@fishawack/lab-env 5.5.0-beta.2 → 5.6.1-beta.1

package/CHANGELOG.md

@@ -1,5 +1,56 @@
 ## Changelog
 
+### 5.6.1-beta.1 (2026-06-03)
+
+#### Bug Fixes
+
+* trigger release ([fe4907d](https://bitbucket.org/fishawackdigital/lab-env/commits/fe4907daabd6c670e9b970f475f1b6b032871ea5))
+
+### 5.6.0 (2026-06-02)
+
+#### Features
+
+* copy to clipboard now cross platform and silent errors ([ba5b1e1](https://bitbucket.org/fishawackdigital/lab-env/commits/ba5b1e171a8cd902ad50c4a361516c18ba578e27))
+
+#### Bug Fixes
+
+* give rds access to deploy fullstack iam users ([e052363](https://bitbucket.org/fishawackdigital/lab-env/commits/e052363b8535530c3e065c42359d11682561f6db))
+* lint now avaialble to devops ([31f57c6](https://bitbucket.org/fishawackdigital/lab-env/commits/31f57c6c12fd021b3a6e877aca9b37489180b4b0))
+* switch to bitbucket api keys in place of retired app passwords ([dfc8c5c](https://bitbucket.org/fishawackdigital/lab-env/commits/dfc8c5c9c6d6740a5a625d42a91ec6ff8af56c2a))
+
+### 5.6.0-beta.1 (2026-06-02)
+
+#### Features
+
+* copy to clipboard now cross platform and silent errors ([ba5b1e1](https://bitbucket.org/fishawackdigital/lab-env/commits/ba5b1e171a8cd902ad50c4a361516c18ba578e27))
+
+#### Bug Fixes
+
+* give rds access to deploy fullstack iam users ([e052363](https://bitbucket.org/fishawackdigital/lab-env/commits/e052363b8535530c3e065c42359d11682561f6db))
+* lint now avaialble to devops ([31f57c6](https://bitbucket.org/fishawackdigital/lab-env/commits/31f57c6c12fd021b3a6e877aca9b37489180b4b0))
+* switch to bitbucket api keys in place of retired app passwords ([dfc8c5c](https://bitbucket.org/fishawackdigital/lab-env/commits/dfc8c5c9c6d6740a5a625d42a91ec6ff8af56c2a))
+
+### 5.5.0 (2026-04-29)
+
+#### Features
+
+* content logic from now moved to lab-env in backwards compatible way ([2d836ce](https://bitbucket.org/fishawackdigital/lab-env/commits/2d836cec5bc9d429b7fdc544c5fc1e8c3b749124))
+* extract snyk scan into standalone fw scan command ([abba628](https://bitbucket.org/fishawackdigital/lab-env/commits/abba628183fa94da5a21a14eb014c13a23036f84))
+* **python:** added healthcheck ([ca6e323](https://bitbucket.org/fishawackdigital/lab-env/commits/ca6e323487aaae201eabe34e5208845585d182d4))
+* **workspace:** support adding and removing projects from existing workspaces ([d70bf41](https://bitbucket.org/fishawackdigital/lab-env/commits/d70bf4130dffe412a15e8d8c6c3e6777daac65d3))
+
+#### Bug Fixes
+
+* allow blob as default-src on csp ([3cea3d4](https://bitbucket.org/fishawackdigital/lab-env/commits/3cea3d4bbd8bcd0ffdb6293967e4248ed542e8cf))
+* csps now include worker-src with blob and self support ([bbe35b8](https://bitbucket.org/fishawackdigital/lab-env/commits/bbe35b807153d1af53bad0872cc6461b8c39e92f))
+* prov now has shorter comment block to adhere to aws new 128 char rule ([4b7399c](https://bitbucket.org/fishawackdigital/lab-env/commits/4b7399c4fd72e3a40385234def1a928afd414401))
+* scans now all run before errors thrown and always tackle lock files ([f212df0](https://bitbucket.org/fishawackdigital/lab-env/commits/f212df0cc1e6d5373c6bffcbde7e4e1ac2784db6))
+* split snyk scans per platform with project-name flag ([7d89539](https://bitbucket.org/fishawackdigital/lab-env/commits/7d895395359e6f9d594e264f9b0bcf2e5a59c3bd))
+
+#### Build Updates
+
+* added python as boilerplate option ([8695c48](https://bitbucket.org/fishawackdigital/lab-env/commits/8695c48a763f623fe852b029663d8f2d958ba383))
+
 ### 5.5.0-beta.2 (2026-04-28)
 
 #### Bug Fixes

package/cli.js

@@ -112,8 +112,8 @@ const args = hideBin(process.argv);
 
         // Special handling for devops preset - only gets create commands and hidden docker commands
         if (_.config.preset === "devops") {
-            // No platform or base commands for devops
-            commands = [];
+            // No platform or base commands for devops except for lint
+            commands = ["lint"];
         } else {
             // Normal command building for other presets
             // Add command groups based on platform

package/commands/content.js

@@ -1,4 +1,3 @@
-const execSync = require("child_process").execSync;
 const fs = require("fs-extra");
 const path = require("path");
 const { isEqual } = require("lodash");
@@ -55,7 +54,7 @@ module.exports = [
                 null,
                 4,
             );
-            execSync(`printf '${stringify}' | pbcopy`);
+            utilities.copyToClipboard(stringify);
             console.log(
                 utilities.colorize(
                     `\n${stringify}\n\n(copied to clipboard)`,

package/commands/create/cmds/new.js

@@ -2,7 +2,6 @@ const prompts = require("../libs/prompts");
 const utilities = require("../libs/utilities");
 const vars = require("../libs/vars");
 const bitbucket = require("../services/bitbucket");
-const execSync = require("child_process").execSync;
 
 module.exports = [
     "new [name]",
@@ -47,8 +46,8 @@ module.exports = [
 
                     await bitbucket.enablePipelines(name);
 
-                    execSync(
-                        `echo "git clone ${vars.urls.bitbucketSSH}/${name}" | pbcopy`,
+                    utilities.copyToClipboard(
+                        `git clone ${vars.urls.bitbucketSSH}/${name}`,
                     );
 
                     console.log(

package/commands/create/cmds/provision.js

@@ -1,6 +1,5 @@
 const _ = require("../../../globals.js");
 const utilities = require("../libs/utilities");
-const execSync = require("child_process").execSync;
 const inquirer = require("inquirer");
 const aws = require("../services/aws/index.js");
 const { setAWSClientDefaults } = require("../services/aws/misc.js");
@@ -358,7 +357,7 @@ module.exports = [
 
         let stringify = JSON.stringify(config, null, 4);
         let output = stringify.substring(1, stringify.length - 1).trim();
-        execSync(`printf '${output}' | pbcopy`);
+        utilities.copyToClipboard(output);
         console.log(
             utilities.colorize(`\n${output}\n\n(copied to clipboard)`, "title"),
         );

package/commands/create/libs/utilities.js

@@ -1,6 +1,7 @@
 const chalk = require("chalk");
 const ora = require("ora");
 const crypto = require("crypto");
+const clipboardy = require("clipboardy");
 
 // Text
 module.exports.capitalize = (str) => str.charAt(0).toUpperCase() + str.slice(1);
@@ -135,6 +136,14 @@ module.exports.nameSafe = (name, service = "s3") => {
     return safe;
 };
 
+module.exports.copyToClipboard = (text) => {
+    try {
+        clipboardy.writeSync(text);
+    } catch {
+        // Silently skip if clipboard is unavailable (e.g. Linux without xclip/xsel)
+    }
+};
+
 module.exports.poll = async (cb, resolve, reject) => {
     let res;
 

package/commands/create/libs/vars.js

@@ -78,7 +78,7 @@ module.exports.urls = {
 
 // Request Headers
 module.exports.headers = {
-    bbHeaders: encode(misc.bitbucket.username, misc.bitbucket.password),
+    bbHeaders: encode(misc.bitbucket.username, misc.bitbucket.token),
 };
 
 // Required global node modules

package/commands/create/services/aws/iam.js

@@ -140,7 +140,7 @@ module.exports.syncFWIAMPolicies = async (
 
         await module.exports.attachIAMPolicy(
             UserName,
-            "arn:aws:iam::aws:policy/AmazonOpenSearchServiceFullAccess",
+            "arn:aws:iam::aws:policy/AmazonRDSFullAccess",
         );
 
         await module.exports.attachIAMPolicy(

package/commands/create/services/bitbucket.js

@@ -18,9 +18,13 @@ module.exports.check = async () => {
         }
 
         return true;
-    } catch {
+    } catch (e) {
+        const detail = e.response?.data?.error
+            ? `${e.response.status}: ${e.response.data.error.message}${e.response.data.error.detail?.required ? ` (required scopes: ${e.response.data.error.detail.required.join(", ")})` : ""}`
+            : e.message;
+
         spinner.update(
-            `Failed to communicate with ${misc.bitbucket.workspace} on Bitbucket.`,
+            `Failed to communicate with ${misc.bitbucket.workspace} on Bitbucket. ${detail}`,
             "fail",
         );
 

package/commands/create/services/guide.js

@@ -74,7 +74,8 @@ module.exports.bitbucket = async ({ confirm }) => {
             {
                 type: "input",
                 name: "username",
-                message: "What is your bitbucket username? (e.g. mmellor)",
+                message:
+                    "What is your Atlassian email? (e.g. mike.mellor@avalerehealth.com)",
                 default: credsMisc.bitbucket && credsMisc.bitbucket.username,
                 validate: (input) =>
                     input.trim().length > 0 ||
@@ -82,12 +83,13 @@ module.exports.bitbucket = async ({ confirm }) => {
             },
             {
                 type: "password",
-                name: "password",
-                default: credsMisc.bitbucket && credsMisc.bitbucket.password,
-                message: "What is your bitbucket password? (e.g. password1234)",
+                name: "token",
+                default: credsMisc.bitbucket && credsMisc.bitbucket.token,
+                message:
+                    "What is your Bitbucket API token? (create one at https://id.atlassian.com/manage-profile/security/api-tokens). Required scopes {admin,delete,raed,write}:repository:bitbucket",
                 validate: (input) =>
                     input.trim().length > 0 ||
-                    "Password cannot be an empty string",
+                    "Token cannot be an empty string",
             },
             {
                 type: "input",
@@ -105,7 +107,7 @@ module.exports.bitbucket = async ({ confirm }) => {
 
         credsMisc.bitbucket = file.bitbucket = { ...inputs };
         apis.bbWorkspaceAPI = `${bitbucketApi}/${inputs.workspace}`;
-        headers.bbHeaders = encode(inputs.username, inputs.password);
+        headers.bbHeaders = encode(inputs.username, inputs.token);
         urls.bitbucketSSH = `git@bitbucket.org:${inputs.workspace}`;
 
         writeFileSync(

package/commands/create/services/test.js

@@ -40,7 +40,7 @@ module.exports.bitbucket = async () => {
     if (
         vars.misc.bitbucket &&
         vars.misc.bitbucket.username &&
-        vars.misc.bitbucket.password &&
+        vars.misc.bitbucket.token &&
         vars.misc.bitbucket.workspace
     ) {
         spinner.update(

package/globals.js

@@ -129,7 +129,7 @@ var services;
 var branch;
 var remote;
 let vscodeSettings = {};
-var diagnosis = "4.0.0";
+var diagnosis = "5.0.0";
 var opts = { encoding: "utf8", stdio: "inherit", shell: "/bin/bash" };
 const users = {
     core: "node",
@@ -712,7 +712,6 @@ if (
     args[0] !== "origin" &&
     args[0] !== "--version" &&
     args[0] !== "--help" &&
-    args[0] !== "new" &&
     args[0] !== "key" &&
     args[0] !== "dekey" &&
     args[0] !== "lint" &&

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@fishawack/lab-env",
-    "version": "5.5.0-beta.2",
+    "version": "5.6.1-beta.1",
     "description": "Docker manager for FW",
     "main": "cli.js",
     "scripts": {
@@ -30,6 +30,7 @@
         "apache-md5": "^1.1.8",
         "axios": "^0.21.4",
         "chalk": "4.1.0",
+        "clipboardy": "^2.3.0",
         "dotenv": "^17.2.3",
         "form-data": "^4.0.4",
         "fs-extra": "^11.1.1",