@dotenvx/dotenvx-ops 0.33.0 → 0.34.0

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.33.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.34.0...main)
+
+## [0.34.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.33.0...v0.34.0) (2026-03-12)
+
+### Added
+
+* Run keypair against existing `public_key` as a lookup mechanism ([#28](https://github.com/dotenvx/dotenvx-ops/pull/28))
 
 ## [0.33.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.32.0...v0.33.0) (2026-03-11)
 

package/README.md

@@ -1,6 +1,6 @@
 [![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=2)](https://dotenvx.com/ops)
 
-> production grade dotenvx–with operational primitives
+> keep keys off compute–powered by `dotenvx`
 
 [Learn more](https://dotenvx.com/docs/ops)
 

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "0.33.0",
+  "version": "0.34.0",
   "name": "@dotenvx/dotenvx-ops",
-  "description": "production grade dotenvx–with operational primitives",
+  "description": "keep keys off compute–powered by `dotenvx`",
   "author": "@motdotla",
   "keywords": [
     "dotenv",

package/src/cli/actions/keypair.js

@@ -2,16 +2,15 @@ const { logger } = require('@dotenvx/dotenvx')
 
 const main = require('./../../lib/main')
 
-async function keypair () {
+async function keypair (publicKey) {
   // debug opts
   const options = this.opts()
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const hostname = options.hostname
   const token = options.token
-
   try {
-    const kp = await main.keypair({ hostname, token })
+    const kp = await main.keypair(publicKey, { hostname, token })
     const output = {
       public_key: kp.publicKey,
       private_key: kp.privateKey

package/src/cli/actions/login.js

@@ -43,7 +43,7 @@ async function login () {
 
     const data = await pollPromise
     spinner.succeed(`logged in [${data.username}] to this device and activated token [${truncate(data.access_token, 11)}]`)
-    logger.help('⮕ next run [dotenvx-ops backup]')
+    // logger.help('⮕ next run [dotenvx-ops backup]')
     process.exit(0)
   } catch (error) {
     spinner.stop()

package/src/cli/dotenvx-ops.js

@@ -122,6 +122,7 @@ const keypairAction = require('./actions/keypair')
 program
   .command('keypair')
   .description('[INTERNAL] generate keypair')
+  .argument('[publicKey]', 'existing public key')
   .option('-h, --hostname <url>', 'set hostname', sesh.hostname())
   .option('--token <token>', 'set token')
   .option('--pp, --pretty-print', 'pretty print output')

package/src/lib/api/postKeypair.js

@@ -3,27 +3,35 @@ const buildApiError = require('../../lib/helpers/buildApiError')
 const packageJson = require('../../lib/helpers/packageJson')
 
 class PostKeypair {
-  constructor (hostname, token, devicePublicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
   }
 
   async run () {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
     const url = `${this.hostname}/api/keypair`
 
+    const body = {
+      device_public_key: devicePublicKey,
+      cli_version: packageJson.version
+    }
+
+    if (publicKey) {
+      body.public_key = publicKey
+    }
+
     const resp = await http(url, {
       method: 'POST',
       headers: {
         Authorization: `Bearer ${token}`,
         'Content-Type': 'application/json'
       },
-      body: JSON.stringify({
-        device_public_key: devicePublicKey,
-        cli_version: packageJson.version
-      })
+      body: JSON.stringify(body)
     })
 
     const json = await resp.body.json()

package/src/lib/main.d.ts

@@ -9,6 +9,27 @@ import type { URL } from 'url';
  */
 export function observe(payload: string): string;
 
+export interface DotenvOpsOptions {
+  hostname?: string;
+  token?: string;
+}
+
+export type DotenvOpsKeypairOptions = DotenvOpsOptions;
+
+export interface DotenvOpsKeypairOutput {
+  publicKey: string;
+  privateKey: string;
+}
+
+/**
+ * Creates a remote keypair for the current authenticated device.
+ *
+ * @param publicKey - optional existing public key to fetch
+ * @param options - optional hostname/token overrides
+ * @returns generated public and private keys
+ */
+export function keypair(publicKey?: string, options?: DotenvOpsKeypairOptions): Promise<DotenvOpsKeypairOutput>;
+
 export interface DotenvConfigOptions {
   /**
    * Specify a custom path if your file containing environment variables is located elsewhere.

package/src/lib/main.js

@@ -77,7 +77,7 @@ const set = async function (uri, value, options = {}) {
   return await new PostSet(hostname, token, devicePublicKey, uri, value).run()
 }
 
-const keypair = async function (options = {}) {
+const keypair = async function (publicKey, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
   let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
@@ -92,7 +92,7 @@ const keypair = async function (options = {}) {
 
   const devicePublicKey = sesh.devicePublicKey()
 
-  const json = await new PostKeypair(hostname, token, devicePublicKey).run()
+  const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
 
   return {
     publicKey: json.public_key,