factory-ai 1.2.1 → 1.4.0

package/CHANGELOG.md

@@ -11,6 +11,22 @@ All notable changes follow semantic versioning and the Keep a Changelog structur
 - Azure and Bedrock provider wizard.
 - Durable evaluation, analytics, scaling, policy, extension, and recovery roadmap.
 
+## [1.4.0] - 2026-07-13
+
+### Added
+
+- Free local semantic code retrieval with pinned Ollama embeddings and retained Qdrant vectors.
+- Commit-aware indexing, bounded chunking, top-k context injection, and failure fallback.
+- Modern agent-harness capability matrix and explicit completion criteria.
+
+## [1.3.0] - 2026-07-13
+
+### Added
+
+- RBAC-protected Azure Blob dashboard snapshots for lock-free multi-operator TUI access.
+- One-minute snapshot timer and direct local Azure-identity reads.
+- Factory AI process, container, journal, Azure, Bedrock, MCP, Git, and PR identity metadata.
+
 ## [1.2.1] - 2026-07-13
 
 ### Fixed

package/README.md

@@ -131,6 +131,7 @@ Factory AI minimizes tokens before relying on cheaper models:
 - File reads are line-ranged and bounded; listings, commands, MCP output, memory, and scanner evidence are truncated with continuation hints.
 - Read-only roles do not receive write-tool schemas.
 - Planner memory is compact, repository-scoped, and limited to recent verified events.
+- Ollama generates local embeddings and Qdrant retrieves only top-ranked code chunks, avoiding embedding API charges and whole-repository prompts.
 - Dashboard and TUI track input, cached-input, and output tokens by model.
 - The planner is instructed to produce the smallest valid DAG, avoiding duplicate agents.
 
@@ -255,6 +256,7 @@ npm pack --dry-run
 | [CONTRIBUTING.md](CONTRIBUTING.md) | Development and verification contract |
 | [HANDOFF.md](HANDOFF.md) | Team/friend transfer context |
 | [docs/COMPARISON.md](docs/COMPARISON.md) | Honest comparison with paid alternatives |
+| [docs/HARNESS_PARITY.md](docs/HARNESS_PARITY.md) | Feature parity across modern agent harnesses |
 | [ROADMAP.md](ROADMAP.md) | Planned platform and ecosystem work |
 | [GOVERNANCE.md](GOVERNANCE.md) | Decision and release governance |
 | [SUPPORT.md](SUPPORT.md) | Community support process |

package/bin/factory

@@ -9,6 +9,9 @@ RESOURCE_GROUP=${FACTORY_RESOURCE_GROUP:-factory-ai-rg}
 VM=${FACTORY_VM:-agent-factory-vm}
 NAMESPACE=${FACTORY_SERVICE_BUS:-}
 VAULT=${FACTORY_KEY_VAULT:-}
+STORAGE=${FACTORY_STORAGE_ACCOUNT:-}
+FACTORY_NAME=${FACTORY_NAME:-Factory AI}
+FACTORY_PURPOSE=${FACTORY_PURPOSE:-Ship secure reviewed software continuously}
 
 remote() {
   az vm run-command invoke --resource-group "$RESOURCE_GROUP" --name "$VM" \
@@ -31,7 +34,7 @@ usage() {
     '  pause | resume'
 }
 
-command=${1:-help}
+command=${1:-ui}
 shift || true
 case "$command" in
   telegram)
@@ -73,7 +76,11 @@ case "$command" in
     exec "$0" submit "$repo" "$objective"
     ;;
   ui)
-    FACTORY_RESOURCE_GROUP="$RESOURCE_GROUP" FACTORY_VM="$VM" FACTORY_SERVICE_BUS="$NAMESPACE" FACTORY_KEY_VAULT="$VAULT" node "$FACTORY_ROOT/src/tui.js"
+    if [[ ! -f $CONFIG_FILE && ! -f $LEGACY_CONFIG_FILE ]]; then
+      "$0" setup
+      exec "$0" ui
+    fi
+    FACTORY_RESOURCE_GROUP="$RESOURCE_GROUP" FACTORY_VM="$VM" FACTORY_SERVICE_BUS="$NAMESPACE" FACTORY_KEY_VAULT="$VAULT" FACTORY_STORAGE_ACCOUNT="$STORAGE" FACTORY_NAME="$FACTORY_NAME" FACTORY_PURPOSE="$FACTORY_PURPOSE" node "$FACTORY_ROOT/src/tui.js"
     ;;
   setup)
     for dependency in az gh jq curl ssh-keygen node; do command -v "$dependency" >/dev/null || { printf 'Missing dependency: %s\n' "$dependency" >&2; exit 1; }; done
@@ -81,6 +88,8 @@ case "$command" in
     trap 'rm -f "$choices"' EXIT
     node "$FACTORY_ROOT/src/setup-menu.js" "$choices"
     provider=$(jq -r .provider "$choices")
+    factory_name=$(jq -r .factoryName "$choices")
+    factory_purpose=$(jq -r .factoryPurpose "$choices")
     location=$(jq -r .location "$choices")
     enterprise_org=$(jq -r .githubOrg "$choices")
     aws_region=$(jq -r .awsRegion "$choices")
@@ -96,6 +105,7 @@ case "$command" in
     deployment=$(az deployment group create --name agent-factory-setup --resource-group "$RESOURCE_GROUP" --template-file "$FACTORY_ROOT/infra/main.bicep" --parameters adminSshKey="$(< "$key.pub")" operatorObjectId="$operator" --output json)
     vault=$(jq -r '.properties.outputs.keyVaultName.value' <<<"$deployment")
     namespace=$(jq -r '.properties.outputs.serviceBusNamespace.value' <<<"$deployment")
+    storage=$(jq -r '.properties.outputs.storageAccount.value' <<<"$deployment")
     VAULT=$vault
     NAMESPACE=$namespace
     mkdir -p "$(dirname "$CONFIG_FILE")"
@@ -104,6 +114,9 @@ case "$command" in
       printf 'FACTORY_VM=%q\n' agent-factory-vm
       printf 'FACTORY_SERVICE_BUS=%q\n' "$namespace"
       printf 'FACTORY_KEY_VAULT=%q\n' "$vault"
+      printf 'FACTORY_STORAGE_ACCOUNT=%q\n' "$storage"
+      printf 'FACTORY_NAME=%q\n' "$factory_name"
+      printf 'FACTORY_PURPOSE=%q\n' "$factory_purpose"
     } > "$CONFIG_FILE"
     chmod 0600 "$CONFIG_FILE"
     ip=$(curl -fsS https://api.ipify.org)
@@ -151,7 +164,7 @@ case "$command" in
     printf 'Azure foundation and credential vault ready. Config: %s\n' "$CONFIG_FILE"
     if [[ $deploy_now == true ]]; then
       source_ref=$(gh api repos/itsvedantkumar/factory-ai/commits/main --jq .sha)
-      parameters=(KEY_VAULT_NAME "$vault" SERVICE_BUS_NAMESPACE "$namespace" SERVICE_BUS_QUEUE code-tasks SOURCE_REPOSITORY itsvedantkumar/factory-ai SOURCE_REF "$source_ref")
+      parameters=(KEY_VAULT_NAME "$vault" SERVICE_BUS_NAMESPACE "$namespace" SERVICE_BUS_QUEUE code-tasks FACTORY_STORAGE_ACCOUNT "$storage" FACTORY_NAME "$factory_name" FACTORY_PURPOSE "$factory_purpose" SOURCE_REPOSITORY itsvedantkumar/factory-ai SOURCE_REF "$source_ref")
       if [[ $provider == bedrock ]]; then
         parameters+=(AWS_REGION "$aws_region")
         for role in SCOUT PLANNER BUILDER TESTER DEBUGGER REVIEWER SECURITY RELEASE; do parameters+=("FACTORY_MODEL_$role" "bedrock/$bedrock_builder"); done

package/bootstrap/agent-factory-control.service

@@ -7,6 +7,7 @@ StartLimitBurst=10
 
 [Service]
 Type=simple
+SyslogIdentifier=factory-ai-control
 User=factory
 Group=factory
 WorkingDirectory=/opt/agent-factory/app

package/bootstrap/agent-factory-release.service

@@ -5,6 +5,7 @@ Wants=network-online.target
 
 [Service]
 Type=simple
+SyslogIdentifier=factory-ai-release
 User=factory
 Group=factory
 WorkingDirectory=/opt/agent-factory/app

package/bootstrap/agent-factory-reporter.service

@@ -4,6 +4,7 @@ After=agent-factory-worker.service
 
 [Service]
 Type=oneshot
+SyslogIdentifier=factory-ai-reporter
 User=factory
 Group=factory
 WorkingDirectory=/opt/agent-factory/app

package/bootstrap/agent-factory-telegram.service

@@ -5,6 +5,7 @@ Wants=network-online.target
 
 [Service]
 Type=simple
+SyslogIdentifier=factory-ai-telegram
 User=factory
 Group=factory
 WorkingDirectory=/opt/agent-factory/app

package/bootstrap/agent-factory-worker.service

@@ -1,13 +1,14 @@
 [Unit]
 Description=Factory AI durable worker
-After=network-online.target docker.service
-Wants=network-online.target
+After=network-online.target docker.service factory-ai-qdrant.service factory-ai-ollama.service
+Wants=network-online.target factory-ai-qdrant.service factory-ai-ollama.service
 Requires=docker.service
 StartLimitIntervalSec=300
 StartLimitBurst=10
 
 [Service]
 Type=simple
+SyslogIdentifier=factory-ai-worker
 User=factory
 Group=factory
 WorkingDirectory=/opt/agent-factory/app

package/bootstrap/deploy-runtime.sh

@@ -20,7 +20,7 @@ while (($# > 0)); do
     shift
   fi
   case "$name" in
-    KEY_VAULT_NAME|SERVICE_BUS_NAMESPACE|SERVICE_BUS_QUEUE|SOURCE_REPOSITORY|SOURCE_REF|AWS_REGION|FACTORY_MODEL_SCOUT|FACTORY_MODEL_PLANNER|FACTORY_MODEL_BUILDER|FACTORY_MODEL_TESTER|FACTORY_MODEL_DEBUGGER|FACTORY_MODEL_REVIEWER|FACTORY_MODEL_SECURITY|FACTORY_MODEL_RELEASE) printf -v "$name" '%s' "$value" ;;
+    KEY_VAULT_NAME|SERVICE_BUS_NAMESPACE|SERVICE_BUS_QUEUE|SOURCE_REPOSITORY|SOURCE_REF|FACTORY_STORAGE_ACCOUNT|FACTORY_NAME|FACTORY_PURPOSE|AWS_REGION|FACTORY_MODEL_SCOUT|FACTORY_MODEL_PLANNER|FACTORY_MODEL_BUILDER|FACTORY_MODEL_TESTER|FACTORY_MODEL_DEBUGGER|FACTORY_MODEL_REVIEWER|FACTORY_MODEL_SECURITY|FACTORY_MODEL_RELEASE) printf -v "$name" '%s' "$value" ;;
     *) echo "Unknown deployment parameter: $name" >&2; exit 1 ;;
   esac
 done
@@ -62,6 +62,9 @@ KEY_VAULT_NAME="$KEY_VAULT_NAME" \
 SERVICE_BUS_NAMESPACE="$SERVICE_BUS_NAMESPACE" \
 SERVICE_BUS_QUEUE="$SERVICE_BUS_QUEUE" \
 FACTORY_WORKER_IMAGE="agent-factory-worker:$SOURCE_REF" \
+FACTORY_STORAGE_ACCOUNT="${FACTORY_STORAGE_ACCOUNT:-}" \
+FACTORY_NAME="${FACTORY_NAME:-Factory AI}" \
+FACTORY_PURPOSE="${FACTORY_PURPOSE:-Ship secure reviewed software continuously}" \
 AWS_REGION="${AWS_REGION:-}" \
 FACTORY_MODEL_SCOUT="${FACTORY_MODEL_SCOUT:-}" \
 FACTORY_MODEL_PLANNER="${FACTORY_MODEL_PLANNER:-}" \

package/bootstrap/factory-ai-ollama.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Factory AI local embedding inference
+After=docker.service
+Requires=docker.service
+
+[Service]
+Type=simple
+ExecStartPre=-/usr/bin/docker rm -f factory-ai-ollama
+ExecStart=/usr/bin/docker run --rm --name factory-ai-ollama --userns host --cap-drop ALL --security-opt no-new-privileges --pids-limit 1024 --memory 6g --cpus 4 --publish 127.0.0.1:11434:11434 --env OLLAMA_MODELS=/models --volume /opt/agent-factory/state/ollama:/models ollama/ollama@sha256:3d8a05e3432d50ea57594fabe971e46cc8fe963a0f9f8c40400bd56cd5388e47
+ExecStop=/usr/bin/docker stop -t 20 factory-ai-ollama
+Restart=always
+RestartSec=5
+SyslogIdentifier=factory-ai-ollama
+
+[Install]
+WantedBy=multi-user.target

package/bootstrap/factory-ai-qdrant.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Factory AI local Qdrant retrieval store
+After=docker.service
+Requires=docker.service
+
+[Service]
+Type=simple
+ExecStartPre=-/usr/bin/docker rm -f factory-ai-qdrant
+ExecStart=/usr/bin/docker run --rm --name factory-ai-qdrant --userns host --read-only --cap-drop ALL --security-opt no-new-privileges --pids-limit 1024 --memory 2g --cpus 2 --publish 127.0.0.1:6333:6333 --volume /opt/agent-factory/state/qdrant:/qdrant/storage --volume /opt/agent-factory/state/qdrant-snapshots:/qdrant/snapshots qdrant/qdrant@sha256:31407c0e8e32eb771b71718f1a4772e2ad47a07557917b21ac96792f40eb8007
+ExecStop=/usr/bin/docker stop -t 20 factory-ai-qdrant
+Restart=always
+RestartSec=5
+SyslogIdentifier=factory-ai-qdrant
+
+[Install]
+WantedBy=multi-user.target

package/bootstrap/factory-ai-snapshot.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Publish Factory AI operator dashboard snapshot
+After=network-online.target agent-factory-control.service
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+User=factory
+Group=factory
+WorkingDirectory=/opt/agent-factory/app
+EnvironmentFile=/etc/agent-factory-control.env
+ExecStart=/usr/bin/node /opt/agent-factory/app/src/snapshot.js
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+UMask=0027
+SyslogIdentifier=factory-ai-snapshot

package/bootstrap/factory-ai-snapshot.timer

@@ -0,0 +1,11 @@
+[Unit]
+Description=Refresh Factory AI operator dashboard every minute
+
+[Timer]
+OnBootSec=2m
+OnUnitActiveSec=1m
+RandomizedDelaySec=5
+Persistent=true
+
+[Install]
+WantedBy=timers.target

package/bootstrap/factory-ai-update.service

@@ -6,6 +6,7 @@ Requires=docker.service
 
 [Service]
 Type=oneshot
+SyslogIdentifier=factory-ai-updater
 User=root
 Group=root
 ExecStart=/opt/agent-factory/app/bootstrap/auto-update.sh

package/bootstrap/setup.sh

@@ -35,6 +35,7 @@ test "$(node --version | cut -d. -f1)" = "v20"
 id "$FACTORY_USER" >/dev/null 2>&1 || useradd --system --create-home --shell /usr/sbin/nologin "$FACTORY_USER"
 test -f "$APP_DIR/package-lock.json"
 npm ci --omit=dev --prefix "$APP_DIR"
+factory_version=$(node -p "require('$APP_DIR/package.json').version")
 docker build --file "$APP_DIR/Dockerfile.worker" --tag "$FACTORY_WORKER_IMAGE" "$APP_DIR"
 for scanner_image in \
   aquasec/trivy@sha256:cffe3f5161a47a6823fbd23d985795b3ed72a4c806da4c4df16266c02accdd6f \
@@ -43,6 +44,8 @@ for scanner_image in \
   semgrep/semgrep@sha256:183a149fb3e9700ab5294a7b4ab0241a826fd046bc8b721062fbea80fdfa438f; do
   docker pull "$scanner_image"
 done
+docker pull ollama/ollama@sha256:3d8a05e3432d50ea57594fabe971e46cc8fe963a0f9f8c40400bd56cd5388e47
+docker pull qdrant/qdrant@sha256:31407c0e8e32eb771b71718f1a4772e2ad47a07557917b21ac96792f40eb8007
 
 STATE_DEVICE=/dev/disk/azure/scsi1/lun0
 if [[ -b $STATE_DEVICE ]]; then
@@ -64,7 +67,8 @@ for secret_name in "${GITHUB_TOKEN_SECRET:-github-token}"; do
   az keyvault secret show --vault-name "$KEY_VAULT_NAME" --name "$secret_name" --query id --output none
 done
 
-install -d -o "$FACTORY_USER" -g "$FACTORY_USER" -m 0750 /opt/agent-factory/state /opt/agent-factory/state/home /opt/agent-factory/state/memory /opt/agent-factory/state/telegram /opt/agent-factory/workspaces /opt/agent-factory/logs
+install -d -o "$FACTORY_USER" -g "$FACTORY_USER" -m 0750 /opt/agent-factory/state /opt/agent-factory/state/home /opt/agent-factory/state/memory /opt/agent-factory/state/telegram /opt/agent-factory/state/retrieval /opt/agent-factory/workspaces /opt/agent-factory/logs
+install -d -o root -g root -m 0750 /opt/agent-factory/state/qdrant /opt/agent-factory/state/qdrant-snapshots /opt/agent-factory/state/ollama
 install -m 0600 -o root -g root /dev/null /etc/agent-factory.env
 {
   printf 'SERVICE_BUS_NAMESPACE=%s\n' "$SERVICE_BUS_NAMESPACE"
@@ -74,13 +78,20 @@ install -m 0600 -o root -g root /dev/null /etc/agent-factory.env
   printf 'KEY_VAULT_NAME=%s\n' "$KEY_VAULT_NAME"
   printf 'AZURE_SUBSCRIPTION_ID=%s\n' "$subscription_id"
   printf 'FACTORY_RESOURCE_GROUP=%s\n' "$resource_group"
+  [[ -n ${FACTORY_STORAGE_ACCOUNT:-} ]] && printf 'FACTORY_STORAGE_ACCOUNT=%s\n' "$FACTORY_STORAGE_ACCOUNT"
   printf 'FACTORY_STATE_DIR=/opt/agent-factory/state\n'
   printf 'FACTORY_WORKSPACE_DIR=/opt/agent-factory/workspaces\n'
   printf 'FACTORY_REGISTRY=%s/config/capabilities.json\n' "$APP_DIR"
   printf 'FACTORY_WORKER_IMAGE=%s\n' "$FACTORY_WORKER_IMAGE"
+  printf 'FACTORY_VERSION=%s\n' "$factory_version"
+  printf 'FACTORY_NAME=%s\n' "${FACTORY_NAME:-Factory AI}"
+  printf 'FACTORY_PURPOSE=%s\n' "${FACTORY_PURPOSE:-Ship secure reviewed software continuously}"
   printf 'MAX_CONCURRENCY=3\n'
   printf 'TASK_TIMEOUT_MS=1800000\n'
   printf 'MAX_DELIVERY_COUNT=8\n'
+  printf 'FACTORY_VERSION=%s\n' "$factory_version"
+  printf 'FACTORY_NAME=%s\n' "${FACTORY_NAME:-Factory AI}"
+  printf 'FACTORY_PURPOSE=%s\n' "${FACTORY_PURPOSE:-Ship secure reviewed software continuously}"
   [[ -n ${AWS_REGION:-} ]] && printf 'AWS_REGION=%s\nAWS_DEFAULT_REGION=%s\n' "$AWS_REGION" "$AWS_REGION"
   for variable in FACTORY_MODEL_SCOUT FACTORY_MODEL_PLANNER FACTORY_MODEL_BUILDER FACTORY_MODEL_TESTER FACTORY_MODEL_DEBUGGER FACTORY_MODEL_REVIEWER FACTORY_MODEL_SECURITY FACTORY_MODEL_RELEASE; do
     [[ -n ${!variable:-} ]] && printf '%s=%s\n' "$variable" "${!variable}"
@@ -96,6 +107,7 @@ install -m 0600 -o root -g root /dev/null /etc/agent-factory-control.env
   printf 'KEY_VAULT_NAME=%s\n' "$KEY_VAULT_NAME"
   printf 'AZURE_SUBSCRIPTION_ID=%s\n' "$subscription_id"
   printf 'FACTORY_RESOURCE_GROUP=%s\n' "$resource_group"
+  [[ -n ${FACTORY_STORAGE_ACCOUNT:-} ]] && printf 'FACTORY_STORAGE_ACCOUNT=%s\n' "$FACTORY_STORAGE_ACCOUNT"
   printf 'FACTORY_STATE_DIR=/opt/agent-factory/state\n'
   printf 'FACTORY_REGISTRY=%s/config/capabilities.json\n' "$APP_DIR"
   printf 'MAX_DELIVERY_COUNT=8\n'
@@ -106,6 +118,8 @@ install -m 0600 -o root -g root /dev/null /etc/agent-factory-control.env
 } > /etc/agent-factory-control.env
 
 chown -R "$FACTORY_USER:$FACTORY_USER" /opt/agent-factory/state /opt/agent-factory/workspaces /opt/agent-factory/logs
+chown root:root /opt/agent-factory/state/qdrant /opt/agent-factory/state/qdrant-snapshots /opt/agent-factory/state/ollama
+chmod 0750 /opt/agent-factory/state/qdrant /opt/agent-factory/state/qdrant-snapshots /opt/agent-factory/state/ollama
 chown -R root:root "$APP_DIR"
 chmod -R go-w "$APP_DIR"
 install -m 0644 "$APP_DIR/bootstrap/agent-factory-worker.service" /etc/systemd/system/agent-factory-worker.service
@@ -117,6 +131,10 @@ install -m 0644 "$APP_DIR/bootstrap/agent-factory-telegram.service" /etc/systemd
 chmod 0755 "$APP_DIR/bootstrap/auto-update.sh"
 install -m 0644 "$APP_DIR/bootstrap/factory-ai-update.service" /etc/systemd/system/factory-ai-update.service
 install -m 0644 "$APP_DIR/bootstrap/factory-ai-update.timer" /etc/systemd/system/factory-ai-update.timer
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-snapshot.service" /etc/systemd/system/factory-ai-snapshot.service
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-snapshot.timer" /etc/systemd/system/factory-ai-snapshot.timer
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-qdrant.service" /etc/systemd/system/factory-ai-qdrant.service
+install -m 0644 "$APP_DIR/bootstrap/factory-ai-ollama.service" /etc/systemd/system/factory-ai-ollama.service
 systemctl daemon-reload
 systemctl enable --now agent-factory-worker.service
 systemctl enable --now agent-factory-control.service
@@ -124,5 +142,9 @@ systemctl enable --now agent-factory-release.service
 systemctl enable --now agent-factory-reporter.timer
 systemctl enable --now agent-factory-telegram.service
 systemctl enable --now factory-ai-update.timer
+systemctl enable --now factory-ai-snapshot.timer
+systemctl enable --now factory-ai-qdrant.service factory-ai-ollama.service
+for _ in $(seq 1 60); do curl -fsS http://127.0.0.1:11434/api/tags >/dev/null && break; sleep 2; done
+docker exec factory-ai-ollama ollama show embeddinggemma >/dev/null 2>&1 || docker exec factory-ai-ollama ollama pull embeddinggemma
 systemctl restart agent-factory-control.service agent-factory-worker.service agent-factory-release.service
 echo "Agent factory worker installed"

package/infra/main.bicep

@@ -20,6 +20,7 @@ var prefix = 'agent-factory'
 var unique = uniqueString(subscription().subscriptionId, resourceGroup().id)
 var keyVaultName = 'af${take(unique, 18)}'
 var serviceBusName = 'af-${unique}'
+var storageName = 'fa${take(unique, 20)}'
 
 resource nsg 'Microsoft.Network/networkSecurityGroups@2024-05-01' = {
   name: '${prefix}-nsg'
@@ -147,6 +148,43 @@ resource vault 'Microsoft.KeyVault/vaults@2024-11-01' = {
   }
 }
 
+resource storage 'Microsoft.Storage/storageAccounts@2025-01-01' = {
+  name: storageName
+  location: location
+  sku: {
+    name: 'Standard_ZRS'
+  }
+  kind: 'StorageV2'
+  properties: {
+    allowBlobPublicAccess: false
+    allowSharedKeyAccess: false
+    defaultToOAuthAuthentication: true
+    minimumTlsVersion: 'TLS1_2'
+    publicNetworkAccess: 'Enabled'
+    supportsHttpsTrafficOnly: true
+  }
+}
+
+resource blobService 'Microsoft.Storage/storageAccounts/blobServices@2025-01-01' = {
+  parent: storage
+  name: 'default'
+  properties: {
+    deleteRetentionPolicy: {
+      enabled: true
+      days: 30
+    }
+    isVersioningEnabled: true
+  }
+}
+
+resource operatorContainer 'Microsoft.Storage/storageAccounts/blobServices/containers@2025-01-01' = {
+  parent: blobService
+  name: 'operator'
+  properties: {
+    publicAccess: 'None'
+  }
+}
+
 resource serviceBus 'Microsoft.ServiceBus/namespaces@2024-01-01' = {
   name: serviceBusName
   location: location
@@ -299,11 +337,32 @@ resource workerCostReader 'Microsoft.Authorization/roleAssignments@2022-04-01' =
   }
 }
 
+resource workerBlobContributor 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+  name: guid(storage.id, vm.id, 'storage-blob-data-contributor')
+  scope: storage
+  properties: {
+    principalId: vm.identity.principalId
+    principalType: 'ServicePrincipal'
+    roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')
+  }
+}
+
+resource operatorBlobReader 'Microsoft.Authorization/roleAssignments@2022-04-01' = {
+  name: guid(storage.id, operatorObjectId, 'storage-blob-data-reader')
+  scope: storage
+  properties: {
+    principalId: operatorObjectId
+    principalType: 'User'
+    roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', '2a2b9908-6ea1-4ae2-8e65-a410df84e7d1')
+  }
+}
+
 output vmName string = vm.name
 output privateIp string = nic.properties.ipConfigurations[0].properties.privateIPAddress
 output egressIp string = egressIp.properties.ipAddress
 output keyVaultName string = vault.name
 output serviceBusNamespace string = serviceBus.name
+output storageAccount string = storage.name
 output controlQueue string = queues[0].name
 output agentQueue string = queues[1].name
 output releaseQueue string = queues[2].name

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "factory-ai",
-  "version": "1.2.1",
+  "version": "1.4.0",
   "description": "Deploy a private autonomous coding-agent factory on Azure: isolated builders, testers, security reviewers, durable orchestration, multi-model routing, memory, cost controls, and gated GitHub pull requests.",
   "private": false,
   "license": "MIT",
@@ -40,6 +40,7 @@
     "agent-factory-release": "src/release-service.js",
     "agent-factory-task": "src/task-entry.js",
     "factory-ai-telegram": "src/telegram-service.js",
+    "factory-ai-snapshot": "src/snapshot.js",
     "agent-factory-worker": "src/worker.js"
   },
   "files": [
@@ -63,6 +64,7 @@
     "@azure/identity": "4.13.1",
     "@azure/keyvault-secrets": "4.10.0",
     "@azure/service-bus": "7.9.5",
+    "@azure/storage-blob": "12.28.0",
     "@inquirer/prompts": "8.5.2",
     "@modelcontextprotocol/sdk": "1.29.0",
     "@modelcontextprotocol/server-memory": "2026.7.4",

package/src/agent-executor.js

@@ -1,10 +1,11 @@
 import { parseTaskResult } from "./validation.js";
 
 export class AgentExecutor {
-  constructor({ workspaces, agentRunner, scannerSuite, sendControl }) {
+  constructor({ workspaces, agentRunner, scannerSuite, retriever, sendControl }) {
     this.workspaces = workspaces;
     this.agentRunner = agentRunner;
     this.scannerSuite = scannerSuite;
+    this.retriever = retriever;
     this.sendControl = sendControl;
   }
 
@@ -16,7 +17,10 @@ export class AgentExecutor {
 
   async processPlanning(message) {
     const directory = await this.workspaces.ensureObjective(message.objective);
-    const delivery = await this.agentRunner.plan(message.objective, directory, message.context ?? []);
+    let semanticContext = "";
+    try { semanticContext = this.retriever ? await this.retriever.context(directory, message.objective.repository, message.objective.objective) : ""; } catch {}
+    const context = [...(message.context ?? []), ...(semanticContext ? [{ type: "local-semantic-retrieval", content: semanticContext }] : [])];
+    const delivery = await this.agentRunner.plan(message.objective, directory, context);
     await this.sendControl({ type: "planning_result", objectiveId: message.objectiveId, delivery });
   }
 
@@ -29,9 +33,15 @@ export class AgentExecutor {
     const scannerEvidence = message.task.role === "security" && this.scannerSuite
       ? await this.scannerSuite.scan(directory)
       : [];
+    let semanticContext = "";
+    if (message.task.role !== "release" && this.retriever) {
+      const query = `${message.objective.objective}\n${message.task.title}\n${message.task.instructions}`;
+      try { semanticContext = await this.retriever.context(directory, message.objective.repository, query); } catch {}
+    }
     const prompt = [
       "Execute only this assigned task, verify it, and report factual outcomes.",
       ...(scannerEvidence.length ? [`TRUSTED SCANNER EVIDENCE (mechanical output; do not claim checks beyond this evidence):\n${JSON.stringify(scannerEvidence)}`] : []),
+      ...(semanticContext ? [`LOCAL SEMANTIC CONTEXT (retrieved from this exact repository revision):\n${semanticContext}`] : []),
     ].join("\n\n");
     const result = parseTaskResult(await this.agentRunner.invoke({
       objective: message.objective,

package/src/agent-runner.js

@@ -47,11 +47,13 @@ export class AzureAgentRunner {
   }
 
   async promptForTask(objective, task, prompt, capabilities) {
+    const factoryName = this.environment.FACTORY_NAME ?? "Factory AI";
+    const factoryPurpose = this.environment.FACTORY_PURPOSE ?? "Ship secure reviewed software continuously";
     const skills = await Promise.all(capabilities.filter((item) => item.type === "skill").map(async (item) => (
       `ALLOWLISTED SKILL ${item.name}@${item.version}:\n${await readFile(item.path, "utf8")}`
     )));
     return [
-      `You are a Factory AI isolated ${task.role} subagent.`,
+      `You are a ${factoryName} isolated ${task.role} subagent. Factory purpose: ${factoryPurpose}.`,
       "Work only in the assigned repository. Never inspect credentials, push Git refs, deploy, or install global tools.",
       "Use tools for evidence. Make the smallest correct change and verify every completion claim.",
       'Return only JSON: {"summary":"concise outcome","checks":["command/result"],"risks":["remaining risk"],"approval":"approved|changes_requested|not_applicable"}.',
@@ -115,7 +117,7 @@ export class AzureAgentRunner {
       ...Object.entries(this.registry.skills ?? {}),
       ...Object.entries(this.registry.mcp ?? {}),
     ].map(([name, item]) => [name, { version: item.version, roles: item.roles }]));
-    const prompt = `You are a Factory AI planner subagent. Decompose objectives into the smallest executable DAG.
+    const prompt = `You are the ${this.environment.FACTORY_NAME ?? "Factory AI"} planner subagent. Factory purpose: ${this.environment.FACTORY_PURPOSE ?? "Ship secure reviewed software continuously"}. Decompose objectives into the smallest executable DAG.
 Allowed roles: scout, builder, tester, debugger, reviewer, security, release.
 Allowed capabilities: ${JSON.stringify(registrySummary)}
 Include tester, reviewer, and security ancestors of exactly one terminal release task.

package/src/azure-harness.js

@@ -31,6 +31,7 @@ export class AzureResponsesHarness {
     retries = 4,
     timeoutMs = 180_000,
     sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    userAgent = `factory-ai/${process.env.FACTORY_VERSION ?? "dev"}`,
   }) {
     this.endpoint = `${baseUrl.replace(/\/$/, "")}/responses`;
     this.apiKey = apiKey;
@@ -42,6 +43,7 @@ export class AzureResponsesHarness {
     this.retries = retries;
     this.timeoutMs = timeoutMs;
     this.sleep = sleep;
+    this.userAgent = userAgent;
   }
 
   async request(body) {
@@ -56,6 +58,8 @@ export class AzureResponsesHarness {
             "content-type": "application/json",
             "api-key": this.apiKey,
             authorization: `Bearer ${this.apiKey}`,
+            "user-agent": this.userAgent,
+            "x-ms-useragent": this.userAgent,
           },
           body: JSON.stringify(body),
           signal: controller.signal,

package/src/bedrock-harness.js

@@ -12,7 +12,7 @@ function definitions(tools) {
 
 export class BedrockHarness {
   constructor({ client, region = process.env.AWS_REGION ?? "us-east-1", model, tools, maxSteps = 40, maxOutputTokens = 4096 }) {
-    this.client = client ?? new BedrockRuntimeClient({ region });
+    this.client = client ?? new BedrockRuntimeClient({ region, customUserAgent: `factory-ai/${process.env.FACTORY_VERSION ?? "dev"}` });
     this.model = model;
     this.tools = tools;
     this.maxSteps = maxSteps;

package/src/ceo.js

@@ -6,6 +6,8 @@ import { loadConfig } from "./config.js";
 import { createBus, sendMessage } from "./bus.js";
 import { parseObjective } from "./validation.js";
 
+process.title = "factory-ai-ceo";
+
 function argumentsFrom(argv) {
   const options = { baseBranch: "main", wait: false, timeoutMs: 3_600_000, words: [] };
   for (let index = 0; index < argv.length; index += 1) {

package/src/config.js

@@ -9,6 +9,9 @@ const environmentSchema = z.object({
   KEY_VAULT_NAME: z.string().min(3),
   AZURE_SUBSCRIPTION_ID: z.string().optional(),
   FACTORY_RESOURCE_GROUP: z.string().default("factory-ai-rg"),
+  FACTORY_STORAGE_ACCOUNT: z.string().optional(),
+  FACTORY_NAME: z.string().min(1).max(80).default("Factory AI"),
+  FACTORY_PURPOSE: z.string().min(1).max(500).default("Ship secure reviewed software continuously"),
   FACTORY_STATE_DIR: z.string().default("/opt/agent-factory/state"),
   FACTORY_WORKSPACE_DIR: z.string().default("/opt/agent-factory/workspaces"),
   FACTORY_REGISTRY: z.string().default("/opt/agent-factory/app/config/capabilities.json"),
@@ -41,6 +44,9 @@ export function loadConfig(environment = process.env) {
     keyVaultUrl: `https://${env.KEY_VAULT_NAME}.vault.azure.net`,
     subscriptionId: env.AZURE_SUBSCRIPTION_ID,
     resourceGroup: env.FACTORY_RESOURCE_GROUP,
+    storageAccount: env.FACTORY_STORAGE_ACCOUNT,
+    factoryName: env.FACTORY_NAME,
+    factoryPurpose: env.FACTORY_PURPOSE,
     secretNames: {
       TEXTVED_AZURE_API_KEY: env.AZURE_PRIMARY_API_KEY_SECRET,
       TEXTVED_AZURE_BASE_URL: env.AZURE_PRIMARY_BASE_URL_SECRET,

package/src/container-runner.js

@@ -19,6 +19,7 @@ const AZURE_ENVIRONMENT = [
   "FACTORY_MODEL_REVIEWER",
   "FACTORY_MODEL_SECURITY",
   "FACTORY_MODEL_RELEASE",
+  "FACTORY_VERSION",
 ];
 
 function parseOutput(stdout) {
@@ -37,7 +38,7 @@ export class ContainerAgentRunner {
   }
 
   async executePacket(packet, directory) {
-    const name = `agent-${packet.objective.id}-${packet.task?.id ?? "planner"}`.toLowerCase().replaceAll(/[^a-z0-9_.-]/g, "-").slice(0, 63);
+    const name = `factory-ai-${packet.objective.id}-${packet.task?.id ?? "planner"}`.toLowerCase().replaceAll(/[^a-z0-9_.-]/g, "-").slice(0, 63);
     const args = [
       "run", "-i", "--rm", "--name", name,
       "--read-only",

package/src/control-service.js

@@ -7,6 +7,7 @@ import { loadRegistry } from "./registry.js";
 import { log } from "./log.js";
 import { ProjectMemory } from "./project-memory.js";
 
+process.title = "factory-ai-control";
 const config = loadConfig();
 const bus = createBus(config, config.controlQueue, config.agentQueue);
 const releaseSender = bus.client.createSender(config.releaseQueue);

package/src/operator.js

@@ -2,6 +2,8 @@ import { readFile } from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { gunzipSync } from "node:zlib";
+import { DefaultAzureCredential } from "@azure/identity";
+import { BlobServiceClient } from "@azure/storage-blob";
 import { run } from "./process.js";
 
 const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
@@ -21,6 +23,9 @@ export function createOperator(environment = process.env) {
   const vm = environment.FACTORY_VM ?? "agent-factory-vm";
   const namespace = environment.FACTORY_SERVICE_BUS ?? "";
   const vault = environment.FACTORY_KEY_VAULT ?? "";
+  const storageAccount = environment.FACTORY_STORAGE_ACCOUNT ?? "";
+  const factoryName = environment.FACTORY_NAME ?? "Factory AI";
+  const factoryPurpose = environment.FACTORY_PURPOSE ?? "Ship secure reviewed software continuously";
   const remote = async (script) => {
     for (let attempt = 0; attempt < 6; attempt += 1) {
       try { return extractRunCommand(await command("az", ["vm", "run-command", "invoke", "--resource-group", resourceGroup, "--name", vm, "--command-id", "RunShellScript", "--scripts", script, "--query", "value[0].message", "--output", "tsv"])); }
@@ -41,6 +46,15 @@ export function createOperator(environment = process.env) {
   };
   return {
     dashboard: async () => {
+      if (storageAccount) {
+        try {
+          const service = new BlobServiceClient(`https://${storageAccount}.blob.core.windows.net`, new DefaultAzureCredential());
+          const value = await service.getContainerClient("operator").getBlockBlobClient("dashboard.json").downloadToBuffer();
+          return JSON.parse(value.toString("utf8"));
+        } catch (error) {
+          if (!["BlobNotFound", "ContainerNotFound"].includes(error.code)) throw error;
+        }
+      }
       const encoded = await remote("sudo -u factory env $(xargs < /etc/agent-factory-control.env) node /opt/agent-factory/app/src/dashboard.js --json | gzip -c | base64 -w0");
       return JSON.parse(gunzipSync(Buffer.from(encoded, "base64")).toString("utf8"));
     },
@@ -56,7 +70,7 @@ export function createOperator(environment = process.env) {
       return command(path.join(root, "bin/factory"), [action]);
     },
     capabilities: async () => JSON.parse(await readFile(path.join(root, "config/capabilities.json"), "utf8")),
-    config: () => ({ resourceGroup, vm, namespace, vault, models: { scout: "GPT-5.4 nano", simpleBuilder: "Kimi K2.7-Code", builder: "GPT-5.5", tester: "GPT-5.4", critical: "GPT-5.6" } }),
+    config: () => ({ factoryName, factoryPurpose, resourceGroup, vm, namespace, vault, storageAccount, models: { scout: "GPT-5.4 nano", simpleBuilder: "Kimi K2.7-Code", builder: "GPT-5.5", tester: "GPT-5.4", critical: "GPT-5.6" } }),
     listSecrets: async () => withVault(async () => JSON.parse(await command("az", ["keyvault", "secret", "list", "--vault-name", vault, "--query", "[].{name:name,updated:attributes.updated}", "--output", "json"]))),
     setSecret: async (name, value) => withVault(async () => {
       if (!/^[A-Za-z0-9-]{1,127}$/.test(name) || !value) throw new Error("Valid secret name and value are required");

package/src/release-service.js

@@ -7,6 +7,7 @@ import { ReleaseBot } from "./release-bot.js";
 import { GitHubRelease } from "./release.js";
 import { log } from "./log.js";
 
+process.title = "factory-ai-release";
 const config = loadConfig();
 Object.assign(process.env, await loadRuntimeSecrets(config, undefined, ["GH_TOKEN"]));
 await run("gh", ["auth", "setup-git"], { timeoutMs: 60_000 });

package/src/release.js

@@ -49,7 +49,7 @@ export class GitHubRelease {
       "",
       "Human review and repository branch protections remain authoritative.",
     ].join("\n");
-    const title = `[Factory AI] ${task.title}`;
+    const title = `[${process.env.FACTORY_NAME ?? "Factory AI"}] ${task.title}`;
     const create = await this.execute("gh", [
       "pr", "create", "--base", objective.baseBranch, "--head", branch,
       "--title", title, "--body", body,

package/src/reporter.js

@@ -4,11 +4,15 @@ import path from "node:path";
 import { pathToFileURL } from "node:url";
 import { aggregateDashboard, loadAzureCost, loadLocalState, loadQueueMetrics, stableStringify } from "./dashboard.js";
 import { loadConfig } from "./config.js";
+import { DefaultAzureCredential } from "@azure/identity";
+import { BlobServiceClient } from "@azure/storage-blob";
+
+process.title = "factory-ai-reporter";
 
 function markdown(dashboard) {
   const objectives = Object.entries(dashboard.summary.objectives).map(([state, count]) => `${state}=${count}`).join(", ") || "none";
   const cost = dashboard.cost ? `\nAzure month-to-date: ${dashboard.cost.currency} ${dashboard.cost.monthToDate.toFixed(2)} (billing data may be delayed)\n` : "";
-  return `# Factory AI Hourly Report\n\nGenerated: ${dashboard.generatedAt}\n\nQueue: ${dashboard.queue.active} active, ${dashboard.queue.deadLetter} dead-letter\n${cost}\nObjectives: ${objectives}\n`;
+  return `# ${process.env.FACTORY_NAME ?? "Factory AI"} Hourly Report\n\nGenerated: ${dashboard.generatedAt}\n\nQueue: ${dashboard.queue.active} active, ${dashboard.queue.deadLetter} dead-letter\n${cost}\nObjectives: ${objectives}\n`;
 }
 
 async function atomicWrite(file, content) {
@@ -30,16 +34,31 @@ export async function writeHourlyReport(root, dashboard, { now = new Date(), ret
   return stem;
 }
 
+export async function uploadDashboardSnapshot(config, dashboard, {
+  credential = new DefaultAzureCredential(),
+  createClient = (url, auth) => new BlobServiceClient(url, auth),
+} = {}) {
+  if (!config.storageAccount) return false;
+  const service = createClient(`https://${config.storageAccount}.blob.core.windows.net`, credential);
+  const blob = service.getContainerClient("operator").getBlockBlobClient("dashboard.json");
+  await blob.uploadData(Buffer.from(stableStringify(dashboard)), {
+    blobHTTPHeaders: { blobContentType: "application/json; charset=utf-8", blobCacheControl: "no-store" },
+  });
+  return true;
+}
+
 async function main() {
   const root = process.env.FACTORY_STATE_DIR ?? "/opt/agent-factory/state";
+  const config = loadConfig();
   const loaded = await loadLocalState(root);
-  const queue = process.env.SERVICE_BUS_NAMESPACE ? await loadQueueMetrics(loadConfig()) : {};
+  const queue = process.env.SERVICE_BUS_NAMESPACE ? await loadQueueMetrics(config) : {};
   let cost = null;
   if (process.env.AZURE_SUBSCRIPTION_ID) {
-    try { cost = await loadAzureCost(loadConfig()); } catch (error) { loaded.warnings.push(`Cost unavailable: ${error.message}`); }
+    try { cost = await loadAzureCost(config); } catch (error) { loaded.warnings.push(`Cost unavailable: ${error.message}`); }
   }
   const dashboard = aggregateDashboard({ ...loaded, queue, cost, runtime: { status: "running" } });
   const stem = await writeHourlyReport(root, dashboard);
+  await uploadDashboardSnapshot(config, dashboard);
   process.stdout.write(`${JSON.stringify({ event: "hourly_report", report: stem })}\n`);
 }
 

package/src/retriever.js

@@ -0,0 +1,154 @@
+import { createHash } from "node:crypto";
+import { lstat, mkdir, readFile, readdir, rename, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { run } from "./process.js";
+
+const textExtensions = new Set([".c", ".cc", ".cpp", ".cs", ".css", ".go", ".h", ".hpp", ".html", ".java", ".js", ".jsx", ".json", ".md", ".mdx", ".php", ".py", ".rb", ".rs", ".scss", ".sh", ".sql", ".svelte", ".toml", ".ts", ".tsx", ".vue", ".yaml", ".yml"]);
+const ignoredDirectories = new Set([".git", ".next", ".turbo", "build", "coverage", "dist", "node_modules", "vendor"]);
+
+export function chunkText(file, value, { linesPerChunk = 120, overlapLines = 20 } = {}) {
+  const lines = value.split("\n");
+  const chunks = [];
+  const step = Math.max(1, linesPerChunk - overlapLines);
+  for (let start = 0; start < lines.length; start += step) {
+    const content = lines.slice(start, start + linesPerChunk).join("\n").trim();
+    if (content) chunks.push({ path: file, startLine: start + 1, endLine: Math.min(lines.length, start + linesPerChunk), content });
+    if (start + linesPerChunk >= lines.length) break;
+  }
+  return chunks;
+}
+
+export function formatRetrievedContext(points, maxCharacters = 12_000) {
+  let output = "";
+  for (const point of points) {
+    const payload = point.payload ?? {};
+    const section = `\n--- ${payload.path}:${payload.startLine} score=${Number(point.score ?? 0).toFixed(3)} ---\n${payload.content ?? ""}\n`;
+    if (output.length + section.length > maxCharacters) break;
+    output += section;
+  }
+  return output.trim();
+}
+
+async function collectFiles(directory, root, output, limits) {
+  if (output.length >= limits.maxFiles) return;
+  for (const entry of (await readdir(directory, { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name))) {
+    if (entry.isSymbolicLink?.() || ignoredDirectories.has(entry.name) || output.length >= limits.maxFiles) continue;
+    const absolute = path.join(directory, entry.name);
+    if (entry.isDirectory()) await collectFiles(absolute, root, output, limits);
+    else if (entry.isFile() && textExtensions.has(path.extname(entry.name).toLowerCase())) {
+      const metadata = await lstat(absolute);
+      if (metadata.size <= limits.maxFileBytes) output.push({ absolute, relative: path.relative(root, absolute) });
+    }
+  }
+}
+
+function pointId(value) {
+  const hash = createHash("sha256").update(value).digest("hex");
+  return `${hash.slice(0, 8)}-${hash.slice(8, 12)}-4${hash.slice(13, 16)}-a${hash.slice(17, 20)}-${hash.slice(20, 32)}`;
+}
+
+export class LocalRetriever {
+  #locks = new Map();
+
+  constructor({
+    stateDir,
+    ollamaUrl = "http://127.0.0.1:11434",
+    qdrantUrl = "http://127.0.0.1:6333",
+    model = "embeddinggemma",
+    collection = "factory_ai_code",
+    fetch = globalThis.fetch,
+  }) {
+    this.stateDir = stateDir;
+    this.manifestFile = path.join(stateDir, "retrieval", "manifest.json");
+    this.ollamaUrl = ollamaUrl;
+    this.qdrantUrl = qdrantUrl;
+    this.model = model;
+    this.collection = collection;
+    this.fetch = fetch;
+  }
+
+  async request(url, options = {}) {
+    const response = await this.fetch(url, { ...options, signal: AbortSignal.timeout(120_000) });
+    if (!response.ok) throw new Error(`Local retrieval HTTP ${response.status}: ${url}`);
+    return response.status === 204 ? {} : response.json();
+  }
+
+  async embed(input) {
+    const result = await this.request(`${this.ollamaUrl}/api/embed`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ model: this.model, input }),
+    });
+    return result.embeddings;
+  }
+
+  async loadManifest() {
+    try { return JSON.parse(await readFile(this.manifestFile, "utf8")); } catch (error) { if (error.code === "ENOENT") return {}; throw error; }
+  }
+
+  async saveManifest(value) {
+    await mkdir(path.dirname(this.manifestFile), { recursive: true, mode: 0o750 });
+    const temporary = `${this.manifestFile}.${process.pid}.tmp`;
+    await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { mode: 0o640 });
+    await rename(temporary, this.manifestFile);
+  }
+
+  async ensureIndexed(directory, repository) {
+    const previous = this.#locks.get(repository) ?? Promise.resolve();
+    const current = previous.catch(() => {}).then(() => this.#index(directory, repository));
+    this.#locks.set(repository, current);
+    try { return await current; } finally { if (this.#locks.get(repository) === current) this.#locks.delete(repository); }
+  }
+
+  async #index(directory, repository) {
+    const commit = (await run("git", ["-C", directory, "rev-parse", "HEAD"])).stdout.trim();
+    const manifest = await this.loadManifest();
+    if (manifest[repository]?.commit === commit && manifest[repository]?.model === this.model) return false;
+    const files = [];
+    await collectFiles(directory, directory, files, { maxFiles: 2000, maxFileBytes: 256_000 });
+    const chunks = [];
+    for (const file of files) {
+      const value = await readFile(file.absolute, "utf8");
+      chunks.push(...chunkText(file.relative, value));
+      if (chunks.length >= 5000) break;
+    }
+    const selected = chunks.slice(0, 5000);
+    if (selected.length === 0) return false;
+    const sample = await this.embed([`${selected[0].path}\n${selected[0].content}`]);
+    const vectorSize = sample[0].length;
+    const collectionResponse = await this.fetch(`${this.qdrantUrl}/collections/${this.collection}`, { signal: AbortSignal.timeout(30_000) });
+    if (collectionResponse.status === 404) {
+      await this.request(`${this.qdrantUrl}/collections/${this.collection}`, {
+        method: "PUT", headers: { "content-type": "application/json" }, body: JSON.stringify({ vectors: { size: vectorSize, distance: "Cosine" } }),
+      });
+    } else if (!collectionResponse.ok) throw new Error(`Qdrant collection HTTP ${collectionResponse.status}`);
+    await this.request(`${this.qdrantUrl}/collections/${this.collection}/points/delete?wait=true`, {
+      method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify({ filter: { must: [{ key: "repository", match: { value: repository } }] } }),
+    });
+    for (let start = 0; start < selected.length; start += 32) {
+      const batch = selected.slice(start, start + 32);
+      const remaining = batch.slice(1);
+      const embeddings = start === 0
+        ? [sample[0], ...(remaining.length ? await this.embed(remaining.map((item) => `${item.path}\n${item.content}`)) : [])]
+        : await this.embed(batch.map((item) => `${item.path}\n${item.content}`));
+      const points = batch.map((item, index) => ({ id: pointId(`${repository}:${commit}:${item.path}:${item.startLine}`), vector: embeddings[index], payload: { repository, commit, ...item } }));
+      await this.request(`${this.qdrantUrl}/collections/${this.collection}/points?wait=true`, {
+        method: "PUT", headers: { "content-type": "application/json" }, body: JSON.stringify({ points }),
+      });
+    }
+    manifest[repository] = { commit, model: this.model, chunks: selected.length, indexedAt: new Date().toISOString() };
+    await this.saveManifest(manifest);
+    return true;
+  }
+
+  async context(directory, repository, query, { limit = 8, maxCharacters = 12_000 } = {}) {
+    await this.ensureIndexed(directory, repository);
+    const [vector] = await this.embed([query]);
+    const result = await this.request(`${this.qdrantUrl}/collections/${this.collection}/points/query`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ query: vector, filter: { must: [{ key: "repository", match: { value: repository } }] }, limit, with_payload: true }),
+    });
+    return formatRetrievedContext(result.result?.points ?? [], maxCharacters);
+  }
+}

package/src/setup-menu.js

@@ -5,6 +5,8 @@ import { writeFile } from "node:fs/promises";
 const output = process.argv[2];
 if (!output) throw new Error("Setup result path is required");
 
+const factoryName = await input({ message: "What should your factory be called?", default: "Factory AI" });
+const factoryPurpose = await input({ message: "What should this factory build or optimize for?", default: "Ship secure, reviewed software continuously" });
 const provider = await select({
   message: "Which model provider should the factory configure?",
   choices: [
@@ -23,4 +25,4 @@ if (provider !== "azure") {
 }
 const deployNow = await confirm({ message: "Deploy and start the runtime after storing credentials?", default: true });
 const telegram = await confirm({ message: "Enable Telegram remote objective intake?", default: false });
-await writeFile(output, `${JSON.stringify({ provider, location, githubOrg, awsRegion, bedrockBuilderModel, deployNow, telegram })}\n`, { mode: 0o600 });
+await writeFile(output, `${JSON.stringify({ factoryName, factoryPurpose, provider, location, githubOrg, awsRegion, bedrockBuilderModel, deployNow, telegram })}\n`, { mode: 0o600 });

package/src/snapshot.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import { aggregateDashboard, loadAzureCost, loadLocalState, loadQueueMetrics } from "./dashboard.js";
+import { loadConfig } from "./config.js";
+import { uploadDashboardSnapshot } from "./reporter.js";
+
+process.title = "factory-ai-snapshot";
+const config = loadConfig();
+const root = process.env.FACTORY_STATE_DIR ?? "/opt/agent-factory/state";
+const loaded = await loadLocalState(root);
+const queue = await loadQueueMetrics(config);
+let cost = null;
+try { cost = await loadAzureCost(config); } catch (error) { loaded.warnings.push(`Cost unavailable: ${error.message}`); }
+const dashboard = aggregateDashboard({ ...loaded, queue, cost, runtime: { status: "running" } });
+await uploadDashboardSnapshot(config, dashboard);
+process.stdout.write(`${JSON.stringify({ event: "dashboard_snapshot", generatedAt: dashboard.generatedAt })}\n`);

package/src/task-entry.js

@@ -10,6 +10,7 @@ const input = await new Promise((resolve, reject) => {
   process.stdin.on("error", reject);
 });
 const packet = JSON.parse(input);
+process.title = `factory-ai-${packet.task?.role ?? packet.mode}`.slice(0, 63);
 const registry = await loadRegistry("/opt/agent-factory/app/config/capabilities.json");
 const runner = new AzureAgentRunner({ timeoutMs: 1_800_000 }, registry);
 let result;

package/src/telegram-service.js

@@ -11,6 +11,7 @@ import { loadLocalState, loadQueueMetrics } from "./dashboard.js";
 import { formatObjectiveProgress, isAllowedChat, objectiveFromTelegram, parseTelegramCommand } from "./telegram.js";
 import { log } from "./log.js";
 
+process.title = "factory-ai-telegram";
 const config = loadConfig();
 Object.assign(process.env, await loadRuntimeSecrets(config, undefined, ["TELEGRAM_BOT_TOKEN", "TELEGRAM_ALLOWED_CHAT_IDS"]));
 const token = process.env.TELEGRAM_BOT_TOKEN;
@@ -69,7 +70,7 @@ async function statusText() {
   const [{ states }, queue] = await Promise.all([loadLocalState(config.stateDir), loadQueueMetrics(config)]);
   const counts = {};
   for (const state of states) counts[state.status ?? "unknown"] = (counts[state.status ?? "unknown"] ?? 0) + 1;
-  return [`Factory AI`, `Queue: ${queue.active} active, ${queue.deadLetter} dead-letter`, `Objectives: ${Object.entries(counts).map(([name, count]) => `${name} ${count}`).join(", ") || "none"}`].join("\n");
+  return [config.factoryName, `Queue: ${queue.active} active, ${queue.deadLetter} dead-letter`, `Objectives: ${Object.entries(counts).map(([name, count]) => `${name} ${count}`).join(", ") || "none"}`].join("\n");
 }
 
 async function processUpdate(update) {
@@ -92,7 +93,7 @@ async function processUpdate(update) {
     }
     if (command.type === "objective") {
       const state = JSON.parse(await readFile(path.join(config.stateDir, command.objectiveId, "state.json"), "utf8"));
-      return reply(message.chat.id, formatObjectiveProgress(state));
+      return reply(message.chat.id, formatObjectiveProgress(state, config.factoryName));
     }
     const objective = objectiveFromTelegram(update.update_id, command);
     await sendMessage(sender, objective, objective.id);
@@ -110,7 +111,7 @@ async function notifyProgress() {
     let state;
     try { state = JSON.parse(await readFile(path.join(config.stateDir, objectiveId, "state.json"), "utf8")); }
     catch (error) { if (error.code === "ENOENT") continue; throw error; }
-    const text = formatObjectiveProgress(state);
+    const text = formatObjectiveProgress(state, config.factoryName);
     const digest = createHash("sha256").update(text).digest("hex");
     if (digest === subscription.lastDigest) continue;
     await reply(subscription.chatId, text);

package/src/telegram.js

@@ -38,12 +38,12 @@ export function objectiveFromTelegram(updateId, command, now = new Date()) {
   };
 }
 
-export function formatObjectiveProgress(state) {
+export function formatObjectiveProgress(state, factoryName = "Factory AI") {
   const tasks = state.tasks ?? [];
   const results = state.results ?? {};
   const complete = tasks.filter((task) => results[task.id]?.status === "succeeded").length;
   const lines = [
-    `Factory AI objective ${state.objective?.id ?? "unknown"}`,
+    `${factoryName} objective ${state.objective?.id ?? "unknown"}`,
     state.objective?.objective ?? "",
     `Status: ${state.status ?? "unknown"}`,
     `${complete}/${tasks.length} tasks complete`,

package/src/tui.js

@@ -5,10 +5,12 @@ import { createOperator } from "./operator.js";
 if (!process.stdin.isTTY || !process.stdout.isTTY) throw new Error("Factory AI UI requires an interactive terminal");
 
 const operator = createOperator();
-const screen = blessed.screen({ smartCSR: true, title: "Factory AI", fullUnicode: true, dockBorders: true });
+const factoryName = process.env.FACTORY_NAME ?? "Factory AI";
+const factoryPurpose = process.env.FACTORY_PURPOSE ?? "Ship secure reviewed software continuously";
+const screen = blessed.screen({ smartCSR: true, title: factoryName, fullUnicode: true, dockBorders: true });
 const colors = { bg: "#0d0f12", panel: "#15191f", border: "#303743", text: "#d9e0e8", muted: "#7f8b99", accent: "#78dba9", warn: "#efc46b", danger: "#ef7d7d", blue: "#77a8ff" };
 
-blessed.box({ parent: screen, top: 0, left: 0, width: "100%", height: 3, tags: true, style: { bg: colors.panel, fg: colors.text }, content: "  {bold}{#78dba9-fg}FACTORY AI{/}  {/bold}  private coding organization" });
+blessed.box({ parent: screen, top: 0, left: 0, width: "100%", height: 3, tags: true, style: { bg: colors.panel, fg: colors.text }, content: `  {bold}{#78dba9-fg}${factoryName.toUpperCase()}{/}  {/bold}  ${factoryPurpose}` });
 const menu = blessed.list({ parent: screen, top: 3, left: 0, width: 23, bottom: 2, border: { type: "line" }, label: " Navigate ", keys: true, mouse: true, vi: true, items: ["Overview", "Objectives", "Agents", "Secrets", "Capabilities", "Logs", "Settings"], style: { bg: colors.panel, fg: colors.text, border: { fg: colors.border }, selected: { bg: colors.accent, fg: "#07130d", bold: true }, item: { fg: colors.text } } });
 const main = blessed.box({ parent: screen, top: 3, left: 23, right: 0, bottom: 2, border: { type: "line" }, label: " Overview ", tags: true, scrollable: true, alwaysScroll: true, keys: true, mouse: true, vi: true, scrollbar: { ch: "▐", style: { fg: colors.accent } }, padding: { left: 2, right: 2 }, style: { bg: colors.bg, fg: colors.text, border: { fg: colors.border } } });
 const footer = blessed.box({ parent: screen, bottom: 0, left: 0, width: "100%", height: 2, tags: true, style: { bg: colors.panel, fg: colors.muted }, content: "  {bold}n{/} new objective   {bold}r{/} refresh   {bold}a{/} add secret   {bold}p/u{/} pause/resume   {bold}q{/} quit" });
@@ -65,7 +67,7 @@ function renderCapabilities() {
 
 function renderSettings() {
   const config = operator.config();
-  main.setContent(`{bold}Runtime{/}\n\n  Resource group  ${config.resourceGroup}\n  VM              ${config.vm}\n  Service Bus     ${config.namespace}\n  Key Vault       ${config.vault}\n\n{bold}Model policy{/}\n\n  Scout           GPT-5.4 nano\n  Simple builder  Kimi K2.7-Code\n  Builder         GPT-5.5\n  Tester          GPT-5.4\n  Critical roles  GPT-5.6\n\n{#7f8b99-fg}Run factory setup to change providers or role routes.{/}`);
+  main.setContent(`{bold}Runtime{/}\n\n  Resource group  ${config.resourceGroup}\n  VM              ${config.vm}\n  Service Bus     ${config.namespace}\n  Key Vault       ${config.vault}\n  Operator state  ${config.storageAccount || "Run Command fallback"}\n\n{bold}Model policy{/}\n\n  Scout           GPT-5.4 nano\n  Simple builder  Kimi K2.7-Code\n  Builder         GPT-5.5\n  Tester          GPT-5.4\n  Critical roles  GPT-5.6\n\n{#7f8b99-fg}Run factory setup to change providers or role routes.{/}`);
 }
 
 function render() {

package/src/updater.js

@@ -2,6 +2,8 @@
 import { readFile } from "node:fs/promises";
 import { pathToFileURL } from "node:url";
 
+process.title = "factory-ai-updater";
+
 function parts(value) {
   if (!/^\d+\.\d+\.\d+$/.test(value)) throw new Error(`Unsupported version: ${value}`);
   return value.split(".").map(Number);

package/src/worker.js

@@ -9,7 +9,9 @@ import { AgentExecutor } from "./agent-executor.js";
 import { sendMessage } from "./bus.js";
 import { ContainerAgentRunner } from "./container-runner.js";
 import { ScannerSuite } from "./scanner-suite.js";
+import { LocalRetriever } from "./retriever.js";
 
+process.title = "factory-ai-worker";
 const config = loadConfig();
 Object.assign(process.env, await loadRuntimeSecrets(config));
 await run("gh", ["auth", "setup-git"], { timeoutMs: 60_000 });
@@ -19,6 +21,7 @@ const executor = new AgentExecutor({
   workspaces: new WorkspaceManager(config.workspaceDir, config.timeoutMs),
   agentRunner: new ContainerAgentRunner({ image: config.workerImage, memoryDir: config.memoryDir, timeoutMs: config.timeoutMs }),
   scannerSuite: new ScannerSuite(),
+  retriever: new LocalRetriever({ stateDir: config.stateDir }),
   sendControl,
 });