@barekey/cli 0.5.8 → 0.6.0

package/dist/output/theme.js

@@ -0,0 +1,149 @@
+import pc from "picocolors";
+const MINECRAFT_HEX = {
+    "1": "#0000AA",
+    "6": "#FFAA00",
+    "7": "#AAAAAA",
+    "8": "#555555",
+    "a": "#55FF55",
+    "b": "#55FFFF",
+    "c": "#FF5555",
+    "e": "#FFFF55",
+};
+/**
+ * Returns whether styled terminal output should be emitted.
+ *
+ * @returns `true` when stdout is interactive and color has not been disabled.
+ * @remarks This keeps human output colorful while preserving clean automation output in dumb/no-color terminals.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function supportsCliColor() {
+    if (!process.stdout.isTTY) {
+        return false;
+    }
+    if ((process.env.NO_COLOR ?? "").trim().length > 0) {
+        return false;
+    }
+    return (process.env.TERM ?? "").toLowerCase() !== "dumb";
+}
+function hexToRgb(hex) {
+    const normalized = hex.replace(/^#/, "");
+    return {
+        red: Number.parseInt(normalized.slice(0, 2), 16),
+        green: Number.parseInt(normalized.slice(2, 4), 16),
+        blue: Number.parseInt(normalized.slice(4, 6), 16),
+    };
+}
+/**
+ * Applies one Minecraft-style truecolor swatch to a string.
+ *
+ * @param code The legacy Minecraft color code to emulate.
+ * @param value The text to colorize.
+ * @returns The styled string, or the original text when colors are disabled.
+ * @remarks This uses truecolor ANSI so the palette stays stable across modern terminals.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function mc(code, value) {
+    if (!supportsCliColor()) {
+        return value;
+    }
+    const { red, green, blue } = hexToRgb(MINECRAFT_HEX[code]);
+    return `\u001b[38;2;${red};${green};${blue}m${value}\u001b[39m`;
+}
+/**
+ * Styles one primary CLI label.
+ *
+ * @param value The label text.
+ * @returns The highlighted label.
+ * @remarks Gold is used as the main CLI accent color.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function accent(value) {
+    return mc("6", value);
+}
+/**
+ * Styles one positive/success string.
+ *
+ * @param value The text to colorize.
+ * @returns The success-colored string.
+ * @remarks Green is used for successful actions and positive counts.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function success(value) {
+    return mc("a", value);
+}
+/**
+ * Styles one informational string.
+ *
+ * @param value The text to colorize.
+ * @returns The info-colored string.
+ * @remarks Aqua is used for list metadata and secondary highlights.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function info(value) {
+    return mc("b", value);
+}
+/**
+ * Styles one warning string.
+ *
+ * @param value The text to colorize.
+ * @returns The warning-colored string.
+ * @remarks Bright yellow is used for cautionary or count summary output.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function warning(value) {
+    return mc("e", value);
+}
+/**
+ * Styles one muted metadata string.
+ *
+ * @param value The text to colorize.
+ * @returns The muted string.
+ * @remarks Gray is used for low-emphasis metadata like slugs and file paths.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function muted(value) {
+    return mc("7", value);
+}
+/**
+ * Styles one subtle low-contrast string.
+ *
+ * @param value The text to colorize.
+ * @returns The subtle string.
+ * @remarks Dark gray is used for separators, labels, and empty-state output.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function subtle(value) {
+    return mc("8", value);
+}
+/**
+ * Styles one failure/error string.
+ *
+ * @param value The text to colorize.
+ * @returns The danger-colored string.
+ * @remarks Red is reserved for errors and destructive outcomes.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function danger(value) {
+    return mc("c", value);
+}
+/**
+ * Styles one prominent value with bold emphasis.
+ *
+ * @param value The text to emphasize.
+ * @returns The bold string.
+ * @remarks This intentionally leaves color choice to the caller.
+ * @lastModified 2026-03-19
+ * @author GPT-5.4
+ */
+export function strong(value) {
+    return pc.bold(value);
+}

package/dist/runtime-config.d.ts

@@ -4,6 +4,7 @@ export type BarekeyRuntimeConfig = {
     environment?: string;
     config?: {
         typegen?: "semantic" | "minimal";
+        strictGeneratedKeys?: boolean;
         mode?: "centralized" | "standalone";
     };
 };

package/dist/runtime-config.js

@@ -39,6 +39,7 @@ export async function loadRuntimeConfig() {
     const config = decoded.right.config;
     const mode = config?.mode ?? "centralized";
     const typegen = mode === "standalone" ? "minimal" : (config?.typegen ?? decoded.right.typegen ?? "semantic");
+    const strictGeneratedKeys = config?.strictGeneratedKeys ?? false;
     return {
         path: configPath,
         config: {
@@ -48,6 +49,7 @@ export async function loadRuntimeConfig() {
             config: {
                 mode,
                 typegen,
+                strictGeneratedKeys,
             },
         },
     };

package/dist/typegen/core.d.ts

@@ -1,6 +1,7 @@
 import { type TypegenManifest } from "../contracts/index.js";
 export type CliTypegenMode = "semantic" | "minimal";
 export type CliRuntimeMode = "centralized" | "standalone";
+export type CliStrictGeneratedKeys = boolean;
 export type CliTypegenResult = {
     written: boolean;
     path: string;
@@ -14,6 +15,7 @@ type TypegenIdentity = {
     projectSlug: string;
     stageSlug: string;
     typegenMode: CliTypegenMode;
+    strictGeneratedKeys: CliStrictGeneratedKeys;
     runtimeMode: CliRuntimeMode;
     localEnvRoot: string | null;
 };
@@ -27,7 +29,7 @@ type TypegenIdentity = {
  * @lastModified 2026-03-19
  * @author GPT-5.4
  */
-export declare function renderGeneratedTypesForManifest(manifest: TypegenManifest, mode: CliTypegenMode): {
+export declare function renderGeneratedTypesForManifest(manifest: TypegenManifest, mode: CliTypegenMode, strictGeneratedKeys?: boolean): {
     serverContents: string;
     publicContents: string;
 };

package/dist/typegen/core.js

@@ -12,6 +12,7 @@ const TypegenMetadataSchema = Schema.Struct({
     projectSlug: Schema.NullOr(Schema.String),
     stageSlug: Schema.NullOr(Schema.String),
     typegenMode: Schema.NullOr(Schema.Literal("semantic", "minimal")),
+    strictGeneratedKeys: Schema.Boolean,
     runtimeMode: Schema.NullOr(Schema.Literal("centralized", "standalone")),
     localEnvRoot: Schema.NullOr(Schema.String),
 });
@@ -50,7 +51,7 @@ function buildGeneratedTypesContents(manifest, input) {
     const importLine = input.mode === "semantic"
         ? `import type { EaseInOut, Env, Linear, Step } from "${input.typeModulePath}";\n\n`
         : "";
-    return `/* eslint-disable */\n/* This file is generated by barekey typegen. */\n/* barekey-manifest-version: ${manifest.manifestVersion} */\n\n${importLine}declare module "${input.declaredModulePath}" {\n  interface ${input.interfaceName} {\n${mapLines.length > 0 ? mapLines : ""}\n  }\n}\n\nexport {};\n`;
+    return `/* eslint-disable */\n/* This file is generated by barekey typegen. */\n/* barekey-manifest-version: ${manifest.manifestVersion} */\n\n${importLine}declare module "${input.declaredModulePath}" {\n  interface ${input.interfaceName} {\n${mapLines.length > 0 ? mapLines : ""}\n  }\n\n  interface ${input.configInterfaceName} {\n    allowUnknownKeys: ${input.strictGeneratedKeys ? "false" : "true"};\n  }\n}\n\nexport {};\n`;
 }
 function readManifestVersion(contents) {
     return contents?.match(MANIFEST_VERSION_PATTERN)?.[1]?.trim() ?? null;
@@ -132,6 +133,7 @@ function buildTypegenMetadataContents(lastGeneratedAt, identity) {
         projectSlug: identity.projectSlug,
         stageSlug: identity.stageSlug,
         typegenMode: identity.typegenMode,
+        strictGeneratedKeys: identity.strictGeneratedKeys,
         runtimeMode: identity.runtimeMode,
         localEnvRoot: identity.localEnvRoot,
     }, null, 2)}\n`;
@@ -146,21 +148,25 @@ function buildTypegenMetadataContents(lastGeneratedAt, identity) {
  * @lastModified 2026-03-19
  * @author GPT-5.4
  */
-export function renderGeneratedTypesForManifest(manifest, mode) {
+export function renderGeneratedTypesForManifest(manifest, mode, strictGeneratedKeys = false) {
     const decodedManifest = Schema.decodeUnknownSync(TypegenManifestSchema)(manifest);
     return {
         serverContents: buildGeneratedTypesContents(decodedManifest, {
             mode,
+            strictGeneratedKeys,
             typeModulePath: "./dist/types.js",
             declaredModulePath: "./dist/types.js",
             interfaceName: "BarekeyGeneratedTypeMap",
+            configInterfaceName: "BarekeyGeneratedTypeConfig",
             include: () => true,
         }),
         publicContents: buildGeneratedTypesContents(decodedManifest, {
             mode,
+            strictGeneratedKeys,
             typeModulePath: "./dist/public-types.js",
             declaredModulePath: "./dist/public-types.js",
             interfaceName: "BarekeyPublicGeneratedTypeMap",
+            configInterfaceName: "BarekeyPublicGeneratedTypeConfig",
             include: (row) => row.visibility === "public",
         }),
     };
@@ -190,7 +196,7 @@ export async function writeInstalledSdkGeneratedTypes(manifest, identity) {
         readTextFile(target.serverGeneratedTypesPath),
         readTextFile(target.publicGeneratedTypesPath),
     ]);
-    const rendered = renderGeneratedTypesForManifest(manifest, identity.typegenMode);
+    const rendered = renderGeneratedTypesForManifest(manifest, identity.typegenMode, identity.strictGeneratedKeys);
     if (existingServerContents === rendered.serverContents &&
         existingPublicContents === rendered.publicContents &&
         readManifestVersion(existingServerContents) === manifest.manifestVersion &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@barekey/cli",
-  "version": "0.5.8",
+  "version": "0.6.0",
   "description": "Barekey command line interface",
   "type": "module",
   "bin": {

package/src/commands/audit.ts

@@ -4,6 +4,7 @@ import { createCliAuthProvider } from "../auth-provider.js";
 import { requireLocalSession, toJsonOutput, type EnvTargetOptions } from "../command-utils.js";
 import { AuditListResponseSchema } from "../contracts/index.js";
 import { postJson } from "../http.js";
+import { info, muted, subtle, strong } from "../output/theme.js";
 import { promptForOrganizationSlug } from "./target-prompts.js";
 
 async function runAuditList(
@@ -36,12 +37,14 @@ async function runAuditList(
   }
 
   if (response.items.length === 0) {
-    console.log("No audit events found.");
+    console.log(subtle("No audit events found."));
     return;
   }
 
   for (const item of response.items) {
-    console.log(`${new Date(item.occurredAtMs).toISOString()} ${item.category} ${item.title}`);
+    console.log(
+      `${muted(new Date(item.occurredAtMs).toISOString())} ${info(item.category)} ${strong(item.title)}`,
+    );
   }
 }
 

package/src/commands/auth.ts

@@ -22,6 +22,7 @@ import {
 } from "../contracts/index.js";
 import { getJson, postJson } from "../http.js";
 import { formatWhoamiWithAvatar } from "../output/avatar.js";
+import { accent, muted, strong, success } from "../output/theme.js";
 import { requireLocalSession, resolveBaseUrl, toJsonOutput } from "../command-utils.js";
 
 function resolveClientName(): string | undefined {
@@ -88,8 +89,8 @@ async function runLogin(options: { baseUrl?: string }): Promise<void> {
 
     loading.stop("Authorization initialized");
     loadingActive = false;
-    console.log(`${pc.bold("Open")}: ${verificationUri}`);
-    console.log(`${pc.bold("Code")}: ${started.userCode}`);
+    console.log(`${accent("Open")} ${muted(verificationUri)}`);
+    console.log(`${accent("Code")} ${strong(started.userCode)}`);
 
     try {
       await open(verificationUri);
@@ -149,7 +150,7 @@ async function runLogin(options: { baseUrl?: string }): Promise<void> {
 
       pollSpinner.stop("Login approved");
       pollActive = false;
-      outro(`Signed in as ${pc.bold(resolveDisplayName(refreshed))}.`);
+      outro(`${success("Signed in as")} ${pc.bold(resolveDisplayName(refreshed))}.`);
       return;
     }
 
@@ -178,7 +179,7 @@ async function runLogout(): Promise<void> {
   });
   await deleteCredentials(local.accountId);
   await clearConfig();
-  console.log("Logged out.");
+  console.log(success("Logged out."));
 }
 
 async function runWhoami(options: { json?: boolean }): Promise<void> {

package/src/commands/billing.ts

@@ -4,6 +4,7 @@ import { createCliAuthProvider } from "../auth-provider.js";
 import { requireLocalSession, toJsonOutput, type EnvTargetOptions } from "../command-utils.js";
 import { BillingCatalogResponseSchema, BillingStatusResponseSchema } from "../contracts/index.js";
 import { getJson, postJson } from "../http.js";
+import { accent, info, muted, strong, subtle, warning } from "../output/theme.js";
 import { promptForOrganizationSlug } from "./target-prompts.js";
 
 async function runBillingCatalog(options: { json?: boolean }) {
@@ -19,8 +20,10 @@ async function runBillingCatalog(options: { json?: boolean }) {
     return;
   }
 
-  console.log(`Plans: ${response.variants.length}`);
-  console.log(`Metered features: ${Object.values(response.featureIds).join(", ")}`);
+  console.log(`${subtle("Plans")} ${strong(String(response.variants.length))}`);
+  console.log(
+    `${subtle("Metered features")} ${info(Object.values(response.featureIds).join(", "))}`,
+  );
 }
 
 async function runBillingStatus(options: EnvTargetOptions & { json?: boolean }) {
@@ -43,9 +46,11 @@ async function runBillingStatus(options: EnvTargetOptions & { json?: boolean })
     return;
   }
 
-  console.log(`Tier: ${response.currentTier ?? "none"}`);
-  console.log(`Product: ${response.currentProductId ?? "none"}`);
-  console.log(`Can manage billing: ${response.canManageBilling ? "yes" : "no"}`);
+  console.log(`${subtle("Tier")} ${warning(response.currentTier ?? "none")}`);
+  console.log(`${subtle("Product")} ${muted(response.currentProductId ?? "none")}`);
+  console.log(
+    `${subtle("Can manage billing")} ${response.canManageBilling ? accent("yes") : muted("no")}`,
+  );
 }
 
 export function registerBillingCommands(program: Command): void {

package/src/commands/env.ts

@@ -29,6 +29,7 @@ import {
   type CliRolloutFunction,
   type CliVisibility,
 } from "./env-helpers.js";
+import { accent, info, muted, strong, subtle, success, warning } from "../output/theme.js";
 
 type EnvWriteOptions = EnvTargetOptions & {
   ab?: string;
@@ -158,7 +159,7 @@ async function runEnvGet(
     return;
   }
 
-  console.log(renderScalar(value.value));
+  console.log(`${accent(resolvedName)} ${subtle("=")} ${strong(renderScalar(value.value))}`);
 }
 
 async function runEnvGetMany(
@@ -201,7 +202,7 @@ async function runEnvGetMany(
   }
 
   for (const value of [...response.values].sort((left, right) => left.name.localeCompare(right.name))) {
-    console.log(`${value.name}=${renderScalar(value.value)}`);
+    console.log(`${accent(value.name)}${subtle("=")}${strong(renderScalar(value.value))}`);
   }
 }
 
@@ -225,7 +226,7 @@ async function runEnvList(options: EnvTargetOptions & { json?: boolean }): Promi
   }
 
   if (response.variables.length === 0) {
-    console.log("No variables found.");
+    console.log(subtle("No variables found."));
     return;
   }
 
@@ -235,8 +236,10 @@ async function runEnvList(options: EnvTargetOptions & { json?: boolean }): Promi
       row.kind === "rollout"
         ? ` ${row.rolloutFunction ?? "linear"}(${row.rolloutMilestones?.length ?? 0} milestones)`
         : "";
+    const formattedChanceSuffix = chanceSuffix.length > 0 ? muted(chanceSuffix) : "";
+    const formattedRolloutSuffix = rolloutSuffix.length > 0 ? muted(rolloutSuffix) : "";
     console.log(
-      `${row.name}  ${row.visibility}  ${row.kind}  ${row.declaredType}${chanceSuffix}${rolloutSuffix}`,
+      `${strong(row.name)}  ${muted(row.visibility)}  ${info(row.kind)}  ${accent(row.declaredType)}${formattedChanceSuffix}${formattedRolloutSuffix}`,
     );
   }
 }
@@ -320,7 +323,7 @@ async function runEnvWrite(
   }
 
   console.log(
-    `Created: ${result.createdCount}, Updated: ${result.updatedCount}, Deleted: ${result.deletedCount}`,
+    `${success("Created")} ${strong(String(result.createdCount))} ${subtle("•")} ${warning("Updated")} ${strong(String(result.updatedCount))} ${subtle("•")} ${muted("Deleted")} ${strong(String(result.deletedCount))}`,
   );
 }
 
@@ -390,7 +393,7 @@ async function runEnvDelete(
     return;
   }
 
-  console.log(`Deleted: ${result.deletedCount}`);
+  console.log(`${success("Deleted")} ${strong(String(result.deletedCount))}`);
 }
 
 async function runEnvPull(
@@ -426,12 +429,12 @@ async function runEnvPull(
 
   if (options.out) {
     await writeFile(options.out, output, "utf8");
-    console.log(`Wrote ${options.out}`);
+    console.log(`${success("Wrote")} ${muted(options.out)}`);
     return;
   }
 
   if (options.redact && !process.stdout.isTTY) {
-    console.log(`Pulled ${response.values.length} variables.`);
+    console.log(`${success("Pulled")} ${strong(String(response.values.length))} ${muted("variables.")}`);
     return;
   }
 

package/src/commands/init.ts

@@ -9,6 +9,7 @@ import {
   promptForProjectSlug,
   promptForStageSlug,
 } from "./target-prompts.js";
+import { muted, success } from "../output/theme.js";
 
 async function runInit(options: EnvTargetOptions & { path?: string }) {
   const orgSlug = await promptForOrganizationSlug(options.org);
@@ -20,17 +21,18 @@ async function runInit(options: EnvTargetOptions & { path?: string }) {
       organization: orgSlug,
       project: projectSlug,
       environment: stageSlug,
-      config: {
-        mode: "centralized",
-        typegen: "semantic",
-      },
+        config: {
+          mode: "centralized",
+          typegen: "semantic",
+          strictGeneratedKeys: false,
+        },
     },
     null,
     2,
   )}\n`;
 
   await writeFile(configPath, contents, "utf8");
-  console.log(`Wrote ${configPath}`);
+  console.log(`${success("Wrote")} ${muted(configPath)}`);
 }
 
 export function registerInitCommand(program: Command): void {

package/src/commands/org.ts

@@ -5,6 +5,7 @@ import { createCliAuthProvider } from "../auth-provider.js";
 import { requireLocalSession, toJsonOutput } from "../command-utils.js";
 import { OrganizationsResponseSchema } from "../contracts/index.js";
 import { getJson, postJson } from "../http.js";
+import { accent, info, muted, strong, subtle, success } from "../output/theme.js";
 
 async function promptForName(name: string | undefined): Promise<string> {
   const existing = name?.trim();
@@ -42,12 +43,14 @@ async function runOrgList(options: { json?: boolean }) {
   }
 
   if (response.organizations.length === 0) {
-    console.log("No organizations found.");
+    console.log(subtle("No organizations found."));
     return;
   }
 
   for (const organization of response.organizations) {
-    console.log(`${organization.name} (${organization.slug}) ${organization.role}`);
+    console.log(
+      `${strong(organization.name)} ${muted(`(${organization.slug})`)} ${info(organization.role)}`,
+    );
   }
 }
 
@@ -78,7 +81,9 @@ async function runOrgCreate(
   }
 
   const organization = (response as { organization: { name: string; slug: string } }).organization;
-  console.log(`Created organization ${organization.name} (${organization.slug}).`);
+  console.log(
+    `${success("Created")} ${accent("organization")} ${strong(organization.name)} ${muted(`(${organization.slug})`)}`,
+  );
 }
 
 export function registerOrgCommands(program: Command): void {

package/src/commands/project.ts

@@ -9,6 +9,7 @@ import {
   promptForOrganizationSlug,
   promptForProjectSlug,
 } from "./target-prompts.js";
+import { accent, info, muted, strong, subtle, success } from "../output/theme.js";
 
 async function promptForProjectName(name: string | undefined): Promise<string> {
   const existing = name?.trim();
@@ -39,12 +40,14 @@ async function runProjectList(options: EnvTargetOptions & { json?: boolean }) {
   }
 
   if (projects.length === 0) {
-    console.log("No projects found.");
+    console.log(subtle("No projects found."));
     return;
   }
 
   for (const project of projects) {
-    console.log(`${project.name} (${project.slug}) secrets=${project.secretCount}`);
+    console.log(
+      `${strong(project.name)} ${muted(`(${project.slug})`)} ${info(`secrets=${project.secretCount}`)}`,
+    );
   }
 }
 
@@ -61,7 +64,9 @@ async function runProjectCreate(
     return;
   }
 
-  console.log(`Created project ${project.name} (${project.slug}).`);
+  console.log(
+    `${success("Created")} ${accent("project")} ${strong(project.name)} ${muted(`(${project.slug})`)}`,
+  );
 }
 
 export function registerProjectCommands(program: Command): void {
@@ -124,7 +129,9 @@ export function registerProjectCommands(program: Command): void {
           return;
         }
 
-        console.log(`Deleted project ${response.deletedProjectSlug}.`);
+        console.log(
+          `${success("Deleted")} ${accent("project")} ${muted(response.deletedProjectSlug)}`,
+        );
       },
     );
 }

package/src/commands/stage.ts

@@ -11,6 +11,7 @@ import {
   promptForStageSlug,
   renameStageForProject,
 } from "./target-prompts.js";
+import { accent, info, muted, strong, subtle, success, warning } from "../output/theme.js";
 
 async function promptForStageName(name: string | undefined): Promise<string> {
   const existing = name?.trim();
@@ -42,12 +43,14 @@ async function runStageList(options: EnvTargetOptions & { json?: boolean }) {
   }
 
   if (stages.length === 0) {
-    console.log("No stages found.");
+    console.log(subtle("No stages found."));
     return;
   }
 
   for (const stage of stages) {
-    console.log(`${stage.name} (${stage.slug}) variables=${stage.variableCount}`);
+    console.log(
+      `${strong(stage.name)} ${muted(`(${stage.slug})`)} ${info(`variables=${stage.variableCount}`)}`,
+    );
   }
 }
 
@@ -65,7 +68,9 @@ async function runStageCreate(
     return;
   }
 
-  console.log(`Created stage ${stage.name} (${stage.slug}).`);
+  console.log(
+    `${success("Created")} ${accent("stage")} ${strong(stage.name)} ${muted(`(${stage.slug})`)}`,
+  );
 }
 
 export function registerStageCommands(program: Command): void {
@@ -117,7 +122,9 @@ export function registerStageCommands(program: Command): void {
           return;
         }
 
-        console.log(`Renamed stage ${stage.slug} to ${stage.name}.`);
+        console.log(
+          `${warning("Renamed")} ${accent("stage")} ${muted(stage.slug)} ${subtle("→")} ${strong(stage.name)}`,
+        );
       },
     );
 
@@ -161,7 +168,7 @@ export function registerStageCommands(program: Command): void {
           return;
         }
 
-        console.log(`Deleted stage ${response.deletedStageSlug}.`);
+        console.log(`${success("Deleted")} ${accent("stage")} ${muted(response.deletedStageSlug)}`);
       },
     );
 }