@dotenvx/dotenvx-ops 0.45.1 → 0.45.3

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.1...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.3...main)
+
+## [0.45.3](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.2...v0.45.3) (2026-05-11)
+
+### Changed
+
+* Bump fast-uri ([#69](https://github.com/dotenvx/dotenvx-ops/pull/69) [GHSA-v39h-62p7-jpjc](https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc))
+
+## [0.45.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.1...v0.45.2) (2026-05-07)
+
+### Changed
+
+* Surface team selector for `down|pull` ([#68](https://github.com/dotenvx/dotenvx-ops/pull/68))
 
 ## [0.45.1](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.0...v0.45.1) (2026-05-07)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.45.1",
+  "version": "0.45.3",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",

package/src/cli/actions/armor/down.js

@@ -17,7 +17,7 @@ async function down () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorDown(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorDown(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/actions/armor/pull.js

@@ -17,7 +17,7 @@ async function pull () {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const { changed, privateKeyName } = await new ArmorPull(hostname, token, devicePublicKey, options.envFile).run()
+    const { changed, privateKeyName } = await new ArmorPull(hostname, token, devicePublicKey, options.envFile, options.team).run()
 
     if (spinner) spinner.stop()
     if (changed) {

package/src/cli/commands/armor.js

@@ -27,6 +27,7 @@ armor
   .command('down')
   .description('dearmor private key')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to dearmor private key from')
   .action(downAction)
 
 // dotenvx-ops armor push
@@ -44,6 +45,7 @@ armor
   .command('pull')
   .description('pull armored key (into .env.keys)')
   .option('-f, --env-file <path>', 'path to your env file')
+  .option('--team <team>', 'team to pull armored private key from')
   .action(pullAction)
 
 // dotenvx-ops armor rotate

package/src/lib/api/postArmorDown.js

@@ -4,23 +4,26 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostArmorDown {
-  constructor (hostname, token, devicePublicKey, publicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.publicKey = publicKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const publicKey = this.publicKey
+    const team = this.team
     const url = `${this.hostname}/api/armor/down`
 
     const body = {
       device_public_key: devicePublicKey,
       cli_version: packageJson.version,
-      public_key: publicKey
+      public_key: publicKey,
+      team
     }
 
     const resp = await http(url, {

package/src/lib/api/postArmorPull.js

@@ -4,23 +4,26 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostArmorPull {
-  constructor (hostname, token, devicePublicKey, publicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.publicKey = publicKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const publicKey = this.publicKey
+    const team = this.team
     const url = `${this.hostname}/api/armor/pull`
 
     const body = {
       device_public_key: devicePublicKey,
       cli_version: packageJson.version,
-      public_key: publicKey
+      public_key: publicKey,
+      team
     }
 
     const resp = await http(url, {

package/src/lib/services/armorDown.js

@@ -1,14 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
 const PostArmorDown = require('../api/postArmorDown')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 const upsertEnvKey = require('../helpers/upsertEnvKey')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorDown {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -16,6 +25,7 @@ class ArmorDown {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -23,7 +33,31 @@ class ArmorDown {
     } = keyNamesForEnvFile(envFile)
 
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
-    const json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey).run()
+    let json
+
+    if (team) {
+      json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorDown(hostname, token, devicePublicKey, publicKey, team).run()
+      }
+    }
 
     upsertEnvKey(privateKeyName, json.private_key)
 

package/src/lib/services/armorPull.js

@@ -1,14 +1,23 @@
 const dotenvx = require('@dotenvx/dotenvx')
+const prompts = require('@inquirer/prompts')
 const PostArmorPull = require('../api/postArmorPull')
 const upsertEnvKey = require('../helpers/upsertEnvKey')
 const keyNamesForEnvFile = require('../helpers/keyNamesForEnvFile')
 
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
 class ArmorPull {
-  constructor (hostname, token, devicePublicKey, envFile = '.env') {
+  constructor (hostname, token, devicePublicKey, envFile = '.env', team = undefined) {
     this.hostname = hostname
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.envFile = envFile
+    this.team = team
   }
 
   async run () {
@@ -16,6 +25,7 @@ class ArmorPull {
     const token = this.token
     const devicePublicKey = this.devicePublicKey
     const envFile = this.envFile
+    const team = this.team
 
     const {
       publicKeyName,
@@ -23,7 +33,31 @@ class ArmorPull {
     } = keyNamesForEnvFile(envFile)
 
     const publicKey = dotenvx.get(publicKeyName, { path: envFile, strict: true, ignore: ['MISSING_PRIVATE_KEY'], noOps: true })
-    const json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey).run()
+    let json
+
+    if (team) {
+      json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, team).run()
+    } else {
+      try {
+        json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, undefined).run()
+      } catch (error) {
+        if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+          throw error
+        }
+
+        const choices = teamChoicesFromMeta(error.meta)
+
+        let team = choices[0].value
+        if (choices.length > 1) {
+          team = await prompts.select({
+            message: 'Select team',
+            choices
+          })
+        }
+
+        json = await new PostArmorPull(hostname, token, devicePublicKey, publicKey, team).run()
+      }
+    }
 
     const result = upsertEnvKey(privateKeyName, json.private_key)