@dotenvx/dotenvx-ops 0.15.6

package/CHANGELOG.md

@@ -0,0 +1,161 @@
+# Changelog
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.6...main)
+
+## [0.15.6](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.5...v0.15.6) (2025-08-27)
+
+### Changed
+
+* Send device public key along with sync ([#19](https://github.com/dotenvx/dotenvx-ops/pull/19))
+
+## [0.15.5](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.3...v0.15.5) (2025-08-23)
+
+### Added
+
+* Mark device during login handshake ([#18](https://github.com/dotenvx/dotenvx-ops/pull/18))
+
+## [0.15.3](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.2...v0.15.3) (2025-08-23)
+
+### Changed
+
+* Install latest dotenvx when installing dotenvx-ops ([#17](https://github.com/dotenvx/dotenvx-ops/pull/17))
+
+## [0.15.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.1...v0.15.2) (2025-08-18)
+
+### Changed
+
+* Fix bad method name ([#15](https://github.com/dotenvx/dotenvx-ops/pull/15))
+
+## [0.15.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.15.0...v0.15.1) (2025-08-18)
+
+### Changed
+
+* Switch to `DOTENVX_PROJECT_ID`
+
+## [0.15.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.14.2...v0.15.0) (2025-08-18)
+
+### Added
+
+* Add sync command ([#14](https://github.com/dotenvx/dotenvx-ops/pull/14))
+
+## [0.14.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.14.1...v0.14.2) (2025-07-21)
+
+* Patch usage description ([#13](https://github.com/dotenvx/dotenvx-ops/pull/13))
+
+## [0.14.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.14.0...v0.14.1) (2025-07-21)
+
+* Update README
+
+## [0.14.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.13.0...v0.14.0) (2025-07-19)
+
+* Add `dotenvx-ops status` ([#12](https://github.com/dotenvx/dotenvx-ops/pull/12))
+
+## [0.13.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.12.0...v0.13.0) (2025-07-15)
+
+* Add `dotenvx-ops settings` ([#11](https://github.com/dotenvx/dotenvx-ops/pull/11))
+
+## [0.12.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.11.0...v0.12.0) (2025-07-15)
+
+* Add additional fields to observe ([#10](https://github.com/dotenvx/dotenvx-ops/pull/10))
+
+## [0.11.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.10.0...v0.11.0) (2025-07-15)
+
+* Add `observe` with git url ([#9](https://github.com/dotenvx/dotenvx-ops/pull/9))
+
+## [0.10.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.9.1...v0.10.0) (2025-07-14)
+
+### Added
+
+* Add `dotenvx-ops logout` ([#8](https://github.com/dotenvx/dotenvx-ops/pull/8))
+
+## [0.9.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.9.0...v0.9.1) (2025-07-14)
+
+### Changed
+
+* Include `dotenv` in package.json ([#7](https://github.com/dotenvx/dotenvx-ops/pull/7))
+
+## [0.9.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.8.0...v0.9.0) (2025-07-14)
+
+### Added
+
+* Add bearer token support to `dotenvx-ops observe` ([#6](https://github.com/dotenvx/dotenvx-ops/pull/6))
+
+## [0.8.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.7.0...v0.8.0) (2025-07-14)
+
+### Added
+
+* Add `dotenvx-ops login` command ([#5](https://github.com/dotenvx/dotenvx-ops/pull/5))
+
+## [0.7.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.6.0...v0.7.0) (2025-07-11)
+
+### Added
+
+* Send observation data to api ([#4](https://github.com/dotenvx/dotenvx-ops/pull/4))
+
+## [0.6.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.5.0...v0.6.0) (2025-07-09)
+
+### Added
+
+* Add `dotenvx-ops observe` cli that proxies to `main#observe` ([#3](https://github.com/dotenvx/dotenvx-ops/pull/3))
+
+## [0.5.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.4.3...v0.5.0) (2025-07-09)
+
+### Added
+
+* Add `observe` function ([#2](https://github.com/dotenvx/dotenvx-ops/pull/2))
+
+## 0.4.3
+
+### Changed
+
+* Patch bad formatting
+
+## 0.4.2
+
+### Changed
+
+* Change log to reflect `dotenvx-ops`
+
+## 0.4.1
+
+### Changed
+
+* Bump to `dotenvx` that supports exported cli
+
+## 0.4.0
+
+### Added
+
+* Add `run` command that proxies to `dotenvx run` ([#1](https://github.com/dotenvx/dotenvx-ops/pull/1))
+
+## 0.3.0
+
+### Added
+
+* Install `dotenvx` if not already installed in `install.sh` script
+
+## 0.2.3
+
+### Changed
+
+* Patch `hello` action
+
+## 0.2.2
+
+### Changed
+
+* Fix filename in `install.sh`
+
+## 0.2.1
+
+### Changed
+
+* Fix registry url in `install.sh`
+
+## 0.1.0
+
+### Added
+
+* Initial publish

package/LICENSE

@@ -0,0 +1,71 @@
+Dotenvx Ops End-User License Agreement (EULA)
+
+Applies to: Dotenvx Ops (CLI, SDKs, and related software)
+
+---
+
+Summary
+
+Dotenvx Ops is a commercial product. This agreement outlines your rights to use the software, and our expectations in return. It’s written to be understandable, developer-friendly, and fair.
+
+By installing, accessing, or using Dotenvx Ops, you agree to these terms.
+
+---
+
+1. License
+
+You are granted a non-exclusive, non-transferable, revocable license to use Dotenvx Ops as long as:
+- You have an active license (via paid subscription or evaluation, including time-limited free trials)
+- You do not distribute or sublicense the software
+- You do not attempt to bypass license enforcement or API restrictions
+
+---
+
+2. Use
+
+You may:
+- Use Dotenvx Ops internally for your own development or production workflows
+- Install the CLI or SDKs on machines you or your team control
+
+You may not:
+- Share the software or source with third parties
+- Offer it as a hosted service, SaaS platform, or similar product
+- Use it in a way that competes with dotenvx.com
+
+---
+
+3. Ownership
+
+All rights, title, and interest in Dotenvx Ops remain with DOTENVX LLC. You’re granted limited usage rights, not ownership.
+
+---
+
+4. Termination
+
+We may revoke your license if you:
+- Violate these terms
+- Fail to pay your subscription
+
+You must stop using the software immediately if your license is terminated.
+
+---
+
+5. Warranty Disclaimer
+
+Dotenvx Ops is provided as-is, with no guarantees that it will work for your specific use case. You assume all risk.
+
+---
+
+6. Limitation of Liability
+
+We are not liable for any indirect or consequential damages, including loss of data, downtime, or lost profits. Our total liability is limited to the amount you paid us for your license.
+
+---
+
+7. Contact
+
+Have questions? Email us at ops@dotenvx.com
+
+---
+
+© 2025 DOTENVX LLC. All rights reserved.

package/README.md

@@ -0,0 +1,9 @@
+[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png)](https://dotenvx.com/ops)
+
+> Dotenvx Ops is a commercial product for secrets operations using [dotenvx](https://github.com/dotenvx/dotenvx).
+
+*Use dotenvx across your team, infrastructure, agents, and more.*
+
+[Learn more](https://dotenvx.com/docs/ops)
+
+ 

package/package.json

@@ -0,0 +1,66 @@
+{
+  "version": "0.15.6",
+  "name": "@dotenvx/dotenvx-ops",
+  "description": "Dotenvx Ops",
+  "author": "@motdotla",
+  "keywords": [
+    "dotenv",
+    "dotenvx",
+    "ops",
+    "env"
+  ],
+  "homepage": "https://dotenvx.com/ops",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/dotenvx/dotenvx-ops.git"
+  },
+  "license": "See LICENSE",
+  "files": [
+    "src/**/*",
+    "CHANGELOG.md"
+  ],
+  "main": "src/lib/main.js",
+  "exports": {
+    ".": {
+      "types": "./src/lib/main.d.ts",
+      "require": "./src/lib/main.js",
+      "default": "./src/lib/main.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "dotenvx-ops": "./src/cli/dotenvx-ops.js"
+  },
+  "scripts": {
+    "standard": "standard",
+    "standard:fix": "standard --fix",
+    "test": "tap run --allow-empty-coverage --disable-coverage --timeout=60000",
+    "test-coverage": "tap run --show-full-coverage --timeout=60000",
+    "prerelease": "npm test",
+    "release": "standard-version"
+  },
+  "dependencies": {
+    "@clack/core": "^0.4.2",
+    "@dotenvx/dotenvx": "^1.48.1",
+    "arch": "^2.1.1",
+    "commander": "^11.1.0",
+    "conf": "^10.2.0",
+    "dotenv": "^17.2.0",
+    "eciesjs": "^0.4.7",
+    "execa": "^5.1.1",
+    "open": "^8.4.2",
+    "systeminformation": "^5.22.11",
+    "undici": "^7.11.0"
+  },
+  "devDependencies": {
+    "@yao-pkg/pkg": "^5.14.2",
+    "capture-console": "^1.0.2",
+    "sinon": "^14.0.1",
+    "standard": "^17.1.2",
+    "standard-version": "^9.5.0",
+    "tap": "^19.2.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/cli/actions/login.js

@@ -0,0 +1,118 @@
+const open = require('open')
+const { logger } = require('@dotenvx/dotenvx')
+
+const Session = require('./../../db/session')
+
+const clipboardy = require('./../../lib/helpers/clipboardy')
+const { createSpinner } = require('./../../lib/helpers/createSpinner')
+const confirm = require('./../../lib/helpers/confirm')
+const truncate = require('./../../lib/helpers/truncate')
+const formatCode = require('./../../lib/helpers/formatCode')
+
+const spinner = createSpinner('waiting on browser authorization')
+
+// api calls
+const PostOauthToken = require('./../../lib/api/postOauthToken')
+const PostOauthDeviceCode = require('./../../lib/api/postOauthDeviceCode')
+
+async function pollTokenUrl (hostname, deviceCode, interval) {
+  logger.debug(`POST ${hostname} with deviceCode ${deviceCode} at interval ${interval}`)
+
+  const sesh = new Session()
+
+  while (true) {
+    try {
+      let data
+      try {
+        data = await new PostOauthToken(hostname, deviceCode).run()
+        if (data.access_token) {
+          const id = data.id
+          const username = data.username
+          const accessToken = data.access_token
+
+          // log in user
+          sesh.login(hostname, id, username, accessToken)
+          spinner.succeed(`logged in [${username}] to this device and activated token [${truncate(accessToken, 11)}]`)
+          // logger.help('⮕ next run [dotenvx-ops sync]')
+
+          process.exit(0)
+        } else {
+          await new Promise(resolve => setTimeout(resolve, interval * 1000))
+        }
+      } catch (error) {
+        // continue polling if authorization_pending
+        if (error.code === 'authorization_pending') {
+          const newInterval = interval + 1 // grow the interval
+          await new Promise(resolve => setTimeout(resolve, newInterval * 1000))
+        } else {
+          throw error
+        }
+      }
+    } catch (error) {
+      spinner.stop()
+      if (error.message) {
+        logger.error(error.message)
+      } else {
+        logger.error(error)
+      }
+      if (error.help) {
+        logger.help(error.help)
+      }
+      process.exit(1)
+    }
+  }
+}
+
+async function login () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+
+  try {
+    const sesh = new Session()
+    const devicePublicKey = sesh.devicePublicKey()
+    const systemInformation = await sesh.systemInformation()
+    const data = await new PostOauthDeviceCode(hostname, devicePublicKey, systemInformation).run()
+
+    const deviceCode = data.device_code
+    const userCode = data.user_code
+    const verificationUri = data.verification_uri
+    const verificationUriComplete = data.verification_uri_complete
+    const interval = data.interval
+
+    try { clipboardy.writeSync(userCode) } catch (_e) {}
+
+    // begin polling
+    pollTokenUrl(hostname, deviceCode, interval)
+
+    logger.info(`press Enter to open [${verificationUri}] and enter code [${formatCode(userCode)}]...`)
+    spinner.start()
+
+    // // optionally allow user to open browser
+    const answer = await confirm({ message: `press Enter to open [${verificationUri}] and enter code [${formatCode(userCode)}]...` })
+
+    if (answer) {
+      await open(verificationUriComplete)
+    } else {
+      spinner.stop()
+      process.exit(1)
+    }
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = login

package/src/cli/actions/logout.js

@@ -0,0 +1,42 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const { createSpinner } = require('./../../lib/helpers/createSpinner')
+const truncate = require('./../../lib/helpers/truncate')
+const Logout = require('./../../lib/services/logout')
+
+const spinner = createSpinner('waiting on browser authorization')
+
+async function logout () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+
+  try {
+    spinner.start()
+
+    const {
+      username,
+      accessToken
+    } = await new Logout(hostname).run()
+
+    spinner.succeed(`logged out [${username}] from this device and revoked token [${truncate(accessToken, 11)}]`)
+    // logger.help(`⮕ next visit [${settingsDevicesUrl}] to view your devices`)
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = logout

package/src/cli/actions/observe.js

@@ -0,0 +1,33 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const main = require('./../../lib/main')
+
+async function observe (base64) {
+  const commandArgs = this.args
+  logger.debug(`process command [${commandArgs.join(' ')}]`)
+
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+  const token = options.token
+
+  try {
+    await main.observe(base64, { hostname, token })
+  } catch (error) {
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    // do not process exit 1 since that would exit dotenvx run --
+  }
+}
+
+module.exports = observe

package/src/cli/actions/settings/device.js

@@ -0,0 +1,24 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const Session = require('./../../../db/session')
+const smartMask = require('./../../../lib/helpers/smartMask')
+
+function device () {
+  const options = this.opts()
+
+  try {
+    const sesh = new Session()
+    const devicePublicKey = sesh.devicePublicKey()
+    if (devicePublicKey && devicePublicKey.length > 1) {
+      process.stdout.write(smartMask(devicePublicKey, options.unmask, 11))
+    } else {
+      logger.error('missing device. Try generating one with [dotenvx-ops login].')
+      process.exit(1)
+    }
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = device

package/src/cli/actions/settings/hostname.js

@@ -0,0 +1,20 @@
+const { logger } = require('@dotenvx/dotenvx')
+const Session = require('./../../../db/session')
+
+function hostname () {
+  try {
+    const sesh = new Session()
+    const _hostname = sesh.hostname()
+    if (_hostname && _hostname.length > 1) {
+      process.stdout.write(_hostname)
+    } else {
+      logger.error('missing hostname. Try running [dotenvx-ops login].')
+      process.exit(1)
+    }
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = hostname

package/src/cli/actions/settings/token.js

@@ -0,0 +1,24 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const Session = require('./../../../db/session')
+const smartMask = require('./../../../lib/helpers/smartMask')
+
+function token () {
+  const options = this.opts()
+
+  try {
+    const sesh = new Session()
+    const token = sesh.token()
+    if (token && token.length > 1) {
+      process.stdout.write(smartMask(token, options.unmask, 11))
+    } else {
+      logger.error('missing token. Try generating one with [dotenvx-ops login].')
+      process.exit(1)
+    }
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = token

package/src/cli/actions/settings/username.js

@@ -0,0 +1,22 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const Session = require('./../../../db/session')
+
+async function username () {
+  try {
+    const sesh = new Session()
+    const username = sesh.username()
+
+    if (username) {
+      process.stdout.write(username)
+    } else {
+      logger.error('login required. Try running [dotenvx-pro login].')
+      process.exit(1)
+    }
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = username

package/src/cli/actions/status.js

@@ -0,0 +1,13 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const Status = require('./../../lib/services/status')
+
+async function status () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const { status } = new Status().run()
+  process.stdout.write(status)
+}
+
+module.exports = status

package/src/cli/actions/sync.js

@@ -0,0 +1,39 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const { createSpinner } = require('./../../lib/helpers/createSpinner')
+
+const Sync = require('./../../lib/services/sync')
+
+const spinner = createSpinner('syncing')
+
+async function sync () {
+  try {
+    // debug opts
+    const options = this.opts()
+    logger.debug(`options: ${JSON.stringify(options)}`)
+
+    spinner.start()
+
+    const { projectUsernameName } = await new Sync(options.hostname).run()
+
+    spinner.stop()
+
+    logger.success(`✔ synced [${projectUsernameName}]`)
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = sync

package/src/cli/commands/settings.js

@@ -0,0 +1,39 @@
+const { Command } = require('commander')
+
+const settings = new Command('settings')
+
+settings
+  .description('⚙️  settings')
+  .allowUnknownOption()
+
+// dotenvx-ops settings username
+const usernameAction = require('./../actions/settings/username')
+settings
+  .command('username')
+  .description('print your username')
+  .action(usernameAction)
+
+// dotenvx-ops settings token
+const tokenAction = require('./../actions/settings/token')
+settings
+  .command('token')
+  .description('print your access token (--unmask)')
+  .option('--unmask', 'unmask access token')
+  .action(tokenAction)
+
+// dotenvx-ops settings device
+const deviceAction = require('./../actions/settings/device')
+settings
+  .command('device')
+  .description('print your device pubkey (--unmask)')
+  .option('--unmask', 'unmask device pubkey')
+  .action(deviceAction)
+
+// dotenvx-ops settings hostname
+const hostnameAction = require('./../actions/settings/hostname')
+settings
+  .command('hostname')
+  .description('print hostname')
+  .action(hostnameAction)
+
+module.exports = settings