@dotenvx/dotenvx 1.63.0 → 1.64.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.63.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.64.0...main)
+
+## [1.64.0](https://github.com/dotenvx/dotenvx/compare/v1.63.0...v1.64.0) (2026-04-27)
+
+### Added
+
+* Add optional `dotenvx armor` command.
+  * `armor up` armor private key
+  * `armor down` dearmor private key
+  * `armor push` push armored key (from .env.keys)
+  * `armor pull` pull armored key (into .env.keys)
+
+Move private keys off device and under access control with Dotenvx Ops ⛨. [Learn more](https://dotenvx.com/ops)
 
 ## [1.63.0](https://github.com/dotenvx/dotenvx/compare/v1.62.0...v1.63.0) (2026-04-24)
 
@@ -17,6 +29,9 @@ All notable changes to this project will be documented in this file. See [standa
 
 * Add support for `config({ envs })`. unlocks simpler cloudflare worker integration ([#803](https://github.com/dotenvx/dotenvx/pull/803))
 
+```sh
+$ dotenvx encrypt -f .env.txt
+```
 ```js
 // src/index.js
 import envSrc from '../.env.txt'

package/README.md

@@ -154,14 +154,14 @@ Hello Dotenvx
 <details><summary>Cloudflare Workers ⛅️</summary><br>
 
 ```sh
-cp .env .env.txt
+$ dotenvx encrypt -f .env.txt
 ```
 
 ```js
-import envSrc from '../.env.txt' // txt so cloudflare includes it in deployment
+// src/index.js
+import envSrc from '../.env.txt'
 import dotenvx from '@dotenvx/dotenvx'
 
-// use `wrangler secret put DOTENV_PRIVATE_KEY` to set decryption key once
 const config = dotenvx.config({ envs: [{ type: 'env', value: envSrc, privateKeyName: 'DOTENV_PRIVATE_KEY' }] })
 const envx = config.parsed
 
@@ -171,6 +171,13 @@ export default {
   }
 }
 ```
+```json
+"scripts": {
+  "deploy": "wrangler deploy",
+  "dev": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
+  "start": "wrangler dev --var $(dotenvx keypair -f .env.txt --format=colon)",
+}
+```
 
 </details>
 <details><summary>Deno 🦕</summary><br>

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.63.0",
+  "version": "1.64.0",
   "name": "@dotenvx/dotenvx",
   "description": "secrets for agents–from the creator of `dotenv`",
   "author": "@motdotla",

package/src/cli/dotenvx.js

@@ -197,13 +197,22 @@ program.command('login')
 
 // dotenvx logout
 program.command('logout', { hidden: true })
-  .description('optional: log out of your dotenvx account')
+  .description('log out of your dotenvx account')
   .allowUnknownOption()
   .action(() => {
     const rawArgs = ['ops', 'logout', ...process.argv.slice(3)]
     executeDynamic(program, 'ops', rawArgs)
   })
 
+// dotenvx armor
+program.command('armor', { hidden: true })
+  .description('ARMORED KEYS ⛨')
+  .allowUnknownOption()
+  .action((args) => {
+    const rawArgs = ['ops', 'armor', ...process.argv.slice(3)]
+    executeDynamic(program, 'ops', rawArgs)
+  })
+
 // dotenvx help
 program.command('help [command]')
   .description('display help for command')