@dotenvx/dotenvx 2.18.0 → 2.19.0

package/CHANGELOG.md

@@ -2,7 +2,17 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.18.0...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.19.0...main)
+
+## [2.19.0](https://github.com/dotenvx/dotenvx/compare/v2.18.1...v2.19.0) (2026-07-27)
+
+### Added
+
+* Add `dotenvx armor open` to open armored key details in browser ([#930](https://github.com/dotenvx/dotenvx/pull/930))
+
+## [2.18.1](https://github.com/dotenvx/dotenvx/compare/v2.18.0...v2.18.1) (2026-07-26)
+
+* Patch injected message when preset `encrypted:` value ([#927](https://github.com/dotenvx/dotenvx/issues/927))
 
 ## [2.18.0](https://github.com/dotenvx/dotenvx/compare/v2.17.4...v2.18.0) (2026-07-25)
 

package/README.md

@@ -3497,11 +3497,11 @@ Set `mask: 0` to fully mask values.
 
  
 
-### Settings ⚙️
+### More
 
-There are global settings available that can be configured as environment variables.
+<details><summary>Settings ⚙️</summary><br>
 
-<details><summary>Environment variables</summary><br>
+There are global settings available that can be configured as environment variables.
 
 ```ini
 # config
@@ -3521,6 +3521,44 @@ DOTENVX_NO_BITWARDEN= # set to "true" to turn off Bitwarden support
 BW_SESSION= # set to bitwarden session token to bypass password prompt
 ```
 
+</details>
+<details><summary>Error Codes 🚨</summary><br>
+
+Dotenvx errors begin with a stable code in square brackets like `[MISSING_ENV_FILE]`.
+
+```ini
+# error codes
+1PASSWORD_FAILED= # a value could not be resolved with the 1Password CLI
+ACCESS_APPROVAL_TIMEOUT= # an Armor access-approval request timed out
+BITWARDEN_FAILED= # a value could not be resolved with the Bitwarden CLI
+COMMAND_EXITED_WITH_CODE= # the command run by dotenvx exited with a non-zero status
+COMMAND_SUBSTITUTION_FAILED= # a $(command) expression in an environment value could not be evaluated
+DECRYPTION_FAILED= # an encrypted value could not be decrypted
+FILE_NOT_WRITABLE= # dotenvx could not write to the target file
+INVALID_COLOR= # the requested terminal color is invalid
+INVALID_CONVENTION= # the requested environment-file convention is invalid
+INVALID_PASSPHRASE= # a locked private key could not be unlocked with the supplied passphrase
+INVALID_PRIVATE_KEY= # a private key is malformed or otherwise invalid
+INVALID_PUBLIC_KEY= # a public key is malformed or otherwise invalid
+MALFORMED_ENCRYPTED_DATA= # the encrypted value is malformed
+MISPAIRED_PRIVATE_KEY= # a private key does not match the existing public key
+MISSING_DIRECTORY= # the requested directory does not exist
+MISSING_ENV_EXAMPLE= # the required .env.example file does not exist
+MISSING_ENV_FILE= # a requested environment file does not exist
+MISSING_ENV_FILES= # no .env* files were found
+MISSING_ENV_KEYS_FILE= # the requested .env.keys file does not exist
+MISSING_KEY= # a requested environment key does not exist
+MISSING_LOG_LEVEL= # the requested log level is not supported
+MISSING_PRIVATE_KEY= # the private key required to decrypt a value is missing
+MISSING_PUBLIC_KEY= # the public key required to encrypt a value is missing
+MISSING_REQUIRED= # validation detail for which required variables are missing; surfaced by VALIDATION_FAILED
+MISSING_VALUE= # no value was supplied for a key
+NOT_FOUND= # a private key was not found in the native secret store
+PRECOMMIT_HOOK_MODIFY_FAILED= # dotenvx could not update the pre-commit hook
+VALIDATION_FAILED= # one or more required variables declared by .env.example are missing
+WRONG_PRIVATE_KEY= # the supplied private key cannot decrypt the value
+```
+
 </details>
 
 &nbsp;

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.18.0",
+  "version": "2.19.0",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -52,7 +52,7 @@
   },
   "funding": "https://dotenvx.com",
   "dependencies": {
-    "@dotenvx/primitives": "^2.1.0",
+    "@dotenvx/primitives": "^2.1.1",
     "@dotenvx/tooling": "^1.0.3",
     "yocto-spinner": "^1.2.1"
   },
@@ -62,9 +62,13 @@
     "esbuild": "^0.28.1",
     "proxyquire": "^2.1.3",
     "sinon": "^14.0.1",
-    "standard": "^17.1.0",
+    "standard": "^17.1.2",
     "standard-version": "^9.5.0",
-    "tap": "^21.0.1"
+    "tap": "^21.7.4"
+  },
+  "overrides": {
+    "brace-expansion": "^5.0.8",
+    "minimatch": "^10.2.5"
   },
   "publishConfig": {
     "access": "public",

package/src/cli/actions/armor/open.js

@@ -0,0 +1,28 @@
+const { logger } = require('../../../shared/logger')
+const Session = require('./../../../db/session')
+const ArmorOpen = require('./../../../lib/services/armorOpen')
+const openUrl = require('../../../lib/helpers/openUrl')
+const armoredKeyDisplay = require('../../../lib/helpers/armoredKeyDisplay')
+
+async function open () {
+  const options = this.opts()
+
+  logger.debug(`options: ${JSON.stringify(options)}`)
+
+  const sesh = new Session()
+  await sesh.notifyUpdate()
+  const hostname = options.hostname || sesh.hostname()
+
+  try {
+    const { url, publicKeyValue } = new ArmorOpen(hostname, options.envFile).run()
+    const keyDisplay = armoredKeyDisplay(publicKeyValue)
+
+    await openUrl(url)
+    logger.success(`◌ opened (${keyDisplay})`)
+  } catch (error) {
+    logger.error(error.message)
+    process.exit(1)
+  }
+}
+
+module.exports = open

package/src/cli/commands/armor.js

@@ -61,6 +61,15 @@ function configureArmorCommand (armor) {
       return require('./../actions/armor/pull').apply(this, args)
     })
 
+  // dotenvx armor open
+  armor
+    .command('open')
+    .description('open armored key (in browser)')
+    .option('-f, --env-file <path>', 'path to your env file')
+    .action(function (...args) {
+      return require('./../actions/armor/open').apply(this, args)
+    })
+
   // dotenvx armor move
   armor
     .command('move')

package/src/lib/helpers/buildApiError.js

@@ -1,12 +1,15 @@
 function buildApiError (statusCode, json) {
   const code = json.error.code || statusCode.toString()
   const message = `[${code}] ${json.error.message}`
-  const help = `[${code}] ${json.error.help || JSON.stringify(json)}`
+  const help = json.error.help ? `fix: [${json.error.help}]` : `[${code}] ${JSON.stringify(json)}`
   const meta = json.error.meta
 
   const error = new Error(message)
   error.code = code
   error.help = help
+  if (json.error.help) {
+    error.messageWithHelp = `${message}. ${help}`
+  }
   error.meta = meta
   error.json = json
 

package/src/lib/services/armorOpen.js

@@ -0,0 +1,26 @@
+const keynames = require('../conventions/keynames')
+const readEnvKey = require('../helpers/readEnvKey')
+
+class ArmorOpen {
+  constructor (hostname, envFile = '.env') {
+    this.hostname = hostname
+    this.envFile = envFile
+  }
+
+  run () {
+    const hostname = this.hostname
+    const envFile = this.envFile
+
+    const { publicKeyName } = keynames(envFile)
+    const publicKey = readEnvKey(publicKeyName, envFile, { strict: true })
+    const url = `${hostname}/go/arm_${publicKey}`
+
+    return {
+      url,
+      publicKeyName,
+      publicKeyValue: publicKey
+    }
+  }
+}
+
+module.exports = ArmorOpen