@dotenvx/dotenvx-ops 0.25.2 → 0.26.0

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.25.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.26.0...main)
+
+## [0.26.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.25.2...v0.26.0) (2025-12-14)
+
+### Added
+
+* Add `rotate github connect` ([#16](https://github.com/dotenvx/dotenvx-ops/pull/16))
 
 ## [0.25.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.25.1...v0.25.2) (2025-12-11)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.25.2",
+  "version": "0.26.0",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Dotenvx Ops – commercial tooling for .env files",
   "author": "@motdotla",

package/src/cli/actions/rotate/github/connect.js

@@ -0,0 +1,75 @@
+const { logger } = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
+const Session = require('./../../../../db/session')
+const RotateGithubConnect = require('./../../../../lib/services/rotateGithubConnect')
+const { createSpinner } = require('./../../../../lib/helpers/createSpinner')
+const GetAccount = require('./../../../../lib/api/getAccount')
+
+const spinner = createSpinner('waiting on browser completion')
+
+async function connect () {
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  try {
+    const sesh = new Session()
+    const hostname = options.hostname
+    const token = options.token || sesh.token()
+    let org = options.org
+    let username = options.username
+    let password = options.password
+    const email = options.email
+
+    // user must be logged in to use feature
+    const accountJson = await new GetAccount(hostname, token).run()
+
+    if (!org) {
+      const choices = accountJson.organizations.map(o => ({
+        name: o.provider_slug,
+        value: o.provider_slug
+      }))
+
+      if (choices.length === 1) {
+        org = choices[0].value // just use first choice
+      } else {
+        org = await prompts.select({
+          message: 'Select dotenvx organization',
+          choices
+        })
+      }
+    }
+
+    if (!username) {
+      username = await prompts.input({ message: 'github username:' })
+    }
+
+    if (!password) {
+      password = await prompts.password({ message: 'github password:' })
+    }
+
+    spinner.start()
+
+    const { uid, url } = await new RotateGithubConnect(hostname, token, org, username, password, email).run()
+
+    spinner.stop()
+
+    logger.success(`✔ connected [${url}]`)
+    logger.help(`⮕ next run [dotenvx-ops rotate dotenvx://${uid}]`)
+  } catch (error) {
+    spinner.stop()
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = connect

package/src/cli/commands/rotate/github.js

@@ -0,0 +1,25 @@
+const { Command } = require('commander')
+
+const github = new Command('github')
+
+const Session = require('./../../../db/session')
+const sesh = new Session()
+
+github
+  .description('github')
+  .allowUnknownOption()
+
+// dotenvx-ops rotate github connect
+const connectAction = require('./../../actions/rotate/github/connect')
+github
+  .command('connect')
+  .description('connect passcard')
+  .option('--org <organizationSlug>')
+  .option('--username <username>')
+  .option('--password <password>')
+  .option('--email <email>')
+  .option('--hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .action(connectAction)
+
+module.exports = github

package/src/cli/commands/rotate.js

@@ -9,6 +9,7 @@ rotate
   .description('rotate secret')
   .allowUnknownOption()
 
+rotate.addCommand(require('./rotate/github'))
 rotate.addCommand(require('./rotate/npm'))
 
 // dotenvx-ops rotate (fallback positional argument handler)

package/src/lib/services/rotateGithubConnect.js

@@ -0,0 +1,56 @@
+const PostRotateConnect = require('./../api/postRotateConnect')
+
+const playwrightConnect = require('./../helpers/playwrightConnect')
+
+const TIMEOUT = 500 // visibility timeout
+const SLUG = 'github' // hardcoded
+
+class RotateGithubConnect {
+  constructor (hostname, token, org, username, password, email = null) {
+    this.hostname = hostname
+    this.org = org
+    this.token = token
+    this.username = username
+    this.password = password
+
+    // optional
+    this.email = email
+  }
+
+  async run () {
+    const hostname = this.hostname
+    const token = this.token
+    const org = this.org
+    const username = this.username
+    const password = this.password
+    const email = this.email
+
+    const { browser, context, page } = await playwrightConnect()
+
+    const usernameSelector = 'input[type="text"]'
+    const passwordSelector = 'input[type="password"]'
+
+    await page.goto('https://github.com/login', { waitUntil: 'domcontentloaded' })
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(usernameSelector, username)
+    await page.waitForTimeout(TIMEOUT)
+    await page.fill(passwordSelector, password)
+    await page.waitForTimeout(TIMEOUT)
+    await page.press('input[type="password"]', 'Enter')
+    await page.waitForNavigation({ timeout: 0 })
+    await page.waitForSelector('img.avatar', { state: 'visible', timeout: 0 })
+
+    const playwrightStorageStateStringified = JSON.stringify(await context.storageState())
+
+    const { uid, url } = await new PostRotateConnect(hostname, token, org, SLUG, username, password, email, playwrightStorageStateStringified).run()
+
+    await browser.close()
+
+    return {
+      uid,
+      url
+    }
+  }
+}
+
+module.exports = RotateGithubConnect

package/src/lib/services/rotateNpmConnect.js

@@ -3,6 +3,7 @@ const PostRotateConnect = require('./../api/postRotateConnect')
 const playwrightConnect = require('./../helpers/playwrightConnect')
 
 const TIMEOUT = 500 // visibility timeout
+const SLUG = 'npm'
 
 class RotateNpmConnect {
   constructor (hostname, token, org, username, password, email = null) {
@@ -20,7 +21,6 @@ class RotateNpmConnect {
     const hostname = this.hostname
     const token = this.token
     const org = this.org
-    const slug = 'npm' // hardcoded
     const username = this.username
     const password = this.password
     const email = this.email
@@ -42,7 +42,7 @@ class RotateNpmConnect {
 
     const playwrightStorageStateStringified = JSON.stringify(await context.storageState())
 
-    const { uid, url } = await new PostRotateConnect(hostname, token, org, slug, username, password, email, playwrightStorageStateStringified).run()
+    const { uid, url } = await new PostRotateConnect(hostname, token, org, SLUG, username, password, email, playwrightStorageStateStringified).run()
 
     await browser.close()