@dotenvx/dotenvx-ops 0.45.2 → 0.46.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx-ops/compare/v0.46.0...main)
+
+## [0.46.0](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.3...v0.46.0) (2026-05-13)
+
+### Added
+
+* Surface team selector for `keypair` ([#71](https://github.com/dotenvx/dotenvx-ops/pull/71))
+
+## [0.45.3](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.2...v0.45.3) (2026-05-11)
+
+### Changed
+
+* Bump fast-uri ([#69](https://github.com/dotenvx/dotenvx-ops/pull/69) [GHSA-v39h-62p7-jpjc](https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc))
 
 ## [0.45.2](https://github.com/dotenvx/dotenvx-ops/compare/v0.45.1...v0.45.2) (2026-05-07)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.45.2",
+  "version": "0.46.0",
   "name": "@dotenvx/dotenvx-ops",
   "description": "Secrets for agents–from the creator of `dotenv` and `dotenvx`",
   "author": "@motdotla",

package/src/cli/actions/keypair.js

@@ -1,7 +1,7 @@
 const { logger } = require('@dotenvx/dotenvx')
 const Session = require('./../../db/session')
 const createSpinner = require('../../lib/helpers/createSpinner2')
-const PostKeypair = require('../../lib/api/postKeypair')
+const Keypair = require('../../lib/services/keypair')
 
 async function keypair (publicKey) {
   // debug opts
@@ -20,7 +20,7 @@ async function keypair (publicKey) {
   try {
     const devicePublicKey = sesh.devicePublicKey()
 
-    const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
+    const json = await new Keypair(hostname, token, devicePublicKey, publicKey, options.team).run()
 
     const output = {
       public_key: json.public_key,

package/src/cli/actions/rotate/github/connect.js

@@ -35,16 +35,25 @@ async function connect () {
         org = await prompts.select({
           message: 'Select org',
           choices
+        }, {
+          input: process.stdin,
+          output: process.stderr
         })
       }
     }
 
     if (!username) {
-      username = await prompts.input({ message: 'github username:' })
+      username = await prompts.input({ message: 'github username:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     if (!password) {
-      password = await prompts.password({ message: 'github password:' })
+      password = await prompts.password({ message: 'github password:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     spinner.start()

package/src/cli/actions/rotate/npm/connect.js

@@ -35,16 +35,25 @@ async function connect () {
         org = await prompts.select({
           message: 'Select org',
           choices
+        }, {
+          input: process.stdin,
+          output: process.stderr
         })
       }
     }
 
     if (!username) {
-      username = await prompts.input({ message: 'npm username:' })
+      username = await prompts.input({ message: 'npm username:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     if (!password) {
-      password = await prompts.password({ message: 'npm password:' })
+      password = await prompts.password({ message: 'npm password:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     spinner.start()

package/src/cli/actions/rotate/openai/connect.js

@@ -35,16 +35,25 @@ async function connect () {
         org = await prompts.select({
           message: 'Select org',
           choices
+        }, {
+          input: process.stdin,
+          output: process.stderr
         })
       }
     }
 
     if (!username) {
-      username = await prompts.input({ message: 'openai username:' })
+      username = await prompts.input({ message: 'openai username:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     if (!password) {
-      password = await prompts.password({ message: 'openai password:' })
+      password = await prompts.password({ message: 'openai password:' }, {
+        input: process.stdin,
+        output: process.stderr
+      })
     }
 
     spinner.start()

package/src/cli/dotenvx-ops.js

@@ -132,6 +132,7 @@ program
   .argument('[publicKey]', 'existing public key')
   .option('-h, --hostname <url>', 'set hostname')
   .option('--token <token>', 'set token')
+  .option('--team <team>', 'team to generate keypair for')
   .option('--pp, --pretty-print', 'pretty print output')
   .action(keypairAction)
 

package/src/lib/api/postKeypair.js

@@ -4,17 +4,19 @@ const packageJson = require('../../lib/helpers/packageJson')
 const normalizeToken = require('../../lib/helpers/normalizeToken')
 
 class PostKeypair {
-  constructor (hostname, token, devicePublicKey, publicKey) {
+  constructor (hostname, token, devicePublicKey, publicKey, team) {
     this.hostname = hostname || 'https://ops.dotenvx.com'
     this.token = token
     this.devicePublicKey = devicePublicKey
     this.publicKey = publicKey
+    this.team = team
   }
 
   async run () {
     const token = normalizeToken(this.token)
     const devicePublicKey = this.devicePublicKey
     const publicKey = this.publicKey
+    const team = this.team
     const url = `${this.hostname}/api/keypair`
 
     const body = {
@@ -26,6 +28,10 @@ class PostKeypair {
       body.public_key = publicKey
     }
 
+    if (team) {
+      body.team = team
+    }
+
     const resp = await http(url, {
       method: 'POST',
       headers: {

package/src/lib/main.d.ts

@@ -14,7 +14,9 @@ export interface DotenvOpsOptions {
   token?: string;
 }
 
-export type DotenvOpsKeypairOptions = DotenvOpsOptions;
+export interface DotenvOpsKeypairOptions extends DotenvOpsOptions {
+  team?: string;
+}
 
 export interface DotenvOpsKeypairOutput {
   publicKey: string;
@@ -25,7 +27,7 @@ export interface DotenvOpsKeypairOutput {
  * Creates a remote keypair for the current authenticated device.
  *
  * @param publicKey - optional existing public key to fetch
- * @param options - optional hostname/token overrides
+ * @param options - optional hostname/token/team overrides
  * @returns generated public and private keys
  */
 export function keypair(publicKey?: string, options?: DotenvOpsKeypairOptions): Promise<DotenvOpsKeypairOutput>;

package/src/lib/main.js

@@ -5,7 +5,7 @@ const Session = require('./../db/session')
 const PostObserve = require('./api/postObserve')
 const PostGet = require('./api/postGet')
 const PostSet = require('./api/postSet')
-const PostKeypair = require('./api/postKeypair')
+const Keypair = require('./services/keypair')
 
 const gitUrl = require('./helpers/gitUrl')
 const gitBranch = require('./helpers/gitBranch')
@@ -92,7 +92,7 @@ const keypair = async function (publicKey, options = {}) {
 
   const devicePublicKey = sesh.devicePublicKey()
 
-  const json = await new PostKeypair(hostname, token, devicePublicKey, publicKey).run()
+  const json = await new Keypair(hostname, token, devicePublicKey, publicKey, options.team).run()
 
   return {
     publicKey: json.public_key,

package/src/lib/services/armorDown.js

@@ -52,6 +52,9 @@ class ArmorDown {
           team = await prompts.select({
             message: 'Select team',
             choices
+          }, {
+            input: process.stdin,
+            output: process.stderr
           })
         }
 

package/src/lib/services/armorMove.js

@@ -35,6 +35,9 @@ class ArmorMove {
     team = await prompts.select({
       message: 'Select team',
       choices
+    }, {
+      input: process.stdin,
+      output: process.stderr
     })
 
     const json = await new PostArmorMove(hostname, token, devicePublicKey, publicKey, team).run()

package/src/lib/services/armorPull.js

@@ -52,6 +52,9 @@ class ArmorPull {
           team = await prompts.select({
             message: 'Select team',
             choices
+          }, {
+            input: process.stdin,
+            output: process.stderr
           })
         }
 

package/src/lib/services/armorPush.js

@@ -49,6 +49,9 @@ class ArmorPush {
           team = await prompts.select({
             message: 'Select team',
             choices
+          }, {
+            input: process.stdin,
+            output: process.stderr
           })
         }
 

package/src/lib/services/armorUp.js

@@ -54,6 +54,9 @@ class ArmorUp {
           team = await prompts.select({
             message: 'Select team',
             choices
+          }, {
+            input: process.stdin,
+            output: process.stderr
           })
         }
 

package/src/lib/services/backup.js

@@ -56,6 +56,9 @@ class Backup {
           _org = await prompts.select({
             message: 'Select org',
             choices
+          }, {
+            input: process.stdin,
+            output: process.stderr
           })
         }
       }

package/src/lib/services/keypair.js

@@ -0,0 +1,56 @@
+const prompts = require('@inquirer/prompts')
+const PostKeypair = require('../api/postKeypair')
+
+function teamChoicesFromMeta (meta) {
+  return meta.organizations.map(org => ({
+    name: org.provider_slug,
+    value: org.provider_slug
+  }))
+}
+
+class Keypair {
+  constructor (hostname, token, devicePublicKey, publicKey, team = undefined) {
+    this.hostname = hostname
+    this.token = token
+    this.devicePublicKey = devicePublicKey
+    this.publicKey = publicKey
+    this.team = team
+  }
+
+  async run () {
+    const hostname = this.hostname
+    const token = this.token
+    const devicePublicKey = this.devicePublicKey
+    const publicKey = this.publicKey
+    const team = this.team
+
+    if (team) {
+      return await new PostKeypair(hostname, token, devicePublicKey, publicKey, team).run()
+    }
+
+    try {
+      return await new PostKeypair(hostname, token, devicePublicKey, publicKey, undefined).run()
+    } catch (error) {
+      if (error.code !== 'DOTENVX_TEAM_REQUIRED') {
+        throw error
+      }
+
+      const choices = teamChoicesFromMeta(error.meta)
+
+      let team = choices[0].value
+      if (choices.length > 1) {
+        team = await prompts.select({
+          message: 'Select team',
+          choices
+        }, {
+          input: process.stdin,
+          output: process.stderr
+        })
+      }
+
+      return await new PostKeypair(hostname, token, devicePublicKey, publicKey, team).run()
+    }
+  }
+}
+
+module.exports = Keypair