
 
 export async function runVoiceMcpBridgeCommand(
-  callerAgentId: string,
   options: VoiceBridgeOptions
 ): Promise<void> {
   await runVoiceMcpBridgeCli([
     "--socket",
     options.socket,
     "--caller-agent-id",
-    callerAgentId,
+    options.callerAgentId,
   ]);
 }