@hiyve/cli 1.0.10 → 1.0.12

package/README.md

@@ -1,4 +1,4 @@
-# hiyve-cli
+# @hiyve/cli
 
 Command-line tool for configuring npm to use the private Hiyve SDK registry.
 
@@ -6,10 +6,10 @@ Command-line tool for configuring npm to use the private Hiyve SDK registry.
 
 ```bash
 # One command to authenticate and configure npm
-npx hiyve-cli login
+npx @hiyve/cli login
 ```
 
-After login, you can install Hiyve packages normally:
+After login, install Hiyve packages normally:
 
 ```bash
 npm install @hiyve/rtc-client
@@ -18,37 +18,56 @@ npm install @hiyve/react @hiyve/react-ui
 
 ## Commands
 
-### `hiyve login`
+### `login`
 
 Authenticate with Hiyve and configure npm for @hiyve packages.
 
 ```bash
 # Interactive mode (prompts for API key)
-npx hiyve-cli login
+npx @hiyve/cli login
 
-# With API key as argument
-npx hiyve-cli login --key sk_live_your_secret_key_here
+# Non-interactive (CI/CD)
+npx @hiyve/cli login --key sk_live_your_secret_key_here
 ```
 
-### `hiyve logout`
+### `logout`
 
 Remove Hiyve configuration from your ~/.npmrc file.
 
 ```bash
-npx hiyve-cli logout
+npx @hiyve/cli logout
 ```
 
-### `hiyve whoami`
+### `whoami`
 
 Show current authentication status.
 
 ```bash
-npx hiyve-cli whoami
+npx @hiyve/cli whoami
 ```
 
+### `list`
+
+List all available @hiyve packages.
+
+```bash
+npx @hiyve/cli list
+```
+
+### `init`
+
+Scaffold a new Hiyve project from a template.
+
+```bash
+npx @hiyve/cli init my-app
+npx @hiyve/cli init my-app --template ai
+```
+
+Templates: `basic`, `ai`, `full`
+
 ## Getting Your API Key
 
-1. Log in to the [Hiyve SDK Admin Portal](https://console.hiyve.dev)
+1. Log in to the [Hiyve Developer Console](https://api.hiyve.dev)
 2. Navigate to **API Keys** in the sidebar
 3. Copy your secret key (starts with `sk_test_` or `sk_live_`)
 
@@ -58,17 +77,30 @@ The `login` command:
 
 1. Validates your API key with the Hiyve registry
 2. Adds two lines to your `~/.npmrc` file:
-   - `@hiyve:registry=https://api.hiyve.dev/registry/`
-   - `//:_authToken=your_api_key`
+   ```
+   @hiyve:registry=https://api.hiyve.dev/registry/
+   //api.hiyve.dev/registry/:_authToken=sk_live_...
+   ```
 
 This tells npm to fetch `@hiyve/*` packages from the private Hiyve registry instead of the public npm registry.
 
+## CI/CD Setup
+
+For automated deployments, add registry credentials as environment variables in your CI/CD pipeline. Your project `.npmrc` should use variable expansion:
+
+```ini
+@hiyve:registry=https://api.hiyve.dev/registry/
+//api.hiyve.dev/registry/:_authToken=${HIYVE_API_KEY}
+```
+
+Set `HIYVE_API_KEY` in your CI environment (GitHub Actions secrets, AWS SSM, etc.). npm natively expands `${ENV_VAR}` in `.npmrc` files — no custom tooling needed.
+
 ## Troubleshooting
 
 ### "Invalid API key" error
 
 - Make sure your key starts with `sk_test_` or `sk_live_`
-- Verify your account is active in the admin portal
+- Verify your account is active in the developer console
 
 ### "Connection failed" error
 
@@ -80,7 +112,7 @@ This tells npm to fetch `@hiyve/*` packages from the private Hiyve registry inst
 After login, verify your configuration:
 
 ```bash
-npx hiyve-cli whoami
+npx @hiyve/cli whoami
 ```
 
 Or check your `~/.npmrc` manually:
@@ -92,8 +124,8 @@ cat ~/.npmrc | grep hiyve
 ## Security
 
 - Your API key is stored in `~/.npmrc` (standard npm token storage)
-- The API key is sent only to `api.hiyve.dev`
-- Run `hiyve logout` to remove your credentials
+- The key is sent only to the Hiyve registry during npm operations
+- Run `npx @hiyve/cli logout` to remove your credentials
 
 ## Support
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hiyve/cli",
-  "version": "1.0.10",
+  "version": "1.0.12",
   "description": "Hiyve SDK CLI - Configure npm for private @hiyve packages",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -217,8 +217,8 @@ export default defineConfig({
 }
 
 function generateEnvExample(template) {
-  let env = `# Hiyve API Key (from console.hiyve.dev)
-HIYVE_API_KEY=sk_live_your_secret_key_here
+  let env = `# Hiyve API Key (from api.hiyve.dev)
+HIYVE_API_KEY=pk_live_your_api_key_here
 
 # Room configuration
 HIYVE_SIGNALING_URL=https://signal.hiyve.dev

package/src/commands/login.js

@@ -28,11 +28,14 @@ export async function login(options) {
     const response = await prompts({
       type: 'password',
       name: 'apiKey',
-      message: 'Enter your Hiyve API key:',
+      message: 'Enter your Hiyve API key (pk_*):',
       validate: (value) => {
         if (!value) return 'API key is required';
-        if (!value.startsWith('sk_') && !value.startsWith('mk_')) {
-          return 'API key should start with sk_test_, sk_live_, or mk_';
+        if (!value.startsWith('pk_')) {
+          if (value.startsWith('sk_')) {
+            return 'Secret keys (sk_*) are no longer needed for registry login. Use your API key (pk_*) from console.hiyve.dev';
+          }
+          return 'Expected an API key starting with pk_test_ or pk_live_ (from console.hiyve.dev)';
         }
         if (value.length < 35) return 'API key appears to be too short';
         return true;
@@ -48,17 +51,26 @@ export async function login(options) {
     apiKey = response.apiKey;
   }
 
-  // Validate API key format (sk_test_*, sk_live_*, or legacy mk_*)
+  // Validate API key format
+  const isPublicKey = apiKey.match(/^pk_(test|live)_[a-fA-F0-9]+$/);
+
+  // Accept legacy sk_ and mk_ keys for backward compatibility (existing users)
   const isSecretKey = apiKey.match(/^sk_(test|live)_[a-fA-F0-9]+$/);
   const isManagementKey = apiKey.match(/^mk_[a-fA-F0-9]{32}$/);
 
-  if (!isSecretKey && !isManagementKey) {
+  if (!isPublicKey && !isSecretKey && !isManagementKey) {
     console.log('');
     console.log(chalk.red('✗ Invalid API key format'));
-    console.log(chalk.gray('  Expected: sk_test_* or sk_live_* (from console.hiyve.dev)'));
+    console.log(chalk.gray('  Expected: pk_test_* or pk_live_* (from console.hiyve.dev)'));
     process.exit(1);
   }
 
+  if (isSecretKey) {
+    console.log(chalk.yellow('  Note: Secret keys (sk_*) still work but are no longer required.'));
+    console.log(chalk.yellow('  You can use your API key (pk_*) instead for registry access.'));
+    console.log('');
+  }
+
   // Verify API key with registry
   const spinner = ora('Verifying API key...').start();
 

package/src/utils/npmrc.js

@@ -32,7 +32,8 @@ export async function configureNpmrc(registryUrl, apiKey) {
       !trimmed.includes('//api.hiyve.dev/') &&
       !trimmed.includes('//api.muziemedia.com/') &&
       !trimmed.includes(':_authToken=mk_') &&
-      !trimmed.includes(':_authToken=sk_')
+      !trimmed.includes(':_authToken=sk_') &&
+      !trimmed.includes(':_authToken=pk_')
     );
   });
 
@@ -68,7 +69,8 @@ export async function removeNpmrc() {
       !trimmed.includes('//api.hiyve.dev/') &&
       !trimmed.includes('//api.muziemedia.com/') &&
       !trimmed.includes(':_authToken=mk_') &&
-      !trimmed.includes(':_authToken=sk_')
+      !trimmed.includes(':_authToken=sk_') &&
+      !trimmed.includes(':_authToken=pk_')
     );
   });
 
@@ -92,18 +94,18 @@ export function getCurrentConfig() {
   // Find registry line
   const registryLine = lines.find((line) => line.trim().startsWith('@hiyve:registry'));
 
-  // Find token line (sk_* or legacy mk_*)
+  // Find token line (pk_*, sk_*, or legacy mk_*)
   const tokenLine = lines.find((line) => {
     const trimmed = line.trim();
-    return trimmed.includes(':_authToken=sk_') || trimmed.includes(':_authToken=mk_');
+    return trimmed.includes(':_authToken=pk_') || trimmed.includes(':_authToken=sk_') || trimmed.includes(':_authToken=mk_');
   });
 
   if (!registryLine || !tokenLine) {
     return null;
   }
 
-  // Extract API key (sk_* or legacy mk_*)
-  const tokenMatch = tokenLine.match(/:_authToken=((?:sk_|mk_)[a-zA-Z0-9_]+)/);
+  // Extract API key (pk_*, sk_*, or legacy mk_*)
+  const tokenMatch = tokenLine.match(/:_authToken=((?:pk_|sk_|mk_)[a-zA-Z0-9_]+)/);
   const apiKey = tokenMatch ? tokenMatch[1] : null;
 
   // Mask API key for display

package/src/utils/npmrc.test.js

@@ -32,6 +32,19 @@ describe('configureNpmrc', () => {
     expect(content).toContain(':_authToken=sk_live_abc123def456');
   });
 
+  it('creates .npmrc with pk_ key', async () => {
+    fs.existsSync.mockReturnValue(false);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'pk_live_abc123def456');
+
+    expect(fs.writeFileSync).toHaveBeenCalledOnce();
+    const [writePath, content] = fs.writeFileSync.mock.calls[0];
+    expect(writePath).toBe(NPMRC_PATH);
+    expect(content).toContain('@hiyve:registry=https://api.hiyve.dev/registry/');
+    expect(content).toContain(':_authToken=pk_live_abc123def456');
+  });
+
   it('replaces existing @hiyve lines when .npmrc already has them', async () => {
     const existingContent = [
       '@hiyve:registry=https://old-registry.example.com/',
@@ -54,6 +67,42 @@ describe('configureNpmrc', () => {
     expect(content).toContain(':_authToken=sk_live_newkey5678');
   });
 
+  it('replaces existing sk_ token with pk_ key', async () => {
+    const existingContent = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=sk_live_oldkey1234',
+      'other-config=value',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'pk_live_newkey5678');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('sk_live_oldkey1234');
+    expect(content).toContain(':_authToken=pk_live_newkey5678');
+  });
+
+  it('replaces existing pk_ token with new pk_ key', async () => {
+    const existingContent = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=pk_test_oldkey1234',
+      'other-config=value',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await configureNpmrc('https://api.hiyve.dev/registry/', 'pk_live_newkey5678');
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('pk_test_oldkey1234');
+    expect(content).toContain(':_authToken=pk_live_newkey5678');
+  });
+
   it('replaces legacy mk_ tokens', async () => {
     const existingContent = [
       '@hiyve:registry=https://console.hiyve.dev/api/registry/',
@@ -172,6 +221,47 @@ describe('removeNpmrc', () => {
     expect(content).not.toContain('sk_live_abc123def456');
   });
 
+  it('removes @hiyve lines with pk_ tokens', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=pk_live_abc123def456',
+      'other-config=true',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('@hiyve:registry');
+    expect(content).not.toContain('api.hiyve.dev');
+    expect(content).not.toContain('pk_live_abc123def456');
+    expect(content).toContain('other-config=true');
+  });
+
+  it('removes @hiyve lines with pk_ tokens (old registry)', async () => {
+    const existingContent = [
+      'registry=https://registry.npmjs.org/',
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=pk_test_abc123def456',
+      'other-config=true',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(existingContent);
+    fs.writeFileSync.mockImplementation(() => {});
+
+    await removeNpmrc();
+
+    const [, content] = fs.writeFileSync.mock.calls[0];
+    expect(content).not.toContain('@hiyve:registry');
+    expect(content).not.toContain('console.hiyve.dev');
+    expect(content).not.toContain('pk_test_abc123def456');
+  });
+
   it('removes @hiyve lines with legacy mk_ tokens', async () => {
     const existingContent = [
       'registry=https://registry.npmjs.org/',
@@ -243,6 +333,40 @@ describe('getCurrentConfig', () => {
     expect(getCurrentConfig()).toBeNull();
   });
 
+  it('returns config for pk_ keys (new registry)', () => {
+    const content = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      '//api.hiyve.dev/registry/:_authToken=pk_live_1a2b3c4d5e6f7890abcd',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result).toEqual({
+      apiKey: 'pk_live_1a2b3c4d5e6f7890abcd',
+      maskedApiKey: 'pk_live_...abcd',
+      registryUrl: 'https://api.hiyve.dev/registry/',
+    });
+  });
+
+  it('returns config for pk_ keys (old registry — backward compat)', () => {
+    const content = [
+      '@hiyve:registry=https://console.hiyve.dev/api/registry/',
+      '//console.hiyve.dev/api/registry/:_authToken=pk_test_1a2b3c4d5e6f7890abcd',
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result).toEqual({
+      apiKey: 'pk_test_1a2b3c4d5e6f7890abcd',
+      maskedApiKey: 'pk_test_...abcd',
+      registryUrl: 'https://console.hiyve.dev/api/registry/',
+    });
+  });
+
   it('returns config for sk_ keys (new registry)', () => {
     const content = [
       '@hiyve:registry=https://api.hiyve.dev/registry/',
@@ -294,7 +418,7 @@ describe('getCurrentConfig', () => {
     });
   });
 
-  it('maskedApiKey shows first 8 and last 4 chars', () => {
+  it('maskedApiKey shows first 8 and last 4 chars for sk_ keys', () => {
     const apiKey = 'sk_test_aabbccdd11223344eeff';
     const content = [
       '@hiyve:registry=https://api.hiyve.dev/registry/',
@@ -309,6 +433,21 @@ describe('getCurrentConfig', () => {
     expect(result.maskedApiKey).toBe('sk_test_...eeff');
   });
 
+  it('maskedApiKey shows first 8 and last 4 chars for pk_ keys', () => {
+    const apiKey = 'pk_live_aabbccdd11223344eeff';
+    const content = [
+      '@hiyve:registry=https://api.hiyve.dev/registry/',
+      `//api.hiyve.dev/registry/:_authToken=${apiKey}`,
+    ].join('\n');
+
+    fs.existsSync.mockReturnValue(true);
+    fs.readFileSync.mockReturnValue(content);
+
+    const result = getCurrentConfig();
+    expect(result.apiKey).toBe(apiKey);
+    expect(result.maskedApiKey).toBe('pk_live_...eeff');
+  });
+
   it('returns null when only registry line is present but no token', () => {
     const content = '@hiyve:registry=https://api.hiyve.dev/registry/\n';