@dotenvx/dotenvx 1.68.0 → 1.69.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.68.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.69.0...main)
+
+## [1.69.0](https://github.com/dotenvx/dotenvx/compare/v1.68.1...v1.69.0) (2026-05-25)
+
+### Changed
+
+* Remove fully-deprecated `opsOff` option in favor of `noOps` ([#822](https://github.com/dotenvx/dotenvx/pull/822))
+
+## [1.68.1](https://github.com/dotenvx/dotenvx/compare/v1.68.0...v1.68.1) (2026-05-24)
+
+### Changed
+
+* Pass `-f` to ops ([#821](https://github.com/dotenvx/dotenvx/pull/821))
 
 ## [1.68.0](https://github.com/dotenvx/dotenvx/compare/v1.67.0...v1.68.0) (2026-05-24)
 

package/README.md

@@ -1287,12 +1287,12 @@ $ dotenvx run -fk .env.keys -f apps/app1/.env -- yourcommand
 ```
 
 </details>
-<details><summary>`run --no-ops`</summary><br>
+<details><summary>`run --no-vlt`</summary><br>
 
-Turn off [Dotenvx Ops](https://dotenvx.com/ops) features.
+Turn off [Dotenvx Vlt Ops](https://dotenvx.com/vlt) features.
 
 ```sh
-$ dotenvx run --no-ops -- yourcommand
+$ dotenvx run --no-vlt -- yourcommand
 ```
 
 </details>
@@ -1622,12 +1622,12 @@ $ dotenvx encrypt -f .env.production
 ```
 
 </details>
-<details><summary>`encrypt --no-ops`</summary><br>
+<details><summary>`encrypt --no-vlt`</summary><br>
 
-Turn off [Dotenvx Ops](https://dotenvx.com/ops) features for encrypt.
+Turn off [Dotenvx Vlt Ops](https://dotenvx.com/vlt) features for encrypt.
 
 ```sh
-$ dotenvx encrypt --no-ops
+$ dotenvx encrypt --no-vlt
 ◈ encrypted (.env)
 ```
 
@@ -2548,13 +2548,13 @@ $ dotenvx run --convention=nextjs -- node index.js
 ```
 
 </details>
-<details><summary>`config(noOps:)` - noOps</summary><br>
+<details><summary>`config(noVlt:)` - noVlt</summary><br>
 
-Turn off [Dotenvx Ops](https://dotenvx.com/ops) features.
+Turn off [Dotenvx Vlt Ops](https://dotenvx.com/vlt) features.
 
 ```js
 // index.js
-require('@dotenvx/dotenvx').config({noOps: true})
+require('@dotenvx/dotenvx').config({noVlt: true})
 ```
 
 </details>
@@ -2650,17 +2650,17 @@ This is known as *Decryption at Access* and is written about in [the whitepaper]
 
 &nbsp;
 
-## Ops ⛨
+## Vlt Ops ⛨
 
-[![dotenvx-ops](https://dotenvx.com/dotenvx-ops-banner.png?v=6)](https://dotenvx.com/ops)
+[![dotenvx-vlt](https://dotenvx.com/dotenvx-vlt-banner.png)](https://dotenvx.com/vlt)
 
 ```
 ⛨ ARMORED KEYS: Harden your private keys.
-⮕ install [curl -sfS https://dotenvx.sh/ops | sh]
-⮕ then run [dotenvx-ops login]
+⮕ install [curl -sfS https://dotenvx.sh/vlt | sh]
+⮕ then run [dotenvx-vlt login]
 ```
 
-[Learn more](https://dotenvx.com/ops)
+[Learn more](https://dotenvx.com/vlt)
 
 &nbsp;
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.68.0",
+  "version": "1.69.0",
   "name": "@dotenvx/dotenvx",
   "description": "secrets for agents–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -35,8 +35,8 @@
   "scripts": {
     "standard": "standard",
     "standard:fix": "standard --fix",
-    "test": "tap run --test-env=DOTENVX_NO_OPS=true --allow-empty-coverage --disable-coverage --timeout=60000",
-    "test-coverage": "tap run --test-env=DOTENVX_NO_OPS=true --show-full-coverage --timeout=60000",
+    "test": "tap run --test-env=DOTENVX_NO_VLT=true --allow-empty-coverage --disable-coverage --timeout=60000",
+    "test-coverage": "tap run --test-env=DOTENVX_NO_VLT=true --show-full-coverage --timeout=60000",
     "testshell": "bash shellspec",
     "prerelease": "npm test && npm run testshell",
     "release": "standard-version"

package/src/cli/actions/decrypt.js

@@ -5,16 +5,17 @@ const Decrypt = require('./../../lib/services/decrypt')
 const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 async function decrypt () {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'decrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
   const envs = this.envs
-  const noOps = options.ops === false || (await sesh.noOps())
+  const noOps = options.ops === false || (await sesh.noVlt())
 
   let errorCount = 0
 

package/src/cli/actions/encrypt.js

@@ -8,6 +8,7 @@ const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const prompts = require('../../lib/helpers/prompts')
 const Session = require('../../db/session')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 function keypairSpinnerHooks (spinner) {
   let stoppedForOps = false
@@ -64,14 +65,14 @@ function encryptOptions (spinner, noOps) {
 }
 
 async function encrypt () {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'encrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
   const envs = this.envs
-  const noOps = options.ops === false || (!options.token && (await sesh.noOps()))
+  const noOps = options.ops === false || (!options.token && (await sesh.noVlt()))
   const noCreate = options.create === false
 
   // stdout - should not have a try so that exit codes can surface to stdout

package/src/cli/actions/get.js

@@ -6,9 +6,10 @@ const catchAndLog = require('./../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const Get = require('./../../lib/services/get')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 async function get (key) {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'decrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
@@ -29,7 +30,7 @@ async function get (key) {
 
   try {
     const sesh = new Session()
-    const noOps = options.ops === false || (await sesh.noOps())
+    const noOps = options.ops === false || (await sesh.noVlt())
     const { parsed, errors } = await new Get(key, envs, options.overload, options.all, options.envKeysFile, noOps).run()
 
     for (const error of errors || []) {

package/src/cli/actions/keypair.js

@@ -3,9 +3,10 @@ const { logger } = require('./../../shared/logger')
 const Keypair = require('./../../lib/services/keypair')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 async function keypair (key) {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'retrieving' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
@@ -16,7 +17,7 @@ async function keypair (key) {
   const prettyPrint = options.prettyPrint || options.pp
 
   const sesh = new Session()
-  const noOps = options.ops === false || await sesh.noOps()
+  const noOps = options.ops === false || await sesh.noVlt()
   const keypairs = await new Keypair(options.envFile, options.envKeysFile, noOps).run()
   const results = key ? keypairs[key] : keypairs
 

package/src/cli/actions/normalizeVltOptions.js

@@ -0,0 +1,10 @@
+function normalizeVltOptions (options) {
+  if (options.ops === false || options.vlt === false) {
+    options.ops = false
+    options.vlt = false
+  }
+
+  return options
+}
+
+module.exports = normalizeVltOptions

package/src/cli/actions/rotate.js

@@ -7,16 +7,17 @@ const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 const Session = require('../../db/session')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 async function rotate () {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'rotating', frames: ['⟳', '⤾', '⥁'] })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const envs = this.envs
   const sesh = new Session()
-  const noOps = options.ops === false || (await sesh.noOps())
+  const noOps = options.ops === false || (await sesh.noVlt())
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {

package/src/cli/actions/run.js

@@ -6,12 +6,13 @@ const Run = require('./../../lib/services/run')
 const catchAndLog = require('./../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 const conventions = require('./../../lib/helpers/conventions')
 const { determine } = require('./../../lib/helpers/envResolution')
 
 async function run () {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
   const commandArgs = this.args
   const spinner = await createSpinner({ ...options, text: 'injecting' })
 
@@ -21,7 +22,7 @@ async function run () {
   const ignore = options.ignore || []
 
   const sesh = new Session()
-  const noOps = options.ops === false || options.opsOff === true || (await sesh.noOps())
+  const noOps = options.ops === false || (await sesh.noVlt())
 
   if (commandArgs.length < 1) {
     if (spinner) spinner.stop()

package/src/cli/actions/set.js

@@ -6,9 +6,10 @@ const createSpinner = require('../../lib/helpers/createSpinner')
 const localDisplayPath = require('../../lib/helpers/localDisplayPath')
 const Session = require('../../db/session')
 const Sets = require('./../../lib/services/sets')
+const normalizeVltOptions = require('./normalizeVltOptions')
 
 async function set (key, value) {
-  const options = this.opts()
+  const options = normalizeVltOptions(this.opts())
 
   let encrypt = true
   let settingMessage = 'encrypting'
@@ -27,7 +28,7 @@ async function set (key, value) {
     const sesh = new Session()
     const envs = this.envs
     const envKeysFilepath = options.envKeysFile
-    const noOps = options.ops === false || (await sesh.noOps())
+    const noOps = options.ops === false || (await sesh.noVlt())
     const noCreate = options.create === false
 
     const {

package/src/cli/dotenvx.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /* c8 ignore start */
-const { Command, Option } = require('commander')
+const { Command } = require('commander')
 const program = new Command()
 
 const { setLogLevel, logger } = require('../shared/logger')
@@ -43,7 +43,7 @@ program
     setLogLevel(options)
   })
 
-// for dynamic loading of dotenvx-ops, etc
+// for dynamic loading of dotenvx-vlt, etc
 program
   .argument('[command]', 'dynamic command')
   .argument('[args...]', 'dynamic command arguments')
@@ -71,7 +71,7 @@ program.command('run')
   .option('--convention <name>', 'load a .env convention (available conventions: [\'nextjs\', \'flow\'])')
   .option('--ignore <errorCodes...>', 'error code(s) to ignore (example: --ignore=MISSING_ENV_FILE)')
   .option('--no-ops', 'disable dotenvx-ops features')
-  .addOption(new Option('--ops-off', 'DEPRECATED: use --no-ops').hideHelp())
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .action(function (...args) {
     this.envs = envs
     return require('./actions/run').apply(this, args)
@@ -94,6 +94,7 @@ program.command('get')
   .option('--pp', 'pretty print output (alias)')
   .option('--format <type>', 'format of the output (json, shell, colon, eval)', 'json')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .action(function (...args) {
     this.envs = envs
     return require('./actions/get').apply(this, args)
@@ -113,6 +114,7 @@ program.command('set')
   .option('-p, --plain', 'store value as plain text', false)
   .option('--no-create', 'do not create .env file(s) when missing')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .action(function (...args) {
     this.envs = envs
     return require('./actions/set').apply(this, args)
@@ -126,9 +128,10 @@ program.command('encrypt')
   .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
   .option('--stdout', 'send to stdout')
-  .option('--token <token>', 'set Ops token')
+  .option('--token <token>', 'set Vlt Ops token')
   .option('--no-create', 'do not create .env file(s) when missing')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .action(function (...args) {
     this.envs = envs
     return require('./actions/encrypt').apply(this, args)
@@ -142,6 +145,7 @@ program.command('decrypt')
   .option('-k, --key <keys...>', 'keys(s) to decrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from decryption (default: none)')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .option('--stdout', 'send to stdout')
   .action(function (...args) {
     this.envs = envs
@@ -156,6 +160,7 @@ program.command('rotate')
   .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .option('--stdout', 'send to stdout')
   .action(function (...args) {
     this.envs = envs
@@ -170,6 +175,7 @@ program.command('keypair')
   .option('-f, --env-file <paths...>', 'path(s) to your env file(s)')
   .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
   .option('--no-ops', 'disable dotenvx-ops features')
+  .option('--no-vlt', 'disable dotenvx-vlt features')
   .option('-pp, --pretty-print', 'pretty print output')
   .option('--pp', 'pretty print output (alias)')
   .option('--format <type>', 'format of the output (json, shell, colon)', 'json')
@@ -238,10 +244,10 @@ program.command('help [command]')
     }
   })
 
-// dotenvx ops
+// dotenvx vlt ops
 program.addHelpText('after', ' ')
 program.addHelpText('after', 'Advanced: ')
-program.addHelpText('after', '  ops                ⛨  Ops [www.dotenvx.com/ops]')
+program.addHelpText('after', '  vlt                ⛨  Vlt Ops [www.dotenvx.com/vlt]')
 program.addHelpText('after', '  ext                🔌 extensions')
 
 // dotenvx ext

package/src/db/session.js

@@ -1,23 +1,23 @@
-const Ops = require('./../lib/extensions/ops')
+const Vlt = require('./../lib/extensions/vlt')
 const { logger } = require('./../shared/logger')
 
 class Session {
   constructor () {
-    this.ops = new Ops()
+    this.vlt = new Vlt()
   }
 
   //
-  // ops status helpers
+  // vlt status helpers
   //
-  async noOps () {
-    const status = await this.ops.status()
-    logger.debug(`ops: ${status}`)
+  async noVlt () {
+    const status = await this.vlt.status()
+    logger.debug(`vlt: ${status}`)
     return status === 'off'
   }
 
-  noOpsSync () {
-    const status = this.ops.statusSync()
-    logger.debug(`ops: ${status}`)
+  noVltSync () {
+    const status = this.vlt.statusSync()
+    logger.debug(`vlt: ${status}`)
     return status === 'off'
   }
 }

package/src/lib/extensions/{ops.js → vlt.js}

@@ -4,8 +4,9 @@ const util = require('util')
 const { logger } = require('../../shared/logger')
 
 const execFile = util.promisify(childProcess.execFile)
+const BINARY_NAMES = ['dotenvx-vlt', 'dotenvx-ops']
 
-class Ops {
+class Vlt {
   async status () {
     if (this._isForcedOff()) return 'off'
 
@@ -41,6 +42,7 @@ class Ops {
     const args = ['keypair']
     if (options.noSpinner) args.push('--no-spinner')
     if (options.token) args.push('--token', options.token)
+    if (options.envFilepath) args.push('-f', options.envFilepath)
     if (publicKey) args.push(publicKey)
 
     try {
@@ -61,6 +63,7 @@ class Ops {
     const args = ['keypair']
     if (options.noSpinner) args.push('--no-spinner')
     if (options.token) args.push('--token', options.token)
+    if (options.envFilepath) args.push('-f', options.envFilepath)
     if (publicKey) args.push(publicKey)
 
     try {
@@ -154,16 +157,12 @@ class Ops {
     if (this._binaryPromise) return this._binaryPromise
 
     this._binaryPromise = (async () => {
-      const npmBin = path.resolve(process.cwd(), 'node_modules/.bin/dotenvx-ops')
-      try {
-        await this._exec(npmBin, ['--version'])
-        return npmBin
-      } catch (_e) {}
-
-      try {
-        await this._exec('dotenvx-ops', ['--version'])
-        return 'dotenvx-ops'
-      } catch (_e) {}
+      for (const binary of this._binaryCandidates()) {
+        try {
+          await this._exec(binary, ['--version'])
+          return binary
+        } catch (_e) {}
+      }
 
       return null
     })()
@@ -174,30 +173,30 @@ class Ops {
   _resolveBinarySync () {
     if (this._binarySync !== undefined) return this._binarySync
 
-    const npmBin = path.resolve(process.cwd(), 'node_modules/.bin/dotenvx-ops')
-    try {
-      this._execSync(npmBin, ['--version'])
-      this._binarySync = npmBin
-      return this._binarySync
-    } catch (err) {
-      logger.debug(err.message)
-    }
-
-    try {
-      this._execSync('dotenvx-ops', ['--version'])
-      this._binarySync = 'dotenvx-ops'
-      return this._binarySync
-    } catch (err) {
-      logger.debug(err.message)
+    for (const binary of this._binaryCandidates()) {
+      try {
+        this._execSync(binary, ['--version'])
+        this._binarySync = binary
+        return this._binarySync
+      } catch (err) {
+        logger.debug(err.message)
+      }
     }
 
     this._binarySync = null
     return null
   }
 
+  _binaryCandidates () {
+    return BINARY_NAMES.flatMap((binary) => [
+      path.resolve(process.cwd(), `node_modules/.bin/${binary}`),
+      binary
+    ])
+  }
+
   _isForcedOff () {
-    return process.env.DOTENVX_NO_OPS === 'true'
+    return process.env.DOTENVX_NO_OPS === 'true' || process.env.DOTENVX_NO_VLT === 'true'
   }
 }
 
-module.exports = Ops
+module.exports = Vlt

package/src/lib/helpers/cryptography/opsKeypair.js

@@ -1,21 +1,19 @@
-const Ops = require('../../extensions/ops')
+const Vlt = require('../../extensions/vlt')
 
 async function opsKeypair (existingPublicKey, options = {}) {
   const hooks = options.hooks || {}
   if (hooks.before) await hooks.before()
 
-  const keypairOptions = {}
-  if (options.token) keypairOptions.token = options.token
+  const keypairOptions = {
+    token: options.token,
+    envFilepath: options.envFilepath
+  }
   if (hooks.onStderr) keypairOptions.onStderr = hooks.onStderr
   if (hooks.before || hooks.onStderr || hooks.after) keypairOptions.noSpinner = true
 
   let kp
   try {
-    if (Object.keys(keypairOptions).length > 0) {
-      kp = await new Ops().keypair(existingPublicKey, keypairOptions)
-    } else {
-      kp = await new Ops().keypair(existingPublicKey)
-    }
+    kp = await new Vlt().keypair(existingPublicKey, keypairOptions)
   } finally {
     if (hooks.after) await hooks.after()
   }

package/src/lib/helpers/cryptography/opsKeypairSync.js

@@ -1,8 +1,7 @@
-const Ops = require('../../extensions/ops')
+const Vlt = require('../../extensions/vlt')
 
 function opsKeypairSync (existingPublicKey, options = {}) {
-  const ops = new Ops()
-  const kp = Object.keys(options).length > 0 ? ops.keypairSync(existingPublicKey, options) : ops.keypairSync(existingPublicKey)
+  const kp = new Vlt().keypairSync(existingPublicKey, options)
   const publicKey = kp.public_key
   const privateKey = kp.private_key
 

package/src/lib/helpers/cryptography/provision.js

@@ -24,10 +24,7 @@ async function provision ({ envSrc, envFilepath, keysFilepath, noOps, token, key
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   } else {
-    const keypairOptions = {}
-    if (token) keypairOptions.token = token
-    if (keypairHooks) keypairOptions.hooks = keypairHooks
-    const kp = await opsKeypair(undefined, keypairOptions)
+    const kp = await opsKeypair(undefined, { token, envFilepath, hooks: keypairHooks })
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   }

package/src/lib/helpers/cryptography/provisionSync.js

@@ -20,7 +20,7 @@ function provisionSync ({ envSrc, envFilepath, keysFilepath, noOps }) {
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   } else {
-    const kp = opsKeypairSync()
+    const kp = opsKeypairSync(undefined, { envFilepath })
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   }

package/src/lib/helpers/executeDynamic.js

@@ -6,6 +6,10 @@ function installCommandForOps () {
   return 'curl -sfS https://dotenvx.sh/ops | sh'
 }
 
+function installCommandForVlt () {
+  return 'curl -sfS https://dotenvx.sh/vlt | sh'
+}
+
 function opsBanner (installCommand) {
   const lines = [
     '',
@@ -29,6 +33,29 @@ function opsBanner (installCommand) {
   return `${top}\n${middle}\n${bottom}`
 }
 
+function vltBanner (installCommand) {
+  const lines = [
+    '',
+    '  ██╗   ██╗██╗  ████████╗',
+    '  ██║   ██║██║  ╚══██╔══╝',
+    '  ██║   ██║██║     ██║   ',
+    '  ╚██╗ ██╔╝██║     ██║       [www.dotenvx.com/vlt]',
+    '   ╚████╔╝ ███████╗██║   ',
+    '    ╚═══╝  ╚══════╝╚═╝   ',
+    '',
+    '  ⛨  ARMORED KEYS: Harden your private keys.',
+    `  ⮕  install [${installCommand}]`,
+    '  ⮕  then run [dotenvx-vlt login]'
+  ]
+
+  const innerWidth = Math.max(67, ...lines.map((line) => line.length))
+  const top = ` ${'_'.repeat(innerWidth)}`
+  const middle = lines.map((line) => `|${line.padEnd(innerWidth)}|`).join('\n')
+  const bottom = `|${'_'.repeat(innerWidth)}|`
+
+  return `${top}\n${middle}\n${bottom}`
+}
+
 function executeDynamic (program, command, rawArgs) {
   if (!command) {
     program.outputHelp()
@@ -49,7 +76,10 @@ function executeDynamic (program, command, rawArgs) {
 
   const result = childProcess.spawnSync(`dotenvx-${command}`, forwardedArgs, { stdio: 'inherit', env })
   if (result.error) {
-    if (command === 'ops') {
+    if (command === 'vlt') {
+      const installCommand = installCommandForVlt()
+      console.log(vltBanner(installCommand))
+    } else if (command === 'ops') {
       const installCommand = installCommandForOps()
       console.log(opsBanner(installCommand))
     } else {

package/src/lib/helpers/keyResolution/keyValues.js

@@ -72,9 +72,7 @@ async function keyValues (filepath, opts = {}) {
 
   // ops
   if (!noOps && !privateKey && publicKey && publicKey.length > 0) {
-    const kp = await opsKeypair(publicKey, {
-      hooks: opts.keypairHooks
-    })
+    const kp = await opsKeypair(publicKey, { envFilepath: filepath, hooks: opts.keypairHooks })
     privateKey = kp.privateKey
   }
 

package/src/lib/helpers/keyResolution/keyValuesSync.js

@@ -72,12 +72,12 @@ function keyValuesSync (filepath, opts = {}) {
 
   // ops
   if (!noOps && !privateKey && publicKey && publicKey.length > 0) {
-    const opsOptions = {}
+    const opsOptions = { envFilepath: filepath }
     if (opts.noSpinner) {
       opsOptions.noSpinner = true
     }
 
-    const kp = Object.keys(opsOptions).length > 0 ? opsKeypairSync(publicKey, opsOptions) : opsKeypairSync(publicKey)
+    const kp = opsKeypairSync(publicKey, opsOptions)
     privateKey = kp.privateKey
   }
 

package/src/lib/main.d.ts

@@ -165,7 +165,7 @@ export interface DotenvConfigOptions {
     | 'debug';
 
   /**
-   * Turn off Dotenvx Ops features - https://dotenvx.com/ops
+   * Turn off Dotenvx Vlt Ops features. Alias for `noVlt`.
    *
    * @default false
    * @example require('@dotenvx/dotenvx').config({ noOps: true })
@@ -173,9 +173,13 @@ export interface DotenvConfigOptions {
   noOps?: boolean;
 
   /**
-   * @deprecated use `noOps` instead.
+   * Turn off Dotenvx Vlt Ops features.
+   *
+   * @default false
+   * @example require('@dotenvx/dotenvx').config({ noVlt: true })
    */
-  opsOff?: boolean;
+  noVlt?: boolean;
+
 }
 
 export type DotenvConfigEnv =
@@ -244,7 +248,7 @@ export interface SetOptions {
   encrypt?: boolean;
 
   /**
-   * Turn off Dotenvx Ops features - https://dotenvx.com/ops
+   * Turn off Dotenvx Vlt Ops features. Alias for `noVlt`.
    *
    * @default false
    * @example require('@dotenvx/dotenvx').set(key, value, { noOps: true })
@@ -252,9 +256,13 @@ export interface SetOptions {
   noOps?: boolean;
 
   /**
-   * @deprecated use `noOps` instead.
+   * Turn off Dotenvx Vlt Ops features.
+   *
+   * @default false
+   * @example require('@dotenvx/dotenvx').set(key, value, { noVlt: true })
    */
-  opsOff?: boolean;
+  noVlt?: boolean;
+
 }
 
 export type SetProcessedEnv = {
@@ -325,7 +333,7 @@ export interface GetOptions {
   strict?: boolean;
 
   /**
-   * Turn off Dotenvx Ops features - https://dotenvx.com/ops
+   * Turn off Dotenvx Vlt Ops features. Alias for `noVlt`.
    *
    * @default false
    * @example require('@dotenvx/dotenvx').get('KEY', { noOps: true })
@@ -333,9 +341,13 @@ export interface GetOptions {
   noOps?: boolean;
 
   /**
-   * @deprecated use `noOps` instead.
+   * Turn off Dotenvx Vlt Ops features.
+   *
+   * @default false
+   * @example require('@dotenvx/dotenvx').get('KEY', { noVlt: true })
    */
-  opsOff?: boolean;
+  noVlt?: boolean;
+
 }
 
 /**

package/src/lib/main.js

@@ -328,7 +328,7 @@ const keypair = function (envFile, key, envKeysFile = null, noOps = false) {
 
 function resolveNoOps (options = {}) {
   const sesh = new Session()
-  return options.noOps === true || options.opsOff === true || sesh.noOpsSync()
+  return options.noOps === true || options.noVlt === true || sesh.noVltSync()
 }
 
 module.exports = {