@dotenvx/dotenvx-ops 0.23.1 → 0.23.3

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.1...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.3...main)
+
+## [0.23.3](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.2...v0.23.3) (2025-12-09)
+
+### Changed
+
+* Rename `rotate npm login` to `rotate npm connect` ([#12](https://github.com/dotenvx/dotenvx-ops/pull/12))
+
+## [0.23.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.1...v0.23.2) (2025-12-04)
+
+### Changed
+
+* Create passcard on successful login ([#11](https://github.com/dotenvx/dotenvx-ops/pull/11))
 
 ## [0.23.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.0...v0.23.1) (2025-12-03)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.23.1",
+  "version": "0.23.3",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Dotenvx Ops – commercial tooling for .env files",
   "author": "@motdotla",

package/src/cli/actions/rotate/npm/connect.js

@@ -0,0 +1,44 @@
+const { logger } = require('@dotenvx/dotenvx')
+const RotateNpmConnect = require('./../../../../lib/services/rotateNpmConnect')
+const { createSpinner } = require('./../../../../lib/helpers/createSpinner')
+
+const spinner = createSpinner('waiting on browser completion')
+
+async function connect () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  try {
+    spinner.start()
+
+    const hostname = options.hostname
+    const token = options.token
+    const org = options.org
+    const username = options.username
+    const password = options.password
+    const email = options.email
+
+    const { url } = await new RotateNpmConnect(hostname, token, org, username, password, email).run()
+
+    spinner.stop()
+
+    logger.success(`✔ connected [${url}]`)
+    logger.help('⮕ next run [dotenvx-ops rotate npm rotate]')
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = connect

package/src/cli/actions/rotate/npm/rotate.js

@@ -0,0 +1,9 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+async function rotate () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+  process.stdout.write('coming soon')
+}
+
+module.exports = rotate

package/src/cli/commands/rotate/npm.js

@@ -2,41 +2,31 @@ const { Command } = require('commander')
 
 const npm = new Command('npm')
 
+const Session = require('./../../../db/session')
+const sesh = new Session()
+
 npm
-  .description('npmjs.com')
+  .description('npm')
   .allowUnknownOption()
 
-// dotenvx-ops rotate npm login
-const loginAction = require('./../../actions/rotate/npm/login')
+// dotenvx-ops rotate npm connect
+const connectAction = require('./../../actions/rotate/npm/connect')
 npm
-  .command('login')
-  .description('interactive local login + cookie capture')
+  .command('connect')
+  .description('connect passcard')
+  .requiredOption('--org <organizationSlug>')
   .requiredOption('--username <username>')
   .requiredOption('--password <password>')
-  .action(loginAction)
+  .option('--email <email>')
+  .option('--hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token', sesh.token())
+  .action(connectAction)
+
+// dotenvx-ops rotate npm rotate
+const rotateAction = require('./../../actions/rotate/npm/rotate')
+npm
+  .command('rotate')
+  .description('rotate api key')
+  .action(rotateAction)
 
-//
-// // dotenvx-ops settings token
-// const tokenAction = require('./../actions/settings/token')
-// settings
-//   .command('token')
-//   .description('print your access token (--unmask)')
-//   .option('--unmask', 'unmask access token')
-//   .action(tokenAction)
-//
-// // dotenvx-ops settings device
-// const deviceAction = require('./../actions/settings/device')
-// settings
-//   .command('device')
-//   .description('print your device pubkey (--unmask)')
-//   .option('--unmask', 'unmask device pubkey')
-//   .action(deviceAction)
-//
-// // dotenvx-ops settings hostname
-// const hostnameAction = require('./../actions/settings/hostname')
-// settings
-//   .command('hostname')
-//   .description('print hostname')
-//   .action(hostnameAction)
-//
 module.exports = npm

package/src/lib/api/postRotateConnect.js

@@ -0,0 +1,54 @@
+const { http } = require('../../lib/helpers/http')
+const buildApiError = require('../../lib/helpers/buildApiError')
+
+class PostRotateConnect {
+  constructor (hostname, token, org, slug, username, password, email = null, playwrightStorageStateStringified) {
+    this.hostname = hostname || 'https://ops.dotenvx.com'
+    this.token = token
+
+    this.org = org
+    this.slug = slug
+    this.username = username
+    this.password = password
+    this.email = email
+    this.playwrightStorageStateStringified = playwrightStorageStateStringified
+  }
+
+  async run () {
+    const token = this.token
+    const url = `${this.hostname}/api/rotate/connect`
+
+    const org = this.org
+    const slug = this.slug
+    const username = this.username
+    const password = this.password
+    const email = this.email
+    const playwrightStorageStateStringified = this.playwrightStorageStateStringified
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        org,
+        slug,
+        username,
+        password,
+        email,
+        playwright_storage_state: playwrightStorageStateStringified
+      })
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostRotateConnect

package/src/lib/helpers/playwrightConnect.js

@@ -1,9 +1,19 @@
 const { logger } = require('@dotenvx/dotenvx')
 const { chromium } = require('playwright')
 
+const VIEWPORT_WIDTH = 1200
+const VIEWPORT_HEIGHT = 742
+const VIEWPORT = { width: VIEWPORT_WIDTH, height: VIEWPORT_HEIGHT }
+const CHROME_ARGS = [
+  '--app=data:,', // starts a blank popup
+  '--disable-infobars',
+  '--disable-session-crashed-bubble',
+  '--noerrdialogs'
+]
+
 async function playwrightConnect (channel = 'chrome') {
   const browser = await ensurePlaywrightBrowser(channel)
-  const context = await browser.newContext()
+  const context = await browser.newContext({ viewport: VIEWPORT })
   const page = await context.newPage()
 
   return { browser, context, page }
@@ -11,13 +21,13 @@ async function playwrightConnect (channel = 'chrome') {
 
 async function ensurePlaywrightBrowser (channel = 'chrome') {
   try {
-    return await chromium.launch({ headless: false, channel })
+    return await chromium.launch({ headless: false, channel, args: CHROME_ARGS })
   } catch (err) {
     if (String(err).includes('Executable doesn\'t exist')) {
       logger.info('Installing chromium...')
       const cp = require('child_process')
       cp.execSync('npx playwright install chromium', { stdio: 'inherit' })
-      return await chromium.launch({ headless: false })
+      return await chromium.launch({ headless: false, args: CHROME_ARGS })
     }
   }
 }

package/src/lib/services/rotateNpmConnect.js

@@ -0,0 +1,55 @@
+const PostRotateConnect = require('./../api/postRotateConnect')
+
+const playwrightConnect = require('./../helpers/playwrightConnect')
+
+const TIMEOUT = 500 // visibility timeout
+
+class RotateNpmConnect {
+  constructor (hostname, token, org, username, password, email = null) {
+    this.hostname = hostname
+    this.org = org
+    this.token = token
+    this.username = username
+    this.password = password
+
+    // optional
+    this.email = email
+  }
+
+  async run () {
+    const hostname = this.hostname
+    const token = this.token
+    const org = this.org
+    const slug = 'npm' // hardcoded
+    const username = this.username
+    const password = this.password
+    const email = this.email
+
+    const { browser, context, page } = await playwrightConnect()
+
+    const usernameSelector = 'input[type="text"]'
+    const passwordSelector = 'input[type="password"]'
+
+    await page.goto('https://npmjs.com/login', { waitUntil: 'domcontentloaded' })
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(usernameSelector, username)
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(passwordSelector, password)
+    await page.waitForTimeout(TIMEOUT)
+    await page.press('input[type="password"]', 'Enter')
+    await page.waitForNavigation({ timeout: 0 })
+    await page.waitForSelector('img[alt="avatar"]', { state: 'visible', timeout: 0 })
+
+    const playwrightStorageStateStringified = JSON.stringify(await context.storageState())
+
+    const { url } = await new PostRotateConnect(hostname, token, org, slug, username, password, email, playwrightStorageStateStringified).run()
+
+    await browser.close()
+
+    return {
+      url
+    }
+  }
+}
+
+module.exports = RotateNpmConnect

package/src/cli/actions/rotate/npm/login.js

@@ -1,25 +0,0 @@
-const { logger } = require('@dotenvx/dotenvx')
-const playwrightConnect = require('./../../../../lib/helpers/playwrightConnect')
-
-const TIMEOUT = 1200 // visibility timeout
-
-async function login () {
-  const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
-  const { username, password } = options
-  const { browser, context, page } = await playwrightConnect()
-  await page.goto('https://npmjs.com/login', { waitUntil: 'domcontentloaded' })
-  await page.waitForTimeout(TIMEOUT)
-  await page.fill('input[type="text"]', username)
-  await page.waitForTimeout(TIMEOUT)
-  await page.fill('input[type="password"]', password)
-  await page.waitForTimeout(TIMEOUT)
-  await page.press('input[type="password"]', 'Enter')
-  await page.waitForNavigation({ timeout: 0 })
-  await page.waitForSelector('img[alt="avatar"]', { state: 'visible', timeout: 0 })
-  const storageState = JSON.stringify(await context.storageState())
-  await browser.close()
-  process.stdout.write(storageState)
-}
-
-module.exports = login