@dotenvx/dotenvx-ops 0.21.0 → 0.22.2

package/CHANGELOG.md

@@ -2,7 +2,25 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.21.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.2...main)
+
+## [0.22.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.1...v0.22.2) (2025-12-01)
+
+### Changed
+
+* Fix reference to `NODE_AUTH_TOKEN` during publish process
+
+## [0.22.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.0...v0.22.1) (2025-12-01)
+
+### Changed
+
+* NPM publish process uses dotenvx ROT token - for auto-rotating npm tokens.
+
+## [0.22.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.21.0...v0.22.0) (2025-11-26)
+
+### Added
+
+* Add `get` command for getting rotation tokens: `dotenvx get rot://gh/<slug>/NPM_TOKEN` ([#](https://github.com/dotenvx/dotenvx-ops/pull/7))
 
 ## [0.21.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.20.2...v0.21.0) (2025-10-11)
 

package/README.md

@@ -1,8 +1,6 @@
 [![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=2)](https://dotenvx.com/ops)
 
-> Dotenvx Ops is commercial tooling for [dotenvx](https://github.com/dotenvx/dotenvx).
-
-*Use dotenvx across your team, infrastructure, agents, and more.*
+> Dotenvx Ops is commercial tooling for .env files.
 
 [Learn more](https://dotenvx.com/docs/ops)
 

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.21.0",
+  "version": "0.22.2",
   "name": "@dotenvx/dotenvx-ops",
-  "description": "Dotenvx Ops",
+  "description": "Dotenvx Ops – commercial tooling for .env files",
   "author": "@motdotla",
   "keywords": [
     "dotenv",

package/src/cli/actions/get.js

@@ -0,0 +1,32 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const main = require('./../../lib/main')
+
+async function get (uri) {
+  // debug opts
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+  const token = options.token
+
+  try {
+    const value = await main.get(uri, { hostname, token })
+    process.stdout.write(value)
+  } catch (error) {
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = get

package/src/cli/dotenvx-ops.js

@@ -44,6 +44,16 @@ program.command('observe')
     observeAction.apply(this, args)
   })
 
+// dotenvx-ops get
+const getAction = require('./actions/get')
+program
+  .command('get')
+  .description('fetch secret')
+  .argument('URI', 'URI')
+  .option('--hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .action(getAction)
+
 // dotenvx-ops sync
 const syncAction = require('./actions/sync')
 program

package/src/lib/api/postGet.js

@@ -0,0 +1,37 @@
+const { http } = require('../../lib/helpers/http')
+const buildApiError = require('../../lib/helpers/buildApiError')
+
+class PostGet {
+  constructor (hostname, token, uri) {
+    this.hostname = hostname || 'https://ops.dotenvx.com'
+    this.token = token
+    this.uri = uri
+  }
+
+  async run () {
+    const token = this.token
+    const uri = this.uri
+    const url = `${this.hostname}/api/get`
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        uri
+      })
+    })
+
+    if (resp.statusCode >= 400) {
+      const json = await resp.body.json()
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    const text = await resp.body.text()
+    return text
+  }
+}
+
+module.exports = PostGet

package/src/lib/main.js

@@ -3,6 +3,7 @@ const dotenvx = require('@dotenvx/dotenvx')
 
 const Session = require('./../db/session')
 const PostObserve = require('./api/postObserve')
+const PostGet = require('./api/postGet')
 
 const gitUrl = require('./helpers/gitUrl')
 const gitBranch = require('./helpers/gitBranch')
@@ -39,12 +40,30 @@ const observe = async function (encoded, options = {}) {
   return json
 }
 
+const get = async function (uri, options = {}) {
+  const sesh = new Session() // TODO: handle scenario where constructor fails
+
+  let hostname = process.env.DOTENVX_OPS_HOSTNAME || process.env.DOTENVX_RADAR_HOSTNAME || options.hostname
+  if (!hostname) {
+    hostname = sesh.hostname()
+  }
+
+  let token = process.env.DOTENVX_OPS_TOKEN || process.env.DOTENVX_RADAR_TOKEN || options.token
+  if (!token) {
+    token = sesh.token()
+  }
+
+  const value = await new PostGet(hostname, token, uri).run()
+  return value
+}
+
 const config = function (options = {}) {
   return dotenvx.config(options)
 }
 
 module.exports = {
   observe,
+  get,
   // dotenv proxies
   config
 }