@dotenvx/dotenvx 2.11.0 → 2.11.2

package/CHANGELOG.md

@@ -2,7 +2,21 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.11.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.11.2...main)
+
+## [2.11.2](https://github.com/dotenvx/dotenvx/compare/v2.11.1...v2.11.2) (2026-07-16)
+
+### Changed
+
+* Bump @dotenvx/primtivies to support nested node invocations for pkg-ed binary ([#901](https://github.com/dotenvx/dotenvx/pull/901))
+
+## [2.11.1](https://github.com/dotenvx/dotenvx/compare/v2.11.0...v2.11.1) (2026-07-15)
+
+### Changed
+
+* Redact all keys by default - except those ending in `_PLAIN` ([460862](https://github.com/dotenvx/dotenvx/commit/4608625845367d9205aa668826bf46ed0e5bb740))
+* Support `dotenvx run -- claude` and `dotenvx run -- codex` ([#900](https://github.com/dotenvx/dotenvx/pull/900))
+* Simplify default encrypted .env file to just `HELLO="World"` ([#899](https://github.com/dotenvx/dotenvx/pull/899))
 
 ## [2.11.0](https://github.com/dotenvx/dotenvx/compare/v2.10.0...v2.11.0) (2026-07-15)
 

package/README.md

@@ -111,14 +111,14 @@ dotenvx encrypt
 ## Run Anywhere
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ node index.js
 Hello undefined # without dotenvx
 
 $ dotenvx run -- node index.js
-Hello Dotenvx # with dotenvx
+Hello World # with dotenvx
 > :-D
 ```
 
@@ -126,6 +126,34 @@ see [quickstart guides](https://dotenvx.com/docs/quickstart)
 
 More examples
 
+<details><summary>Claude 🤖</summary><br>
+
+Run Claude with your real secrets while redacting them from its output.
+
+```sh
+$ echo "HELLO=World" > .env
+
+$ dotenvx run --redact -- claude -p 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --dangerously-skip-permissions
+Hello [REDACTED]
+```
+
+see [Claude redaction guide](https://dotenvx.com/docs/cli/run-redact-claude-print)
+
+</details>
+<details><summary>Codex ✨</summary><br>
+
+Run Codex with your real secrets while redacting them from its output.
+
+```sh
+$ echo "HELLO=World" > .env
+
+$ dotenvx run --redact -- codex exec 'Run `dotenvx get HELLO` and echo back just Hello VALUE' --skip-git-repo-check
+Hello [REDACTED]
+```
+
+see [Codex redaction guide](https://dotenvx.com/docs/cli/run-redact-codex-exec)
+
+</details>
 <details><summary>TypeScript 📘</summary><br>
 
 ```json
@@ -146,10 +174,10 @@ console.log(chalk.blue(`Hello ${process.env.HELLO}`))
 
 ```sh
 $ npm install
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx run -- npx tsx index.ts
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -293,14 +321,14 @@ Hello Test
 <details><summary>Deno 🦕</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "console.log('Hello ' + Deno.env.get('HELLO'))" > index.ts
 
 $ deno run --allow-env index.ts
 Hello undefined
 
 $ dotenvx run -- deno run --allow-env index.ts
-Hello Dotenvx
+Hello World
 ```
 
 > [!WARNING]
@@ -317,11 +345,11 @@ Hello Dotenvx
 <details><summary>Python 🐍</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'import os;print("Hello " + os.getenv("HELLO", ""))' > index.py
 
 $ dotenvx run -- python3 index.py
-Hello Dotenvx
+Hello World
 ```
 
 see [extended python guide](https://dotenvx.com/docs/quickstart)
@@ -330,11 +358,11 @@ see [extended python guide](https://dotenvx.com/docs/quickstart)
 <details><summary>PHP 🐘</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo '<?php echo "Hello {$_SERVER["HELLO"]}\n";' > index.php
 
 $ dotenvx run -- php index.php
-Hello Dotenvx
+Hello World
 ```
 
 see [extended php guide](https://dotenvx.com/docs/quickstart)
@@ -343,11 +371,11 @@ see [extended php guide](https://dotenvx.com/docs/quickstart)
 <details><summary>Ruby 💎</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'puts "Hello #{ENV["HELLO"]}"' > index.rb
 
 $ dotenvx run -- ruby index.rb
-Hello Dotenvx
+Hello World
 ```
 
 see [extended ruby guide](https://dotenvx.com/docs/quickstart)
@@ -356,11 +384,11 @@ see [extended ruby guide](https://dotenvx.com/docs/quickstart)
 <details><summary>Go 🐹</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'package main; import ("fmt"; "os"); func main() { fmt.Printf("Hello %s\n", os.Getenv("HELLO")) }' > main.go
 
 $ dotenvx run -- go run main.go
-Hello Dotenvx
+Hello World
 ```
 
 see [extended go guide](https://dotenvx.com/docs/quickstart)
@@ -369,11 +397,11 @@ see [extended go guide](https://dotenvx.com/docs/quickstart)
 <details><summary>Rust 🦀</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'fn main() {let hello = std::env::var("HELLO").unwrap_or("".to_string());println!("Hello {hello}");}' > src/main.rs
 
 $ dotenvx run -- cargo run
-Hello Dotenvx
+Hello World
 ```
 
 see [extended rust guide](https://dotenvx.com/docs/quickstart)
@@ -382,34 +410,34 @@ see [extended rust guide](https://dotenvx.com/docs/quickstart)
 <details><summary>Java ☕️</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'public class Index { public static void main(String[] args) { System.out.println("Hello " + System.getenv("HELLO")); } }' > index.java
 
 $ dotenvx run -- java index.java
-Hello Dotenvx
+Hello World
 ```
 
 </details>
 <details><summary>Clojure 🌿</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo '(println "Hello" (System/getenv "HELLO"))' > index.clj
 
 $ dotenvx run -- clojure -M index.clj
-Hello Dotenvx
+Hello World
 ```
 
 </details>
 <details><summary>Kotlin 📐</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo 'fun main() { val hello = System.getenv("HELLO") ?: ""; println("Hello $hello") }' > index.kt
 $ kotlinc index.kt -include-runtime -d index.jar
 
 $ dotenvx run -- java -jar index.jar
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -418,31 +446,31 @@ Hello Dotenvx
 ```sh
 $ dotnet new console -n HelloWorld -o HelloWorld
 $ cd HelloWorld
-$ echo "HELLO=Dotenvx" | Out-File -FilePath .env -Encoding utf8
+$ echo "HELLO=World" | Out-File -FilePath .env -Encoding utf8
 $ echo 'Console.WriteLine($"Hello {Environment.GetEnvironmentVariable("HELLO")}");' > Program.cs
 
 $ dotenvx run -- dotnet run
-Hello Dotenvx
+Hello World
 ```
 
 </details>
 <details><summary>Bash 🖥️</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx run --quiet -- sh -c 'echo Hello $HELLO'
-Hello Dotenvx
+Hello World
 ```
 
 </details>
 <details><summary>Fish 🐠</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx run --quiet -- sh -c 'echo Hello $HELLO'
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -476,7 +504,7 @@ Or in any image:
 
 ```Containerfile
 FROM node:latest
-RUN echo "HELLO=Dotenvx" > .env && echo "console.log('Hello ' + process.env.HELLO)" > index.js
+RUN echo "HELLO=World" > .env && echo "console.log('Hello ' + process.env.HELLO)" > index.js
 RUN curl -fsS https://dotenvx.sh/install.sh | sh
 CMD ["/usr/local/bin/dotenvx", "run", "--", "echo", "Hello $HELLO"]
 ```
@@ -568,7 +596,7 @@ $ npm run start
 > ./node_modules/.bin/dotenvx run -- node index.js
 
 [dotenvx@1.X.X] injecting env (1) from .env.production
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -656,7 +684,7 @@ More examples
 ```sh
 $ echo "HELLO=local" > .env.local
 
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx run -f .env.local -f .env -- node index.js
 [dotenvx@1.X.X] injecting env (1) from .env.local,.env
@@ -672,11 +700,11 @@ Note subsequent files do NOT override pre-existing variables defined in previous
 ```sh
 $ echo "HELLO=local" > .env.local
 
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx run -f .env.local -f .env --overload -- node index.js
 [dotenvx@1.X.X] injecting env (1) from .env.local,.env
-Hello Dotenvx
+Hello World
 ```
 
 Note that with `--overload` subsequent files DO override pre-existing variables defined in previous files.
@@ -788,13 +816,13 @@ More examples
 <details><summary>`.env`</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ dotenvx run -- node index.js
 [dotenvx@1.X.X] injecting env (2) from .env
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -831,13 +859,13 @@ Note the `DOTENV_PRIVATE_KEY_CI` ends with `_CI`. This instructs `dotenvx run` t
 <details><summary>combine multiple encrypted .env files</summary><br>
 
 ```sh
-$ dotenvx set HELLO Dotenvx -f .env
+$ dotenvx set HELLO World -f .env
 $ dotenvx set HELLO Production -f .env.production
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ DOTENV_PRIVATE_KEY="<.env private key>" DOTENV_PRIVATE_KEY_PRODUCTION="<.env.production private key>" dotenvx run -- node index.js
 [dotenvx@1.X.X] injecting env (3) from .env, .env.production
-Hello Dotenvx
+Hello World
 ```
 
 Note the `DOTENV_PRIVATE_KEY` instructs `dotenvx run` to load the `.env` file and the `DOTENV_PRIVATE_KEY_PRODUCTION` instructs it to load the `.env.production` file. See the pattern?
@@ -887,7 +915,7 @@ $ dotenvx run -f . -fk ../.. -- node index.js
 <details><summary>`--stdout`</summary><br>
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt --stdout
 $ dotenvx encrypt --stdout > .env.encrypted
 ```
@@ -1072,8 +1100,8 @@ DATABASE_URL postgres://yourusername@localhost/my_database
 Prevent your shell from expanding inline `$VARIABLES` before dotenvx has a chance to inject it. Use a subshell.
 
 ```sh
-$ dotenvx run --env="HELLO=Dotenvx" -- sh -c 'echo Hello $HELLO'
-Hello Dotenvx
+$ dotenvx run --env="HELLO=World" -- sh -c 'echo Hello $HELLO'
+Hello World
 ```
 
 </details>
@@ -1117,13 +1145,13 @@ For example, when missing a custom .env file:
 
 ```sh
 $ dotenvx run -f .env.missing -- echo $HELLO
-[MISSING_ENV_FILE] missing file (/Users/scottmotte/Code/dotenvx/playground/apr-16/.env.missing). fix: [echo "HELLO=Dotenvx" > .env.missing]
+[MISSING_ENV_FILE] missing file (/Users/scottmotte/Code/dotenvx/playground/apr-16/.env.missing). fix: [echo "HELLO=World" > .env.missing]
 ```
 
 or when missing a KEY:
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx get GOODBYE
 [MISSING_KEY] missing key (GOODBYE)
 ```
@@ -1146,7 +1174,7 @@ Compose multiple `.env` files for environment variables loading, as you need.
 
 ```sh
 $ echo "HELLO=local" > .env.local
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ dotenvx run -f .env.local -f .env -- node index.js
@@ -1162,7 +1190,7 @@ Note subsequent files do NOT override pre-existing variables defined in previous
 Set environment variables as a simple `KEY=value` string pair.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ dotenvx run --env HELLO=String -f .env -- node index.js
@@ -1170,6 +1198,70 @@ $ dotenvx run --env HELLO=String -f .env -- node index.js
 Hello String
 ```
 
+</details>
+<details><summary>`run --redact`</summary><br>
+
+Run any command with real environment variables while automatically redacting their values from stdout and stderr. Keys ending in `_PLAIN` are left visible.
+
+```sh
+$ echo "SECRET=super-secret-value" > .env
+$ echo "VISIBLE_PLAIN=visible-value" >> .env
+$ echo "console.log(process.env.SECRET, process.env.VISIBLE_PLAIN)" > index.js
+
+$ dotenvx run --redact --quiet -- node index.js
+[REDACTED] visible-value
+```
+
+Redaction is off by default. It applies to every key declared in `.env` files and `--env` flags unless the key ends in `_PLAIN`. If an existing environment variable takes precedence, its effective value is redacted too. Matching is exact, so transformed or derived values are not redacted.
+
+When stdin, stdout, and stderr are attached to a terminal, dotenvx preserves interactive behavior on macOS and Linux systems with `script` available. Piped and redirected commands continue to use normal stdin, stdout, and stderr streams.
+
+</details>
+<details><summary>`run --redact -- claude -p`</summary><br>
+
+Run Claude in print mode with real environment variables while redacting any values it prints.
+
+```sh
+$ echo "SECRET=super-secret-value" > .env
+
+$ dotenvx run --redact --quiet -- claude -p 'Print the value of $SECRET'
+[REDACTED]
+```
+
+</details>
+<details><summary>`run --redact -- claude`</summary><br>
+
+Start a fully interactive Claude session. Claude receives the real values, but any values it prints are redacted.
+
+```sh
+$ echo "SECRET=super-secret-value" > .env
+
+$ dotenvx run --redact --quiet -- claude
+```
+
+</details>
+<details><summary>`run --redact -- codex exec`</summary><br>
+
+Run Codex non-interactively with real environment variables while redacting any values it prints.
+
+```sh
+$ echo "SECRET=super-secret-value" > .env
+
+$ dotenvx run --redact --quiet -- codex exec 'Print the value of $SECRET'
+[REDACTED]
+```
+
+</details>
+<details><summary>`run --redact -- codex`</summary><br>
+
+Start a fully interactive Codex session. Codex receives the real values, but any values it prints are redacted.
+
+```sh
+$ echo "SECRET=super-secret-value" > .env
+
+$ dotenvx run --redact --quiet -- codex
+```
+
 </details>
 <details><summary>`run --overload`</summary><br>
 
@@ -1177,12 +1269,12 @@ Override existing env variables. These can be variables already on your machine
 
 ```sh
 $ echo "HELLO=local" > .env.local
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ dotenvx run -f .env.local -f .env --overload -- node index.js
 [dotenvx@1.X.X] injecting env (1) from .env.local, .env
-Hello Dotenvx
+Hello World
 ```
 
 Note that with `--overload` subsequent files DO override pre-existing variables defined in previous files.
@@ -1370,7 +1462,7 @@ Exit with code `1` if any errors are encountered - like a missing .env file or d
 $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
 $ dotenvx run -f .env.missing --strict -- node index.js
-[MISSING_ENV_FILE] missing file (/path/to/.env.missing). fix: [echo "HELLO=Dotenvx" > .env.missing]
+[MISSING_ENV_FILE] missing file (/path/to/.env.missing). fix: [echo "HELLO=World" > .env.missing]
 ```
 
 This can be useful in `ci` scripts where you want to fail the ci if your `.env` file could not be decrypted at runtime.
@@ -1466,29 +1558,11 @@ Specify path to `.env.keys`. This is useful with monorepos.
 ```sh
 $ mkdir -p apps/app1
 $ touch apps/app1/.env
-$ dotenvx set HELLO Dotenvx -fk .env.keys -f apps/app1/.env
+$ dotenvx set HELLO World -fk .env.keys -f apps/app1/.env
 
 $ dotenvx run -fk .env.keys -f apps/app1/.env -- yourcommand
 ```
 
-</details>
-<details><summary>`run --redact`</summary><br>
-
-Redact successfully decrypted values from the command's stdout and stderr. The command still receives the real values; only its output is filtered.
-
-```sh
-$ touch .env
-$ dotenvx set SECRET super-secret-value
-$ echo "console.log(process.env.SECRET)" > index.js
-
-$ dotenvx run --redact --quiet -- node index.js
-[REDACTED]
-```
-
-Redaction is off by default. It applies only to values that were encrypted, successfully decrypted, and injected. Plaintext values are left unchanged. Matching is exact, so transformed or derived values are not redacted.
-
-Because redaction filters stdout and stderr, interactive commands that require a TTY may behave differently.
-
 </details>
 <details><summary>`run --mask`</summary><br>
 
@@ -1537,7 +1611,7 @@ $ dotenvx run --no-armor -- yourcommand
 Return a single environment variable's value.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx get HELLO
 World
@@ -1572,7 +1646,7 @@ $ dotenvx get HELLO --no-native
 Return a single environment variable's value from a specific `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "HELLO=production" > .env.production
 
 $ dotenvx get HELLO -f .env.production
@@ -1597,7 +1671,7 @@ Specify path to `.env.keys`. This is useful with monorepos.
 ```sh
 $ mkdir -p apps/app1
 $ touch apps/app1/.env
-$ dotenvx set HELLO Dotenvx -fk .env.keys -f apps/app1/.env
+$ dotenvx set HELLO World -fk .env.keys -f apps/app1/.env
 
 $ dotenvx get HELLO -fk .env.keys -f apps/app1/.env
 world
@@ -1620,7 +1694,7 @@ String
 Return a single environment variable's value where each found value is overloaded.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "HELLO=production" > .env.production
 
 $ dotenvx get HELLO -f .env.production --env HELLO=String -f .env --overload
@@ -1706,10 +1780,10 @@ development local
 Return a json response of all key/value pairs in a `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx get
-{"HELLO":"Dotenvx"}
+{"HELLO":"World"}
 ```
 
 </details>
@@ -1718,11 +1792,11 @@ $ dotenvx get
 Return a shell formatted response of all key/value pairs in a `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "KEY=value" >> .env
 
 $ dotenvx get --format shell
-HELLO=Dotenvx KEY=value
+HELLO=World KEY=value
 ```
 
 This can be useful when combined with `env` on the command line.
@@ -1748,11 +1822,11 @@ Hello value World
 Return an `eval`-ready shell formatted response of all key/value pairs in a `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "KEY=value" >> .env
 
 $ dotenvx get --format eval
-HELLO="Dotenvx"
+HELLO="World"
 KEY="value"
 ```
 
@@ -1775,10 +1849,10 @@ Be careful with `eval` as it allows for arbitrary execution of commands. Prefer
 Return preset machine envs as well.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx get --all
-{"PWD":"/some/file/path","USER":"username","LIBRARY_PATH":"/usr/local/lib", ..., "HELLO":"Dotenvx"}
+{"PWD":"/some/file/path","USER":"username","LIBRARY_PATH":"/usr/local/lib", ..., "HELLO":"World"}
 ```
 
 </details>
@@ -1787,7 +1861,7 @@ $ dotenvx get --all
 Make the output more readable - pretty print it.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx get --all --pretty-print
 {
@@ -1795,7 +1869,7 @@ $ dotenvx get --all --pretty-print
   "USER": "username",
   "LIBRARY_PATH": "/usr/local/lib",
   ...,
-  "HELLO": "Dotenvx"
+  "HELLO": "World"
 }
 ```
 
@@ -1807,7 +1881,7 @@ Set an encrypted key/value (on by default).
 ```sh
 $ touch .env
 
-$ dotenvx set HELLO Dotenvx
+$ dotenvx set HELLO World
 set HELLO with encryption (.env)
 ```
 
@@ -1834,7 +1908,7 @@ Specify path to `.env.keys`. This is useful with monorepos.
 $ mkdir -p apps/app1
 $ touch apps/app1/.env
 
-$ dotenvx set HELLO Dotenvx -fk .env.keys -f apps/app1/.env
+$ dotenvx set HELLO World -fk .env.keys -f apps/app1/.env
 set HELLO with encryption (.env)
 ```
 
@@ -1883,7 +1957,7 @@ Set a plaintext key/value.
 ```sh
 $ touch .env
 
-$ dotenvx set HELLO Dotenvx --plain
+$ dotenvx set HELLO World --plain
 set HELLO (.env)
 ```
 
@@ -1895,7 +1969,7 @@ Set a plaintext key/value inside an encrypted `.env` file by ending the key with
 ```sh
 $ touch .env
 
-$ dotenvx set HELLO_PLAIN Dotenvx
+$ dotenvx set HELLO_PLAIN World
 set HELLO_PLAIN (.env)
 ```
 
@@ -1907,7 +1981,7 @@ Keys ending in `_PLAIN` are not encrypted by `dotenvx set` or `dotenvx encrypt`.
 Turn off OS secret store lookups for set.
 
 ```sh
-$ dotenvx set HELLO Dotenvx --no-native
+$ dotenvx set HELLO World --no-native
 ```
 
 </details>
@@ -1916,7 +1990,7 @@ $ dotenvx set HELLO Dotenvx --no-native
 Encrypt the contents of a `.env` file to an encrypted `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx encrypt
 ◈ encrypted (.env) + local key (.env.keys)
@@ -1932,7 +2006,7 @@ Works with unreadable `.env.keys` when `.env` already contains `DOTENV_PUBLIC_KE
 Encrypt the contents of a specified `.env` file to an encrypted `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "HELLO=Production" > .env.production
 
 $ dotenvx encrypt -f .env.production
@@ -1968,7 +2042,7 @@ Specify path to `.env.keys`. This is useful with monorepos.
 
 ```sh
 $ mkdir -p apps/app1
-$ echo "HELLO=Dotenvx" > apps/app1/.env
+$ echo "HELLO=World" > apps/app1/.env
 
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
 ◈ encrypted (apps/app1/.env)
@@ -1993,7 +2067,7 @@ $ dotenvx run -fk ../../.env.keys -f .env
 Specify the key(s) to encrypt by passing `--key`.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHELLO2=Universe" > .env
+$ echo "HELLO=World\nHELLO2=Universe" > .env
 
 $ dotenvx encrypt -k HELLO2
 ◈ encrypted (.env)
@@ -2002,7 +2076,7 @@ $ dotenvx encrypt -k HELLO2
 Even specify a glob pattern.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 
 $ dotenvx encrypt -k "HE*"
 ◈ encrypted (.env)
@@ -2014,7 +2088,7 @@ $ dotenvx encrypt -k "HE*"
 Specify the key(s) to NOT encrypt by passing `--exclude-key`.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHELLO2=Universe" > .env
+$ echo "HELLO=World\nHELLO2=Universe" > .env
 
 $ dotenvx encrypt -ek HELLO
 ◈ encrypted (.env)
@@ -2023,7 +2097,7 @@ $ dotenvx encrypt -ek HELLO
 Even specify a glob pattern.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 
 $ dotenvx encrypt -ek "HO*"
 ◈ encrypted (.env)
@@ -2035,7 +2109,7 @@ $ dotenvx encrypt -ek "HO*"
 Skip encryption for keys ending in `_PLAIN`.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHELLO_PLAIN=visible" > .env
+$ echo "HELLO=World\nHELLO_PLAIN=visible" > .env
 
 $ dotenvx encrypt
 ◈ encrypted (.env)
@@ -2049,7 +2123,7 @@ $ dotenvx encrypt
 Encrypt the contents of a `.env` file and send to stdout.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt --stdout
 #/-------------------[DOTENV_PUBLIC_KEY]--------------------/
 #/            public-key encryption for .env files          /
@@ -2063,7 +2137,7 @@ HELLO="encrypted:BDqDBibm4wsYqMpCjTQ6BsDHmMadg9K3dAt+Z9HPMfLEIRVz50hmLXPXRuDBXaJ
 or send to a file:
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt --stdout > somefile.txt
 ```
 
@@ -2073,7 +2147,7 @@ $ dotenvx encrypt --stdout > somefile.txt
 Decrypt the contents of an encrypted `.env` file to an unencrypted `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt
 ◈ encrypted (.env)
 $ dotenvx decrypt
@@ -2096,7 +2170,7 @@ $ dotenvx decrypt --no-native
 Decrypt the contents of a specified encrypted `.env` file to an unencrypted `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "HELLO=Production" > .env.production
 
 $ dotenvx encrypt -f .env.production
@@ -2112,7 +2186,7 @@ Specify path to `.env.keys`. This is useful with monorepos.
 
 ```sh
 $ mkdir -p apps/app1
-$ echo "HELLO=Dotenvx" > apps/app1/.env
+$ echo "HELLO=World" > apps/app1/.env
 
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
 ◈ encrypted (apps/app1/.env)
@@ -2126,7 +2200,7 @@ $ dotenvx decrypt -fk .env.keys -f apps/app1/.env
 Decrypt the contents of a specified key inside an encrypted `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
 ◈ encrypted (.env)
 $ dotenvx decrypt -k HELLO
@@ -2136,7 +2210,7 @@ $ dotenvx decrypt -k HELLO
 Even specify a glob pattern.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
 ◈ encrypted (.env)
 $ dotenvx decrypt -k "HE*"
@@ -2149,7 +2223,7 @@ $ dotenvx decrypt -k "HE*"
 Decrypt the contents inside an encrypted `.env` file except for an excluded key.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
 ◈ encrypted (.env)
 $ dotenvx decrypt -ek HOLA
@@ -2159,7 +2233,7 @@ $ dotenvx decrypt -ek HOLA
 Even specify a glob pattern.
 
 ```sh
-$ echo "HELLO=Dotenvx\nHOLA=Mundo" > .env
+$ echo "HELLO=World\nHOLA=Mundo" > .env
 $ dotenvx encrypt
 ◈ encrypted (.env)
 $ dotenvx decrypt -ek "HO*"
@@ -2179,7 +2253,7 @@ $ dotenvx decrypt --stdout
 #/----------------------------------------------------------/
 DOTENV_PUBLIC_KEY="034af93e93708b994c10f236c96ef88e47291066946cce2e8d98c9e02c741ced45"
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 or send to a file:
@@ -2211,7 +2285,7 @@ Pass a number to control how many characters are visible, such as `--mask 0` to
 Print public/private keys for `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt
 
 $ dotenvx keypair
@@ -2248,7 +2322,7 @@ Specify path to `.env.keys`. This is useful for printing public/private keys for
 
 ```sh
 $ mkdir -p apps/app1
-$ echo "HELLO=Dotenvx" > apps/app1/.env
+$ echo "HELLO=World" > apps/app1/.env
 $ dotenvx encrypt -fk .env.keys -f apps/app1/.env
 
 $ dotenvx keypair -fk .env.keys -f apps/app1/.env
@@ -2261,7 +2335,7 @@ $ dotenvx keypair -fk .env.keys -f apps/app1/.env
 Print specific keypair for `.env` file.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenvx encrypt
 
 $ dotenvx keypair DOTENV_PRIVATE_KEY
@@ -2274,7 +2348,7 @@ $ dotenvx keypair DOTENV_PRIVATE_KEY
 Print a shell formatted response of public/private keys.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ dotenx encrypt
 
 $ dotenvx keypair --format shell
@@ -2374,7 +2448,7 @@ $ dotenvx ls --json > dotenv-files.json
 In one command, generate a `.env.example` file from your current `.env` file contents.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 
 $ dotenvx genexample
 ▣ generated (.env.example)
@@ -2391,7 +2465,7 @@ HELLO=""
 Pass multiple `.env` files to generate your `.env.example` file from the combination of their contents.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ echo "DB_HOST=example.com" > .env.production
 
 $ dotenvx genexample -f .env -f .env.production
@@ -2410,7 +2484,7 @@ DB_HOST=""
 Generate a `.env.example` file inside the specified directory. Useful for monorepos.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ mkdir -p apps/backend
 $ echo "HELLO=Backend" > apps/backend/.env
 
@@ -2469,7 +2543,7 @@ $ dotenvx precommit --install
 Prevent `.env` files from being committed to code inside a specified path to a directory.
 
 ```sh
-$ echo "HELLO=Dotenvx" > .env
+$ echo "HELLO=World" > .env
 $ mkdir -p apps/backend
 $ echo "HELLO=Backend" > apps/backend/.env
 
@@ -2774,7 +2848,7 @@ Usage: @dotenvx/dotenvx run [options]
 inject env at runtime [dotenvx run -- yourcommand]
 
 Options:
-  -e, --env <strings...>            environment variable(s) set as string (example: "HELLO=Dotenvx") (default: [])
+  -e, --env <strings...>            environment variable(s) set as string (example: "HELLO=World") (default: [])
   -f, --env-file <paths...>         path(s) to your env file(s) (default: [])
   -fv, --env-vault-file <paths...>  path(s) to your .env.vault file(s) (default: [])
   -o, --overload                    override existing env variables
@@ -2790,12 +2864,12 @@ Examples:
 
 Try it:
 
-  $ echo "HELLO=Dotenvx" > .env
+  $ echo "HELLO=World" > .env
   $ echo "console.log('Hello ' + process.env.HELLO)" > index.js
 
   $ dotenvx run -- node index.js
   [dotenvx@1.X.X] injecting env (1) from .env
-  Hello Dotenvx
+  Hello World
 ```
 
 </details>
@@ -2820,7 +2894,7 @@ Use directly in node.js code.
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -2833,7 +2907,7 @@ console.log(`Hello ${process.env.HELLO}`)
 ```sh
 $ node index.js
 [dotenvx@1.X.X] injecting env (1) from .env
-Hello Dotenvx
+Hello World
 ```
 
 It defaults to looking for a `.env` file.
@@ -2877,7 +2951,7 @@ HELLO="Me"
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -2909,7 +2983,7 @@ HELLO="Me"
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -2926,7 +3000,7 @@ console.log(`Hello ${process.env.HELLO}`)
 ```sh
 $ node index.js
 [dotenvx@1.X.X] injecting env (1) from .env.local, .env
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -2936,7 +3010,7 @@ Suppress all output (except errors).
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -2953,7 +3027,7 @@ console.log(`Hello ${process.env.HELLO}`)
 ```sh
 $ node index.js
 Error: [MISSING_ENV_FILE] missing .env.missing file (/path/to/.env.missing)
-Hello Dotenvx
+Hello World
 ```
 
 You can also set `DOTENV_CONFIG_QUIET=true`.
@@ -2961,7 +3035,7 @@ You can also set `DOTENV_CONFIG_QUIET=true`.
 ```sh
 $ DOTENV_CONFIG_QUIET=true node index.js
 Error: [MISSING_ENV_FILE] missing .env.missing file (/path/to/.env.missing)
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -2971,7 +3045,7 @@ Exit with code `1` if any errors are encountered - like a missing .env file or d
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -2997,7 +3071,7 @@ Use `ignore` to suppress specific errors like `MISSING_ENV_FILE`.
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -3014,7 +3088,7 @@ console.log(`Hello ${process.env.HELLO}`)
 ```sh
 $ node index.js
 [dotenvx@1.X.X] injecting env (1) from .env
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -3024,7 +3098,7 @@ Use `envKeysFile` to customize the path to your `.env.keys` file. This is useful
 
 ```ini
 # .env
-HELLO="Dotenvx"
+HELLO="World"
 ```
 
 ```js
@@ -3110,14 +3184,14 @@ Parse a `.env` string directly in node.js code.
 ```js
 // index.js
 const dotenvx = require('@dotenvx/dotenvx')
-const src = 'HELLO=Dotenvx'
+const src = 'HELLO=World'
 const parsed = dotenvx.parse(src)
 console.log(`Hello ${parsed.HELLO}`)
 ```
 
 ```sh
 $ node index.js
-Hello Dotenvx
+Hello World
 ```
 
 </details>
@@ -3146,14 +3220,14 @@ Decrypt an encrypted `.env` string with `privateKey`.
 ```js
 // index.js
 const dotenvx = require('@dotenvx/dotenvx')
-const src = 'HELLO="encrypted:BE9Y7LKANx77X1pv1HnEoil93fPa5c9rpL/1ps48uaRT9zM8VR6mHx9yM+HktKdsPGIZELuZ7rr2mn1gScsmWitppAgE/1lVprNYBCqiYeaTcKXjDUXU5LfsEsflnAsDhT/kWG1l"'
+const src = 'HELLO="encrypted:BEiK4SwVe4rznIrZKW7qcnEBxo6Qxy0gv8xXiPN90N1jjhwkyVqzgoszZEI00tEeRWHsfQyJbCVy11qOEkkmERWbvOBzHve8/7WmVwyo5Z3HIOhlI45C+zmFgqmS2zMw9GPzHd9e"'
 const parsed = dotenvx.parse(src, { privateKey: 'a4547dcd9d3429615a3649bb79e87edb62ee6a74b007075e9141ae44f5fb412c' })
 console.log(`Hello ${parsed.HELLO}`)
 ```
 
 ```sh
 $ node index.js
-Hello Dotenvx
+Hello World
 ```
 </details>
 <details><summary>`set(KEY, value)`</summary><br>
@@ -3163,7 +3237,7 @@ Programmatically set an environment variable.
 ```js
 // index.js
 const dotenvx = require('@dotenvx/dotenvx')
-dotenvx.set('HELLO', 'Dotenvx', { path: '.env' })
+dotenvx.set('HELLO', 'World', { path: '.env' })
 ```
 
 </details>
@@ -3174,7 +3248,7 @@ Programmatically set a plaintext environment variable.
 ```js
 // index.js
 const dotenvx = require('@dotenvx/dotenvx')
-dotenvx.set('HELLO', 'Dotenvx', { plain: true })
+dotenvx.set('HELLO', 'World', { plain: true })
 ```
 
 </details>

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.11.0",
+  "version": "2.11.2",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -43,7 +43,7 @@
   },
   "funding": "https://dotenvx.com",
   "dependencies": {
-    "@dotenvx/primitives": "^1.8.1",
+    "@dotenvx/primitives": "^1.9.0",
     "@dotenvx/tooling": "^1.0.2",
     "yocto-spinner": "^1.2.1"
   },

package/src/cli/actions/run.js

@@ -13,7 +13,7 @@ const resolveEnvKeysFile = require('../../lib/helpers/resolveEnvKeysFile')
 const mask = require('../../lib/helpers/mask')
 const maskEnvSrc = require('../../lib/helpers/maskEnvSrc')
 const maskProcessedEnvs = require('../../lib/helpers/maskProcessedEnvs')
-const decryptedValues = require('../../lib/helpers/decryptedValues')
+const redactedValues = require('../../lib/helpers/redactedValues')
 const { redactOutput } = require('../../lib/helpers/redactOutput')
 
 const { determine } = require('./../../lib/helpers/envResolution')
@@ -127,7 +127,7 @@ async function run () {
     })
 
     if (redactEnabled) {
-      sensitiveValues = decryptedValues(processedEnvs)
+      sensitiveValues = redactedValues(processedEnvs)
     }
 
     if (maskEnabled) {

package/src/cli/dotenvx.js

@@ -64,13 +64,13 @@ program.command('run')
   .option('-e, --env <strings...>', 'environment variable(s) set as string (example: "HELLO=World")', collectEnvs('env'), [])
   .option('-f, --env-file <path>', 'path(s) to your env file(s)', collectEnvs('envFile'), [])
   .option('-fk, --env-keys-file <path>', 'path(s) to your .env.keys file(s) (default: same path as your env file)', collectEnvKeys)
+  .option('--redact', 'redact injected values except keys ending in _PLAIN', false)
   .option('-o, --overload', 'override existing env variables (by default, existing env vars take precedence over .env files)')
   .option('--strict', 'process.exit(1) on any errors', false)
   .option('--convention <name>', 'load a .env convention (available conventions: [\'nextjs\', \'flow\'])')
   .option('--ignore <errorCodes...>', 'error code(s) to ignore (example: --ignore=MISSING_ENV_FILE)')
   .option('--token <token>', 'set Armor ⛨ token')
   .option('--mask [characters]', 'inject masked values, optionally setting visible characters')
-  .option('--redact', 'redact decrypted values from command output', false)
   .option('--no-armor', 'disable Dotenvx Armor features')
   .option('--no-native', 'disable OS secret store features')
   .action(function (...args) {

package/src/lib/helpers/executeCommand.js

@@ -4,6 +4,7 @@ const execute = require('./../../lib/helpers/execute')
 const { logger } = require('./../../shared/logger')
 const Errors = require('./errors')
 const { createRedactedStreamWriter, redactOutput } = require('./redactOutput')
+const ptyCommand = require('./ptyCommand')
 
 async function executeCommand (commandArgs, env, sensitiveValues = []) {
   const FORWARD_SIGNAL_GRACE_MS = 1000
@@ -133,8 +134,15 @@ async function executeCommand (commandArgs, env, sensitiveValues = []) {
 
     const redactStdout = sensitiveValues.length > 0
     const redactStderr = sensitiveValues.length > 0
-
-    child = execute.execa(commandArgs[0], commandArgs.slice(1), {
+    const usePty = redactStdout && Boolean(
+      process.stdin && process.stdin.isTTY &&
+      process.stdout && process.stdout.isTTY &&
+      process.stderr && process.stderr.isTTY
+    )
+    const ptyArgs = usePty ? ptyCommand(commandArgs) : null
+    const executedArgs = ptyArgs || commandArgs
+
+    child = execute.execa(executedArgs[0], executedArgs.slice(1), {
       stdio: ['inherit', redactStdout ? 'pipe' : 'inherit', redactStderr ? 'pipe' : 'inherit'],
       buffer: false,
       env: { ...process.env, ...env }

package/src/lib/helpers/kits/sample.js

@@ -1,23 +1,5 @@
 const SAMPLE_ENV_KIT = `
-HELLO="Dotenvx"
-
-# ── Hosting ──────────────────────────────────────
-AWS_ACCESS_KEY_ID="xxxx"
-AWS_SECRET_ACCESS_KEY="xxxx"
-DATABASE_URL="postgresql://postgres:pass@db.ref.supabase.co:5432/postgres"
-VERCEL_TOKEN="vcp_xxxx"
-
-# ── AI ───────────────────────────────────────────
-OPENAI_API_KEY="sk-xxxx"
-ANTHROPIC_API_KEY="sk-ant-xxxx"
-
-# ── Infrastructure ───────────────────────────────
-AUTH0_CLIENT_ID="xxxx"
-AUTH0_CLIENT_SECRET="xxxx"
-RESEND_API_KEY="re_xxxx"
-STRIPE_API_KEY="sk_test_xxxx"
-FLAGSMITH_ENV_ID="xxxx"
-SENTRY_DSN="https://hex@o1234.ingest.us.sentry.io/1234567"
+HELLO="World"
 `.trimStart()
 
 module.exports = SAMPLE_ENV_KIT

package/src/lib/helpers/ptyCommand.js

@@ -0,0 +1,27 @@
+const path = require('path')
+const { which } = require('@dotenvx/tooling')
+
+function shellQuote (value) {
+  const escapedQuote = ['\'', '"', '\'', '"', '\''].join('')
+  return `'${`${value}`.replace(/'/g, escapedQuote)}'`
+}
+
+function ptyCommand (commandArgs, platform = process.platform) {
+  if (!['darwin', 'linux'].includes(platform)) return null
+
+  let script
+  try {
+    script = path.resolve(which.sync('script'))
+  } catch (e) {
+    return null
+  }
+
+  if (platform === 'darwin') {
+    return [script, '-q', '/dev/null', ...commandArgs]
+  }
+
+  // util-linux script only accepts the child command as a shell string.
+  return [script, '-qefc', commandArgs.map(shellQuote).join(' '), '/dev/null']
+}
+
+module.exports = ptyCommand

package/src/lib/helpers/redactedValues.js

@@ -0,0 +1,23 @@
+const isPlainKey = require('./cryptography/isPlainKey')
+
+function redactedValues (processedEnvs) {
+  const result = new Set()
+
+  for (const processedEnv of processedEnvs || []) {
+    const values = {
+      ...(processedEnv.injected || {}),
+      ...(processedEnv.existed || {})
+    }
+
+    for (const [key, value] of Object.entries(values)) {
+      if (isPlainKey(key)) continue
+      if (value === undefined || value === null || value === '') continue
+
+      result.add(`${value}`)
+    }
+  }
+
+  return [...result]
+}
+
+module.exports = redactedValues

package/src/lib/helpers/decryptedValues.js

@@ -1,32 +0,0 @@
-const { encrypted, scan } = require('@dotenvx/primitives')
-
-function decryptedValues (processedEnvs) {
-  const result = new Set()
-
-  for (const processedEnv of processedEnvs || []) {
-    const src = processedEnv.src || processedEnv.string
-    if (!src) continue
-
-    let rawParsed
-    try {
-      rawParsed = scan(src).parsed
-    } catch (error) {
-      continue
-    }
-
-    for (const [key, rawValues] of Object.entries(rawParsed || {})) {
-      const rawValue = rawValues[rawValues.length - 1]
-      const injectedValue = (processedEnv.injected || {})[key]
-
-      if (!encrypted(rawValue)) continue
-      if (injectedValue === undefined || injectedValue === null || injectedValue === '') continue
-      if (encrypted(injectedValue)) continue
-
-      result.add(`${injectedValue}`)
-    }
-  }
-
-  return [...result]
-}
-
-module.exports = decryptedValues