@dotenvx/dotenvx-ops 0.44.0 → 0.45.1

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.44.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.1...main)
+
+## [0.45.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.0...v0.45.1) (2026-05-07)
+
+### Changed
+
+* Surface team selector for `up|push` only when member of multiple teams ([#67](https://github.com/dotenvx/dotenvx-ops/pull/66))
+
+## [0.45.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.44.0...v0.45.0) (2026-05-07)
+
+### Added
+
+* Prompt for team on `armor push`(if member of multiple teams) ([#66](https://github.com/dotenvx/dotenvx-ops/pull/66))
 
 ## [0.44.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.43.0...v0.44.0) (2026-05-07)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.44.0",
+  "version": "0.45.1",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",

package/src/cli/actions/armor/push.js

@@ -17,7 +17,7 @@ async function push () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorPush(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorPush(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/actions/armor/up.js

@@ -17,7 +17,7 @@ async function up () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorUp(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorUp(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/commands/armor.js

@@ -18,6 +18,7 @@ armor
   .command('up')
   .description('armor private key')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to armor private key for')
   .action(upAction)
 
 // dotenvx-ops armor down
@@ -34,6 +35,7 @@ armor
   .command('push')
   .description('push armored key (from .env.keys)')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to push armored private key for')
   .action(pushAction)
 
 // dotenvx-ops armor pull

package/src/lib/api/postArmorPush.js

@@ -4,23 +4,26 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostArmorPush {
-  constructor (hostname, token, devicePublicKey, privateKey) {
+  constructor (hostname, token, devicePublicKey, privateKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.privateKey = privateKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const privateKey = this.privateKey
+    const team = this.team
     const url = `${this.hostname}/api/armor/push`
 
     const body = {
       device_public_key: devicePublicKey,
       cli_version: packageJson.version,
-      private_key: privateKey
+      private_key: privateKey,
+      team
     }
 
     const resp = await http(url, {

package/src/lib/services/armorPush.js

@@ -1,13 +1,22 @@
 const dotenvx = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
 const PostArmorPush = require('../api/postArmorPush')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorPush {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -15,11 +24,37 @@ class ArmorPush {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const { privateKeyName } = keyNamesForEnvFile(envFile)
 
     const privateKey = dotenvx.get(privateKeyName, { path: '.env.keys', strict: true, noOps: true })
-    const json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey).run()
+
+    let json
+
+    if (team) {
+      json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, team).run()
+      }
+    }
 
     return {
       ...json,

package/src/lib/services/armorUp.js

@@ -1,16 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
 const prompts = require('@inquirer/prompts')
 const PostArmorUp = require('../api/postArmorUp')
-const GetAccount = require('../api/getAccount')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 const removeEnvKey = require('../helpers/removeEnvKey')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorUp {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -18,6 +25,7 @@ class ArmorUp {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -27,20 +35,32 @@ class ArmorUp {
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
     const privateKey = dotenvx.get(privateKeyName, { path: '.env.keys', strict: true, ignore: ['MISSING_KEY'], noOps: true })
 
-    const accountJson = await new GetAccount(hostname, token).run()
-    const choices = accountJson.organizations.map(o => ({
-      name: o.provider_slug,
-      value: o.provider_slug
-    }))
-    let team = choices[0] && choices[0].value
-    if (choices.length > 1) {
-      team = await prompts.select({
-        message: 'Select team',
-        choices
-      })
+    let json
+
+    if (team) {
+      json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
+      }
     }
 
-    const json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
     removeEnvKey(privateKeyName)
 
     return {