@dotenvx/dotenvx 1.71.0 → 1.71.2

package/CHANGELOG.md

@@ -2,7 +2,19 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.71.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.71.2...main)
+
+## [1.71.2](https://github.com/dotenvx/dotenvx/compare/v1.71.1...v1.71.2) (2026-06-08)
+
+### Changed
+
+* touch up `get`, `set`, and `decrypt` when armor installed ([#834](https://github.com/dotenvx/dotenvx/pull/834))
+
+## [1.71.1](https://github.com/dotenvx/dotenvx/compare/v1.71.0...v1.71.1) (2026-06-08)
+
+### Changed
+
+* stderr changed to `inherit` for dotenvx-armor integration ([#833](https://github.com/dotenvx/dotenvx/pull/833))
 
 ## [1.71.0](https://github.com/dotenvx/dotenvx/compare/v1.70.0...v1.71.0) (2026-06-01)
 

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.71.0",
+  "version": "1.71.2",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",

package/src/cli/actions/decrypt.js

@@ -21,6 +21,7 @@ async function decrypt () {
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
+    if (spinner) spinner.stop()
     const {
       processedEnvs
     } = await new Decrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
@@ -41,6 +42,7 @@ async function decrypt () {
     }
   } else {
     try {
+      if (spinner) spinner.stop()
       const {
         processedEnvs,
         changedFilepaths,

package/src/cli/actions/encrypt.js

@@ -9,32 +9,12 @@ const prompts = require('../../lib/helpers/prompts')
 const Session = require('../../db/session')
 const normalizeArmorOptions = require('./normalizeArmorOptions')
 
-function keypairSpinnerHooks (spinner) {
-  let stoppedForArmor = false
-
-  return {
-    onStderr: () => {
-      if (spinner && !stoppedForArmor) {
-        spinner.stop()
-        stoppedForArmor = true
-      }
-    },
-    after: () => {
-      if (spinner && stoppedForArmor) {
-        spinner.start('encrypting')
-        stoppedForArmor = false
-      }
-    }
-  }
-}
-
-function keyStorageSelector (spinner) {
+function keyStorageSelector () {
   let selected
 
   return async function selectKeyStorage () {
     if (selected) return selected
 
-    if (spinner) spinner.stop()
     selected = await prompts.select({
       message: 'Choose private key storage',
       choices: [
@@ -45,19 +25,16 @@ function keyStorageSelector (spinner) {
       input: process.stdin,
       output: process.stderr
     })
-    if (spinner) spinner.start('encrypting')
 
     return selected
   }
 }
 
-function encryptOptions (spinner, noArmor) {
-  const options = {
-    keypairHooks: keypairSpinnerHooks(spinner)
-  }
+function encryptOptions (noArmor) {
+  const options = {}
 
   if (!noArmor) {
-    options.selectKeyStorage = keyStorageSelector(spinner)
+    options.selectKeyStorage = keyStorageSelector()
   }
 
   return options
@@ -76,9 +53,10 @@ async function encrypt () {
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
+    if (spinner) spinner.stop()
     const {
       processedEnvs
-    } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(spinner, noArmor)).run()
+    } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(noArmor)).run()
     if (spinner) spinner.stop()
     for (const processedEnv of processedEnvs) {
       console.log(processedEnv.envSrc)
@@ -86,11 +64,12 @@ async function encrypt () {
     process.exit(0) // exit early
   } else {
     try {
+      if (spinner) spinner.stop()
       const {
         processedEnvs,
         changedFilepaths,
         unchangedFilepaths
-      } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(spinner, noArmor)).run()
+      } = await new Encrypt(envs, options.key, options.excludeKey, options.envKeysFile, noArmor, noCreate, options.token, encryptOptions(noArmor)).run()
 
       for (const processedEnv of processedEnvs) {
         logger.verbose(`encrypting ${processedEnv.envFilepath} (${processedEnv.filepath})`)

package/src/cli/actions/get.js

@@ -31,6 +31,7 @@ async function get (key) {
   try {
     const sesh = new Session()
     const noArmor = options.armor === false || (await sesh.noArmor())
+    if (spinner) spinner.stop()
     const { parsed, errors } = await new Get(key, envs, options.overload, options.all, options.envKeysFile, noArmor).run()
 
     for (const error of errors || []) {

package/src/cli/actions/keypair.js

@@ -18,6 +18,7 @@ async function keypair (key) {
 
   const sesh = new Session()
   const noArmor = options.armor === false || await sesh.noArmor()
+  if (spinner) spinner.stop()
   const keypairs = await new Keypair(options.envFile, options.envKeysFile, noArmor).run()
   const results = key ? keypairs[key] : keypairs
 

package/src/cli/actions/rotate.js

@@ -20,6 +20,7 @@ async function rotate () {
 
   // stdout - should not have a try so that exit codes can surface to stdout
   if (options.stdout) {
+    if (spinner) spinner.stop()
     const {
       processedEnvs
     } = await new Rotate(envs, options.key, options.excludeKey, options.envKeysFile, noArmor).run()
@@ -34,6 +35,7 @@ async function rotate () {
     process.exit(0) // exit early
   } else {
     try {
+      if (spinner) spinner.stop()
       const {
         processedEnvs,
         changedFilepaths,

package/src/cli/actions/run.js

@@ -48,6 +48,7 @@ async function run () {
       envs = this.envs
     }
     envs = determine(envs, process.env)
+    if (spinner) spinner.stop()
 
     const {
       processedEnvs,
@@ -55,12 +56,7 @@ async function run () {
       readableFilepaths,
       uniqueInjectedKeys
     } = await new Run(envs, options.overload, process.env, options.envKeysFile, noArmor, {
-      token: options.token,
-      keypairHooks: {
-        after: () => {
-          if (spinner) spinner.start('injecting')
-        }
-      }
+      token: options.token
     }).run()
 
     for (const processedEnv of processedEnvs) {

package/src/cli/actions/set.js

@@ -30,6 +30,7 @@ async function set (key, value) {
     const noArmor = options.armor === false || (await sesh.noArmor())
     const noCreate = options.create === false
 
+    if (spinner) spinner.stop()
     const {
       processedEnvs,
       changedFilepaths,

package/src/lib/extensions/armor.js

@@ -46,9 +46,7 @@ class Armor {
     if (publicKey) args.push(publicKey)
 
     try {
-      return JSON.parse(await this._execInteractive(binary, args, {
-        onStderr: options.onStderr
-      }))
+      return JSON.parse(await this._execInteractive(binary, args))
     } catch (_e) {
       return {}
     }
@@ -113,26 +111,17 @@ class Armor {
     return childProcess.execFileSync(binary, args).toString().trim()
   }
 
-  _execInteractive (binary, args, options = {}) {
+  _execInteractive (binary, args) {
     return new Promise((resolve, reject) => {
       const spawnOptions = {
-        stdio: ['inherit', 'pipe', 'pipe']
+        stdio: ['inherit', 'pipe', 'inherit']
       }
       const subprocess = childProcess.spawn(binary, args, spawnOptions)
       let stdout = ''
-      let sawStderr = false
 
       subprocess.stdout.on('data', (data) => {
         stdout += data.toString()
       })
-      subprocess.stderr.on('data', (data) => {
-        if (!sawStderr) {
-          sawStderr = true
-          if (options.onStderr) options.onStderr()
-        }
-
-        process.stderr.write(data)
-      })
       subprocess.on('error', reject)
       subprocess.on('close', (code) => {
         if (code !== 0) {

package/src/lib/helpers/cryptography/armorKeypair.js

@@ -1,22 +1,12 @@
 const Armor = require('../../extensions/armor')
 
 async function armorKeypair (existingPublicKey, options = {}) {
-  const hooks = options.hooks || {}
-  if (hooks.before) await hooks.before()
-
   const keypairOptions = {
     token: options.token,
     envFilepath: options.envFilepath
   }
-  if (hooks.onStderr) keypairOptions.onStderr = hooks.onStderr
-  if (hooks.before || hooks.onStderr || hooks.after) keypairOptions.noSpinner = true
 
-  let kp
-  try {
-    kp = await new Armor().keypair(existingPublicKey, keypairOptions)
-  } finally {
-    if (hooks.after) await hooks.after()
-  }
+  const kp = await new Armor().keypair(existingPublicKey, keypairOptions)
 
   const publicKey = kp.public_key
   const privateKey = kp.private_key

package/src/lib/helpers/cryptography/provision.js

@@ -4,7 +4,7 @@ const armorKeypair = require('./armorKeypair')
 const localKeypair = require('./localKeypair')
 const { keyNames } = require('../keyResolution')
 
-async function provision ({ envSrc, envFilepath, keysFilepath, noArmor, token, keypairHooks, selectKeyStorage }) {
+async function provision ({ envSrc, envFilepath, keysFilepath, noArmor, token, selectKeyStorage }) {
   noArmor = noArmor !== false
   if (!noArmor && selectKeyStorage) {
     noArmor = await selectKeyStorage() !== 'armored'
@@ -24,7 +24,8 @@ async function provision ({ envSrc, envFilepath, keysFilepath, noArmor, token, k
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   } else {
-    const kp = await armorKeypair(undefined, { token, envFilepath, hooks: keypairHooks })
+    const armorOptions = { token, envFilepath }
+    const kp = await armorKeypair(undefined, armorOptions)
     publicKey = kp.publicKey
     privateKey = kp.privateKey
   }

package/src/lib/helpers/keyResolution/keyValues.js

@@ -73,7 +73,7 @@ async function keyValues (filepath, opts = {}) {
 
   // armor
   if (!noArmor && !privateKey && publicKey && publicKey.length > 0) {
-    const armorOptions = { envFilepath: filepath, hooks: opts.keypairHooks }
+    const armorOptions = { envFilepath: filepath }
     if (opts.token) {
       armorOptions.token = opts.token
     }

package/src/lib/services/encrypt.js

@@ -37,7 +37,6 @@ class Encrypt {
     this.noArmor = noArmor
     this.noCreate = noCreate
     this.token = token
-    this.keypairHooks = options.keypairHooks
     this.selectKeyStorage = options.selectKeyStorage
 
     this.processedEnvs = []
@@ -105,8 +104,7 @@ class Encrypt {
       const { publicKeyName, privateKeyName } = keyNames(envFilepath)
       const { publicKeyValue, privateKeyValue } = await keyValues(envFilepath, {
         keysFilepath: this.envKeysFilepath,
-        noArmor: this.noArmor,
-        keypairHooks: this.keypairHooks
+        noArmor: this.noArmor
       })
 
       // first pass - provision
@@ -117,7 +115,6 @@ class Encrypt {
           keysFilepath: this.envKeysFilepath,
           noArmor: this.noArmor,
           token: this.token,
-          keypairHooks: this.keypairHooks,
           selectKeyStorage: this.selectKeyStorage
         })
         envSrc = prov.envSrc

package/src/lib/services/run.js

@@ -25,7 +25,6 @@ class Run {
     this.noArmor = noArmor
     this.noSpinner = options.noSpinner
     this.token = options.token
-    this.keypairHooks = options.keypairHooks
 
     this.processedEnvs = []
     this.readableFilepaths = new Set()
@@ -199,8 +198,7 @@ class Run {
       const { privateKeyValue, privateKeySource } = await keyValues(filepath, {
         keysFilepath: this.envKeysFilepath,
         noArmor: this.noArmor,
-        token: this.token,
-        keypairHooks: this.keypairHooks
+        token: this.token
       })
 
       const {