factory-ai 1.1.0 → 1.2.1

package/CHANGELOG.md

@@ -11,6 +11,19 @@ All notable changes follow semantic versioning and the Keep a Changelog structur
 - Azure and Bedrock provider wizard.
 - Durable evaluation, analytics, scaling, policy, extension, and recovery roadmap.
 
+## [1.2.1] - 2026-07-13
+
+### Fixed
+
+- Make updater installation idempotent when the staged application already occupies the final runtime path.
+
+## [1.2.0] - 2026-07-13
+
+### Added
+
+- Telegram natural-language objectives, default repositories, objective lookup, and automatic progress/completion notifications.
+- Six-hour verified stable updates with CI/security gates, durable version records, major-version blocking, and rollback.
+
 ## [1.1.0] - 2026-07-13
 
 ### Added

package/README.md

@@ -201,7 +201,20 @@ Only explicitly allowlisted chat IDs are accepted. Supported commands:
 /help
 ```
 
-Telegram cannot run shell commands, read secrets, modify release policy, or bypass review gates. Durable update offsets prevent duplicate objectives after restarts.
+Set a default repository with `/repo OWNER/REPO`, then send plain-text instructions without a command. `/recent` lists recent objectives and `/objective ID` shows task-level detail. Factory AI automatically pushes deduplicated status, active-agent, completion, PR, failure, and blocker updates to the originating chat.
+
+Telegram cannot run shell commands, read secrets, modify release policy, or bypass review gates. Durable update offsets, repository preferences, and objective subscriptions survive restarts.
+
+## Verified Automatic Updates
+
+The VM checks npm stable releases every six hours with a randomized delay. Updates are accepted only when:
+
+- The release remains within the installed major version.
+- npm `gitHead` resolves to the exact GitHub commit.
+- The commit has successful CI.
+- A fresh isolated clone passes install, syntax, lint, tests, dependency audit, Bicep, shell validation, and Gitleaks.
+
+The updater records the installed version on retained storage and restores the previous commit if deployment fails. Major upgrades always require explicit operator action.
 
 ## Security
 

package/RUNBOOK.md

@@ -31,6 +31,8 @@ factory setup
 
 Override defaults with `FACTORY_RESOURCE_GROUP`, `FACTORY_VM`, and `FACTORY_SERVICE_BUS`.
 
+Verified stable updates run every six hours through `factory-ai-update.timer`. Inspect with `systemctl status factory-ai-update.timer` and `journalctl -u factory-ai-update.service`. Automatic major-version upgrades are intentionally blocked.
+
 ## Recovery
 
 If a worker dies, systemd restarts it and Service Bus redelivers after lock expiry. Do not manually duplicate the task. Check `dashboard`, then `logs`, then queue dead-letter counts. Preserve objective state before purging dead letters.

package/bootstrap/auto-update.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+exec 9>/var/lock/factory-ai-update.lock
+flock -n 9 || { printf 'Factory AI update already running.\n'; exit 0; }
+
+app=/opt/agent-factory/app
+state=/opt/agent-factory/state
+status=$(FACTORY_PACKAGE_FILE="$app/package.json" node "$app/src/updater.js")
+available=$(jq -r .updateAvailable <<<"$status")
+[[ $available == true ]] || { printf 'Factory AI is current: %s\n' "$(jq -r .current <<<"$status")"; exit 0; }
+
+version=$(jq -r .latest <<<"$status")
+commit=$(jq -r .gitHead <<<"$status")
+[[ $commit =~ ^[0-9a-f]{40}$ ]] || { printf 'npm release does not contain a valid gitHead.\n' >&2; exit 1; }
+
+set -a
+source /etc/agent-factory.env
+set +a
+github_token=$(az keyvault secret show --vault-name "$KEY_VAULT_NAME" --name github-token --query value --output tsv)
+checks=$(GH_TOKEN="$github_token" gh api "repos/itsvedantkumar/factory-ai/commits/$commit/check-runs" --jq '[.check_runs[] | select(.name == "verify") | .conclusion] | any(. == "success")')
+[[ $checks == true ]] || { printf 'Candidate commit lacks successful CI verification.\n' >&2; exit 1; }
+
+temporary=$(mktemp -d /var/tmp/factory-ai-update.XXXXXX)
+trap 'rm -rf "$temporary"; unset github_token' EXIT
+previous_commit=$(jq -r '.commit // empty' "$state/runtime-version.json" 2>/dev/null || true)
+cp "$app/bootstrap/deploy-runtime.sh" "$temporary/rollback-deploy.sh"
+GH_TOKEN="$github_token" gh repo clone itsvedantkumar/factory-ai "$temporary/source" -- --no-checkout
+git -C "$temporary/source" checkout --detach "$commit"
+test "$(git -C "$temporary/source" rev-parse HEAD)" = "$commit"
+
+npm ci --prefix "$temporary/source"
+npm run check --prefix "$temporary/source"
+npm run lint --prefix "$temporary/source"
+npm test --prefix "$temporary/source"
+npm audit --prefix "$temporary/source" --audit-level=high
+az bicep build --file "$temporary/source/infra/main.bicep" --stdout >/dev/null
+bash -n "$temporary/source/bootstrap/setup.sh" "$temporary/source/bootstrap/deploy-runtime.sh" "$temporary/source/bin/factory"
+docker run --rm --read-only --volume "$temporary/source:/workspace:ro" \
+  zricethezav/gitleaks@sha256:c00b6bd0aeb3071cbcb79009cb16a60dd9e0a7c60e2be9ab65d25e6bc8abbb7f \
+  detect --source /workspace --redact --no-banner --exit-code 1
+
+printf 'Deploying Factory AI %s (%s)\n' "$version" "$commit"
+if ! bash "$temporary/source/bootstrap/deploy-runtime.sh" \
+  KEY_VAULT_NAME "$KEY_VAULT_NAME" \
+  SERVICE_BUS_NAMESPACE "$SERVICE_BUS_NAMESPACE" \
+  SERVICE_BUS_QUEUE code-tasks \
+  SOURCE_REPOSITORY itsvedantkumar/factory-ai \
+  SOURCE_REF "$commit"; then
+  printf 'Candidate deployment failed. Restoring previous runtime.\n' >&2
+  if [[ $previous_commit =~ ^[0-9a-f]{40}$ ]]; then
+    bash "$temporary/rollback-deploy.sh" \
+      KEY_VAULT_NAME "$KEY_VAULT_NAME" \
+      SERVICE_BUS_NAMESPACE "$SERVICE_BUS_NAMESPACE" \
+      SERVICE_BUS_QUEUE code-tasks \
+      SOURCE_REPOSITORY itsvedantkumar/factory-ai \
+      SOURCE_REF "$previous_commit"
+  fi
+  exit 1
+fi
+printf 'Factory AI updated to %s.\n' "$version"

package/bootstrap/deploy-runtime.sh

@@ -72,3 +72,11 @@ FACTORY_MODEL_REVIEWER="${FACTORY_MODEL_REVIEWER:-}" \
 FACTORY_MODEL_SECURITY="${FACTORY_MODEL_SECURITY:-}" \
 FACTORY_MODEL_RELEASE="${FACTORY_MODEL_RELEASE:-}" \
 bash /opt/agent-factory/app/bootstrap/setup.sh
+install -d -o factory -g factory -m 0750 /opt/agent-factory/state
+version=$(node -p 'require("/opt/agent-factory/app/package.json").version')
+jq -n --arg version "$version" --arg commit "$SOURCE_REF" --arg repository "$SOURCE_REPOSITORY" \
+  '{version:$version,commit:$commit,repository:$repository,installedAt:(now|todate)}' \
+  > /opt/agent-factory/state/runtime-version.json.tmp
+chown factory:factory /opt/agent-factory/state/runtime-version.json.tmp
+chmod 0640 /opt/agent-factory/state/runtime-version.json.tmp
+mv /opt/agent-factory/state/runtime-version.json.tmp /opt/agent-factory/state/runtime-version.json

package/bootstrap/factory-ai-update.service

@@ -0,0 +1,17 @@
+[Unit]
+Description=Factory AI verified stable update
+After=network-online.target docker.service
+Wants=network-online.target
+Requires=docker.service
+
+[Service]
+Type=oneshot
+User=root
+Group=root
+ExecStart=/opt/agent-factory/app/bootstrap/auto-update.sh
+Nice=10
+IOSchedulingClass=best-effort
+IOSchedulingPriority=7
+PrivateTmp=true
+ProtectHome=true
+UMask=0027

package/bootstrap/factory-ai-update.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Check for verified Factory AI updates every six hours
+
+[Timer]
+OnCalendar=*-*-* 00/6:00:00
+RandomizedDelaySec=30m
+Persistent=true
+
+[Install]
+WantedBy=timers.target

package/bootstrap/setup.sh

@@ -114,11 +114,15 @@ install -m 0644 "$APP_DIR/bootstrap/agent-factory-release.service" /etc/systemd/
 install -m 0644 "$APP_DIR/bootstrap/agent-factory-reporter.service" /etc/systemd/system/agent-factory-reporter.service
 install -m 0644 "$APP_DIR/bootstrap/agent-factory-reporter.timer" /etc/systemd/system/agent-factory-reporter.timer
 install -m 0644 "$APP_DIR/bootstrap/agent-factory-telegram.service" /etc/systemd/system/agent-factory-telegram.service
+chmod 0755 "$APP_DIR/bootstrap/auto-update.sh"
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-update.service" /etc/systemd/system/factory-ai-update.service
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-update.timer" /etc/systemd/system/factory-ai-update.timer
 systemctl daemon-reload
 systemctl enable --now agent-factory-worker.service
 systemctl enable --now agent-factory-control.service
 systemctl enable --now agent-factory-release.service
 systemctl enable --now agent-factory-reporter.timer
 systemctl enable --now agent-factory-telegram.service
+systemctl enable --now factory-ai-update.timer
 systemctl restart agent-factory-control.service agent-factory-worker.service agent-factory-release.service
 echo "Agent factory worker installed"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "factory-ai",
-  "version": "1.1.0",
+  "version": "1.2.1",
   "description": "Deploy a private autonomous coding-agent factory on Azure: isolated builders, testers, security reviewers, durable orchestration, multi-model routing, memory, cost controls, and gated GitHub pull requests.",
   "private": false,
   "license": "MIT",

package/src/telegram-service.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
 import path from "node:path";
+import { createHash } from "node:crypto";
 import { DefaultAzureCredential } from "@azure/identity";
 import { ServiceBusClient } from "@azure/service-bus";
 import { loadConfig } from "./config.js";
 import { loadRuntimeSecrets } from "./secrets.js";
 import { sendMessage } from "./bus.js";
 import { loadLocalState, loadQueueMetrics } from "./dashboard.js";
-import { isAllowedChat, objectiveFromTelegram, parseTelegramCommand } from "./telegram.js";
+import { formatObjectiveProgress, isAllowedChat, objectiveFromTelegram, parseTelegramCommand } from "./telegram.js";
 import { log } from "./log.js";
 
 const config = loadConfig();
@@ -21,9 +22,16 @@ if (!token || allowed.size === 0) {
 
 const directory = path.join(config.stateDir, "telegram");
 const offsetFile = path.join(directory, "offset");
+const preferencesFile = path.join(directory, "preferences.json");
+const subscriptionsFile = path.join(directory, "subscriptions.json");
 await mkdir(directory, { recursive: true, mode: 0o750 });
 let offset = 0;
 try { offset = Number(await readFile(offsetFile, "utf8")) || 0; } catch (error) { if (error.code !== "ENOENT") throw error; }
+async function loadJson(file) {
+  try { return JSON.parse(await readFile(file, "utf8")); } catch (error) { if (error.code === "ENOENT") return {}; throw error; }
+}
+const preferences = await loadJson(preferencesFile);
+const subscriptions = await loadJson(subscriptionsFile);
 
 const client = new ServiceBusClient(config.serviceBusFqdn, new DefaultAzureCredential());
 const sender = client.createSender(config.controlQueue);
@@ -51,6 +59,12 @@ async function saveOffset(value) {
   await rename(temporary, offsetFile);
 }
 
+async function saveJson(file, value) {
+  const temporary = `${file}.${process.pid}.tmp`;
+  await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o640 });
+  await rename(temporary, file);
+}
+
 async function statusText() {
   const [{ states }, queue] = await Promise.all([loadLocalState(config.stateDir), loadQueueMetrics(config)]);
   const counts = {};
@@ -62,17 +76,52 @@ async function processUpdate(update) {
   const message = update.message;
   if (!message?.text || !isAllowedChat(message.chat?.id, allowed)) return;
   try {
-    const command = parseTelegramCommand(message.text);
-    if (command.type === "help") return reply(message.chat.id, "/submit OWNER/REPO objective\n/goal OWNER/REPO objective\n/loop OWNER/REPO objective\n/status\n/help");
+    const chatId = String(message.chat.id);
+    const command = parseTelegramCommand(message.text, preferences[chatId]?.repository);
+    if (command.type === "help") return reply(message.chat.id, "/repo OWNER/REPO\nPlain text objective\n/submit OWNER/REPO objective\n/goal [OWNER/REPO] objective\n/loop [OWNER/REPO] objective\n/status\n/recent\n/objective ID\n/help");
     if (command.type === "status") return reply(message.chat.id, await statusText());
+    if (command.type === "set_repository") {
+      preferences[chatId] = { repository: command.repository, updatedAt: new Date().toISOString() };
+      await saveJson(preferencesFile, preferences);
+      return reply(message.chat.id, `Default repository set to ${command.repository}. You can now send plain-text objectives.`);
+    }
+    if (command.type === "recent") {
+      const { states } = await loadLocalState(config.stateDir);
+      const text = states.slice(-10).reverse().map((state) => `${state.status ?? "unknown"} — ${state.objective?.id}\n${String(state.objective?.objective ?? "").slice(0, 150)}`).join("\n\n") || "No objectives.";
+      return reply(message.chat.id, text);
+    }
+    if (command.type === "objective") {
+      const state = JSON.parse(await readFile(path.join(config.stateDir, command.objectiveId, "state.json"), "utf8"));
+      return reply(message.chat.id, formatObjectiveProgress(state));
+    }
     const objective = objectiveFromTelegram(update.update_id, command);
     await sendMessage(sender, objective, objective.id);
+    subscriptions[objective.id] = { chatId, lastDigest: "", createdAt: new Date().toISOString() };
+    await saveJson(subscriptionsFile, subscriptions);
     await reply(message.chat.id, `Queued ${objective.id}\n${command.repository}\n${command.objective}`);
   } catch (error) {
     await reply(message.chat.id, `Rejected: ${String(error.message ?? error).slice(0, 500)}`);
   }
 }
 
+async function notifyProgress() {
+  let changed = false;
+  for (const [objectiveId, subscription] of Object.entries(subscriptions)) {
+    let state;
+    try { state = JSON.parse(await readFile(path.join(config.stateDir, objectiveId, "state.json"), "utf8")); }
+    catch (error) { if (error.code === "ENOENT") continue; throw error; }
+    const text = formatObjectiveProgress(state);
+    const digest = createHash("sha256").update(text).digest("hex");
+    if (digest === subscription.lastDigest) continue;
+    await reply(subscription.chatId, text);
+    subscription.lastDigest = digest;
+    subscription.lastStatus = state.status;
+    subscription.notifiedAt = new Date().toISOString();
+    changed = true;
+  }
+  if (changed) await saveJson(subscriptionsFile, subscriptions);
+}
+
 async function shutdown(signal) {
   log("info", "telegram_shutdown", { signal });
   abort.abort();
@@ -91,6 +140,7 @@ while (!abort.signal.aborted) {
       offset = update.update_id + 1;
       await saveOffset(offset);
     }
+    await notifyProgress();
   } catch (error) {
     if (abort.signal.aborted) break;
     log("error", "telegram_poll_failed", { error: String(error.message ?? error).replaceAll(token, "[REDACTED]").slice(0, 1000) });

package/src/telegram.js

@@ -4,18 +4,26 @@ export function isAllowedChat(chatId, allowed) {
   return allowed.size > 0 && allowed.has(String(chatId));
 }
 
-export function parseTelegramCommand(input) {
+export function parseTelegramCommand(input, defaultRepository) {
   const text = String(input ?? "").trim();
   const [rawCommand, repository, ...words] = text.split(/\s+/);
   const command = rawCommand?.split("@")[0];
-  if (["/status", "/help"].includes(command) && !repository) return { type: command.slice(1) };
+  if (!text.startsWith("/") && defaultRepository) {
+    if (text.length > 8000) throw new Error("Objective is too long");
+    return { type: "submit", repository: defaultRepository, objective: text };
+  }
+  if (["/status", "/help", "/recent"].includes(command) && !repository) return { type: command.slice(1) };
+  if (command === "/objective" && /^[A-Za-z0-9_-]{1,64}$/.test(repository ?? "") && words.length === 0) return { type: "objective", objectiveId: repository };
+  if (command === "/repo" && repositoryPattern.test(repository ?? "") && words.length === 0) return { type: "set_repository", repository };
   if (!["/submit", "/goal", "/loop"].includes(command)) throw new Error("Unknown command. Use /help");
-  if (!repositoryPattern.test(repository ?? "")) throw new Error("Repository must be OWNER/REPO");
-  const objective = words.join(" ").trim();
+  const explicitRepository = repositoryPattern.test(repository ?? "");
+  const selectedRepository = explicitRepository ? repository : defaultRepository;
+  if (!repositoryPattern.test(selectedRepository ?? "")) throw new Error("Repository must be OWNER/REPO or configured with /repo");
+  const objective = (explicitRepository ? words : [repository, ...words]).join(" ").trim();
   if (objective.length < 3) throw new Error("Objective is required");
   if (objective.length > 8000) throw new Error("Objective is too long");
   const prefix = command === "/submit" ? "" : `${command} `;
-  return { type: "submit", repository, objective: `${prefix}${objective}` };
+  return { type: "submit", repository: selectedRepository, objective: `${prefix}${objective}` };
 }
 
 export function objectiveFromTelegram(updateId, command, now = new Date()) {
@@ -29,3 +37,19 @@ export function objectiveFromTelegram(updateId, command, now = new Date()) {
     createdAt: now.toISOString(),
   };
 }
+
+export function formatObjectiveProgress(state) {
+  const tasks = state.tasks ?? [];
+  const results = state.results ?? {};
+  const complete = tasks.filter((task) => results[task.id]?.status === "succeeded").length;
+  const lines = [
+    `Factory AI objective ${state.objective?.id ?? "unknown"}`,
+    state.objective?.objective ?? "",
+    `Status: ${state.status ?? "unknown"}`,
+    `${complete}/${tasks.length} tasks complete`,
+  ];
+  for (const task of tasks.slice(0, 20)) lines.push(`${task.role}: ${results[task.id]?.status ?? "blocked"} — ${task.title}`);
+  if (state.failure) lines.push(`Blocker: ${String(state.failure).slice(0, 500)}`);
+  if (state.release?.url) lines.push(`PR: ${state.release.url}`);
+  return lines.join("\n").slice(0, 4000);
+}

package/src/updater.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import { readFile } from "node:fs/promises";
+import { pathToFileURL } from "node:url";
+
+function parts(value) {
+  if (!/^\d+\.\d+\.\d+$/.test(value)) throw new Error(`Unsupported version: ${value}`);
+  return value.split(".").map(Number);
+}
+
+export function compareVersions(left, right) {
+  const a = parts(left);
+  const b = parts(right);
+  for (let index = 0; index < 3; index += 1) {
+    if (a[index] !== b[index]) return a[index] > b[index] ? 1 : -1;
+  }
+  return 0;
+}
+
+export function shouldAutoUpdate(current, latest) {
+  const currentParts = parts(current);
+  const latestParts = parts(latest);
+  return currentParts[0] === latestParts[0] && compareVersions(latest, current) > 0;
+}
+
+async function main() {
+  const packageFile = process.env.FACTORY_PACKAGE_FILE ?? "/opt/agent-factory/app/package.json";
+  const current = JSON.parse(await readFile(packageFile, "utf8")).version;
+  const response = await fetch("https://registry.npmjs.org/factory-ai/latest", { signal: AbortSignal.timeout(30_000) });
+  if (!response.ok) throw new Error(`npm registry HTTP ${response.status}`);
+  const latestPackage = await response.json();
+  process.stdout.write(`${JSON.stringify({
+    current,
+    latest: latestPackage.version,
+    gitHead: latestPackage.gitHead,
+    updateAvailable: shouldAutoUpdate(current, latestPackage.version),
+  })}\n`);
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) main().catch((error) => {
+  process.stderr.write(`${error.message}\n`);
+  process.exitCode = 1;
+});