@dotenvx/dotenvx 1.69.2 → 1.71.0

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.69.2...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.71.0...main)
+
+## [1.71.0](https://github.com/dotenvx/dotenvx/compare/v1.70.0...v1.71.0) (2026-06-01)
+
+### Added
+
+* Add optional automation `--token` support for Armor ⛨ users ([#831](https://github.com/dotenvx/dotenvx/pull/831))
+
+## [1.70.0](https://github.com/dotenvx/dotenvx/compare/v1.69.2...v1.70.0) (2026-05-31)
+
+### Changed
+
+* Dotenvx Ops/Vlt is now Dotenvx Armor ⛨ ([#830](https://github.com/dotenvx/dotenvx/pull/830))
 
 ## [1.69.2](https://github.com/dotenvx/dotenvx/compare/v1.69.1...v1.69.2) (2026-05-29)
 

package/README.md

@@ -1287,14 +1287,25 @@ $ dotenvx run -fk .env.keys -f apps/app1/.env -- yourcommand
 ```
 
 </details>
-<details><summary>`run --no-vlt`</summary><br>
+<details><summary>`run --token`</summary><br>
 
-Turn off [Dotenvx VLT ⛨](https://dotenvx.com/vlt) features.
+Set Armor ⛨ token for retrieving armored private keys.
 
 ```sh
-$ dotenvx run --no-vlt -- yourcommand
+$ dotenvx run --token "$DOTENVX_ARMOR_TOKEN" -- yourcommand
 ```
 
+</details>
+<details><summary>`run --no-armor`</summary><br>
+
+Turn off [Dotenvx Armor ⛨](https://dotenvx.com/armor) features.
+
+```sh
+$ dotenvx run --no-armor -- yourcommand
+```
+
+`--no-vlt` and `--no-ops` are deprecated aliases.
+
 </details>
 <details><summary>`get KEY`</summary><br>
 
@@ -1622,15 +1633,17 @@ $ dotenvx encrypt -f .env.production
 ```
 
 </details>
-<details><summary>`encrypt --no-vlt`</summary><br>
+<details><summary>`encrypt --no-armor`</summary><br>
 
-Turn off [Dotenvx VLT ⛨](https://dotenvx.com/vlt) features for encrypt.
+Turn off [Dotenvx Armor ⛨](https://dotenvx.com/armor) features for encrypt.
 
 ```sh
-$ dotenvx encrypt --no-vlt
+$ dotenvx encrypt --no-armor
 ◈ encrypted (.env)
 ```
 
+`--no-vlt` and `--no-ops` are deprecated aliases.
+
 </details>
 <details><summary>`encrypt -fk`</summary><br>
 
@@ -2548,15 +2561,17 @@ $ dotenvx run --convention=nextjs -- node index.js
 ```
 
 </details>
-<details><summary>`config(noVlt:)` - noVlt</summary><br>
+<details><summary>`config(noArmor:)` - noArmor</summary><br>
 
-Turn off [Dotenvx VLT ⛨](https://dotenvx.com/vlt) features.
+Turn off [Dotenvx Armor ⛨](https://dotenvx.com/armor) features.
 
 ```js
 // index.js
-require('@dotenvx/dotenvx').config({noVlt: true})
+require('@dotenvx/dotenvx').config({noArmor: true})
 ```
 
+`noVlt` and `noOps` are deprecated aliases.
+
 </details>
 <details><summary>`parse(src)`</summary><br>
 
@@ -2650,17 +2665,17 @@ This is known as *Decryption at Access* and is written about in [the whitepaper]
 
 &nbsp;
 
-## VLT ⛨
+## Armor ⛨
 
-[![dotenvx-vlt](https://dotenvx.com/dotenvx-vlt-banner.png?v2)](https://dotenvx.com/vlt)
+[![dotenvx-armor](https://dotenvx.com/dotenvx-armor-banner.png?v2)](https://dotenvx.com/armor)
 
 ```
 ⛨ ARMORED KEYS: Harden your private keys.
-⮕ install [curl -sfS https://dotenvx.sh/vlt | sh]
-⮕ then run [dotenvx vlt login]
+⮕ install [curl -sfS https://dotenvx.sh/armor | sh]
+⮕ then run [dotenvx armor login]
 ```
 
-[Learn more](https://dotenvx.com/vlt)
+[Learn more](https://dotenvx.com/armor)
 
 &nbsp;
 

package/package.json

@@ -1,7 +1,7 @@
 {
-  "version": "1.69.2",
+  "version": "1.71.0",
   "name": "@dotenvx/dotenvx",
-  "description": "secrets for agents–from the creator of `dotenv`",
+  "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
   "keywords": [
     "dotenv",
@@ -35,11 +35,12 @@
   "scripts": {
     "standard": "standard",
     "standard:fix": "standard --fix",
-    "test": "tap run --test-env=DOTENVX_NO_VLT=true --allow-empty-coverage --disable-coverage --timeout=60000",
-    "test-coverage": "tap run --test-env=DOTENVX_NO_VLT=true --show-full-coverage --timeout=60000",
+    "test": "tap run --test-env=DOTENVX_NO_ARMOR=true --allow-empty-coverage --disable-coverage --timeout=60000",
+    "test-coverage": "tap run --test-env=DOTENVX_NO_ARMOR=true --show-full-coverage --timeout=60000",
     "testshell": "bash shellspec",
-    "prerelease": "npm test && npm run testshell",
-    "release": "standard-version"
+    "release:check": "npm test && npm run testshell",
+    "prerelease": "npm run release:check",
+    "release": "npm run release:check && standard-version"
   },
   "funding": "https://dotenvx.com",
   "dependencies": {

package/src/cli/actions/decrypt.js

@@ -5,17 +5,17 @@ const Decrypt = require('./../../lib/services/decrypt')
 const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 async function decrypt () {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'decrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
   const envs = this.envs
-  const noVlt = options.vlt === false || (await sesh.noVlt())
+  const noArmor = options.armor === false || (await sesh.noArmor())
 
   let errorCount = 0
 
@@ -23,7 +23,7 @@ async function decrypt () {
   if (options.stdout) {
     const {
       processedEnvs
-    } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noVlt).run()
+    } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
     if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       if (processedEnv.error) {
@@ -45,7 +45,7 @@ async function decrypt () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noVlt).run()
+      } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`decrypting ${processedEnv.envFilepath} (${processedEnv.filepath})`)

package/src/cli/actions/encrypt.js

@@ -7,22 +7,22 @@ const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const prompts = require('../../lib/helpers/prompts')
 const Session = require('../../db/session')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 function keypairSpinnerHooks (spinner) {
-  let stoppedForVlt = false
+  let stoppedForArmor = false
 
   return {
     onStderr: () => {
-      if (spinner && !stoppedForVlt) {
+      if (spinner && !stoppedForArmor) {
         spinner.stop()
-        stoppedForVlt = true
+        stoppedForArmor = true
       }
     },
     after: () => {
-      if (spinner && stoppedForVlt) {
+      if (spinner && stoppedForArmor) {
         spinner.start('encrypting')
-        stoppedForVlt = false
+        stoppedForArmor = false
       }
     }
   }
@@ -39,7 +39,7 @@ function keyStorageSelector (spinner) {
       message: 'Choose private key storage',
       choices: [
         { name: '◫ File (.env.keys)', value: 'file' },
-        { name: '⛨ Armor (vlt.dotenvx.com)', value: 'armored' }
+        { name: '⛨ Armor (armor.dotenvx.com)', value: 'armored' }
       ]
     }, {
       input: process.stdin,
@@ -51,12 +51,12 @@ function keyStorageSelector (spinner) {
   }
 }
 
-function encryptOptions (spinner, noVlt) {
+function encryptOptions (spinner, noArmor) {
   const options = {
     keypairHooks: keypairSpinnerHooks(spinner)
   }
 
-  if (!noVlt) {
+  if (!noArmor) {
     options.selectKeyStorage = keyStorageSelector(spinner)
   }
 
@@ -64,21 +64,21 @@ function encryptOptions (spinner, noVlt) {
 }
 
 async function encrypt () {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'encrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const sesh = new Session()
   const envs = this.envs
-  const noVlt = options.vlt === false || (!options.token && (await sesh.noVlt()))
+  const noArmor = options.armor === false || (!options.token && (await sesh.noArmor()))
   const noCreate = options.create === false
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
     const {
       processedEnvs
-    } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noVlt, noCreate, options.token, encryptOptions(spinner, noVlt)).run()
+    } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(spinner, noArmor)).run()
     if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       console.log(processedEnv.envSrc)
@@ -90,7 +90,7 @@ async function encrypt () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noVlt, noCreate, options.token, encryptOptions(spinner, noVlt)).run()
+      } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(spinner, noArmor)).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`encrypting ${processedEnv.envFilepath} (${processedEnv.filepath})`)

package/src/cli/actions/get.js

@@ -6,10 +6,10 @@ const catchAndLog = require('./../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const Get = require('./../../lib/services/get')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 async function get (key) {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'decrypting' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
@@ -30,8 +30,8 @@ async function get (key) {
 
   try {
     const sesh = new Session()
-    const noVlt = options.vlt === false || (await sesh.noVlt())
-    const { parsed, errors } = await new Get(key, envs, options.overload, options.all, options.envKeysFile, noVlt).run()
+    const noArmor = options.armor === false || (await sesh.noArmor())
+    const { parsed, errors } = await new Get(key, envs, options.overload, options.all, options.envKeysFile, noArmor).run()
 
     for (const error of errors || []) {
       if (options.strict) throw error // throw immediately if strict

package/src/cli/actions/keypair.js

@@ -3,10 +3,10 @@ const { logger } = require('./../../shared/logger')
 const Keypair = require('./../../lib/services/keypair')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 async function keypair (key) {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'retrieving' })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
@@ -17,8 +17,8 @@ async function keypair (key) {
   const prettyPrint = options.prettyPrint || options.pp
 
   const sesh = new Session()
-  const noVlt = options.vlt === false || await sesh.noVlt()
-  const keypairs = await new Keypair(options.envFile, options.envKeysFile, noVlt).run()
+  const noArmor = options.armor === false || await sesh.noArmor()
+  const keypairs = await new Keypair(options.envFile, options.envKeysFile, noArmor).run()
   const results = key ? keypairs[key] : keypairs
 
   if (spinner) spinner.stop()

package/src/cli/actions/normalizeArmorOptions.js

@@ -0,0 +1,11 @@
+function normalizeArmorOptions (options) {
+  if (options.armor === false || options.ops === false || options.vlt === false) {
+    options.armor = false
+    options.ops = false
+    options.vlt = false
+  }
+
+  return options
+}
+
+module.exports = normalizeArmorOptions

package/src/cli/actions/rotate.js

@@ -6,23 +6,23 @@ const Rotate = require('./../../lib/services/rotate')
 const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 async function rotate () {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const spinner = await createSpinner({ ...options, text: 'rotating', frames: ['⟳', '⤾', '⥁'] })
 
   logger.debug(`options: ${JSON.stringify(options)}`)
 
   const envs = this.envs
   const sesh = new Session()
-  const noVlt = options.vlt === false || (await sesh.noVlt())
+  const noArmor = options.armor === false || (await sesh.noArmor())
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
     const {
       processedEnvs
-    } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noVlt).run()
+    } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
     if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       console.log(processedEnv.envSrc)
@@ -38,7 +38,7 @@ async function rotate () {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noVlt).run()
+      } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`rotating ${processedEnv.envFilepath} (${processedEnv.filepath})`)

package/src/cli/actions/run.js

@@ -6,13 +6,13 @@ const Run = require('./../../lib/services/run')
 const catchAndLog = require('./../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 const conventions = require('./../../lib/helpers/conventions')
 const { determine } = require('./../../lib/helpers/envResolution')
 
 async function run () {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
   const commandArgs = this.args
   const spinner = await createSpinner({ ...options, text: 'injecting' })
 
@@ -22,7 +22,7 @@ async function run () {
   const ignore = options.ignore || []
 
   const sesh = new Session()
-  const noVlt = options.vlt === false || (await sesh.noVlt())
+  const noArmor = options.armor === false || (!options.token && (await sesh.noArmor()))
 
   if (commandArgs.length < 1) {
     if (spinner) spinner.stop()
@@ -54,7 +54,8 @@ async function run () {
       readableStrings,
       readableFilepaths,
       uniqueInjectedKeys
-    } = await new Run(envs, options.overload, process.env, options.envKeysFile, noVlt, {
+    } = await new Run(envs, options.overload, process.env, options.envKeysFile, noArmor, {
+      token: options.token,
       keypairHooks: {
         after: () => {
           if (spinner) spinner.start('injecting')

package/src/cli/actions/set.js

@@ -5,10 +5,10 @@ const catchAndLog = require('../../lib/helpers/catchAndLog')
 const createSpinner = require('../../lib/helpers/createSpinner')
 const Session = require('../../db/session')
 const Sets = require('./../../lib/services/sets')
-const normalizeVltOptions = require('./normalizeVltOptions')
+const normalizeArmorOptions = require('./normalizeArmorOptions')
 
 async function set (key, value) {
-  const options = normalizeVltOptions(this.opts())
+  const options = normalizeArmorOptions(this.opts())
 
   let encrypt = true
   let settingMessage = 'encrypting'
@@ -27,14 +27,14 @@ async function set (key, value) {
     const sesh = new Session()
     const envs = this.envs
     const envKeysFilepath = options.envKeysFile
-    const noVlt = options.vlt === false || (await sesh.noVlt())
+    const noArmor = options.armor === false || (await sesh.noArmor())
     const noCreate = options.create === false
 
     const {
       processedEnvs,
       changedFilepaths,
       unchangedFilepaths
-    } = await new Sets(key, value, envs, encrypt, envKeysFilepath, noVlt, noCreate).run()
+    } = await new Sets(key, value, envs, encrypt, envKeysFilepath, noArmor, noCreate).run()
 
     let withEncryption = ''
 

package/src/cli/commands/ext.js

@@ -65,7 +65,7 @@ ext.command('precommit')
     return require('./../actions/ext/precommit').apply(this, args)
   })
 
-// dotenvx scan
+// dotenvx ext scan
 ext.command('scan')
   .description('scan for leaked secrets')
   .action(function (...args) {

package/src/cli/dotenvx.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 /* c8 ignore start */
-const { Command } = require('commander')
+const { Command, Option } = require('commander')
 const program = new Command()
 
 const { setLogLevel, logger } = require('../shared/logger')
@@ -43,7 +43,7 @@ program
     setLogLevel(options)
   })
 
-// for dynamic loading of dotenvx-vlt, etc
+// for dynamic loading of dotenvx-armor, etc
 program
   .argument('[command]', 'dynamic command')
   .argument('[args...]', 'dynamic command arguments')
@@ -70,8 +70,10 @@ program.command('run')
   .option('--strict', 'process.exit(1) on any errors', false)
   .option('--convention <name>', 'load a .env convention (available conventions: [\'nextjs\', \'flow\'])')
   .option('--ignore <errorCodes...>', 'error code(s) to ignore (example: --ignore=MISSING_ENV_FILE)')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--token <token>', 'set Armor ⛨ token')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .action(function (...args) {
     this.envs = envs
     return require('./actions/run').apply(this, args)
@@ -93,8 +95,9 @@ program.command('get')
   .option('-pp, --pretty-print', 'pretty print output')
   .option('--pp', 'pretty print output (alias)')
   .option('--format <type>', 'format of the output (json, shell, colon, eval)', 'json')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .action(function (...args) {
     this.envs = envs
     return require('./actions/get').apply(this, args)
@@ -113,8 +116,9 @@ program.command('set')
   .option('-c, --encrypt', 'encrypt value', true)
   .option('-p, --plain', 'store value as plain text', false)
   .option('--no-create', 'do not create .env file(s) when missing')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .action(function (...args) {
     this.envs = envs
     return require('./actions/set').apply(this, args)
@@ -128,10 +132,11 @@ program.command('encrypt')
   .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
   .option('--stdout', 'send to stdout')
-  .option('--token <token>', 'set Vlt Ops token')
+  .option('--token <token>', 'set Armor ⛨ token')
   .option('--no-create', 'do not create .env file(s) when missing')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .action(function (...args) {
     this.envs = envs
     return require('./actions/encrypt').apply(this, args)
@@ -144,8 +149,9 @@ program.command('decrypt')
   .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
   .option('-k, --key <keys...>', 'keys(s) to decrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from decryption (default: none)')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .option('--stdout', 'send to stdout')
   .action(function (...args) {
     this.envs = envs
@@ -159,8 +165,9 @@ program.command('rotate')
   .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
   .option('-k, --key <keys...>', 'keys(s) to encrypt (default: all keys in file)')
   .option('-ek, --exclude-key <excludeKeys...>', 'keys(s) to exclude from encryption (default: none)')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .option('--stdout', 'send to stdout')
   .action(function (...args) {
     this.envs = envs
@@ -174,8 +181,9 @@ program.command('keypair')
   .argument('[KEY]', 'environment variable key name')
   .option('-f, --env-file <paths...>', 'path(s) to your env file(s)')
   .option('-fk, --env-keys-file <path>', 'path to your .env.keys file (default: same path as your env file)')
-  .option('--no-ops', 'disable dotenvx-ops features')
-  .option('--no-vlt', 'disable dotenvx-vlt features')
+  .option('--no-armor', 'disable dotenvx-armor features')
+  .addOption(new Option('--no-vlt', 'disable dotenvx-vlt features (deprecated. use --no-armor)').hideHelp())
+  .addOption(new Option('--no-ops', 'disable dotenvx-ops features (deprecated. use --no-armor)').hideHelp())
   .option('-pp, --pretty-print', 'pretty print output')
   .option('--pp', 'pretty print output (alias)')
   .option('--format <type>', 'format of the output (json, shell, colon)', 'json')
@@ -206,8 +214,8 @@ program.command('login', { hidden: true })
   .description('')
   .allowUnknownOption()
   .action(() => {
-    const rawArgs = ['vlt', 'login', ...process.argv.slice(3)]
-    executeDynamic(program, 'vlt', rawArgs)
+    const rawArgs = ['armor', 'login', ...process.argv.slice(3)]
+    executeDynamic(program, 'armor', rawArgs)
   })
 
 // dotenvx logout
@@ -215,17 +223,8 @@ program.command('logout', { hidden: true })
   .description('log out of your dotenvx account')
   .allowUnknownOption()
   .action(() => {
-    const rawArgs = ['vlt', 'logout', ...process.argv.slice(3)]
-    executeDynamic(program, 'vlt', rawArgs)
-  })
-
-// dotenvx armor
-program.command('armor', { hidden: true })
-  .description('ARMORED KEYS ⛨')
-  .allowUnknownOption()
-  .action((args) => {
-    const rawArgs = ['vlt', 'armor', ...process.argv.slice(3)]
-    executeDynamic(program, 'vlt', rawArgs)
+    const rawArgs = ['armor', 'logout', ...process.argv.slice(3)]
+    executeDynamic(program, 'armor', rawArgs)
   })
 
 // dotenvx help
@@ -244,11 +243,10 @@ program.command('help [command]')
     }
   })
 
-// dotenvx vlt ops
+// dotenvx armor
 program.addHelpText('after', ' ')
 program.addHelpText('after', 'Advanced: ')
-program.addHelpText('after', '  login')
-program.addHelpText('after', '  vlt                      ⛨ ARMORED KEYS [www.dotenvx.com/vlt]')
+program.addHelpText('after', '  armor                    ⛨ ARMORED KEYS [www.dotenvx.com/armor]')
 program.addHelpText('after', '  ext                      ⊕ extensions')
 
 // dotenvx ext

package/src/db/session.js

@@ -1,23 +1,23 @@
-const Vlt = require('./../lib/extensions/vlt')
+const Armor = require('./../lib/extensions/armor')
 const { logger } = require('./../shared/logger')
 
 class Session {
   constructor () {
-    this.vlt = new Vlt()
+    this.armor = new Armor()
   }
 
   //
-  // vlt status helpers
+  // armor status helpers
   //
-  async noVlt () {
-    const status = await this.vlt.status()
-    logger.debug(`vlt: ${status}`)
+  async noArmor () {
+    const status = await this.armor.status()
+    logger.debug(`armor: ${status}`)
     return status === 'off'
   }
 
-  noVltSync () {
-    const status = this.vlt.statusSync()
-    logger.debug(`vlt: ${status}`)
+  noArmorSync () {
+    const status = this.armor.statusSync()
+    logger.debug(`armor: ${status}`)
     return status === 'off'
   }
 }

package/src/lib/extensions/{vlt.js → armor.js}

@@ -4,9 +4,9 @@ const util = require('util')
 const { logger } = require('../../shared/logger')
 
 const execFile = util.promisify(childProcess.execFile)
-const BINARY_NAMES = ['dotenvx-vlt', 'dotenvx-ops']
+const BINARY_NAMES = ['dotenvx-armor', 'dotenvx-vlt', 'dotenvx-ops']
 
-class Vlt {
+class Armor {
   async status () {
     if (this._isForcedOff()) return 'off'
 
@@ -195,8 +195,8 @@ class Vlt {
   }
 
   _isForcedOff () {
-    return process.env.DOTENVX_NO_OPS === 'true' || process.env.DOTENVX_NO_VLT === 'true'
+    return process.env.DOTENVX_NO_ARMOR === 'true' || process.env.DOTENVX_NO_VLT === 'true' || process.env.DOTENVX_NO_OPS === 'true'
   }
 }
 
-module.exports = Vlt
+module.exports = Armor