@dotenvx/dotenvx-ops 0.37.8 → 0.38.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.8...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.38.0...main)
+
+## [0.38.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.9...v0.38.0) (2026-04-20)
+
+### Added
+
+* Add update notification `⛆ update available (patch)` when update is available - once every 24 hours ([#38](https://github.com/dotenvx/dotenvx-ops/pull/38))
+
+## [0.37.9](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.8...v0.37.9) (2026-04-17)
+
+### Changed
+
+* Fix `open` when open command does not exist on user's machine ([#36](https://github.com/dotenvx/dotenvx-ops/pull/36))
 
 ## [0.37.8](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.7...v0.37.8) (2026-04-08)
 

package/README.md

@@ -1,7 +1,11 @@
-[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=3)](https://dotenvx.com/ops)
+[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=6)](https://dotenvx.com/ops)
 
-> ARMORED KEYS by dotenvx
+```
+⛨ ARMORED KEYS: Harden your private keys.
+⮕ install [curl -sfS https://dotenvx.sh/ops | sh]
+⮕ then run [dotenvx-ops login]
+```
 
-[Learn more](https://dotenvx.com/docs/ops)
+[Learn more](https://dotenvx.com/ops)
 
  

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.37.8",
+  "version": "0.38.0",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",
@@ -54,6 +54,7 @@
     "express": "^5.2.1",
     "open": "^8.4.2",
     "playwright": "^1.57.0",
+    "semver": "^7.7.4",
     "systeminformation": "^5.22.11",
     "undici": "^7.11.0",
     "yocto-spinner": "^1.1.0"

package/src/cli/actions/backup.js

@@ -1,5 +1,4 @@
 const fs = require('fs')
-const open = require('open')
 
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
@@ -9,6 +8,7 @@ const clipboardy = require('./../../lib/helpers/clipboardy')
 const confirm = require('./../../lib/helpers/confirm')
 const formatCode = require('./../../lib/helpers/formatCode')
 const truncate = require('./../../lib/helpers/truncate')
+const openUrl = require('./../../lib/helpers/openUrl')
 
 const LoggedIn = require('./../../lib/services/loggedIn')
 const Login = require('./../../lib/services/login')
@@ -48,7 +48,7 @@ async function backup () {
 
       // optionally allow user to open browser
       confirm({ message: `press Enter to open [${verificationUri}] and enter code [${formatCode(userCode)}]...` })
-        .then(answer => answer && open(verificationUriComplete))
+        .then(answer => answer && openUrl(verificationUriComplete))
         .catch(() => {}) // ignore
 
       const data = await pollPromise

package/src/cli/actions/keypair.js

@@ -1,6 +1,7 @@
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 const createSpinner = require('../../lib/helpers/createSpinner2')
+const PostKeypair = require('../../lib/api/postKeypair')
 
 async function keypair (publicKey) {
   // debug opts
@@ -13,14 +14,17 @@ async function keypair (publicKey) {
   }
 
   const sesh = new Session()
+  await sesh.notifyUpdate()
   const hostname = options.hostname || sesh.hostname()
-  const token = options.token
+  const token = options.token || sesh.token()
   try {
-    const main = require('./../../lib/main')
-    const kp = await main.keypair(publicKey, { hostname, token })
+    const devicePublicKey = sesh.devicePublicKey()
+
+    const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
+
     const output = {
-      public_key: kp.publicKey,
-      private_key: kp.privateKey
+      public_key: json.public_key,
+      private_key: json.private_key
     }
 
     let space = 0

package/src/cli/actions/login.js

@@ -1,4 +1,3 @@
-const open = require('open')
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 
@@ -8,6 +7,7 @@ const LoginPoll = require('./../../lib/services/loginPoll')
 const clipboardy = require('./../../lib/helpers/clipboardy')
 const createSpinner2 = require('../../lib/helpers/createSpinner2')
 const formatCode = require('./../../lib/helpers/formatCode')
+const openUrl = require('./../../lib/helpers/openUrl')
 
 const FRAMES = ['◐', '◓', '◑', '◒']
 
@@ -17,6 +17,7 @@ function listenForOpenKey (onOpen) {
 
   const canSetRawMode = typeof stdin.setRawMode === 'function'
   const wasRawMode = Boolean(stdin.isRaw)
+  let didHandleOpenChoice = false
 
   const cleanup = () => {
     stdin.off('data', onData)
@@ -35,12 +36,17 @@ function listenForOpenKey (onOpen) {
     }
 
     if (key === '\r' || key === '\n' || lower === 'y') {
-      cleanup()
-      Promise.resolve(onOpen()).catch(() => {})
+      if (!didHandleOpenChoice) {
+        didHandleOpenChoice = true
+        Promise.resolve(onOpen()).catch(() => {})
+      }
       return
     }
 
-    if (lower === 'n') cleanup()
+    if (lower === 'n') {
+      cleanup()
+      process.kill(process.pid, 'SIGINT')
+    }
   }
 
   if (canSetRawMode) stdin.setRawMode(true)
@@ -57,6 +63,7 @@ async function login () {
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
+  await sesh.notifyUpdate()
   const hostname = options.hostname || sesh.hostname()
   let cleanupOpenKeyListener = () => {}
 
@@ -78,7 +85,7 @@ async function login () {
 
     // begin polling
     const pollPromise = new LoginPoll(hostname, deviceCode, interval).run()
-    cleanupOpenKeyListener = listenForOpenKey(() => open(verificationUriComplete))
+    cleanupOpenKeyListener = listenForOpenKey(() => openUrl(verificationUriComplete))
     const data = await pollPromise
 
     cleanupOpenKeyListener()

package/src/cli/actions/open.js

@@ -1,9 +1,8 @@
-const _open = require('open')
-
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 
 const dotenvxProjectId = require('./../../lib/helpers/dotenvxProjectId')
+const openUrl = require('./../../lib/helpers/openUrl')
 
 async function open () {
   // debug opts
@@ -15,7 +14,7 @@ async function open () {
     const uid = dotenvxProjectId(this.cwd)
     const url = `${hostname}/go/${uid}`
 
-    _open(url)
+    await openUrl(url)
 
     logger.success(`✔ opened [${url}]`)
   } catch (error) {

package/src/cli/actions/rotate.js

@@ -1,29 +1,31 @@
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 const Rotate = require('./../../lib/services/rotate')
-const { createSpinner } = require('./../../lib/helpers/createSpinner')
-
-const spinner = createSpinner('rotating..')
+const { createSpinner2 } = require('./../../lib/helpers/createSpinner2')
 
 async function rotate (uri) {
   const options = this.opts()
+  const spinner = await createSpinner2({ ...options, text: 'rotating' })
+
   logger.debug(`options: ${JSON.stringify(options)}`)
+  if (uri) {
+    logger.debug(`uri: ${uri}`)
+  }
 
   try {
-    spinner.start()
-
     const sesh = new Session()
+    await sesh.notifyUpdate()
     const hostname = options.hostname || sesh.hostname()
     const token = options.token || sesh.token()
 
     const { url, rotUid } = await new Rotate(hostname, token, uri).run()
 
-    spinner.stop()
+    if (spinner) spinner.stop()
 
     logger.success(`✔ rotated [${url}]`)
     logger.help(`⮕ next run [dotenvx-ops get dotenvx://${rotUid}]`)
   } catch (error) {
-    spinner.stop()
+    if (spinner) spinner.stop()
     if (error.message) {
       logger.error(error.message)
     } else {

package/src/cli/dotenvx-ops.js

@@ -7,6 +7,8 @@ const program = new Command()
 const { setLogLevel } = require('@dotenvx/dotenvx')
 
 const packageJson = require('./../lib/helpers/packageJson')
+const argv = process.argv.slice(2)
+const firstArg = argv[0]
 
 // global log levels
 program
@@ -15,7 +17,7 @@ program
   .option('-q, --quiet', 'sets log level to error')
   .option('-v, --verbose', 'sets log level to verbose')
   .option('-d, --debug', 'sets log level to debug')
-  .hook('preAction', (thisCommand, actionCommand) => {
+  .hook('preAction', async (thisCommand, actionCommand) => {
     const options = thisCommand.opts()
 
     setLogLevel(options)
@@ -90,8 +92,6 @@ program
   .action(setAction)
 
 // dotenvx-ops rotate
-const argv = process.argv.slice(2)
-const firstArg = argv[0]
 const shouldLoadRotateCommand = firstArg === 'rotate' || firstArg === 'help' || firstArg === '--help' || firstArg === '-h'
 if (shouldLoadRotateCommand) {
   program.addCommand(require('./commands/rotate'))

package/src/db/session.js

@@ -1,9 +1,15 @@
 const Conf = require('conf')
 const dotenv = require('dotenv')
 const si = require('systeminformation')
+const semver = require('semver')
+const { logger } = require('@dotenvx/dotenvx')
 
 const Device = require('./device')
 const jsonToEnv = require('./../lib/helpers/jsonToEnv')
+const packageJson = require('./../lib/helpers/packageJson')
+const GetVersion = require('./../lib/api/getVersion')
+
+const HOURS_24 = 60 * 60 * 24 * 1000 // 24hrs in ms
 
 class Session {
   constructor () {
@@ -74,6 +80,41 @@ class Session {
     }
   }
 
+  //
+  // Notify Update
+  //
+  async notifyUpdate () {
+    try {
+      const lastCheck = Number(this.store.get('DOTENVX_OPS_VERSION_LAST_CHECK') || 0)
+      const now = Date.now()
+
+      // 24 hours have passed
+      if ((lastCheck + HOURS_24) < now) {
+        const local = packageJson.version
+        let remote = local // in case of http fetch error
+
+        try {
+          const VERSION = await new GetVersion().run()
+          remote = VERSION
+          this.store.set('DOTENVX_OPS_VERSION', VERSION) // remote version
+        } catch (err) {
+          // noop
+          logger.debug(err.message)
+        }
+
+        this.store.set('DOTENVX_OPS_VERSION_LAST_CHECK', now) // record check
+
+        if (semver.gt(remote, local)) {
+          const diff = semver.diff(local, remote)
+          console.error(`⛆ update available (${diff})`)
+        }
+      }
+    } catch (err) {
+      // noop
+      logger.debug(err.message)
+    }
+  }
+
   //
   // Set/Delete
   //
@@ -121,6 +162,8 @@ class Session {
     this.store.delete('DOTENVX_OPS_TOKEN')
     this.store.delete('DOTENVX_OPS_HOSTNAME')
     this.store.delete('DOTENVX_OPS_ON')
+    this.store.delete('DOTENVX_OPS_VERSION')
+    this.store.delete('DOTENVX_OPS_VERSION_LAST_CHECK')
     return true
   }
 

package/src/lib/api/getVersion.js

@@ -0,0 +1,24 @@
+const { http } = require('../../lib/helpers/http')
+
+class GetVersion {
+  constructor () {
+    this.hostname = 'https://dotenvx.sh'
+  }
+
+  async run () {
+    const url = `${this.hostname}/ops/VERSION`
+
+    const resp = await http(url, { method: 'GET' })
+    const VERSION = await resp.body.text()
+
+    if (resp.statusCode >= 400) {
+      const error = new Error('[VERSION_FETCH_FAILED] version fetch failed')
+      error.code = 'VERSION_FETCH_FAILED'
+      throw error
+    }
+
+    return VERSION
+  }
+}
+
+module.exports = GetVersion

package/src/lib/helpers/openUrl.js

@@ -0,0 +1,7 @@
+const open = require('open')
+
+async function openUrl (url) {
+  return open(url, { wait: true })
+}
+
+module.exports = openUrl

package/src/lib/main.js

@@ -14,18 +14,18 @@ const dotenvxProjectId = require('./helpers/dotenvxProjectId')
 const observe = async function (encoded, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
 
   const _pwd = process.cwd()
-  const _dotenvxProjectId = process.env.DOTENVX_PROJECT_ID || options.dotenvxProjectId || dotenvxProjectId(_pwd, false)
+  const _dotenvxProjectId = options.dotenvxProjectId || dotenvxProjectId(_pwd, false)
 
   const _gitUrl = gitUrl()
   const _gitBranch = gitBranch()
@@ -45,12 +45,12 @@ const observe = async function (encoded, options = {}) {
 const get = async function (uri, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
@@ -62,12 +62,12 @@ const get = async function (uri, options = {}) {
 const set = async function (uri, value, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
@@ -80,12 +80,12 @@ const set = async function (uri, value, options = {}) {
 const keypair = async function (publicKey, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }