@dotenvx/dotenvx-ops 0.23.2 → 0.23.4

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.4...main)
+
+## [0.23.4](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.3...v0.23.4) (2025-12-10)
+
+### Added
+
+* Add working `rotate URI` command ([#13](https://github.com/dotenvx/dotenvx-ops/pull/13))
+
+## [0.23.3](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.2...v0.23.3) (2025-12-09)
+
+### Changed
+
+* Rename `rotate npm login` to `rotate npm connect` ([#12](https://github.com/dotenvx/dotenvx-ops/pull/12))
 
 ## [0.23.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.23.1...v0.23.2) (2025-12-04)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.23.2",
+  "version": "0.23.4",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Dotenvx Ops – commercial tooling for .env files",
   "author": "@motdotla",

package/src/cli/actions/rotate/npm/connect.js

@@ -0,0 +1,46 @@
+const { logger } = require('@dotenvx/dotenvx')
+const Session = require('./../../../../db/session')
+const RotateNpmConnect = require('./../../../../lib/services/rotateNpmConnect')
+const { createSpinner } = require('./../../../../lib/helpers/createSpinner')
+
+const spinner = createSpinner('waiting on browser completion')
+
+async function connect () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  try {
+    spinner.start()
+
+    const sesh = new Session()
+    const hostname = options.hostname
+    const token = options.token || sesh.token()
+    const org = options.org
+    const username = options.username
+    const password = options.password
+    const email = options.email
+
+    const { uid, url } = await new RotateNpmConnect(hostname, token, org, username, password, email).run()
+
+    spinner.stop()
+
+    logger.success(`✔ connected [${url}]`)
+    logger.help(`⮕ next run [dotenvx-ops rotate dotenvx://${uid}]`)
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = connect

package/src/cli/actions/rotate.js

@@ -0,0 +1,42 @@
+const { logger } = require('@dotenvx/dotenvx')
+const Session = require('./../../db/session')
+const Rotate = require('./../../lib/services/rotate')
+const { createSpinner } = require('./../../lib/helpers/createSpinner')
+
+const spinner = createSpinner('rotating..')
+
+async function rotate (uri) {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  try {
+    spinner.start()
+
+    const sesh = new Session()
+    const hostname = options.hostname
+    const token = options.token || sesh.token()
+
+    const { url, rotUid } = await new Rotate(hostname, token, uri).run()
+
+    spinner.stop()
+
+    logger.success(`✔ rotated [${url}]`)
+    logger.help(`⮕ next run [dotenvx-ops get dotenvx://${rotUid}]`)
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = rotate

package/src/cli/commands/rotate/npm.js

@@ -2,26 +2,31 @@ const { Command } = require('commander')
 
 const npm = new Command('npm')
 
+const Session = require('./../../../db/session')
+const sesh = new Session()
+
 npm
   .description('npm')
   .allowUnknownOption()
 
-// dotenvx-ops rotate npm login
-const loginAction = require('./../../actions/rotate/npm/login')
+// dotenvx-ops rotate npm connect
+const connectAction = require('./../../actions/rotate/npm/connect')
 npm
-  .command('login')
+  .command('connect')
   .description('connect passcard')
   .requiredOption('--org <organizationSlug>')
   .requiredOption('--username <username>')
   .requiredOption('--password <password>')
   .option('--email <email>')
-  .action(loginAction)
+  .option('--hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .action(connectAction)
 
-// dotenvx-ops rotate npm rotate
-const rotateAction = require('./../../actions/rotate/npm/rotate')
-npm
-  .command('rotate')
-  .description('rotate api key')
-  .action(rotateAction)
+// // dotenvx-ops rotate npm rotate
+// const rotateAction = require('./../../actions/rotate/npm/rotate')
+// npm
+//   .command('rotate')
+//   .description('rotate api key')
+//   .action(rotateAction)
 
 module.exports = npm

package/src/cli/commands/rotate.js

@@ -2,10 +2,29 @@ const { Command } = require('commander')
 
 const rotate = new Command('rotate')
 
+const Session = require('./../../db/session')
+const sesh = new Session()
+
 rotate
-  .description('rotate api keys')
+  .description('rotate secret')
   .allowUnknownOption()
 
 rotate.addCommand(require('./rotate/npm'))
 
+// dotenvx-ops rotate (fallback positional argument handler)
+const rotateAction = require('../actions/rotate')
+rotate
+  .argument('[URI]', 'URI') // brackets = optional
+  .option('--hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .action(async function (uri, options, command) {
+    if (!uri) {
+      command.help()
+      return
+    }
+
+    // Call external action with correct "this" binding
+    await rotateAction.call(this, uri)
+  })
+
 module.exports = rotate

package/src/cli/dotenvx-ops.js

@@ -53,9 +53,6 @@ program
   .option('--force', 'force changes')
   .action(syncAction)
 
-// dotenvx-ops rotate
-program.addCommand(require('./commands/rotate'))
-
 // dotenvx-ops get
 const getAction = require('./actions/get')
 program
@@ -66,6 +63,9 @@ program
   .option('--token <token>', 'set token')
   .action(getAction)
 
+// dotenvx-ops rotate
+program.addCommand(require('./commands/rotate'))
+
 // dotenvx-ops login
 const loginAction = require('./actions/login')
 program

package/src/lib/api/postRotate.js

@@ -0,0 +1,39 @@
+const { http } = require('../../lib/helpers/http')
+const buildApiError = require('../../lib/helpers/buildApiError')
+
+class PostRotate {
+  constructor (hostname, token, uri) {
+    this.hostname = hostname || 'https://ops.dotenvx.com'
+    this.token = token
+
+    this.uri = uri
+  }
+
+  async run () {
+    const token = this.token
+    const url = `${this.hostname}/api/rotate`
+
+    const uri = this.uri
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        uri
+      })
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostRotate

package/src/lib/api/{postRotateLogin.js → postRotateConnect.js}

@@ -1,7 +1,7 @@
 const { http } = require('../../lib/helpers/http')
 const buildApiError = require('../../lib/helpers/buildApiError')
 
-class PostRotateLogin {
+class PostRotateConnect {
   constructor (hostname, token, org, slug, username, password, email = null, playwrightStorageStateStringified) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
@@ -16,7 +16,7 @@ class PostRotateLogin {
 
   async run () {
     const token = this.token
-    const url = `${this.hostname}/api/rotate/login`
+    const url = `${this.hostname}/api/rotate/connect`
 
     const org = this.org
     const slug = this.slug
@@ -51,4 +51,4 @@ class PostRotateLogin {
   }
 }
 
-module.exports = PostRotateLogin
+module.exports = PostRotateConnect

package/src/lib/helpers/playwrightConnect.js

@@ -1,9 +1,19 @@
 const { logger } = require('@dotenvx/dotenvx')
 const { chromium } = require('playwright')
 
+const VIEWPORT_WIDTH = 1200
+const VIEWPORT_HEIGHT = 742
+const VIEWPORT = { width: VIEWPORT_WIDTH, height: VIEWPORT_HEIGHT }
+const CHROME_ARGS = [
+  '--app=data:,', // starts a blank popup
+  '--disable-infobars',
+  '--disable-session-crashed-bubble',
+  '--noerrdialogs'
+]
+
 async function playwrightConnect (channel = 'chrome') {
   const browser = await ensurePlaywrightBrowser(channel)
-  const context = await browser.newContext()
+  const context = await browser.newContext({ viewport: VIEWPORT })
   const page = await context.newPage()
 
   return { browser, context, page }
@@ -11,13 +21,13 @@ async function playwrightConnect (channel = 'chrome') {
 
 async function ensurePlaywrightBrowser (channel = 'chrome') {
   try {
-    return await chromium.launch({ headless: false, channel })
+    return await chromium.launch({ headless: false, channel, args: CHROME_ARGS })
   } catch (err) {
     if (String(err).includes('Executable doesn\'t exist')) {
       logger.info('Installing chromium...')
       const cp = require('child_process')
       cp.execSync('npx playwright install chromium', { stdio: 'inherit' })
-      return await chromium.launch({ headless: false })
+      return await chromium.launch({ headless: false, args: CHROME_ARGS })
     }
   }
 }

package/src/lib/services/rotate.js

@@ -0,0 +1,28 @@
+const PostRotate = require('./../api/postRotate')
+
+class Rotate {
+  constructor (hostname, token, inputUri) {
+    this.hostname = hostname
+    this.token = token
+    this.inputUri = inputUri
+  }
+
+  async run () {
+    const hostname = this.hostname
+    const token = this.token
+    const inputUri = this.inputUri
+
+    const json = await new PostRotate(hostname, token, inputUri).run()
+    const uri = json.uri
+    const url = json.url
+    const rotUid = json.rot_uid
+
+    return {
+      uri,
+      url,
+      rotUid
+    }
+  }
+}
+
+module.exports = Rotate

package/src/lib/services/rotateNpmConnect.js

@@ -0,0 +1,56 @@
+const PostRotateConnect = require('./../api/postRotateConnect')
+
+const playwrightConnect = require('./../helpers/playwrightConnect')
+
+const TIMEOUT = 500 // visibility timeout
+
+class RotateNpmConnect {
+  constructor (hostname, token, org, username, password, email = null) {
+    this.hostname = hostname
+    this.org = org
+    this.token = token
+    this.username = username
+    this.password = password
+
+    // optional
+    this.email = email
+  }
+
+  async run () {
+    const hostname = this.hostname
+    const token = this.token
+    const org = this.org
+    const slug = 'npm' // hardcoded
+    const username = this.username
+    const password = this.password
+    const email = this.email
+
+    const { browser, context, page } = await playwrightConnect()
+
+    const usernameSelector = 'input[type="text"]'
+    const passwordSelector = 'input[type="password"]'
+
+    await page.goto('https://npmjs.com/login', { waitUntil: 'domcontentloaded' })
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(usernameSelector, username)
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(passwordSelector, password)
+    await page.waitForTimeout(TIMEOUT)
+    await page.press('input[type="password"]', 'Enter')
+    await page.waitForNavigation({ timeout: 0 })
+    await page.waitForSelector('img[alt="avatar"]', { state: 'visible', timeout: 0 })
+
+    const playwrightStorageStateStringified = JSON.stringify(await context.storageState())
+
+    const { uid, url } = await new PostRotateConnect(hostname, token, org, slug, username, password, email, playwrightStorageStateStringified).run()
+
+    await browser.close()
+
+    return {
+      uid,
+      url
+    }
+  }
+}
+
+module.exports = RotateNpmConnect

package/src/cli/actions/rotate/npm/login.js

@@ -1,47 +0,0 @@
-const { logger } = require('@dotenvx/dotenvx')
-const PostRotateLogin = require('./../../../../lib/api/postRotateLogin')
-const Session = require('./../../../../db/session')
-const playwrightConnect = require('./../../../../lib/helpers/playwrightConnect')
-
-const TIMEOUT = 500 // visibility timeout
-
-async function login () {
-  const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
-  const slug = 'npm'
-  const { org, username, password, email } = options
-  const { browser, context, page } = await playwrightConnect()
-
-  const usernameSelector = 'input[type="text"]'
-  const passwordSelector = 'input[type="password"]'
-
-  await page.goto('https://npmjs.com/login', { waitUntil: 'domcontentloaded' })
-  await page.waitForTimeout(TIMEOUT)
-  await page.fill(usernameSelector, username)
-  await page.waitForTimeout(TIMEOUT)
-  await page.fill(passwordSelector, password)
-  await page.waitForTimeout(TIMEOUT)
-  await page.press('input[type="password"]', 'Enter')
-  await page.waitForNavigation({ timeout: 0 })
-  await page.waitForSelector('img[alt="avatar"]', { state: 'visible', timeout: 0 })
-
-  const sesh = new Session() // TODO: handle scenario where constructor fails
-
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || process.env.DOTENVX_RADAR_HOSTNAME || options.hostname
-  if (!hostname) {
-    hostname = sesh.hostname()
-  }
-
-  let token = process.env.DOTENVX_OPS_TOKEN || process.env.DOTENVX_RADAR_TOKEN || options.token
-  if (!token) {
-    token = sesh.token()
-  }
-
-  const playwrightStorageStateStringified = JSON.stringify(await context.storageState())
-  const { uid } = await new PostRotateLogin(hostname, token, org, slug, username, password, email, playwrightStorageStateStringified).run()
-
-  await browser.close()
-  process.stdout.write(uid)
-}
-
-module.exports = login

package/src/cli/actions/rotate/npm/rotate.js

@@ -1,9 +0,0 @@
-const { logger } = require('@dotenvx/dotenvx')
-
-async function rotate () {
-  const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
-  process.stdout.write('coming soon')
-}
-
-module.exports = rotate