Advanced

CLI

• run - Variable Expansion
• run - Default Values
• run - Alternate Values
• run - Interpolation Syntax Summary
• run - Command Substitution
• run - Shell Expansion
• run - Multiline
• run - Contextual Help
• run -f
• run -f directory
• run --env HELLO=String
• run --redact
• run --redact -- claude -p
• run --redact -- claude
• run --redact -- codex exec
• run --redact -- codex
• run --mask
• run --overload
• run --ignore
• run - Environment Variable Precedence
• DOTENV_PRIVATE_KEY=key run
• DOTENV_PRIVATE_KEY_PRODUCTION=key run
• DOTENV_PRIVATE_KEY_CI=key run
• Combine Multiple Private Keys
• run --verbose
• run --debug
• run --quiet
• run --log-level
• run --validate
• run --strict
• run --convention=nextjs
• run -f directory --convention=nextjs
• run --convention=flow
• DOTENV_ENV=production run --convention=flow
• run -fk
• run --no-native
• run --no-armor
• get KEY
• get KEY --mask
• get KEY -f
• get KEY -f directory
• get KEY --env
• get KEY --overload
• get KEY --strict
• get KEY --ignore
• get KEY --no-native
• get KEY --no-armor
• get KEY --convention=nextjs
• get KEY -f directory --convention=nextjs
• get KEY --convention=flow
• get (json)
• get -ik
• get -ek
• get --format shell
• get --format eval
• get --format eval-export
• get --all
• get --all --pretty-print
• set KEY value
• set KEY value -f
• set KEY "value with spaces"
• set KEY -- "- + * ÷"
• set KEY value --plain
• set KEY_PLAIN value
• set KEY value --no-native
• set KEY value --no-armor
• del KEY
• del KEY -f
• encrypt
• encrypt -f
• encrypt -fk
• encrypt -k
• encrypt -ek
• encrypt KEY_PLAIN
• encrypt --stdout
• encrypt --no-native
• encrypt --no-armor
• decrypt
• decrypt -f
• decrypt -fk
• decrypt -k
• decrypt -ek
• decrypt --stdout
• decrypt --stdout --mask
• decrypt --no-native
• decrypt --no-armor
• keypair
• keypair -f
• keypair -fk
• keypair DOTENV_PRIVATE_KEY
• keypair --format shell
• keypair --no-native
• keypair --no-armor

Utility Commands

• ls
• gitignore
• gitignore --pattern
• genexample
• genexample -f
• genexample directory
• validate
• validate --ignore
• precommit
• precommit --install
• precommit directory
• prebuild
• prebuild directory
• lock
• lock up
• lock down
• native
• native up
• native down
• native push
• native pull
• armor
• armor up
• armor down
• armor push
• armor pull
• armor move
• armor login
• armor logout
• armor status
• armor settings
• help
• --version

Extensions

• ext scan

Library

• config()
• config(path: ['.env.local', '.env'])
• config(overload: true)
• config(mask: true)
• config(quiet: true)
• config(strict: true)
• config(ignore: ['.env.missing', '.env'])
• config(envKeysFile: '../../.env.keys')
• config(convention: 'nextjs')
• config(path: directory, convention: 'nextjs')
• config(noArmor: true)
• config(no1Password: true)
• config(noBitwarden: true)
• parse(src)
• parse(src, {processEnv:})
• parse(src, {privateKey:})
• set(KEY, value)
• set(KEY, value, {plain: true})
• get(KEY)
• get(KEY, {mask: true})