@dotenvx/dotenvx 1.59.1 → 1.60.0

package/CHANGELOG.md

@@ -2,7 +2,18 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.59.1...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.60.0...main)
+
+## [1.60.0](https://github.com/dotenvx/dotenvx/compare/v1.59.1...v1.60.0) (2026-04-04)
+
+### Added
+
+* Add spinner with loading messages
+  * `injecting` (`run`)
+  * `encrypting` (`encrypt`, `set`)
+  * `decrypting` (`decrypt`, `get`)
+  * `rotating` (`rotate`)
+  * `retrieving` (`keypair`)
 
 ## [1.59.1](https://github.com/dotenvx/dotenvx/compare/v1.59.0...v1.59.1) (2026-03-28)
 

package/README.md

@@ -1258,12 +1258,12 @@ $ dotenvx run -fk .env.keys -f apps/app1/.env -- yourcommand
 ```
 
 </details>
-<details><summary>`run --ops-off`</summary><br>
+<details><summary>`run --no-ops`</summary><br>
 
 Turn off [Dotenvx Ops](https://dotenvx.com/ops) features.
 
 ```sh
-$ dotenvx run --ops-off -- yourcommand
+$ dotenvx run --no-ops -- yourcommand
 ```
 
 </details>
@@ -1592,6 +1592,16 @@ $ dotenvx encrypt -f .env.production
 ⮕  next run [DOTENV_PRIVATE_KEY='bff...bc4' dotenvx run -- yourcommand] to test decryption locally
 ```
 
+</details>
+<details><summary>`encrypt --no-ops`</summary><br>
+
+Turn off [Dotenvx Ops](https://dotenvx.com/ops) features for encrypt.
+
+```sh
+$ dotenvx encrypt --no-ops
+◈ encrypted (.env)
+```
+
 </details>
 <details><summary>`encrypt -fk`</summary><br>
 
@@ -2503,13 +2513,13 @@ $ dotenvx run --convention=nextjs -- node index.js
 ```
 
 </details>
-<details><summary>`config(opsOff:)` - opsOff</summary><br>
+<details><summary>`config(noOps:)` - noOps</summary><br>
 
 Turn off [Dotenvx Ops](https://dotenvx.com/ops) features.
 
 ```js
 // index.js
-require('@dotenvx/dotenvx').config({opsOff: true})
+require('@dotenvx/dotenvx').config({noOps: true})
 ```
 
 </details>

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "1.59.1",
+  "version": "1.60.0",
   "name": "@dotenvx/dotenvx",
-  "description": "a secure dotenv–from the creator of `dotenv`",
+  "description": "secrets for agents–from the creator of `dotenv`",
   "author": "@motdotla",
   "keywords": [
     "dotenv",
@@ -35,8 +35,8 @@
   "scripts": {
     "standard": "standard",
     "standard:fix": "standard --fix",
-    "test": "tap run --test-env=DOTENVX_OPS_OFF=true --allow-empty-coverage --disable-coverage --timeout=60000",
-    "test-coverage": "tap run --test-env=DOTENVX_OPS_OFF=true --show-full-coverage --timeout=60000",
+    "test": "tap run --test-env=DOTENVX_NO_OPS=true --allow-empty-coverage --disable-coverage --timeout=60000",
+    "test-coverage": "tap run --test-env=DOTENVX_NO_OPS=true --show-full-coverage --timeout=60000",
     "testshell": "bash shellspec",
     "prerelease": "npm test && npm run testshell",
     "release": "standard-version"
@@ -51,10 +51,11 @@
     "ignore": "^5.3.0",
     "object-treeify": "1.1.33",
     "picomatch": "^4.0.2",
-    "which": "^4.0.0"
+    "which": "^4.0.0",
+    "yocto-spinner": "^1.1.0"
   },
   "devDependencies": {
-    "@yao-pkg/pkg": "^5.14.2",
+    "@yao-pkg/pkg": "^6.14.2",
     "capture-console": "^1.0.2",
     "esbuild": "^0.25.8",
     "proxyquire": "^2.1.3",

package/src/cli/actions/decrypt.js

@@ -3,13 +3,18 @@ const { logger } = require('./../../shared/logger')
 
 const Decrypt = require('./../../lib/services/decrypt')
 const catchAndLog = require('../../lib/helpers/catchAndLog')
+const createSpinner = require('../../lib/helpers/createSpinner')
+const Session = require('../../db/session')
 
-function decrypt () {
+async function decrypt () {
   const options = this.opts()
+  const spinner = await createSpinner({ ...options, text: 'decrypting' })
+
   logger.debug(`options: ${JSON.stringify(options)}`)
 
+  const sesh = new Session()
   const envs = this.envs
-  const opsOn = options.opsOff !== true
+  const noOps = options.ops === false || (await sesh.noOps())
 
   let errorCount = 0
 
@@ -17,8 +22,8 @@ function decrypt () {
   if (options.stdout) {
     const {
       processedEnvs
-    } = new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, opsOn).run()
-
+    } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noOps).run()
+    if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       if (processedEnv.error) {
         errorCount += 1
@@ -39,7 +44,7 @@ function decrypt () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, opsOn).run()
+      } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noOps).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`decrypting ${processedEnv.envFilepath} (${processedEnv.filepath})`)
@@ -48,18 +53,19 @@ function decrypt () {
           errorCount += 1
           logger.error(processedEnv.error.messageWithHelp)
         } else if (processedEnv.changed) {
-          fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
+          await fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
 
           logger.verbose(`decrypted ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         } else {
-          logger.verbose(`no changes ${processedEnv.envFilepath} (${processedEnv.filepath})`)
+          logger.verbose(`no change ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         }
       }
 
+      if (spinner) spinner.stop()
       if (changedFilepaths.length > 0) {
         logger.success(`◇ decrypted (${changedFilepaths.join(',')})`)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`○ no changes (${unchangedFilepaths})`)
+        logger.info(`○ no change (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }
@@ -68,6 +74,7 @@ function decrypt () {
         process.exit(1)
       }
     } catch (error) {
+      if (spinner) spinner.stop()
       catchAndLog(error)
       process.exit(1)
     }

package/src/cli/actions/encrypt.js

@@ -5,21 +5,26 @@ const Encrypt = require('./../../lib/services/encrypt')
 
 const catchAndLog = require('../../lib/helpers/catchAndLog')
 const localDisplayPath = require('../../lib/helpers/localDisplayPath')
+const createSpinner = require('../../lib/helpers/createSpinner')
+const Session = require('../../db/session')
 
-function encrypt () {
+async function encrypt () {
   const options = this.opts()
+  const spinner = await createSpinner({ ...options, text: 'encrypting' })
+
   logger.debug(`options: ${JSON.stringify(options)}`)
 
+  const sesh = new Session()
   const envs = this.envs
-  const opsOn = options.opsOff !== true
+  const noOps = options.ops === false || (await sesh.noOps())
   const noCreate = options.create === false
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
     const {
       processedEnvs
-    } = new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, opsOn, noCreate).run()
-
+    } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noOps, noCreate).run()
+    if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       console.log(processedEnv.envSrc)
     }
@@ -30,21 +35,22 @@ function encrypt () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, opsOn, noCreate).run()
+      } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noOps, noCreate).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`encrypting ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         if (processedEnv.error) {
           logger.warn(processedEnv.error.messageWithHelp)
         } else if (processedEnv.changed) {
-          fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
+          await fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
 
           logger.verbose(`encrypted ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         } else {
-          logger.verbose(`no changes ${processedEnv.envFilepath} (${processedEnv.filepath})`)
+          logger.verbose(`no change ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         }
       }
 
+      if (spinner) spinner.stop()
       if (changedFilepaths.length > 0) {
         const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
         let msg = `◈ encrypted (${changedFilepaths.join(',')})`
@@ -54,7 +60,7 @@ function encrypt () {
         }
         logger.success(msg)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`○ no changes (${unchangedFilepaths})`)
+        logger.info(`○ no change (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }
@@ -65,6 +71,7 @@ function encrypt () {
         }
       }
     } catch (error) {
+      if (spinner) spinner.stop()
       catchAndLog(error)
       process.exit(1)
     }

package/src/cli/actions/ext/genexample.js

@@ -20,12 +20,12 @@ function genexample (directory) {
 
     logger.verbose(`loading env from ${envFile}`)
 
-    fsx.writeFileX(exampleFilepath, envExampleFile)
+    fsx.writeFileXSync(exampleFilepath, envExampleFile)
 
     if (addedKeys.length > 0) {
       logger.success(`▣ generated (${path.basename(exampleFilepath)})`)
     } else {
-      logger.info('○ no changes (.env.example)')
+      logger.info('○ no change (.env.example)')
     }
   } catch (error) {
     catchAndLog(error)

package/src/cli/actions/ext/gitignore.js

@@ -18,13 +18,13 @@ class Generic {
     const changedPatterns = []
     if (!fsx.existsSync(this.filename)) {
       if (this.touchFile === true && this.patterns.length > 0) {
-        fsx.writeFileX(this.filename, '')
+        fsx.writeFileXSync(this.filename, '')
       } else {
         return
       }
     }
 
-    const lines = fsx.readFileX(this.filename).split(/\r?\n/)
+    const lines = fsx.readFileXSync(this.filename).split(/\r?\n/)
     this.patterns.forEach(pattern => {
       if (!lines.includes(pattern.trim())) {
         this.append(pattern)
@@ -36,7 +36,7 @@ class Generic {
     if (changedPatterns.length > 0) {
       logger.success(`▣ ignored ${this.patterns} (${this.filename})`)
     } else {
-      logger.info(`○ no changes (${this.filename})`)
+      logger.info(`○ no change (${this.filename})`)
     }
   }
 }

package/src/cli/actions/get.js

@@ -3,18 +3,20 @@ const { logger } = require('./../../shared/logger')
 const conventions = require('./../../lib/helpers/conventions')
 const escape = require('./../../lib/helpers/escape')
 const catchAndLog = require('./../../lib/helpers/catchAndLog')
-
+const createSpinner = require('../../lib/helpers/createSpinner')
+const Session = require('../../db/session')
 const Get = require('./../../lib/services/get')
 
-function get (key) {
+async function get (key) {
+  const options = this.opts()
+  const spinner = await createSpinner({ ...options, text: 'decrypting' })
+
+  logger.debug(`options: ${JSON.stringify(options)}`)
   if (key) {
     logger.debug(`key: ${key}`)
   }
 
-  const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
   const prettyPrint = options.prettyPrint || options.pp
-
   const ignore = options.ignore || []
 
   let envs = []
@@ -26,8 +28,9 @@ function get (key) {
   }
 
   try {
-    const opsOn = options.opsOff !== true
-    const { parsed, errors } = new Get(key, envs, options.overload, options.all, options.envKeysFile, opsOn).run()
+    const sesh = new Session()
+    const noOps = options.ops === false || (await sesh.noOps())
+    const { parsed, errors } = await new Get(key, envs, options.overload, options.all, options.envKeysFile, noOps).run()
 
     for (const error of errors || []) {
       if (options.strict) throw error // throw immediately if strict
@@ -39,6 +42,7 @@ function get (key) {
       logger.error(error.messageWithHelp)
     }
 
+    if (spinner) spinner.stop()
     if (key) {
       const single = parsed[key]
       if (single === undefined) {
@@ -73,6 +77,7 @@ function get (key) {
       }
     }
   } catch (error) {
+    if (spinner) spinner.stop()
     catchAndLog(error)
     process.exit(1)
   }

package/src/cli/actions/keypair.js

@@ -1,18 +1,26 @@
 const { logger } = require('./../../shared/logger')
 
-const main = require('./../../lib/main')
+const Keypair = require('./../../lib/services/keypair')
+const createSpinner = require('../../lib/helpers/createSpinner')
+const Session = require('../../db/session')
 
-function keypair (key) {
+async function keypair (key) {
+  const options = this.opts()
+  const spinner = await createSpinner({ ...options, text: 'retrieving' })
+
+  logger.debug(`options: ${JSON.stringify(options)}`)
   if (key) {
     logger.debug(`key: ${key}`)
   }
 
-  const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
   const prettyPrint = options.prettyPrint || options.pp
 
-  const results = main.keypair(options.envFile, key, options.envKeysFile, options.opsOff)
+  const sesh = new Session()
+  const noOps = options.ops === false || await sesh.noOps()
+  const keypairs = await new Keypair(options.envFile, options.envKeysFile, noOps).run()
+  const results = key ? keypairs[key] : keypairs
 
+  if (spinner) spinner.stop()
   if (typeof results === 'object' && results !== null) {
     // inline shell format - env $(dotenvx keypair --format=shell) your-command
     if (options.format === 'shell') {

package/src/cli/actions/rotate.js

@@ -4,21 +4,26 @@ const { logger } = require('./../../shared/logger')
 const Rotate = require('./../../lib/services/rotate')
 
 const catchAndLog = require('../../lib/helpers/catchAndLog')
+const createSpinner = require('../../lib/helpers/createSpinner')
 const localDisplayPath = require('../../lib/helpers/localDisplayPath')
+const Session = require('../../db/session')
 
-function rotate () {
+async function rotate () {
   const options = this.opts()
+  const spinner = await createSpinner({ ...options, text: 'rotating', frames: ['⟳', '⤾', '⥁'] })
+
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const envs = this.envs
-  const opsOn = options.opsOff !== true
+  const sesh = new Session()
+  const noOps = options.ops === false || (await sesh.noOps())
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
     const {
       processedEnvs
-    } = new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, opsOn).run()
-
+    } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noOps).run()
+    if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       console.log(processedEnv.envSrc)
       if (processedEnv.privateKeyAdded) {
@@ -33,24 +38,25 @@ function rotate () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, opsOn).run()
+      } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noOps).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`rotating ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         if (processedEnv.error) {
           logger.warn(processedEnv.error.messageWithHelp)
         } else if (processedEnv.changed) {
-          fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
+          await fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
           if (processedEnv.privateKeyAdded) {
-            fsx.writeFileX(processedEnv.envKeysFilepath, processedEnv.envKeysSrc)
+            await fsx.writeFileX(processedEnv.envKeysFilepath, processedEnv.envKeysSrc)
           }
 
           logger.verbose(`rotated ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         } else {
-          logger.verbose(`no changes ${processedEnv.envFilepath} (${processedEnv.filepath})`)
+          logger.verbose(`no change ${processedEnv.envFilepath} (${processedEnv.filepath})`)
         }
       }
 
+      if (spinner) spinner.stop()
       if (changedFilepaths.length > 0) {
         const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
         let msg = `⟳ rotated (${changedFilepaths.join(',')})`
@@ -60,11 +66,12 @@ function rotate () {
         }
         logger.success(msg)
       } else if (unchangedFilepaths.length > 0) {
-        logger.info(`○ no changes (${unchangedFilepaths})`)
+        logger.info(`○ no change (${unchangedFilepaths})`)
       } else {
         // do nothing - scenario when no .env files found
       }
     } catch (error) {
+      if (spinner) spinner.stop()
       catchAndLog(error)
       process.exit(1)
     }

package/src/cli/actions/run.js

@@ -4,22 +4,27 @@ const { logger } = require('./../../shared/logger')
 const executeCommand = require('./../../lib/helpers/executeCommand')
 const Run = require('./../../lib/services/run')
 const catchAndLog = require('./../../lib/helpers/catchAndLog')
+const createSpinner = require('../../lib/helpers/createSpinner')
+const Session = require('../../db/session')
 
 const conventions = require('./../../lib/helpers/conventions')
 
 async function run () {
+  const options = this.opts()
   const commandArgs = this.args
-  logger.debug(`process command [${commandArgs.join(' ')}]`)
+  const spinner = await createSpinner({ ...options, text: 'injecting' })
 
-  const options = this.opts()
   logger.debug(`options: ${JSON.stringify(options)}`)
+  logger.debug(`process command [${commandArgs.join(' ')}]`)
 
   const ignore = options.ignore || []
 
-  // dotenvx-ops related
-  const opsOn = options.opsOff !== true
+  const sesh = new Session()
+  const noOps = options.ops === false || options.opsOff === true || (await sesh.noOps())
 
   if (commandArgs.length < 1) {
+    if (spinner) spinner.stop()
+
     const hasSeparator = process.argv.indexOf('--') !== -1
 
     if (hasSeparator) {
@@ -46,7 +51,7 @@ async function run () {
       readableStrings,
       readableFilepaths,
       uniqueInjectedKeys
-    } = new Run(envs, options.overload, process.env, options.envKeysFile, opsOn).run()
+    } = await new Run(envs, options.overload, process.env, options.envKeysFile, noOps).run()
 
     for (const processedEnv of processedEnvs) {
       if (processedEnv.type === 'envFile') {
@@ -88,7 +93,7 @@ async function run () {
       }
     }
 
-    let msg = `injecting env (${uniqueInjectedKeys.length})`
+    let msg = `injected env (${uniqueInjectedKeys.length})`
     if (readableFilepaths.length > 0 && readableStrings.length > 0) {
       msg += ` from ${readableFilepaths.join(', ')}, and --env flag${readableStrings.length > 1 ? 's' : ''}`
     } else if (readableFilepaths.length > 0) {
@@ -97,8 +102,10 @@ async function run () {
       msg += ` from --env flag${readableStrings.length > 1 ? 's' : ''}`
     }
 
+    if (spinner) spinner.stop()
     logger.successv(msg)
   } catch (error) {
+    if (spinner) spinner.stop()
     catchAndLog(error)
     process.exit(1)
   }

package/src/cli/actions/set.js

@@ -1,35 +1,40 @@
 const fsx = require('./../../lib/helpers/fsx')
 const { logger } = require('./../../shared/logger')
 
-const Sets = require('./../../lib/services/sets')
-
 const catchAndLog = require('../../lib/helpers/catchAndLog')
+const createSpinner = require('../../lib/helpers/createSpinner')
 const localDisplayPath = require('../../lib/helpers/localDisplayPath')
+const Session = require('../../db/session')
+const Sets = require('./../../lib/services/sets')
 
-function set (key, value) {
-  logger.debug(`key: ${key}`)
-  logger.debug(`value: ${value}`)
-
+async function set (key, value) {
   const options = this.opts()
-  logger.debug(`options: ${JSON.stringify(options)}`)
 
-  // encrypt
   let encrypt = true
+  let settingMessage = 'encrypting'
   if (options.plain) {
     encrypt = false
+    settingMessage = 'setting'
   }
 
+  const spinner = await createSpinner({ ...options, text: settingMessage })
+
+  logger.debug(`key: ${key}`)
+  logger.debug(`value: ${value}`)
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
   try {
+    const sesh = new Session()
     const envs = this.envs
     const envKeysFilepath = options.envKeysFile
-    const opsOn = options.opsOff !== true
+    const noOps = options.ops === false || (await sesh.noOps())
     const noCreate = options.create === false
 
     const {
       processedEnvs,
       changedFilepaths,
       unchangedFilepaths
-    } = new Sets(key, value, envs, encrypt, envKeysFilepath, opsOn, noCreate).run()
+    } = await new Sets(key, value, envs, encrypt, envKeysFilepath, noOps, noCreate).run()
 
     let withEncryption = ''
 
@@ -43,7 +48,7 @@ function set (key, value) {
       if (processedEnv.error) {
         logger.warn(processedEnv.error.messageWithHelp)
       } else {
-        fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
+        await fsx.writeFileX(processedEnv.filepath, processedEnv.envSrc)
 
         logger.verbose(`${processedEnv.key} set${withEncryption} (${processedEnv.envFilepath})`)
         logger.debug(`${processedEnv.key} set${withEncryption} to ${processedEnv.value} (${processedEnv.envFilepath})`)
@@ -53,6 +58,7 @@ function set (key, value) {
     const keyAddedEnv = processedEnvs.find((processedEnv) => processedEnv.privateKeyAdded)
     const keyAddedSuffix = keyAddedEnv ? ` + key (${localDisplayPath(keyAddedEnv.envKeysFilepath)})` : ''
 
+    if (spinner) spinner.stop()
     if (changedFilepaths.length > 0) {
       if (encrypt) {
         logger.success(`◈ encrypted ${key} (${changedFilepaths.join(',')})${keyAddedSuffix}`)
@@ -63,13 +69,14 @@ function set (key, value) {
       const keyAddedEnvFilepath = keyAddedEnv.envFilepath || changedFilepaths[0] || '.env'
       logger.success(`◈ encrypted ${key} (${keyAddedEnvFilepath})${keyAddedSuffix}`)
     } else if (unchangedFilepaths.length > 0) {
-      logger.info(`○ no changes (${unchangedFilepaths})`)
+      logger.info(`○ no change (${unchangedFilepaths})`)
     } else {
       // do nothing
     }
 
     // intentionally quiet: success line communicates key creation
   } catch (error) {
+    if (spinner) spinner.stop()
     catchAndLog(error)
     process.exit(1)
   }