@dotenvx/dotenvx-ops 0.31.2 → 0.33.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.31.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.33.0...main)
+
+## [0.33.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.32.0...v0.33.0) (2026-03-11)
+
+### Added
+
+* Add internal `keypair` command that calls remotely ([#27](https://github.com/dotenvx/dotenvx-ops/pull/27))
+
+## [0.32.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.31.2...v0.32.0) (2026-03-11)
+
+### Changed
+
+* Hide various commands for now as tooling is simplified ([#26](https://github.com/dotenvx/dotenvx-ops/pull/26))
 
 ## [0.31.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.31.1...v0.31.2) (2026-03-07)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.31.2",
+  "version": "0.33.0",
   "name": "@dotenvx/dotenvx-ops",
   "description": "production grade dotenvx–with operational primitives",
   "author": "@motdotla",
@@ -41,7 +41,7 @@
   },
   "dependencies": {
     "@clack/core": "^0.4.2",
-    "@dotenvx/dotenvx": "^1.52.0",
+    "@dotenvx/dotenvx": "^1.54.1",
     "@inquirer/prompts": "^7.10.1",
     "arch": "^2.1.1",
     "commander": "^11.1.0",

package/src/cli/actions/keypair.js

@@ -0,0 +1,42 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const main = require('./../../lib/main')
+
+async function keypair () {
+  // debug opts
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+  const token = options.token
+
+  try {
+    const kp = await main.keypair({ hostname, token })
+    const output = {
+      public_key: kp.publicKey,
+      private_key: kp.privateKey
+    }
+
+    let space = 0
+    if (options.prettyPrint) {
+      space = 2
+    }
+
+    console.log(JSON.stringify(output, null, space))
+  } catch (error) {
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = keypair

package/src/cli/commands/gateway.js

@@ -3,7 +3,7 @@ const { Command } = require('commander')
 const gateway = new Command('gateway')
 
 gateway
-  .description('🛡️  gateway')
+  .description('[INTERNAL] 🛡️  gateway')
   .allowUnknownOption()
 
 // dotenvx-ops gateway start

package/src/cli/commands/rotate.js

@@ -6,7 +6,7 @@ const Session = require('./../../db/session')
 const sesh = new Session()
 
 rotate
-  .description('rotate secret')
+  .description('[INTERNAL] rotate secret')
   .allowUnknownOption()
 
 rotate.addCommand(require('./rotate/github'))

package/src/cli/dotenvx-ops.js

@@ -43,7 +43,7 @@ program
 const openAction = require('./actions/open')
 program
   .command('open')
-  .description('open project')
+  .description('[INTERNAL] open project')
   .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
   .action(openAction)
 
@@ -74,7 +74,7 @@ program
 const getAction = require('./actions/get')
 program
   .command('get')
-  .description('fetch secret')
+  .description('[INTERNAL] fetch secret')
   .argument('URI', 'URI')
   .option('--hostname <url>', 'set hostname', sesh.hostname())
   .option('--token <token>', 'set token')
@@ -84,7 +84,7 @@ program
 const setAction = require('./actions/set')
 program
   .command('set')
-  .description('set secret')
+  .description('[INTERNAL] set secret')
   .argument('URI', 'URI')
   .argument('value', 'value')
   .option('--hostname <url>', 'set hostname', sesh.hostname())
@@ -114,9 +114,19 @@ program
 const statusAction = require('./actions/status')
 program
   .command('status')
-  .description('status')
+  .description('[INTERNAL] status')
   .action(statusAction)
 
+// dotenvx-ops keypair
+const keypairAction = require('./actions/keypair')
+program
+  .command('keypair')
+  .description('[INTERNAL] generate keypair')
+  .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .option('--pp, --pretty-print', 'pretty print output')
+  .action(keypairAction)
+
 program.addCommand(require('./commands/gateway'))
 program.addCommand(require('./commands/settings'))
 

package/src/lib/api/postKeypair.js

@@ -0,0 +1,39 @@
+const { http } = require('../../lib/helpers/http')
+const buildApiError = require('../../lib/helpers/buildApiError')
+const packageJson = require('../../lib/helpers/packageJson')
+
+class PostKeypair {
+  constructor (hostname, token, devicePublicKey) {
+    this.hostname = hostname || 'https://ops.dotenvx.com'
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+  }
+
+  async run () {
+    const token = this.token
+    const devicePublicKey = this.devicePublicKey
+    const url = `${this.hostname}/api/keypair`
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        device_public_key: devicePublicKey,
+        cli_version: packageJson.version
+      })
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostKeypair

package/src/lib/main.js

@@ -5,6 +5,7 @@ const Session = require('./../db/session')
 const PostObserve = require('./api/postObserve')
 const PostGet = require('./api/postGet')
 const PostSet = require('./api/postSet')
+const PostKeypair = require('./api/postKeypair')
 
 const gitUrl = require('./helpers/gitUrl')
 const gitBranch = require('./helpers/gitBranch')
@@ -76,6 +77,29 @@ const set = async function (uri, value, options = {}) {
   return await new PostSet(hostname, token, devicePublicKey, uri, value).run()
 }
 
+const keypair = async function (options = {}) {
+  const sesh = new Session() // TODO: handle scenario where constructor fails
+
+  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  if (!hostname) {
+    hostname = sesh.hostname()
+  }
+
+  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  if (!token) {
+    token = sesh.token()
+  }
+
+  const devicePublicKey = sesh.devicePublicKey()
+
+  const json = await new PostKeypair(hostname, token, devicePublicKey).run()
+
+  return {
+    publicKey: json.public_key,
+    privateKey: json.private_key
+  }
+}
+
 const config = function (options = {}) {
   return dotenvx.config(options)
 }
@@ -84,6 +108,7 @@ module.exports = {
   observe,
   get,
   set,
+  keypair,
   // dotenv proxies
   config
 }