@dotenvx/dotenvx-ops 0.32.0 → 0.34.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.32.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.34.0...main)
+
+## [0.34.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.33.0...v0.34.0) (2026-03-12)
+
+### Added
+
+* Run keypair against existing `public_key` as a lookup mechanism ([#28](https://github.com/dotenvx/dotenvx-ops/pull/28))
+
+## [0.33.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.32.0...v0.33.0) (2026-03-11)
+
+### Added
+
+* Add internal `keypair` command that calls remotely ([#27](https://github.com/dotenvx/dotenvx-ops/pull/27))
 
 ## [0.32.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.31.2...v0.32.0) (2026-03-11)
 

package/README.md

@@ -1,6 +1,6 @@
 [![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=2)](https://dotenvx.com/ops)
 
-> production grade dotenvx–with operational primitives
+> keep keys off compute–powered by `dotenvx`
 
 [Learn more](https://dotenvx.com/docs/ops)
 

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.32.0",
+  "version": "0.34.0",
   "name": "@dotenvx/dotenvx-ops",
-  "description": "production grade dotenvx–with operational primitives",
+  "description": "keep keys off compute–powered by `dotenvx`",
   "author": "@motdotla",
   "keywords": [
     "dotenv",

package/src/cli/actions/keypair.js

@@ -0,0 +1,41 @@
+const { logger } = require('@dotenvx/dotenvx')
+
+const main = require('./../../lib/main')
+
+async function keypair (publicKey) {
+  // debug opts
+  const options = this.opts()
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const hostname = options.hostname
+  const token = options.token
+  try {
+    const kp = await main.keypair(publicKey, { hostname, token })
+    const output = {
+      public_key: kp.publicKey,
+      private_key: kp.privateKey
+    }
+
+    let space = 0
+    if (options.prettyPrint) {
+      space = 2
+    }
+
+    console.log(JSON.stringify(output, null, space))
+  } catch (error) {
+    if (error.message) {
+      logger.error(error.message)
+    } else {
+      logger.error(error)
+    }
+    if (error.help) {
+      logger.help(error.help)
+    }
+    if (error.stack) {
+      logger.debug(error.stack)
+    }
+    process.exit(1)
+  }
+}
+
+module.exports = keypair

package/src/cli/actions/login.js

@@ -43,7 +43,7 @@ async function login () {
 
     const data = await pollPromise
     spinner.succeed(`logged in [${data.username}] to this device and activated token [${truncate(data.access_token, 11)}]`)
-    logger.help('⮕ next run [dotenvx-ops backup]')
+    // logger.help('⮕ next run [dotenvx-ops backup]')
     process.exit(0)
   } catch (error) {
     spinner.stop()

package/src/cli/dotenvx-ops.js

@@ -117,6 +117,17 @@ program
   .description('[INTERNAL] status')
   .action(statusAction)
 
+// dotenvx-ops keypair
+const keypairAction = require('./actions/keypair')
+program
+  .command('keypair')
+  .description('[INTERNAL] generate keypair')
+  .argument('[publicKey]', 'existing public key')
+  .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
+  .option('--token <token>', 'set token')
+  .option('--pp, --pretty-print', 'pretty print output')
+  .action(keypairAction)
+
 program.addCommand(require('./commands/gateway'))
 program.addCommand(require('./commands/settings'))
 

package/src/lib/api/postKeypair.js

@@ -0,0 +1,47 @@
+const { http } = require('../../lib/helpers/http')
+const buildApiError = require('../../lib/helpers/buildApiError')
+const packageJson = require('../../lib/helpers/packageJson')
+
+class PostKeypair {
+  constructor (hostname, token, devicePublicKey, publicKey) {
+    this.hostname = hostname || 'https://ops.dotenvx.com'
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+  }
+
+  async run () {
+    const token = this.token
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const url = `${this.hostname}/api/keypair`
+
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version
+    }
+
+    if (publicKey) {
+      body.public_key = publicKey
+    }
+
+    const resp = await http(url, {
+      method: 'POST',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify(body)
+    })
+
+    const json = await resp.body.json()
+
+    if (resp.statusCode >= 400) {
+      throw buildApiError(resp.statusCode, json)
+    }
+
+    return json
+  }
+}
+
+module.exports = PostKeypair

package/src/lib/main.d.ts

@@ -9,6 +9,27 @@ import type { URL } from 'url';
  */
 export function observe(payload: string): string;
 
+export interface DotenvOpsOptions {
+  hostname?: string;
+  token?: string;
+}
+
+export type DotenvOpsKeypairOptions = DotenvOpsOptions;
+
+export interface DotenvOpsKeypairOutput {
+  publicKey: string;
+  privateKey: string;
+}
+
+/**
+ * Creates a remote keypair for the current authenticated device.
+ *
+ * @param publicKey - optional existing public key to fetch
+ * @param options - optional hostname/token overrides
+ * @returns generated public and private keys
+ */
+export function keypair(publicKey?: string, options?: DotenvOpsKeypairOptions): Promise<DotenvOpsKeypairOutput>;
+
 export interface DotenvConfigOptions {
   /**
    * Specify a custom path if your file containing environment variables is located elsewhere.

package/src/lib/main.js

@@ -5,6 +5,7 @@ const Session = require('./../db/session')
 const PostObserve = require('./api/postObserve')
 const PostGet = require('./api/postGet')
 const PostSet = require('./api/postSet')
+const PostKeypair = require('./api/postKeypair')
 
 const gitUrl = require('./helpers/gitUrl')
 const gitBranch = require('./helpers/gitBranch')
@@ -76,6 +77,29 @@ const set = async function (uri, value, options = {}) {
   return await new PostSet(hostname, token, devicePublicKey, uri, value).run()
 }
 
+const keypair = async function (publicKey, options = {}) {
+  const sesh = new Session() // TODO: handle scenario where constructor fails
+
+  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  if (!hostname) {
+    hostname = sesh.hostname()
+  }
+
+  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  if (!token) {
+    token = sesh.token()
+  }
+
+  const devicePublicKey = sesh.devicePublicKey()
+
+  const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
+
+  return {
+    publicKey: json.public_key,
+    privateKey: json.private_key
+  }
+}
+
 const config = function (options = {}) {
   return dotenvx.config(options)
 }
@@ -84,6 +108,7 @@ module.exports = {
   observe,
   get,
   set,
+  keypair,
   // dotenv proxies
   config
 }