@dotenvx/dotenvx-ops 0.22.2 → 0.23.1

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.1...main)
+
+## [0.23.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.0...v0.23.1) (2025-12-03)
+
+### Added
+
+* Stdout storageState with `rotate npm login` ([#10](https://github.com/dotenvx/dotenvx-ops/pull/10))
+
+## [0.23.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.2...v0.23.0) (2025-12-03)
+
+### Added
+
+* Add new `rotate` command ([#9](https://github.com/dotenvx/dotenvx-ops/pull/9))
 
 ## [0.22.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.22.1...v0.22.2) (2025-12-01)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.22.2",
+  "version": "0.23.1",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Dotenvx Ops – commercial tooling for .env files",
   "author": "@motdotla",
@@ -42,6 +42,7 @@
   "dependencies": {
     "@clack/core": "^0.4.2",
     "@dotenvx/dotenvx": "^1.48.1",
+    "@inquirer/prompts": "^7.10.1",
     "arch": "^2.1.1",
     "commander": "^11.1.0",
     "conf": "^10.2.0",
@@ -49,6 +50,7 @@
     "eciesjs": "^0.4.7",
     "execa": "^5.1.1",
     "open": "^8.4.2",
+    "playwright": "^1.57.0",
     "systeminformation": "^5.22.11",
     "undici": "^7.11.0"
   },

package/src/cli/actions/rotate/npm/login.js

@@ -0,0 +1,25 @@
+const { logger } = require('@dotenvx/dotenvx')
+const playwrightConnect = require('./../../../../lib/helpers/playwrightConnect')
+
+const TIMEOUT = 1200 // visibility timeout
+
+async function login () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+  const { username, password } = options
+  const { browser, context, page } = await playwrightConnect()
+  await page.goto('https://npmjs.com/login', { waitUntil: 'domcontentloaded' })
+  await page.waitForTimeout(TIMEOUT)
+  await page.fill('input[type="text"]', username)
+  await page.waitForTimeout(TIMEOUT)
+  await page.fill('input[type="password"]', password)
+  await page.waitForTimeout(TIMEOUT)
+  await page.press('input[type="password"]', 'Enter')
+  await page.waitForNavigation({ timeout: 0 })
+  await page.waitForSelector('img[alt="avatar"]', { state: 'visible', timeout: 0 })
+  const storageState = JSON.stringify(await context.storageState())
+  await browser.close()
+  process.stdout.write(storageState)
+}
+
+module.exports = login

package/src/cli/commands/rotate/npm.js

@@ -0,0 +1,42 @@
+const { Command } = require('commander')
+
+const npm = new Command('npm')
+
+npm
+  .description('npmjs.com')
+  .allowUnknownOption()
+
+// dotenvx-ops rotate npm login
+const loginAction = require('./../../actions/rotate/npm/login')
+npm
+  .command('login')
+  .description('interactive local login + cookie capture')
+  .requiredOption('--username <username>')
+  .requiredOption('--password <password>')
+  .action(loginAction)
+
+//
+// // dotenvx-ops settings token
+// const tokenAction = require('./../actions/settings/token')
+// settings
+//   .command('token')
+//   .description('print your access token (--unmask)')
+//   .option('--unmask', 'unmask access token')
+//   .action(tokenAction)
+//
+// // dotenvx-ops settings device
+// const deviceAction = require('./../actions/settings/device')
+// settings
+//   .command('device')
+//   .description('print your device pubkey (--unmask)')
+//   .option('--unmask', 'unmask device pubkey')
+//   .action(deviceAction)
+//
+// // dotenvx-ops settings hostname
+// const hostnameAction = require('./../actions/settings/hostname')
+// settings
+//   .command('hostname')
+//   .description('print hostname')
+//   .action(hostnameAction)
+//
+module.exports = npm

package/src/cli/commands/rotate.js

@@ -0,0 +1,11 @@
+const { Command } = require('commander')
+
+const rotate = new Command('rotate')
+
+rotate
+  .description('rotate api keys')
+  .allowUnknownOption()
+
+rotate.addCommand(require('./rotate/npm'))
+
+module.exports = rotate

package/src/cli/dotenvx-ops.js

@@ -44,6 +44,18 @@ program.command('observe')
     observeAction.apply(this, args)
   })
 
+// dotenvx-ops sync
+const syncAction = require('./actions/sync')
+program
+  .command('sync')
+  .description('sync .env file(s)')
+  .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
+  .option('--force', 'force changes')
+  .action(syncAction)
+
+// dotenvx-ops rotate
+program.addCommand(require('./commands/rotate'))
+
 // dotenvx-ops get
 const getAction = require('./actions/get')
 program
@@ -54,15 +66,6 @@ program
   .option('--token <token>', 'set token')
   .action(getAction)
 
-// dotenvx-ops sync
-const syncAction = require('./actions/sync')
-program
-  .command('sync')
-  .description('sync .env file(s)')
-  .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
-  .option('--force', 'force changes')
-  .action(syncAction)
-
 // dotenvx-ops login
 const loginAction = require('./actions/login')
 program

package/src/lib/helpers/playwrightConnect.js

@@ -0,0 +1,25 @@
+const { logger } = require('@dotenvx/dotenvx')
+const { chromium } = require('playwright')
+
+async function playwrightConnect (channel = 'chrome') {
+  const browser = await ensurePlaywrightBrowser(channel)
+  const context = await browser.newContext()
+  const page = await context.newPage()
+
+  return { browser, context, page }
+}
+
+async function ensurePlaywrightBrowser (channel = 'chrome') {
+  try {
+    return await chromium.launch({ headless: false, channel })
+  } catch (err) {
+    if (String(err).includes('Executable doesn\'t exist')) {
+      logger.info('Installing chromium...')
+      const cp = require('child_process')
+      cp.execSync('npx playwright install chromium', { stdio: 'inherit' })
+      return await chromium.launch({ headless: false })
+    }
+  }
+}
+
+module.exports = playwrightConnect