@dotenvx/dotenvx 1.56.0 → 1.57.0

package/CHANGELOG.md

@@ -2,14 +2,20 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.56.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.57.0...main)
+
+## [1.57.0](https://github.com/dotenvx/dotenvx/compare/v1.56.0...v1.57.0) (2026-03-19)
+
+### Changed
+
+* color and formatting changes to outputs ([#754](https://github.com/dotenvx/dotenvx/pull/754))
 
 ## [1.56.0](https://github.com/dotenvx/dotenvx/compare/v1.55.1...v1.56.0) (2026-03-19)
 
 ### Changed
 
-- `ops off` flag — now respected by `get`, `keypair`, `rotate`, and `encrypt` ([#750](https://github.com/dotenvx/dotenvx/pull/750))
-- `--pp` alias — added as shorthand for `--pretty-print`; toward sunsetting `-pp` ([#750](https://github.com/dotenvx/dotenvx/pull/750))
+* `ops off` flag — now respected by `get`, `keypair`, `rotate`, and `encrypt` ([#750](https://github.com/dotenvx/dotenvx/pull/750))
+* `--pp` alias — added as shorthand for `--pretty-print`; toward sunsetting `-pp` ([#750](https://github.com/dotenvx/dotenvx/pull/750))
 
 ### Removed
 

package/README.md

@@ -632,7 +632,7 @@ Hello development local
 
 ```sh
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 ```
 
 [![encrypted .env](https://github.com/user-attachments/assets/46dfe1a7-a027-4d80-9207-789eccc325dc)](https://dotenvx.com)
@@ -1562,8 +1562,7 @@ Encrypt the contents of a `.env` file to an encrypted `.env` file.
 $ echo "HELLO=World" > .env
 
 $ dotenvx encrypt
-✔ encrypted (.env)
-✔ key added to .env.keys (DOTENV_PRIVATE_KEY)
+◈ encrypted (.env) + key (.env.keys)
 ⮕  next run [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys
 ⮕  next run [DOTENV_PRIVATE_KEY='122...0b8' dotenvx run -- yourcommand] to test decryption locally
 ```
@@ -1578,8 +1577,7 @@ $ echo "HELLO=World" > .env
 $ echo "HELLO=Production" > .env.production
 
 $ dotenvx encrypt -f .env.production
-✔ encrypted (.env.production)
-✔ key added to .env.keys (DOTENV_PRIVATE_KEY_PRODUCTION)
+◈ encrypted (.env.production) + key (.env.keys)
 ⮕  next run [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys
 ⮕  next run [DOTENV_PRIVATE_KEY='bff...bc4' dotenvx run -- yourcommand] to test decryption locally
 ```
@@ -1594,7 +1592,7 @@ $ mkdir -p apps/app1
 $ echo "HELLO=World" > apps/app1/.env
 
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
-✔ encrypted (apps/app1/.env)
+◈ encrypted (apps/app1/.env)
 ```
 
 Put it to use.
@@ -1619,7 +1617,7 @@ Specify the key(s) to encrypt by passing `--key`.
 $ echo "HELLO=World\nHELLO2=Universe" > .env
 
 $ dotenvx encrypt -k HELLO2
-✔ encrypted (.env)
+◈ encrypted (.env)
 ```
 
 Even specify a glob pattern.
@@ -1628,7 +1626,7 @@ Even specify a glob pattern.
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 
 $ dotenvx encrypt -k "HE*"
-✔ encrypted (.env)
+◈ encrypted (.env)
 ```
 
 </details>
@@ -1640,7 +1638,7 @@ Specify the key(s) to NOT encrypt by passing `--exclude-key`.
 $ echo "HELLO=World\nHELLO2=Universe" > .env
 
 $ dotenvx encrypt -ek HELLO
-✔ encrypted (.env)
+◈ encrypted (.env)
 ```
 
 Even specify a glob pattern.
@@ -1649,7 +1647,7 @@ Even specify a glob pattern.
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 
 $ dotenvx encrypt -ek "HO*"
-✔ encrypted (.env)
+◈ encrypted (.env)
 ```
 
 </details>
@@ -1684,9 +1682,9 @@ Decrypt the contents of an encrypted `.env` file to an unencrypted `.env` file.
 ```sh
 $ echo "HELLO=World" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx decrypt
-✔ decrypted (.env)
+◇ decrypted (.env)
 ```
 
 </details>
@@ -1699,9 +1697,9 @@ $ echo "HELLO=World" > .env
 $ echo "HELLO=Production" > .env.production
 
 $ dotenvx encrypt -f .env.production
-✔ encrypted (.env.production)
+◈ encrypted (.env.production)
 $ dotenvx decrypt -f .env.production
-✔ decrypted (.env.production)
+◇ decrypted (.env.production)
 ```
 
 </details>
@@ -1714,9 +1712,9 @@ $ mkdir -p apps/app1
 $ echo "HELLO=World" > apps/app1/.env
 
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
-✔ encrypted (apps/app1/.env)
+◈ encrypted (apps/app1/.env)
 $ dotenvx decrypt -fk .env.keys -f apps/app1/.env
-✔ decrypted (apps/app1/.env)
+◇ decrypted (apps/app1/.env)
 ```
 
 </details>
@@ -1727,9 +1725,9 @@ Decrypt the contents of a specified key inside an encrypted `.env` file.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx decrypt -k HELLO
-✔ decrypted (.env)
+◇ decrypted (.env)
 ```
 
 Even specify a glob pattern.
@@ -1737,9 +1735,9 @@ Even specify a glob pattern.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx decrypt -k "HE*"
-✔ encrypted (.env)
+◇ decrypted (.env)
 ```
 
 </details>
@@ -1750,9 +1748,9 @@ Decrypt the contents inside an encrypted `.env` file except for an excluded key.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx decrypt -ek HOLA
-✔ decrypted (.env)
+◇ decrypted (.env)
 ```
 
 Even specify a glob pattern.
@@ -1760,9 +1758,9 @@ Even specify a glob pattern.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx decrypt -ek "HO*"
-✔ encrypted (.env)
+◇ decrypted (.env)
 ```
 
 </details>
@@ -1933,9 +1931,9 @@ Rotate public/private keys for `.env` file and re-encrypt all encrypted values.
 ```sh
 $ echo "HELLO=World" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx rotate
-✔ rotated (.env)
+⟳ rotated (.env)
 ```
 
 </details>
@@ -1948,9 +1946,9 @@ $ echo "HELLO=World" > .env
 $ echo "HELLO=Production" > .env.production
 
 $ dotenvx encrypt -f .env.production
-✔ encrypted (.env.production)
+◈ encrypted (.env.production)
 $ dotenvx rotate -f .env.production
-✔ rotated (.env.production)
+⟳ rotated (.env.production)
 ```
 
 </details>
@@ -1963,9 +1961,9 @@ $ mkdir -p apps/app1
 $ echo "HELLO=World" > apps/app1/.env
 
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
-✔ encrypted (apps/app1/.env)
+◈ encrypted (apps/app1/.env)
 $ dotenvx rotate -fk .env.keys -f apps/app1/.env
-✔ rotated (apps/app1/.env)
+⟳ rotated (apps/app1/.env)
 ```
 
 </details>
@@ -1976,9 +1974,9 @@ Rotate the contents of a specified key inside an encrypted `.env` file.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx rotate -k HELLO
-✔ rotated (.env)
+⟳ rotated (.env)
 ```
 
 Even specify a glob pattern.
@@ -1986,9 +1984,9 @@ Even specify a glob pattern.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx rotate -k "HE*"
-✔ rotated (.env)
+⟳ rotated (.env)
 ```
 
 </details>
@@ -1999,9 +1997,9 @@ Rotate the encrypted contents inside an encrypted `.env` file except for an excl
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx rotate -ek HOLA
-✔ rotated (.env)
+⟳ rotated (.env)
 ```
 
 Even specify a glob pattern.
@@ -2009,9 +2007,9 @@ Even specify a glob pattern.
 ```sh
 $ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
-✔ encrypted (.env)
+◈ encrypted (.env)
 $ dotenvx rotate -ek "HO*"
-✔ rotated (.env)
+⟳ rotated (.env)
 ```
 
 </details>
@@ -2126,7 +2124,7 @@ In one command, generate a `.env.example` file from your current `.env` file con
 $ echo "HELLO=World" > .env
 
 $ dotenvx ext genexample
-✔ updated .env.example (1)
+▣ generated (.env.example)
 ```
 
 ```ini
@@ -2144,7 +2142,7 @@ $ echo "HELLO=World" > .env
 $ echo "DB_HOST=example.com" > .env.production
 
 $ dotenvx ext genexample -f .env -f .env.production
-✔ updated .env.example (2)
+▣ generated (.env.example)
 ```
 
 ```ini
@@ -2164,7 +2162,7 @@ $ mkdir -p apps/backend
 $ echo "HELLO=Backend" > apps/backend/.env
 
 $ dotenvx ext genexample apps/backend
-✔ updated .env.example (1)
+▣ generated (.env.example)
 ```
 
 ```ini
@@ -2179,7 +2177,7 @@ Gitignore your `.env` files.
 
 ```sh
 $ dotenvx ext gitignore
-✔ ignored .env* (.gitignore)
+▣ ignored .env* (.gitignore)
 ```
 
 </details>
@@ -2189,7 +2187,7 @@ Gitignore specific pattern(s) of `.env` files.
 
 ```sh
 $ dotenvx ext gitignore --pattern .env.keys
-✔ ignored .env.keys (.gitignore)
+▣ ignored .env.keys (.gitignore)
 ```
 
 </details>
@@ -2623,7 +2621,7 @@ Log in.
 $ dotenvx-ops login
 press Enter to open [https://ops.dotenvx.com/login/device] and enter code [D9C1-03BC]... (Y/n)
 ⠹ waiting on browser authorization
-✔ logged in [username] to this device and activated token [dxo_6kjPifI…]
+◈ logged in [username] to this device and activated token [dxo_6kjPifI…]
 ```
 
 </details>
@@ -2633,7 +2631,7 @@ Log out.
 
 ```sh
 $ dotenvx ops logout
-✔ logged out [username] from this device and revoked token [dxo_5ZrwRXV…]
+◈ logged out [username] from this device and revoked token [dxo_5ZrwRXV…]
 ```
 
 </details>

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.56.0",
+  "version": "1.57.0",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",

package/src/cli/actions/decrypt.js

@@ -70,9 +70,9 @@ function decrypt () {
       }
 
       if (changedFilepaths.length > 0) {
-        logger.success(`✔ decrypted (${changedFilepaths.join(',')})`)
+        logger.success(`◇ decrypted (${changedFilepaths.join(',')})`)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`no changes (${unchangedFilepaths})`)
+        logger.info(`○ no changes (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }

package/src/cli/actions/encrypt.js

@@ -4,7 +4,7 @@ const { logger } = require('./../../shared/logger')
 const Encrypt = require('./../../lib/services/encrypt')
 
 const catchAndLog = require('../../lib/helpers/catchAndLog')
-const isIgnoringDotenvKeys = require('../../lib/helpers/isIgnoringDotenvKeys')
+const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 
 function encrypt () {
   const options = this.opts()
@@ -53,23 +53,22 @@ function encrypt () {
       }
 
       if (changedFilepaths.length > 0) {
-        logger.success(`✔ encrypted (${changedFilepaths.join(',')})`)
+        const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
+        let msg = `◈ encrypted (${changedFilepaths.join(',')})`
+        if (keyAddedEnv) {
+          const envKeysFilepath = localDisplayPath(keyAddedEnv.envKeysFilepath)
+          msg += ` + key (${envKeysFilepath})`
+        }
+        logger.success(msg)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`no changes (${unchangedFilepaths})`)
+        logger.info(`○ no changes (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }
 
       for (const processedEnv of processedEnvs) {
         if (processedEnv.privateKeyAdded) {
-          logger.success(`✔ key added to .env.keys (${processedEnv.privateKeyName})`)
-          // logger.help('⮕  optional: [dotenvx ops backup] to securely backup private key')
-
-          if (!isIgnoringDotenvKeys()) {
-            logger.help('⮕  next run: [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys')
-          }
-
-          logger.help(`⮕  next run: [${processedEnv.privateKeyName}='${processedEnv.privateKey}' dotenvx run -- yourcommand] to test decryption locally`)
+          // intentionally quiet: success line already communicates key creation
         }
       }
     } catch (error) {

package/src/cli/actions/ext/genexample.js

@@ -1,4 +1,5 @@
 const fsx = require('./../../../lib/helpers/fsx')
+const path = require('path')
 const main = require('./../../../lib/main')
 const { logger } = require('./../../../shared/logger')
 
@@ -21,9 +22,9 @@ function genexample (directory) {
     fsx.writeFileX(exampleFilepath, envExampleFile)
 
     if (addedKeys.length > 0) {
-      logger.success(`updated .env.example (${addedKeys.length})`)
+      logger.success(`▣ generated (${path.basename(exampleFilepath)})`)
     } else {
-      logger.info('no changes (.env.example)')
+      logger.info('○ no changes (.env.example)')
     }
   } catch (error) {
     logger.error(error.message)

package/src/cli/actions/ext/gitignore.js

@@ -34,9 +34,9 @@ class Generic {
     })
 
     if (changedPatterns.length > 0) {
-      logger.success(`✔ ignored ${this.patterns} (${this.filename})`)
+      logger.success(`▣ ignored ${this.patterns} (${this.filename})`)
     } else {
-      logger.info(`no changes (${this.filename})`)
+      logger.info(`○ no changes (${this.filename})`)
     }
   }
 }

package/src/cli/actions/rotate.js

@@ -4,7 +4,7 @@ const { logger } = require('./../../shared/logger')
 const Rotate = require('./../../lib/services/rotate')
 
 const catchAndLog = require('../../lib/helpers/catchAndLog')
-const isIgnoringDotenvKeys = require('../../lib/helpers/isIgnoringDotenvKeys')
+const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 
 function rotate () {
   const options = this.opts()
@@ -60,25 +60,18 @@ function rotate () {
       }
 
       if (changedFilepaths.length > 0) {
-        logger.success(`✔ rotated (${changedFilepaths.join(',')})`)
+        const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
+        let msg = `⟳ rotated (${changedFilepaths.join(',')})`
+        if (keyAddedEnv) {
+          const envKeysFilepath = localDisplayPath(keyAddedEnv.envKeysFilepath)
+          msg += ` + key (${envKeysFilepath})`
+        }
+        logger.success(msg)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`no changes (${unchangedFilepaths})`)
+        logger.info(`○ no changes (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }
-
-      for (const processedEnv of processedEnvs) {
-        if (processedEnv.privateKeyAdded) {
-          logger.success(`✔ key added to .env.keys (${processedEnv.privateKeyName})`)
-          // logger.help('⮕  optional: [dotenvx ops backup] to securely backup private key')
-
-          if (!isIgnoringDotenvKeys()) {
-            logger.help('⮕  next run: [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys')
-          }
-
-          logger.help(`⮕  next run: [${processedEnv.privateKeyName}='${processedEnv.privateKey}' dotenvx get] to test decryption locally`)
-        }
-      }
     } catch (error) {
       catchAndLog(error)
       process.exit(1)

package/src/cli/actions/set.js

@@ -4,7 +4,7 @@ const { logger } = require('./../../shared/logger')
 const Sets = require('./../../lib/services/sets')
 
 const catchAndLog = require('../../lib/helpers/catchAndLog')
-const isIgnoringDotenvKeys = require('../../lib/helpers/isIgnoringDotenvKeys')
+const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 
 function set (key, value) {
   logger.debug(`key: ${key}`)
@@ -57,26 +57,25 @@ function set (key, value) {
       }
     }
 
+    const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
+    const keyAddedSuffix = keyAddedEnv ? ` + key (${localDisplayPath(keyAddedEnv.envKeysFilepath)})` : ''
+
     if (changedFilepaths.length > 0) {
-      logger.success(`✔ set ${key}${withEncryption} (${changedFilepaths.join(',')})`)
+      if (encrypt) {
+        logger.success(`◈ encrypted ${key} (${changedFilepaths.join(',')})${keyAddedSuffix}`)
+      } else {
+        logger.success(`◇ set ${key} (${changedFilepaths.join(',')})`)
+      }
+    } else if (encrypt && keyAddedEnv) {
+      const keyAddedEnvFilepath = keyAddedEnv.envFilepath || changedFilepaths[0] || '.env'
+      logger.success(`◈ encrypted ${key} (${keyAddedEnvFilepath})${keyAddedSuffix}`)
     } else if (unchangedFilepaths.length > 0) {
-      logger.info(`no changes (${unchangedFilepaths})`)
+      logger.info(`○ no changes (${unchangedFilepaths})`)
     } else {
       // do nothing
     }
 
-    for (const processedEnv of processedEnvs) {
-      if (processedEnv.privateKeyAdded) { // TODO: change to localPrivateKeyAdded
-        logger.success(`✔ key added to ${processedEnv.envKeysFilepath} (${processedEnv.privateKeyName})`)
-        // logger.help('⮕  optional: [dotenvx ops backup] to securely backup private key')
-
-        if (!isIgnoringDotenvKeys()) {
-          logger.help('⮕  next run: [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys')
-        }
-
-        logger.help(`⮕  next run: [${processedEnv.privateKeyName}='${processedEnv.privateKey}' dotenvx get ${key}] to test decryption locally`)
-      }
-    }
+    // intentionally quiet: success line communicates key creation
   } catch (error) {
     catchAndLog(error)
     process.exit(1)

package/src/cli/dotenvx.js

@@ -108,7 +108,7 @@ program.command('get')
 const setAction = require('./actions/set')
 program.command('set')
   .usage('<KEY> <value> [options]')
-  .description('set a single environment variable')
+  .description('encrypt a single environment variable')
   .addHelpText('after', examples.set)
   .allowUnknownOption()
   .argument('KEY', 'KEY')
@@ -153,6 +153,21 @@ program.command('decrypt')
     decryptAction.apply(this, args)
   })
 
+// dotenvx rotate
+const rotateAction = require('./actions/rotate')
+program.command('rotate')
+  .description('rotate keypair(s) and re-encrypt .env file(s)')
+  .option('-f, --env-file <paths...>', 'path(s) to your env file(s)', collectEnvs('envFile'), [])
+  .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
+  .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
+  .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
+  .option('--ops-off', 'disable dotenvx-ops features', sesh.opsOff())
+  .option('--stdout', 'send to stdout')
+  .action(function (...args) {
+    this.envs = envs
+    rotateAction.apply(this, args)
+  })
+
 // dotenvx keypair
 const keypairAction = require('./actions/keypair')
 program.command('keypair')
@@ -176,21 +191,6 @@ program.command('ls')
   .option('-ef, --exclude-env-file <excludeFilenames...>', 'path(s) to exclude from your env file(s) (default: none)')
   .action(lsAction)
 
-// dotenvx rotate
-const rotateAction = require('./actions/rotate')
-program.command('rotate')
-  .description('rotate keypair(s) and re-encrypt .env file(s)')
-  .option('-f, --env-file <paths...>', 'path(s) to your env file(s)', collectEnvs('envFile'), [])
-  .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
-  .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
-  .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
-  .option('--ops-off', 'disable dotenvx-ops features', sesh.opsOff())
-  .option('--stdout', 'send to stdout')
-  .action(function (...args) {
-    this.envs = envs
-    rotateAction.apply(this, args)
-  })
-
 // dotenvx help
 program.command('help [command]')
   .description('display help for command')
@@ -252,7 +252,8 @@ program.helpInformation = function () {
   const filteredLines = lines.filter(line =>
     !line.includes('DEPRECATED') &&
     !line.includes('help [command]') &&
-    !line.includes('🔌 extensions')
+    !line.includes('🔌 extensions') &&
+    !/^\s*ls\b/.test(line)
   )
 
   return filteredLines.join('\n')

package/src/cli/examples.js

@@ -66,11 +66,11 @@ Examples:
   $ dotenvx ext gitignore --pattern .env.keys
   \`\`\`
 
-Try it:
+  Try it:
 
   \`\`\`
   $ dotenvx ext gitignore
-  ✔ ignored .env* (.gitignore)
+  ▣ ignored .env* (.gitignore)
   \`\`\`
   `
 }

package/src/lib/helpers/executeDynamic.js

@@ -23,20 +23,17 @@ function executeDynamic (program, command, rawArgs) {
   const result = childProcess.spawnSync(`dotenvx-${command}`, forwardedArgs, { stdio: 'inherit', env })
   if (result.error) {
     if (command === 'ops') {
-      const ops = ` _______________________________________________________________________
-|                                                                       |
-|  dotenvx-ops: production grade dotenvx–with operational primitives    |
-|                                                                       |
-|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
-| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
-| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
-| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
-| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
-| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
-|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
-|                                                                       |
-|  Learn more at https://dotenvx.com/ops                                |
-|_______________________________________________________________________|`
+      const ops = ` ___________________________________________________________________
+|                                                                   |
+|   ██████╗ ██████╗ ███████╗                                        |
+|  ██╔═══██╗██╔══██╗██╔════╝                                        |
+|  ██║   ██║██████╔╝███████╗                                        |
+|  ██║   ██║██╔═══╝ ╚════██║                                        |
+|  ╚██████╔╝██║     ███████║                                        |
+|   ╚═════╝ ╚═╝     ╚══════╝                                        |
+|                                                                   |
+|  Learn more at [https://dotenvx.com/ops]                          |
+|___________________________________________________________________|`
 
       console.log(ops)
       console.log('')

package/src/lib/helpers/localDisplayPath.js

@@ -0,0 +1,11 @@
+const path = require('path')
+
+function localDisplayPath (filepath) {
+  if (!filepath) return '.env.keys'
+  if (!path.isAbsolute(filepath)) return filepath
+
+  const relative = path.relative(process.cwd(), filepath)
+  return relative || path.basename(filepath)
+}
+
+module.exports = localDisplayPath

package/src/lib/main.js

@@ -17,7 +17,7 @@ const Genexample = require('./services/genexample')
 const buildEnvs = require('./helpers/buildEnvs')
 const Parse = require('./helpers/parse')
 const fsx = require('./helpers/fsx')
-const isIgnoringDotenvKeys = require('./helpers/isIgnoringDotenvKeys')
+const localDisplayPath = require('./helpers/localDisplayPath')
 
 /** @type {import('./main').config} */
 const config = function (options = {}) {
@@ -216,26 +216,25 @@ const set = function (key, value, options = {}) {
     }
   }
 
+  const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
+  const keyAddedSuffix = keyAddedEnv ? ` + key (${localDisplayPath(keyAddedEnv.envKeysFilepath)})` : ''
+
   if (changedFilepaths.length > 0) {
-    logger.success(`✔ set ${key}${withEncryption} (${changedFilepaths.join(',')})`)
+    if (encrypt) {
+      logger.success(`◈ encrypted ${key} (${changedFilepaths.join(',')})${keyAddedSuffix}`)
+    } else {
+      logger.success(`◇ set ${key} (${changedFilepaths.join(',')})`)
+    }
+  } else if (encrypt && keyAddedEnv) {
+    const keyAddedEnvFilepath = keyAddedEnv.envFilepath || changedFilepaths[0] || '.env'
+    logger.success(`◈ encrypted ${key} (${keyAddedEnvFilepath})${keyAddedSuffix}`)
   } else if (unchangedFilepaths.length > 0) {
-    logger.info(`no changes (${unchangedFilepaths})`)
+    logger.info(`○ no changes (${unchangedFilepaths})`)
   } else {
     // do nothing
   }
 
-  for (const processedEnv of processedEnvs) {
-    if (processedEnv.privateKeyAdded) {
-      logger.success(`✔ key added to ${processedEnv.envKeysFilepath} (${processedEnv.privateKeyName})`)
-      // logger.help('⮕  optional: [dotenvx ops backup] to securely backup private key')
-
-      if (!isIgnoringDotenvKeys()) {
-        logger.help('⮕  next run: [dotenvx ext gitignore --pattern .env.keys] to gitignore .env.keys')
-      }
-
-      logger.help(`⮕  next run: [${processedEnv.privateKeyName}='${processedEnv.privateKey}' dotenvx get ${key}] to test decryption locally`)
-    }
-  }
+  // intentionally quiet: success line communicates key creation
 
   return {
     processedEnvs,

package/src/shared/colors.js

@@ -1,6 +1,7 @@
 const depth = require('../lib/helpers/colorDepth')
 
 const colors16 = new Map([
+  ['amber', 33],
   ['blue', 34],
   ['gray', 37],
   ['green', 32],
@@ -13,6 +14,7 @@ const colors16 = new Map([
 ])
 
 const colors256 = new Map([
+  ['amber', 136],
   ['blue', 21],
   ['gray', 244],
   ['green', 34],
@@ -24,11 +26,19 @@ const colors256 = new Map([
   ['dodgerblue', 33]
 ])
 
+const colorsTrueColor = new Map([
+  ['amber', [236, 213, 63]]
+])
+
 function getColor (color) {
   const colorDepth = depth.getColorDepth()
   if (!colors256.has(color)) {
     throw new Error(`Invalid color ${color}`)
   }
+  if (colorDepth >= 24 && colorsTrueColor.has(color)) {
+    const [r, g, b] = colorsTrueColor.get(color)
+    return (message) => `\x1b[38;2;${r};${g};${b}m${message}\x1b[39m`
+  }
   if (colorDepth >= 8) {
     const code = colors256.get(color)
     return (message) => `\x1b[38;5;${code}m${message}\x1b[39m`

package/src/shared/logger.js

@@ -15,8 +15,9 @@ const levels = {
 
 const error = (m) => bold(getColor('red')(m))
 const warn = getColor('orangered')
-const success = getColor('green')
-const successv = getColor('olive') // yellow-ish tint that 'looks' like dotenv
+const success = getColor('amber')
+const successv = getColor('amber')
+const info = getColor('gray')
 const help = getColor('dodgerblue')
 const verbose = getColor('plum')
 const debug = getColor('plum')
@@ -58,7 +59,7 @@ function formatMessage (level, message) {
       return successv(`[${currentName}@${currentVersion}] ${formattedMessage}`)
     // info
     case 'info':
-      return formattedMessage
+      return info(formattedMessage)
     // help
     case 'help':
       return help(formattedMessage)