@dotenvx/dotenvx-ops 0.45.0 → 0.45.2

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.2...main)
+
+## [0.45.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.1...v0.45.2) (2026-05-07)
+
+### Changed
+
+* Surface team selector for `down|pull` ([#68](https://github.com/dotenvx/dotenvx-ops/pull/68))
+
+## [0.45.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.0...v0.45.1) (2026-05-07)
+
+### Changed
+
+* Surface team selector for `up|push` only when member of multiple teams ([#67](https://github.com/dotenvx/dotenvx-ops/pull/66))
 
 ## [0.45.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.44.0...v0.45.0) (2026-05-07)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.45.0",
+  "version": "0.45.2",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",

package/src/cli/actions/armor/down.js

@@ -17,7 +17,7 @@ async function down () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorDown(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorDown(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/actions/armor/pull.js

@@ -17,7 +17,7 @@ async function pull () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorPull(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorPull(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/actions/armor/push.js

@@ -17,7 +17,7 @@ async function push () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorPush(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorPush(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/actions/armor/up.js

@@ -17,7 +17,7 @@ async function up () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorUp(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorUp(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/commands/armor.js

@@ -18,6 +18,7 @@ armor
   .command('up')
   .description('armor private key')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to armor private key for')
   .action(upAction)
 
 // dotenvx-ops armor down
@@ -26,6 +27,7 @@ armor
   .command('down')
   .description('dearmor private key')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to dearmor private key from')
   .action(downAction)
 
 // dotenvx-ops armor push
@@ -34,6 +36,7 @@ armor
   .command('push')
   .description('push armored key (from .env.keys)')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to push armored private key for')
   .action(pushAction)
 
 // dotenvx-ops armor pull
@@ -42,6 +45,7 @@ armor
   .command('pull')
   .description('pull armored key (into .env.keys)')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to pull armored private key from')
   .action(pullAction)
 
 // dotenvx-ops armor rotate

package/src/lib/api/postArmorDown.js

@@ -4,23 +4,26 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostArmorDown {
-  constructor (hostname, token, devicePublicKey, publicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.publicKey = publicKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const publicKey = this.publicKey
+    const team = this.team
     const url = `${this.hostname}/api/armor/down`
 
     const body = {
       device_public_key: devicePublicKey,
       cli_version: packageJson.version,
-      public_key: publicKey
+      public_key: publicKey,
+      team
     }
 
     const resp = await http(url, {

package/src/lib/api/postArmorPull.js

@@ -4,23 +4,26 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostArmorPull {
-  constructor (hostname, token, devicePublicKey, publicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.publicKey = publicKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const publicKey = this.publicKey
+    const team = this.team
     const url = `${this.hostname}/api/armor/pull`
 
     const body = {
       device_public_key: devicePublicKey,
       cli_version: packageJson.version,
-      public_key: publicKey
+      public_key: publicKey,
+      team
     }
 
     const resp = await http(url, {

package/src/lib/services/armorDown.js

@@ -1,14 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
 const PostArmorDown = require('../api/postArmorDown')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 const upsertEnvKey = require('../helpers/upsertEnvKey')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorDown {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -16,6 +25,7 @@ class ArmorDown {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -23,7 +33,31 @@ class ArmorDown {
     } = keyNamesForEnvFile(envFile)
 
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
-    const json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey).run()
+    let json
+
+    if (team) {
+      json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, team).run()
+      }
+    }
 
     upsertEnvKey(privateKeyName, json.private_key)
 

package/src/lib/services/armorPull.js

@@ -1,14 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
 const PostArmorPull = require('../api/postArmorPull')
 const upsertEnvKey = require('../helpers/upsertEnvKey')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorPull {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -16,6 +25,7 @@ class ArmorPull {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -23,7 +33,31 @@ class ArmorPull {
     } = keyNamesForEnvFile(envFile)
 
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
-    const json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey).run()
+    let json
+
+    if (team) {
+      json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, team).run()
+      }
+    }
 
     const result = upsertEnvKey(privateKeyName, json.private_key)
 

package/src/lib/services/armorPush.js

@@ -1,15 +1,22 @@
 const dotenvx = require('@dotenvx/dotenvx')
 const prompts = require('@inquirer/prompts')
 const PostArmorPush = require('../api/postArmorPush')
-const GetAccount = require('../api/getAccount')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorPush {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -17,25 +24,37 @@ class ArmorPush {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const { privateKeyName } = keyNamesForEnvFile(envFile)
 
     const privateKey = dotenvx.get(privateKeyName, { path: '.env.keys', strict: true, noOps: true })
 
-    const accountJson = await new GetAccount(hostname, token).run()
-    const choices = accountJson.organizations.map(o => ({
-      name: o.provider_slug,
-      value: o.provider_slug
-    }))
-    let team = choices[0] && choices[0].value
-    if (choices.length > 1) {
-      team = await prompts.select({
-        message: 'Select team',
-        choices
-      })
-    }
+    let json
+
+    if (team) {
+      json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
 
-    const json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, team).run()
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorPush(hostname, token, devicePublicKey, privateKey, team).run()
+      }
+    }
 
     return {
       ...json,

package/src/lib/services/armorUp.js

@@ -1,16 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
 const prompts = require('@inquirer/prompts')
 const PostArmorUp = require('../api/postArmorUp')
-const GetAccount = require('../api/getAccount')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 const removeEnvKey = require('../helpers/removeEnvKey')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorUp {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -18,6 +25,7 @@ class ArmorUp {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -27,20 +35,32 @@ class ArmorUp {
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
     const privateKey = dotenvx.get(privateKeyName, { path: '.env.keys', strict: true, ignore: ['MISSING_KEY'], noOps: true })
 
-    const accountJson = await new GetAccount(hostname, token).run()
-    const choices = accountJson.organizations.map(o => ({
-      name: o.provider_slug,
-      value: o.provider_slug
-    }))
-    let team = choices[0] && choices[0].value
-    if (choices.length > 1) {
-      team = await prompts.select({
-        message: 'Select team',
-        choices
-      })
+    let json
+
+    if (team) {
+      json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
+      }
     }
 
-    const json = await new PostArmorUp(hostname, token, devicePublicKey, publicKey, privateKey, team).run()
     removeEnvKey(privateKeyName)
 
     return {