@dotenvx/dotenvx-ops 0.37.9 → 0.38.1

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.9...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.38.1...main)
+
+## [0.38.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.38.0...v0.38.1) (2026-04-20)
+
+### Changed
+
+* Patch `rotate`
+
+## [0.38.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.9...v0.38.0) (2026-04-20)
+
+### Added
+
+* Add update notification `⛆ update available (patch)` when update is available - once every 24 hours ([#38](https://github.com/dotenvx/dotenvx-ops/pull/38))
 
 ## [0.37.9](https://github.com/dotenvx/dotenvx-ops/compare/v0.37.8...v0.37.9) (2026-04-17)
 

package/README.md

@@ -1,7 +1,11 @@
-[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=3)](https://dotenvx.com/ops)
+[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=6)](https://dotenvx.com/ops)
 
-> ARMORED KEYS by dotenvx
+```
+⛨ ARMORED KEYS: Harden your private keys.
+⮕ install [curl -sfS https://dotenvx.sh/ops | sh]
+⮕ then run [dotenvx-ops login]
+```
 
-[Learn more](https://dotenvx.com/docs/ops)
+[Learn more](https://dotenvx.com/ops)
 
  

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.37.9",
+  "version": "0.38.1",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",
@@ -54,6 +54,7 @@
     "express": "^5.2.1",
     "open": "^8.4.2",
     "playwright": "^1.57.0",
+    "semver": "^7.7.4",
     "systeminformation": "^5.22.11",
     "undici": "^7.11.0",
     "yocto-spinner": "^1.1.0"

package/src/cli/actions/keypair.js

@@ -1,6 +1,7 @@
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 const createSpinner = require('../../lib/helpers/createSpinner2')
+const PostKeypair = require('../../lib/api/postKeypair')
 
 async function keypair (publicKey) {
   // debug opts
@@ -13,14 +14,17 @@ async function keypair (publicKey) {
   }
 
   const sesh = new Session()
+  await sesh.notifyUpdate()
   const hostname = options.hostname || sesh.hostname()
-  const token = options.token
+  const token = options.token || sesh.token()
   try {
-    const main = require('./../../lib/main')
-    const kp = await main.keypair(publicKey, { hostname, token })
+    const devicePublicKey = sesh.devicePublicKey()
+
+    const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
+
     const output = {
-      public_key: kp.publicKey,
-      private_key: kp.privateKey
+      public_key: json.public_key,
+      private_key: json.private_key
     }
 
     let space = 0

package/src/cli/actions/login.js

@@ -63,6 +63,7 @@ async function login () {
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
+  await sesh.notifyUpdate()
   const hostname = options.hostname || sesh.hostname()
   let cleanupOpenKeyListener = () => {}
 

package/src/cli/actions/rotate.js

@@ -1,29 +1,31 @@
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 const Rotate = require('./../../lib/services/rotate')
-const { createSpinner } = require('./../../lib/helpers/createSpinner')
-
-const spinner = createSpinner('rotating..')
+const createSpinner2 = require('./../../lib/helpers/createSpinner2')
 
 async function rotate (uri) {
   const options = this.opts()
+  const spinner = await createSpinner2({ ...options, text: 'rotating' })
+
   logger.debug(`options: ${JSON.stringify(options)}`)
+  if (uri) {
+    logger.debug(`uri: ${uri}`)
+  }
 
   try {
-    spinner.start()
-
     const sesh = new Session()
+    await sesh.notifyUpdate()
     const hostname = options.hostname || sesh.hostname()
     const token = options.token || sesh.token()
 
     const { url, rotUid } = await new Rotate(hostname, token, uri).run()
 
-    spinner.stop()
+    if (spinner) spinner.stop()
 
-    logger.success(`✔ rotated [${url}]`)
+    logger.success(`⟳ rotated [${url}]`)
     logger.help(`⮕ next run [dotenvx-ops get dotenvx://${rotUid}]`)
   } catch (error) {
-    spinner.stop()
+    if (spinner) spinner.stop()
     if (error.message) {
       logger.error(error.message)
     } else {

package/src/cli/dotenvx-ops.js

@@ -7,6 +7,8 @@ const program = new Command()
 const { setLogLevel } = require('@dotenvx/dotenvx')
 
 const packageJson = require('./../lib/helpers/packageJson')
+const argv = process.argv.slice(2)
+const firstArg = argv[0]
 
 // global log levels
 program
@@ -15,7 +17,7 @@ program
   .option('-q, --quiet', 'sets log level to error')
   .option('-v, --verbose', 'sets log level to verbose')
   .option('-d, --debug', 'sets log level to debug')
-  .hook('preAction', (thisCommand, actionCommand) => {
+  .hook('preAction', async (thisCommand, actionCommand) => {
     const options = thisCommand.opts()
 
     setLogLevel(options)
@@ -90,8 +92,6 @@ program
   .action(setAction)
 
 // dotenvx-ops rotate
-const argv = process.argv.slice(2)
-const firstArg = argv[0]
 const shouldLoadRotateCommand = firstArg === 'rotate' || firstArg === 'help' || firstArg === '--help' || firstArg === '-h'
 if (shouldLoadRotateCommand) {
   program.addCommand(require('./commands/rotate'))

package/src/db/session.js

@@ -1,9 +1,15 @@
 const Conf = require('conf')
 const dotenv = require('dotenv')
 const si = require('systeminformation')
+const semver = require('semver')
+const { logger } = require('@dotenvx/dotenvx')
 
 const Device = require('./device')
 const jsonToEnv = require('./../lib/helpers/jsonToEnv')
+const packageJson = require('./../lib/helpers/packageJson')
+const GetVersion = require('./../lib/api/getVersion')
+
+const HOURS_24 = 60 * 60 * 24 * 1000 // 24hrs in ms
 
 class Session {
   constructor () {
@@ -74,6 +80,41 @@ class Session {
     }
   }
 
+  //
+  // Notify Update
+  //
+  async notifyUpdate () {
+    try {
+      const lastCheck = Number(this.store.get('DOTENVX_OPS_VERSION_LAST_CHECK') || 0)
+      const now = Date.now()
+
+      // 24 hours have passed
+      if ((lastCheck + HOURS_24) < now) {
+        const local = packageJson.version
+        let remote = local // in case of http fetch error
+
+        try {
+          const VERSION = await new GetVersion().run()
+          remote = VERSION
+          this.store.set('DOTENVX_OPS_VERSION', VERSION) // remote version
+        } catch (err) {
+          // noop
+          logger.debug(err.message)
+        }
+
+        this.store.set('DOTENVX_OPS_VERSION_LAST_CHECK', now) // record check
+
+        if (semver.gt(remote, local)) {
+          const diff = semver.diff(local, remote)
+          console.error(`⛆ update available (${diff})`)
+        }
+      }
+    } catch (err) {
+      // noop
+      logger.debug(err.message)
+    }
+  }
+
   //
   // Set/Delete
   //
@@ -121,6 +162,8 @@ class Session {
     this.store.delete('DOTENVX_OPS_TOKEN')
     this.store.delete('DOTENVX_OPS_HOSTNAME')
     this.store.delete('DOTENVX_OPS_ON')
+    this.store.delete('DOTENVX_OPS_VERSION')
+    this.store.delete('DOTENVX_OPS_VERSION_LAST_CHECK')
     return true
   }
 

package/src/lib/api/getVersion.js

@@ -0,0 +1,24 @@
+const { http } = require('../../lib/helpers/http')
+
+class GetVersion {
+  constructor () {
+    this.hostname = 'https://dotenvx.sh'
+  }
+
+  async run () {
+    const url = `${this.hostname}/ops/VERSION`
+
+    const resp = await http(url, { method: 'GET' })
+    const VERSION = await resp.body.text()
+
+    if (resp.statusCode >= 400) {
+      const error = new Error('[VERSION_FETCH_FAILED] version fetch failed')
+      error.code = 'VERSION_FETCH_FAILED'
+      throw error
+    }
+
+    return VERSION
+  }
+}
+
+module.exports = GetVersion

package/src/lib/main.js

@@ -14,18 +14,18 @@ const dotenvxProjectId = require('./helpers/dotenvxProjectId')
 const observe = async function (encoded, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
 
   const _pwd = process.cwd()
-  const _dotenvxProjectId = process.env.DOTENVX_PROJECT_ID || options.dotenvxProjectId || dotenvxProjectId(_pwd, false)
+  const _dotenvxProjectId = options.dotenvxProjectId || dotenvxProjectId(_pwd, false)
 
   const _gitUrl = gitUrl()
   const _gitBranch = gitBranch()
@@ -45,12 +45,12 @@ const observe = async function (encoded, options = {}) {
 const get = async function (uri, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
@@ -62,12 +62,12 @@ const get = async function (uri, options = {}) {
 const set = async function (uri, value, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }
@@ -80,12 +80,12 @@ const set = async function (uri, value, options = {}) {
 const keypair = async function (publicKey, options = {}) {
   const sesh = new Session() // TODO: handle scenario where constructor fails
 
-  let hostname = process.env.DOTENVX_OPS_HOSTNAME || options.hostname
+  let hostname = options.hostname
   if (!hostname) {
     hostname = sesh.hostname()
   }
 
-  let token = process.env.DOTENVX_OPS_TOKEN || options.token
+  let token = options.token
   if (!token) {
     token = sesh.token()
   }