@deployfoundation/foundation-deploy 0.2.29 → 0.2.31

package/dist/bin/app.js

@@ -8,13 +8,13 @@ import {
   FoundationPages,
   FoundationPipeline,
   NewsletterStack
-} from "../chunk-vmjptheh.js";
+} from "../chunk-5qdgp5yj.js";
 import {
   adminsFor,
   instanceNames,
   loadInstanceFile,
   provisionsIntegration
-} from "../chunk-fpktb36j.js";
+} from "../chunk-wxaexe2j.js";
 
 // bin/app.ts
 import { execFileSync } from "node:child_process";

package/dist/bin/foundation-deploy.js

@@ -29,7 +29,7 @@ import {
   stackExists,
   stackOutput,
   toolVersion
-} from "../chunk-3cwee91k.js";
+} from "../chunk-1c56b284.js";
 import {
   BASE_SLACK_EVENTS,
   CAPABILITY_IDS,
@@ -45,7 +45,7 @@ import {
   requiredSlackScopes,
   skillsKey,
   slackCommandPrefix
-} from "../chunk-fpktb36j.js";
+} from "../chunk-wxaexe2j.js";
 
 // src/deploy/config-sync.ts
 import { existsSync, mkdirSync, mkdtempSync, readdirSync } from "node:fs";
@@ -341,6 +341,7 @@ var UPWORK_GRAPHQL_DOCUMENTS = Object.freeze({
         title
         description
         ciphertext
+        publishedDateTime
         amount { displayValue currency }
         skills { name }
         client { totalFeedback }

package/dist/bin/release-account.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import {
   DEFAULT_RELEASE_BUCKET
-} from "../chunk-3cwee91k.js";
-import"../chunk-fpktb36j.js";
+} from "../chunk-1c56b284.js";
+import"../chunk-wxaexe2j.js";
 
 // bin/release-account.ts
 import * as cdk2 from "aws-cdk-lib";

package/dist/{chunk-3cwee91k.js → chunk-1c56b284.js}

@@ -6,7 +6,7 @@ import {
   manifestKey,
   releaseCacheDir,
   verifyManifest
-} from "./chunk-fpktb36j.js";
+} from "./chunk-wxaexe2j.js";
 
 // src/deploy/release.ts
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2 } from "node:fs";

package/dist/{chunk-vmjptheh.js → chunk-5qdgp5yj.js}

@@ -20,7 +20,7 @@ import {
   scheduledJobBindings,
   slackCommandPrefixes,
   webhookJobBindings
-} from "./chunk-fpktb36j.js";
+} from "./chunk-wxaexe2j.js";
 
 // src/stacks/agent-stack.ts
 import * as cdk from "aws-cdk-lib";
@@ -1085,6 +1085,13 @@ class FoundationApi extends cdk2.Stack {
         `arn:${this.partition}:bedrock-agentcore:${this.region}:${this.account}:runtime/${names.runtimeName}*/runtime-endpoint/*`
       ]
     }));
+    invokerRole.addToPolicy(new iam2.PolicyStatement({
+      sid: "ReadRuntimeEndpointVersion",
+      actions: ["bedrock-agentcore:GetAgentRuntimeEndpoint"],
+      resources: [
+        `arn:${this.partition}:bedrock-agentcore:${this.region}:${this.account}:runtime/${names.runtimeName}*/runtime-endpoint/*`
+      ]
+    }));
     invokerRole.addToPolicy(new iam2.PolicyStatement({
       sid: "SlackBotToken",
       actions: ["secretsmanager:GetSecretValue"],

package/dist/{chunk-fpktb36j.js → chunk-wxaexe2j.js}

@@ -1200,7 +1200,7 @@ import { parse as parseYaml2 } from "yaml";
 import { z as z4 } from "zod";
 
 // ../core/src/capability-jobs.ts
-var UPWORK_SCAN_PROMPT = "Upwork scan. Follow the upwork skill's scheduled-scan steps and the company's own Upwork skill, if it has one: search for jobs posted since the previous scan, skip any job id already noted in this channel's memory, score the rest against the company's criteria, and post the best matches (at most five) with fit, client signals, suggested rate and Connects cost. Then note the posted job ids in channel memory. If nothing fits, reply with one short line. Do not draft or prepare proposals here.";
+var UPWORK_SCAN_PROMPT = "Upwork scan. Follow the upwork skill's scheduled-scan steps and the company's own Upwork skill, if it has one. " + "1) Read the channel memory note `upwork-scan-log` for the previous scan's time (UTC) and the job ids already posted; with no note, cover the last 48 hours. " + "2) Run each of the company's named searches with pageSize 25. Results come newest first with publishedDateTime: follow endCursor until a page reaches jobs published before the previous scan, at most four pages per search. " + "3) Merge by job id, drop ids already in the log, and shortlist on title, budget, skills and client feedback. " + "4) Open every plausible candidate with upwork_get_job (up to fifteen) and score them against the company's criteria. " + "5) Post the best matches, at most five, each with fit, client signals, suggested rate, Connects cost and the job id; if nothing fits, reply with one short line. " + "6) Update `upwork-scan-log` with memory_note_write (read it first and pass its revision): this scan's time and the ids you posted, ids and decisions only, the last seven days. Never put the log in the memory index. " + "Do not draft or prepare proposals here.";
 var UPWORK_PROPOSAL_CHECK_PROMPT = "Upwork proposal check. Follow the upwork skill: list our proposals with upwork_list_proposals and post only what changed since the last check noted in this channel's memory (viewed, interview, offer, declined, hired, withdrawn), each with the job title and a suggested next step, then update that note. If nothing changed, reply with one short line.";
 function upworkJob(config, id, name, prompt, job) {
   const channel = job.channel ?? config.capabilities.upwork.channels[0];

package/dist/src/index.js

@@ -10,7 +10,7 @@ import {
   FoundationPipeline,
   NewsletterStack,
   deployStatements
-} from "../chunk-vmjptheh.js";
+} from "../chunk-5qdgp5yj.js";
 import {
   BUN_VERSION,
   LAMBDA_ENTRY_POINTS,
@@ -43,7 +43,7 @@ import {
   skillsKey,
   skipBundle,
   verifyManifest
-} from "../chunk-fpktb36j.js";
+} from "../chunk-wxaexe2j.js";
 export {
   BUILD_TIMEOUT,
   BUN_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deployfoundation/foundation-deploy",
-  "version": "0.2.29",
+  "version": "0.2.31",
   "description": "Deploys one Foundation instance from a published, signed release: the CDK app and the deploy tool.",
   "license": "UNLICENSED",
   "private": false,

package/src/stacks/api-stack.ts

@@ -528,6 +528,17 @@ export class FoundationApi extends cdk.Stack {
         ],
       }),
     );
+    // Which version the endpoint serves: the invoker names it in the session
+    // id so a thread moves off a pre-deploy microVM on its next turn.
+    invokerRole.addToPolicy(
+      new iam.PolicyStatement({
+        sid: "ReadRuntimeEndpointVersion",
+        actions: ["bedrock-agentcore:GetAgentRuntimeEndpoint"],
+        resources: [
+          `arn:${this.partition}:bedrock-agentcore:${this.region}:${this.account}:runtime/${names.runtimeName}*/runtime-endpoint/*`,
+        ],
+      }),
+    );
     invokerRole.addToPolicy(
       new iam.PolicyStatement({
         sid: "SlackBotToken",