@dotenvx/dotenvx 2.2.1 → 2.2.2

package/CHANGELOG.md

@@ -2,7 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
-[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.2.1...main)
+[Unreleased](https://github.com/dotenvx/dotenvx/compare/v2.2.2...main)
+
+## [2.2.2](https://github.com/dotenvx/dotenvx/compare/v2.2.1...v2.2.2) (2026-07-08)
+
+### Changed
+
+* Move `login` and `logout` under armor ([#874](https://github.com/dotenvx/dotenvx/pull/874))
 
 ## [2.2.1](https://github.com/dotenvx/dotenvx/compare/v2.2.0...v2.2.1) (2026-07-08)
 

package/README.md

@@ -2382,7 +2382,7 @@ Move private keys into [Dotenvx Armor ⛨](https://dotenvx.com/armor) for off-de
 Move a private key from `.env.keys` into Dotenvx Armor.
 
 ```sh
-$ dotenvx login
+$ dotenvx armor login
 $ dotenvx armor up
 ```
 
@@ -2434,6 +2434,24 @@ Move an armored key to another team.
 $ dotenvx armor move --team acme
 ```
 
+</details>
+<details><summary>`armor login`</summary><br>
+
+Log in to Dotenvx Armor.
+
+```sh
+$ dotenvx armor login
+```
+
+</details>
+<details><summary>`armor logout`</summary><br>
+
+Log out of Dotenvx Armor.
+
+```sh
+$ dotenvx armor logout
+```
+
 </details>
 <details><summary>`help`</summary><br>
 
@@ -2470,9 +2488,8 @@ Commands:
                      prevent including .env files in docker
  
 Professional Security: 
-  login                    log in to move keys off-device, share with your team, and audit access
-  logout                   log out of connected security features
-  armor                    ⛨ move private keys off-device [www.dotenvx.com/armor]
+  keychain                 ⌥ move private keys into macOS Keychain
+  armor                    ⛨ move private keys into Dotenvx Armor [www.dotenvx.com/armor]
 ```
 
 You can get more detailed help per command with `dotenvx help COMMAND`.
@@ -2520,24 +2537,6 @@ X.X.X
 
 </details>
 
-### Utilities
-
-Additional workflow helpers.
-
-<details><summary>`ext scan`</summary><br>
-
-Scan for leaked secrets.
-
-```sh
-$ dotenvx ext scan
-100 commits scanned.
-no leaks found
-```
-
-Uses [gitleaks](https://gitleaks.io) under the hood.
-
-</details>
-
 ### Library 📦
 
 Use dotenvx directly in code.
@@ -2888,18 +2887,6 @@ This is known as *Decryption at Access* and is written about in [the whitepaper]
 
 &nbsp;
 
-## Whitepaper
-
-> **Dotenvx: Reducing Secrets Risk with Cryptographic Separation**
->
-> Abstract. An ideal secrets solution would not only centralize secrets but also contain the fallout of a breach. While secrets managers offer centralized storage and distribution, their design creates a large blast radius, risking exposure of thousands or even millions of secrets. We propose a solution that reduces the blast radius by splitting secrets management into two distinct components: an encrypted secrets file and a separate decryption key.
->
-> ...
->
-> [Read the whitepaper](https://dotenvx.com/dotenvx.pdf)
-
-&nbsp;
-
 ## Guides
 
 > Go deeper with `dotenvx` – detailed framework and platform guides.
@@ -2931,6 +2918,9 @@ This is known as *Decryption at Access* and is written about in [the whitepaper]
   * [Render](https://dotenvx.com/docs/platforms/render)
 * [CI/CDs](https://dotenvx.com/docs#cis)
   * [GitHub Actions](https://dotenvx.com/docs/cis/github-actions)
+* [Password Managers](https://dotenvx.com/docs#password-managers)
+  * [1Password](https://dotenvx.com/docs/guides/1password)
+  * [Bitwarden](https://dotenvx.com/docs/guides/bitwarden)
 * [Background Jobs](https://dotenvx.com/docs#background-jobs)
   * [Trigger.dev](https://dotenvx.com/docs/background-jobs/triggerdotdev)
 * [Package Managers](https://dotenvx.com/docs#package-managers)

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.2.1",
+  "version": "2.2.2",
   "name": "@dotenvx/dotenvx",
   "description": "a secure dotenv–from the creator of `dotenv`",
   "author": "@motdotla",
@@ -36,7 +36,7 @@
     "standard": "standard",
     "standard:fix": "standard --fix",
     "test": "tap run --test-env=DOTENVX_NO_ARMOR=true --allow-empty-coverage --disable-coverage --timeout=60000",
-    "testshell": "bash shellspec",
+    "testshell": "shellspec --shell /bin/bash",
     "release:check": "npm test && npm run testshell",
     "prerelease": "npm run release:check",
     "release": "npm run release:check && standard-version"

package/src/cli/commands/armor.js

@@ -66,6 +66,24 @@ function configureArmorCommand (armor) {
     .option('--token <token>', 'set token')
     .action(moveAction)
 
+  // dotenvx armor login
+  const loginAction = require('./../actions/login')
+  armor
+    .command('login')
+    .description('log in to Dotenvx Armor')
+    .allowUnknownOption()
+    .option('--hostname <hostname>', 'set Armor ⛨ hostname')
+    .action(loginAction)
+
+  // dotenvx armor logout
+  const logoutAction = require('./../actions/logout')
+  armor
+    .command('logout')
+    .description('log out of Dotenvx Armor')
+    .allowUnknownOption()
+    .option('--hostname <hostname>', 'set Armor ⛨ hostname')
+    .action(logoutAction)
+
   return armor
 }
 

package/src/cli/dotenvx.js

@@ -231,7 +231,7 @@ program.command('doctor', { hidden: true })
     return require('./actions/doctor').apply(this, args)
   })
 
-// dotenvx login
+// dotenvx login (compatibility alias for dotenvx armor login)
 program.command('login', { hidden: true })
   .description('log in to move keys off-device, share with your team, and audit access')
   .allowUnknownOption()
@@ -240,7 +240,7 @@ program.command('login', { hidden: true })
     return require('./actions/login').apply(this, args)
   })
 
-// dotenvx logout
+// dotenvx logout (compatibility alias for dotenvx armor logout)
 program.command('logout', { hidden: true })
   .description('log out of connected security features')
   .allowUnknownOption()
@@ -268,8 +268,6 @@ program.command('help [command]')
 // dotenvx armor
 program.addHelpText('after', ' ')
 program.addHelpText('after', 'Professional Security: ')
-program.addHelpText('after', '  login                    log in to move keys off-device, share with your team, and audit access')
-program.addHelpText('after', '  logout                   log out of connected security features')
 program.addHelpText('after', '  keychain                 ⌥ move private keys into macOS Keychain')
 program.addHelpText('after', '  armor                    ⛨ move private keys into Dotenvx Armor [www.dotenvx.com/armor]')
 

package/src/db/session.js

@@ -226,19 +226,19 @@ class Session {
   //
   login (hostname, id, username, accessToken) {
     if (!hostname) {
-      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx armor login]')
     }
 
     if (!id) {
-      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx armor login]')
     }
 
     if (!username) {
-      throw new Error('DOTENVX_ARMOR_USERNAME not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_USERNAME not set. Run [dotenvx armor login]')
     }
 
     if (!accessToken) {
-      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx armor login]')
     }
 
     const store = this.createStore()
@@ -252,15 +252,15 @@ class Session {
 
   logout (hostname, id, accessToken) {
     if (!hostname) {
-      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_HOSTNAME not set. Run [dotenvx armor login]')
     }
 
     if (!id) {
-      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_USER not set. Run [dotenvx armor login]')
     }
 
     if (!accessToken) {
-      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx login]')
+      throw new Error('DOTENVX_ARMOR_TOKEN not set. Run [dotenvx armor login]')
     }
 
     const store = this.openStore()